lattice [Snyk] Upgrade mapbox-gl from 1.5.0 to 1.12.0

[Snyk] Upgrade mapbox-gl from 1.5.0 to 1.12.0

Open snyk-bot opened this issue 4 years ago • 0 comments

Snyk has created this PR to upgrade mapbox-gl from 1.5.0 to 1.12.0.

merge advice

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 22 versions ahead of your current version.
The recommended version was released a month ago, on 2020-08-12.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-MINIMIST-559764	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mapbox-gl

1.12.0 - 2020-08-12
✨ Features and improvements
- Add methods for changing a vector tile source dynamically (e.g. setTiles, setUrl). #8048 (h/t @stepankuzmin)
- Add a filter option for GeoJSON sources to filter out features prior to processing (e.g. before clustering). #9864
- Vastly increase precision of line-gradient for long lines. #9694
- Improve raster-dem sources to properly support the maxzoom option and overzooming. #9789 (h/t @brendan-ward)
🐞 Bug fixes
- Fix a bug where bearing snap interfered with easeTo and flyTo animations, freezing the map. #9884 (h/t @andycalder)
- Fix a bug where a fallback image was not used if it was added via addImage. #9911 (h/t @francois2metz)
- Fix a bug where promoteId option failed for fill extrusions with defined feature ids. #9863
🛠️ Workflow
- Renamed the default development branch from master to main.
⚠️ Note on IE11

We intend to remove support for Internet Explorer 11 in a future release of GL JS later this year. Watch this repository for more information on how to prepare your codebase for this change.
1.12.0-beta.1 - 2020-08-06No content.
1.11.1 - 2020-07-07
🐞 Bug fixes
- Fix a bug that caused map.loaded() to incorrectly return false after a click event. (#9825)
1.11.0 - 2020-06-10
✨ Features and improvements
- Add an option to scale the default Marker icon.(#9414) (h/t adrianababakanian)
- Improving the shader compilation speed by manually getting the run-time attributes and uniforms.(#9497)
- Added clusterMinPoints option for clustered GeoJSON sources that defines the minimum number of points to form a cluster.(#9748)
🐞 Bug fixes
- Fix a bug where map got stuck in a DragRotate interaction if it's mouseup occurred outside of the browser window or iframe.(#9512)
- Fix potential visual regression for *-pattern properties on AMD graphics card vendor.(#9681)
- Fix zooming with a double tap on iOS Safari 13.(#9757)
- Removed a misleading geometry exceeds allowed extent warning when using Mapbox Streets vector tiles.(#9753)
- Fix reference error when requiring the browser bundle in Node. (#9749)
1.11.0-beta.1 - 2020-05-29
Release Erie Changelog (#9730)

* first draft of the changelog

* PR comments
1.10.2 - 2020-06-10
🐞 Bug fixes
- Fix zooming with a double tap in iOS Safari 13 (#9757)
1.10.1 - 2020-05-15
1.10.1

🐞 Bug fixes
- Fix markers interrupting touch gestures (#9675, fixed by #9683)
- Fix bug where map.isMoving() returned true while map was not moving (#9647, fixed by #9679)
- Fix regression that prevented touchmove events from firing during gestures (#9676, fixed by #9685)
- Fix image expression evaluation which was broken under certain conditions (#9630, fixed by #9685)
- Fix nested within expressions in filters not evaluating correctly (#9605, fixed by #9611)
- Fix potential undefined paint variable in StyleLayer (#9688) (h/t mannnick24)
1.10.0 - 2020-04-27
1.10.0-beta.1 - 2020-04-13
1.9.1 - 2020-04-03
1.9.0 - 2020-03-23
1.9.0-beta.1 - 2020-03-12
1.8.1 - 2020-02-26
1.8.0 - 2020-02-20
1.8.0-beta.1 - 2020-02-13
1.7.0 - 2020-01-27
1.7.0-beta.1 - 2020-01-17
1.6.1 - 2019-12-19
1.6.0 - 2019-12-04
1.6.0-beta.1 - 2019-11-28
1.5.1 - 2019-11-27
1.5.1-beta - 2019-11-22
1.5.0 - 2019-10-25

from mapbox-gl GitHub release notes

Commit messages

Package name: mapbox-gl

520a4ca v1.12.0 (#9926)
293294d update changelog, versions & lockfile for v1.12.0-beta.1 (#9916)
ab7dae3 Add a filter option for GeoJSON sources (#9864)
199a0d8 fix(touchmove): only call preventDefault when valid minTouches (#9852)
ebb80aa Prevent bearing snap on map.stop() (#9884)
a85e997 Update the worker images once an image is added or removed + Render tests (#9911)
ce6a2a3 Fix typo in event.js documentation (#9909)
a40a3a7 gl v4.5.3 may make installation easier for Windows (corrected - added yarn.lock deleted unnecessary) (#9906)
320299c Clarification in clusterMaxZoom documentation (#9899)
9adc859 Remove dead code from scroll_zoom.js (#9895)
859f6cf Fix setRotationAlignment link (#9892)
ad0df6d minor update to style.js (#9886)
16211e8 Remove unused clearTimeout() from camera.js (#9870)
fc7ac01 Fix multiple layer sharing the same source (#9834)
ed27d23 add support for dynamic vector tiles rendering #3709 (#8048)
25afccb fix precedence of promoteId over feature id in fill extrusions (#9863)
1e9b41d Update the changelog in master branch. (#9860)
40ab533 updating the sdk-support table for "volatile" source option (#9846)
e2bf203 Resolving the Studio blocker (#9825)
df23295 [render tests] Add single-dasharray-element render test (#9827)
8d9b1b7 Fixed fill-pattern-test allow threshold
e06be5b [docs] Add `sdk-support` table for `volatile` source option
fef85a7 Update "volatile" source property description
e7b7b80 [doc] Document `volatile` source property