[Snyk] Upgrade swagger-ui from 3.25.3 to 3.27.0

[snyk-bot]

Snyk has created this PR to upgrade swagger-ui from 3.25.3 to 3.27.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2020-06-18.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Insecure Defaults SNYK-JS-SWAGGERUI-572012	No Known Exploit
	Denial of Service (DoS) SNYK-JS-AUTOLINKER-73494	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-AUTOLINKER-564438	Proof of Concept

Release notes

Package name: swagger-ui

• 3.27.0 - 2020-06-18
  

  3.27.0 (2020-06-18)

  Features

  • model view: hide applicable readOnly and writeOnly properties (#5832) (f8dd4e6)
  • model view Added onLoad()s and tweaker onToggle() to support ScrollTo functionality for Models (#5237)
  • Copy response to clipboard #4300 (#5278) (973e1f7)
  • Display example value in Swagger ReadOnly documentation mode (#4422) (ca1b19a)
  • swagger-ui-react: add displayOperationId config support (#5795) (bd1b297)

  Bug Fixes

  • remove clipboard inline svg from a file with SASS (#6148) (eeb0b73)
  • curlify agnostic to order of header values (#6152) (b86e8e9), closes #6082
  • Docker: case where SWAGGER_ROOT in conjunction with BASE_URL does not work (#6147)
  • Call DomPurify.addHook only if it exists (#5428)

  Docs

  • Docs: Demonstrate a simple Webpack setup (#5185)
• 3.26.2 - 2020-06-12
  

  3.26.2 (2020-06-12)

  Bug Fixes

  • update corrupted swagger-client from v3.10.6 to v3.10.7
• 3.26.1 - 2020-06-11
  

  3.26.1 (2020-06-11)

  ⚠️ This release includes a security update with Markdown render.

  Features

  • New OAUTH_SCOPES configuration property to select all/none/user_list to OAuth scopes popup (#6037) (275c8f2)
  • Docker New SWAGGER_JSON_URL option to allow remote urls from Docker (#6122)
  • Docker VALIDATOR_URL now has options to disable the validation badge (#5994)
  • Various style improvements (#6014) (#5578) (#5478)

  Bug Fixes

  • Markdown: render markdown in more secure way (a616cb4)
  • Docker allow local ref's to be served by nginx (#5565) (f353974)
  • Docker support variables in auth urls (#5913) (21f5149)
• 3.26.0 - 2020-06-05
  

  3.26.0 (2020-06-05)

  Features

  • Allow to skip submitting empty values in form data (#5830) (b9b32c9)
  • Add empty data param to cURL if no POST request body was given (#6017)

  Bug Fixes

  • set default supportedSubmitMethods (#6030) (3b6942c)
  • OAS3 upload file when array items are type=string format=binary (#6040)
  • support generated curl for PUT and PATCH requests (#5960)
  • flaky test: bugs/4641 use wait on route alias (#6048) (5bbd3e7)

  Housekeeping

  • SwaggerClient version 3.10.6
  • dependency updates
• 3.25.5 - 2020-05-28
  

  3.25.5 (2020-05-28)

  Bug Fixes

  • entries can now be generally used again as a key name. special handling of non-FormData entries removed (#6036) (68185dd), closes #6033
• 3.25.4 - 2020-05-21
  

  3.25.4 (2020-05-21)

  Bug Fixes

  • bump swagger-client to version 3.10.4 and return back compatibility with node.js >= 4
  • allow entries as property name (#6025) (3a65070)
• 3.25.3 - 2020-05-14
  

  3.25.3 (2020-05-14)

  Changelog

  • housekeeping: update release-it config
  • housekeeping: bump swagger-client version with package-lock (#6008)
  • housekeeping: update dev-e2e-cypress-open script name (#6005)

  Bug Fixes

  • curl array support within multipart/form-data (#3838) (#5999) (96c7b4c)
  • jsonSchemaComponent file/files (#5997) (#6000) (65597d1)

from swagger-ui GitHub release notes

Commit messages

Package name: swagger-ui

• 091a9de release: v3.27.0
• 9ce2a9a housekeeping: update swagger-client v3.10.8 (Replace openssh with openssh-server go-gitea/gitea#6162)
• b86e8e9 fix: curlify agnostic to order of header values (Do not limit FIDO/U2F usage based on user agent string go-gitea/gitea#6152)
• 269543f Fix: typo in a feature request template (Deactivated administrators are not deactivated? go-gitea/gitea#6151)
• deb673c housekeeping(dev-deps): [email protected]
• 63f94db chore(git): add chromedriver.log to ignores
• bec0533 Fix(Docker): case where SWAGGER_ROOT in conjunction with BASE_URL does not work (Consider dropping IE 11 support go-gitea/gitea#6147)
• eeb0b73 fix: remove clipboard inline svg from a file with SASS (Wrong pull request count in a single repo go-gitea/gitea#6148)
• 71d4e59 improvement: Call `DomPurify.addHook` only if it exists (Remove the required class from optional ssh port in installation page go-gitea/gitea#5428)
• ca1b19a feat: Display example value in Swagger ReadOnly documentation (Security / Display Issue with Commits - who commited? go-gitea/gitea#4422)
• 973e1f7 feat: Copy response to clipboard Scopes for application tokens go-gitea/gitea#4300 (Support envs on external render commands go-gitea/gitea#5278)
• f8dd4e6 feat(model view): hide applicable readOnly and writeOnly properties (Backport #5830 : Include Go toolchain to --version go-gitea/gitea#5832)
• 59bbe4f Added onLoad()s and tweaker onToggle() to support ScrollTo functionality for Models (Reply button disappear on click in PR when language is spanish go-gitea/gitea#5237)
• b3fc05b fix: prevent CI trigger from docs/samples/webpack-getting-started (Batch deletion of accounts in account management go-gitea/gitea#6145)
• 75a2b9a Demonstrate a simple Webpack setup (After migration russian letters are incorrectly encoded go-gitea/gitea#5185)
• f3b253a housekeeping(dev-deps): [email protected]
• bd1b297 feat(swagger-ui-react): add `displayOperationId` config support ("Update the '.ssh/authorized_keys' file" claims to be successful, to no effect go-gitea/gitea#5795)
• ae33dee release: v3.26.2
• 9a0927b release: v3.26.1
• a616cb4 fix(Markdown): render markdown in more secure way
• 48a0b46 improvement: Make background SVGs consistent (LFS pull fails on public SSH-cloned repo go-gitea/gitea#5478)
• fc3ed30 improvement: Move inline styles to SCSS instead (Feature request to include the issues during repo migration/mirroring go-gitea/gitea#5578)
• 67627d7 Remove max-width for textarea media < 768px (Split setting.go as multiple files go-gitea/gitea#6014)
• 117dcc9 Disable the validation badge for those who do not want it (Update U2F Section of app.ini.sample go-gitea/gitea#5994)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs