amaybaum-prod / platform

Open source Slack-alternative in Golang and React - Mattermost
http://mattermost.org
Other
0 stars 0 forks source link

Update dependency bootstrap to v3.4.1 #9

Open mend-for-github-com[bot] opened 8 months ago

mend-for-github-com[bot] commented 8 months ago

This PR contains the following updates:

Package Type Update Change
bootstrap (source) dependencies minor 3.3.6 -> 3.4.1

By merging this PR, the issue #3 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
Medium Medium 6.1 CVE-2016-10735

Reachable

Medium Medium 6.1 CVE-2018-14042

Reachable

Medium Medium 6.1 CVE-2018-20676

Reachable

Medium Medium 6.1 CVE-2018-20677

Reachable

Medium Medium 6.1 CVE-2019-8331

Reachable


Release Notes

twbs/bootstrap (bootstrap) ### [`v3.4.1`](https://redirect.github.com/twbs/bootstrap/releases/tag/v3.4.1) [Compare Source](https://redirect.github.com/twbs/bootstrap/compare/v3.4.0...v3.4.1) - **Security:** Fixed an XSS vulnerability (CVE-2019-8331) in our tooltip and popover plugins by implementing a new HTML sanitizer - Handle bad selectors (`#`) in `data-target` for Dropdowns - Clarified tooltip selector documentation - Added support for NuGet contentFiles ### [`v3.4.0`](https://redirect.github.com/twbs/bootstrap/releases/tag/v3.4.0) [Compare Source](https://redirect.github.com/twbs/bootstrap/compare/v3.3.7...v3.4.0) - **New:** Added a `.row-no-gutters` class. - **New:** Added docs searching via Algolia. - **Fixed:** Resolved an XSS issue in Alert, Carousel, Collapse, Dropdown, Modal, and Tab components. See for details. - **Fixed:** Added padding to `.navbar-fixed-*` on modal open - **Fixed:** Removed the double border on `` elements. - Removed Gist creation in web-based Customizer since anonymous gists were disabled long ago by GitHub. - Removed drag and drop support from Customizer since it didn't work anymore. - Added a dropdown to the docs nav for newer and previous versions. - Update the docs to use a new `baseurl`, `/docs/3.4/`, to version the v3.x documentation like we do with v4. - Reorganized the v3 docs CSS to use Less. - Switched to BrowserStack for tests. - Updated links to always use https and fix broken URLs. - Replaced ZeroClipboard with clipboard.js ### [`v3.3.7`](https://redirect.github.com/twbs/bootstrap/releases/tag/v3.3.7) [Compare Source](https://redirect.github.com/twbs/bootstrap/compare/v3.3.6...v3.3.7) Release announcement blog post: https://blog.getbootstrap.com/2016/07/25/bootstrap-3-3-7-released/ ##### JavaScript - [#​19192](https://redirect.github.com/twbs/bootstrap/issues/19192) Fix keyboard navigation for toggle buttons (checkbox, radio, single toggle) following a mouse click - [#​19659](https://redirect.github.com/twbs/bootstrap/issues/19659): Clear tooltip's `$element` to prevent leaking memory - [#​20019](https://redirect.github.com/twbs/bootstrap/issues/20019): Avoid calling `jQuery('#')` since it's a syntax error in jQuery 3 - [#​20259](https://redirect.github.com/twbs/bootstrap/issues/20259): Backport jQuery-related JS unit test fixes from v4 - [#​20278](https://redirect.github.com/twbs/bootstrap/issues/20278): button.js: Set disabled property in addition to disabled attribute, for jQuery 3 compatibility - [#​20313](https://redirect.github.com/twbs/bootstrap/issues/20313): Avoid using `$.offset()` on SVGs since it gives incorrect results in jQuery 3 - [#​20338](https://redirect.github.com/twbs/bootstrap/issues/20338): Update jQuery version check and jQuery dependency version range to allow jQuery 3 ##### CSS No significant changes. ##### Accessibility - [#​19704](https://redirect.github.com/twbs/bootstrap/issues/19704): Add `aria-label` and callout about labeling pagination components ##### Docs - [#​19263](https://redirect.github.com/twbs/bootstrap/issues/19263) Bump html5shiv to v3.7.3 - [#​19273](https://redirect.github.com/twbs/bootstrap/issues/19273) Port v4 browser support table format to v3 - [#​19893](https://redirect.github.com/twbs/bootstrap/issues/19893): Update jQuery to v1.12.4 - Numerous Wall of Browser Bugs updates