Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade alpinejs from 3.12.3 to 3.13.3 #14013

Closed
wants to merge 1 commit into from
Closed

[Snyk] Upgrade alpinejs from 3.12.3 to 3.13.3 #14013

wants to merge 1 commit into from

Conversation

snipe
Copy link
Owner

@snipe snipe commented Dec 11, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade alpinejs from 3.12.3 to 3.13.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 4 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2023-11-19.
Release notes
Package name: alpinejs from alpinejs GitHub release notes
Commit messages
Package name: alpinejs

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@probot-autolabeler probot-autolabeler bot added dependencies Pull requests that update a dependency file javascript labels Dec 11, 2023
@what-the-diff What The Diff
Copy link

what-the-diff bot commented Dec 11, 2023

PR Summary

  • Upgrade of the Alpine.js library
    The software library Alpine.js that our code relies on has been updated from version 3.13.2 to 3.13.3 in our package.json file. This means we now have the latest fixes and features from the Alpine.js team to utilize in our project, making our code more efficient and secure.

snipe added a commit that referenced this pull request Dec 13, 2023
@snipe
[Snyk] Upgrade alpinejs from 3.12.3 to 3.13.3 #14013
b1d4d89 
Signed-off-by: snipe <[email protected]>
@snipe snipe closed this Dec 13, 2023
snipe added a commit that referenced this pull request Dec 13, 2023
@snipe
Merge pull request #14028 from snipe/security/snyk_14013
b92906b 
[Snyk] Upgrade alpinejs from 3.12.3 to 3.13.3 #14013
@snipe snipe deleted the snyk-upgrade-a13e55d91c634ca95177d89484c60ddd branch January 3, 2024 23:24
DarthKillian added a commit to DarthKillian/eti-assets that referenced this pull request Feb 8, 2024
@DarthKillian @snipe
@spencerrlongg @joelpittet @Godmartinz @uberbrady @akemidx @dependabot @marcusmoore @mauro-miatello
Merge snipeit 2024 01 16 (#30)
3a0a19f 
* Created mutator for requestable attribute

Signed-off-by: snipe <[email protected]>

* asset assigned to asset works now

* Update for CVE-2023-49316 by upgrading phpseclib/phpseclib (3.0.14 => 3.0.34)

* a couple quick things

* fixes for black dark theme

* fixed eol, add calculated eol/eol explicit tests

* note

* get rid of firsts and find by responses id

* Add LDAP as 'recommended' requirement; flesh out LDAP tests

* Add more LDAP tests - including pagination(!)

* added some more check out assertions

* return types

* cleanup rules formatting

* Updated dev assets

Signed-off-by: snipe <[email protected]>

* changes the table header Serial to Product Key

* organization

* removed references to archived

* get rid of physical

* gets rid of depreciate

* cleaned up

* more cleanup

* Added eula-pdfs to allow-list

Signed-off-by: snipe <[email protected]>

* cleanup test

* missed one view

* adds info needed for license self activation

* Added help text to RTD location field

Signed-off-by: snipe <[email protected]>

* Updated to alpine 3.18.5

Signed-off-by: snipe <[email protected]>

* fixed the bootstrap column sizes

* remove column sizes

* added status names to asset history

* adds status label id to line change

* Whoops, didn't even add changes - duh

* Fixed maintenances patch endpoint

Signed-off-by: snipe <[email protected]>

* changing log level from ERROR to LOG

* changing log level from ERROR to LOG

* Fixed typo

Signed-off-by: snipe <[email protected]>

* added a missing table header for checkout

* Updated import icons

Signed-off-by: snipe <[email protected]>

* Set default sorting on backups to latest first

Signed-off-by: snipe <[email protected]>

* Smaller icon size for activity reports, other action icons

Signed-off-by: snipe <[email protected]>

* Added model name and number to quickscan

Signed-off-by: snipe <[email protected]>

* Added $user->created_at to API user create method

Signed-off-by: snipe <[email protected]>

* Removed escaping on notes on checkout

Signed-off-by: snipe <[email protected]>

* Removed extraneous test

Signed-off-by: snipe <[email protected]>

* Removed huntr.dev badge

They refocused their company to only AI now :(

Signed-off-by: snipe <[email protected]>

* Added GH test action status badge

Signed-off-by: snipe <[email protected]>

* Fixed HTML for checkboxes

Signed-off-by: snipe <[email protected]>

* Fixed radio button display

Signed-off-by: snipe <[email protected]>

* Fixed checkbox seeder

Signed-off-by: snipe <[email protected]>

* Missed closing label on radio buttons

Signed-off-by: snipe <[email protected]>

* Added radio to seeder for custom fields

Signed-off-by: snipe <[email protected]>

* [Snyk] Upgrade alpinejs from 3.12.3 to 3.13.3 snipe#14013

Signed-off-by: snipe <[email protected]>

* Add new asset tests for archive, depreciate, and physical fields

* Added logo to readme

Signed-off-by: snipe <[email protected]>

* Fixed undefinted $search_base

Signed-off-by: snipe <[email protected]>

* Added DB migration for remote_ip, action_source, user_agent in logs

Signed-off-by: snipe <[email protected]>

* Added searchable fields, improved formatting

Signed-off-by: snipe <[email protected]>

* Added user agent to log method

Signed-off-by: snipe <[email protected]>

* Added action source to translations

Signed-off-by: snipe <[email protected]>

* Allowed sorting on user_agent, etc

Signed-off-by: snipe <[email protected]>

* Added fields to history views

Signed-off-by: snipe <[email protected]>

* Added fields to activity report

Signed-off-by: snipe <[email protected]>

* Removed BS th classes

Signed-off-by: snipe <[email protected]>

* Make action date sortable on asset history view

Signed-off-by: snipe <[email protected]>

* Added comments

Signed-off-by: snipe <[email protected]>

* Fixes CVE-2023-50251 and CVE-2023-50262 DoS on parsing SVG

* Fixes CVE-2023-43655 Composer Remote Code Execution vulnerability via web-accessible composer.phar

* Force update with PHP 7.4.3 platform requirement and update lock

* Added new fields to action report

Signed-off-by: snipe <[email protected]>

* Added indexes for reports

Signed-off-by: snipe <[email protected]>

* Updated assets

Signed-off-by: snipe <[email protected]>

* Updated prod assets

Signed-off-by: snipe <[email protected]>

* Fixed snipe#14037 - record current time on accessory checkin

Signed-off-by: snipe <[email protected]>

* Bump github/codeql-action from 2 to 3

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* Add log message for who is being sent expected checkin notifications

* Fixed translation string in JSON

Signed-off-by: snipe <[email protected]>

* Get an object instead of a collection

Signed-off-by: snipe <[email protected]>

* Changed to use instanceof

Signed-off-by: snipe <[email protected]>

* Implement 1D barcode for label "Tapes\Dymo\LabelWriter_30252" snipe#13987

Signed-off-by: snipe <[email protected]>

* Add @coach1988 as a contributor

* Use correct language codes, updated strings

Signed-off-by: snipe <[email protected]>

* Update example envs to use correct code for language

Signed-off-by: snipe <[email protected]>

* Fixed donked dir tree

Signed-off-by: snipe <[email protected]>

* Migration to update what we can for locales

Signed-off-by: snipe <[email protected]>

* Added helper method to map values

Signed-off-by: snipe <[email protected]>

* Updated locale middleware for mapping

Signed-off-by: snipe <[email protected]>

* Added backl vendors directory

Signed-off-by: snipe <[email protected]>

* WTF

Signed-off-by: snipe <[email protected]>

* Updated form marco with new locale codes

Signed-off-by: snipe <[email protected]>

* Fixed migration namespace :(

Signed-off-by: snipe <[email protected]>

* Drop the down()

Signed-off-by: snipe <[email protected]>

* Check for a value for settings (this mostly matters in tests)

Signed-off-by: snipe <[email protected]>

* Added back-migration for Big Locale Refactoring

* Changed some spacing and added a comment as per Snipe

* Defaulted to en-US on quickstart

Signed-off-by: snipe <[email protected]>

* Added default to helper per @marcusmoore

Signed-off-by: snipe <[email protected]>

* Include trashed per @marcusmoore

Signed-off-by: snipe <[email protected]>

* Moved static var up above

Signed-off-by: snipe <[email protected]>

* Added warning in middleware

Signed-off-by: snipe <[email protected]>

* Moved return

Signed-off-by: snipe <[email protected]>

* Update fallback locale to new locale code

Signed-off-by: snipe <[email protected]>

* Remove env var option for config on fallback

Signed-off-by: snipe <[email protected]>

* Update ResetSettings command to en-US vs en

Signed-off-by: snipe <[email protected]>

* Fixed language code

Signed-off-by: snipe <[email protected]>

* Updated seeder with en to en-US

Signed-off-by: snipe <[email protected]>

* Update en defaults for controllers

Signed-off-by: snipe <[email protected]>

* Fixed a few more small localization issues

Signed-off-by: snipe <[email protected]>

* add marcus' migration changes to branch

* fix auto-increment settings for test settings

* rm code, was probably fixed through rules at some point

* Fixes CVE-2023-51651 aws/aws-sdk-php

* Fixes CVE-2023-51651 aws/aws-sdk-php with depdendencies

* Run sqlite tests in GitHub action

* Update action name

* Sync readme to dockerhub

* Fix language source directory

* Updated language strings

Signed-off-by: snipe <[email protected]>

* Upgrade @fortawesome/fontawesome-free from 6.4.0 to 6.5.0

Signed-off-by: snipe <[email protected]>

* Updated assets

Signed-off-by: snipe <[email protected]>

* Upgrade jspdf-autotable from 3.5.31 to 3.8.0

Signed-off-by: snipe <[email protected]>

* Updated hash

Signed-off-by: snipe <[email protected]>

* Updated assets for master

Signed-off-by: snipe <[email protected]>

* use query builder instead of model for update to skip observer

* departmentNameLinkFormatter had a bad url

* remove unintentional change

* ugh

* Add guard against adding null values to query

Since $request->filled(null) returns true

* Moved limit and offset to after additional qualifiers

Signed-off-by: snipe <[email protected]>

* Move Google Login prompt higher, made it bigger

Signed-off-by: snipe <[email protected]>

* Updated assets

Signed-off-by: snipe <[email protected]>

* Check that the asset exists before trying to get properties

Signed-off-by: snipe <[email protected]>

* Add all-contributors-cli as dev dependency

* Add missing markers

* Run generate command to migrate to new style

(from markdown style tables and images to html style)

./node_modules/.bin/all-contributors generate

* Add contributor commands to package.json

* Move contributors from readme to dedicated files

* Add config keys

* Add missing config key

* Reference correct file

* Add missing comma

* Add newline to start of contributors file

* Add link to contributors file

* Move link

* adds Supplier as a searchable relation on the asset maintenance report

* Fixed [FD-39640]: preserve sort order when generating asset labels

* Added license expiration date in "view asset"

I've added the expiration date of the license associated with an asset in hardware/ID#software, it is useful to see all of them on the asset page instead of having to open the license details page. I've also fixed a space formatting issue.

* docs: add @mauro-miatello as a contributor

* Guard against non-integers being passed for company_id

* Search on supplier name attached to maintenance

Signed-off-by: snipe <[email protected]>

* fixes checkout bug

* Remove 7 day padding for expected assets

Signed-off-by: snipe <[email protected]>

* Fix default layout

Signed-off-by: Ryan Huntington <[email protected]>

* Fix language mishap...

Signed-off-by: Ryan Huntington <[email protected]>

---------

Signed-off-by: snipe <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Ryan Huntington <[email protected]>
Co-authored-by: snipe <[email protected]>
Co-authored-by: spencerrlongg <[email protected]>
Co-authored-by: Joël Pittet <[email protected]>
Co-authored-by: Godfrey M <[email protected]>
Co-authored-by: Brady Wetherington <[email protected]>
Co-authored-by: Godfrey Martinez <[email protected]>
Co-authored-by: akemidx <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marcus Moore <[email protected]>
Co-authored-by: MrM <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file javascript
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@snipe @snyk-bot