Upgrade: Bump moment and handsontable

[dependabot[bot]]

Bumps moment and handsontable. These dependencies needed to be updated together. Updates moment from 2.20.1 to 2.29.4

Changelog

Sourced from moment's changelog.

2.29.4

• Release Jul 6, 2022
  • #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex

2.29.3 Full changelog

• Release Apr 17, 2022
  • #5995 [bugfix] Remove const usage
  • #5990 misc: fix advisory link

2.29.2 See full changelog

• Release Apr 3 2022

Address https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4

2.29.1 See full changelog

• Release Oct 6, 2020

Updated deprecation message, bugfix in hi locale

2.29.0 See full changelog

• Release Sept 22, 2020

New locales (es-mx, bn-bd). Minor bugfixes and locale improvements. More tests. Moment is in maintenance mode. Read more at this link: https://momentjs.com/docs/#/-project-status/

2.28.0 See full changelog

• Release Sept 13, 2020

Fix bug where .format() modifies original instance, and locale updates

2.27.0 See full changelog

• Release June 18, 2020

Added Turkmen locale, other locale improvements, slight TypeScript fixes

2.26.0 See full changelog

• Release May 19, 2020

... (truncated)

Commits

• 000ac18 Build 2.24.4
• f2006b6 Bump version to 2.24.4
• 536ad0c Update changelog for 2.29.4
• 9a3b589 [bugfix] Fix redos in preprocessRFC2822 regex (#6015)
• 6374fd8 Merge branch 'master' into develop
• b4e6153 Revert "[bugfix] Fix redos in preprocessRFC2822 regex (#6015)"
• 7aebb16 [bugfix] Fix redos in preprocessRFC2822 regex (#6015)
• 57c9062 Build 2.29.3
• aaf50b6 Fixup release complaints
• 26f4aef Bump version to 2.29.3
• Additional commits viewable in compare view

Updates handsontable from 7.2.2 to 12.1.2

Release notes

Sourced from handsontable's releases.

12.1.2

For more information on this release, see:

• Release notes

Changed

• Changed the version of the Moment.js dependency from 2.29.3 to 2.29.4, in reaction to a recently-found Moment.js security vulnerability. The vulnerability did not affect a correct configuration of Handsontable. #9638
• Vue: Freezed the version of the Vue framework that is used in our build chain to ~2.6. This shouldn't affect apps that use Vue 2.7+. #9624

12.1.1

For more information on this release, see:

• Release notes

Fixed

• Angular: Fixed an issue where the installation of @handsontable/angular package failed for versions of Angular other than 9 #9622

12.1.0

For more information on this release, see:

• Release notes
• Blog post
• Important information about installation in Angular

Added

• Added smoother row and column moving when some row or columns are hidden. #7613
• Added getNearestNotHiddenIndex(), a new method that finds the visual index of the nearest not-hidden row or column and works even with large numbers of hidden rows or columns. The previous method, getFirstNotHiddenIndex(), still works, but is marked as deprecated. #9064
• Added a Czech translation. #9343
• Added a Serbian translation. #9469
• Added new hooks: beforeColumnFreeze, afterColumnFreeze, beforeColumnUnfreeze, and afterColumnUnfreeze. #9248

Changed

• Replaced HTML entities appearing in Handsontable's license texts with canonical counterparts. #9487
• Updated the Pikaday optional dependency to 1.8.2, to let Handsontable work with Parcel 2 without errors. #9410
• React: Changed the wrapper's lifecycle methods, to let Handsontable work with React 17+ without warnings. #8748
• Angular: Moved the @angular/core dependency to peer dependencies. #9574

Fixed

• Fixed an issue where dropdown and autocomplete cell editors rendered incorrectly if the preventOverflow option was set to 'horizontal'. #3828
• Fixed an issue where frozen rows were getting duplicated. #4454
• Fixed an issue where comments rendered outside the viewport. #4785
• Fixed an issue where comments got positioned incorrectly when Handsontable ran within a scrollable element. #6744
• Fixed an issue that occurred when Handsontable ran within an HTML <form>: pressing Enter inside another form's <input> could open Handsontable's dropdown menu. #9295
• Fixed an issue where it was impossible to unmerge cells in the RTL layout direction. #9362
• Fixed an issue where columns wider than the viewport's width and rows higher than the viewport's height didn't render correctly. #9473
• Fixed an issue where dragging-to-scroll on mobile didn't work properly in the RTL layout direction. #9475
• Fixed an issue where hiding columns with nested headers caused incorrect column width calculation (for the stretchH: 'all' option). #9496
• Fixed an issue where ShortcutManager unnecessarily handled keyup events with no key defined. #9562

12.0.1

For more information on this release, see:

• Release notes

... (truncated)

Changelog

Sourced from handsontable's changelog.

[12.1.2] - 2022-07-08

For more information on this release, see:

• Release notes

Changed

• Changed the version of the Moment.js dependency from 2.29.3 to 2.29.4, in reaction to a recently-found Moment.js security vulnerability. The vulnerability did not affect a correct configuration of Handsontable. #9638
• Vue: Freezed the version of the Vue framework that is used in our build chain to ~2.6. This shouldn't affect apps that use Vue 2.7+. #9624

[12.1.1] - 2022-07-05

For more information on this release, see:

• Release notes

Fixed

• Angular: Fixed an issue where the installation of @handsontable/angular package failed for versions of Angular other than 9 #9622

[12.1.0] - 2022-06-28

For more information on this release, see:

• Release notes
• Blog post

Added

• Added smoother row and column moving when some row or columns are hidden. #7613
• Added getNearestNotHiddenIndex(), a new method that finds the visual index of the nearest not-hidden row or column and works even with large numbers of hidden rows or columns. The previous method, getFirstNotHiddenIndex(), still works, but is marked as deprecated. #9064
• Added a Czech translation. #9343
• Added a Serbian translation. #9469
• Added new hooks: beforeColumnFreeze, afterColumnFreeze, beforeColumnUnfreeze, and afterColumnUnfreeze. #9248

Changed

• Replaced HTML entities appearing in Handsontable's license texts with canonical counterparts. #9487
• Updated the Pikaday optional dependency to 1.8.2, to let Handsontable work with Parcel 2 without errors. #9410
• React: Changed the wrapper's lifecycle methods, to let Handsontable work with React 17+ without warnings. #8748
• Angular: Moved the @angular/core dependency to peer dependencies. #9574

Fixed

• Fixed an issue where dropdown and autocomplete cell editors rendered incorrectly if the preventOverflow option was set to 'horizontal'. #3828
• Fixed an issue where frozen rows were getting duplicated. #4454
• Fixed an issue where comments rendered outside the viewport. #4785
• Fixed an issue where comments got positioned incorrectly when Handsontable ran within a scrollable element. #6744
• Fixed an issue that occurred when Handsontable ran within an HTML <form>: pressing Enter inside another form's <input> could open Handsontable's dropdown menu. #9295
• Fixed an issue where it was impossible to unmerge cells in the RTL layout direction. #9362
• Fixed an issue where columns wider than the viewport's width and rows higher than the viewport's height didn't render correctly. #9473
• Fixed an issue where dragging-to-scroll on mobile didn't work properly in the RTL layout direction. #9475
• Fixed an issue where hiding columns with nested headers caused incorrect column width calculation (for the stretchH: 'all' option). #9496
• Fixed an issue where ShortcutManager unnecessarily handled keyup events with no key defined. #9562

[12.0.1] - 2022-05-16

... (truncated)

Commits

• 7fa1857 Merge branch 'release/12.1.2'
• 264d5df Docs: Adding 12.1.2 docs (#9642)
• 200cca2 Revert the change that had blocked the code freeze
• 4933bb1 12.1.2
• 4f3866e Fix freeze script
• 24ae7fb Add ability to create freeze and release in the same day
• e7e7c41 Security upgrade moment from 2.29.3 to 2.29.4 (#9637)
• e0fabdb create a link from custom editor/renderer page to hot-column page (#9633) (#9...
• a1d3a36 Freeze the Vue dev dependency to ~2.6 (#9629)
• a5a0d2a Merge branch 'release/12.1.1' into develop
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.