[Snyk] Upgrade select2 from 4.0.7 to 4.0.13 #2
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade select2 from 4.0.7 to 4.0.13. See this package in npm: https://www.npmjs.com/package/select2 See this project in Snyk: https://app.snyk.io/org/gtvolk31/project/9352be79-3c89-4c82-92af-cbaf8b1f5fcf?utm_source=github&utm_medium=referral&page=upgrade-pr
|
This pull request has been automatically marked as stale because it has not had recent activity. This might be due to missing feedback from OP. It will be closed if no further activity occurs. Thank you for your contributions. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade select2 from 4.0.7 to 4.0.13.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-SELECT2-456562
Why? Has a fix available, CVSS 6.1
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: select2
-
4.0.13 - 2020-01-28
- Trigger
- Feed back the keypress code that was responsible for the 'close' event (#5513)
- Only trigger
- Prevent opening of disabled elements (#5751)
- Fix "edit this page" links in docs (#5689)
- Registered Select2 on Open Collective (#5700, #5721, #5741)
-
4.0.12 - 2019-11-06
- Fixes incorrect offset when using the Shadow DOM and styling the
- Replace cdnjs with jsDelivr in the documentation (#5687)
- Fix incorrect provider for the automated NPM deployment (#5686)
-
4.0.11 - 2019-10-13
- Fixes jQuery migrate error when getting offset when dropdownParent not in document (#5584)
- Enable GitHub actions for CI (#5591)
- Documentation has been moved into and is deployed from the code repository (#5638)
- Remove Travis CI integration (#5665)
-
4.0.10 - 2019-08-28
- Support passing in a selector for
- Fix bug where dropdowns pointing upwards were incorrectly positioned (#5621)
-
4.0.9 - 2019-08-22
- Mirror disabled state through aria-disabled on selection (#5579)
- Select2 now clears the internal ID when it is destroyed (#5587)
- Set the main ARIA 1.1 roles and properties for comboboxes (#5582)
- The
- Do not propagate click when search box is not empty (#5580)
- Fix
- Fix generated options not receiving result IDs (#5586)
- Remove selection title attribute if text is empty (#5589)
- Reposition dropdown whenever items are selected (#5590)
- Fix dropdown positioning when displayed above with messages (#5592)
- Fix search box expanding width of container (#5595)
- Fix error in German translations (#5604)
- Updated development grunt version so it no longer shows as vulnerable (#5597)
- Remove unused variables (#5554)
-
4.0.8 - 2019-07-21
- Test against and fix compatibility with jQuery 3.4.1 (#5531)
- Results respect disabled state of
- Add
- Fix tag creation being broken in 4.0.7 (#5558)
- Fix infinite scroll when the scrollbar is not visible (#5575)
- Revert change to focusing behaviour in 4.0.6 (#5576)
- Fix wording in French translations (#5521)
- Update grunt-contrib-qunit to latest version (#5530)
- Removed unused
- Remove deprecated jQuery shorthand (#5564)
-
4.0.7 - 2019-05-14
- Do not close on select if Ctrl or Meta (Cmd) keys being held (#5222)
- Fixed issue where single select boxes would automatically reopen when they were closed (#5490, #5492)
- Move almond and jquery-mousewheel to devDependencies (#5489)
from select2 GitHub release notesNew features / improvements
inputevent beforechangeevents (#4649)selection:updateonce on DOM change events (#5734)Bug fixes
Documentation
Miscellaneous
Select2 is a looking for sponsors to keep development active. Interested in seeing Select2 continue to be developed? Sponsor @ kevin-brown (and by extension, Select2) on GitHub Sponsors or sponsor Select2 on Open Collective!
Bug fixes
<html>element (#5682)Miscellaneous
Select2 is a looking for sponsors to keep development active. Interested in seeing Select2 continue to be developed? Sponsor @ kevin-brown (and by extension, Select2) on GitHub Sponsors!
Bug fixes
Miscellaneous
New features / improvements
dropdownParentoption (#5622)Bug fixes
New features / improvements
languageoption now has a clearly defined fallback chain (#5602)Bug fixes
maximumSelectionLengthbeing ignored bycloseOnSelect(#5581)allowClearno longer shifts selections to a new line (#5603)Translations
Miscellaneous
New features / improvements
<option>(#5560)computedstyleoption for calculating the width (#5559)Bug fixes
Translations
Miscellaneous
.select2-selection__placeholderCSS definitions for multiple selects (#5508)New features/improvements
Bug fixes
Miscellaneous
Commit messages
Package name: select2
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs