ove / ove-asset-manager

Asset Management for data and static resources
MIT License
0 stars 0 forks source link

Update dependency bootstrap to v5 [SECURITY] #306

Open renovate[bot] opened 2 months ago

renovate[bot] commented 2 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
bootstrap (source) 4.4.1 -> 5.0.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-6531

A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.


Release Notes

twbs/bootstrap (bootstrap) ### [`v5.0.0`](https://redirect.github.com/twbs/bootstrap/releases/tag/v5.0.0) [Compare Source](https://redirect.github.com/twbs/bootstrap/compare/v4.6.2...v5.0.0) #### Highlights [#​32155](https://redirect.github.com/twbs/bootstrap/issues/32155): Updated `make-col()` mixin to generate equal columns when no size is specified [#​32763](https://redirect.github.com/twbs/bootstrap/issues/32763): Added new `color-scheme()` mixin [#​33389](https://redirect.github.com/twbs/bootstrap/issues/33389): Dropdown menus now have option become clickable [#​33453](https://redirect.github.com/twbs/bootstrap/issues/33453): Added new docs footer [#​33548](https://redirect.github.com/twbs/bootstrap/issues/33548): Offcanvas header components are now vertically aligned [#​33549](https://redirect.github.com/twbs/bootstrap/issues/33549): Added offcanvas-top modifier [#​33634](https://redirect.github.com/twbs/bootstrap/issues/33634): Added support for `.dropdown-item`s wrapped in `
  • `s [#​33626](https://redirect.github.com/twbs/bootstrap/issues/33626): Fix v5 regressions in tab dropdown functionality #### πŸš€ Features - [#​32763](https://redirect.github.com/twbs/bootstrap/issues/32763): Add `color-scheme` mixin - [#​33389](https://redirect.github.com/twbs/bootstrap/issues/33389): Dropdown β€” Add option to make the dropdown menu clickable - [#​33549](https://redirect.github.com/twbs/bootstrap/issues/33549): Add offcanvas-top modifier #### 🎨 CSS - [#​32155](https://redirect.github.com/twbs/bootstrap/issues/32155): Add equal column mixin - [#​32763](https://redirect.github.com/twbs/bootstrap/issues/32763): Add `color-scheme` mixin - [#​33292](https://redirect.github.com/twbs/bootstrap/issues/33292): Make accordion icon rotation more natural - [#​33411](https://redirect.github.com/twbs/bootstrap/issues/33411): Fix validation feedback icon in select multiple - [#​33478](https://redirect.github.com/twbs/bootstrap/issues/33478): Make `.nav-link` color consistent when using buttons - [#​33482](https://redirect.github.com/twbs/bootstrap/issues/33482): Dropdown β€” Apply positioning only when Popper is not used - [#​33548](https://redirect.github.com/twbs/bootstrap/issues/33548): Vertically align offcanvas header components - [#​33549](https://redirect.github.com/twbs/bootstrap/issues/33549): Add offcanvas-top modifier - [#​33550](https://redirect.github.com/twbs/bootstrap/issues/33550): Spinner alignment changes - [#​33598](https://redirect.github.com/twbs/bootstrap/issues/33598): Hide validation icons from multiple selects - [#​33600](https://redirect.github.com/twbs/bootstrap/issues/33600): Have $form-check-input-border's default derive from $black - [#​33607](https://redirect.github.com/twbs/bootstrap/issues/33607): Reduce color-scheme complexity - [#​33642](https://redirect.github.com/twbs/bootstrap/issues/33642): use `:read-only` css selector instead `[readonly]` for consistency - [#​33658](https://redirect.github.com/twbs/bootstrap/issues/33658): fix: use list-group variable instead of alert - [#​33736](https://redirect.github.com/twbs/bootstrap/issues/33736): accordion: fix `border-top` on Firefox #### β˜•οΈ JavaScript - [#​32439](https://redirect.github.com/twbs/bootstrap/issues/32439): Decouple BackDrop from modal - [#​33245](https://redirect.github.com/twbs/bootstrap/issues/33245): Decouple Modal's scrollbar functionality - [#​33249](https://redirect.github.com/twbs/bootstrap/issues/33249): Simplify Modal Config - [#​33250](https://redirect.github.com/twbs/bootstrap/issues/33250): Simplify ScrollSpy config - [#​33310](https://redirect.github.com/twbs/bootstrap/issues/33310): fix: make EventHandler better handle mouseenter/mouseleave events - [#​33389](https://redirect.github.com/twbs/bootstrap/issues/33389): Dropdown β€” Add option to make the dropdown menu clickable - [#​33429](https://redirect.github.com/twbs/bootstrap/issues/33429): Remove element event listeners through base component - [#​33451](https://redirect.github.com/twbs/bootstrap/issues/33451): Add missing things in `hide` method of dropdown - [#​33456](https://redirect.github.com/twbs/bootstrap/issues/33456): Use our `isDisabled` util on dropdown - [#​33466](https://redirect.github.com/twbs/bootstrap/issues/33466): Refactor dropdown's hide functionality - [#​33479](https://redirect.github.com/twbs/bootstrap/issues/33479): Fix dropdown escape propagation - [#​33496](https://redirect.github.com/twbs/bootstrap/issues/33496): Use cached `noop` function - [#​33497](https://redirect.github.com/twbs/bootstrap/issues/33497): Use template literals instead of concatenation - [#​33499](https://redirect.github.com/twbs/bootstrap/issues/33499): Fix wrong carousel transformation, direction to order - [#​33545](https://redirect.github.com/twbs/bootstrap/issues/33545): Use the backdrop util in offcanvas, enforcing consistency - [#​33586](https://redirect.github.com/twbs/bootstrap/issues/33586): Tab.js: Fixes on click handling - [#​33589](https://redirect.github.com/twbs/bootstrap/issues/33589): refactor: make static `selectMenuItem` method private - [#​33612](https://redirect.github.com/twbs/bootstrap/issues/33612): tests: fix random BrowserStack failures in scrollbar - [#​33626](https://redirect.github.com/twbs/bootstrap/issues/33626): Fix v5 regressions in tab dropdown functionality - [#​33634](https://redirect.github.com/twbs/bootstrap/issues/33634): Dropdown: support `.dropdown-item` wrapped in `
  • ` tags - [#​33638](https://redirect.github.com/twbs/bootstrap/issues/33638): Fix toggle between modals example - [#​33643](https://redirect.github.com/twbs/bootstrap/issues/33643): fix: clicking an item in navbar dropdown should not collapse the dropdown in firefox - [#​33666](https://redirect.github.com/twbs/bootstrap/issues/33666): Modal.js: fix test for scrollbar - [#​33677](https://redirect.github.com/twbs/bootstrap/issues/33677): Offcanvas.js: If scroll is allowed, should allow focus on other elements - [#​33684](https://redirect.github.com/twbs/bootstrap/issues/33684): Don't change the value for `altBoundary` option - [#​33706](https://redirect.github.com/twbs/bootstrap/issues/33706): Scrollbar: respect the initial body overflow value #### πŸ“– Docs - [#​33446](https://redirect.github.com/twbs/bootstrap/issues/33446): Make offcanvas example fully static - [#​33453](https://redirect.github.com/twbs/bootstrap/issues/33453): Add new docs footer - [#​33521](https://redirect.github.com/twbs/bootstrap/issues/33521): The spacing margin side identifiers 's' and 'e' may be intuitive for … - [#​33522](https://redirect.github.com/twbs/bootstrap/issues/33522): Clarify docs accordion example - [#​33543](https://redirect.github.com/twbs/bootstrap/issues/33543): Update parcel.md - [#​33553](https://redirect.github.com/twbs/bootstrap/issues/33553): Add example: Panels stay open - [#​33567](https://redirect.github.com/twbs/bootstrap/issues/33567): Fixed wrong method name \_getInstance - [#​33571](https://redirect.github.com/twbs/bootstrap/issues/33571): footer: fix `rel=noopener` attribute - [#​33583](https://redirect.github.com/twbs/bootstrap/issues/33583): docs: update clipboard.js to v2.0.8 - [#​33597](https://redirect.github.com/twbs/bootstrap/issues/33597): Docs: Fix wrong dark attribute in Table - Vertical Alignment - [#​33632](https://redirect.github.com/twbs/bootstrap/issues/33632): Correct the heading for the States section - [#​33638](https://redirect.github.com/twbs/bootstrap/issues/33638): Fix toggle between modals example - [#​33664](https://redirect.github.com/twbs/bootstrap/issues/33664): Docs: fix W3C validation errors in list-group example - [#​33668](https://redirect.github.com/twbs/bootstrap/issues/33668): Update anchor.js to v4.3.1. - [#​33669](https://redirect.github.com/twbs/bootstrap/issues/33669): Change from preventOverflow to detectOverflow in `boundary` option - [#​33675](https://redirect.github.com/twbs/bootstrap/issues/33675): Fix typo - [#​33676](https://redirect.github.com/twbs/bootstrap/issues/33676): Fix Grid System docs - [#​33685](https://redirect.github.com/twbs/bootstrap/issues/33685): docs: fix the default value of Popper's `boundary` option - [#​33687](https://redirect.github.com/twbs/bootstrap/issues/33687): Fixes [#​33686](https://redirect.github.com/twbs/bootstrap/issues/33686) typo in RTL docs - [#​33690](https://redirect.github.com/twbs/bootstrap/issues/33690): Add Bootstrap Icons to alerts docs - [#​33726](https://redirect.github.com/twbs/bootstrap/issues/33726): Replace modal and scrollspy placeholder content - [#​33733](https://redirect.github.com/twbs/bootstrap/issues/33733): Tooltip/Popover β€” Minor doc updates - [#​33735](https://redirect.github.com/twbs/bootstrap/issues/33735): Clarify `boundary` option description - [#​33772](https://redirect.github.com/twbs/bootstrap/issues/33772): Improve overall new examples' accessibility - [#​33782](https://redirect.github.com/twbs/bootstrap/issues/33782): Add new team members to the Teams page - [#​33786](https://redirect.github.com/twbs/bootstrap/issues/33786): Docs: adding intro about web accessibility - [#​33797](https://redirect.github.com/twbs/bootstrap/issues/33797): Update links to CCA, MQ5 prefers-reduced-motion, evergreen WCAG urls - [#​33810](https://redirect.github.com/twbs/bootstrap/issues/33810): Tweak toast docs - [#​33829](https://redirect.github.com/twbs/bootstrap/issues/33829): Update migration guide for some v5 changes - [#​33832](https://redirect.github.com/twbs/bootstrap/issues/33832): Fix doc typo and Bootstrap Icons link - [#​33833](https://redirect.github.com/twbs/bootstrap/issues/33833): refactor(docs): Added form file input variables - [#​33834](https://redirect.github.com/twbs/bootstrap/issues/33834): Rewrite migration guide #### Examples - [#​33097](https://redirect.github.com/twbs/bootstrap/issues/33097): Update RTL examples - [#​33759](https://redirect.github.com/twbs/bootstrap/issues/33759): fix: change margin breakpoints for bootstrap logo on double header - [#​33681](https://redirect.github.com/twbs/bootstrap/issues/33681): Fixes signup form in Heroes example - [#​33569](https://redirect.github.com/twbs/bootstrap/issues/33569): Improve responsiveness of Features examples #### 🌎 Accessibility - [#​33772](https://redirect.github.com/twbs/bootstrap/issues/33772): Improve overall new examples' accessibility - [#​33810](https://redirect.github.com/twbs/bootstrap/issues/33810): Tweak toast docs #### 🏭 Tests - [#​33578](https://redirect.github.com/twbs/bootstrap/issues/33578): Remove unnecessary `data-bs-backdrop="static"` from modal tests - [#​33612](https://redirect.github.com/twbs/bootstrap/issues/33612): tests: fix random BrowserStack failures in scrollbar - [#​33666](https://redirect.github.com/twbs/bootstrap/issues/33666): Modal.js: fix test for scrollbar - [#​33734](https://redirect.github.com/twbs/bootstrap/issues/33734): Add missing test for clicking select option in a dropdown #### 🧰 Misc - [#​33720](https://redirect.github.com/twbs/bootstrap/issues/33720): JS tests: add Node.js 16 #### πŸ“¦ Dependencies - Updated numerous devDependencies ### [`v4.6.2`](https://redirect.github.com/twbs/bootstrap/releases/tag/v4.6.2) [Compare Source](https://redirect.github.com/twbs/bootstrap/compare/v4.6.1...v4.6.2) #### Highlights - Added an example to our Collapse plugin docs to show how to use horizontal collapsing. This has long been possible via our JS, but we never had an official class to utilize it. - We've replaced the deprecated `color-adjust` with `print-color-adjust` in our Sass files as part of the Autoprefixer v10.4.6 issues. This should quiet the issues folks have seen from that dependency change. *If you're using our distribution CSS files, like `bootstrap.min.css`, you may still see the warning.* - Tweaked the size of `small` and `.small` to compute to a whole pixel value (was `12.8px` and now is `14px`). - Improved accessibility around our dropdowns, color contrast, and `role` attributes. - Fixed some broken links to supporting documentation. - Updated dependencies across the board. #### What's Changed - Removed blurred background reference from the Toast Docs. by [@​pricop](https://redirect.github.com/pricop) in [https://github.com/twbs/bootstrap/pull/35190](https://redirect.github.com/twbs/bootstrap/pull/35190) - Update links to CCA, MQ5 prefers-reduced-motion, evergreen WCAG urls, more resources by [@​patrickhlauke](https://redirect.github.com/patrickhlauke) in [https://github.com/twbs/bootstrap/pull/35427](https://redirect.github.com/twbs/bootstrap/pull/35427) - v4-dev backports and updates by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/35482](https://redirect.github.com/twbs/bootstrap/pull/35482) - Backport [#​35556](https://redirect.github.com/twbs/bootstrap/issues/35556) by [@​julien-deramond](https://redirect.github.com/julien-deramond) in [https://github.com/twbs/bootstrap/pull/35558](https://redirect.github.com/twbs/bootstrap/pull/35558) - Tweak toast docs by [@​patrickhlauke](https://redirect.github.com/patrickhlauke) in [https://github.com/twbs/bootstrap/pull/35633](https://redirect.github.com/twbs/bootstrap/pull/35633) - v4-dev backports and updates by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/35642](https://redirect.github.com/twbs/bootstrap/pull/35642) - Doc: Reorder alphabetically lists of components by [@​julien-deramond](https://redirect.github.com/julien-deramond) in [https://github.com/twbs/bootstrap/pull/36128](https://redirect.github.com/twbs/bootstrap/pull/36128) - Updated the small-font-size to use a round value by [@​pricop](https://redirect.github.com/pricop) in [https://github.com/twbs/bootstrap/pull/36172](https://redirect.github.com/twbs/bootstrap/pull/36172) - v4 dev backports and updates by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/35767](https://redirect.github.com/twbs/bootstrap/pull/35767) - \_custom-forms.scss: fix order of attributes by [@​twin-elements](https://redirect.github.com/twin-elements) in [https://github.com/twbs/bootstrap/pull/36231](https://redirect.github.com/twbs/bootstrap/pull/36231) - Replace the deprecated `color-adjust` with `print-color-adjust` by [@​AdrianCurtin](https://redirect.github.com/AdrianCurtin) in [https://github.com/twbs/bootstrap/pull/36283](https://redirect.github.com/twbs/bootstrap/pull/36283) - \[v4] Doc: remove `role="group"` from some split drop\* buttons by [@​julien-deramond](https://redirect.github.com/julien-deramond) in [https://github.com/twbs/bootstrap/pull/36254](https://redirect.github.com/twbs/bootstrap/pull/36254) - Dynamic tabs: use buttons rather than links (backport to v4) by [@​patrickhlauke](https://redirect.github.com/patrickhlauke) in [https://github.com/twbs/bootstrap/pull/33163](https://redirect.github.com/twbs/bootstrap/pull/33163) - v4 dev updates by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/36430](https://redirect.github.com/twbs/bootstrap/pull/36430) - Fix closing HTML tag in navs docs by [@​julien-deramond](https://redirect.github.com/julien-deramond) in [https://github.com/twbs/bootstrap/pull/36466](https://redirect.github.com/twbs/bootstrap/pull/36466) - v4: Horizontal collapse by [@​mdo](https://redirect.github.com/mdo) in [https://github.com/twbs/bootstrap/pull/36434](https://redirect.github.com/twbs/bootstrap/pull/36434) - Fixing tabs' tests v4 by [@​louismaximepiton](https://redirect.github.com/louismaximepiton) in [https://github.com/twbs/bootstrap/pull/36485](https://redirect.github.com/twbs/bootstrap/pull/36485) - Docs: fix some ARIA Authoring Practices Guides broken links by [@​julien-deramond](https://redirect.github.com/julien-deramond) in [https://github.com/twbs/bootstrap/pull/36490](https://redirect.github.com/twbs/bootstrap/pull/36490) - v4 - Remove confusing unnecessary id/aria-labelledby for dropdown menus by [@​patrickhlauke](https://redirect.github.com/patrickhlauke) in [https://github.com/twbs/bootstrap/pull/36491](https://redirect.github.com/twbs/bootstrap/pull/36491) - v4 Docs: outdated ARIA/PF link, expand contrast explanation in `accessibility.md` by [@​patrickhlauke](https://redirect.github.com/patrickhlauke) in [https://github.com/twbs/bootstrap/pull/36492](https://redirect.github.com/twbs/bootstrap/pull/36492) - v4: Improve accessible name of version dropdown in docs navbar by [@​patrickhlauke](https://redirect.github.com/patrickhlauke) in [https://github.com/twbs/bootstrap/pull/36504](https://redirect.github.com/twbs/bootstrap/pull/36504) - Update devDependencies by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/36522](https://redirect.github.com/twbs/bootstrap/pull/36522) - Docs: update clipboard.js to v2.0.11 by [@​julien-deramond](https://redirect.github.com/julien-deramond) in [https://github.com/twbs/bootstrap/pull/36631](https://redirect.github.com/twbs/bootstrap/pull/36631) - Update devDependencies by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/36724](https://redirect.github.com/twbs/bootstrap/pull/36724) - v4: Add Fathom by [@​mdo](https://redirect.github.com/mdo) in [https://github.com/twbs/bootstrap/pull/36727](https://redirect.github.com/twbs/bootstrap/pull/36727) - Docs: Capitalize Unicode by [@​julien-deramond](https://redirect.github.com/julien-deramond) in [https://github.com/twbs/bootstrap/pull/36735](https://redirect.github.com/twbs/bootstrap/pull/36735) - Release v4.6.2 by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/36725](https://redirect.github.com/twbs/bootstrap/pull/36725) #### New Contributors - [@​twin-elements](https://redirect.github.com/twin-elements) made their first contribution in [https://github.com/twbs/bootstrap/pull/36231](https://redirect.github.com/twbs/bootstrap/pull/36231) - [@​AdrianCurtin](https://redirect.github.com/AdrianCurtin) made their first contribution in [https://github.com/twbs/bootstrap/pull/36283](https://redirect.github.com/twbs/bootstrap/pull/36283) **Full Changelog**: https://github.com/twbs/bootstrap/compare/v4.6.1...v4.6.2 ### [`v4.6.1`](https://redirect.github.com/twbs/bootstrap/releases/tag/v4.6.1): 4.6.1 [Compare Source](https://redirect.github.com/twbs/bootstrap/compare/v4.6.0...v4.6.1) ##### What's changed - Replace Sass division with multiplication and custom `divide()` function by [@​mdo](https://redirect.github.com/mdo) in [https://github.com/twbs/bootstrap/pull/34571](https://redirect.github.com/twbs/bootstrap/pull/34571) - Update RFS to v8.1.0 by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/34571](https://redirect.github.com/twbs/bootstrap/pull/34571) - fix(forms): input-group and validation icons by [@​ffoodd](https://redirect.github.com/ffoodd) in [https://github.com/twbs/bootstrap/pull/32968](https://redirect.github.com/twbs/bootstrap/pull/32968) - Fix minor visual bug in Firefox caused by `moz-focusring` by [@​kremit](https://redirect.github.com/kremit) in [https://github.com/twbs/bootstrap/pull/32821](https://redirect.github.com/twbs/bootstrap/pull/32821) - Adjust `SAFE_URL_PATTERN` regex for use with test method of regexes by [@​nikonthethird](https://redirect.github.com/nikonthethird) in [https://github.com/twbs/bootstrap/pull/33153](https://redirect.github.com/twbs/bootstrap/pull/33153) - Add `sms` in the `SAFE_URL_PATTERN` for sanitizer by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/35074](https://redirect.github.com/twbs/bootstrap/pull/35074) - Adjust feedback icon position and padding for `select.form-control` by [@​mdo](https://redirect.github.com/mdo) in [https://github.com/twbs/bootstrap/pull/33206](https://redirect.github.com/twbs/bootstrap/pull/33206) - Carousel: use buttons, not links, for prev/next controls by [@​patrickhlauke](https://redirect.github.com/patrickhlauke) in [https://github.com/twbs/bootstrap/pull/33165](https://redirect.github.com/twbs/bootstrap/pull/33165) - v4: Sass docs for default variables by [@​mdo](https://redirect.github.com/mdo) in [https://github.com/twbs/bootstrap/pull/33392](https://redirect.github.com/twbs/bootstrap/pull/33392) - Handle complex expressions in `add()` & `subtract()` by [@​ffoodd](https://redirect.github.com/ffoodd) in [https://github.com/twbs/bootstrap/pull/34047](https://redirect.github.com/twbs/bootstrap/pull/34047) - More concise improvements for `add()` and `subtract()` by [@​ffoodd](https://redirect.github.com/ffoodd) in [https://github.com/twbs/bootstrap/pull/34432](https://redirect.github.com/twbs/bootstrap/pull/34432) - Remove `aria-haspopup` from dropdowns by [@​patrickhlauke](https://redirect.github.com/patrickhlauke) in [https://github.com/twbs/bootstrap/pull/33624](https://redirect.github.com/twbs/bootstrap/pull/33624) - Dropdown: support `.dropdown-item` wrapped in `
  • ` tags by [@​cpsievert](https://redirect.github.com/cpsievert) in [https://github.com/twbs/bootstrap/pull/33649](https://redirect.github.com/twbs/bootstrap/pull/33649) - Update Node versions in JS tests (drop Node 10, add Node 16), update docs JS assets and add variables for `vertical-align` in spinners by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/33807](https://redirect.github.com/twbs/bootstrap/pull/33807) - Replace Freenode with Libera IRC server by [@​midzer](https://redirect.github.com/midzer) [https://github.com/twbs/bootstrap/pull/34050](https://redirect.github.com/twbs/bootstrap/pull/34050) - Fix repetition in the Navbar docs description by [@​coliff](https://redirect.github.com/coliff) in [https://github.com/twbs/bootstrap/pull/34208](https://redirect.github.com/twbs/bootstrap/pull/34208) - Enable `0.x` with negative margins in utilities by [@​k-utsumi](https://redirect.github.com/k-utsumi) in [https://github.com/twbs/bootstrap/pull/33593](https://redirect.github.com/twbs/bootstrap/pull/33593) - Remove print `thead` rule by [@​coliff](https://redirect.github.com/coliff) in [https://github.com/twbs/bootstrap/pull/34426](https://redirect.github.com/twbs/bootstrap/pull/34426) - Fix prevented `show` event disabling modals with fade class from being displayed again by [@​alpadev](https://redirect.github.com/alpadev) in [https://github.com/twbs/bootstrap/pull/34087](https://redirect.github.com/twbs/bootstrap/pull/34087) - Input group validation with custom-file input by [@​ffoodd](https://redirect.github.com/ffoodd) in [https://github.com/twbs/bootstrap/pull/33239](https://redirect.github.com/twbs/bootstrap/pull/33239) - Add eslint-plugin-qunit and tighten JS tests by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/32270](https://redirect.github.com/twbs/bootstrap/pull/32270) - Update our tests to Node 16 and npm 8 by [@​XhmikosR](https://redirect.github.com/XhmikosR) in [https://github.com/twbs/bootstrap/pull/35142](https://redirect.github.com/twbs/bootstrap/pull/35142) - Disabled link cleanup by [@​patrickhlauke](https://redirect.github.com/patrickhlauke) in [https://github.com/twbs/bootstrap/pull/34924](https://redirect.github.com/twbs/bootstrap/pull/34924) - Updated our devDependencies including terser; also enabled two passes for terser by [@​XhmikosR](https://redirect.github.com/XhmikosR) ##### Full changelog ### [`v4.6.0`](https://redirect.github.com/twbs/bootstrap/releases/tag/v4.6.0) [Compare Source](https://redirect.github.com/twbs/bootstrap/compare/v4.5.3...v4.6.0) ##### Highlights - Tooltips and popovers can have custom clases via `customClass` option. - Added new `.navbar-nav-scroll` class for scrolling expanded navbar contents on mobile devices. - For improved accessibiliy, spinners now slow down when `prefers-reduced-motion` is enabled. - v4.x docs are now built on Hugo for easier maintenance and backports from v5.x. - Darkened `background-color` of `.dropdown-item` for improved hover state contrast, and ligthened the disabled `.dropdown-item` `color`. - Improved alignment of form validation tooltips. - File inputs no longer extend beyond their containers. ##### CSS - [#​31557](https://redirect.github.com/twbs/bootstrap/pull/31557): Fix form validation tooltip alignment - [#​31657](https://redirect.github.com/twbs/bootstrap/pull/31657): Handle the Ubuntu sans-serif case - [#​31700](https://redirect.github.com/twbs/bootstrap/pull/31700): Suppress flexbox side effects in breadcrumb - [#​31882](https://redirect.github.com/twbs/bootstrap/pull/31882): Slow down spinners when prefers-reduced-motion - [#​31886](https://redirect.github.com/twbs/bootstrap/pull/31886): Fixed: Undefined mixin "deprecate" when importing "bootstrap-grid-scss" - [#​32141](https://redirect.github.com/twbs/bootstrap/pull/32141): Use correct value order - [#​32145](https://redirect.github.com/twbs/bootstrap/pull/32145): Avoid invisible real file input "spilling" out of container - [#​32160](https://redirect.github.com/twbs/bootstrap/pull/32160): Add overflow suppression to custom file label - [#​32211](https://redirect.github.com/twbs/bootstrap/pull/32211): Move negative margin-bottom from .nav-item to .nav-link - [#​32212](https://redirect.github.com/twbs/bootstrap/pull/32212): Remove needless Stylelint disables - [#​32833](https://redirect.github.com/twbs/bootstrap/pull/32833): Add `.navbar-nav-scroll` for vertical scrolling of navbar content - Add two new variables for pagination border-radius values; backport of [#​32423](https://redirect.github.com/twbs/bootstrap/pull/32423) - Remove old/unnecessary reboot bug fix; backport of [#​32631](https://redirect.github.com/twbs/bootstrap/pull/32631) - Suppress focus outline for buttons when it shouldn't be visible in Chromium; backport of [#​32689](https://redirect.github.com/twbs/bootstrap/pull/32689) - Consistently use `outline:0` rather than `outline:none`; backport of [#​32751](https://redirect.github.com/twbs/bootstrap/pull/32751) - Darken dropdown item hover style; backport of [#​32754](https://redirect.github.com/twbs/bootstrap/pull/32754) - Lighten disabled dropdown text to `$gray-500` ##### JS - [#​31820](https://redirect.github.com/twbs/bootstrap/pull/31820): Check for data-interval on the first slide of carousel - [#​31834](https://redirect.github.com/twbs/bootstrap/pull/31834)/[#​32225](https://redirect.github.com/twbs/bootstrap/pull/32225): tooltip/popover: add a `customClass` option - [#​32001](https://redirect.github.com/twbs/bootstrap/pull/32001): Move `js/src/index.js` one folder up - [#​32045](https://redirect.github.com/twbs/bootstrap/pull/32045): tests: fix sanitizer test - [#​32220](https://redirect.github.com/twbs/bootstrap/pull/32220): Don't hide modal when `config.keyboard` is false - [#​32312](https://redirect.github.com/twbs/bootstrap/pull/32312): build-plugins: switch to "bundled" for babel helpers ##### Docs - [#​31861](https://redirect.github.com/twbs/bootstrap/pull/31861): Split up dropdown sizing docs to improve rendering - [#​31892](https://redirect.github.com/twbs/bootstrap/pull/31892): Remove redundant visually hidden "(current)" from pagination controls - [#​31893](https://redirect.github.com/twbs/bootstrap/pull/31893): manifest.json: Switch to relative URLs so that we don't need to change the path with every major/minor release - [#​31898](https://redirect.github.com/twbs/bootstrap/pull/31898): switch to suggesting jsDelivr as a CDN - [#​31904](https://redirect.github.com/twbs/bootstrap/pull/31904): - docs(forms): use a legend for fieldset instead of aria-label - docs(forms): fix incorrect legend nesting in fieldset - [#​31936](https://redirect.github.com/twbs/bootstrap/pull/31936): forms: change inline custom radio name - [#​31951](https://redirect.github.com/twbs/bootstrap/pull/31951): Update anchor-js to v4.3.0 - [#​31960](https://redirect.github.com/twbs/bootstrap/pull/31960): Explicitly mention emoji fonts, tweak sentence in typography - [#​31981](https://redirect.github.com/twbs/bootstrap/pull/31981): list-group.md: fix snippet - [#​32005](https://redirect.github.com/twbs/bootstrap/pull/32005): Remove `bugreport.apple.com` since it doesn't work - [#​32015](https://redirect.github.com/twbs/bootstrap/pull/32015): Fix redirects - [#​32050](https://redirect.github.com/twbs/bootstrap/pull/32050): Make docs anchorjs links darker on keyboard focus - [#​32054](https://redirect.github.com/twbs/bootstrap/pull/32054): Add callouts about using light colors ideally on a dark background - [#​32077](https://redirect.github.com/twbs/bootstrap/pull/32077): Switch to Hugo - [#​32083](https://redirect.github.com/twbs/bootstrap/pull/32083): mention "Liberation Sans" - [#​32087](https://redirect.github.com/twbs/bootstrap/pull/32087): download.md: link to JS files comparison too - [#​32094](https://redirect.github.com/twbs/bootstrap/pull/32094): Changes to navbar documentation/explanation - [#​32106](https://redirect.github.com/twbs/bootstrap/pull/32106): Clarify JS bundle docs once more for v4 - [#​32137](https://redirect.github.com/twbs/bootstrap/pull/32137): input-group.md: fix wrong class `.visually-hidden` - [#​32138](https://redirect.github.com/twbs/bootstrap/pull/32138): navbar.md: remove `loading=lazy` from snippets - [#​32147](https://redirect.github.com/twbs/bootstrap/pull/32147): Fix caniuse.com redirects - [#​32151](https://redirect.github.com/twbs/bootstrap/pull/32151): Mention user-select-all support in docs - [#​32196](https://redirect.github.com/twbs/bootstrap/pull/32196): homepage: split snippets and show copy buttons - [#​32203](https://redirect.github.com/twbs/bootstrap/pull/32203): Switch to jsDelivr for the remaining docs assets - [#​32223](https://redirect.github.com/twbs/bootstrap/pull/32223): introduction: split comments - [#​32247](https://redirect.github.com/twbs/bootstrap/pull/32247): Fix typos in tooltip/popover docs - [#​32253](https://redirect.github.com/twbs/bootstrap/pull/32253): Add Russian translation - [#​32363](https://redirect.github.com/twbs/bootstrap/pull/32363): Remove useless `.text-left` in Layout / Overview - [#​32399](https://redirect.github.com/twbs/bootstrap/pull/32399): Remove duplicated "follow Bootstrap on Twitter" link in Community section - [#​32457](https://redirect.github.com/twbs/bootstrap/pull/32457): Add mention of the bs-custom-file-input plugin needed for the custom file input - [#​32461](https://redirect.github.com/twbs/bootstrap/pull/32461): style clipboard button on `:focus`, not just `:hover` - [#​32462](https://redirect.github.com/twbs/bootstrap/pull/32462): Replace Lorem Ipsum placeholder text with more representative (or at least english language) text - [#​32634](https://redirect.github.com/twbs/bootstrap/pull/32634): Remove incorrect mention of dropdowns for dynamic tab behavior - [#​32639](https://redirect.github.com/twbs/bootstrap/pull/32639): v4: Add an actual `data-touch="false"` example in the carousel docs - [#​32728](https://redirect.github.com/twbs/bootstrap/pull/32728): add v5.0 in versions - [#​32761](https://redirect.github.com/twbs/bootstrap/pull/32761): Mention stretched-link constraints with table elements - [#​32789](https://redirect.github.com/twbs/bootstrap/pull/32789): Remove `role="button"` from CTA links in carousel example - [#​32791](https://redirect.github.com/twbs/bootstrap/pull/32791): Docs v4: Sass implementation and rounding precision - [#​32809](https://redirect.github.com/twbs/bootstrap/pull/32809): - Clarify Sass import and customize docs for how to modify variable defaults - Add an npm starter project callout to a few pages - [#​32827](https://redirect.github.com/twbs/bootstrap/pull/32827): Add a live toast example to the docs - [#​32759](https://redirect.github.com/twbs/bootstrap/pull/32759): Mention CSP and embedded SVGs in v4 docs - docs(dropdowns): clarify where is `.show` applied - Require `.has-validation` for input groups with validation - Fix mobile menu jump & double border - Remove double spaces from homepage SVGs - browserconfig.xml: switch to relative image path - Tweak the wording for collapse to indicate button is preferred/more semantic; backport of [#​32632](https://redirect.github.com/twbs/bootstrap/pull/32632) - Clarify the `$enable-shadows` option in our docs; backport of [#​32685](https://redirect.github.com/twbs/bootstrap/pull/32685) ##### Examples - [#​31979](https://redirect.github.com/twbs/bootstrap/pull/31979): v4 Examples/Floating-labels: fix bad behavior with autofill - [#​32198](https://redirect.github.com/twbs/bootstrap/pull/32198): examples: add the version number in `title` ##### Misc - [#​29753](https://redirect.github.com/twbs/bootstrap/pull/29753): Improve build/generate-sri.js regex - [#​32003](https://redirect.github.com/twbs/bootstrap/pull/32003): CI: switch to Node.js 14 - [#​32008](https://redirect.github.com/twbs/bootstrap/pull/32008): Update Edge's Rendering Engine on CONTRIBUTING.md - [#​32486](https://redirect.github.com/twbs/bootstrap/pull/32486): BrowserStack: test on macOS Catalina instead of High Sierra - [#​32756](https://redirect.github.com/twbs/bootstrap/pull/32756): Stylelint: disallow some property values - **Fix for npm 7.x** package.json: move `version_short` variable under the `config` object; backport of [#​32737](https://redirect.github.com/twbs/bootstrap/pull/32737) - Update build-examples script so that the resulting examples zip file includes only the needed files - Various CI tweaks - Updated devDependencies ### [`v4.5.3`](https://redirect.github.com/twbs/bootstrap/releases/tag/v4.5.3) [Compare Source](https://redirect.github.com/twbs/bootstrap/compare/v4.5.2...v4.5.3) ##### CSS - [#​31653](https://redirect.github.com/twbs/bootstrap/pull/31653): Add a comment to our `escape-svg` function to note that data URIs must be quoted. - [#​31693](https://redirect.github.com/twbs/bootstrap/pull/31693): Use the `custom-control` shadow variable instead of the generic `input-focus-box-shadow`. - [#​31793](https://redirect.github.com/twbs/bootstrap/pull/31793): Backport some v5 changes (improved `th` styling in Reboot, custom form field styling when printing, and improvements to `.text-break`). - [#​29714](https://redirect.github.com/twbs/bootstrap/pull/29714): Keep custom check, radio, and switch theme when printing. - [#​30781](https://redirect.github.com/twbs/bootstrap/pull/30781): Reboot's `th` updates: Inherit `font-weight: bold` that comes from user agent stylesheets. - [#​30932](https://redirect.github.com/twbs/bootstrap/pull/30932): `.text-break` changes to drop `overflow-wrap` and use `word-wrap` once again - [#​31754](https://redirect.github.com/twbs/bootstrap/pull/31754): Improve versions page rendering (also reversed the order while I was here) - [#​31846](https://redirect.github.com/twbs/bootstrap/pull/31846): Backports the z-index change to `.close` buttons in dismissible `.alert`s. ##### JS - [#​31000](https://redirect.github.com/twbs/bootstrap/pull/31000): Avoid multiple change event trigger in buttons plugin. *Not applicable to v5 since our button JS plugin has been mostly replaced with pure CSS.* - [#​31673](https://redirect.github.com/twbs/bootstrap/pull/31673): Fix dropdown variable always evaluating to true. - [#​31696](https://redirect.github.com/twbs/bootstrap/pull/31696): Ensure `hidePrevented.bs.modal` can be prevented. - [#​31718](https://redirect.github.com/twbs/bootstrap/pull/31718): Backports new `$dropdown-padding-x` variable from v5. ##### Docs - [#​30811](https://redirect.github.com/twbs/bootstrap/pull/30811): Mention GPU acceleration fix in docs callout for popovers. *Doesn't apply to v5 since we're updating to Popper v2.* - [#​30838](https://redirect.github.com/twbs/bootstrap/pull/30838): Explain the `dispose` method more appropriately. - [#​31706](https://redirect.github.com/twbs/bootstrap/pull/31706): Backports updated margins for code snippets for improved readability. - [#​31769](https://redirect.github.com/twbs/bootstrap/pull/31769): Backports JS bundle guidance from v5. - [#​31851](https://redirect.github.com/twbs/bootstrap/pull/31851): Backports mention of missing `to` and `nextwhenvisible` methods. ##### Misc - [#​31297](https://redirect.github.com/twbs/bootstrap/pull/31297): Switch to xo ESLint config - Updated devDependencies versions ### [`v4.5.2`](https://redirect.github.com/twbs/bootstrap/releases/tag/v4.5.2) [Compare Source](https://redirect.github.com/twbs/bootstrap/compare/v4.5.1...v4.5.2) This release addresses the following two issues: - **[#​31438](https://redirect.github.com/twbs/bootstrap/pull/31438) restores the `make-container-max-widths` mixin.** We won't be using the mixin ourselves, but it will remain in the codebase for the rest of v4 with today's release. We've added a deprecation notice as well. - **[#​31439](https://redirect.github.com/twbs/bootstrap/pull/31439) removes `flex: 1 0 100%` from `.row`s.** This was added to address shrinking rows inside the navbar component after our responsive containers were added in v4.4.0. Removing this rolls us back to the expected grid and flex behaviorβ€”your row will shrink unfortunately without further changes. We could add extra custom CSS to address this, but it seems shortsighted to rush into that. Instead, apply `.flex-fill` to the `.row` and your row will behave as usual. ### [`v4.5.1`](https://redirect.github.com/twbs/bootstrap/releases/tag/v4.5.1) [Compare Source](https://redirect.github.com/twbs/bootstrap/compare/v4.5.0...v4.5.1) ##### CSS - [#​30808](https://redirect.github.com/twbs/bootstrap/issues/30808): Simplify `list-group` borders in cards - [#​30810](https://redirect.github.com/twbs/bootstrap/issues/30810): Add `z-index` to `.custom-check` to fix their rendering in CSS columns - [#​30817](https://redirect.github.com/twbs/bootstrap/issues/30817): Add `border-radius` to `.card-img-overlay` - [#​30830](https://redirect.github.com/twbs/bootstrap/issues/30830): Prevent conflicts with components with classes - [#​30922](https://redirect.github.com/twbs/bootstrap/issues/30922): Fix color on disabled checked state for custom controls - [#​30932](https://redirect.github.com/twbs/bootstrap/issues/30932): Restore `word-break: break-word;` on `.text-break` utility. - [#​30940](https://redirect.github.com/twbs/bootstrap/issues/30940): Prevent `.row` from shrinking in flex containers - [#​30957](https://redirect.github.com/twbs/bootstrap/issues/30957): Nullify custom form states' `box-shadow` - [#​30959](https://redirect.github.com/twbs/bootstrap/issues/30959): Toasts in IE11 - [#​30960](https://redirect.github.com/twbs/bootstrap/issues/30960): Fix IE11 validation tooltip alignment in input groups - [#​30965](https://redirect.github.com/twbs/bootstrap/issues/30965): Improve floating labels example in IE - [#​30966](https://redirect.github.com/twbs/bootstrap/issues/30966): Improve floating labels with Edge and a general refactor - [#​30969](https://redirect.github.com/twbs/bootstrap/issues/30969): Remove duplicated container breakpoints in compiled CSS - [#​30999](https://redirect.github.com/twbs/bootstrap/issues/30999): Revert `min-width: 0` on `.col` due to unforeseen side effects - [#​31148](https://redirect.github.com/twbs/bootstrap/issues/31148): Remove duplicate properties on custom controls - [#​31165](https://redirect.github.com/twbs/bootstrap/issues/31165): Remove `backdrop-filter` from docs subnav and toasts - [#​31339](https://redirect.github.com/twbs/bootstrap/issues/31339): Add link to view docs pages on GitHub - [#​31347](https://redirect.github.com/twbs/bootstrap/issues/31347): Turn off scroll anchoring for accordions - [#​31381](https://redirect.github.com/twbs/bootstrap/issues/31381): Remove `overflow: hidden` from toasts ##### JavaScript - [#​30326](https://redirect.github.com/twbs/bootstrap/issues/30326): Prevent overflowing static backdrop modal animation - [#​30936](https://redirect.github.com/twbs/bootstrap/issues/30936): Add `role="dialog"` in modals via JavaScript - [#​30992](https://redirect.github.com/twbs/bootstrap/issues/30992): Avoid preventing input event onclick - [#​31155](https://redirect.github.com/twbs/bootstrap/issues/31155): Clear timeout before showing the toast ##### Build - [#​30797](https://redirect.github.com/twbs/bootstrap/issues/30797): Fix release script docs - [#​31011](https://redirect.github.com/twbs/bootstrap/issues/31011): Updated Babel config - [#​31296](https://redirect.github.com/twbs/bootstrap/issues/31296): Update to Ruby 2.7 and Bundler 2.x ##### Docs - [#​30809](https://redirect.github.com/twbs/bootstrap/issues/30809): Update docs callout for responsive SVG images - [#​30813](https://redirect.github.com/twbs/bootstrap/issues/30813): Mention Bootstrap Icons in `extend/icons.md` page - [#​30896](https://redirect.github.com/twbs/bootstrap/issues/30896): Improve wording on Downloads page - [#​30897](https://redirect.github.com/twbs/bootstrap/issues/30897): Prevent skip links from overlapping header in docs - [#​30973](https://redirect.github.com/twbs/bootstrap/issues/30973): Update some nav examples by removing `.nav-item` from `.nav-link` to be more consistent - [#​31070](https://redirect.github.com/twbs/bootstrap/issues/31070): Fix some broken examples and typos - [#​31135](https://redirect.github.com/twbs/bootstrap/issues/31135): Move color utility callouts to start of page - [#​31234](https://redirect.github.com/twbs/bootstrap/issues/31234): Clean up docs forms for accessibility - [#​31344](https://redirect.github.com/twbs/bootstrap/issues/31344): Mention toasts in the *components requiring JavaScript* page ### [`v4.5.0`](https://redirect.github.com/twbs/bootstrap/releases/tag/v4.5.0) [Compare Source](https://redirect.github.com/twbs/bootstrap/compare/v4.4.1...v4.5.0) ##### Highlights - **New interaction utilities.** Quickly set `user-select` with the new utilities and Sass map. - **New Reboot style for pointer cursors.** We now include a `role="button"` selector in Reboot to set `cursor: pointer` on non-`

  • Configuration

    πŸ“… Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

    🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

    β™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

    πŸ”• Ignore: Close this PR and you won't be reminded about this update again.


    • [ ] If you want to rebase/retry this PR, check this box

    This PR was generated by Mend Renovate. View the repository job log.

    CLAassistant commented 2 months ago

    CLA assistant check
    Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
    You have signed the CLA already but the status is still pending? Let us recheck it.