Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Sep 25, 2024

Bumps @mantine/form from 7.3.2 to 7.13.0.

Release notes

Sourced from @​mantine/form's releases.

7.13.0 🎇

View changelog with demos on mantine.dev website

Container queries support in Grid

You can now use container queries in Grid component. With container queries, all responsive values are adjusted based on the container width, not the viewport width.

Example of using container queries. To see how the grid changes, resize the root element of the demo with the resize handle located at the bottom right corner of the demo:

import { Grid } from '@mantine/core';
function Demo() {
return (
// Wrapper div is added for demonstration purposes only,
// it is not required in real projects
<div style={{ resize: 'horizontal', overflow: 'hidden', maxWidth: '100%' }}>
<Grid
type="container"
breakpoints={{ xs: '100px', sm: '200px', md: '300px', lg: '400px', xl: '500px' }}
>
<Col span={{ base: 12, md: 6, lg: 3 }}>1</Col>
<Col span={{ base: 12, md: 6, lg: 3 }}>2</Col>
<Col span={{ base: 12, md: 6, lg: 3 }}>3</Col>
<Col span={{ base: 12, md: 6, lg: 3 }}>4</Col>
</Grid>
</div>
);
}

CompositeChart component

New CompositeChart component allows using Line, Area and Bar charts together in a single chart:

import { CompositeChart } from '@mantine/charts';
import { data } from './data';
function Demo() {
return (
<CompositeChart
h={300}
data={data}
dataKey="date"
unit="$"
maxBarWidth={30}
</tr></table>

... (truncated)

Commits
  • 8b18596 [release] Version: 7.13.0
  • e5f3a53 [core] Migrate to eslint 9
  • 133b7bf [release] Version: 7.12.2
  • e10e3bf [@​mantine/form] Fix error thrown for nullable values dirty status check (#6672)
  • b07422e [release] Version: 7.12.1
  • 8e252e6 [@​mantine/form] Fix form.watch callbacks not being fired when `form.initial...
  • 2ae72db [release] Version: 7.12.0
  • 73827b3 [@​mantine/form] Allow subsribing to form.isDirty in uncontrolled mode
  • c087030 [release] Version: 7.11.2
  • 2f91229 [release] Version: 7.11.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@mantine/form](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form) from 7.3.2 to 7.13.0.
- [Release notes](https://github.com/mantinedev/mantine/releases)
- [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mantinedev/mantine/commits/7.13.0/packages/@mantine/form)

---
updated-dependencies:
- dependency-name: "@mantine/form"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 25, 2024
@dryrunsecurity
Copy link

DryRun Security Summary

The pull request updates the version of the @mantine/form dependency in the package.json file from ^7.3.2 to ^7.13.0, which is a routine dependency update that does not raise immediate security concerns but requires thorough testing and review of the release notes to ensure the changes do not introduce vulnerabilities or unintended behavior.

Expand for full summary

Summary:

The changes made in this pull request involve updating the version of the @mantine/form dependency in the package.json file from ^7.3.2 to ^7.13.0. From an application security perspective, this change is not particularly concerning. Updating dependencies to their latest versions is generally a good practice, as it can provide security fixes, bug patches, and feature improvements.

However, it's always important to thoroughly test the application after any dependency update to ensure that the changes do not introduce any regressions or unintended behavior. Additionally, it's a good practice to review the release notes and change logs of any updated dependencies to understand the nature of the changes and any potential security implications.

Overall, this change appears to be a routine dependency update and does not raise any immediate red flags from an application security perspective. Nevertheless, as with any code change, it's important to review the changes carefully and ensure that they do not introduce any vulnerabilities or unintended consequences.

Files Changed:

  • package.json: The version of the @mantine/form dependency is being updated from ^7.3.2 to ^7.13.0. This is a routine dependency update and does not raise any immediate security concerns, but it's important to thoroughly test the application and review the release notes to ensure that the changes do not introduce any vulnerabilities or unintended behavior.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer Findings
Sensitive Files Analyzer 1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Sep 30, 2024

Superseded by #110.

@dependabot dependabot bot closed this Sep 30, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/mantine/form-7.13.0 branch September 30, 2024 20:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants