Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade bootstrap from 5.3.3 to 5.3.5 #730

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

pgiraud
Copy link
Member

@pgiraud pgiraud commented Apr 7, 2025

snyk-top-banner

Snyk has created this PR to upgrade bootstrap from 5.3.3 to 5.3.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 2 versions ahead of your current version.

  • The recommended version was released 3 days ago.

Release notes
Package name: bootstrap
  • 5.3.5 - 2025-04-04

    Hot fix for a regression from upstream in Autoprefixer.

    What's Changed

    Full Changelog: v5.3.4...v5.3.5

  • 5.3.4 - 2025-04-03

    Changes

    • #40888: Dependabot: switch to grouped updates

    🚀 Features

    • #41299: Typo fixed
    • #41187: Docs: mention removal of util.js in migration guide
    • #41228: Docs: Simplify ids for checks, radios and switches
    • #41150: Update fixtureId to FIXTURE_ID for consistency
    • #40965: Docs: Use <article> element for example cards
    • #40932: Docs: add ngx-bootstrap to JavaScript frameworks list
    • #40790: Docs: Drop .grid where it shouldn't be used
    • #40821: Docs: precise how to add new .order-* classes in 'Layout > Columns'
    • #40914: Docs: drop useless .justify-content-start class in homepage
    • #40876: Remove unneeded flexbug workaround
    • #40870: Docs: Update modal min-height inline style
    • #40844: Docs: Remove mention about Safari's limited support flexbox gap
    • #40620: Docs: minor accessibility improvements for Examples
    • #40619: Docs: Fix a minor accessibility issue (checkout example missing h1)
    • #40577: Docs: Add main element to Cheatsheet Examples
    • #39815: Docs: drop unused .bi-exclamation-triangle-fill class
    • #40507: Docs: HTTPS link to ikons iconset
    • #39777: Docs: fix Reddit URL to avoid redirection
    • #39697: refactor(accordion): merge selectors for border-radius rule

    🎨 CSS

    • #41336: Fix modal and offcanvas header collapse
    • #41126: Fix display issues of close button in contextual light and dark modes
    • #40695: Fix light mode carousel in dark mode
    • #41004: Add workarounds for postcss-values-parser error (negative values in calc())
    • #41013: Align floating labels with form-select sizes
    • #40931: Fix: correct typo in background-blend-mode value
    • #40900: Remove unnecessary duplicated CSS class name
    • #40876: Remove unneeded flexbug workaround
    • #40844: Docs: Remove mention about Safari's limited support flexbox gap
    • #40623: Fix use of declarations after nested rules (deprecated in Sass 1.77.7)
    • #39720: Floating labels: Fix max-width and background-color
    • #40488: button-group: Fix btn-group-vertical by using same rules as btn-group
    • #39804: Optimize Sass SVG files
    • #39494: Change floating label placeholder's color
    • #39697: refactor(accordion): merge selectors for border-radius rule

    ☕️ JavaScript

    • #38411: Add note about cancelling modal events to modal.md
    • #41150: Update fixtureId to FIXTURE_ID for consistency
    • #40803: Fix popover toggle twice to close
    • #38725: Fix this reference for functions
    • #39791: Fix broken comment link for reflow hack

    📖 Docs

    • #39364: Docs: improve progress bar labels markup and explanations for accessibility
    • #41308: Fix typo in Navbar docs
    • #41299: Typo fixed
    • #41281: Fixed minor typo in Sass documentation
    • #41187: Docs: mention removal of util.js in migration guide
    • #41228: Docs: Simplify ids for checks, radios and switches
    • #38411: Add note about cancelling modal events to modal.md
    • #40917: Fix: clipboard icon not showing after multiple press
    • #40714: Docs: add descriptions for Webpack, Parcel and Vite
    • #40928: Update css-grid.md
    • #41098: Update a point in the RTL documentation
    • #40965: Docs: Use <article> element for example cards
    • #40756: Docs: missing aria-hidden on some decorative SVGs
    • #41036: Docs: add warning callout for Yarn Berry
    • #41052: Doc: Fix link endpoint in dropdown documentation
    • #41030: Docs: fix .order values in the migration guide
    • #40973: Docs: correct example formatting in 'Utilities > API' for linting compliance
    • #40911: fix transparent navbar in windows high contrast mode
    • #40932: Docs: add ngx-bootstrap to JavaScript frameworks list
    • #40951: Docs: fix example hiding element except on medium and large devices in 'Utilities > Display > Hiding elements'
    • #40931: Fix: correct typo in background-blend-mode value
    • #40790: Docs: Drop .grid where it shouldn't be used
    • #40821: Docs: precise how to add new .order-* classes in 'Layout > Columns'
    • #40799: Fix Cheatsheet examples horizontal scrolling
    • #40914: Docs: drop useless .justify-content-start class in homepage
    • #40900: Remove unnecessary duplicated CSS class name
    • #40766: Docs: Make "Edit in Stackblitz" links explicit
    • #40767: Docs: Indicate links in foreign language
    • #40818: Docs: fix $enable-css-grid$enable-cssgrid in 'Customize > Options'
    • #40870: Docs: Update modal min-height inline style
    • #40844: Docs: Remove mention about Safari's limited support flexbox gap
    • #40797: Docs: missing $enable-css-grid in options.md
    • #40762: Docs: clarify the subject of the About page
    • #40703: Docs: Update WCAG links and references
    • #40689: Docs: change wording of single/split danger buttons
    • #40691: Docs: add aria-hidden="true" to decorative SVGs
    • #40686: docs: add aria-hidden='true' to decorative SVGs
    • #40672: Update masthead wording
    • #40639: Further image compression improvements
    • #40620: Docs: minor accessibility improvements for Examples
    • #40619: Docs: Fix a minor accessibility issue (checkout example missing h1)
    • #39846: Fix Default values and Description content in options table
    • #39815: Docs: drop unused .bi-exclamation-triangle-fill class
    • #40522: docs: fix typo in the getting started introduction
    • #40507: Docs: HTTPS link to ikons iconset
    • #40504: docs: add missing data-bs-theme="light" in navbars color schemes markup
    • #39980: Docs: add missing Accordion component in the list of JS components
    • #39951: docs: migrate to the built-in sitemap template
    • #39863: Add PostCSS-RTLCSS approach to the documentation
    • #39829: docs: move examples inline shortcode to a partial
    • #39824: docs: resize docs bundler images and fix dimensions
    • #39779: docs: add a new partial for responsive images and use imageConfig
    • #39768: docs: add a render image hook
    • #39819: docs: update sitemap template
    • #39778: docs: use urls.JoinPath in more places
    • #39807: Move theme toggler to a partial
    • #39805: masthead.html: add rel="noopener" target="_blank"
    • #39808: docs: move examples icons to a partial
    • #39773: Further improve PNG compression
    • #38993: docs: bundle assets with Hugo
    • #39782: docs: mention text transform classes
    • #39749: Update masthead to HeroDevs EOL
    • #39781: docs: move fathom site to hugo config
    • #39777: Docs: fix Reddit URL to avoid redirection
    • #39772: examples: assorted tweaks
    • #39766: Docs: drop data-bs-scroll="true" from navbar
    • #39763: Switch to using hugo.IsProduction
    • #39739: Search: Fix modal on mobile chromium based browsers
    • #39757: footer: remove unneeded trailing slash
    • #39724: Docs: minor tweaks
    • #39745: docs: use a responsive image for bootstrap-logo-shadow.png
    • #39741: More docs fixes
    • #39740: Doc fixes
    • #39738: Fix docs-versions.html
    • #39725: docs: remove Google Analytics

    🛠 Examples

    • #40799: Fix Cheatsheet examples horizontal scrolling
    • #40620: Docs: minor accessibility improvements for Examples
    • #40619: Docs: Fix a minor accessibility issue (checkout example missing h1)
    • #40577: Docs: Add main element to Cheatsheet Examples

    🌎 Accessibility

    • #40965: Docs: Use <article> element for example cards
    • #40756: Docs: missing aria-hidden on some decorative SVGs
    • #40911: fix transparent navbar in windows high contrast mode
    • #40766: Docs: Make "Edit in Stackblitz" links explicit
    • #40767: Docs: Indicate links in foreign language
    • #40808: Docs: add aria-label to SVG with tooltip
    • #40762: Docs: clarify the subject of the About page
    • #40703: Docs: Update WCAG links and references
    • #40691: Docs: add aria-hidden="true" to decorative SVGs
    • #40686: docs: add aria-hidden='true' to decorative SVGs
    • #40620: Docs: minor accessibility improvements for Examples
    • #40619: Docs: Fix a minor accessibility issue (checkout example missing h1)
    • #40577: Docs: Add main element to Cheatsheet Examples

    📦 Dependencies

    • #41305: Build(deps-dev): Bump the development-dependencies group across 1 directory with 9 updates
    • #41265: Build(deps-dev): Bump the development-dependencies group across 1 directory with 5 updates
    • #41234: Build(deps-dev): Bump the development-dependencies group across 1 directory with 7 updates
    • #41171: Build(deps-dev): Bump the development-dependencies group across 1 directory with 3 updates
    • #41155: Build(deps-dev): Bump the development-dependencies group across 1 directory with 4 updates
    • #41109: Build(deps-dev): Bump the development-dependencies group across 1 directory with 8 updates
    • #41082: Build(deps-dev): Bump the development-dependencies group across 1 directory with 7 updates
    • #41010: Build(deps-dev): Bump the development-dependencies group across 1 directory with 5 updates
    • #40978: Build(deps-dev): Bump the development-dependencies group across 1 directory with 6 updates
    • #40953: Build(deps-dev): Bump the development-dependencies group across 1 directory with 6 updates
    • #40929: Build(deps): Bump the npm_and_yarn group with 2 updates
    • #40920: Build(deps-dev): Bump the development-dependencies group across 1 directory with 6 updates
    • #40895: Build(deps-dev): Bump the development-dependencies group across 1 directory with 9 updates
    • #40883: Build(deps-dev): Bump terser from 5.31.6 to 5.34.1
    • #40842: Build(deps-dev): Bump npm-run-all2 from 6.2.2 to 6.2.3
    • #40882: Build(deps-dev): Bump hugo-bin from 0.130.1 to 0.132.0

Snyk has created this PR to upgrade bootstrap from 5.3.3 to 5.3.5.

See this package in npm:
bootstrap

See this project in Snyk:
https://app.snyk.io/org/pgiraud/project/3013a15e-18e3-4365-8e31-883b66e4d64f?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants