Skip to content

fix(deps): update dependency bootstrap to v5 #14

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): update dependency bootstrap to v5 #14

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jun 30, 2021 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
bootstrap (source) 4.6.2 -> 5.3.8 age confidence

Release Notes

twbs/bootstrap (bootstrap)

v5.3.8

Compare Source

What's Changed

Dependencies

New Contributors

Full Changelog: twbs/bootstrap@v5.3.7...v5.3.8

v5.3.7

Compare Source

📚 Documentation
  • Fixed broken "View on GitHub" URLs
  • Corrected HTML <head> content generated by the "Download examples" button
  • Refined sanitizer documentation for clarity and completeness
  • Improved accessibility in the "On this page" table of contents and section heading anchor links
  • Relocated ads to the right sidebar to minimize content reflow
  • Added a new section on the Download page for the Intelissence extension
  • Clarified the "Via JavaScript" usage example for Accordion Collapse
  • Made internal documentation improvements to support future maintenance (no visible user impact)
  • Mention CDN integrity and crossorigin attributes in introduction page
  • Enhance floating labels placeholder usage description
  • Add example of showing dynamic range value with output
🎨 Sass
  • Consolidated multiple 'none' values in the box-shadow Sass mixin for cleaner output
🤖 JavaScript
  • Fixed popover and tooltip behavior with a trigger: "hover click" configuration
🤝 Contributions
  • Added recommended VSCode extensions and settings configuration to the repository

v5.3.6

Compare Source

Highlights

  • Ported the docs from Hugo to Astro for our own sanity!
  • Added usage docs for Accordion JavaScript
  • Prevent .visually-hidden overflowing children to become focusable
  • Limit .card-group selectors to immediate children to fix some inheritance issues

Changes

New Contributors

Full Changelog: twbs/bootstrap@v5.3.5...v5.3.6

v5.3.5

Compare Source

Hot fix for a regression from upstream in Autoprefixer.

What's Changed

Full Changelog: twbs/bootstrap@v5.3.4...v5.3.5

v5.3.4

Compare Source

Changes

  • #​40888: Dependabot: switch to grouped updates

🚀 Features

  • #​41299: Typo fixed
  • #​41187: Docs: mention removal of util.js in migration guide
  • #​41228: Docs: Simplify ids for checks, radios and switches
  • #​41150: Update fixtureId to FIXTURE_ID for consistency
  • #​40965: Docs: Use <article> element for example cards
  • #​40932: Docs: add ngx-bootstrap to JavaScript frameworks list
  • #​40790: Docs: Drop .grid where it shouldn't be used
  • #​40821: Docs: precise how to add new .order-* classes in 'Layout > Columns'
  • #​40914: Docs: drop useless .justify-content-start class in homepage
  • #​40876: Remove unneeded flexbug workaround
  • #​40870: Docs: Update modal min-height inline style
  • #​40844: Docs: Remove mention about Safari's limited support flexbox gap
  • #​40620: Docs: minor accessibility improvements for Examples
  • #​40619: Docs: Fix a minor accessibility issue (checkout example missing h1)
  • #​40577: Docs: Add main element to Cheatsheet Examples
  • #​39815: Docs: drop unused .bi-exclamation-triangle-fill class
  • #​40507: Docs: HTTPS link to ikons iconset
  • #​39777: Docs: fix Reddit URL to avoid redirection
  • #​39697: refactor(accordion): merge selectors for border-radius rule

🎨 CSS

  • #​41336: Fix modal and offcanvas header collapse
  • #​41126: Fix display issues of close button in contextual light and dark modes
  • #​40695: Fix light mode carousel in dark mode
  • #​41004: Add workarounds for postcss-values-parser error (negative values in calc())
  • #​41013: Align floating labels with form-select sizes
  • #​40931: Fix: correct typo in background-blend-mode value
  • #​40900: Remove unnecessary duplicated CSS class name
  • #​40876: Remove unneeded flexbug workaround
  • #​40844: Docs: Remove mention about Safari's limited support flexbox gap
  • #​40623: Fix use of declarations after nested rules (deprecated in Sass 1.77.7)
  • #​39720: Floating labels: Fix max-width and background-color
  • #​40488: button-group: Fix btn-group-vertical by using same rules as btn-group
  • #​39804: Optimize Sass SVG files
  • #​39494: Change floating label placeholder's color
  • #​39697: refactor(accordion): merge selectors for border-radius rule

☕️ JavaScript

  • #​38411: Add note about cancelling modal events to modal.md
  • #​41150: Update fixtureId to FIXTURE_ID for consistency
  • #​40803: Fix popover toggle twice to close
  • #​38725: Fix this reference for functions
  • #​39791: Fix broken comment link for reflow hack

📖 Docs

  • #​39364: Docs: improve progress bar labels markup and explanations for accessibility
  • #​41308: Fix typo in Navbar docs
  • #​41299: Typo fixed
  • #​41281: Fixed minor typo in Sass documentation
  • #​41187: Docs: mention removal of util.js in migration guide
  • #​41228: Docs: Simplify ids for checks, radios and switches
  • #​38411: Add note about cancelling modal events to modal.md
  • #​40917: Fix: clipboard icon not showing after multiple press
  • #​40714: Docs: add descriptions for Webpack, Parcel and Vite
  • #​40928: Update css-grid.md
  • #​41098: Update a point in the RTL documentation
  • #​40965: Docs: Use <article> element for example cards
  • #​40756: Docs: missing aria-hidden on some decorative SVGs
  • #​41036: Docs: add warning callout for Yarn Berry
  • #​41052: Doc: Fix link endpoint in dropdown documentation
  • #​41030: Docs: fix .order values in the migration guide
  • #​40973: Docs: correct example formatting in 'Utilities > API' for linting compliance
  • #​40911: fix transparent navbar in windows high contrast mode
  • #​40932: Docs: add ngx-bootstrap to JavaScript frameworks list
  • #​40951: Docs: fix example hiding element except on medium and large devices in 'Utilities > Display > Hiding elements'
  • #​40931: Fix: correct typo in background-blend-mode value
  • #​40790: Docs: Drop .grid where it shouldn't be used
  • #​40821: Docs: precise how to add new .order-* classes in 'Layout > Columns'
  • #​40799: Fix Cheatsheet examples horizontal scrolling
  • #​40914: Docs: drop useless .justify-content-start class in homepage
  • #​40900: Remove unnecessary duplicated CSS class name
  • #​40766: Docs: Make "Edit in Stackblitz" links explicit
  • #​40767: Docs: Indicate links in foreign language
  • #​40818: Docs: fix $enable-css-grid → $enable-cssgrid in 'Customize > Options'
  • #​40870: Docs: Update modal min-height inline style
  • #​40844: Docs: Remove mention about Safari's limited support flexbox gap
  • #​40797: Docs: missing $enable-css-grid in options.md
  • #​40762: Docs: clarify the subject of the About page
  • #​40703: Docs: Update WCAG links and references
  • #​40689: Docs: change wording of single/split danger buttons
  • #​40691: Docs: add aria-hidden="true" to decorative SVGs
  • #​40686: docs: add aria-hidden='true' to decorative SVGs
  • #​40672: Update masthead wording
  • #​40639: Further image compression improvements
  • #​40620: Docs: minor accessibility improvements for Examples
  • #​40619: Docs: Fix a minor accessibility issue (checkout example missing h1)
  • #​39846: Fix Default values and Description content in options table
  • #​39815: Docs: drop unused .bi-exclamation-triangle-fill class
  • #​40522: docs: fix typo in the getting started introduction
  • #​40507: Docs: HTTPS link to ikons iconset
  • #​40504: docs: add missing data-bs-theme="light" in navbars color schemes markup
  • #​39980: Docs: add missing Accordion component in the list of JS components
  • #​39951: docs: migrate to the built-in sitemap template
  • #​39863: Add PostCSS-RTLCSS approach to the documentation
  • #​39829: docs: move examples inline shortcode to a partial
  • #​39824: docs: resize docs bundler images and fix dimensions
  • #​39779: docs: add a new partial for responsive images and use imageConfig
  • #​39768: docs: add a render image hook
  • #​39819: docs: update sitemap template
  • #​39778: docs: use urls.JoinPath in more places
  • #​39807: Move theme toggler to a partial
  • #​39805: masthead.html: add rel="noopener" target="_blank"
  • #​39808: docs: move examples icons to a partial
  • #​39773: Further improve PNG compression
  • #​38993: docs: bundle assets with Hugo
  • #​39782: docs: mention text transform classes
  • #​39749: Update masthead to HeroDevs EOL
  • #​39781: docs: move fathom site to hugo config
  • #​39777: Docs: fix Reddit URL to avoid redirection
  • #​39772: examples: assorted tweaks
  • #​39766: Docs: drop data-bs-scroll="true" from navbar
  • #​39763: Switch to using hugo.IsProduction
  • #​39739: Search: Fix modal on mobile chromium based browsers
  • #​39757: footer: remove unneeded trailing slash
  • #​39724: Docs: minor tweaks
  • #​39745: docs: use a responsive image for bootstrap-logo-shadow.png
  • #​39741: More docs fixes
  • #​39740: Doc fixes
  • #​39738: Fix docs-versions.html
  • #​39725: docs: remove Google Analytics

🛠 Examples

  • #​40799: Fix Cheatsheet examples horizontal scrolling
  • #​40620: Docs: minor accessibility improvements for Examples
  • #​40619: Docs: Fix a minor accessibility issue (checkout example missing h1)
  • #​40577: Docs: Add main element to Cheatsheet Examples

🌎 Accessibility

  • #​40965: Docs: Use <article> element for example cards
  • #​40756: Docs: missing aria-hidden on some decorative SVGs
  • #​40911: fix transparent navbar in windows high contrast mode
  • #​40766: Docs: Make "Edit in Stackblitz" links explicit
  • #​40767: Docs: Indicate links in foreign language
  • #​40808: Docs: add aria-label to SVG with tooltip
  • #​40762: Docs: clarify the subject of the About page
  • #​40703: Docs: Update WCAG links and references
  • #​40691: Docs: add aria-hidden="true" to decorative SVGs
  • #​40686: docs: add aria-hidden='true' to decorative SVGs
  • #​40620: Docs: minor accessibility improvements for Examples
  • #​40619: Docs: Fix a minor accessibility issue (checkout example missing h1)
  • #​40577: Docs: Add main element to Cheatsheet Examples

📦 Dependencies

  • #​41305: Build(deps-dev): Bump the development-dependencies group across 1 directory with 9 updates
  • #​41265: Build(deps-dev): Bump the development-dependencies group across 1 directory with 5 updates
  • #​41234: Build(deps-dev): Bump the development-dependencies group across 1 directory with 7 updates
  • #​41171: Build(deps-dev): Bump the development-dependencies group across 1 directory with 3 updates
  • #​41155: Build(deps-dev): Bump the development-dependencies group across 1 directory with 4 updates
  • #​41109: Build(deps-dev): Bump the development-dependencies group across 1 directory with 8 updates
  • #​41082: Build(deps-dev): Bump the development-dependencies group across 1 directory with 7 updates
  • #​41010: Build(deps-dev): Bump the development-dependencies group across 1 directory with 5 updates
  • #​40978: Build(deps-dev): Bump the development-dependencies group across 1 directory with 6 updates
  • #​40953: Build(deps-dev): Bump the development-dependencies group across 1 directory with 6 updates
  • #​40929: Build(deps): Bump the npm_and_yarn group with 2 updates
  • #​40920: Build(deps-dev): Bump the development-dependencies group across 1 directory with 6 updates
  • #​40895: Build(deps-dev): Bump the development-dependencies group across 1 directory with 9 updates
  • #​40883: Build(deps-dev): Bump terser from 5.31.6 to 5.34.1
  • #​40842: Build(deps-dev): Bump npm-run-all2 from 6.2.2 to 6.2.3
  • #​40882: Build(deps-dev): Bump hugo-bin from 0.130.1 to 0.132.0
  • #​40843: Build(deps-dev): Bump eslint from 8.57.0 to 8.57.1
  • #​40886: Build(deps-dev): Bump rollup from 4.21.2 to 4.23.0 in the npm_and_yarn group
  • #​40862: Build(deps): Bump body-parser from 1.20.2 to 1.20.3 in the npm_and_yarn group
  • #​40806: Build(deps-dev): Bump postcss from 8.4.44 to 8.4.45
  • #​40784: Build(deps-dev): Bump postcss from 8.4.41 to 8.4.44
  • #​40788: Build(deps-dev): Bump @​babel/cli from 7.24.8 to 7.25.6
  • #​40782: Build(deps-dev): Bump rtlcss from 4.2.0 to 4.3.0
  • #​40783: Build(deps-dev): Bump eslint-plugin-import from 2.29.1 to 2.30.0
  • #​40785: Build(deps-dev): Bump rollup from 4.21.1 to 4.21.2
  • #​40786: Build(deps-dev): Bump stylelint-config-twbs-bootstrap from 14.2.0 to 15.0.0
  • #​40774: Build(deps-dev): Bump hugo-bin from 0.129.1 to 0.130.1
  • #​40773: Build(deps-dev): Bump @​babel/preset-env from 7.25.3 to 7.25.4
  • #​40775: Build(deps-dev): Bump rollup from 4.20.0 to 4.21.1
  • #​40723: Build(deps-dev): Bump hugo-bin from 0.127.0 to 0.129.1
  • #​40721: Build(deps-dev): Bump terser from 5.31.3 to 5.31.6
  • #​40722: Build(deps-dev): Bump @​babel/preset-env from 7.25.2 to 7.25.3
  • #​40720: Build(deps-dev): Bump postcss from 8.4.40 to 8.4.41
  • #​40697: Build(deps-dev): Bump autoprefixer from 10.4.19 to 10.4.20
  • #​40696: Build(deps-dev): Bump rollup from 4.19.1 to 4.20.0
  • #​40698: Build(deps-dev): Bump stylelint from 16.7.0 to 16.8.1
  • #​40678: Build(deps-dev): Bump @​babel/core from 7.24.9 to 7.25.2
  • #​40680: Build(deps-dev): Bump karma from 6.4.3 to 6.4.4
  • #​40679: Build(deps-dev): Bump @​babel/preset-env from 7.25.0 to 7.25.2
  • #​40673: Update devDependencies and regenerate package-lock.json
  • #​40662: Build(deps-dev): Bump bundlewatch from 0.3.3 to 0.4.0
  • #​40655: Update devDependencies
  • #​40638: Build(deps-dev): Bump @​babel/core from 7.24.7 to 7.24.9
  • #​40637: Build(deps-dev): Bump @​babel/preset-env from 7.24.7 to 7.24.8
  • #​40636: Build(deps-dev): Bump stylelint from 16.6.1 to 16.7.0
  • #​40633: Build(deps-dev): Bump @​babel/cli from 7.24.7 to 7.24.8
  • #​40634: Build(deps-dev): Bump eslint-plugin-markdown from 5.0.0 to 5.1.0
  • #​40632: Build(deps-dev): Bump terser from 5.31.1 to 5.31.2
  • #​40635: Build(deps-dev): Bump sass from 1.77.6 to 1.77.8
  • #​40617: Build(deps-dev): Bump rollup from 4.18.0 to 4.18.1
  • #​40616: Build(deps-dev): Bump npm-run-all2 from 6.2.0 to 6.2.2
  • #​40615: Build(deps-dev): Bump hugo-bin from 0.125.0 to 0.125.2
  • #​40618: Build(deps-dev): Bump @​stackblitz/sdk from 1.10.0 to 1.11.0
  • #​40601: Build(deps-dev): Bump terser from 5.31.0 to 5.31.1
  • #​40604: Build(deps-dev): Bump stylelint-config-twbs-bootstrap from 14.1.0 to 14.2.0
  • #​40603: Build(deps-dev): Bump @​rollup/plugin-commonjs from 25.0.8 to 26.0.1
  • #​40602: Build(deps-dev): Bump postcss from 8.4.38 to 8.4.39
  • #​40600: Build(deps-dev): Bump npm-run-all2 from 6.1.2 to 6.2.0
  • #​40598: Build(deps-dev): Bump nodemon from 3.1.3 to 3.1.4
  • #​40599: Build(deps-dev): Bump hugo-bin from 0.123.3 to 0.125.0
  • #​40597: Build(deps-dev): Bump sass from 1.77.4 to 1.77.6
  • #​40596: Build(deps-dev): Bump lockfile-lint from 4.13.2 to 4.14.0
  • #​40595: Build(deps-dev): Bump @​rollup/plugin-replace from 5.0.5 to 5.0.7
  • #​40565: Build(deps-dev): Bump eslint-plugin-unicorn from 52.0.0 to 54.0.0
  • #​40548: Build(deps-dev): Bump @​babel/core from 7.24.5 to 7.24.7
  • #​40547: Build(deps-dev): Bump @​babel/preset-env from 7.24.5 to 7.24.7
  • #​40594: Build(deps): Bump the npm_and_yarn group with 3 updates
  • #​40545: Build(deps-dev): Bump @​babel/cli from 7.24.5 to 7.24.7
  • #​40546: Build(deps-dev): Bump @​stackblitz/sdk from 1.9.0 to 1.10.0
  • #​39967: Build(deps-dev): Bump eslint-config-xo from 0.44.0 to 0.45.0
  • #​40530: Build(deps-dev): Bump nodemon from 3.1.0 to 3.1.3
  • #​40528: Build(deps-dev): Bump rollup from 4.17.2 to 4.18.0
  • #​40527: Build(deps-dev): Bump @​rollup/plugin-commonjs from 25.0.7 to 25.0.8
  • #​39964: Build(deps-dev): Bump eslint-plugin-markdown from 4.0.1 to 5.0.0
  • #​40519: Build(deps-dev): Bump sass from 1.76.0 to 1.77.4
  • #​40520: Build(deps-dev): Bump stylelint from 16.4.0 to 16.6.1
  • #​40521: Build(deps-dev): Bump hugo-bin from 0.122.5 to 0.123.3
  • #​39950: package.json: ignore eslint for now and regenerate package-lock.json
  • #​39939: Build(deps-dev): Bump terser from 5.30.4 to 5.31.0
  • #​39949: Build(deps-dev): Bump hugo-bin from 0.122.3 to 0.122.5
  • #​39942: Build(deps-dev): Bump sass from 1.75.0 to 1.76.0
  • #​39943: Build(deps-dev): Bump @​babel/preset-env from 7.24.4 to 7.24.5
  • #​39937: Build(deps-dev): Bump @​babel/core from 7.24.4 to 7.24.5
  • #​39940: Build(deps-dev): Bump rollup from 4.16.3 to 4.17.2
  • #​39938: Build(deps-dev): Bump @​babel/cli from 7.24.1 to 7.24.5
  • #​39936: Build(deps-dev): Bump stylelint from 16.3.1 to 16.4.0
  • #​39921: Build(deps-dev): Bump hugo-bin from 0.121.1 to 0.122.3
  • #​39922: Build(deps-dev): Bump eslint-plugin-html from 8.1.0 to 8.1.1
  • #​39919: Build(deps-dev): Bump terser from 5.30.3 to 5.30.4
  • #​39920: Build(deps-dev): Bump rollup from 4.14.3 to 4.16.3
  • #​39904: Build(deps-dev): Bump sass from 1.74.1 to 1.75.0
  • #​39903: Build(deps-dev): Bump rollup from 4.14.1 to 4.14.3
  • #​39902: Build(deps-dev): Bump eslint-plugin-html from 8.0.0 to 8.1.0
  • #​39890: Build(deps-dev): Bump @​babel/preset-env from 7.24.3 to 7.24.4
  • #​39891: Build(deps-dev): Bump @​babel/core from 7.24.3 to 7.24.4
  • #​39887: Build(deps-dev): Bump rollup from 4.13.2 to 4.14.1
  • #​39886: Build(deps-dev): Bump terser from 5.29.2 to 5.30.3
  • #​39884: Build(deps-dev): Bump sass from 1.72.0 to 1.74.1
  • #​39883: Build(deps-dev): Bump eslint-plugin-unicorn from 51.0.1 to 52.0.0
  • #​39859: Build(deps-dev): Bump stylelint-config-twbs-bootstrap from 14.0.0 to 14.1.0
  • #​39858: Build(deps-dev): Bump find-unused-sass-variables from 5.0.0 to 6.0.0
  • #​39857: Build(deps-dev): Bump stylelint from 16.3.0 to 16.3.1
  • #​39855: Build(deps-dev): Bump rollup from 4.13.0 to 4.13.2
  • #​39818: Update devDependencies
  • #​39806: package.json: stop ignoring jasmine
  • #​39802: Build(deps-dev): Bump @​babel/preset-env from 7.24.0 to 7.24.1
  • #​39803: Build(deps-dev): Bump @​babel/cli from 7.23.9 to 7.24.1
  • #​39801: Build(deps-dev): Bump @​babel/core from 7.24.0 to 7.24.1
  • #​39800: Update dependencies
  • #​39792: Build(deps-dev): Bump follow-redirects from 1.15.5 to 1.15.6
  • #​39775: Update devDependencies and regenerate package-lock.json
  • #​39730: Build(deps): Bump streetsidesoftware/cspell-action from 5 to 6
  • #​39736: Build(deps-dev): Bump karma-firefox-launcher from 2.1.2 to 2.1.3
  • #​39734: Build(deps-dev): Bump @​babel/preset-env from 7.23.9 to 7.24.0
  • #​39735: Build(deps-dev): Bump @​babel/core from 7.23.9 to 7.24.0
  • #​39733: Build(deps-dev): Bump karma from 6.4.2 to 6.4.3
  • #​39732: Build(deps-dev): Bump autoprefixer from 10.4.17 to 10.4.18
  • #​39731: Build(deps-dev): Bump hugo-bin from 0.120.4 to 0.120.7
  • #​39714: Build(deps-dev): Bump sass-true from 7.0.1 to 8.0.0
  • #​39711: Build(deps-dev): Bump eslint from 8.56.0 to 8.57.0
  • #​39713: Build(deps-dev): Bump nodemon from 3.0.3 to 3.1.0
  • #​39715: Build(deps-dev): Bump hugo-bin from 0.120.2 to 0.120.4
  • #​39704: Build(deps-dev): Bump hugo-bin from 0.119.0 to 0.120.2
  • #​39703: Build(deps-dev): Bump lockfile-lint from 4.13.1 to 4.13.2
  • #​39699: Build(deps-dev): Bump sass from 1.71.0 to 1.71.1

v5.3.3

Compare Source

Highlights

  • Fixed a breaking change introduced with color modes where it was required to manually import variables-dark.scss when building Bootstrap with Sass. Now, _variables.scss will automatically import _variables-dark.scss. If you were already importing _variables-dark.scss manually, you should keep doing it as it won't break anything and will be the way to go in v6.
  • Fixed a regression in the selector engine that wasn't able to handle multiple IDs anymore.

Color modes

  • Badges now use the .text-bg-* text utilities to be certain that the text is always readable (especially when the customized colors are different in light and dark modes).
  • Fixed our color-modes.js script to handle the case where the OS is set to light mode and the auto color mode is used on the website. If you copied the script from our docs, you should apply this change to your own script.
  • Fixed color schemes description in the color modes documentation to show that color-scheme() only accept light and dark values as parameters.

Miscellaneous

  • Allowed <dl>, <dt> and <dd> in the sanitizer.
  • Dropped evenly items distribution for modal and offcanvas headers.
  • Fixed the accordion CSS selectors to avoid inheritance issues when nesting accordions.
  • Fixed the focus box-shadow for the validation stated form controls.
  • Fixed the focus ring on focused checked buttons.
  • Fixed the product example mobile navbar toggler.
  • Changed the RTL processing of carousel control icons.

🎨 CSS

  • #​37508: Use child combinators to avoid inheriting parent accordion's flush styles
  • #​38719: Fix focus box-shadow for validation stated form-controls
  • #​38884: fix border-radius on radio-switch
  • #​39294: Tests: update navbar in visual modal test
  • #​39373: refactor css: modal and offcanvas header spacing
  • #​39380: Fix Sass compilation breaking change in v5.3
  • #​39387: docs: fix typo
  • #​39411: Optimize the accordion icon
  • #​39497: Fix a typo
  • #​39536: Changed RTL processing of carousel control icons
  • #​39560: Drop --bs-accordion-btn-focus-border-color and deprecate $accordion-button-focus-border-color
  • #​39595: CSS: Fix the focus ring on focused checked

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from 080ab13 to 801125f Compare August 4, 2021 16:38
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from 801125f to c5eaa19 Compare October 18, 2021 23:46
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from c5eaa19 to e18b63c Compare February 7, 2022 01:06
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from e18b63c to 8e38dc4 Compare September 25, 2022 16:22
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from 8e38dc4 to 3788c00 Compare November 20, 2022 16:41
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from 3788c00 to 0d63195 Compare March 16, 2023 15:59
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from 0d63195 to 96b3862 Compare March 31, 2023 16:10
@socket-security
Copy link

socket-security bot commented Mar 31, 2023 •
edited
Loading

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn Critical
ejs@2.7.4 has a Critical CVE.

CVE: GHSA-phwq-j96m-2c2q ejs template injection vulnerability (CRITICAL)

Affected versions: < 3.1.7

Patched version: 3.1.7

From: yarn.lock → npm/ejs@2.7.4

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/ejs@2.7.4. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Critical
elliptic@6.5.4 has a Critical CVE.

CVE: GHSA-vjh7-7g9h-fjfh Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string) (CRITICAL)

Affected versions: < 6.6.1

Patched version: 6.6.1

From: yarn.lock → npm/elliptic@6.5.4

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/elliptic@6.5.4. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Critical
form-data@3.0.1 has a Critical CVE.

CVE: GHSA-fjxv-7rqg-78g4 form-data uses unsafe random function in form-data for choosing boundary (CRITICAL)

Affected versions: < 2.5.4; >= 3.0.0 < 3.0.4; >= 4.0.0 < 4.0.4

Patched version: 3.0.4

From: yarn.lock → npm/form-data@3.0.1

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/form-data@3.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
buffer@4.9.2 has Obfuscated code.

Confidence: 0.96

Location: Package overview

From: yarn.lock → npm/buffer@4.9.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/buffer@4.9.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
es5-ext@0.10.62 is Protestware or potentially unwanted behavior.

Note: This package prints a protestware console message on install regarding Ukraine for users with Russian language locale

From: yarn.lock → npm/d@1.0.1 → npm/es5-ext@0.10.62

ℹ Read more on: This package | This alert | What is protestware?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Consider that consuming this package may come along with functionality unrelated to its primary purpose.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/es5-ext@0.10.62. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
es5-ext@0.10.62 is Protestware or potentially unwanted behavior.

Note: The script attempts to run a local post-install script, which could potentially contain malicious code. The error handling suggests that it is designed to fail silently, which is a common tactic in malicious scripts.

From: yarn.lock → npm/d@1.0.1 → npm/es5-ext@0.10.62

ℹ Read more on: This package | This alert | What is protestware?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Consider that consuming this package may come along with functionality unrelated to its primary purpose.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/es5-ext@0.10.62. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from 96b3862 to 4301e7a Compare May 30, 2023 17:10
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from 4301e7a to a1e4c59 Compare July 26, 2023 09:07
@socket-security
Copy link

socket-security bot commented Jul 26, 2023 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedform-data@​3.0.1992510092100
Addedelliptic@​6.5.41002510078100
Addedejs@​2.7.4932510077100
Addedhas-proto@​1.0.1671007152100
Addedarray-buffer-byte-length@​1.0.0671007351100
Addedgopd@​1.0.1671007552100
Addedglobalthis@​1.0.3671008951100
Addedhas-property-descriptors@​1.0.0671007851100
Addedhas-tostringtag@​1.0.0671008051100
Addedfunctions-have-names@​1.2.3671007751100
Addedes-get-iterator@​1.1.3661009751100
Addedabab@​2.0.6671008351100
Addedarray-flatten@​2.1.2671008251100
Addedavailable-typed-arrays@​1.0.5671007951100
Addedis-negative-zero@​2.0.2671007951100
Addedget-symbol-description@​1.0.0671007951100
Addedes-set-tostringtag@​2.0.1671007852100
Addedis-bigint@​1.0.4671007952100
Addedarray.prototype.reduce@​1.0.5671009052100
Addedboolbase@​1.0.01001005276100
Addedfunction.prototype.name@​1.1.5671007952100
Addedis-number-object@​1.0.7671008352100
Addedis-boolean-object@​1.1.2671008353100
Addedfor-each@​0.3.3671008054100
Added@​types/​parse-json@​4.0.01001005577100
Addedis-arrayish@​0.2.11001005576100
Addedassert@​1.5.06710010055100
Addedget-own-enumerable-property-symbols@​3.0.21001005576100
Addedget-value@​2.0.61001005881100
Addedcssnano-util-get-arguments@​4.0.01001005881100
Addedcssnano-util-get-match@​4.0.01001005981100
Addedcaller-path@​2.0.01001005976100
Addedcssnano-util-same-parent@​4.0.11001005981100
See 248 more rows in the dashboard

View full report

@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from a1e4c59 to 72ca49d Compare September 14, 2023 15:02
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from 72ca49d to c9a0d5e Compare February 20, 2024 17:15
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch 2 times, most recently from e2327c0 to 2b6f44d Compare April 4, 2025 20:22
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from 2b6f44d to d2af724 Compare May 5, 2025 20:31
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from d2af724 to fe0a3fe Compare June 17, 2025 21:39
@renovate renovate bot force-pushed the renovate/bootstrap-5.x branch from fe0a3fe to 29e9bae Compare August 26, 2025 19:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant