Skip to content

[Snyk] Upgrade: bootstrap, countup.js, jquery, jquery-ui, jquery-waypoints #1767

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade: bootstrap, countup.js, jquery, jquery-ui, jquery-waypoints #1767

wants to merge 1 commit into from

Conversation

@RohitM-IN
Copy link
Owner

@RohitM-IN RohitM-IN commented Sep 23, 2024

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

bootstrap
from 4.3.1 to 4.6.2 | 9 versions ahead of your current version | 2 years ago
on 2022-07-19
countup.js
from 2.0.7 to 2.8.0 | 15 versions ahead of your current version | a year ago
on 2023-08-25
jquery
from 3.6.0 to 3.7.1 | 6 versions ahead of your current version | a year ago
on 2023-08-28
jquery-ui
from 1.12.1 to 1.14.0 | 11 versions ahead of your current version | 2 months ago
on 2024-08-05
jquery-waypoints
from 2.0.3 to 2.0.5 | 1 version ahead of your current version | 8 years ago
on 2016-05-02

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Cross-site Scripting (XSS)
SNYK-JS-JQUERYUI-1767167		 626 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-JQUERYUI-1767175		 626 No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JS-JQUERYUI-1767767		 626 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-JQUERYUI-2946728		 626 No Known Exploit
Release notes
Package name: bootstrap from bootstrap GitHub release notes
Package name: countup.js
  • 2.8.0 - 2023-08-25

    Added onStartCallback option, useful for when scroll spy is enabled, thanks to @ cherrol !

  • 2.7.1 - 2023-08-15
  • 2.7.0 - 2023-06-28

    Reverted change which made "main" in package.json point to the module file, instead of the umd file. It now points again at the umd file.

  • 2.6.2 - 2023-05-01

    When revamping the build, I tried to resolve a rollup warning that had been occurring on the build for a long time:

    "(!) `this` has been rewritten to `undefined`

    It occurs because of typescript's Object.assign polyfill, which uses this on the global scope. If you set context: 'window' in the rollup config, it will silence the warning, but it will cause issues if CountUp is not run in the browser. Allowing rollup to rewrite this to undefined on just the global scope is harmless and doesn't break anything, so I reverted the change.

  • 2.6.1 - 2023-04-30

    This release doesn't change the CountUp code at all, just the distribution files - The requestAnimationFrame polyfill is no longer bundled with CountUp but served separately. The other files in dist remain the same. More details in the PR: #311

  • 2.6.0 - 2023-03-13

    Support animation plugins: A plugin is a class instance or object passed in options for the plugin param that implements a render method:

    export declare interface CountUpPlugin {
  render(elem: HTMLElement, formatted: string): void;
}

    The plugin's render method will be called on each frame to display the formatted value instead of CountUp's.

  • 2.5.0 - 2023-03-01

    Added new option, onCompleteCallback which gets called when the animation completes. You can still pass a callback to the start method, and it will override whatever is passed in the options.

  • 2.4.2 - 2023-01-28

    Make it so when scroll spy is enabled, and scrollSpyOnce is false, CountUp will re-animate when scrolling up, as well as down, thanks to @ paidge

  • 2.4.1 - 2023-01-24
    • Added Indian separators option useIndianSeparators which will format a number like "1,00,000" instead of "100,000"
    • Added null check in printValue method to potentially fix react issue
  • 2.3.2 - 2022-07-08

    Fixes #287 which was a bug where, when using smart easing and counting down, the animation would take longer than configured. It also fixed an issue which caused 2 easing cycles to run for the same scenario.

  • 2.3.1 - 2022-06-29

    Fix window check for SSR, thanks to @ johakr

  • 2.3.0 - 2022-06-27
  • 2.2.0 - 2022-05-18
  • 2.1.0 - 2022-03-02
  • 2.0.8 - 2021-07-27
  • 2.0.7 - 2020-08-25
from countup.js GitHub release notes
Package name: jquery from jquery GitHub release notes
Package name: jquery-ui from jquery-ui GitHub release notes
Package name: jquery-waypoints
  • 2.0.5 - 2016-05-02

    Restore jquery-waypoints bower install

  • 2.0.3 - 2016-04-09
from jquery-waypoints GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade multiple dependencies with Snyk
9fc0d36 
Snyk has created this PR to upgrade:
  - bootstrap from 4.3.1 to 4.6.2.
    See this package in npm: https://www.npmjs.com/package/bootstrap
  - countup.js from 2.0.7 to 2.8.0.
    See this package in npm: https://www.npmjs.com/package/countup.js
  - jquery from 3.6.0 to 3.7.1.
    See this package in npm: https://www.npmjs.com/package/jquery
  - jquery-ui from 1.12.1 to 1.14.0.
    See this package in npm: https://www.npmjs.com/package/jquery-ui
  - jquery-waypoints from 2.0.3 to 2.0.5.
    See this package in npm: https://www.npmjs.com/package/jquery-waypoints

See this project in Snyk:
https://app.snyk.io/org/rootandroid58/project/44c01c49-f234-4729-8e19-53ad2f47f48c?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Count down is slower than count up when end is 0

3 participants

@RohitM-IN @snyk-bot