Skip to content
This repository has been archived by the owner on Apr 21, 2020. It is now read-only.

[Snyk] Upgrade bootstrap from 4.1.3 to 4.3.1 #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk have raised this PR to upgrade bootstrap from 4.1.3 to 4.3.1.

  • The recommended version is 5 minor versions ahead of your current version.
  • The recommended version was released 6 months ago, on 2019-02-13.

The recommended version fixes:

Severity Title Issue ID
Cross-site Scripting (XSS) SNYK-JS-BOOTSTRAP-173700
Release notes
  • 4.3.1 - 2019-02-13
    • Security: Fixed an XSS vulnerability (CVE-2019-8331) in our tooltip and popover plugins by implementing a new HTML sanitizer
    • Fixed a small issue with our RFS (responsive font sizes) mixins
  • 4.3.0 - 2019-02-11

    Highlights

    • New: Added .stretched-link utility to make any anchor the size of it's nearest position: relative parent, perfect for entirely clickable cards!
    • New: Added .text-break utility for applying word-break: break-word
    • New: Added .rounded-sm and .rounded-lg for small and large border-radius.
    • New: Added .modal-dialog-scrollable modifier class for scrolling content within a modal.
    • New: Added responsive .list-group-horizontal modifier classes for displaying list groups as a horizontal row.
    • Improved: Reduced our compiled CSS by using null for variables that by default inherit their values from other elements (e.g., $headings-color was inherit and is now null until you modifier it in your custom CSS).
    • Improved: Badge focus styles now match their background-color like our buttons.
    • Fixed: Silenced bad selectors in our JS plugins for the href HTML attribute to avoid JavaScript errors. Please try to use valid selectors or the data-target HTML attribute/target option where available.
    • Fixed: Reverted v4.2.1's change to the breakpoint and grid container Sass maps that blocked folks from upgrading when modifying those default variables.
    • Fixed: Restored white-space: nowrap to .dropdown-toggle (before v4.2.1 it was on all .btns) so carets don't wrap to new lines.
    • Deprecated: img-retina, invisible, float, and size mixins are now deprecated and will be removed in v5.

    Links

  • 4.2.1 - 2018-12-21

    Bump to v4.2.1 to republish package on npm. See v4.2.0 release notes for changes introduced in v4.2.

  • 4.1.3 - 2018-07-24
    • Fixed: Removed the :not(:root) selector from our svg Reboot styles, resolving an issue that caused all inline SVGs ignore vertical-align styles via single class due to higher specificity.
    • Fixed: Moved the browserslist config from our package.json to a separate file to avoid unintended inherited browser settings across npm projects.
    • Fixed: Buttons in custom file inputs are once again clickable when focused.
    • Improved: Bootstrap's plugins can now be imported separately in any contexts because they are now UMD ready.
    • Improved: .form-controls now have a fixed height to compensate for differences in computed height across different types. This also fixes some IE alignment issues.
    • Improved: Added Noto Color Emoji to our system font stack for better rendering in Linux OSes.

from bootstrap GitHub Release Notes


馃 View latest project report

馃洜 Adjust upgrade PR settings

馃敃 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant