[Snyk] Upgrade ionicons from 4.5.5 to 6.0.2 by snyk-bot · Pull Request #6 · meonBot/jenkins.io

snyk-bot · 2022-08-21T00:49:50Z

Snyk has created this PR to upgrade ionicons from 4.5.5 to 6.0.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 66 versions ahead of your current version.
The recommended version was released 3 months ago, on 2022-05-31.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	405/1000 Why? CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-LODASH-608086	405/1000 Why? CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-567746	405/1000 Why? CVSS 8.1	Proof of Concept
Command Injection SNYK-JS-LODASH-1040724	405/1000 Why? CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-ASYNC-2441827	405/1000 Why? CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	405/1000 Why? CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	405/1000 Why? CVSS 8.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	405/1000 Why? CVSS 8.1	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	405/1000 Why? CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-2429795	405/1000 Why? CVSS 8.1	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	405/1000 Why? CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: ionicons

6.0.2 - 2022-05-31
- fix(): improve compatibility with vite (#1066) 28d0338
v6.0.1...v6.0.2
6.0.1 - 2022-01-19
- fix(icon): using icon in ssr environment no longer errors on HTMLElement (#1035) 3ec9271
v6.0.0...v6.0.1
6.0.1-1 - 2022-05-31
6.0.1-1
6.0.1-0 - 2022-01-19
6.0.0 - 2021-11-08
- fix(icon): avoid type collisions with ariaLabel and ariaHidden (#1014) 1038a7f
v5.5.4...v6.0.0

BREAKING CHANGE:

The ariaLabel and ariaHidden properties have been removed in favor of using the aria-label and aria-hidden attributes. For most developers there will be no change in behavior. Please review the migration steps below to see if you need to update your application:
1. Using Ionicons via JavaScript:
// Before
iconEl.ariaHidden = "true";

// After
iconEl.setAttribute('aria-hidden', 'true');
1. Using Ionicons via JSX in React
{/ Before */}
<IonIcon ariaHidden="true" />

{/* After */}
<IonIcon aria-hidden="true" />

This change is more aligned with what React expects: https://reactjs.org/docs/accessibility.html#wai-aria
6.0.0-0 - 2021-10-27
5.5.4 - 2021-11-02
- fix(): build with stencil 2.10 (#1015) f21bb0f
v5.5.3...v5.5.4
5.5.4-10 - 2021-11-02
5.5.4-0 - 2021-10-27
5.5.3 - 2021-08-03
- fix(): reflect name property as attribute (#981) e63653c
v5.5.2...v5.5.3
5.5.2 - 2021-06-17
- fix(build): re-add legacy ionicons.js file (#982) 24caaad
v5.5.1...v5.5.2
5.5.2-0 - 2021-06-17
5.5.1 - 2021-03-22
- fix(): adding aria-hidden no longer disables automatic rtl switching (#954) c76f2a2
v5.5.0...v5.5.1
5.5.0 - 2021-02-09
Distribute ionicons/components custom element.
5.5.0-1 - 2021-02-02
- chore: add "components/" to package json files 0541db0
v5.5.0-0...v5.5.0-1
5.5.0-0 - 2021-02-01
5.4.0 - 2021-01-26
5.3.1-1 - 2021-01-08
5.3.1-0 - 2021-01-07
5.3.0 - 2021-01-04
5.2.3 - 2020-10-07
5.2.2 - 2020-10-07
5.2.1 - 2020-10-06
5.2.0 - 2020-10-06
5.1.2 - 2020-06-25
5.1.1 - 2020-06-25
5.1.0 - 2020-06-23
5.1.0-0 - 2020-05-29
5.0.1 - 2020-03-05
5.0.0 - 2020-02-06
5.0.0-17 - 2020-01-27
5.0.0-16 - 2020-01-16
5.0.0-15 - 2020-01-03
5.0.0-14 - 2020-01-02
5.0.0-13 - 2019-11-21
5.0.0-12 - 2019-11-19
5.0.0-11 - 2019-10-18
5.0.0-10 - 2019-10-17
5.0.0-9 - 2019-10-17
5.0.0-8 - 2019-10-15
5.0.0-7 - 2019-09-26
5.0.0-6 - 2019-09-25
5.0.0-5 - 2019-09-25
5.0.0-4 - 2019-09-25
5.0.0-3 - 2019-09-24
5.0.0-2 - 2019-09-24
5.0.0-1 - 2019-09-23
5.0.0-0 - 2019-09-18
4.6.4-1 - 2019-11-21
4.6.4-0 - 2019-11-21
4.6.3 - 2019-08-21
4.6.2 - 2019-07-23
4.6.2-0 - 2019-07-12
4.6.1 - 2019-06-28
4.6.0 - 2019-06-28
4.5.10-2 - 2019-06-25
4.5.10-1 - 2019-06-19
4.5.10-0 - 2019-06-13
4.5.9-1 - 2019-06-07
4.5.9-0 - 2019-05-29
4.5.8 - 2019-05-10
4.5.8-0 - 2019-05-10
4.5.7 - 2019-05-10
4.5.7-1 - 2019-05-09
4.5.7-0 - 2019-05-09
4.5.6 - 2019-04-10
4.5.5 - 2019-01-22

from ionicons GitHub release notes

Commit messages

Package name: ionicons

e79e5cd 6.0.2
86a051c merge release-6.0.1
28d0338 fix(): improve compatibility with vite (Added Jenkins minute blog jenkins-infra/jenkins.io#1066)
3ec9271 fix(icon): using icon in ssr environment no longer errors on HTMLElement (Introducing Microsoft PowerShell support for Jenkins Pipelines jenkins-infra/jenkins.io#1035)
19dd664 merge release-6.0.0
43d61fe 6.0.0
1038a7f fix(icon): avoid type collisions with ariaLabel and ariaHidden (Create bangalore_jam_july2017.adoc jenkins-infra/jenkins.io#1014)
947091a chore(): add install loader script
728aa74 merge release-5.5.4
32da247 5.5.4
f21bb0f chore(): update ionicons to stencil 2.10 (Create bangalore_jam_august2017.adoc jenkins-infra/jenkins.io#1015)
e6a5af1 merge release-5.5.3
36a0c6b 5.5.3
e63653c fix(): reflect name property as attribute (Jenkins & Conan Blog jenkins-infra/jenkins.io#981)
4ca8139 5.5.2 (Jenkins & Conan Blog jenkins-infra/jenkins.io#983)
24caaad fix(build): add old ionicons.js file ([JENKINS-43104] Clarify that when->branch only works on multibranch jenkins-infra/jenkins.io#982)
8c2a507 5.5.1
c76f2a2 fix(): adding aria-hidden no longer disables automatic rtl switching (Amend pipeline scalability guidance to reflect the more common shared libraries jenkins-infra/jenkins.io#954)
0d7f507 chore: add tag "globe" to earth (Add changelog RSS feeds jenkins-infra/jenkins.io#919)
b3155d9 5.5.0
9139a01 5.5.0-1
0541db0 chore: add "components/" to package json files
200678a 5.5.0-0
66556ea feat(custom-elements): export ionicons/components

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade ionicons from 4.5.5 to 6.0.2. See this package in npm: https://www.npmjs.com/package/ionicons See this project in Snyk: https://app.snyk.io/org/marcelraschke/project/56f1da55-b40a-4f69-8e97-0020450be668?utm_source=github&utm_medium=referral&page=upgrade-pr

github-actions · 2023-06-14T01:47:17Z

Please take a moment and address the merge conflicts of your pull request. Thanks!

github-actions Bot added the unresolved-merge-conflict label Jun 14, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade ionicons from 4.5.5 to 6.0.2#6

[Snyk] Upgrade ionicons from 4.5.5 to 6.0.2#6
snyk-bot wants to merge 1 commit intomasterfrom
snyk-upgrade-a7d9f8a9db0aeae008637b3c3067d88e

snyk-bot commented Aug 21, 2022

BREAKING CHANGE:

Uh oh!

github-actions Bot commented Jun 14, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

snyk-bot commented Aug 21, 2022

Snyk has created this PR to upgrade ionicons from 4.5.5 to 6.0.2.

BREAKING CHANGE:

Uh oh!

github-actions Bot commented Jun 14, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant