Update dependency chart.js to v2.9.4 [SECURITY] - abandoned

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
chart.js			2.7.3 -> 2.9.4
chart.js (source)	dependencies	minor	2.7.3 -> 2.9.4

GitHub Vulnerability Alerts

CVE-2020-7746

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.

---

Release Notes

chartjs/Chart.js

v2.9.4

Compare Source

This is the last release of v2 and focused on fixing bugs identified in the v2.9.3 release.

Bugs Fixed

• #​7404 - Preserve prototypes when cloning. Thanks @​iddings
• #​7587 - Fix docs for external moment.js. Thanks @​mojoaxel
• #​7853 - Fix box recursion when dimensions are NaN. Thanks @​alessandroasm
• #​7883 - Fix call stack exception when computing label sizes. Thanks @​silentmatt
• #​7918 - Prevent global prototype pollution via the merge helper
• #​7920 - Use Object.create(null) as merge target, to prevent prototype pollution

v2.9.3

Compare Source

Bug Fixes

• #​6698 Fix undefined variable
• #​6719 Don't make legend empty when fill is false

Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@​kurkle, @​benmccann, and @​etimberg).

v2.9.2

Compare Source

Bug Fixes

• #​6641 IE11 & Edge compatible style injection
• #​6655 Backwards compatible default fill for radar charts
• #​6660 Improve clipping of line charts when border widths are large
• #​6661 When a legend item is clicked, make sure the correct item is hidden
• #​6663 Refresh package-lock file to pick up new dependency

Performance

• #​6671 Stop unnecessary line calculations

Documentation

• #​6643 Combine performance documentation sections

Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@​nagix, @​kurkle, @​benmccann, @​etimberg and @​simonbrunel).

v2.9.1

Compare Source

Bug Fixes

• #​6603 Fix deprecation warnings for horizontal bar charts
• #​6608 Fix zoom plugin by no longer clipping scale.getDecimalForPixel to the chart area
• #​6617 Non numeric Y axes did not work

Documentation

• #​6613 Add link to performance documentation

Development

• #​6609 - Tests no longer use deprecated options

Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@​nagix, @​kurkle, @​benmccann, @​etimberg and @​simonbrunel).

v2.9.0

Compare Source

Breaking changes

• https://github.com/chartjs/Chart.js/pull/6131 helpers._decimalPlaces is now private

Enhancements

• https://github.com/chartjs/Chart.js/pull/6527 Hover styling for dataset in 'dataset' mode
• https://github.com/chartjs/Chart.js/pull/6268 Implement dataset.order
• https://github.com/chartjs/Chart.js/pull/6509 Make autoSkip aware of major ticks
• https://github.com/chartjs/Chart.js/pull/6460 Implemented RTL support for legends and tooltips
• https://github.com/chartjs/Chart.js/pull/6490 HTML DOM building
• https://github.com/chartjs/Chart.js/pull/6326 Draw the rightmost grid line when offsetGridLines is true
• https://github.com/chartjs/Chart.js/pull/6343 Handle reverse support in core.scale
• https://github.com/chartjs/Chart.js/pull/6289 Support spanGaps in radar charts
• https://github.com/chartjs/Chart.js/pull/6323 Support object values for bar charts
• https://github.com/chartjs/Chart.js/pull/6287 Support rotation for pointStyle image
• https://github.com/chartjs/Chart.js/pull/6257 Allow specifying labels in time scale options
• https://github.com/chartjs/Chart.js/pull/6281 Support boundary filling modes in radialLinear scale
• https://github.com/chartjs/Chart.js/pull/6056 Add support for floating bar chart ([start, end])
• https://github.com/chartjs/Chart.js/pull/6241 Implement layers (z-index) for layout items
• https://github.com/chartjs/Chart.js/pull/5621 Make legend appearance consistent with chart elements
• https://github.com/chartjs/Chart.js/pull/5999 Implement per-dataset type (default and per-chart) options
• https://github.com/chartjs/Chart.js/pull/6097 Specify time scale min and max in standard manner
• https://github.com/chartjs/Chart.js/pull/6141 Legend align option. Thanks @​dkichler
• https://github.com/chartjs/Chart.js/pull/6128 Make line options scriptable. Thanks @​janelledement

Performance

• https://github.com/chartjs/Chart.js/pull/6594 Remove a couple calls to helpers.each
• https://github.com/chartjs/Chart.js/pull/6247 Remove duplicate scale building
• https://github.com/chartjs/Chart.js/pull/6579 Cache resolved data element options
• https://github.com/chartjs/Chart.js/pull/6575 Simplify line drawing
• https://github.com/chartjs/Chart.js/pull/6508 Add ticks.sampleSize option
• https://github.com/chartjs/Chart.js/pull/6354 Perf improvement for ticks.source:'labels'
• https://github.com/chartjs/Chart.js/pull/6301 Replace helpers.each with for-loops
• https://github.com/chartjs/Chart.js/pull/6304 Refactor core.layout
• https://github.com/chartjs/Chart.js/pull/6307 Faster major tick calculation
• https://github.com/chartjs/Chart.js/pull/6250 Cache getScaleForId() calls in the line controller
• https://github.com/chartjs/Chart.js/pull/6148 Replace helpers.extend

Bug Fixes

• https://github.com/chartjs/Chart.js/pull/6249 Bar options should be defined on dataset instead of scale
• https://github.com/chartjs/Chart.js/pull/6556 Inject styles into Shadow DOM when inside Shadow DOM
• https://github.com/chartjs/Chart.js/pull/6583 Fix unit determination when autoSkip is enabled
• https://github.com/chartjs/Chart.js/pull/6581 Return correct index/value id in radar/polarArea
• https://github.com/chartjs/Chart.js/pull/6580 Fix logarithmic test to use correct scale
• https://github.com/chartjs/Chart.js/pull/6528 Make sure zeroLineIndex is defined
• https://github.com/chartjs/Chart.js/pull/6523 Fix right side scale ticks
• https://github.com/chartjs/Chart.js/pull/6423 Clamp argument of toExponential between 0 and 20. Thanks @​veggiesaurus
• https://github.com/chartjs/Chart.js/pull/6328 Fix getValueForPixel in time scale
• https://github.com/chartjs/Chart.js/pull/6292 Adjust vertical alignment of tooltip items
• https://github.com/chartjs/Chart.js/pull/6321 Update dataset metadata when axisID changes
• https://github.com/chartjs/Chart.js/pull/6291 Assign unique scale IDs
• https://github.com/chartjs/Chart.js/pull/6288 Fix regression in lineTension
• https://github.com/chartjs/Chart.js/pull/6282 Treat null as NaN in radialLinear scale
• https://github.com/chartjs/Chart.js/pull/6285 Keep lines on the left and right edges from being cut
• https://github.com/chartjs/Chart.js/pull/6269 Apply lineJoin style at the first point in radar charts
• https://github.com/chartjs/Chart.js/pull/6280 Fix point label counting in radialLinear scale
• https://github.com/chartjs/Chart.js/pull/6279 Treat 0 as a valid point label
• https://github.com/chartjs/Chart.js/pull/6265 Utilize tick.major in tickFormatFunction
• https://github.com/chartjs/Chart.js/pull/6264 Apply offset regardless of min/max setting
• https://github.com/chartjs/Chart.js/pull/6258 Fix ticks generation for vertical time scale
• https://github.com/chartjs/Chart.js/pull/6259 Fix determineUnitForFormatting floating point error
• https://github.com/chartjs/Chart.js/pull/6115 Fix overlapping auto-generated ticks on time scale
• https://github.com/chartjs/Chart.js/pull/6238 Fix tooltip title in radar charts
• https://github.com/chartjs/Chart.js/pull/6224 Fix arc size calculation when circumference is under 2*PI
• https://github.com/chartjs/Chart.js/pull/6215 Fix arc border with circumference over 2*PI
• https://github.com/chartjs/Chart.js/pull/5961 Fix tick label rotation and layout issues
• https://github.com/chartjs/Chart.js/pull/6182 Use the appropriate time format for auto tick generation
• https://github.com/chartjs/Chart.js/pull/6208 Fill before drawing lines
• https://github.com/chartjs/Chart.js/pull/6209 Fix missing tooltip value in radar charts
• https://github.com/chartjs/Chart.js/pull/6177 Normalize angle for index in radialLinear scale
• https://github.com/chartjs/Chart.js/pull/6102 Fix ticks.minor and ticks.major issues
• https://github.com/chartjs/Chart.js/pull/6129 Fix hover animation
• https://github.com/chartjs/Chart.js/pull/6120 Improved helpers.almostWhole

Documentation

• https://github.com/chartjs/Chart.js/pull/6585 Add a note to the perf documentation about rotation
• https://github.com/chartjs/Chart.js/pull/6554 Add link to linear radial axis for radar chart doc
• https://github.com/chartjs/Chart.js/pull/6491 Add elements.arc.angle in documentation
• https://github.com/chartjs/Chart.js/pull/6466 Fixed incorrect spelling in pie dataset options. Thanks @​SeppPenner
• https://github.com/chartjs/Chart.js/pull/6435 Add link back to home page from docs
• https://github.com/chartjs/Chart.js/pull/6393 Add radar chart config options
• https://github.com/chartjs/Chart.js/pull/6293 Correct descriptions on ticks.display and add pointLabels.display
• https://github.com/chartjs/Chart.js/pull/6263 Add sample for radar scriptable options
• https://github.com/chartjs/Chart.js/pull/6244 Fix data in timeseries sample
• https://github.com/chartjs/Chart.js/pull/6186 Typo in doughnut documentation. Thanks @​joshuamcewen
• https://github.com/chartjs/Chart.js/pull/6132 Make docs consistent for cubicInterpolationMode and fill. Thanks @​stockiNail
• https://github.com/chartjs/Chart.js/pull/6119 Demonstrate multiple units on timeseries example
• https://github.com/chartjs/Chart.js/pull/6139 Documented tooltip alignment options
• https://github.com/chartjs/Chart.js/pull/6134 Documented date adapter

Development

• https://github.com/chartjs/Chart.js/pull/6507 Improved minimization when calling helpers
• https://github.com/chartjs/Chart.js/pull/6497 Reduce indentation
• https://github.com/chartjs/Chart.js/pull/6355 Do autoSkip in update
• https://github.com/chartjs/Chart.js/pull/6493 Upgrade rollup and plugins
• https://github.com/chartjs/Chart.js/pull/6362 Improved code minimization
• https://github.com/chartjs/Chart.js/pull/6360 Create helpers.math._factorize
• https://github.com/chartjs/Chart.js/pull/6351 Lazily compute label sizes
• https://github.com/chartjs/Chart.js/pull/6347 Render charts only once in time scale tests
• https://github.com/chartjs/Chart.js/pull/6246 Avoid time related deprecation warnings in tests

Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@​nagix, @​kurkle, @​benmccann, @​etimberg and @​simonbrunel).

v2.8.0: Version 2.8.0

Compare Source

Documentation: http://www.chartjs.org/docs/2.8.0/

Deprecations

• #​5868 Deprecate Chart.{Type} classes
• #​6022 Deprecate configMerge and scaleMerge helpers

Enhancements

• #​5741 Add minBarLength option for bar chart. Thanks @​adube
• #​5780 Bar options are now scriptable
• #​5841 Draw inner border for arc elements
• #​5850 Add support for gridLines/angleLines borderDash for polar area and radar charts
• #​5855 Moved drawing of radial lines before drawing the tick labels. Thanks @​fhp
• #​5885 Add support for hiding axis when all datasets are hidden. Thanks @​davesalomon
• #​5905 Add support for typed arrays
• #​5908 Add midpoint interpolation to stepped line. Thanks @​veggiesaurus
• #​5927 Add reverse support to time scale
• #​5938 Improve tick generation for linear scales
• #​5951 New weight option for pie and doughnut charts
• #​5960 Implement adapter to abstract date/time features
• #​5966 Doughnut options are now scriptable
• #​5973 Line options are now scriptable
• #​5976 Polar area options are now scriptable
• #​5978 Make moment optional from our UMD builds
• #​5982 Remove date auto type conversions
• #​6019 Improve time scale performances
• #​6041 Radar options are now scriptable
• #​6048 Move CSS in a separate file to be CSP-compliant
• #​6059 Add onLeave callback to legend. Thanks @​jonrimmer
• #​6077 Allow configuration of borderWidth as object
• #​6105 Optimize the npm package by removing useless files

Issues Fixed

• #​5331 Make animation duration consistent across browsers. Thanks @​serhii-yakymuk
• #​5609 Fix offsetGridLine behavior with a single data point
• #​5750 Ensure that the time scale safely accesses data.labels
• #​5751 Handle axis lineWidth as an array
• #​5752 Ensure that new Number() is correctly handled
• #​5776 Fix legend layout padding at the start of columns. Thanks @​jtagscherer
• #​5786 Support decimal stepSize
• #​5790 Add error margin for detecting if a point or line is in the chart area
• #​5816 Fix legend item layout issue
• #​5828 Improve shadow root detection. Thanks @​karaxuna
• #​5846 Correct calculation of padding in percent. Thanks @​chtheis
• #​5848 Fix radial scale topmost tick label and the bottom of the chart area that were cut off
• #​5857 Fix nearest interaction mode
• #​5858 Adjust the size of rectRounded/rectRot points to fit the circle with pointRadius
• #​5865 Support CanvasGradient for hover colors
• #​5869 Tooltip support for CanvasPattern and CanvasGradient
• #​5880 Fix the rounding issue of floating point numbers in category scale
• #​5884 Remove gaps on the left and right when the axis offset is set to true
• #​5891 Remove autoSkip logic to always display last tick. Thanks @​sgray
• #​5909 Remove innerHTML usage from our DOM platform
• #​5913 Re-allow modifying ticks in afterBuildTicks
• #​5914 Add scale.pointLabels.lineHeight and scale.ticks.lineHeight options
• #​5920 Return correct label for value type axis
• #​5922 Properly calculate space needed by tick label when autoSkip is true
• #​5925 Align title, body and footer inside tooltip
• #​5933 Fix time scale ticks.reverse issue
• #​5936 Fix "RangeError" exception when labels are big (>125000). Thanks @​ckyycc
• #​5937 Prevent Bezier points from being capped when a data point is off the chart
• #​5947 Cast getRightValue to number in bar chart
• #​5948 Fix ticks generation when working with tiny numbers
• #​5963 Fix fitWithPointLabels calculation in radial linear scale
• #​5996 Replace tooltip item xLabel and yLabel with label and value
• #​6006 Enhance legend label color point when usePointStyle is true. Thanks @​alfiehd
• #​6007 Prevent drawing radial linear scale twice
• #​6008 Supply correct start parameter to insertElements
• #​6011 Prevent infinite resize when vertical scrollbar appears
• #​6021 Fix padding of horizontal axes when labels are rotated
• #​6027 Provide a rectangle getArea implementation for horizontal bars
• #​6046 Rename addEventListener and removeEventListener
• #​6058 Ignore invalid log scale min and max
• #​6060 Handle frozen dataset.data arrays
• #​6063 Fix responsive resize on RTL page

Documentation

• #​5756 Add documentation the aspectRatio property. Thanks @​danielcb29
• #​5769 Use parser instead of the deprecated format option. Thanks @​Niladri24dutta
• #​5795 Document tick padding option. Thanks @​JEphron
• #​5796 Consistent use of punctuation. Thanks @​bartdeslagmulder
• #​5813 Add a link to chartjs-plugin-colorschemes
• #​5831 Correct a spelling mistake. Thanks @​bakert
• #​5854 Add docs for barThickness. Thanks @​jedrekdomanski
• #​5876 Fix descriptions in bar chart doc
• #​5877 Replace repeated function call with compact function, generateData. Thanks @​generic-github-user
• #​5912 Add omi-chart to the doc. Thanks @​dntzhang
• #​5915 Use HTTPS in documentation links where possible
• #​5958 Use Chart.min.js in samples
• #​5962 Update contributors guide and issue templates
• #​5968 Fix contribution docs. Thanks @​mojoaxel
• #​5974 Add a note about maintainAspectRatio. Thanks @​janelledement
• #​5975 Fix typo / grammar in docs
• #​5979 Fix labelOffset description
• #​6013 Set pointBackgroundColor in radar sample
• #​6020 Fix typos and minor doc issues
• #​6026 Omit inconsistent note. Thanks @​janelledement
• #​6030 Update doc on label types for TooltipItem
• #​6038 Fix duplicate anchor
• #​6042 Add examples of scriptable charts. Thanks @​janelledement
• #​6053 Fix typo in broken url. Thanks @​janelledement
• #​6054 Simple spelling error fix. Thanks @​JABedford
• #​6070 Add a link to chartjs-plugin-crosshair. Thanks @​AbelHeinsbroek
• #​6073 Add instructions for image-based tests to the contributors guide
• #​6079 Improve autoSkip documentation
• #​6081 Add a link to chartjs-plugin-rough
• #​6089 Improve financial sample tooltips and interactions
• #​6096 Revamp the README.md and add link to the awesome list
• #​6099 Fix document errors related to ticks
• #​6107 Add a note about how to include an example against master

Development

• #​5624 Radar code cleanup
• #​5777 Support *.js test fixture configs
• #​5794 Remove dead code from the gulpfile. Thanks @​HendrikRoehm
• #​5827 Change .editorconfig file to include newlines at EOF. Thanks @​jtagscherer
• #​5833 Use the pixel comparer for logarithmic tests. Thanks @​jtagscherer
• #​5840 Upgrade dev dependencies to reduce vulnerabilities
• #​5842 Use short labels for the legend tests so as not to be affected by the font width
• #​5871 Make Chart.controllers.* importable
• #​5872 Fix test failures on Windows
• #​5875 Remove gulp-connect and add jsdelivr/unpkg paths
• #​5904 Migrate from Browserify to rollup
• #​5953 Cleanup scales export for better import strategy
• #​5965 Refactoring using helpers.options.resolve
• #​5967 Update controller.scatter.test.js to test default tooltip callbacks. Thanks @​MadRussian
• #​5969 Make the main controller importable
• #​5970 Remove unused parameter when calling removeResizeListener. Thanks @​DanielRuf
• #​5991 Trigger mouse events at the center of arc
• #​5994 _resolveElementPoint utility for triggerMouseEvent
• #​6005 Common logic for resolving element options
• #​6017 Fix typo in comment
• #​6032 Replace deprecated gulp-util and remove unused watchify
• #​6033 Use lowercase for primitives in jsdocs
• #​6040 Remove unused ESLint directive
• #​6043 Autoskip cleanup
• #​6061 Fix randomly failing tooltip test

Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@​nagix, @​kurkle, @​benmccann, @​etimberg and @​simonbrunel).

More details in the release PR: #​6092

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[renovate]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.