Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade react-hook-form from 7.43.9 to 7.51.0 #27

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade react-hook-form from 7.43.9 to 7.51.0 #27

wants to merge 1 commit into from

Conversation

fer-rouco
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade react-hook-form from 7.43.9 to 7.51.0.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

✨ Snyk has automatically assigned this pull request, set who gets assigned.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 35 versions ahead of your current version.
  • The recommended version was released a month ago, on 2024-03-01.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Cross-site Request Forgery (CSRF)
SNYK-JS-AXIOS-6032459		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Prototype Pollution
SNYK-JS-AXIOS-6144788		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Use of Weak Hash
SNYK-JS-CRYPTOJS-6028119		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UGLIFYJS-1727251		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit
Prototype Pollution
SNYK-JS-XLSX-5457926		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-6124857		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-D3COLOR-1076592		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: react-hook-form
  • 7.51.0 - 2024-03-01

    💬 add isValidating and validatingFields to field state (#10657)

    const { formState: { validatingFields } } = useForm({ mode: 'onBlur' });

    ⌨️ chore: replace ts-ignore with ts-expect-error (#11573)
    🧗‍♂️ chore: update lib dev deps (#11548)
    💅 related #11541 improve dirty check when undefined provided with reset api
    😾 fix #11514 issue under strict mode reset invoke twice reset mounted field names with keepDirtyValues (#11546)
    🤡 fix flush root render hack (#11521)
    🧽 chore: removed unused utils and resp. test cases (#11476)
    🐞 close #11503 issue dirty field update with async validation (#11509)

    Revert "🔧 fix data param in handleSubmit when TTransformedValues is a union type (#11420)"
    Revert "✨ feat(values): priorities values over defaultvalues (#11399)" (#11545)

    ❤️ Thanks to @ deepgolani4, @ pbankonier and @ deepgolani4
    ❤️ Thank you principal.com for your contribution

  • 7.50.1 - 2024-02-06

    🥲 Regression: Revert "⌨️ fix #10734 watch and useWatch without parameters return type (#11359)"

  • 7.50.0 - 2024-02-01

    🔧 fix data param in handleSubmit when TTransformedValues is a union type (#11420)
    👷 build(Engines): remove pnpm dependency (#11425)
    🐞 fixes #11386 get new dirtyFields when reset keeping defaults and dirty values (#11401)
    🏷️ improve CustomElement type (#11309)
    💫 feat(useForm): leave formState flags in a consistent state when throwing in handleSubmit onValid (#11214)
    ⌨️ fix: change DeepPartial to account for object union types & unknown (#11385)
    ✨ feat(values): priorities values over defaultvalues (#11399)
    🐞 close #11246 skip root validation on action when mode and revalidate mode is onSubmit (#11395)
    💩 fix #11322 trigger extra re-render with useWatch plus shouldUnregister (#11394)
    ⌨️ fix #10734 watch and useWatch without parameters return type (#11359)
    🧑‍✈️ fix #11281 issue with upgrade node version (#11392)
    🐞 fix #11368 keep form state mounted when keeping values (#11384)
    🐞 fix #11374: Nested deep partial with unknown (#11373)

    thanks to @ Moshyfawn, @ jonahallibone, @ eladattias1996, @ RulerOfCakes, @ anonkey, @ Ar4ys, @ IanVS and @ r-kataoka11

  • 7.49.3 - 2024-01-08

    🐛 fix(formState, disabled): infer controlled disabled form state (#11361)
    🐛 fix(reset): remove global reset option flag (#11355)
    🐛 fix(useController): check if disabled state was set by user (#11353)
    🖨️ fix: Change DeepPartial type definition to be compatible with unknown (#11333)
    🐞 fix #11328 resetField with object as defaultValue (#11329)

    thanks to @ Moshyfawn, @ geeee and @ RulerOfCakes

  • 7.49.2 - 2023-12-13

    🐞 fix #11292 issue with controller validation prop (#11294)

  • 7.49.1 - 2023-12-12
    Read more
  • 7.49.0 - 2023-12-09
    Read more
  • 7.48.2 - 2023-11-05
    Read more
  • 7.48.1 - 2023-11-04

    🐞 fix controller update with disabled prop from useForm

  • 7.48.0 - 2023-11-04
    Read more
  • 7.47.0 - 2023-10-02
  • 7.46.2 - 2023-09-21
  • 7.46.1 - 2023-09-04
  • 7.46.0 - 2023-09-03
  • 7.46.0-next.0 - 2023-08-13
  • 7.45.4 - 2023-08-05
  • 7.45.3 - 2023-08-04
  • 7.45.2 - 2023-07-17
  • 7.45.1 - 2023-06-28
  • 7.45.0 - 2023-06-19
  • 7.45.0-next.1 - 2023-06-18
  • 7.45.0-next.0 - 2023-06-11
  • 7.44.3 - 2023-06-01
  • 7.44.3-beta.1 - 2023-05-31
  • 7.44.3-beta.0 - 2023-05-31
  • 7.44.2 - 2023-05-28
  • 7.44.1 - 2023-05-27
  • 7.44.0 - 2023-05-27
  • 7.44.0-rc.5 - 2023-05-20
  • 7.44.0-rc.4 - 2023-05-20
  • 7.44.0-rc.3 - 2023-05-07
  • 7.44.0-rc.1 - 2023-04-15
  • 7.44.0-rc.0 - 2023-03-10
  • 7.44.0-next.1 - 2023-02-16
  • 7.44.0-next.0 - 2023-02-09
  • 7.43.9 - 2023-03-30
from react-hook-form GitHub release notes
Commit messages
Package name: react-hook-form
  • 9b14d0f 7.51.0
  • 215d633 ⌨️ chore: replace ts-ignore with ts-expect-error (#11573)
  • ec8a46e 🧗‍♂️ chore: update lib dev deps (#11548)
  • bba5524 💅 related #11541 improve dirty check when `undefined` provided with `reset` api
  • ebc1f2c 💬 add `isValidating` and `validatingFields` to field state (#10657)
  • 92a9a97 😾 fix #11514 issue under strict mode reset invoke twice reset mounted field names with keepDirtyValues (#11546)
  • 2d58212 Revert "✨ feat(values): priorities values over defaultvalues (#11399)" (#11545)
  • b6bbd8a 🤡 fix flush root render hack (#11521)
  • 8b12f99 Revert "🔧 fix data param in handleSubmit when TTransformedValues is a union type (#11420)"
  • 73d7c10 ❤️ thank you principal.com for your contribution
  • 626eacc 🧽 chore: removed unused utils and resp. test cases (#11476)
  • 744456c 🐞 close #11503 issue dirty field update with async validation (#11509)
  • 6a57117 7.50.1
  • 7cffc95 Revert "⌨️ fix #10734 watch and useWatch without parameters return type (#11359)"
  • 5c3b4c0 ✅ chore: add noop Utils Function (#11455)
  • 2dacf05 7.50.0
  • 6fee03c 🔧 fix data param in handleSubmit when TTransformedValues is a union type (#11420)
  • 919c578 👷 build(Engines): remove pnpm dependency (#11425)
  • 4c21b28 🐞 fixes #11386 get new dirtyFields when reset keeping defaults and dirty values (#11401)
  • f8bbb30 🏷️ improve `CustomElement` type (#11309)
  • f18c147 💫 feat(useForm): leave formState flags in a consistent state when throwing in handleSubmit onValid (#11214)
  • cec3267 ⌨️ fix: change `DeepPartial` to account for object union types & `unknown` (#11385)
  • a0583ff ✨ feat(values): priorities values over defaultvalues (#11399)
  • 4e6fccb 🐞 close #11246 skip root validation on action when mode and revalidate mode is onSubmit (#11395)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@fer-rouco fer-rouco self-assigned this Mar 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@fer-rouco fer-rouco

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@fer-rouco @snyk-bot