[Snyk] Upgrade @vaadin/vaadin-themable-mixin from 23.3.0-alpha2 to 23.3.5

[Artur-]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @vaadin/vaadin-themable-mixin from 23.3.0-alpha2 to 23.3.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 15 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2023-01-20.

Release notes

Package name: @vaadin/vaadin-themable-mixin

• 23.3.5 - 2023-01-20
  

  API Documentation →

  Changes Since v23.3.4

  🐛　Bug Fixes

  • combo-box
    • ⧉ Do not throw when combo-box is templatized (#5330) (#5331)
  • multi-select-combo-box
    • ⧉ Do not throw when multi-select-combo-box is templatized (#5336) (#5337)
• 23.3.4 - 2023-01-16
  

  API Documentation →

  Changes Since v23.3.3

  💥　Behavior Altering Fixes

  • checkbox, radio-group
    • ⧉ Improve checkbox and radio-button baseline alignment (#5288) (#5292)

  🐛　Bug Fixes

  • dialog
    • ⧉ Do not throw on requestContentUpdate before attach (#5285) (#5286)
  • grid
    • ⧉ Allow programmatically multi-sorting if multiSortOnShiftClick is enabled (#5296) (#5311)
    • ⧉ Ignore label element clicks in grid cells (#5271) (#5273)
    • ⧉ Do not consider label and hidden elements focusable (#5263) (#5265)

  💅　Polish

  • checkbox,radio-group,vaadin-lumo-styles,vaadin-material-styles
    • ⧉ Make globals opt-in for backwards compatibility (#5302) (#5313)
    • ⧉ Move component properties defaults to themes (#5295) (#5297)
• 23.3.3 - 2023-01-09
  

  API Documentation →

  Changes Since v23.3.2

  💥　Behavior Altering Fixes

  • integer-field,number-field
    • ⧉ Revalidate number fields after bad input is removed (#5138) (#5208)

  🐛　Bug Fixes

  • combo-box,time-picker
    • ⧉ Set aria-setsize attribute on items instead of the scroller (#5254) (#5255)
  • component-base
    • ⧉ Handle large item height differences in virtualizer (#5135) (#5201)
  • context-menu
    • ⧉ Do not throw on requestContentUpdate before attach (#5223) (#5224)
  • field-base,login
    • ⧉ Propagate autocapitalize attribute in Chrome (#5175) (#5176)

  📝　Documentation

  • combo-box
    • ⧉ Use fetch in combo-box dataProvider example (#5217) (#5218)
  • field-base
    • ⧉ Remove incorrect usage of DisabledMixin types (#5179) (#5183)
  • message-input
    • ⧉ Add missing JSDoc annotation for the submit event (#5259) (#5260)
  • vaadin-lumo-styles,vaadin-material-styles
    • ⧉ Add private JSDoc annotation to theme classes (#5203) (#5204)

  🔬　Tests

  • avatar-group
    • ⧉ Add missing avatar-group overlay snapshot tests (#5244) (#5248)
    • ⧉ Add missing typings tests to vaadin-avatar-group (#5243) (#5246)
  • context-menu
    • ⧉ Improve context-menu Lit renderer tests formatting (#5226) (#5228)
  • menu-bar
    • ⧉ Add missing snapshot tests to vaadin-menu-bar (#5235) (#5236)
  • time-picker
    • ⧉ Update and fix vaadin-time-picker snapshot tests (#5239) (#5241)
• 23.3.2 - 2022-12-23
• 23.3.1 - 2022-12-19
• 23.3.0 - 2022-12-12
• 23.3.0-rc1 - 2022-12-07
• 23.3.0-beta2 - 2022-11-30
• 23.3.0-beta1 - 2022-11-22
• 23.3.0-alpha8 - 2022-11-21
• 23.3.0-alpha7 - 2022-11-18
• 23.3.0-alpha6 - 2022-11-13
• 23.3.0-alpha5 - 2022-11-04
• 23.3.0-alpha4 - 2022-10-28
• 23.3.0-alpha3 - 2022-10-10
• 23.3.0-alpha2 - 2022-09-26

from @vaadin/vaadin-themable-mixin GitHub release notes

Commit messages

Package name: @vaadin/vaadin-themable-mixin

• 6dcae73 chore(release): 23.3.5
• a3c89da fix: do not throw when multi-select-combo-box is templatized (Move npm updaters to server to be reused in servlet context initialisation #5336) (Proposal: rename JsModule to JsImport #5337)
• 8ec2a8c fix: do not throw when combo-box is templatized (WebComponent interface should provide getElement() #5330) (Register a servlet automatically if WCs present #5331)
• e896534 chore(release): 23.3.4
• 1c31b1d refactor: make globals opt-in for backwards compatibility (Merge from master #5302) (Fix navigate back to main view don't work in FF and Safari . (#5113) … #5313)
• 1079293 fix: allow programmatically multi-sorting if multiSortOnShiftClick is enabled (Maven plugin fail on Updating package.json when running under windows #5296) (Embedded web components: add client-side readOnly support #5311)
• f6ba813 refactor: move component properties defaults to themes (Update chrome version in tests #5295) (Update ChromeDriver version to 73.0.3683.68 #5297)
• 40be455 fix!: improve checkbox and radio-button baseline alignment (temporary adding back generated files to pass CI #5288) (Access task scheduled during beforeClientResponse is not run during the same request #5292)
• b088254 fix: do not throw on requestContentUpdate before attach (Add support for returning values from JavaScript #5285) (Combobox issue when allowing custom values #5286)
• fbf4456 fix: ignore label element clicks in grid cells (fix javadoc #5271) (Release 1.5.0.alpha2  #5273)
• 96e5b65 fix: do not consider label and hidden elements focusable (Add TrackMessageSizeInterceptor to Atmosphere (#5217) #5263) (Add TrackMessageSizeInterceptor to Atmosphere (#5217) #5265)
• 1529ed6 chore(release): 23.3.3
• e6745a3 docs: add missing JSDoc annotation for the submit event (Embedded web components: implement the ability to push property updates to client #5259) (Exporter-based embeddable web component impl. #5260)
• bc5dea5 fix: set aria-setsize attribute on items instead of the scroller (Insert head elements to make theme work. Avoid repeated theme imports #5254) (Handle empty attribute values properly in HTML element #5255)
• 9508ffb test: add missing avatar-group overlay snapshot tests (flow-maven-plugin should visit node_modules to properly config imports and dependencies #5244) (Rendered font is different when application is run in development and in production #5248)
• cde68a8 test: add missing typings tests to vaadin-avatar-group (DX test production build experience #5243) (Check the function presence before calling it (#5208) #5246)
• 4a53aeb test: update and fix vaadin-time-picker snapshot tests (update documentation on how to customize the production bundle #5239) (update Bakery production bundling configuration and documentation #5241)
• 55bbdec test: add missing snapshot tests to vaadin-menu-bar (in the beginning of the production build, populate an index.js that includes everything #5235) (before packaging, run the webpack build to output the bundle to be included into the package #5236)
• 3f5113c test: improve context-menu Lit renderer tests formatting (Investigate embedded Flow application production mode issues #5226) (Make webpack start earlier #5228)
• 55e0e87 fix: do not throw on requestContentUpdate before attach (Fix flow-component-render so to render comboboxes for Chrome72 (#557) #5223) (Parser should be able to handle babel json #5224)
• 9d2f06f docs: use fetch in combo-box dataProvider example (Add TrackMessageSizeInterceptor to Atmosphere #5217) (Register superclass in case of route target collision #5218)
• 5db4424 fix!: revalidate number fields after bad input is removed (Fix invalid null check (#5132) #5138) (Check the function presence before calling it #5208)
• 776489f docs: add private JSDoc annotation to theme classes (Create basic webpack.config.js #5203) (JavaScript imports are not considered for webpack #5204)
• 3251f3f fix: handle large item height differences in virtualizer (Vaadin 12 - yarn throws E2BIG (ERROR_META_EXPANSION_TOO_LONG) #5135) (Add DOM listeners before attaching the element (#5195) #5201)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
3 Code Smells

No Coverage information
0.0% Duplication

[manolo]

Why it only changes one component here, shouldn't change all?
But, probably this file should be updated at once, once there is a new version, or perhaps remove it and autogenerate by flow each time

[caalador]

The version is actually taken from flow-tests/test-resources/src/main/java/com/vaadin/flow/uitest/ui/dependencies/TestVersion.java as it is used as a NpmPackage version, but Snyk only tries to update the pacakge.json.
The tests should be executed and then committed to get the correct versions.
I'll close these as they use the wrong version in the wrong way.

[github-actions]

Test Results

   946 files  ±0     946 suites  ±0   56m 23s ⏱️ - 1m 38s
5 918 tests ±0  5 883 ✔️ ±0  35 💤 ±0  0 ❌ ±0 
6 176 runs  ±0  6 134 ✔️ ±0  42 💤 ±0  0 ❌ ±0 

Results for commit cbf5e76. ± Comparison against base commit 402b2b6.

[caalador]

Closing as wrong major and updated in the wrong place.