Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 23, 2022

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
jsdom 16.4.0 -> 16.5.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-20066

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.


Release Notes

jsdom/jsdom (jsdom)

v16.5.0

Compare Source

  • Added window.queueMicrotask().
  • Added window.event.
  • Added inputEvent.inputType. (diegohaz)
  • Removed ondragexit from Window and friends, per a spec update.
  • Fixed the URL of about:blank iframes. Previously it was getting set to the parent's URL. (SimonMueller)
  • Fixed the loading of subresources from the filesystem when they had non-ASCII filenames.
  • Fixed the hidden="" attribute to cause display: none per the user-agent stylesheet. (ph-fritsche)
  • Fixed the new File() constructor to no longer convert / to :, per a pending spec update.
  • Fixed mutation observer callbacks to be called with the MutationObserver instance as their this value.
  • Fixed <input type=checkbox> and <input type=radio> to be mutable even when disabled, per a spec update.
  • Fixed XMLHttpRequest to not fire a redundant final progress event if a progress event was previously fired with the same loaded value. This would usually occur with small files.
  • Fixed XMLHttpRequest to expose the Content-Length header on cross-origin responses.
  • Fixed xhr.response to return null for failures that occur during the middle of the download.
  • Fixed edge cases around passing callback functions or event handlers. (ExE-Boss)
  • Fixed edge cases around the properties of proxy-like objects such as localStorage or dataset. (ExE-Boss)
  • Fixed a potential memory leak with custom elements (although we could not figure out how to trigger it). (soncodi)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Sorry, something went wrong.

@renovate renovate bot added the Type: Dependency Dependencies fixes label Jun 23, 2022
@renovate renovate bot force-pushed the renovate/npm-jsdom-vulnerability branch from be5cdb1 to 633efe6 Compare September 25, 2022 11:09
@renovate renovate bot force-pushed the renovate/npm-jsdom-vulnerability branch from 633efe6 to 4780392 Compare November 20, 2022 15:13
@renovate renovate bot force-pushed the renovate/npm-jsdom-vulnerability branch from 4780392 to 2d822da Compare March 16, 2023 13:56
@renovate renovate bot force-pushed the renovate/npm-jsdom-vulnerability branch 4 times, most recently from 6044caa to ca453e5 Compare March 24, 2023 21:35
@renovate renovate bot changed the title chore(deps): update dependency jsdom to v16.5.0 [security] chore(deps): update dependency jsdom to v16.5.0 [security] - autoclosed Apr 21, 2023
@renovate renovate bot closed this Apr 21, 2023
@renovate renovate bot deleted the renovate/npm-jsdom-vulnerability branch April 21, 2023 03:48
@renovate renovate bot changed the title chore(deps): update dependency jsdom to v16.5.0 [security] - autoclosed chore(deps): update dependency jsdom to v16.5.0 [security] Apr 21, 2023
@renovate renovate bot reopened this Apr 21, 2023
@renovate renovate bot restored the renovate/npm-jsdom-vulnerability branch April 21, 2023 08:29

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
@renovate renovate bot force-pushed the renovate/npm-jsdom-vulnerability branch from ca453e5 to 452e200 Compare May 7, 2024 18:01
@renovate renovate bot merged commit ea8183a into v1.x May 7, 2024
@renovate renovate bot deleted the renovate/npm-jsdom-vulnerability branch May 7, 2024 21:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Dependency Dependencies fixes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants