acronym-decoder icon indicating copy to clipboard operation
acronym-decoder copied to clipboard

[Snyk] Upgrade bootstrap from 5.3.1 to 5.3.2

Open amadib opened this issue 2 years ago • 2 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade bootstrap from 5.3.1 to 5.3.2.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 21 days ago, on 2023-09-14.
Release notes
Package name: bootstrap
  • 5.3.2 - 2023-09-14

    Highlights

    • Passing a percentage unit to the global abs() is deprecated since Dart Sass v1.65.0. It resulted in a deprecation warning when compiling Bootstrap with Dart Sass. This has been fixed internally by changing the values passed to the divide() function. The divide() function has not been fixed itself so that we can keep supporting node-sass cross-compatibility. In v6, this won't be an issue as we plan to drop support for node-sass.
    • Using multiple ids in a collapse target wasn't working anymore and has been fixed.

    Color modes

    • Increased color contrast of form range track background in light and dark modes.
    • Fixed table state rendering for color modes with a focus on the striped table in dark mode to increase color contrast.
    • Allow <mark> color customization for color modes.

    Docs


    🎨 CSS

    • #38816: Use box-shadow CSS variables shadow utilities
    • #38955: Fix radios looking like ellipse on responsive mode
    • #38976: Use box-shadow CSS vars instead of Sass vars in assets and variables
    • #39030: Fix dart-sass deprecation warning
    • #39033: Color mode: fix table state rendering
    • #39095: Make form range track background more contrasted
    • #39119: New Sass var $btn-link-focus-shadow-rgb to allow customization
    • #39141: New Sass variable to handle <mark> dark mode bg color

    ☕️ JavaScript

    • #38989: Collapse: Fix multiple ids calls
    • #39046: Dropdown: reuse variable

    📖 Docs

    • #38873: Discord reddit bootstrap
    • #38970: docs: add BootstrapVueNext to docs
    • #38977: Docs: Add missing form elements in focusable elements
    • #38978: Docs: Fix popover template role error
    • #38995: introduction: drop details element
    • #39037: Further improve image compression with oxipng and the latest jpegoptim
    • #39054: Docs: Remove incorrect mention of .left- and .right- utilities from migration guide
    • #39060: Migration: add back v5.0.0 heading
    • #39145: Docs: add warning callout to add a workaround when jsDelivr is not available
    • #39177: Fix: make theme selector tick icon visible when active in examples layout
    • #39179: download: Reword CDN paragraph

    🛠 Examples

    • #38994: examples: update 3rd-party packages
    • #39086: Correct grammar error in examples/starter-template

    🌎 Accessibility

    • #38978: Docs: Fix popover template role error
    • #39095: Make form range track background more contrasted

    🧰 Misc

    • #38983: Improve change-version script
    • #38984: Convert build scripts to ESM
    • #39021: CI: update permissions for calibreapp-image-actions.yml

    📦 Dependencies

  • 5.3.1 - 2023-07-26 Read more
from bootstrap GitHub release notes
Commit messages
Package name: bootstrap
  • 344e912 Release v5.3.2 (#39173)
  • 317cb2a download: Reword CDN paragraph (#39179)
  • 8df9899 Fix: make theme selector tick icon visible when active in examples layout (#39177)
  • 256ad91 README.md: remove BrowserStack badge (#39180)
  • 8816177 Update devDependencies (#39174)
  • 52edf18 Build(deps): Bump actions/checkout from 3 to 4 (#39148)
  • 9900cf3 Fix collapse multiple ids target (#38989)
  • d1d49ff New `$btn-link-focus-shadow-rgb` for color modes customisation (#39119)
  • bde23ae Allow `<mark>` colors customization for color modes (#39141)
  • bb10c99 Add defensive CSS to handle form check input in fleboxes (#38955)
  • 86672f4 Fix table state rendering for color modes (#39033)
  • 4724e7a Make form range track background more contrasted (#39095)
  • 4bf483b Docs: add Discord (community) and Bootstrap subreddit links (#38873)
  • fca9c82 Docs: add alternative CDNs section in Getting Started > Download (#39145)
  • d07d3a6 Fix dart-sass deprecation warning (#39030)
  • 413894d Build(deps-dev): Bump hugo-bin from 0.113.0 to 0.114.2 (#39147)
  • fee563d Build(deps): Bump streetsidesoftware/cspell-action from 2 to 3 (#39088)
  • a82a9da Build(deps-dev): Bump @ rollup/plugin-node-resolve from 15.2.0 to 15.2.1 (#39090)
  • 8b44888 Build(deps-dev): Bump rollup from 3.28.0 to 3.28.1 (#39089)
  • dc040fa Corrected a grammer error in by adding the word go to examples/starter-template (#39086)
  • e3553ae Update devDependencies (#39083)
  • 6091dba Remove incorrect mention of .left utilities from migration guide (#39054)
  • 18a400a Further improve image compression with oxipng and the latest jpegoptim (#39037)
  • 47da803 Migration: add back v5.0.0 heading (#39060)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

amadib avatar Oct 05 '23 15:10 amadib

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

:white_check_mark: fpmc1
:x: snyk-bot
You have signed the CLA already but the status is still pending? Let us recheck it.

CLAassistant avatar Oct 05 '23 15:10 CLAassistant

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

sonarqubecloud[bot] avatar Oct 05 '23 15:10 sonarqubecloud[bot]