Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade recharts from 2.12.4 to 2.12.5 #3472

Merged
merged 1 commit into from May 5, 2024

Conversation

scudette
Copy link
Contributor

@scudette scudette commented May 3, 2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade recharts from 2.12.4 to 2.12.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 21 days ago, on 2024-04-12.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: recharts
  • 2.12.5 - 2024-04-12

    Small fixes while working on v3 continued...

    What's Changed

    Feat

    • BarChart: support percentage (of chart) for barSize. Helps set size of bar when there are few datapoints Fixes #3640 by @ graup in #4407

    Fix

    Address #4382

    A recent release of @ types/react broke some builds because they removed certain (unused) events from common event handler attributes. recharts was unknowingly enumerating keys of SVGProps in the Layer component with the old types and causing a type error on tsc with skipLibCheck: false

    • typescript - Layer: use SVGAttributes instead of SVGProps in forwardRef components by @ ckifer in #4413
    • typescript - Pie: fix Pie ref which was cast to HTMLElement when the ref is actually referring to SVGGElement. This gave false information to whoever is using ref on the Pie component

    Full Changelog: v2.12.4...v2.12.5

  • 2.12.4 - 2024-04-04

    What's Changed

    Small fixes while working on v3 continued...

    Fix

    • Accessibility: remove role attribute from recharts-wrapper which caused an accessibility violation with > 1 chart on the same page by @ julianna-langston in #4386, fixes #4384
    • X/YAxis: fix incorrect padding calculation when there is 1 datapoint or less by @ graup in #4314 closes #4313

    className fixes - helps slowly address #2169:

    • Tooltip: allow custom className on cursor by @ 108yen in #4306
    • RadarChart/RadialBarChart: allow custom className on PolarRadiusAxis, PolarAngleAxis, and Radar dot by @ 108yen in #4335
    • Pie: allow custom className on label and labelLine of Pie by @ 108yen in #4381

    Full Changelog: v2.12.3...v2.12.4

from recharts GitHub release notes
Commit messages
Package name: recharts
  • bdad6ec 2.12.5
  • ed95633 fix(layer-types): use SVGAttributes instead of SVGProps in forwardRef components, fix Pie refs (#4413)
  • 3d2e8b9 feat(BarChart): support percentage for barSize. Fixes #3640 (#4407)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@scudette scudette merged commit a44f835 into master May 5, 2024
2 of 3 checks passed
@scudette scudette deleted the snyk-upgrade-deaca68d7c156280157049dbd2c49283 branch May 5, 2024 06:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants