boisebrigade / establish

Resources for Idaho's newest residents
https://openboise.org
2 stars 1 forks source link

Bump bootstrap from 4.2.1 to 4.4.1 in /self_rescue_manual-app #64

Open dependabot[bot] opened 4 years ago

dependabot[bot] commented 4 years ago

Bumps bootstrap from 4.2.1 to 4.4.1.

Release notes *Sourced from [bootstrap's releases](https://github.com/twbs/bootstrap/releases).* > ## v4.4.1 > * Fix Dart Sass compatibility ([#29755](https://github-redirect.dependabot.com/twbs/bootstrap/issues/29755), [#29763](https://github-redirect.dependabot.com/twbs/bootstrap/issues/29763)) > * Add :disabled for disabled fieldset ([#29762](https://github-redirect.dependabot.com/twbs/bootstrap/issues/29762)) > > ## v4.4.0 > ### Highlights > > Here's what you need to know about v4.4.0. Remember that with every minor and major release of Bootstrap, we ship a new URL for our hosted docs to ensure URLs continue to work.- **New responsive containers!** Over a year in the making, fluid up to a particular breakpoint, available for all responsive tiers. > > - **New responsive `.row-cols` classes** for quickly specifying the number of columns across breakpoints. This one is huge for those of you who have asked for responsive card decks. > - **New `escape-svg()` function** for simplifying our embedded `background-image` SVGs for forms and more. > - **New `add()` and `subtract()` functions** for avoiding errors and zero values from CSS's built in `calc` feature. > - **New `make-col-auto()` mixin** to make our `.col-auto` class available with custom HTML. > - Fixed an issue with Microsoft Edge not picking up `:disabled` styles by moving selectors to `[disabled]`. > - **Deprecated:** `bg-variant()`, `nav-divider()`, and `form-control-focus()` mixins are now deprecated as they're going away in v5. > - Updated our spacing and alignment for modal footer elements like buttons to automatically wrap when space is constrained. > - More flexible form control validation styles thanks to fewer chained selectors. Also updated the `:invalid` validation icon to be an alert instead of an `×` to avoid confusion with browser functionality for clearing the form field value. > - Fixed a couple dozen CSS and JS bugs. > - Moved to GitHub Actions for CI/CD! Expect more updates to our CI setup over time here while Actions evolves. > - Updated documentation to fix links and typos, improved landmarks for secondary navigation, and a new security doc for guidelines on reporting potential vulnerabilities. > > ### Links > > - [List of closed issues and merged pull requests](https://github.com/twbs/bootstrap/issues?q=project%3Atwbs%2Fbootstrap%2F18+is%3Aclosed+sort%3Aupdated-desc) > - [Review the project board](https://github.com/twbs/bootstrap/projects/18) > > ## v4.3.1 > * **Security:** Fixed an XSS vulnerability (CVE-2019-8331) in our tooltip and popover plugins by implementing a new HTML sanitizer > * Fixed a small issue with our RFS (responsive font sizes) mixins > > ## v4.3.0 > ### Highlights > > - **New:** Added `.stretched-link` utility to make any anchor the size of it's nearest `position: relative` parent, perfect for entirely clickable cards! > - **New:** Added `.text-break` utility for applying `word-break: break-word` > - **New:** Added `.rounded-sm` and `.rounded-lg` for small and large `border-radius`. > - **New:** Added `.modal-dialog-scrollable` modifier class for scrolling content _within_ a modal. > - **New:** Added responsive `.list-group-horizontal` modifier classes for displaying list groups as a horizontal row. > - **Improved:** Reduced our compiled CSS by using `null` for variables that by default inherit their values from other elements (e.g., `$headings-color` was `inherit` and is now `null` until you modifier it in your custom CSS). > - **Improved:** Badge focus styles now match their `background-color` like our buttons. > - **Fixed:** Silenced bad selectors in our JS plugins for the `href` HTML attribute to avoid JavaScript errors. Please try to use [valid selectors](https://www.w3.org/TR/CSS21/syndata.html#value-def-identifier) or the `data-target` HTML attribute/`target` option where available. > - **Fixed:** Reverted v4.2.1's change to the breakpoint and grid container Sass maps that blocked folks from upgrading when modifying those default variables. > - **Fixed:** Restored `white-space: nowrap` to `.dropdown-toggle` (before v4.2.1 it was on all `.btn`s) so carets don't wrap to new lines. > - **Deprecated:** `img-retina`, `invisible`, `float`, and `size` mixins are now deprecated and will be removed in v5. > > ### Links > - [Read the full ship list](https://github-redirect.dependabot.com/twbs/bootstrap/issues/27893) > - [Review the project board](https://github.com/twbs/bootstrap/projects/16)
Commits - [`dca1ab7`](https://github.com/twbs/bootstrap/commit/dca1ab7d877bc4b664b43604657a2b5fbe2b4ecb) Release v4.4.1. - [`b07b6f7`](https://github.com/twbs/bootstrap/commit/b07b6f743ca023b24a4a9cc0cd22a4f25a7be37e) Fix dart Sass compatibility for subtract ([#29763](https://github-redirect.dependabot.com/twbs/bootstrap/issues/29763)) - [`0d148d8`](https://github.com/twbs/bootstrap/commit/0d148d88545c89128252bbd29e7df0a1d8c7aeba) V4: Add :disabled for disabled fieldset ([#29762](https://github-redirect.dependabot.com/twbs/bootstrap/issues/29762)) - [`c24aaa6`](https://github.com/twbs/bootstrap/commit/c24aaa6cbf8e0626746052131358adeeb3db6277) Fix dart Sass compatibility ([#29755](https://github-redirect.dependabot.com/twbs/bootstrap/issues/29755)) - [`301ee19`](https://github.com/twbs/bootstrap/commit/301ee1972d7c69f3edf577bec86a20d323cc9c09) Update Gemfile.lock - [`593574d`](https://github.com/twbs/bootstrap/commit/593574d510050dc2d5eeafe70a58ae182f020480) Release v4.4.0 ([#29735](https://github-redirect.dependabot.com/twbs/bootstrap/issues/29735)) - [`d61bba5`](https://github.com/twbs/bootstrap/commit/d61bba584f89c7df0d780a9ff214a58f7b58cb94) Backport [#29734](https://github-redirect.dependabot.com/twbs/bootstrap/issues/29734) - [`7aa1722`](https://github.com/twbs/bootstrap/commit/7aa1722a97b173c8d92ef74bb1a24a1544f81937) Update change-version.js ([#29736](https://github-redirect.dependabot.com/twbs/bootstrap/issues/29736)) - [`340009e`](https://github.com/twbs/bootstrap/commit/340009e6de2b1d1710c8df484aa008054b3f325d) Update devDependencies and gems. - [`bdd8752`](https://github.com/twbs/bootstrap/commit/bdd875299467ed0d3bb67c0dc9021f14e23278fc) Switch to the Coveralls Action ([#29478](https://github-redirect.dependabot.com/twbs/bootstrap/issues/29478)) - Additional commits viewable in [compare view](https://github.com/twbs/bootstrap/compare/v4.2.1...v4.4.1)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/boisebrigade/establish/network/alerts).