latticejs / lattice

Framework integration
17 stars 5 forks source link

[Snyk] Upgrade mapbox-gl from 1.5.0 to 1.12.0 #411

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade mapbox-gl from 1.5.0 to 1.12.0.

merge advice

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-MINIMIST-559764
601/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.6
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-559764
601/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.6
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: mapbox-gl
  • 1.12.0 - 2020-08-12

    ✨ Features and improvements

    • Add methods for changing a vector tile source dynamically (e.g. setTiles, setUrl). #8048 (h/t @stepankuzmin)
    • Add a filter option for GeoJSON sources to filter out features prior to processing (e.g. before clustering). #9864
    • Vastly increase precision of line-gradient for long lines. #9694
    • Improve raster-dem sources to properly support the maxzoom option and overzooming. #9789 (h/t @brendan-ward)

    🐞 Bug fixes

    • Fix a bug where bearing snap interfered with easeTo and flyTo animations, freezing the map. #9884 (h/t @andycalder)
    • Fix a bug where a fallback image was not used if it was added via addImage. #9911 (h/t @francois2metz)
    • Fix a bug where promoteId option failed for fill extrusions with defined feature ids. #9863

    πŸ› οΈ Workflow

    • Renamed the default development branch from master to main.

    ⚠️ Note on IE11

    We intend to remove support for Internet Explorer 11 in a future release of GL JS later this year. Watch this repository for more information on how to prepare your codebase for this change.

  • 1.12.0-beta.1 - 2020-08-06
    No content.
  • 1.11.1 - 2020-07-07

    🐞 Bug fixes

    • Fix a bug that caused map.loaded() to incorrectly return false after a click event. (#9825)
  • 1.11.0 - 2020-06-10

    ✨ Features and improvements

    • Add an option to scale the default Marker icon.(#9414) (h/t adrianababakanian)
    • Improving the shader compilation speed by manually getting the run-time attributes and uniforms.(#9497)
    • Added clusterMinPoints option for clustered GeoJSON sources that defines the minimum number of points to form a cluster.(#9748)

    🐞 Bug fixes

    • Fix a bug where map got stuck in a DragRotate interaction if it's mouseup occurred outside of the browser window or iframe.(#9512)
    • Fix potential visual regression for *-pattern properties on AMD graphics card vendor.(#9681)
    • Fix zooming with a double tap on iOS Safari 13.(#9757)
    • Removed a misleading geometry exceeds allowed extent warning when using Mapbox Streets vector tiles.(#9753)
    • Fix reference error when requiring the browser bundle in Node. (#9749)
  • 1.11.0-beta.1 - 2020-05-29

    Release Erie Changelog (#9730)

    * first draft of the changelog

    * PR comments

  • 1.10.2 - 2020-06-10

    🐞 Bug fixes

    • Fix zooming with a double tap in iOS Safari 13 (#9757)
  • 1.10.1 - 2020-05-15

    1.10.1

    🐞 Bug fixes

    • Fix markers interrupting touch gestures (#9675, fixed by #9683)
    • Fix bug where map.isMoving() returned true while map was not moving (#9647, fixed by #9679)
    • Fix regression that prevented touchmove events from firing during gestures (#9676, fixed by #9685)
    • Fix image expression evaluation which was broken under certain conditions (#9630, fixed by #9685)
    • Fix nested within expressions in filters not evaluating correctly (#9605, fixed by #9611)
    • Fix potential undefined paint variable in StyleLayer (#9688) (h/t mannnick24)
  • 1.10.0 - 2020-04-27
  • 1.10.0-beta.1 - 2020-04-13
  • 1.9.1 - 2020-04-03
  • 1.9.0 - 2020-03-23
  • 1.9.0-beta.1 - 2020-03-12
  • 1.8.1 - 2020-02-26
  • 1.8.0 - 2020-02-20
  • 1.8.0-beta.1 - 2020-02-13
  • 1.7.0 - 2020-01-27
  • 1.7.0-beta.1 - 2020-01-17
  • 1.6.1 - 2019-12-19
  • 1.6.0 - 2019-12-04
  • 1.6.0-beta.1 - 2019-11-28
  • 1.5.1 - 2019-11-27
  • 1.5.1-beta - 2019-11-22
  • 1.5.0 - 2019-10-25
from mapbox-gl GitHub release notes
Commit messages
Package name: mapbox-gl
  • 520a4ca v1.12.0 (#9926)
  • 293294d update changelog, versions & lockfile for v1.12.0-beta.1 (#9916)
  • ab7dae3 Add a filter option for GeoJSON sources (#9864)
  • 199a0d8 fix(touchmove): only call preventDefault when valid minTouches (#9852)
  • ebb80aa Prevent bearing snap on map.stop() (#9884)
  • a85e997 Update the worker images once an image is added or removed + Render tests (#9911)
  • ce6a2a3 Fix typo in event.js documentation (#9909)
  • a40a3a7 gl v4.5.3 may make installation easier for Windows (corrected - added yarn.lock deleted unnecessary) (#9906)
  • 320299c Clarification in clusterMaxZoom documentation (#9899)
  • 9adc859 Remove dead code from scroll_zoom.js (#9895)
  • 859f6cf Fix setRotationAlignment link (#9892)
  • ad0df6d minor update to style.js (#9886)
  • 16211e8 Remove unused clearTimeout() from camera.js (#9870)
  • fc7ac01 Fix multiple layer sharing the same source (#9834)
  • ed27d23 add support for dynamic vector tiles rendering #3709 (#8048)
  • 25afccb fix precedence of promoteId over feature id in fill extrusions (#9863)
  • 1e9b41d Update the changelog in master branch. (#9860)
  • 40ab533 updating the sdk-support table for "volatile" source option (#9846)
  • e2bf203 Resolving the Studio blocker (#9825)
  • df23295 [render tests] Add single-dasharray-element render test (#9827)
  • 8d9b1b7 Fixed fill-pattern-test allow threshold
  • e06be5b [docs] Add `sdk-support` table for `volatile` source option
  • fef85a7 Update "volatile" source property description
  • e7b7b80 [doc] Document `volatile` source property
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

πŸ›  Adjust upgrade PR settings

πŸ”• Ignore this dependency or unsubscribe from future upgrade PRs