New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Snyk] Upgrade jsdom from 16.4.0 to 16.5.3 #85
Conversation
Snyk has created this PR to upgrade jsdom from 16.4.0 to 16.5.3. See this package in npm: https://www.npmjs.com/package/jsdom See this project in Snyk: https://app.snyk.io/org/kadirselcuk/project/4fe2ed8c-f863-46e0-be1f-94733a8d11a3?utm_source=github&utm_medium=upgrade-pr
Thanks for your submission. It appears that you've created a pull request using one of our repository's branches. Since this is Thanks again! |
*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the Files checked:
What is this?Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a Visit our website to learn more. Commands
TroubleshootingNeed help? Don't hesitate to file an issue in our repository Configuration {
"isLazy": false,
"dockerComposeYmlFilePaths": [
"docker-compose.yml"
],
"expiry": "00:00:00",
"conversationMode": "singleComment"
} Trace ID |
Mode: paranoid | Total findings: 503 | Considered vulnerability: 0 Hard-Coded Secrets (375)
This comment has been truncated due to comment length limitations, please go to the dashboard for further details. 👉 Go to the dashboard for detailed results. 📥 Happy? Share your feedback with us. |
Snyk has created this PR to upgrade jsdom from 16.4.0 to 16.5.3.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: jsdom
MutationObserver
s to observe elements inside aMutationObserver
callback.Access-Control-Allow-Headers: *
to work withXMLHttpRequest
. (silviot)xhr.response
to strip any leading BOM whenxhr.responseType
is"json"
.new Text()
andnew Comment()
constructors to properly set the resulting node'sownerDocument
.customElements.whenDefined()
to resolve its returned promise with the custom element constructor, per recent spec updates. (ExE-Boss)<svg><template></template></svg>
does not throw an exception, but instead correctly produces a SVG-namespace<template>
element.domParser.parseFromString()
to treat<noscript>
elements appropriately.<form>
element and instead associated using theform=""
attribute.legendEl.form
to return the correct result based on its parent<fieldset>
.optionEl.text
to exclude<script>
descendants.input
andchange
events when disconnected.inputEl.indeterminate
to reset to its previous value when canceling aclick
event on a checkbox or radio button.onclick="...code..."
) when there were global variables namedelement
orformOwner
. (ExE-Boss)WeakRef
s are available, fixedNodeIterator
to no longer stop working when more than tenNodeIterator
instances are created, and to use less memory due to inactiveNodeIterator
s sticking around. (ExE-Boss)customElements.get()
in v16.5.0. (fdesforges)window.event
to have a setter which overwrites thewindow.event
property with the given value, per the specification. This fixes an issue where after upgrading to jsdom v16.5.0 you would no longer be able to set a global variable namedevent
in the jsdom context.window.queueMicrotask()
.window.event
.inputEvent.inputType
. (diegohaz)ondragexit
fromWindow
and friends, per a spec update.about:blank
iframes. Previously it was getting set to the parent's URL. (SimonMueller)hidden=""
attribute to causedisplay: none
per the user-agent stylesheet. (ph-fritsche)new File()
constructor to no longer convert/
to:
, per a pending spec update.MutationObserver
instance as theirthis
value.<input type=checkbox>
and<input type=radio>
to be mutable even when disabled, per a spec update.XMLHttpRequest
to not fire a redundant finalprogress
event if aprogress
event was previously fired with the sameloaded
value. This would usually occur with small files.XMLHttpRequest
to expose theContent-Length
header on cross-origin responses.xhr.response
to returnnull
for failures that occur during the middle of the download.localStorage
ordataset
. (ExE-Boss)getComputedStyle()
, unless you pass a::part
or::slotted
pseudo-element, in which case we throw an error per the spec. (ExE-Boss)el.tagName
, which also indirectly improves performance of selector matching and style computation. (eps1lon)form.elements
to respect theform=""
attribute, so that it can contain non-descendant form controls. (ccwebdesign)el.focus()
to do nothing on disconnected elements. (eps1lon)el.focus()
to work on SVG elements. (zjffun)<body>
element. (eps1lon)imgEl.complete
to return true for<img>
elements with empty or unsetsrc=""
attributes. (strager)imgEl.complete
to return true if an error occurs loading the<img>
, when canvas is enabled. (strager)imgEl.complete
to return false if the<img>
element'ssrc=""
attribute is reset. (strager)valueMissing
validation check for<input type="radio">
. (zjffun)translate=""
anddraggable=""
attribute processing to use ASCII case-insensitivity, instead of Unicode case-insensitivity. (zjffun)Commit messages
Package name: jsdom
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs