socket-security[bot]
commented
10 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/plotly.js@2.25.2 | network Transitive: eval, filesystem | +183 |
130 MB | archmoj |
🚮 Removed packages: npm/plotly.js@2.5.1
This PR contains the following updates:
2.5.1->2.25.2plotly.js prototype pollution vulnerability
CVE-2023-46308 / GHSA-wjc4-73q6-gv3m
More information
#### Details In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty. #### Severity - CVSS Score: 9.8 / 10 (Critical) - Vector String: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H` #### References - [https://nvd.nist.gov/vuln/detail/CVE-2023-46308](https://nvd.nist.gov/vuln/detail/CVE-2023-46308) - [https://github.com/plotly/plotly.js/commit/02498404c8ad7a3395191e65694fb142a37b0fe9](https://redirect.github.com/plotly/plotly.js/commit/02498404c8ad7a3395191e65694fb142a37b0fe9) - [https://github.com/plotly/plotly.js/commit/5efd2a1f07a418b230a5626fc6c1c7929c47949d](https://redirect.github.com/plotly/plotly.js/commit/5efd2a1f07a418b230a5626fc6c1c7929c47949d) - [https://github.com/plotly/plotly.js](https://redirect.github.com/plotly/plotly.js) - [https://github.com/plotly/plotly.js/releases/tag/v2.25.2](https://redirect.github.com/plotly/plotly.js/releases/tag/v2.25.2) - [https://plotly.com/javascript](https://plotly.com/javascript) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-wjc4-73q6-gv3m) and the [GitHub Advisory Database](https://redirect.github.com/github/advisory-database) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).Release Notes
plotly/plotly.js (plotly.js)
### [`v2.25.2`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2252----2023-08-11) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.25.1...v2.25.2) ##### Changed - Update Croatian translations in `hr` locale \[[#6690](https://redirect.github.com/plotly/plotly.js/pull/6690)], with thanks to [@Mkranj](https://redirect.github.com/Mkranj) for the contribution! ##### Fixed - Fix potential prototype pollution in plot API calls \[[#6703](https://redirect.github.com/plotly/plotly.js/pull/6703), [6704](https://redirect.github.com/plotly/plotly.js/pull/6704)] ### [`v2.25.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2251----2023-08-02) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.25.0...v2.25.1) ##### Fixed - Fix clearing legend using react (regression introduced in 2.25.0) \[[#6695](https://redirect.github.com/plotly/plotly.js/pull/6695)] ### [`v2.25.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2250----2023-07-25) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.24.3...v2.25.0) ##### Added - Add "Equal Earth" projection to geo subplots \[[#6670](https://redirect.github.com/plotly/plotly.js/pull/6670)], with thanks to [@apparebit](https://redirect.github.com/apparebit) for the contribution! - Add options to include legends for shapes and `newshape` \[[#6653](https://redirect.github.com/plotly/plotly.js/pull/6653)] - Add Plotly.deleteActiveShape command \[[#6679](https://redirect.github.com/plotly/plotly.js/pull/6679)] ##### Fixed - Fix contour plot colorscale domain (take account of `zmin`, `zmax`, `cmin` and `cmax`) \[[#6625](https://redirect.github.com/plotly/plotly.js/pull/6625)], with thanks to [@lvlte](https://redirect.github.com/lvlte) for the contribution! - Fix text markers on non-mapbox styled maps \[[#6652](https://redirect.github.com/plotly/plotly.js/pull/6652)], with thanks to [@baurt](https://redirect.github.com/baurt) for the contribution! - Fix unhide isolated traces in multi legend cases (regression introduced in 2.24.3) \[[#6684](https://redirect.github.com/plotly/plotly.js/pull/6684)] ### [`v2.24.3`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2243----2023-07-05) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.24.2...v2.24.3) ##### Fixed - Fix double clicking one item in a legend hides traces in other legends \[[#6655](https://redirect.github.com/plotly/plotly.js/pull/6655)] - Fix double click pie slices when having multiple legends \[[#6657](https://redirect.github.com/plotly/plotly.js/pull/6657)] - Fix per legend group and traceorder defaults when having multiple legends \[[#6664](https://redirect.github.com/plotly/plotly.js/pull/6664)] ### [`v2.24.2`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2242----2023-06-09) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.24.1...v2.24.2) ##### Fixed - Fix legend groups toggle (regression introduced in 2.22.0)(https://redirect.github.com/plotly/plotly.js/issues/6639)y.js/issues/6639\)) - Fix waterfall `hovertemplate` not showing delta on totals similar(https://redirect.github.com/plotly/plotly.js/issues/6635)y.js/issues/6635\)) ### [`v2.24.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2241----2023-06-07) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.24.0...v2.24.1) ##### Fixed - Fix minimal copying of arrays in minExtend function (regression introduced in 2.24.0)(https://redirect.github.com/plotly/plotly.js/issues/6632)y.js/issues/6632\)) ### [`v2.24.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2240----2023-06-06) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.23.2...v2.24.0) ##### Added - add pattern to pie, funnelarea, sunburst, icicle and treemap traces \[[#6601](https://redirect.github.com/plotly/plotly.js/pull/6601), [#6619](https://redirect.github.com/plotly/plotly.js/pull/6619), [#6622](https://redirect.github.com/plotly/plotly.js/pull/6622), [#6626](https://redirect.github.com/plotly/plotly.js/pull/6626), [#6627](https://redirect.github.com/plotly/plotly.js/pull/6627), [#6628](https://redirect.github.com/plotly/plotly.js/pull/6628), [#6629](https://redirect.github.com/plotly/plotly.js/pull/6629)], with thanks to [@thierryVergult](https://redirect.github.com/thierryVergult) for the contribution! ##### Fixed - Fix to prevent accessing undefined (hoverText.hoverLabels) in case all currently shown markers have hoverinfo: "none" (regression introduced in 2.6.0)(https://redirect.github.com/plotly/plotly.js/issues/6614)y.js/issues/6614\)), with thanks to [@Domino987](https://redirect.github.com/Domino987) for the contribution! - Fix to ensure only minimum margin spacing is added for container-referenced legends and colorbars \[[#6616](https://redirect.github.com/plotly/plotly.js/pull/6616)] ### [`v2.23.2`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2232----2023-05-19) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.23.1...v2.23.2) ##### Fixed - Fix text rendering while drawing new shapes \[[#6608](https://redirect.github.com/plotly/plotly.js/pull/6608)], with thanks to the [Volkswagen](https://www.volkswagenag.com) Center of Excellence for Battery Systems for sponsoring development! ### [`v2.23.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2231----2023-05-16) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.23.0...v2.23.1) ##### Fixed - Fix heatmap rendering on iOS and Safari when `zsmooth` is set to false \[[#6605](https://redirect.github.com/plotly/plotly.js/pull/6605)], with thanks to [@lvlte](https://redirect.github.com/lvlte) for the contribution! ### [`v2.23.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2230----2023-05-12) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.22.0...v2.23.0) ##### Added - Add `legend.xref` and `legend.yref` to enable container-referenced positioning of legends \[[#6589](https://redirect.github.com/plotly/plotly.js/pull/6589)], with thanks to [Gamma Technologies](https://www.gtisoft.com/) for sponsoring the related development. - Add `colorbar.xref` and `colorbar.yref` to enable container-referenced positioning of colorbars \[[#6593](https://redirect.github.com/plotly/plotly.js/pull/6593)], with thanks to [Gamma Technologies](https://www.gtisoft.com/) for sponsoring the related development. ##### Changed - Improve heatmap rendering performance when `zsmooth` is set to false \[[#6574](https://redirect.github.com/plotly/plotly.js/pull/6574)], with thanks to [@lvlte](https://redirect.github.com/lvlte) for the contribution! ### [`v2.22.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2220----2023-04-27) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.21.0...v2.22.0) ##### Added - Add `legend` references to traces and `legend2`, `legend3`, etc. to layout, also add `visible` to legend i.e. to allow positioning multiple legends on a graph \[[#6535](https://redirect.github.com/plotly/plotly.js/pull/6535)], this feature was anonymously sponsored: thank you to our sponsor! ##### Changed - Update Norwegian translations in `no` locale \[[#5410](https://redirect.github.com/plotly/plotly.js/pull/5410)], with thanks to [@bjornol](https://redirect.github.com/bjornol) for the contribution! - Update Slovak translations and number formats in `sk` locale \[[#6580](https://redirect.github.com/plotly/plotly.js/pull/6580)], with thanks to [@Libco](https://redirect.github.com/Libco) for the contribution! ##### Fixed - Fix `plotly_click` in gl3d scenes to fire on touch devices \[[#6563](https://redirect.github.com/plotly/plotly.js/pull/6563)], with thanks to [@NickTominaga](https://redirect.github.com/NickTominaga) for the contribution! - Fix scatter3d when `marker.opacity` is set to zero \[[#6581](https://redirect.github.com/plotly/plotly.js/pull/6581)], with thanks to [@dmyronuk](https://redirect.github.com/dmyronuk) for the contribution! - Fix scattermapbox visibility restyle \[[#6567](https://redirect.github.com/plotly/plotly.js/pull/6567)] ### [`v2.21.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2210----2023-04-17) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.20.0...v2.21.0) ##### Added - Add `texttemplate` to shape.label for parametric shapes i.e. line, rect and circle \[[#6527](https://redirect.github.com/plotly/plotly.js/pull/6527)], with thanks to the [Volkswagen](https://www.volkswagenag.com) Center of Excellence for Battery Systems for sponsoring development! - Add strict option to custom bundle command \[[#6557](https://redirect.github.com/plotly/plotly.js/pull/6557)], with thanks to [@CallumNZ](https://redirect.github.com/CallumNZ) for the contribution! ##### Fixed - Fix dragging of legend when xanchor is not 'left' or yanchor is not 'top' \[[#6528](https://redirect.github.com/plotly/plotly.js/pull/6528)], with thanks to [@bmaranville](https://redirect.github.com/bmaranville) for the contribution! - Fix heatmap rendering bug and improve performance when `zsmooth` is set to "fast" \[[#6565](https://redirect.github.com/plotly/plotly.js/pull/6565)], with thanks to [@lvlte](https://redirect.github.com/lvlte) for the contribution! ### [`v2.20.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2200----2023-03-15) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.19.1...v2.20.0) ##### Added - Add `title.automargin` to enable automatic top and bottom margining for both container and paper referenced titles \[[#6428](https://redirect.github.com/plotly/plotly.js/pull/6428)], with thanks to [Gamma Technologies](https://www.gtisoft.com/) for sponsoring the related development. ### [`v2.19.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2191----2023-03-14) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.19.0...v2.19.1) ##### Fixed - Ensure slider range stays in bounds during the drag \[[#4448](https://redirect.github.com/plotly/plotly.js/pull/4448)], with thanks to [@jay-bis](https://redirect.github.com/jay-bis) for the contribution! ### [`v2.19.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2190----2023-03-13) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.18.2...v2.19.0) ##### Added - Add `label` attribute to shapes \[[#6454](https://redirect.github.com/plotly/plotly.js/pull/6454)], with thanks to the [Volkswagen](https://www.volkswagenag.com) Center of Excellence for Battery Systems for sponsoring development! - Add `labelalias` to various axes namely cartesian, gl3d, polar, smith, ternary, carpet, indicator and colorbar \[[#6481](https://redirect.github.com/plotly/plotly.js/pull/6481)], this feature was anonymously sponsored: thank you to our sponsor! ##### Changed - Upgrade `is-mobile` dependency \[[#6517](https://redirect.github.com/plotly/plotly.js/pull/6517)] ##### Fixed - Avoid overlap of point and axis hover labels for `hovermode: 'x'|'y'` \[[#6442](https://redirect.github.com/plotly/plotly.js/pull/6442)], with thanks to [@dagroe](https://redirect.github.com/dagroe) for the contribution! ### [`v2.18.2`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2182----2023-02-15) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.18.1...v2.18.2) ##### Fixed - Avoid attaching internal d3 object to the window (regression introduced in 2.17.0) \[[#6487](https://redirect.github.com/plotly/plotly.js/pull/6487)] - Correct the order of lower fence and upper fence in the French locale (fr) \[[#6476](https://redirect.github.com/plotly/plotly.js/pull/6476)], with thanks to [@Gagaro](https://redirect.github.com/Gagaro) for the contribution! - Correct formats in the Peruvian locale (es-pe) \[[#6451](https://redirect.github.com/plotly/plotly.js/pull/6451)], with thanks to [@andresrcs](https://redirect.github.com/andresrcs) for the contribution! ### [`v2.18.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2181----2023-02-02) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.18.0...v2.18.1) ##### Changed - Bump `d3-interpolate` and `d3-color` to v3 to address audit warnings \[[#6463](https://redirect.github.com/plotly/plotly.js/pull/6463)] ##### Fixed - Fix scaling of exports e.g. the SVG format by not adding `vector-effect` CSS to static plots \[[#6445](https://redirect.github.com/plotly/plotly.js/pull/6445)] - Fix hover on IE (regression introduced in 2.5.0) \[[#6466](https://redirect.github.com/plotly/plotly.js/pull/6466)] ### [`v2.18.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2180----2023-01-19) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.17.1...v2.18.0) ##### Added - Add `sync` tickmode option \[[#6356](https://redirect.github.com/plotly/plotly.js/pull/6356), [#6443](https://redirect.github.com/plotly/plotly.js/pull/6443)], with thanks to [@filipesantiagoAM](https://redirect.github.com/filipesantiagoAM) and [@VictorBezak](https://redirect.github.com/VictorBezak) for the contribution! ##### Changed - Improve detection of mobile & tablet devices for WebGL rendering by upgrading `is-mobile` \[[#6432](https://redirect.github.com/plotly/plotly.js/pull/6432)] ##### Fixed - Fix library's imported name using `requirejs` AMD loader (regression introduced in 2.17.0) \[[#6440](https://redirect.github.com/plotly/plotly.js/pull/6440)] ### [`v2.17.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2171----2023-01-09) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.17.0...v2.17.1) ##### Fixed - Fix line redraw (regression introduced in 2.15.0) \[[#6429](https://redirect.github.com/plotly/plotly.js/pull/6429)] ### [`v2.17.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2170----2022-12-22) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.16.5...v2.17.0) ##### Added - Add `shift` and `autoshift` to cartesian y axes to help avoid overlapping of multiple axes \[[#6334](https://redirect.github.com/plotly/plotly.js/pull/6334)], with thanks to [Gamma Technologies](https://www.gtisoft.com) for sponsoring the related development! - Introduce group attributes for `scatter` trace i.e. `alignmentgroup`, `offsetgroup`, `scattermode` and `scattergap` \[[#6381](https://redirect.github.com/plotly/plotly.js/pull/6381)], this feature was anonymously sponsored: thank you to our sponsor! - Add `marker.cornerradius` attribute to `treemap` trace \[[#6351](https://redirect.github.com/plotly/plotly.js/pull/6351)] ##### Changed - Change bundler from browserify to webpack \[[#6355](https://redirect.github.com/plotly/plotly.js/pull/6355)] ##### Fixed - Fix auto `backoff` when marker symbols and sizes are arrays \[[#6414](https://redirect.github.com/plotly/plotly.js/pull/6414)] - Avoid displaying resize cursor on static sliders \[[#6397](https://redirect.github.com/plotly/plotly.js/pull/6397)] ### [`v2.16.5`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2165----2022-12-13) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.16.4...v2.16.5) ##### Fixed - Disable slider interactions when `staticPlot` is set to true \[[#6393](https://redirect.github.com/plotly/plotly.js/pull/6393)] ### [`v2.16.4`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2164----2022-12-07) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.16.3...v2.16.4) ##### Fixed - Fix `scattermapbox` redraw (regression introduced in 2.16.0) \[[#6387](https://redirect.github.com/plotly/plotly.js/pull/6387)] ### [`v2.16.3`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2163----2022-11-16) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.16.2...v2.16.3) ##### Fixed - Fix hover on multicategory axes \[[#6360](https://redirect.github.com/plotly/plotly.js/pull/6360)], with thanks to [@filipesantiagoAM](https://redirect.github.com/filipesantiagoAM) for the contribution! ### [`v2.16.2`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2162----2022-11-11) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.16.1...v2.16.2) ##### Fixed - Fix mapbox clearOutline calls (regression introduced in 2.13.0) \[[#6367](https://redirect.github.com/plotly/plotly.js/pull/6367)] ### [`v2.16.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2161----2022-10-21) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.16.0...v2.16.1) ##### Fixed - Fix `choroplethmapbox` selection when adding new traces on top \[[#6345](https://redirect.github.com/plotly/plotly.js/pull/6345)] ### [`v2.16.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2160----2022-10-14) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.15.1...v2.16.0) ##### Added - Add clustering options to `scattermapbox` \[[#5827](https://redirect.github.com/plotly/plotly.js/pull/5827)], with thanks to [@elben10](https://redirect.github.com/elben10) for the contribution! - Add bounds to mapbox suplots \[[6339](https://redirect.github.com/plotly/plotly.js/pull/6339)] ### [`v2.15.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2151----2022-10-11) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.15.0...v2.15.1) ##### Fixed - Fix latest version of plotly.js main module on npm ### [`v2.15.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2150----2022-10-06) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.14.0...v2.15.0) ##### Added - Add `angle`, `angleref` and `standoff` to `marker` and add `backoff` to `line`; also introduce new arrow symbols to facilitate drawing networks \[[#6297](https://redirect.github.com/plotly/plotly.js/pull/6297)] - Add `minreducedwidth` and `minreducedheight` to layout for increasing control over automargin \[[#6307](https://redirect.github.com/plotly/plotly.js/pull/6307)] - Add `entrywidth` and `entrywidthmode` to legend \[[#6202](https://redirect.github.com/plotly/plotly.js/pull/6202), [#6324](https://redirect.github.com/plotly/plotly.js/pull/6324)] ##### Changed - Use valType of `angle` for `rotation` in `pie` \[[#6304](https://redirect.github.com/plotly/plotly.js/pull/6304)] ##### Fixed - Fix mapbox `touch event` after switching back from select mode \[[#6281](https://redirect.github.com/plotly/plotly.js/pull/6281)], with thanks to [@mmtmr](https://redirect.github.com/mmtmr) for the contribution! - Fix automargin to update axis titles in redraws \[[#6312](https://redirect.github.com/plotly/plotly.js/pull/6312)] - Fix exporting patterns with transparent color \[[#6318](https://redirect.github.com/plotly/plotly.js/pull/6318)] - Fix exporting text on empty slices \[[#6335](https://redirect.github.com/plotly/plotly.js/pull/6335)] - Disable interactions for `treemap`, `icicle`, `sunburst`, `pie`, `funnelarea`, `parcats`, `parcoords` and `sankey` traces when `staticPlot` is set to true \[[#6296](https://redirect.github.com/plotly/plotly.js/pull/6296)] ### [`v2.14.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2140----2022-08-10) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.13.3...v2.14.0) ##### Added - Add support for sankey links with arrows \[[#6276](https://redirect.github.com/plotly/plotly.js/pull/6276)], with thanks to [@Andy2003](https://redirect.github.com/Andy2003) for the contribution! - Add `editSelection` option to config \[[#6285](https://redirect.github.com/plotly/plotly.js/pull/6285)] ##### Changed - Update dutch translations and fix dateMonth format for `nl` locale to confirm with expected nl format \[[#6261](https://redirect.github.com/plotly/plotly.js/pull/6261)], with thanks to [@eirvandelden](https://redirect.github.com/eirvandelden) for the contribution! ### [`v2.13.3`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2133----2022-07-25) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.13.2...v2.13.3) ##### Fixed - Emit plotly_selected event on plot API calls and GUI edits \[[#6277](https://redirect.github.com/plotly/plotly.js/pull/6277)] ### [`v2.13.2`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2132----2022-07-21) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.13.1...v2.13.2) ##### Fixed - Fix `sankey` select error (regression introduced in 2.13.0) \[[#6265](https://redirect.github.com/plotly/plotly.js/pull/6265)] - Handle missing drag layer of invisible `sankey` traces to fix select error \[[#6267](https://redirect.github.com/plotly/plotly.js/pull/6267)] - Emit selection event in shape drawing `dragmode`s when an existing selection is modified \[[#6262](https://redirect.github.com/plotly/plotly.js/pull/6262)] ### [`v2.13.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2131----2022-07-14) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.13.0...v2.13.1) ##### Fixed - Avoid attaching `selections` to undefined eventData (regression introduced in 2.13.0) \[[#6260](https://redirect.github.com/plotly/plotly.js/pull/6260)] ### [`v2.13.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2130----2022-07-14) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.12.1...v2.13.0) ##### Added - Add `selections`, `newselection` and `activeselection` layout attributes to have persistent and editable selections over cartesian subplots \[[#6243](https://redirect.github.com/plotly/plotly.js/pull/6243)] - Add `unselected.line.color` and `unselected.line.opacity` options to `parcoords` trace \[[#6216](https://redirect.github.com/plotly/plotly.js/pull/6216), [#6236](https://redirect.github.com/plotly/plotly.js/pull/6236)] - Add "exclusive" and "inclusive" quartile-computing algorithm to `violin` trace via `quartilemethod` attribute \[[#6187](https://redirect.github.com/plotly/plotly.js/pull/6187)] - Add flaglist options including "left", "right", "top", "bottom", "width" and "height" to control the direction of `automargin` on cartesian axes \[[#6193](https://redirect.github.com/plotly/plotly.js/pull/6193)] - Add `delta.prefix` and `delta.suffix` to `indicator` trace \[[#6246](https://redirect.github.com/plotly/plotly.js/pull/6246)], with thanks to [@paulovieira](https://redirect.github.com/paulovieira) for the contribution! - Add official Chinese (Taiwan) translation (locale `zh-tw`) \[[#6247](https://redirect.github.com/plotly/plotly.js/pull/6247)], with thanks to [@sec2](https://redirect.github.com/sec2) for the contribution! - Add official Sinhala translation (locale `si`) \[[#6238](https://redirect.github.com/plotly/plotly.js/pull/6238)], with thanks to [@sujithranga](https://redirect.github.com/sujithranga) for the contribution! ##### Changed - Display Plotly's new logo in the modebar \[[#6232](https://redirect.github.com/plotly/plotly.js/pull/6232)] ##### Fixed - Fix undesirable missing hover labels of `box` & `violin` traces \[[#6189](https://redirect.github.com/plotly/plotly.js/pull/6189)] - Fix `xref` description of `shapes` \[[#6194](https://redirect.github.com/plotly/plotly.js/pull/6194)] ### [`v2.12.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2121----2022-05-09) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.12.0...v2.12.1) ##### Fixed - Fix for disabling polar rotation when `dragmode` is set to false \[[#6147](https://redirect.github.com/plotly/plotly.js/pull/6147)], with thanks to [@jonfunkhouser](https://redirect.github.com/jonfunkhouser) for the contribution! - Fix custom modebar buttons mutate the input \[[#6177](https://redirect.github.com/plotly/plotly.js/pull/6177)] - Fix various missing and duplicate spaces in plot schema descriptions \[[#6183](https://redirect.github.com/plotly/plotly.js/pull/6183)] ### [`v2.12.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2120----2022-05-02) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.11.1...v2.12.0) ##### Added - Add `griddash` axis property to cartesian, polar, smith, ternary and geo subplots and add `griddash` and `minorgriddash` to `carpet` trace \[[6144](https://redirect.github.com/plotly/plotly.js/pull/6144)], with thanks to [@njwhite](https://redirect.github.com/njwhite) for the contribution! - Implement various options to position and style `minor` ticks and grid lines on cartesian axis types including `minor.tickmode`, `minor.tickvals`, `minor.tickcolor`, `minor.ticklen`, `minor.tickwidth`, `minor.dtick`, `minor.tick0`, `minor.nticks`, `minor.ticks`, `minor.showgrid`, `minor.gridcolor`, `minor.griddash` and `minor.gridwidth` \[[6166](https://redirect.github.com/plotly/plotly.js/pull/6166)] ##### Changed - Use the "willReadFrequently" 2d context creation attribute to optimize readback performance \[[#6084](https://redirect.github.com/plotly/plotly.js/pull/6084)], with thanks to [@junov](https://redirect.github.com/junov) for the contribution! ##### Fixed - avoid drawing blank tick labels on cartesian axes \[[#6163](https://redirect.github.com/plotly/plotly.js/pull/6163)] ### [`v2.11.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2111----2022-03-15) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.11.0...v2.11.1) ##### Fixed - Regenerate functions of regl-based traces in the "strict" bundle \[[#6141](https://redirect.github.com/plotly/plotly.js/pull/6141)] ### [`v2.11.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2110----2022-03-11) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.10.1...v2.11.0) ##### Added - Add a CSP complaint variation of regl-based traces i.e. `parcoords`, `splom`, `scattergl`, `scatterpolargl` to the "strict" bundle \[[#6083](https://redirect.github.com/plotly/plotly.js/pull/6083)] - Add `scattersmith` trace to the "strict" bundle \[[#6135](https://redirect.github.com/plotly/plotly.js/pull/6135)] ### [`v2.10.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2101----2022-03-08) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.10.0...v2.10.1) ##### Fixed - Fix `mesh3d` generation when `alphahull` is a positive number (regression introduced in 2.5.1) \[[#6133](https://redirect.github.com/plotly/plotly.js/pull/6133)] ### [`v2.10.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#2100----2022-03-04) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.9.0...v2.10.0) ##### Added - Add support to use version 3 of MathJax and add `typesetMath` attribute to config \[[#6073](https://redirect.github.com/plotly/plotly.js/pull/6073)], with thanks to [Equinor](https://www.equinor.com) for sponsoring the related development! - Add `fillpattern` options to `scatter` trace \[[#6101](https://redirect.github.com/plotly/plotly.js/pull/6101)], with thanks to [@s417-lama](https://redirect.github.com/s417-lama) for the contribution! ### [`v2.9.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#290----2022-02-04) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.8.3...v2.9.0) ##### Added - Implement `ticklabelstep` to reduce labels on 2D axes and colorbars \[[#6088](https://redirect.github.com/plotly/plotly.js/pull/6088)], this feature was anonymously sponsored: thank you to our sponsor! ##### Changed - Display the version of plotly.js when hovering over the modebar \[[#6077](https://redirect.github.com/plotly/plotly.js/pull/6077)] - Various dependency updates as listed under [the v2.9.0 milestone](https://redirect.github.com/plotly/plotly.js/milestone/69?closed=1) ##### Fixed - Fix vertical spacing of legend items in horizontal mode \[[#6094](https://redirect.github.com/plotly/plotly.js/pull/6094)] ### [`v2.8.3`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#283----2021-12-20) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.8.2...v2.8.3) ##### Fixed - Correct formatted x/y `texttempate` for `histogram` trace \[[#6070](https://redirect.github.com/plotly/plotly.js/pull/6070)] ### [`v2.8.2`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#282----2021-12-20) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.8.1...v2.8.2) ##### Fixed - Fix missing x/y `texttemplate` for `histogram`, `bar`, `funnel` and `waterfall` traces \[[#6069](https://redirect.github.com/plotly/plotly.js/pull/6069)] ### [`v2.8.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#281----2021-12-15) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.8.0...v2.8.1) ##### Fixed - Do not exceed layout font size when `textfont` is set to "auto" for `heatmap`, `histogram2d`, `contour` and `histogram2dcontour` traces \[[#6061](https://redirect.github.com/plotly/plotly.js/pull/6061)] ### [`v2.8.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#280----2021-12-10) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.7.0...v2.8.0) ##### Added - Introduce horizontal colorbars \[[#6024](https://redirect.github.com/plotly/plotly.js/pull/6024)] - Implement `legend.grouptitlefont` and `hoverlabel.grouptitlefont` \[[#6040](https://redirect.github.com/plotly/plotly.js/pull/6040)] - Add `texttemplate` and `textfont` to `heatmap` and `histogram2d` traces as well as `histogram2dcontour` and `contour` traces when `coloring` is set "heatmap" \[[#6028](https://redirect.github.com/plotly/plotly.js/pull/6028)] ##### Fixed - Fix to discard negative values from `pie` chart post-aggregation instead of during summation \[[#6051](https://redirect.github.com/plotly/plotly.js/pull/6051)], with thanks to [@destiny-wu](https://redirect.github.com/destiny-wu) for the contribution! ### [`v2.7.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#270----2021-12-02) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.6.4...v2.7.0) ##### Added - Add `texttemplate`, `textposition`, `textfont`, `textangle`, `outsidetextfont`, `insidetextfont`, `insidetextanchor`, `constraintext` and `cliponaxis` to `histogram` trace \[[#6038](https://redirect.github.com/plotly/plotly.js/pull/6038)] ##### Changed - Bump `probe-image-size` module to v7.2.2 \[[#6036](https://redirect.github.com/plotly/plotly.js/pull/6036)] ##### Fixed - Fix mapbox derived coordinate for Retina displays \[[#6039](https://redirect.github.com/plotly/plotly.js/pull/6039)] - Fix interaction between `uirevision` and `autorange`. Because we push `autorange` and `range` back into `layout`, there can be times it looks like we're applying GUI-driven changes on top of explicit autorange and other times it's an implicit autorange, even though the user's intent was always implicit. This fix treats them as equivalent. \[[#6046](https://redirect.github.com/plotly/plotly.js/pull/6046)] ### [`v2.6.4`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#264----2021-11-26) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.6.3...v2.6.4) ##### Fixed - Avoid bar with text to jump when selected \[[#6043](https://redirect.github.com/plotly/plotly.js/pull/6043)] ### [`v2.6.3`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#263----2021-11-12) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.6.2...v2.6.3) ##### Fixed - Fix hover events in Shadow DOM \[[#6021](https://redirect.github.com/plotly/plotly.js/pull/6021)], with thanks to [@SabineWren](https://redirect.github.com/SabineWren) for the contribution! ### [`v2.6.2`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#262----2021-11-05) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.6.1...v2.6.2) ##### Fixed - Fix loading issue in [orca](https://redirect.github.com/plotly/orca) (regression introduced in 2.6.0) \[[#6011](https://redirect.github.com/plotly/plotly.js/pull/6011)] ### [`v2.6.1`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#261----2021-11-03) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.6.0...v2.6.1) ##### Fixed - Fix to avoid including local stackgl_modules/node_modules in the package (regression introduced in 2.6.0) \[[#6008](https://redirect.github.com/plotly/plotly.js/pull/6008)] ### [`v2.6.0`](https://redirect.github.com/plotly/plotly.js/blob/HEAD/CHANGELOG.md#260----2021-10-29) [Compare Source](https://redirect.github.com/plotly/plotly.js/compare/v2.5.1...v2.6.0) ##### Added - Add `smith` subplots and the `scattersmith` trace type for displaying Smith charts \[[#5956](https://redirect.github.com/plotly/plotly.js/pull/5956), [#5992](https://redirect.github.com/plotly/plotly.js/pull/5992)], with thanks to Kitware and [@waxlamp](https://redirect.github.com/waxlamp) for kicking off this effort. ##### Changed - Improve drawing the contour lines in non-linear space e.g. on log axes \[[#5985](https://redirect.github.com/plotly/plotly.js/pull/5985)], with thanks to [@andrew-matteson](https://redirect.github.com/andrew-matteson) for the contribution! - Bump eslint to v8 release candidate including fixes for `no-new-func` test \[[#5969](https://redirect.github.com/plotly/plotly.js/pull/5969)] ##### Fixed - Fix `npm install` problem for `npm v6` users (regression introduced in 2.5.0) \[[#6004](https://redirect.github.com/plotly/plotly.js/pull/6004)] - Fix unhover event data for gl3d subplots \[[#5954](https://redirect.github.com/plotly/plotly.js/pull/5954)], with thanks to [@dwoznicki](https://redirect.github.com/dwoznicki) for the contribution! - Fix scatter3d opacity restyle bug \[[#5958](https://redirect.github.com/plotly/plotly.js/pull/5958)], with thanks to [@dwoznicki](https://redirect.github.com/dwoznicki) for the contribution! - Skip `"hoverinfo": "none"` trace display for hover modes \[[#5854](https://redirect.github.com/plotly/plotly.js/pull/5854)], with thanks to [@Domino987](https://redirect.github.com/Domino987) for the contribution! - Display prefix and suffix of invisible polar axes in hover \[[#5964](https://redirect.github.com/plotly/plotly.js/pull/5964)] - Reduce calls to `getBoundingClientRect` in `convertToTspans` \[[#5976](https://redirect.github.com/plotly/plotly.js/pull/5976)] - Avoid wrapping legend items if already on the first column \[[#5996](https://redirect.github.com/plotly/plotly.js/pull/5996)] - Fix horizontal alignment of colorbar in editable mode when `xanchor` is set to "center" \[[#6002](https://redirect.github.com/plotly/plotly.js/pull/6002)] - Fix to improve rendering of graphs with Mathjax on Firefox v82 and higher \[[#5993](https://redirect.github.com/plotly/plotly.js/pull/5993)]Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.