Open dependabot[bot] opened 3 weeks ago
:warning: Adding the same caution here as previously mentioned in #10891:
NB: please do not merge this until we have figured out a longer-term fix for #10861 -- otherwise repeating this upgrade may cause that to happen again.
After reading #2675.. unless anybody else would like to, or would recommend not doing this: I can spend some time to investigate replacing autocomplete
and tagsInput
with select2
(I have some experience with select2
as a user and also as a contributor). If possible, that would help towards completely removing jquery-ui
; a smaller task than updating our Foundation-related dependencies.
cc @CharlesNepote @Valimp @hangy @raphael0202
Issues
0 New issues
0 Accepted issues
Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code
Bumps the jquery group with 1 update in the / directory: jquery-ui.
Updates
jquery-ui
from 1.13.3 to 1.14.1Release notes
Sourced from jquery-ui's releases.
Commits
ca5af71
1.14.1bf0d4c3
Docs: Update AUTHORS.txt3bb4232
Build: Update a few dependencies, dropgrunt-cli
d591bdd
Widget: Don't let widget name affect$.ui
prototype & constructor85bed8d
Build: Fix an XSS in the test server HTML serving logicaf8adca
Tabs: UseCSS.escape
for sanitizing selectorsebdcd0d
Tests: Fix titles ofjquery-patch.js
testse399092
Build: Add a CodeQL non-mandatory check49bb397
Build: Fix the ESLint config for demos3934c68
Build: Bump express from 4.19.2 to 4.20.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show