[Snyk] Upgrade: , classnames, core-js, dompurify, marked, mobx, mobx-react, openapi-sampler, polished, prismjs, prop-types, slugify, swagger2openapi #43

WontonSam · 2024-09-15T05:05:01Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@redocly/openapi-core
from 1.0.0-rc.2 to 1.21.0 | 41 versions ahead of your current version | 23 days ago
on 2024-08-23
classnames
from 2.3.1 to 2.5.1 | 5 versions ahead of your current version | 9 months ago
on 2023-12-29
core-js
from 3.14.0 to 3.38.1 | 78 versions ahead of your current version | a month ago
on 2024-08-20
dompurify
from 2.2.9 to 2.5.6 | 30 versions ahead of your current version | 2 months ago
on 2024-07-05
marked
from 4.0.15 to 4.3.0 | 20 versions ahead of your current version | a year ago
on 2023-03-22
mobx
from 6.3.2 to 6.13.1 | 34 versions ahead of your current version | 2 months ago
on 2024-07-18
mobx-react
from 7.2.0 to 7.6.0 | 8 versions ahead of your current version | 2 years ago
on 2022-11-14
openapi-sampler
from 1.3.1 to 1.5.1 | 3 versions ahead of your current version | 4 months ago
on 2024-05-02
polished
from 4.1.3 to 4.3.1 | 6 versions ahead of your current version | 7 months ago
on 2024-02-01
prismjs
from 1.27.0 to 1.29.0 | 2 versions ahead of your current version | 2 years ago
on 2022-08-23
prop-types
from 15.7.2 to 15.8.1 | 2 versions ahead of your current version | 3 years ago
on 2022-01-05
slugify
from 1.4.7 to 1.6.6 | 11 versions ahead of your current version | a year ago
on 2023-03-26
swagger2openapi
from 7.0.6 to 7.0.8 | 2 versions ahead of your current version | 3 years ago
on 2021-07-07

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Template Injection SNYK-JS-DOMPURIFY-6474511	586	Proof of Concept

Release notes

Package name: @redocly/openapi-core

1.21.0 - 2024-08-23
1.20.1 - 2024-08-22
1.20.0 - 2024-08-21
1.19.0 - 2024-08-01
1.18.1 - 2024-07-22
1.18.0 - 2024-07-12
1.17.1 - 2024-07-04
1.17.0 - 2024-07-01
1.16.0 - 2024-06-18
1.15.0 - 2024-06-11
1.14.0 - 2024-05-29
1.13.0 - 2024-05-23
1.12.2 - 2024-05-09
1.12.1 - 2024-05-09
1.12.0 - 2024-04-25
1.11.0 - 2024-04-04
1.10.6 - 2024-03-26
1.10.5 - 2024-03-19
1.10.4 - 2024-03-14
1.10.3 - 2024-03-04
1.10.2 - 2024-03-04
1.10.1 - 2024-02-29
1.10.0 - 2024-02-29
1.9.1 - 2024-02-20
1.9.0 - 2024-02-13
1.8.2 - 2024-02-01
1.8.1 - 2024-01-29
1.8.0 - 2024-01-26
1.7.0 - 2024-01-23
1.6.0 - 2023-12-21
1.5.0 - 2023-11-29
1.4.1 - 2023-11-15
1.4.0 - 2023-10-26
1.3.0 - 2023-10-19
1.2.1 - 2023-10-18
1.2.0 - 2023-09-18
1.1.0 - 2023-09-14
1.0.2 - 2023-08-07
1.0.1 - 2023-08-07
1.0.0 - 2023-07-25
1.0.0-rc.3 - 2023-07-20
1.0.0-rc.2 - 2023-07-19

from @redocly/openapi-core GitHub release notes

Package name: classnames

2.5.1 - 2023-12-29
Prepare for release of version 2.5.1 (#351)
2.5.0 - 2023-12-28
Prepare for release of version 2.5.0 (#344)
2.4.0 - 2023-12-26
Prepare for release of version 2.4.0 (#338)
2.3.3 - 2023-12-25
Prepare for release of version 2.3.3 (#308)
2.3.2 - 2022-09-13
add missing registry for npm publish (#283)
2.3.1 - 2021-04-02
2.3.1

from classnames GitHub release notes

Package name: core-js

3.38.1 - 2024-08-20
- Changes v3.38.0...v3.38.1
- Fixed some cases of URLSearchParams percent decoding, #1357, #1361, thanks @ slowcheetah
- Some stylistic changes and minor optimizations
- Compat data improvements:
  - Iterator helpers proposal methods marked as shipped from FF131
  - Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from Bun 1.1.23
  - RegExp.escape marked as shipped from Bun 1.1.22
  - Promise.try marked as shipped from Bun 1.1.22
  - Uint8Array to / from base64 and hex proposal methods marked as shipped from Bun 1.1.22
  - Added Hermes 0.13 compat data, similar to React Native 0.75 Hermes
  - Added Opera Android 84 compat data mapping
3.38.0 - 2024-08-04
- Changes v3.37.1...v3.38.0
- RegExp.escape proposal:
  - Built-ins:
    - RegExp.escape
  - Moved to stage 3, June 2024 and July 2024 TC39 meetings
  - Updated the way of escaping, regex-escaping/77
  - Throw an error on non-strings, regex-escaping/58
  - Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
- Promise.try proposal:
  - Built-ins:
    - Promise.try
  - Moved to stage 3, June 2024 TC39 meeting
  - Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
- Uint8Array to / from base64 and hex stage 3 proposal:
  - Built-ins:
    - Uint8Array.fromBase64
    - Uint8Array.fromHex
    - Uint8Array.prototype.setFromBase64
    - Uint8Array.prototype.setFromHex
    - Uint8Array.prototype.toBase64
    - Uint8Array.prototype.toHex
  - Added Uint8Array.prototype.{ setFromBase64, setFromHex } methods
  - Added Uint8Array.fromBase64 and Uint8Array.prototype.setFromBase64 lastChunkHandling option, proposal-arraybuffer-base64/33
  - Added Uint8Array.prototype.toBase64 omitPadding option, proposal-arraybuffer-base64/60
  - Added throwing a TypeError on arrays backed by detached buffers
  - Unconditional forced replacement changed to feature detection
- Fixed RegExp named capture groups polyfill in combination with non-capturing groups, #1352, thanks @ Ulop
- Improved some cases of environment detection
- Uses process.getBuiltinModule for getting built-in NodeJS modules where it's available
- Uses https instead of http in URL constructor feature detection to avoid extra notifications from some overly vigilant security scanners, #1345
- Some minor optimizations
- Updated browserslist in core-js-compat dependencies that fixes an upstream issue with incorrect interpretation of some browserslist queries, #1344, browserslist/829, browserslist/836
- Compat data improvements:
  - Added Safari 18.0 compat data:
  - Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from FF129
  - Symbol.asyncDispose added and marked as supported from V8 ~ Chromium 127
  - Promise.try added and marked as supported from V8 ~ Chromium 128
  - Added Deno 1.44 and 1.45 compat data mapping
  - self descriptor is broken in Deno 1.45.3 (again)
  - Added Electron 32 and 33 compat data mapping
  - Added Opera Android 83 compat data mapping
  - Added Samsung Internet 27 compat data mapping
  - Added Oculus Quest Browser 34 compat data mapping
3.37.1 - 2024-05-14
- Changes v3.37.0...v3.37.1
- Fixed URL.parse feature detection for some specific cases
- Compat data improvements:
  - Set methods proposal added and marked as supported from FF 127
  - Symbol.dispose added and marked as supported from V8 ~ Chromium 125
  - Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } added and marked as supported from Deno 1.43
  - URL.parse added and marked as supported from Chromium 126
  - URL.parse added and marked as supported from NodeJS 22.0
  - URL.parse added and marked as supported from Deno 1.43
  - Added Rhino 1.7.15 compat data, many features marked as supported
  - Added NodeJS 22.0 compat data mapping
  - Added Deno 1.43 compat data mapping
  - Added Electron 31 compat data mapping
  - Updated Opera Android 82 compat data mapping
  - Added Samsung Internet 26 compat data mapping
  - Added Oculus Quest Browser 33 compat data mapping
3.37.0 - 2024-04-16
- Changes v3.36.1...v3.37.0
- New Set methods proposal:
  - Built-ins:
    - Set.prototype.intersection
    - Set.prototype.union
    - Set.prototype.difference
    - Set.prototype.symmetricDifference
    - Set.prototype.isSubsetOf
    - Set.prototype.isSupersetOf
    - Set.prototype.isDisjointFrom
  - Moved to stable ES, April 2024 TC39 meeting
  - Added es. namespace modules, /es/ and /stable/ namespaces entries
- Explicit Resource Management stage 3 proposal
  - Some minor updates like explicit-resource-management/217
- Added Math.sumPrecise stage 2.7 proposal:
  - Built-ins:
    - Math.sumPrecise
- Promise.try proposal:
  - Built-ins:
    - Promise.try
  - Added optional arguments support, promise-try/16
  - Moved to stage 2.7, April 2024 TC39 meeting
- RegExp.escape stage 2 proposal:
  - Moved to hex-escape semantics, regex-escaping/67
    - It's not the final change of the way of escaping, waiting for regex-escaping/77 soon
- Pattern matching stage 1 proposal:
  - Built-ins:
    - Symbol.customMatcher
  - Once again, the used well-known symbol was renamed
  - Added new entries for that
- Added Extractors stage 1 proposal:
  - Built-ins:
    - Symbol.customMatcher
  - Since the Symbol.customMatcher well-known symbol from the pattern matching proposal is also used in the exactors proposal, added an entry also for this proposal
- Added URL.parse, url/825
- Engines bugs fixes:
  - Added a fix of Safari { Object, Map }.groupBy bug that does not support iterable primitives
  - Added a fix of Safari bug with double call of constructor in Array.fromAsync
- Compat data improvements:
  - URL.parse added and marked as supported from FF 126
  - URL.parse added and marked as supported from Bun 1.1.4
  - URL.canParse fixed and marked as supported from Bun 1.1.0
  - New Set methods fixed in JavaScriptCore and marked as supported from Bun 1.1.1
  - Added Opera Android 82 compat data mapping
3.36.1 - 2024-03-19
- Changes v3.36.0...v3.36.1
- Fixed some validation cases in Object.setPrototypeOf, #1329, thanks @ minseok-choe
- Fixed the order of validations in Array.from, #1331, thanks @ minseok-choe
- Added a fix of Bun queueMicrotask arity
- Added a fix of Bun URL.canParse arity
- Added a fix of Bun SuppressedError extra arguments support and arity
- Compat data improvements:
  - value argument of URLSearchParams.prototype.{ has, delete } marked as supported from Bun 1.0.31
  - Added React Native 0.74 Hermes compat data, Array.prototype.{ toSpliced, toReversed, with } and atob marked as supported
  - Added Deno 1.41.3 compat data mapping
  - Added Opera Android 81 compat data mapping
  - Added Samsung Internet 25 compat data mapping
  - Added Oculus Quest Browser 32 compat data mapping
  - Updated Electron 30 compat data mapping
3.36.0 - 2024-02-14
- ArrayBuffer.prototype.transfer and friends proposal:
  - Built-ins:
    - ArrayBuffer.prototype.detached
    - ArrayBuffer.prototype.transfer
    - ArrayBuffer.prototype.transferToFixedLength
  - Moved to stable ES, Febrary 2024 TC39 meeting
  - Added es. namespace modules, /es/ and /stable/ namespaces entries
- Uint8Array to / from base64 and hex proposal:
  - Methods:
    - Uint8Array.fromBase64
    - Uint8Array.fromHex
    - Uint8Array.prototype.toBase64
    - Uint8Array.prototype.toHex
  - Moved to stage 3, Febrary 2024 TC39 meeting
  - Added /actual/ namespace entries
  - Skipped adding new methods of writing to existing arrays to clarification some moments
- Promise.try proposal has been resurrected and moved to stage 2, Febrary 2024 TC39 meeting
- Added an entry point for the new TC39 proposals stage - core-js/stage/2.7 - still empty
- Fixed regression in Set.prototype.intersection feature detection
- Fixed a missed check in Array.prototype.{ indexOf, lastIndexOf, includes }, #1325, thanks @ minseok-choe
- Fixed a missed check in Array.prototype.{ reduce, reduceRight }, #1327, thanks @ minseok-choe
- Fixed Array.from and some other methods with proxy targets, #1322, thanks @ minseok-choe
- Fixed dependencies loading for modules from ArrayBuffer.prototype.transfer and friends proposal in some specific cases in IE10-
- Dropped context workaround from collection static methods entries since with current methods semantic it's no longer required
- Added instance methods polyfills to entries of collections static methods that produce collection instances
- Added missed Date.prototype.toJSON to JSON.stringify entries dependencies
- Added debugging info in some missed cases
- Compat data improvements:
  - { Map, Object }.groupBy, Promise.withResolvers, ArrayBuffer.prototype.transfer and friends marked as supported from Safari 17.4
  - New Set methods fixed and marked as supported from V8 ~ Chrome 123
  - Added Deno 1.40 compat data mapping
  - Symbol.metadata marked as supported from Deno 1.40.4
  - Updated Electron 30 compat data mapping
3.35.1 - 2024-01-20
- Fixed internal ToLength operation with bigints, #1318
- Removed significant redundant code from String#split polyfill
- Fixed setting names of methods with symbol keys in some old engines
- Minor fix of prototype methods export logic in the pure version
- Compat data improvements:
  - Iterator helpers proposal methods marked as supported from V8 ~ Chrome 122
  - Note that V8 ~ Chrome 122 add Set methods, but they have a bug similar to Safari
  - self marked as fixed from Bun 1.0.22
  - SuppressedError and Symbol.{ dispose, asyncDispose } marked as supported from Bun 1.0.23
  - Added Oculus Quest Browser 31 compat data mapping
  - Updated Electron 29 and added Electron 30 compat data mapping
3.35.0 - 2023-12-28
- { Map, Set, WeakMap, WeakSet }.{ from, of } became non-generic, following this and some other notes. Now they can be invoked without this, but no longer return subclass instances
- Fixed handling some cases of non-enumerable symbol keys from Symbol polyfill
- Removed unneeded NodeJS domains-related logic from queueMicrotask polyfill
- Fixed subclassing of wrapped ArrayBuffer
- Refactoring, many different minor optimizations
- Compat data improvements:
  - Array.fromAsync marked as supported from V8 ~ Chrome 121
  - It seems that the ancient Array.prototype.push bug is fixed in V8 ~ Chrome 122 (Hallelujah!)
  - ArrayBuffer.prototype.transfer and friends proposal features marked as supported from FF 122 and Bun 1.0.19
  - Object.groupBy and Map.groupBy marked as supported from Bun 1.0.19
  - Since Iterator helpers proposal methods are still not disabled in Deno, the web compatibility issue why it was disabled in Chromium makes no sense for Deno and fixed in the spec, they marked as supported from Deno 1.37
  - Added Opera Android 80 and updated Opera Android 79 compat data mapping
  - Added Samsung Internet 24 compat data mapping
3.34.0 - 2023-12-05
- Array grouping proposal:
  - Methods:
    - Object.groupBy
    - Map.groupBy
  - Moved to stable ES, November 2023 TC39 meeting
  - Added es. namespace modules, /es/ and /stable/ namespaces entries
- Promise.withResolvers proposal:
  - Method:
    - Promise.withResolvers
  - Moved to stable ES, November 2023 TC39 meeting
  - Added es. namespace module, /es/ and /stable/ namespaces entries
- Fixed a web incompatibility issue of Iterator helpers proposal, proposal-iterator-helpers/287 and some following changes, November 2023 TC39 meeting
- Added Uint8Array to / from base64 and hex stage 2 proposal:
  - Methods:
    - Uint8Array.fromBase64
    - Uint8Array.fromHex
    - Uint8Array.prototype.toBase64
    - Uint8Array.prototype.toHex
- Relaxed some specific cases of Number.fromString validation before clarification of proposal-number-fromstring/24
- Fixed @@ toStringTag property descriptors on DOM collections, #1312
- Fixed the order of arguments validation in Array iteration methods, #1313
- Some minor atob / btoa improvements
- Compat data improvements:
  - Promise.withResolvers marked as shipped from FF121
3.33.3 - 2023-11-19
3.33.2 - 2023-10-30
3.33.1 - 2023-10-20
3.33.0 - 2023-10-01
3.32.2 - 2023-09-07
3.32.1 - 2023-08-18
3.32.0 - 2023-07-27
3.31.1 - 2023-07-06
3.31.0 - 2023-06-11
3.30.2 - 2023-05-06
3.30.1 - 2023-04-13
3.30.0 - 2023-04-03
3.29.1 - 2023-03-13
3.29.0 - 2023-02-26
3.28.0 - 2023-02-13
3.27.2 - 2023-01-18
3.27.1 - 2022-12-29
3.27.0 - 2022-12-25
3.26.1 - 2022-11-13
3.26.0 - 2022-10-23
3.25.5 - 2022-10-03
3.25.4 - 2022-10-02
3.25.3 - 2022-09-25
3.25.2 - 2022-09-18
3.25.1 - 2022-09-07
3.25.0 - 2022-08-24
3.24.1 - 2022-07-29
3.24.0 - 2022-07-25
3.23.5 - 2022-07-17
3.23.4 - 2022-07-09
3.23.3 - 2022-06-25
3.23.2 - 2022-06-20
3.23.1 - 2022-06-14
3.23.0 - 2022-06-13
3.22.8 - 2022-06-01
3.22.7 - 2022-05-24
3.22.6 - 2022-05-22
3.22.5 - 2022-05-10
3.22.4 - 2022-05-02
3.22.3 - 2022-04-28
3.22.2 - 2022-04-21
3.22.1 - 2022-04-19
3.22.0 - 2022-04-15
3.21.1 - 2022-02-16
3.21.0 - 2022-02-01
3.20.3 - 2022-01-15
3.20.2 - 2022-01-01
3.20.1 - 2021-12-23
3.20.0 - 2021-12-15
3.19.3 - 2021-12-06
3.19.2 - 2021-11-29
3.19.1 - 2021-11-02
3.19.0 - 2021-10-25
3.18.3 - 2021-10-12
3.18.2 - 2021-10-05
3.18.1 - 2021-09-26
3.18.0 - 2021-09-19
3.17.3 - 2021-09-09
3.17.2 - 2021-09-02
3.17.1 - 2021-09-01
3.17.0 - 2021-09-01
3.16.4 - 2021-08-29
3.16.3 - 2021-08-24
3.16.2 - 2021-08-17
3.16.1 - 2021-08-08
3.16.0 - 2021-07-30
3.15.2 - 2021-06-29
3.15.1 - 2021-06-22
3.15.0 - 2021-06-20
3.14.0 - 2021-06-05

from core-js GitHub release notes

Package name: dompurify

2.5.6 - 2024-07-05
- Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @ kevin-mizu
- Fixed a minor problem with the bower file pointing to the wrong dist path
- Updated several development dependencies
2.5.5 - 2024-05-31
- Fixed a minor issue with the dist paths in bower.js, thanks @ HakumenNC
- Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @ kakao-bishop-cho
2.5.4 - 2024-05-20
- Fixed a bug with latest isNaN checks affecting MSIE, thanks @ tulach
- Fixed the tests for MSIE and fixed related test-runner
2.5.3 - 2024-05-11
- Fixed several mXSS variations found by and thanks to @ kevin-mizu & @ Ry0taK
- Added better configurability for comment scrubbing default behavior
- Added better hardening against Prototype Pollution attacks, thanks @ kevin-mizu
- Fixed some smaller issues in README and other documentation
2.5.2 - 2024-04-30
- Addressed and fixed a mXSS variation found by @ kevin-mizu
- Addressed and fixed a mXSS variation found by Adam Kues of Assetnote
- Updated tests for older Safari and Chrome versions
2.5.1 - 2024-04-26
2.5.0 - 2024-04-07
2.4.9 - 2024-03-21
2.4.8 - 2024-03-19
2.4.7 - 2023-07-11
2.4.6 - 2023-07-10
2.4.5 - 2023-03-01
2.4.4 - 2023-02-13
2.4.3 - 2023-01-06
2.4.2 - 2023-01-05
2.4.1 - 2022-11-10
2.4.0 - 2022-08-24
2.3.12 - 2022-08-23
2.3.11 - 2022-08-23
2.3.10 - 2022-07-18
2.3.9 - 2022-07-11
2.3.8 - 2022-05-13
2.3.7 - 2022-05-11
2.3.6 - 2022-02-16
2.3.5 - 2022-01-26
2.3.4 - 2021-12-07
2.3.3 - 2021-09-20
2.3.2 - 2021-09-15
2.3.1 - 2021-08-13
2.3.0 - 2021-07-06
2.2.9 - 2021-06-01

from dompurify GitHub release notes

Package name: marked

4.3.0 - 2023-03-22
4.3.0 (2023-03-22)

Bug Fixes
- always return promise if async (#2728) (042dcc5)
- fenced code doesn't need a trailing newline (#2756) (3acbb7f)
Features
- add preprocess and postprocess hooks (#2730) (9b452bc)
4.2.12 - 2023-01-14
4.2.12 (2023-01-14)

Sorry for all of the quick releases. We were testing out different ways to build the files for releases. v4.2.5 - v4.2.12 have no changes to how marked works. The only addition is the version number in the comment in the build files.

Bug Fixes
- revert to build script in ci (d2ab474)
4.2.11 - 2023-01-14
4.2.11 (2023-01-14)

Bug Fixes
- just build in version (22ac2cf)
4.2.10 - 2023-01-14
4.2.10 (2023-01-14)

Bug Fixes
- use version (fd759b3)
4.2.9 - 2023-01-14
4.2.9 (2023-01-14)

Bug Fixes
- fix version (96380c3)
4.2.8 - 2023-01-14
4.2.8 (2023-01-14)

Bug Fixes
- build in postversion for build file version (60c3b7f)
4.2.7 - 2023-01-14
4.2.7 (2023-01-14)

Bug Fixes
- fix build file version (94fa76f)
4.2.6 - 2023-01-14
4.2.6 (2023-01-14)

Bug Fixes
- add version to build files (79b8c0b)
4.2.5 - 2022-12-23
4.2.5 (2022-12-23)

Bug Fixes
- fix paragraph continuation after block element (#2686) (1bbda68)
- fix tabs at beginning of list items (#2679) (e692634)
4.2.4 - 2022-12-07
4.2.4 (2022-12-07)

Bug Fixes
- loose list items are loose (#2672) (df4eb0e)
- remove quotes at the end of gfm autolink (#2673) (697ac2a)
- use paragraph token in blockquote in list (#2671) (edc857c)
4.2.3 - 2022-11-20
4.2.2 - 2022-11-05
4.2.1 - 2022-11-02
4.2.0 - 2022-10-31
4.1.1 - 2022-10-01
4.1.0 - 2022-08-30
4.0.19 - 2022-08-21
4.0.18 - 2022-07-11
4.0.17 - 2022-06-13
4.0.16 - 2022-05-17
4.0.15 - 2022-05-02

from marked GitHub release notes

Package name: mobx

6.13.1 - 2024-07-18
Patch Changes
- 5e711e0b4737fd6b5b3c6f9b32afd4f195bc5fc3 #3901 Thanks @ peterm-canva! - Shrink Atom and Reaction using a bitfield
6.13.0 - 2024-07-02
Minor Changes
- 16f070e6aac60e9010c2591b1743276d700b23d5 #3898 Thanks @ inoyakaigor! - Added new Set methods
6.12.5 - 2024-06-30
Patch Changes
- ba890343 #3893 Thanks @ g6123! - Fix ES6 Map/Set checks for cross-window scripts
6.12.4 - 2024-06-13
Patch Changes
- e9e1955f #3880 Thanks @ peterm-canva! - Shrink ComputedValue using a bitfield
6.12.3 - 2024-03-28
mobx@6.12.3
6.12.1 - 2024-03-22
Patch Changes
- 620f78c7 #3812 Thanks @ barroij! - Prevent reaction from heeping a Reference to the OldValue that would prevent GC.
- 6111b093 #3833 Thanks @ realyze! - Reduce memory overhead of tracking dependencies
6.12.0 - 2023-11-27
Minor Changes
- ec5db592 #3792 Thanks @ tonyraoul! - Improve observablearray proxy pefromance for es2023.array and es2022.array methods
Patch Changes
- 86616c11 #3654 Thanks @ ahoisl! - fix: action transparently forwards toString of underlying function
6.11.0 - 2023-11-11
6.11.0-pre - 2023-10-20
6.10.2 - 2023-08-31
6.10.1 - 2023-08-29
6.10.0 - 2023-07-18
6.9.1 - 2023-07-12
6.9.0 - 2023-03-25
6.8.0 - 2023-02-09
6.7.0 - 2022-11-14
6.6.2 - 2022-09-07
6.6.1 - 2022-06-27
6.6.0 - 2022-05-23
6.5.0 - 2022-03-17
6.4.2 - 2022-02-25
6.4.1 - 2022-02-19
6.4.0 - 2022-02-17
6.3.13 - 2022-01-21
6.3.12 - 2022-01-05
6.3.11 - 2022-01-05
6.3.10 - 2021-12-22
6.3.9 - 2021-12-15
6.3.8 - 2021-11-27
6.3.7 - 2021-11-11
6.3.6 - 2021-11-01
6.3.5 - 2021-10-14
6.3.4 - 2021-10-11
6.3.3 - 2021-08-31
6.3.2 - 2021-05-22

from mobx GitHub release notes

Package name: mobx-react

7.6.0 - 2022-11-14
7.5.3 - 2022-09-07
7.5.2 - 2022-07-07
7.5.1 - 2022-06-27
7.5.0 - 2022-05-23
7.4.0 - 2022-05-06
7.3.0 - 2022-02-17
7.2.1 - 2021-10-11
7.2.0 - 2021-05-18

from mobx-react GitHub release notes

Package name: openapi-sampler

1.5.1 - 2024-05-02
1.5.0 - 2024-04-24
1.4.0 - 2023-12-04
1.3.1 - 2023-01-11

from openapi-sampler GitHub release notes

Package name: polished

4.3.1 - 2024-02-01
Bug Fixes & Improvements
- Remove annotate-pure-calls plugin to address incompatibility with later versions of rollup.
- Update dependencies.
4.3.0 - 2024-02-01
Remove unneeded pure function annotation plugin.

re: #642
4.2.2 - 2022-04-06
Bug Fixes
- Color Modules - addresses an issue with longer floats in color values. (

Snyk has created this PR to upgrade: - @redocly/openapi-core from 1.0.0-rc.2 to 1.21.0. See this package in npm: https://www.npmjs.com/package/@redocly/openapi-core - classnames from 2.3.1 to 2.5.1. See this package in npm: https://www.npmjs.com/package/classnames - core-js from 3.14.0 to 3.38.1. See this package in npm: https://www.npmjs.com/package/core-js - dompurify from 2.2.9 to 2.5.6. See this package in npm: https://www.npmjs.com/package/dompurify - marked from 4.0.15 to 4.3.0. See this package in npm: https://www.npmjs.com/package/marked - mobx from 6.3.2 to 6.13.1. See this package in npm: https://www.npmjs.com/package/mobx - mobx-react from 7.2.0 to 7.6.0. See this package in npm: https://www.npmjs.com/package/mobx-react - openapi-sampler from 1.3.1 to 1.5.1. See this package in npm: https://www.npmjs.com/package/openapi-sampler - polished from 4.1.3 to 4.3.1. See this package in npm: https://www.npmjs.com/package/polished - prismjs from 1.27.0 to 1.29.0. See this package in npm: https://www.npmjs.com/package/prismjs - prop-types from 15.7.2 to 15.8.1. See this package in npm: https://www.npmjs.com/package/prop-types - slugify from 1.4.7 to 1.6.6. See this package in npm: https://www.npmjs.com/package/slugify - swagger2openapi from 7.0.6 to 7.0.8. See this package in npm: https://www.npmjs.com/package/swagger2openapi See this project in Snyk: https://app.snyk.io/org/googlecloud-fD9E4u83kGB6j2zHM2NDFc/project/0cec2594-596b-4db5-a3b2-853e0fac0740?utm_source=github&utm_medium=referral&page=upgrade-pr

google-cla · 2024-09-15T05:05:06Z

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

product-auto-label bot added the samples label Sep 15, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: , classnames, core-js, dompurify, marked, mobx, mobx-react, openapi-sampler, polished, prismjs, prop-types, slugify, swagger2openapi #43

[Snyk] Upgrade: , classnames, core-js, dompurify, marked, mobx, mobx-react, openapi-sampler, polished, prismjs, prop-types, slugify, swagger2openapi #43

WontonSam commented Sep 15, 2024

4.3.0 (2023-03-22)

Bug Fixes

Features

4.2.12 (2023-01-14)

Bug Fixes

4.2.11 (2023-01-14)

Bug Fixes

4.2.10 (2023-01-14)

Bug Fixes

4.2.9 (2023-01-14)

Bug Fixes

4.2.8 (2023-01-14)

Bug Fixes

4.2.7 (2023-01-14)

Bug Fixes

4.2.6 (2023-01-14)

Bug Fixes

4.2.5 (2022-12-23)

Bug Fixes

4.2.4 (2022-12-07)

Bug Fixes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Bug Fixes & Improvements

Bug Fixes

google-cla bot commented Sep 15, 2024

[Snyk] Upgrade: , classnames, core-js, dompurify, marked, mobx, mobx-react, openapi-sampler, polished, prismjs, prop-types, slugify, swagger2openapi #43

Are you sure you want to change the base?

[Snyk] Upgrade: , classnames, core-js, dompurify, marked, mobx, mobx-react, openapi-sampler, polished, prismjs, prop-types, slugify, swagger2openapi #43

Conversation

WontonSam commented Sep 15, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

4.3.0 (2023-03-22)

Bug Fixes

Features

4.2.12 (2023-01-14)

Bug Fixes

4.2.11 (2023-01-14)

Bug Fixes

4.2.10 (2023-01-14)

Bug Fixes

4.2.9 (2023-01-14)

Bug Fixes

4.2.8 (2023-01-14)

Bug Fixes

4.2.7 (2023-01-14)

Bug Fixes

4.2.6 (2023-01-14)

Bug Fixes

4.2.5 (2022-12-23)

Bug Fixes

4.2.4 (2022-12-07)

Bug Fixes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Bug Fixes & Improvements

Bug Fixes

google-cla bot commented Sep 15, 2024