[Snyk] Upgrade bootstrap-vue from 2.0.0 to 2.2.0 #8

snyk-bot · 2020-01-21T08:11:49Z

Snyk has created this PR to upgrade bootstrap-vue from 2.0.0 to 2.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 6 versions ahead of your current version.
The recommended version was released 12 days ago, on 2020-01-09.

Release notes

Package name: bootstrap-vue

2.2.0 - 2020-01-09
Overview
- New icon components (based on BootstrapIcons v1.0.0-alpha2)
- New tagged input component <b-form-tags>
- Support for Bootstrap v4.4.1 CSS/SCSS
Features
- icons: new optional icon components (#4489) (d2bef17)
- b-collapse: add new prop appear to animate an initially visible collapse (#4317) (136a72b)
- b-collapse: add optional scoping to default slot (#4405) (8e95bac)
- b-container: add support for bootstrap v4.4.x new responsive containers (0e318f4)
- b-dropdown: add splitClass property to dropdown component (#4394) (a5f342e)
- b-dropdown-form: new form-class prop for adding classes to the form element (closes #4474) (#4475) (eef4200)
- b-form-select: add group/tree support and dedicated option and option-group components (closes #3222) (#4267) (f1ed017)
- b-form-select: support paths for valueField, textField, htmlField and disabledField props (#4386) (ed3b736)
- b-form-tags: new tagged input component (#4409) (00eb9d9)
- b-row: add Bootstrap v4.4 row columns support (#4439) (833b028)
- b-table: better sort labeling for screen readers (closes #4487) (#4488) (d4e66fa)
- b-table, b-table-lite: new tbody-tr-attr prop for arbitrary row attributes (closes #1864) (#4481) (4acf6ed)
- b-tooltip: add noninteractive prop (closes #4556) (#4563) (b3ad726)
- build: configure pre-commit hook (closes #4532) (#4552) (1bf9e59)
Bug Fixes
- b-table, b-table-lite: handle edge case with row events when table is removed from dom. instantiate row event handlers only when listeners are registered (fixes #4384) (#4388) (9a81cd4)
- b-toast: fix interal ensureToaster method call when toaster name changes (#4468) (744bb7a)
- tooltips, popovers: fix memory leak (closes #4400) (#4401) (c71352d)
- docs: handle undocumented breaking changes in babel-standalone for IE11 (#4484) (56f8bb5)
2.1.0 - 2019-11-13
Features
- b-dropdown: add block support to toggle button (closes #4266)
- b-form-group: allow setting label cols props to auto (closes #4217)
- b-form-input, b-form-textarea: new lazy modifier prop to update v-model on change/blur event
- b-form-input, b-form-textarea: add v-model debouncing feature via new prop debounce, and deprecate <b-table> prop filter-debounce (closes #4150)
- b-img, b-img-lazy: add support for srcset and sizes props (closes #4348)
- b-pagination, b-pagination-nav: add pills style option
- b-table: default the row select feature selected-variant to the 'active' variant
- b-table: add selectRow() and unselectRow() methods to cell and row-details slot scopes, and new prop no-select-on-click
- b-table, b-table-lite: add in head/foot row variant prop (addresses #4215)
- b-table, b-table-lite: add prop details-td-class for applying classes to the details row <td>
- b-tabs: emit cancelable BvEvent before changing tabs via new event activate-tab (closes #4273)
- v-b-visible: new directive v-b-visible for detecting visibility of elements
- auto-generate file dist/web-types.json for WebStorm, and files dist/vetur-tags.json and dist/vetur-attributes.json for Vetur (closes #4107)
Fixes
- b-dropdown: handle issue with touch devices on MacOS using Safari/Firefox (Fixes #4328, #4344)
- b-nav-form, b-nav-text: ensure these sub-components have <li> as root element for accessibility
- b-pagination, b-pagination-nav: add UP/DOWN keyboard navigation support for JAWS (fixes #4322)
- b-table, b-table-lite, b-table-simple: fix issue with sticky columns when table is not responsive but has sticky-header (fixes #4354)
- b-table, b-table-lite, b-tbody: fix delegated event handlers when transition + minor adjustment to row key generation (fixes #4370, #4360)
- b-tabs: allow space to trigger tab activation when no-key-nav is enabled (fixes #4323)
- v-b-modal: open modal using ENTER key on non-button elements for A11Y
- v-b-modal: ensure trigger element is keyboard accessible if not a link or button, for A11Y
- v-b-tooltip, v-b-popover: ensure reference to trigger element is passed to title/content function (fixes #4331)
- web-types: update web-types code generation to match latest schema
Other
- b-table: deprecate prop filter-debounce in favour of b-form-input debouncing
- documentation updates and fixes
2.0.4 - 2019-10-11
Released: 2019-10-11

Bug Fixes v2.0.4
- b-carousel: disable the next/prev controls when the carousel is sliding (closes #4210) (#4212) (64d556d)
- b-dropdown-form: fix SCSS styling when placed in a nav dropdown (fixes #4220) (#4223) (b852bba)
- types: correct the declared export name for BCardSubTitle component (#4229) (9f216df)
Performance v2.0.4
- b-table, b-table-lite: improve render performance for large tables (closes #4211, #4155) (#4213) (f3f42f2)
Other v2.0.4
- add "sass" entry in package.json
- minor docs fixes and updates
2.0.3 - 2019-10-05
Released: 2019-10-05

Please see the changelog for a complete list of commits, and the online documentation for usage.

Bug Fixes v2.0.3
- b-form-file: fix prop type checking for value prop (#4168) (a8e2e56)
- b-nav-item-dropdown: focus-out handling when new focus comes from another dropdown-toggle (closes #4113) (#4139) (9c37875)
- b-table: minor code optimizations to filter debouncing (#4167) (018eef1)
- b-table, b-table-lite, b-table-simple: disable sticky header max-height on printers / print media (#4147) (24c62c5)
- b-tooltip, b-popover: add SVGElement as acceptable prop type (closes #4173) (#4174) (fab7fea)
- v-b-modal: bind to inner link or button for dropdown items or nav items (fixes #4149) (#4187) (5c28bd2)
Performance v2.0.3
- b-table, b-table-lite: delegate row event handlers to the tbody element (#4192) (3f0d46a)
- tables: make b-th extend b-td instead of using functional wrappers (#4156) (c9715a8)
- tables: improve provide/inject performance (addresses #4155) (#4164) (152fefc)
Docs v2.0.3
- add prop descriptions to component reference tables (closes #3647) (#4161) (fdd2a83)
- add quick links (page table of contents) to docs pages for small screens, and add table of contents to
  section index pages (instead of a redirect to first child page) (#4145) (fdd2a83)
2.0.2 - 2019-09-20
Released: 2019-09-20

Please see the changelog for a complete list of commits, and the online documentation for usage.

Bug Fixes v2.0.2
- b-popover, b-tooltip: ensure prop boundary-padding is passed to popper instance (fixes #4131) (#4133) (a54a647)
- b-collapse: make id prop not required (#4109) (4f935ce)
- tables: add in missing Bootstrap variant class bg-active for dark tables (#4098) (d9900ab)
- tables: ensure row variant active (class table-active) takes precedence over other row variants (addresses #3008) (#4127) (fdb8bb6)
- tooltips, popovers: hide trigger element title attribute during show delay (fixes #4114) (#4120) (2dd8d5a)
2.0.1 - 2019-09-13
Released: 2019-09-13

Please see the changelog for a complete list of commits, and the online documentation for usage.

Bug Fixes v2.0.1
- b-media: fix vertical align class when top or bottom selected (fixes #4052) (#4055) (9ccfe4c)
- b-table: handle filter as an object when using items provider, and prevent duplicate provider calls on mount (fixes #4065) (#4068) (9ddd115)
- b-table: remove extra slashes in mixins imports (#4087) (77f5be1)
- tooltips, popovers: check document.body instead of document for IE11 support (fixes #4074) (#4075) (1eda4fe)
- v-b-tooltip, v-b-popover: add missing disabled config option (#4057) (f488dc1)
- v-b-tooltip, v-b-popover: don't show if no title/content provided (closes #4064) (#4076) (0b7de29)
2.0.0 - 2019-09-07
Released: 2019-09-06

Please see the changelog for a complete list of commits, and the online documentation for usage.

BoootstrapVue 2.0.0 stable introduces several new features and bug fixes. Please note that this release also includes several breaking changes.

Notable improvements:
- Tooltips and popovers have been competely re-written for better reactivity and stability. The directive versions are now reactive to trigger element title attribute changes and configuration changes. The component versions now perform better when qucikly hovering/unhovering the trigger element. Component and directive versions now have a default delay of 50ms (affects 'hover' and 'focus' triggers only). They can now have a trigger of 'manual' (when used by itself) of which they can only be opened or closed programmatically. Users can now optionally specify the ID that the tooltip or popover uses. For accessibility reasons, the title attribute is removed from the trigger element (target) only when the tooltip or popover is showing, and is restored when hidden.
- Modals, tooltips, popovers, and toasts now work with scoped style classes (requires the use of vue-loader's /deep/, ::v-deep or >>> deep selectors for targeting inner elements, just like with any other component).
- New SVG background image based sorting indicator icons for <b-table>, with the ability to place them on either the right (default) or left of the table cell headers (via a new prop).
- Programmatic selection of <b-table> selctable rows.
- Ability to provide your own custom footer structure for <b-table> and <b-table-lite>.
Breaking changes and deprecated features removal v2.0.0

Please carefully read the following before upgrading to v2.0.0 stable!
- Vue 2.6+ is now required at a minimum, 2.6.10+ is recommended. Some components will fail to work as expected if using Vue 2.5 (notably tooltips and popovers, but other components may be affected as well).
- All deprecated features have been removed in v2.0.0 stable in order to reduce bundle size and simplify code.
Two notable breaking changes are:
- changes to the table slot naming syntax: the table slot syntax introduced in rc.28 has been modified in v2.0.0 stable for better compatibility with the new Vue v-slot syntax and its limitations (which currently are not documented in the Vue.JS docs).
- the removal of the deprecated /es build directory: Users should now be importing the new top-level named exports when importing individual components, directives, and plugins.
Read the following migration guide for more details.

Migration guide v2.0.0
- Removal of the deprecated /es build directory. Users should now be using the new simplified import syntax introduced in v2.0.0-rc.22. Users should be importing the top-level named exports instead.
- b-dropdown: removal of deprecated text slot. Use the button-content slot instead.
- b-form-* controls, b-form-group, b-form-invalid-feedback and b-form-valid-feedback: validation prop state now only accepts true, false, or null values. Passing the strings 'invalid' or 'valid' will no longer work.
- b-form-group: removal of the deprecated horizontal and breakpoint props. Use props label-cols{-{breakpoint}} instead.
- b-img-lazy, b-card-img-lazy: now rely only on IntersectionObserver support (native or via a polyfill) to determine when to show the image. If IntersectionObserver support is not detected, then the image will always be shown. Use a polyfill if you need to support older browsers (e.g. IE11)
- b-modal: the deprecated BvModalEvent method cancel() has been removed. Use the method preventDefault() instead.
- b-modal: the deprecated BvModalEvent property modalId has been removed. Use the property componentId instead.
- b-nav: removal of the deprecated is-nav prop. Use b-navbar-nav component instead when placing navs in b-navbar.
- b-nav-item-dropdown: deprecated props extra-menu-classes and extra-toggle-classes have been removed. Used props menu-class and toggle-class (respectively) instead.
- b-table and b-table-lite: table cell field, header and footer scoped slot naming convention has changed. Users should be using the new table round bracketed slot naming syntax: use slot cell(field) instead of field or [field], use slot head(field) instead of HEAD_field or HEAD[field], use foot(field) instead of FOOT_field or FOOT[field]. This change was required for better compatibility with the new Vue v-slot syntax. The square bracket syntax introduced in 2.0.0-rc.28 has been replaced with the round bracket syntax to reduce possible confusion and potential future issues with Vue 2.6's new dynamic slot name syntax.
- b-table: the filter prop will no longer accept a function reference (previously deprecated). Instead, pass a function to the filter-function prop when using a custom filter function. The prop filter is only to be used for the filter's criteria (i.e. the search value, search RegExpr, etc).
- b-table: passing an object as a fields definition will no longer work. Use the array of strings or array of objects (or a combination of the two) fields definition format instead.
- b-table: sorting icon SASS variables have been changed to handle the new SVG backgrounds. If you previously had custom CSS styling/icons, they will not work as expected - but sorting will still work. the SVG backgrounds can be controlled via SASS variables.
- b-tab: removal of deprecated href prop. Use <b-nav> for controlling panes that change with URL changes.
- b-tabs: removal of deprecated tabs slot. Use slot tabs-end instead.
- b-tabs: removal of deprecated bottom prop. Use the end prop instead.
- Tooltip SCSS: deprecated variable $bv-tooltip-bg-level has been removed. Use variable $b-tooltip-bg-level instead.
- Popover SCSS: deprecated variables $bv-popover-bg-level, $bv-popover-border-level, and $bv-popover-color-level have been removed. Use variables $b-popover-bg-level, $b-popover-border-level, and $b-popover-color-level (respectively) instead.
Please refer to the documentation for the latest usage and examples, and below for a list of fixes and new features.

Bug Fixes v2.0.0
- b-dropdown-*: ensure class bindings are placed on root element for all dropdown sub-components (closes #4022) (#4024) (81efb89)
- b-form-textarea: handle initial auto-height when in modal, tabs, or other component with transition or which uses v-show (fixes #3936, #3702) (#3937) (be3ac62)
- b-link: only add the nativeOn property to componentData when rendering a router link (#3976) (62fb0b6)
- b-modal: ensure non-prop attributes are transferred to the modal outer wrapper div (closes #3896) (#3921) (8bf3a55)
- b-modal: fix scroll to top issue when modal has no-fade set (#4004) (332b79f)
- b-table, b-table-lite: handle edge case where field slot returns no vNodes (fixes #3919) (#3920) (a392059)
- b-table, b-table-lite: render header when not always stacked mode (fixes #3886) (#3887) (2302b31)
- b-table, b-table-lite: generate :key for row-details row based on the primary-key field value if available (#4025) (c7cb16f)
- v-b-toggle: don't override role if element has a role assigned (#3889) (5d155ba)
- tooltip, popover: overall code refactor for better reactivity and performance (fixes: #1990, #2937, #3480,
  #3717, #3854, closes #3451) (#3908) (eebab43)
Features v2.0.0
- b-carousel: add prop no-wrap for disabling wrapping to start/end (closes #3902) (#3905) (2c8bd23)
- b-dropdown: add role=presentation to <li> elements for improved a11y (#3996) (464d257)
- b-img-lazy: switch IntersectionObserver to use private v-b-visible directive (#3977) (249ccfa)
- b-modal: add scoped style support when portalled (non-static modal) (#3962) (77ad6b9)
- b-nav: add card header support (#3883)
  (4046a53)
- b-pagination: if number of pages changes, try and keep current page active (closes #3716) (#3990) (ae8ce78)
- b-modal: add prop for auto focusing one of the built in-buttons once shown (closes #3945) (#3979) (6f2827e)
- b-table: allow field definition properties filterByFormatted and sortByFormatted to accept a formatter function reference (closes #3892) (#3898) (5492b38)
- b-table: new sorting icons using SVG, plus option to place icon on left of header cell (closes #3687, #3696, #3918, #3966) (#3968) (c4442f4)
- b-table: add filter-debounce prop for debouncing filter updates (#3891) (03536a5)
- b-table: add selectAllRows() and clearSelected() to thead/tfoot slot scopes (addresses #3901) (#3907) (86c53dd)
- b-table, b-table-lite: switch slot name syntax to use round brackets instead of square brackets (#3986) (fca7bd5)
- b-table, b-table-lite: remove deprecated slot names, introduce new slot names (#3866) (249efd9)
- b-table, b-table-lite: use aria-details rather than aria-describedby when details row showing (addresses #3801) (#3992) (f6f73c7)
- b-table, b-table-lite: add support for custom header attributes (closes #2244) (#3876) (8784f31)
- b-table, b-table-lite: add new scoped slot custom-foot to allow user to create their own table footer (closes #3960) (#4027) (cbeeef9)
- b-table, b-table-lite, b-table-simple: add no-border-collapse prop and SCSS (#3987) (253b4f6)
- b-toast: add support for scoped styles (#3963) (ca1b5de)
- tooltip, popover: overall code refactor for better reactivity and performance (fixes: #1990, #2937, #3480, #3717, #3854, closes #3451) (#3908) (eebab43)
Depreaction removals v2.0.0
- b-dropdown: remove deprecated slot text (#3868) (29eb8b1)
- b-form-group: remove deprecated prop horizontal and breakpoint (#3879) (b301822)
- b-nav, b-nav-item-dropdown: remove deprecated slot and props (#3867) (21fab35)
- b-modal: remove BvModalEvent deprecations (#3864) (90c299c)
- b-table, b-table-lite: switch slot name syntax to use round brackets instead of square brackets (#3986) (fca7bd5)
- b-table, b-table-lite: remove deprecated slot names, introduce new slot names (#3866) (249efd9)
- b-tabs: remove deprecations (#3863) (0edac49)
- tooltip/popover: remove SCSS deprecations (#3869) (bea49d4)
- build: remove deprecated es/ build (#3604) (3828f59)

from bootstrap-vue GitHub release notes

Commit messages

Package name: bootstrap-vue

c1cf970 chore: release v2.2.0
4853938 chore: bump version and update changelog (#4573)
2e794fe chore(docs): use icons on landing page (#4576)
704d89a chore(docs): add caniuse link to form-input docs input type section
a75b7ac chore(deps): update devdependency terser to ^4.6.2 (#4572)
7a5a629 chore(deps): update devdependency rollup to ^1.29.0 (#4571)
7d8eef7 chore(deps): update devdependency husky to ^4.0.1 (#4569)
b3ad726 feat(b-tooltip): add `noninteractive` prop (closes #4556) (#4563)
f5a2fba chore(docs): minor updates to the icons docs (#4567)
df465aa chore(docs): disable autocomplete on the icons search field (#4566)
8877542 chore(deps): update devdependency postcss-cli to v7 (#4565)
e013dc6 feat(docs): make more concise and explain how to hide `b-toast` title (#4542)
9d93995 chore(deps): update devdependency husky to v4 (#4561)
1bf9e59 feat(chore): configure pre-commit hook (fixes #4532) (#4552)
bc801a7 chore(deps): update all non-major dependencies (#4559)
cd31316 chore(deps): update devdependency rollup to ^1.28.0 (#4555)
9d2c30a chore(deps): update devdependency eslint-plugin-jest to ^23.3.0 (#4553)
2f9b14a fix(docs): correct spelling error in `b-form-file` property description (#4551)
e8b39a8 chore(deps): update devdependency terser to ^4.5.1 (#4547)
6938bc9 chore(docs): add `b-breadcrumb-item` usage example (#4541)
100fba7 chore(deps): update devdependency terser to ^4.5.0 (#4546)
4355762 chore: update copyright year to 2020 (#4545)
f044722 chore(deps): update all non-major dependencies (#4539)
2b43c82 chore(deps): update devdependency eslint-plugin-node to v11 (#4534)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade bootstrap-vue from 2.0.0 to 2.2.0. See this package in NPM: https://www.npmjs.com/package/bootstrap-vue See this project in Snyk: https://app.snyk.io/org/tghelere/project/1153fc2e-1fc4-4979-93f4-79d9470afc17?utm_source=github&utm_medium=upgrade-pr

tghelere merged commit 3ac8d7f into master Jan 23, 2020

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade bootstrap-vue from 2.0.0 to 2.2.0 #8

[Snyk] Upgrade bootstrap-vue from 2.0.0 to 2.2.0 #8

snyk-bot commented Jan 21, 2020

Overview

Features

Bug Fixes

Features

Fixes

Other

Bug Fixes v2.0.4

Performance v2.0.4

Other v2.0.4

Bug Fixes v2.0.3

Performance v2.0.3

Docs v2.0.3

Bug Fixes v2.0.2

Bug Fixes v2.0.1

Breaking changes and deprecated features removal v2.0.0

Migration guide v2.0.0

Bug Fixes v2.0.0

Features v2.0.0

Depreaction removals v2.0.0

[Snyk] Upgrade bootstrap-vue from 2.0.0 to 2.2.0 #8

[Snyk] Upgrade bootstrap-vue from 2.0.0 to 2.2.0 #8

Conversation

snyk-bot commented Jan 21, 2020

Snyk has created this PR to upgrade bootstrap-vue from 2.0.0 to 2.2.0.

Overview

Features

Bug Fixes

Features

Fixes

Other

Bug Fixes v2.0.4

Performance v2.0.4

Other v2.0.4

Bug Fixes v2.0.3

Performance v2.0.3

Docs v2.0.3

Bug Fixes v2.0.2

Bug Fixes v2.0.1

Breaking changes and deprecated features removal v2.0.0

Migration guide v2.0.0

Bug Fixes v2.0.0

Features v2.0.0

Depreaction removals v2.0.0