[Snyk] Upgrade @xstyled/styled-components from 3.5.1 to 3.6.0

[snyk-bot]

Snyk has created this PR to upgrade @xstyled/styled-components from 3.5.1 to 3.6.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 6 months ago, on 2022-04-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	375/1000 Why? CVSS 7.5	No Known Exploit
	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	375/1000 Why? CVSS 7.5	No Known Exploit
	Authorization Bypass Through User-Controlled Key SNYK-JS-PARSEPATH-2936439	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-OBJECTPATH-1585658	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	375/1000 Why? CVSS 7.5	Proof of Concept
	Directory Traversal SNYK-JS-MOMENT-2440688	375/1000 Why? CVSS 7.5	No Known Exploit
	Denial of Service (DoS) SNYK-JS-JPEGJS-2859218	375/1000 Why? CVSS 7.5	Proof of Concept
	Deserialization of Untrusted Data SNYK-JS-GATSBYPLUGINMDX-2405699	375/1000 Why? CVSS 7.5	Proof of Concept
	Denial of Service (DoS) SNYK-JS-FILETYPE-2958042	375/1000 Why? CVSS 7.5	No Known Exploit
	Denial of Service (DoS) SNYK-JS-FILETYPE-2958042	375/1000 Why? CVSS 7.5	No Known Exploit
	Denial of Service (DoS) SNYK-JS-DICER-2311764	375/1000 Why? CVSS 7.5	Mature
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIHTML-1296849	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	375/1000 Why? CVSS 7.5	No Known Exploit
	Remote Code Execution (RCE) SNYK-JS-SHARP-2848109	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PROMPTS-1729737	375/1000 Why? CVSS 7.5	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-PRISMJS-2404333	375/1000 Why? CVSS 7.5	No Known Exploit
	Improper Input Validation SNYK-JS-PARSEURL-3024398	375/1000 Why? CVSS 7.5	Proof of Concept
	Server-side Request Forgery (SSRF) SNYK-JS-PARSEURL-3023021	375/1000 Why? CVSS 7.5	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-PARSEURL-2942134	375/1000 Why? CVSS 7.5	Proof of Concept
	Server-side Request Forgery (SSRF) SNYK-JS-PARSEURL-2936249	375/1000 Why? CVSS 7.5	Proof of Concept
	Information Exposure SNYK-JS-PARSEURL-2935947	375/1000 Why? CVSS 7.5	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-PARSEURL-2935944	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-OBJECTPATH-1569453	375/1000 Why? CVSS 7.5	Proof of Concept
	Information Exposure SNYK-JS-NODEFETCH-2342118	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-IMMER-1540542	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-DEVCERT-2808183	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	375/1000 Why? CVSS 7.5	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	375/1000 Why? CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @xstyled/styled-components

• 3.6.0 - 2022-04-15
  

  Bug Fixes

  • move at-rules to end of nested responsive states (6c7528e), closes #288
  • core: add missing util (#362) (00ae8dc), closes #354
  • emotion: add missing createCss (#324) (f5eaa07)
  • types: add missing types to the borders system utility (#346) (c0c92b4)
  • types: fix missing values in types (#361) (01afa25), closes #355
  • types: remove deep path autocompletion (e01e8b3)
  • typing: Support any valid number for utility props that needs it (#357) (1fd72c6)

  Features

  • add ability to customize spacing properties in "texts" (#351) (57304c2), closes #350
  • add outlineOffset property (#360) (4dac9a3)
  • added inline variants support (#334) (acfa364), closes #333
  • typing: infer automatically the typing of the generators used inside of the compose (#358) (ecbae73)
• 3.5.1 - 2022-01-10
  

  Bug Fixes

  • fix missing files (18a22cd)

from @xstyled/styled-components GitHub release notes

Commit messages

Package name: @xstyled/styled-components

• 0e6545e v3.6.0
• 6c7528e fix: move at-rules to end of nested responsive states
• 3e8b0ff chore: fix dependencies
• e01e8b3 fix(types): remove deep path autocompletion
• fa48e04 chore: upgrade deps
• 00ae8dc fix(core): add missing util (Cannot read property 'tagName' of null gregberge/svgr#362)
• 01afa25 fix(types): fix missing values in types (Webpack loader exporting base64 only - Next.js gregberge/svgr#361)
• f5eaa07 fix(emotion): add missing `createCss` (Why is viewBox stripped (by default)? gregberge/svgr#324)
• 8cedfe0 docs(website): listStyleType examples (Do the generated components generate a displayName? gregberge/svgr#328)
• 203657a docs: update documentation for dark mode state (SyntaxError when filename has invalid variable characters (&) gregberge/svgr#331)
• acfa364 feat: added inline variants support (svgr --native transformed <path d="... 0 0 0 206..."> to <path d="... 0 00206.."> that cause CGpath fomat invalid gregberge/svgr#334)
• 4dac9a3 feat: add outlineOffset property (Title ID to enhance the SVG a11y gregberge/svgr#360)
• 1fd72c6 fix(typing): Support any valid number for utility props that needs it (Could not resolve '../../icons/toast/success.svg' by use @svgr/rollup and rollup-plugin-typescript2 gregberge/svgr#357)
• 57304c2 feat: add ability to customize spacing properties in "texts" (Add "silent" option to cli gregberge/svgr#351)
• ecbae73 feat(typing): infer automatically the typing of the generators used inside of the compose (Integration with Material-UI SvgIcon gregberge/svgr#358)
• c0c92b4 fix(types): add missing types to the borders system utility (Dependencies list updates / check dependencies gregberge/svgr#346)
• a1ab6b4 chore: fix package-lock.json

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs