Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 17, 2024

Bumps @mantine/form from 7.3.2 to 7.13.3.

Release notes

Sourced from @​mantine/form's releases.

7.13.3

What's Changed

  • [@mantine/core] Fix cqw, cqh, cqi, cqb, cqmax and cqmin size units not being handled correctly in style props
  • [@mantine/dates] DateTimePicker: Remove defaultValue and value props from timeInputProps types to avoid confusion (#6959)
  • [@mantine/dropzone] Set data-disabled attribute on the root element if disabled prop is set (#6946)
  • [@mantine/core] Modal: Fix default Modal.Root transition being different from Modal component (#6967)
  • [@mantine/core] ColorInput: Fix popoverProps={{ opned: true }} not working (#6968)
  • [@mantine/charts] Fix valueFormatter prop not working correctly with orientation="vertical" in BarChart, AreaChart and LineChart components (#6979)
  • [@mantine/core] Popover: Fix onOpen not being called with controlled opened state (#6981)
  • [@mantine/core] NumberInput: Fix incorrect min prop handling for large numbers (#6985)
  • [@mantine/dropzone] Add HEIF image mime type (#6977)
  • [@mantine/core] PasswordInput: Fix cursor shifting when the visibility button is clicked on touch devices (#6971)

New Contributors

Full Changelog: mantinedev/mantine@7.13.2...7.13.3

7.13.2

What's Changed

  • [@mantine/dates] DateInput: Fix onClick handler passed to getDayProps not being called
  • [@mantine/core] Badge: Fix incorrect cursor styles
  • [@mantine/core] FileInput: Add resetRef prop support
  • [@mantine/core] Popover: Fix onClose function being called twice with controlled state
  • [@mantine/spotlight] Fix selected index not being reset when the spotlight is closed (#6842)
  • [@mantine/core] Popover: Improve performance of scrolling when large number of closed Popovers are rendered on the same page (#6771)
  • [@mantine/core] Pagination: Fix getItemProps not being able to override control children prop (#6789)
  • [@mantine/core] ScrollArea: Fix onBottomReached not being called if the viewport has decimal px height value (#6792)
  • [@mantine/hooks] use-in-viewport: Fix hook not reacting to node changes (#6926)
  • [@mantine/core] NumberInput: Fix incorrect handling of decimal numbers with more than 15 decimal places (#6823)
  • [@mantine/core] Slider: Fix marks not being aligned correctly (#6909)
  • [@mantine/hooks] use-fullscreen: Fix target node changes being ignored (#6923)
  • [@mantine/core] Badge: Fix incorrect sections alignment for variant="dot"
  • [@mantine/core] TagsInput: Fix incorrect logic of removing duplicate tags (#6922)
  • [@mantine/core] AppShell: Fix error when Suspense is rendered inside AppShell (#6927)
  • [@mantine/core] Menu: Fix onKeyDown prop not working in Menu.Dropdown component (#6910)

New Contributors

Full Changelog: mantinedev/mantine@7.13.1...7.13.2

7.13.1

What's Changed

  • [@mantine/chart] PieChart: Remove unused CSS (#6903)
  • [@mantine/core] Menu: Fix onKeyDown not working when passed to Menu.Item (#6906)

... (truncated)

Commits
  • b6767c8 [release] Version: 7.13.3
  • e0721af [release] Version: 7.13.2
  • 0f0b871 [release] Version: 7.13.1
  • 67fb325 [@​mantine/form] Fix indices over 9 not working in form paths in some cases (#...
  • 8b18596 [release] Version: 7.13.0
  • e5f3a53 [core] Migrate to eslint 9
  • 133b7bf [release] Version: 7.12.2
  • e10e3bf [@​mantine/form] Fix error thrown for nullable values dirty status check (#6672)
  • b07422e [release] Version: 7.12.1
  • 8e252e6 [@​mantine/form] Fix form.watch callbacks not being fired when `form.initial...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@mantine/form](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form) from 7.3.2 to 7.13.3.
- [Release notes](https://github.com/mantinedev/mantine/releases)
- [Changelog](https://github.com/mantinedev/mantine/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mantinedev/mantine/commits/7.13.3/packages/@mantine/form)

---
updated-dependencies:
- dependency-name: "@mantine/form"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 17, 2024
@dryrunsecurity
Copy link

DryRun Security Summary

The provided code change updates the version of the @mantine/form package in the package.json file, which is a common occurrence in software development projects and may include bug fixes, security patches, and new features, but does not appear to raise any immediate security concerns.

Expand for full summary

Summary:

The provided code change updates the version of the @mantine/form package from ^7.3.2 to ^7.13.3 in the package.json file. From an application security perspective, this change is not inherently concerning, as the Mantine library is a popular React UI library that provides various components and utilities, including the @mantine/form package for form handling.

Version updates for dependencies are a common occurrence in software development projects, and they can include bug fixes, security patches, and new features. In this case, the version update suggests that the newer version may include improvements related to form handling. As an application security engineer, it's important to review the release notes or change logs of updated dependencies to understand the changes and assess any potential security implications. However, based on the information provided, this specific update does not appear to raise any immediate security concerns.

Files Changed:

  • package.json: The package.json file has been updated to use version ^7.13.3 of the @mantine/form package, which is an update from the previous version ^7.3.2.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer Findings
Sensitive Files Analyzer 1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Oct 23, 2024

Superseded by #114.

@dependabot dependabot bot closed this Oct 23, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/mantine/form-7.13.3 branch October 23, 2024 20:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants