🔥🔥🔥 @ant-design/cssinjs StyleProvider supports configuring layer to unified downgrade CSS priority. After the downgrade, the style of antd will always be lower than the default CSS selector priority, so that users can override the style (please be sure to check the browser compatibility of @layer), see full documentation for usage. #48229
🆕 Carousel supports arrows to switching between slides now. #48542
Form
🛠 Form move dependency from async-validator to @rc-component/async-validator, fix a bug that transform don't check it's return value type. #48486@crazyair
Added better configurability for comment scrubbing default behavior
Added better hardening against Prototype Pollution attacks, thanks @kevin-mizu
Added better handling and readability of the nodeType property, thanks @ssi02014
Fixed some smaller issues in README and other documentation
DOMPurify 3.1.2
Addressed and fixed a mXSS variation found by @kevin-mizu
Addressed and fixed a mXSS variation found by Adam Kues of Assetnote
Updated tests for older Safari and Chrome versions
DOMPurify 3.1.1
Fixed an mXSS sanitiser bypass reported by @icesfont
Added new code to track element nesting depth
Added new code to enforce a maximum nesting depth of 255
Added coverage tests and necessary clobbering protections
Note that this is a security release and should be upgraded to immediately. Please also note that further releases may follow as the underlying vulnerability is apparently new and further variations may be discovered.
f66769cca#8243 (fixes #8210) - Analytics - fixed an issue where setConsent was clobbering the consentSettings before passing them to the gtag implementation.
Check for document existence when checking startViewTransition (#11544)
Change the react-router-dom/server import back to react-router-dom instead of index.ts (#11514)
Updated dependencies:
@remix-run/router@1.16.1
react-router@6.23.1
6.23.0
Minor Changes
Add a new unstable_dataStrategy configuration option (#11098)
This option allows Data Router applications to take control over the approach for executing route loaders and actions
The default implementation is today's behavior, to fetch all loaders in parallel, but this option allows users to implement more advanced data flows including Remix single-fetch, middleware/context APIs, automatic loader caching, and more
Bumps the dev-dependencies group with 21 updates in the / directory:
5.3.6
5.3.7
5.16.2
5.17.3
3.1.0
3.1.4
10.11.0
10.12.1
12.1.0
12.1.1
12.0.1
12.0.2
18.2.0
18.3.1
18.2.79
18.3.2
18.2.0
18.3.1
18.2.25
18.3.0
6.22.3
6.23.1
15.0.2
15.0.7
20.12.7
20.12.12
7.7.0
7.10.0
7.7.0
7.10.0
3.6.0
3.7.0
1.5.0
1.6.0
8.57.0
9.3.0
4.6.0
4.6.2
0.4.6
0.4.7
5.2.9
5.2.11
Updates
@ant-design/icons
from 5.3.6 to 5.3.7Commits
Updates
antd
from 5.16.2 to 5.17.3Release notes
Sourced from antd's releases.
... (truncated)
Changelog
Sourced from antd's changelog.
... (truncated)
Commits
733d58d
docs: changelog 5.17.3 (#48979)84ee56f
docs: add needConfirm option on time-picker docs (#48945)cb72cb2
docs(upload): Supplement the missing server-side mock example (#48977)e299806
docs: delete needConfirm false option in demo (#48967)253b45e
docs: fix wrong brightness value in Palette Generation Tool (#48973)51ec7e3
docs: make accordion mode easier to understand (#48972)b62b819
test: Fix React 18.3 findDOMNode warning (#48958)9f2089c
chore: upgrade deps (#48966)2d6a8b4
chore: upgrade deps (#48954)59de115
fix: fix button fontSize token ineffective (#48893)Updates
dompurify
from 3.1.0 to 3.1.4Release notes
Sourced from dompurify's releases.
Commits
7517e9c
Merge pull request #960 from cure53/main3ddb7f2
chore: Preparing 3.1.4 release4486f91
test: Experimentally changed TEST_PROBE_ONLY to not cover 2.x1223487
fix: Added MSIE number check fix to main as wella34860b
Merge pull request #957 from Gigabyte5671/popover-api96bf0d4
Merge pull request #956 from MortenHofft/patch-128c1828
Add popover attributes to allow list952f309
documentation3fe78d7
chore: Preparing 3.1.3 releaseb20ce99
fix: Added smaller-than-null check for __depth hardening codeUpdates
firebase
from 10.11.0 to 10.12.1Release notes
Sourced from firebase's releases.
... (truncated)
Commits
7381f21
Version Packages (#8254)ff65c13
Merge master into release43a8d99
Add job to create a GitHub release (#8248)f66769c
Fix setConsent to properly use theupdate
gtag command (#8243)2ce9569
Fix multi tab persistence issue (#8247)9cbb184
Fix minor mistakes in the root README (#8242)8fb372a
Version Packages (#8236)c7a92a9
Merge master into releaseab883d0
Bump all packages (#8237)5255361
Merge master into releaseUpdates
firebase-admin
from 12.1.0 to 12.1.1Release notes
Sourced from firebase-admin's releases.
Commits
e2515f2
[chore] Release 12.1.1 (#2561)4d4fd39
build(deps): updgrade jwks-rsa (#2570)1754b7e
--- (#2568)72f0169
--- (#2566)8f622cf
--- (#2567)f8f8eb9
--- (#2569)ee78c87
build(deps-dev): bump@firebase/auth-types
from 0.12.1 to 0.12.2 (#2556)f837c23
build(deps-dev): bump@microsoft/api-extractor
from 7.43.2 to 7.43.7 (#2559)41aea3a
chore: upgrade firestore to 7.7.0 (#2560)26cd8b0
build(deps-dev): bump@firebase/app-compat
from 0.2.32 to 0.2.33 (#2555)Updates
marked
from 12.0.1 to 12.0.2Release notes
Sourced from marked's releases.
Commits
c6a98ea
chore(release): 12.0.2 [skip ci]e9f0eed
fix: fix Setext continuation in blockquote (#3257)a90223b
chore(deps-dev): Bump@typescript-eslint/eslint-plugin
from 7.4.0 to 7.6.0 (#...7757f96
chore(deps-dev): Bump typescript from 5.4.4 to 5.4.5 (#3261)609b65c
chore(deps-dev): Bump@arethetypeswrong/cli
from 0.15.2 to 0.15.3 (#3258)dfa835e
chore(deps-dev): Bump rollup from 4.14.1 to 4.14.3 (#3259)f0fb744
chore(deps-dev): Bump semantic-release from 23.0.6 to 23.0.7 (#3255)924130d
chore(deps-dev): Bump@semantic-release/github
from 10.0.2 to 10.0.3 (#3254)8cdb7ca
chore(deps-dev): Bump rollup from 4.13.2 to 4.14.1 (#3253)1cc9eb2
chore(deps-dev): Bump typescript from 5.4.3 to 5.4.4 (#3252)Updates
react
from 18.2.0 to 18.3.1Release notes
Sourced from react's releases.
Changelog
Sourced from react's changelog.
Commits
f1338f8
ExportReact.act
from 18.3d6c42f7
Bump to 18.3.173bfaa1
Turn on key spread warning in jsx-runtime for everyone (#25697)c2a246e
Turn on string ref deprecation warning for everybody (not codemoddable) (#25383)2cfb474
Bump version from 18.2 to 18.3Maintainer changes
This version was pushed to npm by react-bot, a new releaser for react since your current version.
Updates
@types/react
from 18.2.79 to 18.3.2Commits
Updates
react-dom
from 18.2.0 to 18.3.1Release notes
Sourced from react-dom's releases.
Changelog
Sourced from react-dom's changelog.
Commits
d6c42f7
Bump to 18.3.18a015b6
Add deprecation warning for unmountComponentAtNodec3b2839
Add deprecation warning for findDOMNoded4ea75d
ReactDOMTestUtils deprecation warnings7548c01
DeprecaterenderToStaticNodeStream
(#28872) (#28874)5894232
Enable warning for defaultProps on function components for everyone (#25699)c2a246e
Turn on string ref deprecation warning for everybody (not codemoddable) (#25383)2cfb474
Bump version from 18.2 to 18.3Maintainer changes
This version was pushed to npm by react-bot, a new releaser for react-dom since your current version.
Updates
@types/react-dom
from 18.2.25 to 18.3.0Commits
Updates
react-router-dom
from 6.22.3 to 6.23.1Release notes
Sourced from react-router-dom's releases.
... (truncated)
Changelog
Sourced from react-router-dom's changelog.
Commits
aef5c4a
chore: Update version for release (#11551)26bc8e2
chore: Update version for release (pre) (#11545)031478d
Add defensive window.document check when checking for startViewTransition (#1...9651465
chore: Update version for release (pre) (#11516)fdff9dd
Fix react-router-dom/server index.ts import from pnpm migration (#11514)82a3a77
chore: Update version for release (#11486)8a20f32
chore: Update version for release (pre) (#11387)88ec71a
chore: Update version for release (pre) (#11379)12afb2e
Migrate to pnpm (#11358)c7dd3d3
Data Strategy Configuration (#11098)Updates
@testing-library/react
from 15.0.2 to 15.0.7Release notes
Sourced from
@testing-library/react
's releases.Commits
c1f2957
fix: Ensureact
is notany
whenReact.act
is not declared (#1323)b6e59f7
fix: export new act when available (#1319)f6a1677
chore: Adjust tests to workaround 18.3.0 bug (#1315)d143f46
fix: Stop restrictingcontainer
option based onhydrate
(#1313)48282c2
fix: EnsurerenderHook
options extend options forrender
(#1308)067d0c6
fix: Don't raise TypeScript errors when hydatingdocument
(#1304)Updates
@types/node
from 20.12.7 to 20.12.12Commits
Updates
@types/react
from 18.2.79 to 18.3.2Commits
Updates
@types/react-dom
from 18.2.25 to 18.3.0Commits
Updates
@typescript-eslint/eslint-plugin
from 7.7.0 to 7.10.0Release notes
Sourced from
@typescript-eslint/eslint-plugin
's releases.Looks like these dependencies are updatable in another way, so this is no longer needed.