Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump datatables.net from 1.13.4 to 2.0.7 in /components #10146

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 7, 2024

Bumps datatables.net from 1.13.4 to 2.0.7.

Release notes

Sourced from datatables.net's releases.

1.13.11

DataTables 1.13.11

Commits
  • 3b005a0 Sync tag release - 2.0.7
  • c27b00b 2dbfcaac1f25b06c8aba6e9233eda9a22c8b1d32 Release 2.0.7
  • 73095e1 40bc402b50f69e37be92b0f22ced34e9ab095471 Fix: Processing element could be clo...
  • bc454cd 2126267999007dd1c95b2cb727a35be5cd75b8e7 Fix: Scrolling misalignment due to i...
  • 1336442 3b1818412093adfa54e35a2004ac8b298054a6fe DOC spelling mistake fix in the docs
  • 25115e0 Sync tag release - 2.0.6
  • 4cff4b1 c779e7a1a5d00821b2a50438fc3eb62b77673b5e Release 2.0.6
  • daac122 f177bf68c48474da299b8339e672e3035aed45a0 Fix: A \<table> inside the first ro...
  • 605656c c5082522d26409699bb6f505e2f2f6bb544de125 Performance: Do not apply sort when ...
  • 09969eb fb843bc457eab49d77b7c0765239685f15bf3b26 Examples: Ensure that jQuery is not ...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [datatables.net](https://github.com/DataTables/Dist-DataTables) from 1.13.4 to 2.0.7.
- [Release notes](https://github.com/DataTables/Dist-DataTables/releases)
- [Commits](DataTables/Dist-DataTables@1.13.4...2.0.7)

---
updated-dependencies:
- dependency-name: datatables.net
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 7, 2024
Copy link

dryrunsecurity bot commented May 7, 2024

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security Status Findings
Configured Codepaths Analyzer 0 findings
Sensitive Files Analyzer 1 finding
AppSec Analyzer 0 findings
Authn/Authz Analyzer 0 findings
Secrets Analyzer 0 findings

Note

🟢 Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy 🤖.
Note that this summary is auto-generated and not meant to be a definitive list of security issues
but rather a helpful summary from a security perspective.

Summary:

The code changes in this pull request involve updating the dependencies used in the project, specifically the datatables.net library. The key changes are:

  1. The datatables.net dependency has been updated from version ^1.13.4 to ^2.0.7, which is a major version update. This could potentially introduce breaking changes or new features.

From an application security perspective, it's important to review the release notes and change log for the new version of datatables.net to understand any security-related fixes or improvements. Additionally, the project should be thoroughly tested to ensure that the update does not introduce any regressions or new security issues.

Overall, the code changes appear to be routine dependency updates, but it's crucial to carefully review the changes and their potential impact on the application's security.

Files Changed:

  • components/package.json: This file has been updated to reflect the change in the datatables.net dependency from version ^1.13.4 to ^2.0.7.
  • components/yarn.lock: This file has been updated to reflect the change in the datatables.net dependency version.

Powered by DryRun Security

Copy link
Contributor Author

dependabot bot commented on behalf of github May 29, 2024

Superseded by #10295.

@dependabot dependabot bot closed this May 29, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/components/dev/datatables.net-2.0.7 branch May 29, 2024 12:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants