Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): bump @mui/x-date-pickers from 6.20.2 to 7.17.0 in /demos/jans-tarp #9504

Closed
wants to merge 1 commit into from
Closed

chore(deps): bump @mui/x-date-pickers from 6.20.2 to 7.17.0 in /demos/jans-tarp #9504

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 16, 2024 •
edited
Loading

Bumps @mui/x-date-pickers from 6.20.2 to 7.17.0.

Release notes

Sourced from @​mui/x-date-pickers's releases.

v7.17.0

We'd like to offer a big thanks to the 12 contributors who made this release possible. Here are some highlights ✨:

  • 📊 Charts performance improvement
  • 🧑‍💻 New Data Grid custom columns demo
  • 🐞 Bugfixes
  • 📚 Documentation improvements
  • 🌍 Improve Hungarian (hu-HU) locale on the Data Grid

Data Grid

@mui/x-data-grid@7.17.0

@mui/x-data-grid-pro@7.17.0 pro

Same changes as in @mui/x-data-grid@7.17.0.

@mui/x-data-grid-premium@7.17.0 premium

Same changes as in @mui/x-data-grid-pro@7.17.0.

Date and Time Pickers

@mui/x-date-pickers@7.17.0

@mui/x-date-pickers-pro@7.17.0 pro

Same changes as in @mui/x-date-pickers@7.17.0, plus:

  • [DateRangePicker] Fix currentMonthCalendarPosition not scrolling to future sibling (#14442) @​GMchris

Charts

@mui/x-charts@7.17.0

... (truncated)

Changelog

Sourced from @​mui/x-date-pickers's changelog.

7.17.0

Sep 13, 2024

We'd like to offer a big thanks to the 12 contributors who made this release possible. Here are some highlights ✨:

  • 📊 Charts performance improvement
  • 🧑‍💻 New Data Grid custom columns demo
  • 🐞 Bugfixes
  • 📚 Documentation improvements
  • 🌍 Improve Hungarian (hu-HU) locale on the Data Grid

Data Grid

@mui/x-data-grid@7.17.0

@mui/x-data-grid-pro@7.17.0 pro

Same changes as in @mui/x-data-grid@7.17.0.

@mui/x-data-grid-premium@7.17.0 premium

Same changes as in @mui/x-data-grid-pro@7.17.0.

Date and Time Pickers

@mui/x-date-pickers@7.17.0

@mui/x-date-pickers-pro@7.17.0 pro

Same changes as in @mui/x-date-pickers@7.17.0, plus:

  • [DateRangePicker] Fix currentMonthCalendarPosition not scrolling to future sibling (#14442) @​GMchris

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added javascript Pull requests that update Javascript code kind-dependencies Pull requests that update a dependency file labels Sep 16, 2024
@dependabot dependabot bot mentioned this pull request Sep 16, 2024
Closed
@dryrunsecurity DryRunSecurity
Copy link

dryrunsecurity bot commented Sep 16, 2024 •
edited
Loading

DryRun Security Summary

The provided code change in the package.json file upgrades the @mui/x-date-pickers dependency to the latest version, which is a common practice to obtain security fixes, bug fixes, and new features, but it's important to thoroughly test the changes to ensure they do not introduce any regressions or new vulnerabilities.

Expand for full summary

Summary:

The code change in the provided package.json file appears to be an upgrade of the @mui/x-date-pickers dependency from version 6.19.5 to version 7.17.0. From an application security perspective, this change is not particularly concerning, as upgrading dependencies to their latest versions is generally a good practice to obtain security fixes, bug fixes, and new features. However, it's always important to thoroughly test any changes, including dependency upgrades, to ensure that they do not introduce any regressions or new vulnerabilities.

The @mui/x-date-pickers library is a part of the Material-UI (MUI) ecosystem, which is a popular React UI framework. Upgrading to the latest version of this library may include security-related improvements, such as fixes for any known vulnerabilities or improvements to input validation and sanitization. Overall, this change appears to be a routine dependency upgrade, which is a common practice in software development. As long as the application is thoroughly tested after the upgrade, there should not be any major security concerns.

Files Changed:

  • demos/jans-tarp/package.json: The code change in this file upgrades the @mui/x-date-pickers dependency from version 6.19.5 to version 7.17.0.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer Findings
Sensitive Files Analyzer 1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

@dependabot
chore(deps): bump @mui/x-date-pickers in /demos/jans-tarp
37b86e4 
Bumps [@mui/x-date-pickers](https://github.com/mui/mui-x/tree/HEAD/packages/x-date-pickers) from 6.20.2 to 7.17.0.
- [Release notes](https://github.com/mui/mui-x/releases)
- [Changelog](https://github.com/mui/mui-x/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/mui-x/commits/v7.17.0/packages/x-date-pickers)

---
updated-dependencies:
- dependency-name: "@mui/x-date-pickers"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/demos/jans-tarp/mui/x-date-pickers-7.17.0 branch from 8140728 to 37b86e4 Compare September 17, 2024 14:07
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 20, 2024

Superseded by #9550.

@dependabot dependabot bot closed this Sep 20, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/demos/jans-tarp/mui/x-date-pickers-7.17.0 branch September 20, 2024 10:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@duttarnab duttarnab Awaiting requested review from duttarnab duttarnab is a code owner

Assignees
No one assigned
Labels
javascript Pull requests that update Javascript code kind-dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants