MendDemo-josh / Umbraco-CMS

The simple, flexible and friendly ASP.NET CMS used by more than 730.000 websites
https://umbraco.com
MIT License
0 stars 0 forks source link

Update dependency tinymce to v6 #37

Open mend-for-github-com[bot] opened 5 months ago

mend-for-github-com[bot] commented 5 months ago

This PR contains the following updates:

Package Type Update Change
tinymce (source) dependencies major 4.9.11 -> 6.8.4

By merging this PR, the issue #7 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 7.5 WS-2021-0001
Medium Medium 6.1 CVE-2023-45818
Medium Medium 6.1 CVE-2023-45819
Medium Medium 6.1 CVE-2023-48219
Medium Medium 6.1 CVE-2024-21908
Medium Medium 6.1 CVE-2024-21910
Medium Medium 6.1 CVE-2024-21911
Medium Medium 6.1 CVE-2024-38356
Medium Medium 6.1 CVE-2024-38357
Medium Medium 6.1 WS-2021-0133
Medium Medium 4.3 CVE-2024-29203
Medium Medium 4.3 CVE-2024-29881

Release Notes

tinymce/tinymce (tinymce) ### [`v6.8.4`](https://togithub.com/tinymce/tinymce/compare/6.8.3...tinymce@6.8.4) [Compare Source](https://togithub.com/tinymce/tinymce/compare/6.8.3...tinymce@6.8.4) ### [`v6.8.3`](https://togithub.com/tinymce/tinymce/blob/HEAD/modules/tinymce/CHANGELOG.md#683---2024-02-08) [Compare Source](https://togithub.com/tinymce/tinymce/compare/6.8.2...6.8.3) ##### Changed - Update outbound TinyMCE website links. #TINY-10491 ##### Fixed - The floating toolbar would not be fully visible when the editor was placed inside a scrollable container. #TINY-10335 - ShadowDOM skin was not loaded properly when used with js bundling feature. #TINY-10451 ### [`v6.8.2`](https://togithub.com/tinymce/tinymce/blob/HEAD/modules/tinymce/CHANGELOG.md#682---2023-12-11) [Compare Source](https://togithub.com/tinymce/tinymce/compare/6.8.1...6.8.2) ##### Fixed - Bespoke select toolbar buttons including `fontfamily`, `fontsize`, `blocks`, and `styles` incorrectly used plural words in their accessible names. #TINY-10426 - The `align` bespoke select toolbar button had an accessible name that was misleading and grammatically incorrect in certain cases. #TINY-10435 - Accessible names of bespoke select toolbar buttons including `align`, `fontfamily`, `fontsize`, `blocks`, and `styles` were incorrectly translated. #TINY-10426 #TINY-10435 - Clicking inside table cells with heavily nested content could cause the browser to hang. #TINY-10380 - Toggling a list that contains an LI element having another list as its first child would remove the remaining content within that LI element. #TINY-10414 ### [`v6.8.1`](https://togithub.com/tinymce/tinymce/blob/HEAD/modules/tinymce/CHANGELOG.md#681---2023-11-29) [Compare Source](https://togithub.com/tinymce/tinymce/compare/6.8.0...6.8.1) ##### Improved - Colorpicker now includes the Brightness/Saturation selector and hue slider in the keyboard navigable items. #TINY-9287 ##### Fixed - Translation syntax for announcement text in the table grid was incorrectly formatted. #TINY-10141 - The functions `schema.isWrapper` and `schema.isInline` did not exclude node names that started with `#` which should not be considered as elements. #TINY-10385 ### [`v6.8.0`](https://togithub.com/tinymce/tinymce/blob/HEAD/modules/tinymce/CHANGELOG.md#680---2023-11-22) [Compare Source](https://togithub.com/tinymce/tinymce/compare/6.7.3...6.8.0) ##### Added - CSS files are now also generated as separate JS files to improve bundling of all resources. #TINY-10352 - Added new `StylesheetLoader.loadRawCss` API that can be used to load CSS into a style element. #TINY-10352 - Added new `StylesheetLoader.unloadRawCss` API that can be used to unload CSS that was loaded into a style element. #TINY-10352 - Added `force_hex_color` editor option. Option `'always'` converts all RGB & RGBA colours to hex, `'rgb_only'` will only convert RGB and *not* RGBA colours to hex, `'off'` won't convert any colours to hex. #TINY-9819 - Added `default_font_stack` editor option that makes it possible to define what is considered a system font stack. #TINY-10290 - New `sandbox_iframes` option that controls whether iframe elements will be added a `sandbox=""` attribute to mitigate malicious intent. #TINY-10348 - New `convert_unsafe_embeds` option that controls whether `` and `` elements will be converted to more restrictive alternatives, namely `` for image MIME types, `