Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade chart.js from 2.8.0 to 2.9.4 #4

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

luisgarciaxygeni
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade chart.js from 2.8.0 to 2.9.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 5 versions ahead of your current version.

  • The recommended version was released on 4 years ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Prototype Pollution
SNYK-JS-CHARTJS-1018716
696 Proof of Concept
Release notes
Package name: chart.js
  • 2.9.4 - 2020-10-18

    This is the last release of v2 and focused on fixing bugs identified in the v2.9.3 release.

    Bugs Fixed

    • #7404 - Preserve prototypes when cloning. Thanks @ iddings
    • #7587 - Fix docs for external moment.js. Thanks @ mojoaxel
    • #7853 - Fix box recursion when dimensions are NaN. Thanks @ alessandroasm
    • #7883 - Fix call stack exception when computing label sizes. Thanks @ silentmatt
    • #7918 - Prevent global prototype pollution via the merge helper
    • #7920 - Use Object.create(null) as merge target, to prevent prototype pollution
  • 2.9.3 - 2019-11-14

    Bug Fixes

    • #6698 Fix undefined variable
    • #6719 Don't make legend empty when fill is false

    Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@ kurkle, @ benmccann, and @ etimberg).

  • 2.9.2 - 2019-11-02

    Bug Fixes

    • #6641 IE11 & Edge compatible style injection
    • #6655 Backwards compatible default fill for radar charts
    • #6660 Improve clipping of line charts when border widths are large
    • #6661 When a legend item is clicked, make sure the correct item is hidden
    • #6663 Refresh package-lock file to pick up new dependency

    Performance

    • #6671 Stop unnecessary line calculations

    Documentation

    • #6643 Combine performance documentation sections

    Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@ nagix, @ kurkle, @ benmccann, @ etimberg and @ simonbrunel).

  • 2.9.1 - 2019-10-27

    Bug Fixes

    • #6603 Fix deprecation warnings for horizontal bar charts
    • #6608 Fix zoom plugin by no longer clipping scale.getDecimalForPixel to the chart area
    • #6617 Non numeric Y axes did not work

    Documentation

    • #6613 Add link to performance documentation

    Development

    • #6609 - Tests no longer use deprecated options

    Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@ nagix, @ kurkle, @ benmccann, @ etimberg and @ simonbrunel).

  • 2.9.0 - 2019-10-26
  • 2.8.0 - 2019-03-14
from chart.js GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade chart.js from 2.8.0 to 2.9.4.

See this package in npm:
chart.js

See this project in Snyk:
https://app.snyk.io/org/luisgarciaxygeni/project/e001b24d-38e0-4ea2-92ab-e49c326df368?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants