[Snyk] Upgrade grapesjs from 0.17.29 to 0.21.6

[aleHRevirtus]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade grapesjs from 0.17.29 to 0.21.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 16 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2023-09-17.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-GRAPESJS-2342412	444/1000 Why? Has a fix available, CVSS 4.6	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-GRAPESJS-2935960	444/1000 Why? Has a fix available, CVSS 4.6	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: grapesjs

• 0.21.6 - 2023-09-17
  

  Added

  • Added unminified module file to the package (dist/grapes.mjs)
  • Support for @ container CSS at-rule #5372

  Fixed

  • Fixed script function to string #5352
  • Fixed move in Layers #5355
  • Wait for the counter update during the load #5385
  • Fixed RTE icon TS definition by @ peters-ben-0007 in #5358

  Full Changelog: v0.21.5...v0.21.6

• 0.21.5 - 2023-08-30
  

  Added

  • Introduction to Canvas Spots
  • Added editor.Components.canMove API

  Fixed

  • Fixed undo/redo when using component.setClass #5319
  • Prevent default event with undo/redo shortcuts #5325
  • Hide badge if component.badgable is false #5340
  • Fixed canvas scroll on component select from layers #5342

  Full Changelog: v0.21.4...v0.21.5

• 0.21.4 - 2023-08-07
  

  Added

  • Added config.canvas.allowExternalDrop option #5242
  • Support multiple style values for the same property #4434

  Fixed

  • Prevent exporting textnodes with null #5229
  • Ignore current state and device for component related styles #5213
  • Fix video component import #2357
  • Up panels config TS #5269
  • Clean inline styles from comments #1577
  • Fixes bug with broken autoplay from video component (issue #5268); by @ SLain123 in #5270

  Full Changelog: v0.21.3...v0.21.4

• 0.21.3 - 2023-07-04
  

  Docs

  • Update Broken Links for (Component Types, and Commands) by @ AbdelrhmanSaid in #5196
  • Update rich_text_editor.md by @ gxanshu in #5201

  Added

  • Added addStyles option to editor.Css.setRule #5173

  Changed

  • Improve typings by @ Julia-Alberici in #5192
  • Refactor Traits Collection by @ xQwexx in #4983

  Fixed

  • Fixed usePlugin is not a function #5167
  • Fixed PropertyStack in bundled dts file #5154
  • Handle properly Component model defaults as functions #5199
  • Fixed broken link in README.md by @ pfaffmann in #5188

  Full Changelog: v0.21.2...v0.21.3

• 0.21.2 - 2023-05-31
  

  Docs

  • Added Pages module doc
  • Updated Plugins doc
  • Updated Replace Rich Text Editor doc

  Added

  • Added experimental disableTextInnerChilds option to Components module configuration.
    With this option, you're able to decide which inner component inside text should be disabled (eg. no select, no hover, no layer visibility) once edited.

    grapesjs.init({
      // ...
      domComponents: {
        // disable all inner childs
        disableTextInnerChilds: true,
        // disable all except link components
        disableTextInnerChilds: (child) => !child.is('link'),
      }
    })

  • Added usePlugin for a better TS support with plugins
  • Added Component.forEachChild method.
  • Added more TS exports and fixed Editor#setZoom type by @ PaulRill00 in #5106

  Changed

  • Improve TS for Components.addType
  • Updated German locale by @ c9a2334 in #5114
  • Trigger component:styleUpdate on component style changes #4897

  Fixed

  • Fixed addStyle(string, string) #5105
  • Take into account scroll data on drop in absolute mode
  • Fixed element jumping when resizing on zoomed frame #5103
  • Fixed TS autocomplete for editor events
  • Fix StyleManager.addProperty TS #5135

  Removed

  • Removed unused fonts folder

  New Contributors

  • @ c9a2334 made their first contribution in #5114

  Full Changelog: v0.21.1...v0.21.2

• 0.21.1 - 2023-04-03
  Read more
• 0.20.4 - 2023-02-02
  Read more
• 0.20.3 - 2023-01-02
  

  Fixed

  • Fix D&D in Dragger class #4792
  • Fix block events inconsistency #4791
  • Fix trait init value #4803

  Full Changelog: v0.20.2...v0.20.3

• 0.20.2 - 2022-12-16
  Read more
• 0.20.1 - 2022-09-15
  Read more
• 0.19.5 - 2022-07-13
• 0.19.4 - 2022-06-09
• 0.18.4 - 2022-03-25
• 0.18.3 - 2022-02-15
• 0.18.2 - 2022-01-27
• 0.18.1 - 2022-01-17
• 0.17.29 - 2021-11-03

from grapesjs GitHub release notes

Commit messages

Package name: grapesjs

• 20cce66 Up docs
• 3107810 Build
• 6346fc2 Add support for module
• 928662e Up initResize
• c1ab34d Up
• 8b54544 Up tests
• bf12f90 Added `loadOptions.clear` to `editor.load` method
• 5632e31 TS update for load/store
• 620a3e9 Up storage TS
• 0c01cf6 Wait for the counter update during the load. Fixes Add Responsible Disclosure pages to websites mautic/mautic#5385
• 96365de Update block events
• 2300c23 Add support for container CSS at rule. Closes Captures changes to Report schedule for listeners mautic/mautic#5372
• 9527e6c Fix move in Layers. Closes Fix unit tests on staging mautic/mautic#5355
• 3d9c48c Merge branch 'dev' of https://github.com/artf/grapesjs into dev
• 6707eb1 Up TS RichTextEditorAction. Closes WIP Lead source tracking mautic/mautic#5357 (Webinar bundle and Webikeo integration mautic/mautic#5358)
• 4e98889 Fix script function to string. Closes Bug: Social monitor experiencing encoding issue mautic/mautic#5352
• cc8600f Up package.json
• a5f4c1e Remove sinon from deps
• 5c2f3ba Remove sinon from setup
• cdeb975 Up ClassTagView test
• e1f62dc Up ClassTagsView test
• 6e6554e Up ClassManager test
• 54a590c Up PanelView test
• d51a256 Up PanelsView test

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs