This package now requires Node.js 12 or higher. For more, please read Sindre Sorhus’s FAQ.
v2.0.0
This release adopts ES2015 language features such as for-of and drops support for older browsers, including IE. If you need to support pre-ES2015 environments, you should stick with d3-color 1.x or use a transpiler.
For the full list of changes between v2.2.0 and v2.3.0 please see the v2.3.0-alpha.0 and the v2.3.0-alpha.1 release notes.
fix
fix: patch d3 libraries with victory-vendor to fix security vulnerability, failing test by @ckifer in recharts/recharts#3167
SECURITY VULNERABILITY FIX 🎉: used victory-vendor to replace esm only versions of d3 with cjs compatible versions from victory. We will introduce a breaking change in 3.0 to move back to esm only d3 libraries. - closes #3012
This version was pushed to npm by ckifer, a new releaser for recharts since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/worknenjoy/gitpay/network/alerts).
Bumps d3-color to 3.1.0 and updates ancestor dependency recharts. These dependencies need to be updated together.
Updates
d3-colorfrom 1.4.1 to 3.1.0Release notes
Sourced from d3-color's releases.
Commits
7a1573e3.1.075c19c4update LICENSEef94e01update dependencies5e9f757method shorthande4bc34eformatHex8 (#103)ac660c6{rgb,hsl}.clamp() (#102)70e3a04clamp HSL format (#101)994d8fdavoid backtracking (#100)7d61bbe3.0.193bc4ffrelated d3/d33; extract copyrights from LICENSEUpdates
rechartsfrom 1.8.5 to 2.3.2Release notes
Sourced from recharts's releases.
... (truncated)
Changelog
Sourced from recharts's changelog.
... (truncated)
Commits
f1365a02.3.209bcfd4fix: one data element with tooltip causes crashfb969852.3.12011ff0Revert "refactor(ResponsiveContainer): improve performance memoizing internal...e71d83c2.3.01216e06fix: cartesian utils unit test, remove demo,src from files arraybcb199cfix: d3 security vulnerability in d3-color85f7c81chore: add npm publish action (#3166)447fd7atest: add jest coverage, differentiate jest and karma envs to fix errors (#3164)a290cfafix: area chart test part3 (#3163)Maintainer changes
This version was pushed to npm by ckifer, a new releaser for recharts since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/worknenjoy/gitpay/network/alerts).