[Snyk] Upgrade: dayjs, element-plus, pinia, swiper #5
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- dayjs from 1.11.3 to 1.11.12.
See this package in npm: https://www.npmjs.com/package/dayjs
- element-plus from 2.2.9 to 2.8.0.
See this package in npm: https://www.npmjs.com/package/element-plus
- pinia from 2.0.14 to 2.2.2.
See this package in npm: https://www.npmjs.com/package/pinia
- swiper from 6.8.1 to 6.8.4.
See this package in npm: https://www.npmjs.com/package/swiper
See this project in Snyk:
https://app.snyk.io/org/lcf262412/project/04cd56e0-0737-400b-b8f0-b641458bcdaa?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
dayjs
from 1.11.3 to 1.11.12 | 9 versions ahead of your current version | 2 months ago
on 2024-07-18
element-plus
from 2.2.9 to 2.8.0 | 66 versions ahead of your current version | a month ago
on 2024-08-09
pinia
from 2.0.14 to 2.2.2 | 34 versions ahead of your current version | 25 days ago
on 2024-08-15
swiper
from 6.8.1 to 6.8.4 | 3 versions ahead of your current version | 3 years ago
on 2021-08-23
Issues fixed by the recommended upgrade:
SNYK-JS-POSTCSS-5926692
Release notes
Package name: dayjs
-
1.11.12 - 2024-07-18
- Add NegativeYear Plugin support (#2640) (6a42e0d)
- add UTC support to negativeYear plugin (#2692) (f3ef705)
- Fix zero offset issue when use tz with locale (#2532) (d0e6738)
- Improve typing for min/max plugin (#2573) (4fbe94a)
- timezone plugin currect parse UTC tz (#2693) (b575c81)
-
1.11.11 - 2024-04-28
- day of week type literal (#2630) (f68d73e)
- improve locale "zh-hk" format and meridiem (#2419) (a947a51)
- Update 'da' locale to match correct first week of year (#2592) (44b0936)
- update locale Bulgarian monthsShort Jan (#2538) (f0c9a41)
-
1.11.10 - 2023-09-19
- Add Korean Day of Month with ordinal (#2395) (dd55ee2)
- change back fa locale to the Gregorian calendar equivalent (#2411) (95e9458)
- duration plugin - MILLISECONDS_A_MONTH const calculation (#2362) (f0a0b54)
- duration plugin getter get result 0 instead of undefined (#2369) (061aa7e)
- fix isDayjs check logic (#2383) (5f3f878)
- fix timezone plugin to get correct locale setting (#2420) (4f45012)
- locale: add meridiem in
- round durations to millisecond precision for ISO string (#2367) (890a17a)
- sub-second precisions need to be rounded at the seconds field to avoid adding floats (#2377) (a9d7d03)
- update $x logic to avoid plugin error (#2429) (2254635)
- Update Slovenian locale for relative time (#2396) (5470a15)
- update uzbek language translation (#2327) (0a91056)
-
1.11.9 - 2023-07-01
- Add null to min and max plugin return type (#2355) (62d9042)
- check if null passed to objectSupport parser (#2175) (013968f)
- dayjs.diff improve performance (#2244) (33c80e1)
- dayjs(null) throws error, not return dayjs object as invalid date (#2334) (c79e2f5)
- objectSupport plugin causes an error when null is passed to dayjs function (closes #2277) (#2342) (89bf31c)
- Optimize format method (#2313) (1fe1b1d)
- update Duration plugin add/subtract take into account days in month (#2337) (3b1060f)
- update MinMax plugin 1. ignore the 'null' in args 2. return the only one arg (#2330) (3c2c6ee)
-
1.11.8 - 2023-06-02
- .format add padding to 'YYYY' (#2231) (00c223b)
- Added .valueOf method to Duration class (#2226) (9b4fcfd)
- timezone type mark
- type file first parameter date is optional in isSame(), isBefore(), isAfter() (#2272) (4d56f3e)
-
1.11.7 - 2022-12-06
- Add locale (zh-tw) meridiem (#2149) (1e9ba76)
- update fa locale (#2151) (1c26732)
-
1.11.6 - 2022-10-21
- add BigIntSupport plugin (#2087) (f6dce48)
- Fix objectSupport collides with Duration plugin - issue #2027 (#2038) (c9370ea)
-
1.11.5 - 2022-08-12
- ordinal for nl not working (#2011) (c93c85e)
- wrong ordinal for french locale (#2010) (dd192a7)
-
1.11.4 - 2022-07-19
- correct past property in ku (kurdish) locale (#1916) (74e82b9)
- fix French [fr] local ordinal (#1932) (8f09834)
- fix objectSupport plugin ConfigTypeMap type (#1441) (#1990) (fd51fe4)
- fix type error to add ordianl property in InstanceLocaleDataReturn and GlobalLocaleDataReturn types (#1931) (526f0ae)
- update locale ar-* meridiem function (#1954) (3d31611)
- zh-tw / zh-hk locale ordinal error (#1976) (0a1bd08)
-
1.11.3 - 2022-06-06
- customParseFormat plugin to parse comma as a separator character (#1913) (41b1405)
- update Dutch [nl] locale ordinal (#1908) (5da98f8)
from dayjs GitHub release notes1.11.12 (2024-07-18)
Bug Fixes
1.11.11 (2024-04-28)
Bug Fixes
1.11.10 (2023-09-19)
Bug Fixes
arlocale (#2418) (361be5c)1.11.9 (2023-07-01)
Bug Fixes
1.11.8 (2023-06-02)
Bug Fixes
dateparameter as optional (#2222) (b87aa0e)1.11.7 (2022-12-06)
Bug Fixes
1.11.6 (2022-10-21)
Bug Fixes
1.11.5 (2022-08-12)
Bug Fixes
1.11.4 (2022-07-19)
Bug Fixes
1.11.3 (2022-06-06)
Bug Fixes
Package name: element-plus
2.8.0
2024-08-09
Features
Components [color-picker] alpha-slider a11y (#14245 by @ tolking)
Add mention component (#17586 by @ Fuphoenixes)
Components [tree-v2] add scrollTo method (#14050 by @ kaine0923)
Components [drawer] add append-to (#17761 by @ tolking)
Components [table] tree children add check strictly (#13519 by @ tiandaoyi)
Hooks use-draggable support resetPostion (#17699 by @ donga-gao)
Components [upload] added index parameter to default slot (#17143 by @ zhuchaoling)
Components [date-picker] add type yearrange for DatePicker (#14804 by @ CherishTheYouth)
Components [date-picker] add icon slots (#17453 by @ zhixiaotong)
Bug fixes
Build-utils ignore the effects of directories when exclude files (#17654 by @ tolking)
Components [select] exceeding the limit will still trigger update (#17685 by @ btea)
Components [slider] set slider precision (#15328 by @ heappynd)
Components [table] cover more edge cases for
show-overflow-tooltip(#17629 by @ makedopamine)Components [table] fix sorting issue in table-column (#17608 by @ xixiIBN5100)
Components [scrollbar] restore scroll position in onActivated hook (#11363 by @ makedopamine)
Components [table] inaccurate type of
toggleRowSelection(#17687 by @ makedopamine)Components [slider] data anomaly when the input value is undefined (#15402 by @ betavs)
Components [tabs] optimize SSR (#15183 by @ makedopamine)
Style [radio] marginRight 30px same as checkbox (#15260 by @ taojunnan)
Components [select-v2] corrent focus to input when select clicked (#17362 by @ wzc520pyfm)
Components[tabs] reactive objects may lose reactivity in label slot (#14135 by @ makedopamine)
Theme-chalk [tabs] padding is incorrect while hovering on
border-card-shaped tab (#17694 by @ makedopamine)Components [image] cannot trigger event when image is loaded error (#17692 by @ zhixiaotong)
Components [abort popper] fix effect type error (#17758 by @ wzc520pyfm)
Components [date-picker] fix user input error in monthrange (#12943 by @ mdoi2)
Components [slider] click on marks is inaccurately positioned (#15332 by @ heappynd)
Components [date-picker] clear button repeatedly triggers update:model-value (#17274 by @ CherishTheYouth)
Components SSR hydration error caused by disabled prop of teleport (#17551 by @ tolking)
Components [drawer] fix low animation fps without graphics acceleration (#17696 by @ qianjiachun)
I18n Compared with traditional Chinese, add simplified Chinese … (#17737 by @ WangYJEE)
I18n zh-cn lang typo (#17768 by @ warmthsea)
Components [tree] check isLeaf using lazy and default-expand-all (#17585 by @ gaoxuan-haxibiao)
Components add class name and disable style when disabling upload (#17753 by @ ma-shuo)
Components [select] with teleported="false" dropdown closes abnormally (#17548 by @ Aaron-zon)
Components [select] equal objects cannot destroy instances (#17214 by @ dddssw)
Components [radio] change not trigger (#17047 by @ VENI-VIDIVICI)
Components [upload] remove file when fileList does not use v-model (#16715 by @ Liao-js)
Components [statistic] fix excessive decimals when value is NAN (#17798 by @ dadaguai-git)
Components fixed add listeners not remove on beforeunmount (#17344 by @ myronliu347)
Components [date-picker] slot not take effect when type is month (#17748 by @ btea)
Components [date-picker] Return to normal when reopened (#11802 by @ lyric-zemin)
Components [dialog] appendTo type error (#17814 by @ zhixiaotong)
Refactors
Hooks rewrite composition as a composable function (#14240 by @ tolking)
Components [slider]optimize ts types (#17292 by @ tyj-321)
Components [image-viewer] optimise translate calc method (#13157 by @ zwgwf)
Components [select] cancel type conversion at initialization (#17606 by @ tolking)
Hooks determine the focus by event listening (#17719 by @ tolking)
Improvement(components): @ touchstart @ touchmove @ wheel add passive (#16741 by @ warmthsea)
Perf(hooks): replace the ref object with a plain object (#15061 by @ Polaris-tl)
2.7.8
2024-07-26
Features
typeaddmonthsparams (#17342 by @ Panzer-Jack)filter-iconslot (#17272 by @ btea)activeIndex(#17650 by @ warmthsea)Bug fixes