[Snyk] Upgrade: , , , , , date-fns, dotenv, react-query, react-scripts, sass #1015
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @emotion/styled from 11.6.0 to 11.13.0.
See this package in npm: https://www.npmjs.com/package/@emotion/styled
- @date-io/date-fns from 2.13.1 to 2.17.0.
See this package in npm: https://www.npmjs.com/package/@date-io/date-fns
- @emotion/react from 11.7.1 to 11.13.3.
See this package in npm: https://www.npmjs.com/package/@emotion/react
- @mui/icons-material from 5.4.1 to 5.16.7.
See this package in npm: https://www.npmjs.com/package/@mui/icons-material
- @mui/material from 5.4.1 to 5.16.7.
See this package in npm: https://www.npmjs.com/package/@mui/material
- date-fns from 2.28.0 to 2.30.0.
See this package in npm: https://www.npmjs.com/package/date-fns
- dotenv from 16.0.0 to 16.4.5.
See this package in npm: https://www.npmjs.com/package/dotenv
- react-query from 3.34.15 to 3.39.3.
See this package in npm: https://www.npmjs.com/package/react-query
- react-scripts from 5.0.0 to 5.0.1.
See this package in npm: https://www.npmjs.com/package/react-scripts
- sass from 1.49.7 to 1.77.8.
See this package in npm: https://www.npmjs.com/package/sass
See this project in Snyk:
https://app.snyk.io/org/danneelssophie/project/6caeb292-c5c9-4b37-a413-b1fe8bc2f805?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@emotion/styled
from 11.6.0 to 11.13.0 | 12 versions ahead of your current version | 2 months ago
on 2024-07-20
@date-io/date-fns
from 2.13.1 to 2.17.0 | 5 versions ahead of your current version | a year ago
on 2023-07-23
@emotion/react
from 11.7.1 to 11.13.3 | 17 versions ahead of your current version | 25 days ago
on 2024-08-21
@mui/icons-material
from 5.4.1 to 5.16.7 | 69 versions ahead of your current version | a month ago
on 2024-08-09
@mui/material
from 5.4.1 to 5.16.7 | 123 versions ahead of your current version | a month ago
on 2024-08-09
date-fns
from 2.28.0 to 2.30.0 | 5 versions ahead of your current version | a year ago
on 2023-04-30
dotenv
from 16.0.0 to 16.4.5 | 20 versions ahead of your current version | 7 months ago
on 2024-02-20
react-query
from 3.34.15 to 3.39.3 | 14 versions ahead of your current version | 2 years ago
on 2023-01-25
react-scripts
from 5.0.0 to 5.0.1 | 1 version ahead of your current version | 2 years ago
on 2022-04-12
sass
from 1.49.7 to 1.77.8 | 80 versions ahead of your current version | 2 months ago
on 2024-07-11
Issues fixed by the recommended upgrade:
SNYK-JS-MINIMATCH-3050818
SNYK-JS-MINIMIST-2429795
SNYK-JS-BABELTRAVERSE-5962462
Release notes
Package name: @emotion/styled
-
11.13.0 - 2024-07-20
-
-
- Updated dependencies [
- @ emotion/serialize@1.3.0
- @ emotion/use-insertion-effect-with-fallbacks@1.1.0
- @ emotion/utils@1.4.0
-
11.12.0 - 2024-07-19
-
11.11.5 - 2024-03-29
-
11.11.0 - 2023-05-06
-
11.10.8 - 2023-04-28
-
11.10.6 - 2023-02-16
-
11.10.5 - 2022-10-27
-
11.10.4 - 2022-08-30
-
11.10.0 - 2022-07-31
-
11.9.3 - 2022-06-12
-
11.8.1 - 2022-02-19
-
11.8.0 - 2022-02-19
-
11.6.0 - 2021-11-14
from @emotion/styled GitHub release notesMinor Changes
#3198
d8ff8a5Thanks @ Andarist! - Migrated away from relying onprocess.env.NODE_ENVchecks to differentiate between production and development builds.Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.
Default files should continue to work in all environments.
#3215
a9f6912Thanks @ Andarist! - Addededge-lightandworkerdconditions topackage.jsonmanifest to better serve users using Vercel Edge and Cloudflare Workers.Patch Changes
d8ff8a5,a9f6912]:Package name: @date-io/date-fns
-
2.17.0 - 2023-07-23
- feat: isBeforeMonth and isAfterMonth by @ dmtrKovalenko in #648
- chore(build): change build to target
- fix(luxon): Use
- Unfiy behavior across adapter in invalid scenarios @ dmtrKovalenko in #650
- Improve typescript typing and support @ dmtrKovalenko in #650
- @ LukasTy made their first contribution in #645
- @ alex-kuck made their first contribution in #639
-
2.16.0 - 2022-09-21
- feat: new methods
-
2.15.0 - 2022-08-10
- feat: New method
- chore(deps-dev): bump moment from 2.29.1 to 2.29.4 by @ dependabot in #622
-
2.14.0 - 2022-05-13
- feat: New methods
- Remove useless date clone in dayjs adapter by @ flaviendelangle in #615
- Welcome @ flaviendelangle as a collaborator on this project!
-
2.13.2 - 2022-05-05
- Fix typo in doc by @ alexfauquette in #612
- Fix incorrect date validation from dayjs by @ RCout1nho in #608
- @ alexfauquette made their first contribution in #612
- @ RCout1nho made their first contribution in #608
-
2.13.1 - 2022-01-25
from @date-io/date-fns GitHub release notesNew features
What's Changed
ES6by @ LukasTy in #645DateTime.isDateTimeinstead ofinstanceofby @ alex-kuck in #639New Contributors
Full Changelog: v2.16.1...v2.17.0
What's Changed
setDate/getDateby @ flaviendelangle in #625Full Changelog: v2.15.0...v2.16.0
What's Changed
addYearsby @ flaviendelangle in #623Full Changelog: v2.14.0...v2.15.0
What's Changed
startOfYearandendOfYearby @ flaviendelangle in #614New Collaborator
Full Changelog: v2.13.2...v2.14.0
What's Changed
New Contributors
Full Changelog: v2.13.1...v2.13.2
v2.13.1
Package name: @emotion/react
-
11.13.3 - 2024-08-21
-
-
- @ emotion/serialize@1.3.1
-
11.13.0 - 2024-07-20
-
-
- Updated dependencies [
- @ emotion/serialize@1.3.0
- @ emotion/use-insertion-effect-with-fallbacks@1.1.0
- @ emotion/utils@1.4.0
-
11.12.0 - 2024-07-19
-
11.11.4 - 2024-02-27
-
11.11.3 - 2023-12-23
-
11.11.1 - 2023-06-07
-
11.11.0 - 2023-05-06
-
11.10.8 - 2023-04-28
-
11.10.6 - 2023-02-16
-
11.10.5 - 2022-10-27
-
11.10.4 - 2022-08-30
-
11.10.0 - 2022-07-31
-
11.9.3 - 2022-06-12
-
11.9.0 - 2022-04-06
-
11.8.2 - 2022-03-10
-
11.8.1 - 2022-02-19
-
11.8.0 - 2022-02-19
-
11.7.1 - 2021-12-12
from @emotion/react GitHub release notesPatch Changes
#3232
0ce3ed0Thanks @ ENvironmentSet! - Distributecssprop attachment over props that are union typesUpdated dependencies []:
Minor Changes
#3198
d8ff8a5Thanks @ Andarist! - Migrated away from relying onprocess.env.NODE_ENVchecks to differentiate between production and development builds.Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.
Default files should continue to work in all environments.
#3215
a9f6912Thanks @ Andarist! - Addededge-lightandworkerdconditions topackage.jsonmanifest to better serve users using Vercel Edge and Cloudflare Workers.Patch Changes
d8ff8a5,a9f6912]:Package name: @mui/icons-material
-
5.16.7 - 2024-08-09
- [material-ui][mui-system] Add support for version runtime checks (#43233) @ DiegoAndai
- [docs] Fix 301 @ oliviertassinari
- [website] Fix wrong link in pricing table (@ zanivan) (#43143) @ zanivan
- [website] Add blog link to pricing table (@ zanivan) (#43140) @ zanivan
-
5.16.6 - 2024-07-30
- [Divider] Enable borderStyle enhancement in divider with children (#43059) @ anuujj
- [material-ui][Card] Update CardMedia description (#43121) @ shahzaibdev1
- [material-ui] Replace deprecated
- [material-ui][Snackbar] Improve close
- [code-infra] Use the same CI names on master & next (#43064) @ mnajdova
-
5.16.5 - 2024-07-25
- [utils] Add dependency to @ mui/types (@ mnajdova) (#43047) @ mnajdova
- [material-ui][joy-ui][Autocomplete] Fix
- Fix CHANGELOG convention @ oliviertassinari
- [material-ui] Fix broken image links in blog template on master branch (#42969) @ navedqb
-
5.16.4 - 2024-07-16
- Fix wrong import in Popover types (#42967) @ mnajdova
-
5.16.3 - 2024-07-16
- [material] Add missing dependency (#42959) @ mnajdova
- [material-ui][Autocomplete] Add instructions about
- Move feedback from Canny to GitHub @ oliviertassinari
-
5.16.2 - 2024-07-16
-
5.16.1 - 2024-07-11
-
5.16.0 - 2024-07-05
-
5.15.21 - 2024-06-28
-
5.15.20 - 2024-06-12
-
5.15.19 - 2024-05-29
-
5.15.18 - 2024-05-16
-
5.15.17 - 2024-05-08
-
5.15.16 - 2024-05-01
-
5.15.15 - 2024-04-04
-
5.15.14 - 2024-03-19
-
5.15.13 - 2024-03-13
-
5.15.12 - 2024-03-05
-
5.15.11 - 2024-02-24
-
5.15.10 - 2024-02-12
-
5.15.9 - 2024-02-08
-
5.15.8 - 2024-02-06
-
5.15.7 - 2024-01-31
-
5.15.6 - 2024-01-22
-
5.15.5 - 2024-01-17
-
5.15.4 - 2024-01-10
-
5.15.3 - 2024-01-03
-
5.15.2 - 2023-12-25
-
5.15.1 - 2023-12-19
-
5.15.0 - 2023-12-12
-
5.14.19 - 2023-11-29
-
5.14.18 - 2023-11-14
-
5.14.16 - 2023-10-31
-
5.14.15 - 2023-10-24
-
5.14.14 - 2023-10-17
-
5.14.13 - 2023-10-10
-
5.14.12 - 2023-10-04
-
5.14.11 - 2023-09-26
-
5.14.9 - 2023-09-13
-
5.14.8 - 2023-09-05
-
5.14.7 - 2023-08-29
-
5.14.6 - 2023-08-24
-
5.14.5 - 2024-01-17
-
5.14.3 - 2023-08-01
-
5.14.1 - 2023-07-19
-
5.14.0 - 2023-07-11
-
5.13.7 - 2023-07-04
-
5.11.16 - 2023-04-04
-
5.11.11 - 2023-02-28
-
5.11.9 - 2023-02-14
-
5.11.0 - 2022-12-13
-
5.10.16 - 2022-11-28
-
5.10.15 - 2022-11-22
-
5.10.14 - 2022-11-15
-
5.10.9 - 2022-10-11
-
5.10.6 - 2022-09-19
-
5.10.3 - 2022-08-29
-
5.10.2 - 2022-08-23
-
5.8.4 - 2022-06-14
-
5.8.3 - 2022-06-07
-
5.8.2 - 2022-05-31
-
5.8.0 - 2022-05-17
-
5.6.2 - 2022-04-18
-
5.6.1 - 2022-04-11
-
5.6.0 - 2022-04-06
-
5.5.1 - 2022-03-14
-
5.5.0 - 2022-03-07
-
5.4.4 - 2022-02-28
-
5.4.2 - 2022-02-15
-
5.4.1 - 2022-02-08
from @mui/icons-material GitHub release notesAug 9, 2024
A big thanks to the 3 contributors who made this release possible.
@ mui/material@5.16.7Docs
Core
All contributors of this release in alphabetical order: @ DiegoAndai, @ oliviertassinari, @ zanivan
Jul 30, 2024
A big thanks to the 5 contributors who made this release possible.
@ mui/material@5.16.6Docs
<ListItem button/>withListItemButtoncomponent in routing libraries list example (#43114) @ aliharis99reasontype in demos (#43105) @ sai6855Core
All contributors of this release in alphabetical order: @ aliharis99, @ anuujj, @ mnajdova, @ sai6855, @ shahzaibdev1
Jul 25, 2024
A big thanks to the 4 contributors who made this release possible.
@ mui/utils@5.16.5Docs
Hintdemo (@ ManthanGajjar) (#43039) @ ManthanGajjarAll contributors of this release in alphabetical order: @ ManthanGajjar, @ mnajdova, @ navedqb, @ oliviertassinari
Full Changelog: v5.16.4...v5.16.5
Jul 16, 2024
A big thanks to the one contributor who made this release possible.
@ mui/material@5.16.4All contributors of this release in alphabetical order: @ mnajdova
Jul 16, 2024
A big thanks to the 3 contributors who made this release possible.
@ mui/material@5.16.3Docs
autosuggest-highlightdependency (#42953) @ HoFa1997All contributors of this release in alphabetical order: @ HoFa1997, @ mnajdova, @ oliviertassinari
Package name: @mui/material
-
5.16.7 - 2024-08-09
- [material-ui][mui-system] Add support for version runtime checks (#43233) @ DiegoAndai
- [docs] Fix 301 @ oliviertassinari
- [website] Fix wrong link in pricing table (@ zanivan) (#43143) @ zanivan
- [website] Add blog link to pricing table (@ zanivan) (#43140) @ zanivan
-
5.16.6 - 2024-07-30
- [Divider] Enable borderStyle enhancement in divider with children (#43059) @ anuujj
- [material-ui][Card] Update CardMedia description (#43121) @ shahzaibdev1
- [material-ui] Replace deprecated
- [material-ui][Snackbar] Improve close
- [code-infra] Use the same CI names on master & next (#43064) @ mnajdova
-
5.16.5 - 2024-07-25
-
5.16.4 - 2024-07-16
-
5.16.3 - 2024-07-16
-
5.16.2 - 2024-07-16
-
5.16.1 - 2024-07-11
-
5.16.0 - 2024-07-05
-
5.15.21 - 2024-06-28
-
5.15.20 - 2024-06-12
-
5.15.19 - 2024-05-29
-
5.15.18 - 2024-05-16
-
5.15.17 - 2024-05-08
-
5.15.16 - 2024-05-01
-
5.15.15 - 2024-04-04
-
5.15.14 - 2024-03-19
-
5.15.13 - 2024-03-13
-
5.15.12 - 2024-03-05
-
5.15.11 - 2024-02-24
-
5.15.10 - 2024-02-12
-
5.15.9 - 2024-02-08
-
5.15.8 - 2024-02-06
-
5.15.7 - 2024-01-31
-
5.15.6 - 2024-01-22
-
5.15.5 - 2024-01-17
-
5.15.4 - 2024-01-10
-
5.15.3 - 2024-01-03
-
5.15.2 - 2023-12-25
-
5.15.1 - 2023-12-19
-
5.15.0 - 2023-12-12
-
5.14.20 - 2023-12-05
-
5.14.19 - 2023-11-29
-
5.14.18 - 2023-11-14
-
5.14.17 - 2023-11-06
-
5.14.16 - 2023-10-31
-
5.14.15 - 2023-10-24
-
5.14.14 - 2023-10-17
-
5.14.13 - 2023-10-10
-
5.14.12 - 2023-10-04
-
5.14.11 - 2023-09-26
-
5.14.10 - 2023-09-18
-
5.14.9 - 2023-09-13
-
5.14.8 - 2023-09-05
-
5.14.7 - 2023-08-29
-
5.14.6 - 2023-08-24
-
5.14.5 - 2023-08-14
-
5.14.4 - 2023-08-08
-
5.14.3 - 2023-08-01
-
5.14.2 - 2023-07-25
-
5.14.1 - 2023-07-19
-
5.14.0 - 2023-07-11
-
5.13.7 - 2023-07-04
-
5.13.6 - 2023-06-23
-
5.13.5 - 2023-06-12
-
5.13.4 - 2023-06-05
-
5.13.3 - 2023-05-29
-
5.13.2 - 2023-05-22
-
5.13.1 - 2023-05-17
-
5.13.0 - 2023-05-10
-
5.12.3 - 2023-05-02
-
5.12.2 - 2023-04-25
-
5.12.1 - 2023-04-17
-
5.12.0 - 2023-04-11
-
5.11.16 - 2023-04-04
-
5.11.15 - 2023-03-28
-
5.11.14 - 2023-03-21
-
5.11.13 - 2023-03-14
-
5.11.12 - 2023-03-06
-
5.11.11 - 2023-02-28
-
5.11.10 - 2023-02-20
-
5.11.9 - 2023-02-14
-
5.11.8 - 2023-02-07
-
5.11.7 - 2023-01-31
-
5.11.6 - 2023-01-23
-
5.11.5 - 2023-01-18
-
5.11.4 - 2023-01-09
-
5.11.3 - 2023-01-02
-
5.11.2 - 2022-12-26
-
5.11.1 - 2022-12-20
-
5.11.0 - 2022-12-13
-
5.10.17 - 2022-12-06
-
5.10.16 - 2022-11-28
-
5.10.15 - 2022-11-22
-
5.10.14 - 2022-11-15
-
5.10.13 - 2022-11-07
-
5.10.12 - 2022-10-31
-
5.10.11 - 2022-10-25
-
5.10.10 - 2022-10-18
-
5.10.9 - 2022-10-11
-
5.10.8 - 2022-10-03
-
5.10.7 - 2022-09-27
-
5.10.6 - 2022-09-19
-
5.10.5 - 2022-09-12
-
5.10.4 - 2022-09-06
-
5.10.3 - 2022-08-29
-
5.10.2 - 2022-08-23
-
5.10.1 - 2022-08-16
-
5.10.0 - 2022-08-09
-
5.9.3 - 2022-08-01
-
5.9.2 - 2022-07-25
-
5.9.1 - 2022-07-18
-
5.9.0 - 2022-07-12
-
5.8.7 - 2022-07-04
-
5.8.6 - 2022-06-27
-
5.8.5 - 2022-06-21
-
5.8.4 - 2022-06-14
-
5.8.3 - 2022-06-07
-
5.8.2 - 2022-05-31
-
5.8.1 - 2022-05-23
-
5.8.0 - 2022-05-17
-
5.7.0 - 2022-05-10
-
5.6.4 - 2022-05-02
-
5.6.3 - 2022-04-25
-
5.6.2 - 2022-04-18
-
5.6.1 - 2022-04-11
-
5.6.0 - 2022-04-06
-
5.5.3 - 2022-03-28
-
5.5.2 - 2022-03-21
-
5.5.1 - 2022-03-14
-
5.5.0 - 2022-03-07
-
5.4.4 - 2022-02-28
-
5.4.3 - 2022-02-21
-
5.4.2 - 2022-02-15
-
5.4.1 - 2022-02-08
from @mui/material GitHub release notesAug 9, 2024
A big thanks to the 3 contributors who made this release possible.
@ mui/material@5.16.7Docs
Core
All contributors of this release in alphabetical order: @ DiegoAndai, @ oliviertassinari, @ zanivan
Jul 30, 2024
A big thanks to the 5 contributors who made this release possible.
@ mui/material@5.16.6Docs
<ListItem button/>withListItemButtoncomponent in routing libraries list example (#43114) @ aliharis99reasontype in demos (#43105) @ sai6855Core
All contributors of this release in alphabetical order: @ aliharis99, @ anuujj, @ mnajdova, @ sai6855, @ shahzaibdev1
Package name: date-fns
-
2.30.0 - 2023-04-30
-
2.29.3 - 2022-09-13
-
2.29.2 - 2022-08-18
-
2.29.1 - 2022-07-22
-
2.29.0 - 2022-07-22
-
2.28.0 - 2021-12-28
from date-fns GitHub release notesPackage name: dotenv
-
16.4.5 - 2024-02-20
-
16.4.4 - 2024-02-13
-
16.4.3 - 2024-02-12
-
16.4.2 - 2024-02-10
-
16.4.1 - 2024-01-24
-
16.4.0 - 2024-01-23
-
16.3.2 - 2024-01-19
-
16.3.1 - 2023-06-17
-
16.3.0 - 2023-06-16
-
16.2.0 - 2023-06-16
-
16.1.4 - 2023-06-04
-
16.1.3 - 2023-05-31
-
16.1.2 - 2023-05-31
-
16.1.1 - 2023-05-31
-
16.1.0 - 2023-05-30
-
16.1.0-rc2 - 2023-05-21
-
16.1.0-rc1 - 2023-04-07
-
16.0.3 - 2022-09-29
-
16.0.2 - 2022-08-30
-
16.0.1 - 2022-05-10
-
16.0.0 - 2022-02-02
from dotenv GitHub release notes16.4.5
16.4.4
16.4.3
16.4.2
16.4.1
16.4.0
16.3.2
16.3.1
16.3.0
16.2.0
Package name: react-query
-
3.39.3 - 2023-01-25
-
3.39.2 - 2022-07-15
-
3.39.1 - 2022-05-29
-
3.39.0 - 2022-05-08
-
3.38.1 - 2022-05-01
-
3.38.0 - 2022-04-22
-
3.37.0 - 2022-04-21
-
3.36.0 - 2022-04-21
-
3.35.0 - 2022-04-17
-
3.34.20 - 2022-04-15
-
3.34.19 - 2022-03-27
-
3.34.18 - 2022-03-26
-
3.34.17 - 2022-03-24
-
3.34.16 - 2022-02-20
-
3.34.15 - 2022-02-12
from react-query GitHub release notesPackage name: react-scripts
5.0.1 (2022-04-12)
Create React App 5.0.1 is a maintenance release that improves compatibility with React 18. We've also updated our templates to use
createRootand relaxed our check for older versions of Create React App.Migrating from 5.0.0 to 5.0.1
Inside any created project that has not been ejected, run:
or
🐛 Bug Fix
react-scripts