Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade: axios, mapbox-gl, react-bootstrap #1

Merged
merged 1 commit into from
Sep 20, 2024
Merged

[Snyk] Upgrade: axios, mapbox-gl, react-bootstrap #1

merged 1 commit into from
Sep 20, 2024

Conversation

jcampb98
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

axios
from 1.7.2 to 1.7.5 | 3 versions ahead of your current version | a month ago
on 2024-08-23
mapbox-gl
from 3.3.0 to 3.6.0 | 8 versions ahead of your current version | a month ago
on 2024-08-14
react-bootstrap
from 2.10.2 to 2.10.4 | 2 versions ahead of your current version | 3 months ago
on 2024-06-30

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Server-side Request Forgery (SSRF)
SNYK-JS-AXIOS-7361793		 761 Proof of Concept
Release notes
Package name: axios from axios GitHub release notes
Package name: mapbox-gl
  • 3.6.0 - 2024-08-14

    Features and improvements ✨

    • Add wall rendering mode to the fill-extrusion layer by introducing fill-extrusion-line-width and fill-extrusion-line-alignment properties. Set fill-extrusion-line-width to a non-zero value to render walls instead of a solid extrusion.
    • Improve initial load performance.
    • Add inner glow effect for negative circle-blur values.
    • Add raster-particle-elevation property.
    • Add support for inlining TileJSON in style source definitions using data field.
    • Improve 3D models' shadow appearance.
    • Improve performance of updating config values of a style.
    • Add more descriptive expression evaluation error messages.
    • Improve TypeScript typings.
    • Improve performance of symbol occlusion (visibility checks against terrain and 3D objects).
    • Add clip-layer-scope property to limit clip layer to a specific style fragment.
    • Add Map idle method to check whether a map is idle.

    Bug fixes 🐞

    • Fix isSourceLoaded flag on sourcedata event for already loaded sources.
    • Fix firing load event when all tiles fail to load.
    • Fix performance issues when GeoJSON in dynamic mode is updated too frequently.
    • Fix GeoJSON line rendering in dynamic mode.
    • Fix rasterarray layer flickering from stale tiles cache.
    • Fix spikes when viewing terrain-enabled maps in certain environments.
    • Fix Map getLayer not working properly with custom layers.
    • Fix custom layer rendering issues on globe with high pitch.
    • Fix an issue with line-trim-offset on very long lines.
    • Fix rendering issues when ground effects overlap with line layers.
    • Fix landmark visibility issues near tile borders.
    • Fix accessibility issues with compact attribution button and logo.
  • 3.6.0-beta.1 - 2024-07-31

    Features and improvements ✨

    • Improve initial load performance.
    • Add inner glow effect for negative circle-blur values.
    • Add support for inlining TileJSON in style source definitions using data field.
    • Improve 3D models' shadow appearance.
    • Improve performance of updating config values of a style.
    • Add more descriptive expression evaluation error messages.
    • Improve TypeScript typings.

    Bug fixes 🐞

    • Fix isSourceLoaded flag on sourcedata event for already loaded sources.
    • Fix firing load event when all tiles fail to load.
    • Fix performance issues when GeoJSON in dynamic mode is updated too frequently.
    • Fix rasterarray layer flickering from stale tiles cache.
    • Fix spikes when viewing terrain-enabled maps in certain environments.
  • 3.5.2 - 2024-07-18

    Features and improvements ✨

    • Improve 3D models rendering performance.
    • Slightly improve terrain rendering performance.
    • Improve TypeScript API, including strongly typed Map event listeners, improved type narrowing, and more.

    Bug fixes 🐞

    • Fix raster particle data decoding and improve rendering quality.
    • Fix 3D lighting rendering when lookup tables (LUT) image is applied.
    • Fix shadows rendering artifacts on fill-extrusion-cutoff-fade-range.
  • 3.5.1 - 2024-07-05

    Revert default behavior of symbol occlusion behind terrain to maintain compatibility. Set icon-occlusion-opacity/text-occlusion-opacity properties to opt-in to new occlusion behavior.

  • 3.5.0 - 2024-07-04

    Breaking changes ⚠️

    • This release marks a significant transition for GL JS, moving from Flow to TypeScript. While we have maintained backward compatibility where possible, the community typings @ types/mapbox-gl are not fully compatible with the new first-class typings. Users relying on the community typings may experience breaking changes. Please remove the @ types/mapbox-gl dependency and refer to the v3.5.0 migration guide for instructions on upgrading, resolving common issues, and asking questions regarding the migration to the first-class typings. We welcome your feedback and contributions to make Mapbox GL JS better.

    Features and improvements ✨

    • Add color-theme property and Map setColorTheme method to enable colorization with a lookup table (LUT) images.
    • Significantly improve performance of updateData for GeoJSON sources in dynamic mode.
    • Add icon-occlusion-opacity and text-occlusion-opacity properties to fade symbols behind models and landmarks.
    • Add line-occlusion-opacity property to fade lines behind 3D objects.
    • Add experimental clip layer to filter out rendering data.
    • Add experimental line-z-offset property for a non-globe view.
    • Add model-cutoff-fade-range property to control fade out of faraway 3D buildings.
    • Improve precision of line-pattern on long lines and higher zooms.
    • Add experimental line-trim-color and line-trim-fade-range properties to customize rendering of lines trimmed with line-trim-offset.
    • Add Map getSlots method for listing available slots of a style.

    Bug fixes 🐞

    • Fix a performance regression in Standard style introduced in v3.4.0.
    • Fix icon rotation during globe transition.
    • Fix GeoJSON data loss due to frequent updateData calls.
    • Improve raster-particle layer animation.
    • Fix model-front-cutoff property for Meshopt-encoded models.
    • Fix errors in the console on empty 3D tiles.
    • Fix not properly detecting fingerprinting protection when adding terrain through setTerrain.
    • Fix style.load event missing style property.
    • Fix errors when using queryRenderedFeatures on areas with missing DEM tiles when terrain is enabled.
  • 3.5.0-beta.1 - 2024-06-19
  • 3.4.0 - 2024-05-24
  • 3.4.0-beta.1 - 2024-05-10
  • 3.3.0 - 2024-04-10
from mapbox-gl GitHub release notes
Package name: react-bootstrap from react-bootstrap GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade multiple dependencies with Snyk
bc778ec 
Snyk has created this PR to upgrade:
  - axios from 1.7.2 to 1.7.5.
    See this package in npm: https://www.npmjs.com/package/axios
  - mapbox-gl from 3.3.0 to 3.6.0.
    See this package in npm: https://www.npmjs.com/package/mapbox-gl
  - react-bootstrap from 2.10.2 to 2.10.4.
    See this package in npm: https://www.npmjs.com/package/react-bootstrap

See this project in Snyk:
https://app.snyk.io/org/jcampb98/project/080f3f81-f121-4ed5-8299-e8366d8cd6f1?utm_source=github&utm_medium=referral&page=upgrade-pr
@vercel Vercel
Copy link

vercel bot commented Sep 20, 2024 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
ip-address-tracker ✅ Ready (Inspect) Visit Preview 💬 Add feedback Sep 20, 2024 3:55pm

@jcampb98 jcampb98 merged commit 72ebf20 into main Sep 20, 2024
4 checks passed
@jcampb98 jcampb98 deleted the snyk-upgrade-1ee2fa6d3b19885263df0896d68a356b branch September 20, 2024 18:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@jcampb98 @snyk-bot