VCalendar: prevent XSS from eventName function (ade1434), closes #15757
VDialog: don't try to focus tabindex="-1" or hidden inputs (89e3850), closes #15745
VMenu: disable activatorFixed when attach is enabled (#15709) (464529a), closes #14922
VTextField: only show clear icon on hover or when focused (7a51ad0)
VTextField: prevent tabbing to clear button (f8ee680), closes #11202
web-types: add support for VDataTable pattern slots (#15694) (ac45c98)
:microscope: Code Refactoring
VSelect: render highlight with vnodes instead of innerHTML (4468e3c)
BREAKING CHANGES
VCalendar:eventName function can no longer render arbitrary HTML, convert to VNodes instead.
eventSummary can no longer be used with v-html, replace with <component :is="{ render: eventSummary }" />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dhulme/money-manager/network/alerts).
Bumps vuetify from 2.6.2 to 2.6.10.
Release notes
Sourced from vuetify's releases.
... (truncated)
Commits
fdfb6fcchore(release): publish v2.6.10cd193e4fix(VSelectList): correct mask class89e3850fix(VDialog): don't try to focus tabindex="-1" or hidden inputs4468e3crefactor(VSelect): render highlight with vnodes instead of innerHTMLade1434fix(VCalendar): prevent XSS from eventName function464529afix(VMenu): disabled activatorFixed when attach is enabled (#15709)7a51ad0fix(VTextField): only show clear icon on hover or when focusedf8ee680fix(VTextField): prevent tabbing to clear button170c7d1chore(release): publish v2.6.92cd34b4fix(VCalendar): add aria roles to monthly calendar (#14640)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dhulme/money-manager/network/alerts).