[Security] Bump bootstrap from 3.4.1 to 5.0.1

Bumps bootstrap from 3.4.1 to 5.0.1. This update includes a security fix.

Vulnerabilities fixed

Sourced from The GitHub Security Advisory Database.

Moderate severity vulnerability that affects bootstrap In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042.

Affected versions: < 4.1.2

Release notes

Sourced from bootstrap's releases.

v5.0.1

🎨 CSS

#33551: Modals no longer use .modal-open to affect the <body> scroll

#33644: Validated inputs in .input-group shouldn't be behind sibling element

#33825: Prevent accent-bg from leaking in nested table

#33870: Don't redefine $list-group-color in loop

#33961: Revert :read-only selector back to [readonly]

☕️ JavaScript

#33221: Prevent toast autohiding if focusing or hovering

#33288: Remove potential false positive assertions

#33327: Move get element functionality to a helper

#33381: Popover/Tooltip: streamline config property to start with underscore

#33609: Merge js-components transitionend listener callbacks into one method

#33635: Extract static DATA_KEY & EVENT_KEY to base-component

#33740: Refactor: move disposing properties into the base class

#33853: Fix backdrop rootElement not initialized in Modal

#33920: Fix: Click on input outside of dropdown-menu prevents dropdown from closing

#33938: Fix dropdown test warning "without expectations"

📖 Docs

#33709: Add Arabic translation

#33837: update About text now that Bootstrap 5 is live

#33841: Fix typo in scrollspy docs

#33842: Fix browser support versions in migration doc

#33843: Fix typo in migration.md

#33855: Remove extra t in Close button heading in Migration guide

#33868: Fix value

#33879: Fix "no long require" to "no longer require" typo

#33893: Add accessible names to SVG icons in alerts

#33896: Fix accordion link

#33901: docs: make tooltip anchor properly wrap the svg

#33904: Add Fathom Analytics to v5 docs

#33915: docs: fix rtlcss stringmap configuration

#33916: Remove unneeded "Edge Legacy" mention in Range docs

#33924: Fix "directoinal" typo in v5 migration docs

🛠 Examples

#33850: Fix unnecessary classes

#33859: Update Sidebars example to fix dividers and rendering on Chrome

#33926: Fix offcanvas example, using a custom trigger selector

🌎 Accessibility

#33893: Add accessible names to SVG icons in alerts

... (truncated)

Commits

58b1be9 Release v5.0.1 (#33972)
130a5ba remove modal css override
6e1c909 Move get element functionality to a helper (#33327)
e376142 Update devDependencies (#33970)
b196857 Bump sass from 1.32.12 to 1.32.13 (#33969)
1e4b924 Revert "use :read-only css selector instead [readonly] for consistency (#...
7ed4894 PRevent accent-bg from leaking in nested table (#33825)
d81d0a9 Validated inputs in .input-group shouldn't be behind sibling element (#33644)
d80cb22 Update Sidebars example to fix dividers and rendering on Chrome (#33859)
3464d3c Add Fathom Analytics to v5 docs (#33904)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)

hybridx / angular7

[Security] Bump bootstrap from 3.4.1 to 5.0.1 #148

v5.0.1

🎨 CSS

☕️ JavaScript

📖 Docs

🛠 Examples

🌎 Accessibility