[Snyk] Upgrade @nivo/core from 0.83.0 to 0.87.0

snyk-top-banner

Snyk has created this PR to upgrade @nivo/core from 0.83.0 to 0.87.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 6 versions ahead of your current version.
The recommended version was released on 3 months ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Prototype Pollution SNYK-JS-AXIOS-6144788	432	No Known Exploit
Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-7361793	432	Proof of Concept
Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	432	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	432	Proof of Concept
Server-Side Request Forgery (SSRF) SNYK-JS-IP-7148531	432	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-FASTXMLPARSER-7573289	432	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	432	Proof of Concept

Release notes

Package name: @nivo/core

0.87.0 - 2024-05-12
What's Changed
- Fix area rendering disparity of line canvas compared to line svg by @ MatinAniss in #2558
- Add mesh to bump chart by @ santiperone in #2496
- fix: Add missing key to BarTotals by @ dbuhon in #2575
- Bump mesh improvements by @ plouc in #2572
- feat(line): remove prop-types as we're supposed to rely on TS by @ plouc in #2576
- feat(recompose): completely remove recompose from the project by @ plouc in #2577
- fix(bar): fix canvas grid lines not considering margin by @ plouc in #2578
- feat(Line): passing the full Point info to the AccessorFunc for Label by @ akassaei in #2541
- fix(core): use readonly arrays for props as the libraries do not modify them by @ pcorpet in #2588
- @ nivo/tree by @ plouc in #2582
New Contributors
- @ MatinAniss made their first contribution in #2558
- @ santiperone made their first contribution in #2496
- @ dbuhon made their first contribution in #2575
- @ akassaei made their first contribution in #2541
Full Changelog: v0.86.0...v0.87.0
0.86.0 - 2024-04-29
What's Changed
- fix(website): fix time based scale ticks demos by @ plouc in #2532
- feat(Bar): add bar totals by @ joaopedromatias in #2525
- Rewrite componentId to support react17 by @ Alex-Spike in #2545
- Bugfix/2490 tooltip theme by @ gtibrett in #2552
New Contributors
- @ joaopedromatias made their first contribution in #2525
- @ Alex-Spike made their first contribution in #2545
- @ gtibrett made their first contribution in #2552
Full Changelog: v0.85.1...v0.86.0
0.85.1 - 2024-03-08
What's Changed
- Tooltip: avoid a flash effect and weird initial transition by @ DimaAmega in #2480
- feat(deps): upgrade d3-scale due to vulnerability by @ plouc in #2531
New Contributors
- @ DimaAmega made their first contribution in #2480
Full Changelog: v0.85.0...v0.85.1
0.85.0 - 2024-03-07
What's Changed
- refactor default props to fix error message by @ andre19980 in #2452
- fix(sankey): update onClick types in sankey chart to respect generics by @ stas-demydiuk in #2509
- chore: upgrade d3-color and d3-scale-chromatic by @ icco in #2466
- Fix: add initial property for truncateTickAt by @ scalabw in #2504
- fix tooltip default color by @ scalabw in #2521
- Touch crosshair for line graphs by @ WilliamABradley in #2524
- fix(marimekko): use readonly arrays for props as the library does not modify them by @ pcorpet in #2493
- fix(line): use readonly arrays for props as the library does not modify them by @ pcorpet in #2494
- Fix (peer) dependencies by @ marvinruder in #2528
New Contributors
- @ andre19980 made their first contribution in #2452
- @ stas-demydiuk made their first contribution in #2509
- @ icco made their first contribution in #2466
- @ scalabw made their first contribution in #2504
- @ WilliamABradley made their first contribution in #2524
- @ marvinruder made their first contribution in #2528
Full Changelog: v0.84.0...v0.85.0
0.84.0 - 2023-11-20
What's Changed
- fix(bar): use readonly arrays for props as the library does not modif… by @ pcorpet in #2377
- fix(pie): use readonly arrays for props as the library does not modif… by @ pcorpet in #2431
- Fix Bar SSR by @ OleksandrRakovets in #2464
- Pie: Add the ability to programmatically control the activeId by @ plouc in #2465
New Contributors
- @ pcorpet made their first contribution in #2377
- @ OleksandrRakovets made their first contribution in #2464
Full Changelog: v0.83.1...v0.84.0
0.83.1 - 2023-11-14
What's Changed
- @ nivo/parallel-coordinates next by @ plouc in #2329
- Add tests for gradients attribute by @ hyjoong in #2338
- fix: Lodash - use module imports by @ vio in #2349
- Resolved BoxPlot types not being included in build output by @ NicolasNewman in #2351
- Fix website component search by @ aautem in #2371
- fix: waffle types missing from dist by @ brammitch in #2375
- Fix arcLinkLabelsOffset for pie chart by @ aautem in #2369
- feat/export responsive bar props TypeScript types by @ ollwenjones in #2396
- fix(stream): fix stream diagram overflowing by @ baldulin in #2392
- fix GitHub workflow badge URL by @ shoito in #2453
- Fix failing builds by @ plouc in #2460
- shiftArray in calendar/src/compute/timeRange.ts should not mutate its argument by @ wirhabenzeit in #2420
- fix(core): upgrade d3-interpolate and d3-scale-chromatic by @ plouc in #2461
- Feature/bar chart truncate axes ticks by @ SebasQuirogaUCP in #2405
- feat(legends): export SymbolProps by @ plouc in #2462
New Contributors
- @ hyjoong made their first contribution in #2338
- @ vio made their first contribution in #2349
- @ NicolasNewman made their first contribution in #2351
- @ aautem made their first contribution in #2371
- @ baldulin made their first contribution in #2392
- @ shoito made their first contribution in #2453
- @ wirhabenzeit made their first contribution in #2420
- @ SebasQuirogaUCP made their first contribution in #2405
Full Changelog: v0.83.0...v0.83.1
0.83.0 - 2023-05-07
What's Changed
- Waffle next by @ plouc in #2320
- Remove all references to react-motion by @ plouc in #2324
- Move @ nivo/core as a regular dependency in all dependent packages by @ plouc in #2325
- feat(infrastructure): remove bump-peer-deps script by @ plouc in #2326
Full Changelog: v0.82.1...v0.83.0

from @nivo/core GitHub release notes

[!IMPORTANT]

Check the changes in this PR to ensure they won't cause issues with your project.

This PR was automatically created by Snyk using the credentials of a real user.

Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

MethSarcus / visualeague

[Snyk] Upgrade @nivo/core from 0.83.0 to 0.87.0 #374

Snyk has created this PR to upgrade @nivo/core from 0.83.0 to 0.87.0.

Issues fixed by the recommended upgrade:

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed