Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade lite-youtube-embed from 0.2.0 to 0.3.2 #71

Closed

Conversation

elncetoo
Copy link
Member

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade lite-youtube-embed from 0.2.0 to 0.3.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 3 versions ahead of your current version.

  • The recommended version was released on 4 months ago.

Release notes
Package name: lite-youtube-embed
  • 0.3.2 - 2024-03-04

    This release has no functional changes from v0.3.1 (which had a few changes)

    The only change: As of v0.3.1, getPlayer() is now getYTPlayer(), but I missed updating two pieces of documentation for that. That's now addressed.

    Full Changelog: v0.3.1...v0.3.2

  • 0.3.1 - 2024-03-04

    New features

    Other changes

    New Contributors

    Full Changelog: v0.3.0...v0.3.1

  • 0.3.0 - 2023-10-04

    v0.3.0 is out published on npm! woohoo!

    The double-tap bug (aka reliable autoplay)

    lite-yt-embed now uses the YouTube Player API to force autoplay. (While as user wouldn't see this as "autoplay", we want the real youtube iframe to autoplay once the user clicks play.) While desktop browsers were reliably autoplaying, mobile wasn't. Chromium-based browsers on Android were flaky. This change (#109 and #90) resolves the double-tap bug for Android and iPhone (usually). Thanks @ dantovbein for getting this started.

    However, iPad almost always doesn't autoplay and needs the double-tap. iPhone sometimes needs it as well. WebKit on iOS's relationship with autoplay is a weird one and while I've done a lot of research, more work is required.

    I've been putting off this release until I can fully resolve autoplay, but at this point it's past due to ship things, even if it's not "done". Apologies folks. (Of course if a contributor has the tenacity to finish off this effort before I do, I'd very much welcome it!).

    Core improvements

    • Fix duplicate iframes being created (#97)
    • Actually use progressive enhancement with a link rather than button (#117)
    • remove version="1.1" from SVG (not needed) (#99)
    • remove poster image preload (#106)
    • Remove href from button to prevent possible navigation (#124)

    Repo stuff

    • Add .editorconfig (#107)
    • Rename now.json to vercel.json (#115)
    • Updated progressive enhancement example (#118)
    • Update Lighthouse CI and Node (#98)
    • Update node and GitHub Actions versions (#126)
    • readme: Add kylemocode/react-lite-yt-embed (#71)
    • readme: add React component port (#83)

    New Contributors

    Full Changelog: v0.2.0...v0.3.0

  • 0.2.0 - 2021-03-17

    0.2.0

from lite-youtube-embed GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade lite-youtube-embed from 0.2.0 to 0.3.2.

See this package in npm:
lite-youtube-embed

See this project in Snyk:
https://app.snyk.io/org/elncetoo/project/e4e57588-8b25-43ca-8117-adc3dbea4fff?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

@elncetoo elncetoo closed this Jul 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants