[Snyk] Upgrade: , , , , , docusaurus-plugin-matomo, docusaurus-plugin-sass, react-player, redocusaurus, rehype-katex, sass #32

X-oss-byte · 2024-09-08T21:32:10Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@code-hike/mdx
from 0.7.4 to 0.9.0 | 49 versions ahead of your current version | a year ago
on 2023-06-12
@docusaurus/core
from 2.3.1 to 2.4.3 | 3 versions ahead of your current version | a year ago
on 2023-09-20
@docusaurus/preset-classic
from 2.3.1 to 2.4.3 | 3 versions ahead of your current version | a year ago
on 2023-09-20
@emotion/react
from 11.10.4 to 11.13.0 | 9 versions ahead of your current version | 2 months ago
on 2024-07-20
@mdx-js/react
from 2.1.3 to 2.3.0 | 5 versions ahead of your current version | 2 years ago
on 2023-02-09
docusaurus-plugin-matomo
from 0.0.6 to 0.0.8 | 1 version ahead of your current version | 9 months ago
on 2023-12-03
docusaurus-plugin-sass
from 0.2.2 to 0.2.5 | 3 versions ahead of your current version | a year ago
on 2023-07-20
react-player
from 2.10.1 to 2.16.0 | 11 versions ahead of your current version | 5 months ago
on 2024-04-09
redocusaurus
from 1.3.0 to 1.6.4 | 8 versions ahead of your current version | a year ago
on 2023-09-20
rehype-katex
from 6.0.2 to 6.0.3 | 1 version ahead of your current version | a year ago
on 2023-04-23
sass
from 1.54.9 to 1.77.8 | 58 versions ahead of your current version | 2 months ago
on 2024-07-11

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Undesired Behavior SNYK-JS-STYLEDCOMPONENTS-3149924	454	No Known Exploit
Unchecked Input for Loop Condition SNYK-JS-KATEX-6483836	454	No Known Exploit
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	454	Proof of Concept
Template Injection SNYK-JS-DOMPURIFY-6474511	454	Proof of Concept

Release notes

Package name: @code-hike/mdx

0.9.0 - 2023-06-12
0.9.0-next.1 - 2023-06-09
0.9.0-next.0 - 2023-06-08
0.9.0--canary.373.22ed7cb.0 - 2023-06-09
0.9.0--canary.370.d6c3dc7.0 - 2023-06-08
0.9.0--canary.370.d5dcee5.0 - 2023-06-08
0.9.0--canary.370.772135a.0 - 2023-06-07
0.9.0--canary.370.628edfe.0 - 2023-06-07
0.8.4--canary.366.e2509b1.0 - 2023-05-13
0.8.4--canary.366.a57484e.0 - 2023-05-16
0.8.4--canary.366.a560bb7.0 - 2023-06-02
0.8.4--canary.366.0fda326.0 - 2023-05-30
0.8.4--canary.366.08a54b4.0 - 2023-05-30
0.8.3 - 2023-05-03
0.8.3-next.2 - 2023-04-30
0.8.3-next.1 - 2023-04-23
0.8.3-next.0 - 2023-04-22
0.8.3--canary.360.f91c849.0 - 2023-04-29
0.8.3--canary.360.b1b2937.0 - 2023-04-29
0.8.3--canary.358.345ae60.0 - 2023-04-23
0.8.3--canary.358.1004f75.0 - 2023-04-23
0.8.3--canary.357.aa719d3.0 - 2023-04-22
0.8.2 - 2023-04-11
0.8.2-next.2 - 2023-04-11
0.8.2-next.1 - 2023-04-11
0.8.2-next.0 - 2023-04-05
0.8.2--canary.347.563f9e4.0 - 2023-04-11
0.8.1 - 2023-03-24
0.8.1-next.1 - 2023-03-24
0.8.1-next.0 - 2023-01-20
0.8.1--canary.337.c3a0332.0 - 2023-03-24
0.8.0 - 2023-01-16
0.8.0-next.0 - 2023-01-15
0.8.0--canary.308.ff6a04d.0 - 2022-12-17
0.8.0--canary.308.f871ac0.0 - 2023-01-10
0.8.0--canary.308.e25fafb.0 - 2022-12-17
0.8.0--canary.308.d5a4a6c.0 - 2022-12-17
0.8.0--canary.308.cf940c7.0 - 2023-01-12
0.8.0--canary.308.cc62796.0 - 2022-12-17
0.8.0--canary.308.a8e7e46.0 - 2023-01-13
0.8.0--canary.308.a845c20.0 - 2023-01-15
0.8.0--canary.308.6cc554b.0 - 2023-01-15
0.8.0--canary.308.6bc684f.0 - 2023-01-15
0.8.0--canary.308.4fd5437.0 - 2023-01-15
0.8.0--canary.308.4931c64.0 - 2023-01-15
0.8.0--canary.308.3a1754f.0 - 2022-12-23
0.8.0--canary.308.2d9fc9a.0 - 2023-01-09
0.7.5-next.0 - 2022-08-28
0.7.5--canary.278.59b2af1.0 - 2022-08-28
0.7.4 - 2022-08-22

from @code-hike/mdx GitHub release notes

Package name: @docusaurus/core

2.4.3 - 2023-09-20
2.4.1 - 2023-05-15
2.4.0 - 2023-03-23
2.3.1 - 2023-02-03

from @docusaurus/core GitHub release notes

Package name: @docusaurus/preset-classic

2.4.3 - 2023-09-20
2.4.1 - 2023-05-15
2.4.0 - 2023-03-23
2.3.1 - 2023-02-03

from @docusaurus/preset-classic GitHub release notes

Package name: @emotion/react

11.13.0 - 2024-07-20
Minor Changes
- #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.
  
  Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.
  
  Default files should continue to work in all environments.
- #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.
Patch Changes
- Updated dependencies [d8ff8a5, a9f6912]:
  - @ emotion/serialize@1.3.0
  - @ emotion/use-insertion-effect-with-fallbacks@1.1.0
  - @ emotion/utils@1.4.0
11.12.0 - 2024-07-19
11.11.4 - 2024-02-27
11.11.3 - 2023-12-23
11.11.1 - 2023-06-07
11.11.0 - 2023-05-06
11.10.8 - 2023-04-28
11.10.6 - 2023-02-16
11.10.5 - 2022-10-27
11.10.4 - 2022-08-30

from @emotion/react GitHub release notes

Package name: @mdx-js/react

2.3.0 - 2023-02-09
Add
- 12e63e8 Add improved support for non-React frameworks
  by @ wooorm in #2255
Fix
- 764d3a2 Remove whitespace between unraveled text nodes
  by @ wooorm in #2252
- 3911148 Add module: node16 to tsconfig.json
  by @ ChristianMurphy in #2228
- 600b12a Add inferring of development options from webpack loader mode
  by @ remcohaszing in #2201
Community
- f4d78be Add recma-mdx-displayname to list of plugins
  by @ domdomegg in #2230
- 1f551a4 Add remark-mdx-chartjs to list of plugins
  by @ pangelani in #2221
Misc
- 97b9d59 Refactor to improve docs
  by @ wooorm in #2254
- 8f85b30 Refactor tsconfig.json
  by @ wooorm in #2250
- a17ac87 Refactor wording
  by @ beeburrt in #2214
Full Changelog: 2.2.1...2.3.0
2.2.1 - 2022-12-14
- e293eaf Remove assert/strict for Node 14
Full Changelog: 2.2.0...2.2.1
2.2.0 - 2022-12-14
Features
- 641eb91 Add support JSX development runtime
  by @ remcohaszing in #2045
Patches
- 3e0ab23 Fix @ mdx-js/node-loader from patching all runtimes
Docs
- 4a1415d Add note about use with vite-plugin-react
- 38c2d46 Add note about rollup@2 in Vite
  by @ ryuujo1573 in #2180
- caac5df Update docs for solid-js supporting JSX
- 3a50cc3 Add Solid to JSX section in Getting Started guide
  by @ Djunnni in #2159
- 1c83612 Fix docs on types
- 2635caf Replace deprecated Intellij plugin in docs
  by @ slorber in #2178
Full Changelog: 2.1.5...2.2.0
2.1.5 - 2022-10-11
- 90fa493 Fix bug with (injected) custom elements and layouts
Full Changelog: 2.1.4...2.1.5
2.1.4 - 2022-10-06
Patches
- 9d2aa80 Add file, positional info to crashes in webpack loader
  by @ Twipped in #2124
- 478c78b Fix support for Node loaders
Docs
- 56d7066 Add Astro to site generator docs
  by @ bholmesdev in #2118
- 996771a Add missing import to site example
  by @ elpddev in #2115
Full Changelog: 2.1.3...2.1.4
2.1.3 - 2022-08-17
Core
- 9904838 Fix rewriting of components for custom elements
  by @ bholmesdev in #2101
Docs
- 69a15b7 Add link to official mdx-js/vscode-mdx
  by @ jasikpark in #2098
Internal stuff that slightly improve stuff
- 529b96a Replace astring with estree-util-to-js
- 7d8dc11 Add id field to esbuild messages
- 7f37b95 Update @ types/estree-jsx
Full Changelog: 2.1.2...2.1.3

from @mdx-js/react GitHub release notes

Package name: docusaurus-plugin-matomo

0.0.8 - 2023-12-03
Added support docusaurus 3.0.0 (@ pmig)
0.0.6 - 2021-10-14
bump version 0.0.6

from docusaurus-plugin-matomo GitHub release notes

Package name: docusaurus-plugin-sass

0.2.5 - 2023-07-20
Add TypeScript support for Sass/SCSS modules
0.2.4 - 2023-07-01
What's Changed
- fix: resolve sass-loader to avoid phantom dependencies by @ ChrisCindy in #25
- Bump semver from 7.3.5 to 7.5.3 by @ dependabot in #31
New Contributors
- @ ChrisCindy made their first contribution in #25
Full Changelog: v0.2.3...v0.2.4
0.2.3 - 2023-01-09
What's Changed
- Bump minimist from 1.2.5 to 1.2.6 by @ dependabot in #24
- Bump loader-utils from 2.0.0 to 2.0.3 by @ dependabot in #26
- Bump loader-utils from 2.0.3 to 2.0.4 by @ dependabot in #27
- Bump json5 from 2.2.1 to 2.2.3 by @ dependabot in #29
Full Changelog: v0.2.2...v0.2.3
0.2.2 - 2022-01-24
Fix npm ERESOLVE and EJSONPARSE in package.json

from docusaurus-plugin-sass GitHub release notes

Package name: react-player

2.16.0 - 2024-04-09
Features
- add Mux + hls.js support back in (#1769) (df11073)
2.15.1 - 2024-03-02
Bug Fixes
- dynamic Mux import (#1758) (ceff8c3), closes #1755
2.15.0 - 2024-02-28
Features
- add Mux player (#1748) (62dabf1)
2.14.1 - 2023-12-19
Bug Fixes
- cjs interop require default pita (#1722) (a35f3c5)
2.14.0 - 2023-12-14
This release should be a no-op (no changes) but the whole build / bundle tooling was replaced so please report any issues that would come up loading / bundling react-player 🙏

Features
- modernize build using esbuild (#1684) (8a4a9aa)
Bug Fixes
- pkg repository.url (#1708) (3a0fbca)
- repo url (#1709) (9d58201)
2.14.0-canary.0 - 2023-11-03
2.13.0 - 2023-09-05
2.13.0
2.12.0 - 2023-03-07
2.12.0
2.11.2 - 2023-02-10
2.11.2
2.11.1 - 2023-02-08
2.11.1
2.11.0 - 2022-09-16
2.11.0
2.10.1 - 2022-05-07

from react-player GitHub release notes

Package name: redocusaurus

1.6.4 - 2023-09-20
redocusaurus@1.6.4

Patch Changes
- Updated dependencies [340c583]:
  - docusaurus-theme-redoc@1.6.4
docusaurus-theme-redoc@1.6.4

Patch Changes
- #307 340c583 Thanks @ tomas-zijdemans-vipps! - fix callback dark mode background
1.6.3 - 2023-06-07
redocusaurus@1.6.3

Patch Changes
- Updated dependencies [e5cf828]:
  - docusaurus-theme-redoc@1.6.3
docusaurus-theme-redoc@1.6.3

Patch Changes
- #295 e5cf828 Thanks @ kimsauce! - Add dark mode support to tables inside markdown
1.6.2 - 2023-04-17
redocusaurus@1.6.2

Patch Changes
- Updated dependencies [c0fcd04]:
  - docusaurus-theme-redoc@1.6.2
docusaurus-theme-redoc@1.6.2

Patch Changes
- #288 c0fcd04 Thanks @ rohit-gohri! - Revert "Fix to prevent rehydration of styles" to fix mobile view
1.6.1 - 2023-03-03
redocusaurus@1.6.1

Patch Changes
- Updated dependencies [42bb731]:
  - docusaurus-theme-redoc@1.6.1
docusaurus-theme-redoc@1.6.1

Patch Changes
- #276 42bb731 Thanks @ JPeer264! - Prevent rehydrating of client styles
1.6.0 - 2023-02-10
redocusaurus@1.6.0

Minor Changes
- #269 bba785a Thanks @ rohit-gohri! - Fully support redocly.yaml for setting all theme options
Patch Changes
- Updated dependencies [bba785a, bba785a]:
  - docusaurus-plugin-redoc@1.6.0
  - docusaurus-theme-redoc@1.6.0
docusaurus-plugin-redoc@1.6.0

Minor Changes
- #269 bba785a Thanks @ rohit-gohri! - Fully support redocly.yaml for setting all theme options
docusaurus-theme-redoc@1.6.0

Minor Changes
- #269 bba785a Thanks @ rohit-gohri! - Fully support redocly.yaml for setting all theme options
Patch Changes
- #269 bba785a Thanks @ rohit-gohri! - Fix types exports of theme package
1.5.1 - 2023-02-10
1.5.0 - 2023-02-10
1.4.0 - 2022-09-26
1.3.0 - 2022-07-16

from redocusaurus GitHub release notes

Package name: rehype-katex

6.0.3 - 2023-04-23
- e28098a Fix to catch non-parse katex errors
- f7a35ea Replace dependency to improve browser bundle size
Full Changelog: https://github.com/remarkjs/remark-math/compare/rehype-katex@6.0.2...rehype-katex@6.0.3
6.0.2 - 2021-11-11
- fa4ada1 Update katex
- b2066bb Add improved docs

from rehype-katex GitHub release notes

Package name: sass

1.77.8 - 2024-07-11
To install Sass 1.77.8, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes
- No user-visible changes.
See the full changelog for changes in earlier releases.
1.77.7 - 2024-07-09
See sass/sass#3885
1.77.6 - 2024-06-17
…264)
1.77.5 - 2024-06-11
To install Sass 1.77.5, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes
- Fully trim redundant selectors generated by @ extend.
See the full changelog for changes in earlier releases.
1.77.4 - 2024-05-30
To install Sass 1.77.4, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Embedded Sass
- Support passing Version input for fatalDeprecations as string over embedded protocol.
- Fix a bug in the JS Embedded Host where Version could be incorrectly accepted as input for silenceDeprecations and futureDeprecations in pure JS.
See the full changelog for changes in earlier releases.
1.77.3 - 2024-05-29
1.77.2 - 2024-05-16
1.77.1 - 2024-05-10
1.77.0 - 2024-05-07
1.76.0 - 2024-04-30
1.75.0 - 2024-04-11
1.74.1 - 2024-04-04
1.72.0 - 2024-03-13
1.71.1 - 2024-02-21
1.71.0 - 2024-02-16
1.70.0 - 2024-01-18
1.69.7 - 2024-01-02
1.69.6 - 2023-12-28
1.69.5 - 2023-10-26
1.69.4 - 2023-10-17
1.69.3 - 2023-10-12
1.69.2 - 2023-10-10
1.69.1 - 2023-10-09
1.69.0 - 2023-10-05
1.68.0 - 2023-09-21
1.67.0 - 2023-09-14
1.66.1 - 2023-08-18
1.66.0 - 2023-08-17
1.65.1 - 2023-08-09
1.65.0 - 2023-08-09
1.64.2 - 2023-07-31
1.64.1 - 2023-07-22
1.64.0 - 2023-07-20
1.63.6 - 2023-06-21
1.63.5 - 2023-06-21
1.63.4 - 2023-06-14
1.63.3 - 2023-06-09
1.63.2 - 2023-06-08
1.63.1 - 2023-06-08
1.63.0 - 2023-06-07
1.62.1 - 2023-04-25
1.62.0 - 2023-04-11
1.61.0 - 2023-04-06
1.60.0 - 2023-03-23
1.59.3 - 2023-03-14
1.59.2 - 2023-03-11
1.59.1 - 2023-03-10
1.59.0 - 2023-03-10
1.58.3 - 2023-02-18
1.58.2 - 2023-02-17
1.58.1 - 2023-02-14
1.58.0 - 2023-02-01
1.57.1 - 2022-12-19
1.57.0 - 2022-12-17
1.56.2 - 2022-12-08
1.56.1 - 2022-11-09
1.56.0 - 2022-11-04
1.55.0 - 2022-09-21
1.54.9 - 2022-09-07

from sass GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @code-hike/mdx from 0.7.4 to 0.9.0. See this package in npm: https://www.npmjs.com/package/@code-hike/mdx - @docusaurus/core from 2.3.1 to 2.4.3. See this package in npm: https://www.npmjs.com/package/@docusaurus/core - @docusaurus/preset-classic from 2.3.1 to 2.4.3. See this package in npm: https://www.npmjs.com/package/@docusaurus/preset-classic - @emotion/react from 11.10.4 to 11.13.0. See this package in npm: https://www.npmjs.com/package/@emotion/react - @mdx-js/react from 2.1.3 to 2.3.0. See this package in npm: https://www.npmjs.com/package/@mdx-js/react - docusaurus-plugin-matomo from 0.0.6 to 0.0.8. See this package in npm: https://www.npmjs.com/package/docusaurus-plugin-matomo - docusaurus-plugin-sass from 0.2.2 to 0.2.5. See this package in npm: https://www.npmjs.com/package/docusaurus-plugin-sass - react-player from 2.10.1 to 2.16.0. See this package in npm: https://www.npmjs.com/package/react-player - redocusaurus from 1.3.0 to 1.6.4. See this package in npm: https://www.npmjs.com/package/redocusaurus - rehype-katex from 6.0.2 to 6.0.3. See this package in npm: https://www.npmjs.com/package/rehype-katex - sass from 1.54.9 to 1.77.8. See this package in npm: https://www.npmjs.com/package/sass See this project in Snyk: https://app.snyk.io/org/sammytezzy/project/7650a6dc-5350-43b1-a325-214be212c321?utm_source=github&utm_medium=referral&page=upgrade-pr

stackblitz · 2024-09-08T21:32:14Z

Run & review this pull request in StackBlitz Codeflow.

changeset-bot · 2024-09-08T21:32:15Z

⚠️ No Changeset found

Latest commit: ffe8443

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

sourcery-ai

We have skipped reviewing this pull request. Here's why:

It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
We don't review packaging changes - Let us know if you'd like us to change this.

sourcery-ai bot reviewed Sep 8, 2024

View reviewed changes

[Snyk] Upgrade: , , , , , docusaurus-plugin-matomo, docusaurus-plugin-sass, react-player, redocusaurus, rehype-katex, sass #32

Are you sure you want to change the base?

[Snyk] Upgrade: , , , , , docusaurus-plugin-matomo, docusaurus-plugin-sass, react-player, redocusaurus, rehype-katex, sass #32

Conversation

X-oss-byte commented Sep 8, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

Minor Changes

Patch Changes

Add

Fix

Community

Misc

Features

Patches

Docs

Patches

Docs

Core

Docs

Internal stuff that slightly improve stuff

What's Changed

New Contributors

What's Changed

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

redocusaurus@1.6.4

Patch Changes

docusaurus-theme-redoc@1.6.4

Patch Changes

redocusaurus@1.6.3

Patch Changes

docusaurus-theme-redoc@1.6.3

Patch Changes

redocusaurus@1.6.2

Patch Changes

docusaurus-theme-redoc@1.6.2

Patch Changes

redocusaurus@1.6.1

Patch Changes

docusaurus-theme-redoc@1.6.1

Patch Changes

redocusaurus@1.6.0

Minor Changes

Patch Changes

docusaurus-plugin-redoc@1.6.0

Minor Changes

docusaurus-theme-redoc@1.6.0

Minor Changes

Patch Changes

Changes

Changes

Changes

Embedded Sass

stackblitz bot commented Sep 8, 2024

changeset-bot bot commented Sep 8, 2024

⚠️ No Changeset found

sourcery-ai bot left a comment

Choose a reason for hiding this comment