[Snyk] Upgrade bootstrap from 4.4.1 to 4.6.0 #4
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade bootstrap from 4.4.1 to 4.6.0. See this package in npm: https://www.npmjs.com/package/bootstrap See this project in Snyk: https://app.snyk.io/org/wauph/project/d2e33c69-5e8d-4162-b456-fb512df7bbfb?utm_source=github&utm_medium=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade bootstrap from 4.4.1 to 4.6.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: bootstrap
-
4.6.0 - 2021-01-19
- Tooltips and popovers can have custom clases via
- Added new
- For improved accessibiliy, spinners now slow down when
- v4.x docs are now built on Hugo for easier maintenance and backports from v5.x.
- Darkened
- Improved alignment of form validation tooltips.
- File inputs no longer extend beyond their containers.
- #31557: Fix form validation tooltip alignment
- #31657: Handle the Ubuntu sans-serif case
- #31700: Suppress flexbox side effects in breadcrumb
- #31882: Slow down spinners when prefers-reduced-motion
- #31886: Fixed: Undefined mixin "deprecate" when importing "bootstrap-grid-scss"
- #32141: Use correct value order
- #32145: Avoid invisible real file input "spilling" out of container
- #32160: Add overflow suppression to custom file label
- #32211: Move negative margin-bottom from .nav-item to .nav-link
- #32212: Remove needless Stylelint disables
- #32833: Add
- Add two new variables for pagination border-radius values; backport of #32423
- Remove old/unnecessary reboot bug fix; backport of #32631
- Suppress focus outline for buttons when it shouldn't be visible in Chromium; backport of #32689
- Consistently use
- Darken dropdown item hover style; backport of #32754
- Lighten disabled dropdown text to
- #31820: Check for data-interval on the first slide of carousel
- #31834/#32225: tooltip/popover: add a
- #32001: Move
- #32045: tests: fix sanitizer test
- #32220: Don't hide modal when
- #32312: build-plugins: switch to "bundled" for babel helpers
- #31861: Split up dropdown sizing docs to improve rendering
- #31892: Remove redundant visually hidden "(current)" from pagination controls
- #31893: manifest.json: Switch to relative URLs so that we don't need to change the path with every major/minor release
- #31898: switch to suggesting jsDelivr as a CDN
- #31904:
- docs(forms): use a legend for fieldset instead of aria-label
- docs(forms): fix incorrect legend nesting in fieldset
- #31936: forms: change inline custom radio name
- #31951: Update anchor-js to v4.3.0
- #31960: Explicitly mention emoji fonts, tweak sentence in typography
- #31981: list-group.md: fix snippet
- #32005: Remove
- #32015: Fix redirects
- #32050: Make docs anchorjs links darker on keyboard focus
- #32054: Add callouts about using light colors ideally on a dark background
- #32077: Switch to Hugo
- #32083: mention "Liberation Sans"
- #32087: download.md: link to JS files comparison too
- #32094: Changes to navbar documentation/explanation
- #32106: Clarify JS bundle docs once more for v4
- #32137: input-group.md: fix wrong class
- #32138: navbar.md: remove
- #32147: Fix caniuse.com redirects
- #32151: Mention user-select-all support in docs
- #32196: homepage: split snippets and show copy buttons
- #32203: Switch to jsDelivr for the remaining docs assets
- #32223: introduction: split comments
- #32247: Fix typos in tooltip/popover docs
- #32253: Add Russian translation
- #32363: Remove useless
- #32399: Remove duplicated "follow Bootstrap on Twitter" link in Community section
- #32457: Add mention of the bs-custom-file-input plugin needed for the custom file input
- #32461: style clipboard button on
- #32462: Replace Lorem Ipsum placeholder text with more representative (or at least english language) text
- #32634: Remove incorrect mention of dropdowns for dynamic tab behavior
- #32639: v4: Add an actual
- #32728: add v5.0 in versions
- #32761: Mention stretched-link constraints with table elements
- #32789: Remove
- #32791: Docs v4: Sass implementation and rounding precision
- #32809:
- Clarify Sass import and customize docs for how to modify variable defaults
- Add an npm starter project callout to a few pages
- #32827: Add a live toast example to the docs
- #32759: Mention CSP and embedded SVGs in v4 docs
- docs(dropdowns): clarify where is
- Require
- Fix mobile menu jump & double border
- Remove double spaces from homepage SVGs
- browserconfig.xml: switch to relative image path
- Tweak the wording for collapse to indicate button is preferred/more semantic; backport of #32632
- Clarify the
- #31979: v4 Examples/Floating-labels: fix bad behavior with autofill
- #32198: examples: add the version number in
- #29753: Improve build/generate-sri.js regex
- #32003: CI: switch to Node.js 14
- #32008: Update Edge's Rendering Engine on CONTRIBUTING.md
- #32486: BrowserStack: test on macOS Catalina instead of High Sierra
- #32756: Stylelint: disallow some property values
- Fix for npm 7.x package.json: move
- Update build-examples script so that the resulting examples zip file includes only the needed files
- Various CI tweaks
- Updated devDependencies
-
4.5.3 - 2020-10-13
- #31653: Add a comment to our
- #31693: Use the
- #31793: Backport some v5 changes (improved
- #29714: Keep custom check, radio, and switch theme when printing.
- #30781: Reboot's
- #30932:
- #31754: Improve versions page rendering (also reversed the order while I was here)
- #31846: Backports the z-index change to
- #31000: Avoid multiple change event trigger in buttons plugin. Not applicable to v5 since our button JS plugin has been mostly replaced with pure CSS.
- #31673: Fix dropdown variable always evaluating to true.
- #31696: Ensure
- #31718: Backports new
- #30811: Mention GPU acceleration fix in docs callout for popovers. Doesn't apply to v5 since we're updating to Popper v2.
- #30838: Explain the
- #31706: Backports updated margins for code snippets for improved readability.
- #31769: Backports JS bundle guidance from v5.
- #31851: Backports mention of missing
- #31297: Switch to xo ESLint config
- Updated devDependencies versions
-
4.5.2 - 2020-08-06
- #31438 restores the
- #31439 removes
-
4.5.1 - 2020-08-04
-
4.5.0 - 2020-05-12
-
4.4.1 - 2019-11-28
from bootstrap GitHub release notesHighlights
customClassoption..navbar-nav-scrollclass for scrolling expanded navbar contents on mobile devices.prefers-reduced-motionis enabled.background-colorof.dropdown-itemfor improved hover state contrast, and ligthened the disabled.dropdown-itemcolor.CSS
.navbar-nav-scrollfor vertical scrolling of navbar contentoutline:0rather thanoutline:none; backport of #32751$gray-500JS
customClassoptionjs/src/index.jsone folder upconfig.keyboardis falseDocs
bugreport.apple.comsince it doesn't work.visually-hiddenloading=lazyfrom snippets.text-leftin Layout / Overview:focus, not just:hoverdata-touch="false"example in the carousel docsrole="button"from CTA links in carousel example.showapplied.has-validationfor input groups with validation$enable-shadowsoption in our docs; backport of #32685Examples
titleMisc
version_shortvariable under theconfigobject; backport of #32737CSS
escape-svgfunction to note that data URIs must be quoted.custom-controlshadow variable instead of the genericinput-focus-box-shadow.thstyling in Reboot, custom form field styling when printing, and improvements to.text-break).thupdates: Inheritfont-weight: boldthat comes from user agent stylesheets..text-breakchanges to dropoverflow-wrapand useword-wraponce again.closebuttons in dismissible.alerts.JS
hidePrevented.bs.modalcan be prevented.$dropdown-padding-xvariable from v5.Docs
disposemethod more appropriately.toandnextwhenvisiblemethods.Misc
This release addresses the following two issues:
make-container-max-widthsmixin. We won't be using the mixin ourselves, but it will remain in the codebase for the rest of v4 with today's release. We've added a deprecation notice as well.flex: 1 0 100%from.rows. This was added to address shrinking rows inside the navbar component after our responsive containers were added in v4.4.0. Removing this rolls us back to the expected grid and flex behavior—your row will shrink unfortunately without further changes. We could add extra custom CSS to address this, but it seems shortsighted to rush into that. Instead, apply.flex-fillto the.rowand your row will behave as usual.Read more
Read more
Read more
Commit messages
Package name: bootstrap
66ff408to6caf299dotnet/aspnetcore#327994e4df22to662fe38dotnet/aspnetcore#32796)f5e592dto662fe38dotnet/aspnetcore#32795 (Problem PresentationFramework in Blazor dll dotnet/aspnetcore#32809)Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs