[Snyk] Upgrade @lexical/react from 0.10.0 to 0.14.5 #574

dmitrymarokhonov · 2024-05-19T00:51:35Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @lexical/react from 0.10.0 to 0.14.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 19 versions ahead of your current version.
The recommended version was released a month ago, on 2024-04-17.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Proof of Concept
Prototype Pollution SNYK-JS-AXIOS-6144788	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ES5EXT-6095076	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Proof of Concept
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Proof of Concept
Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @lexical/react

0.14.5 - 2024-04-17
What's Changed
- v0.14.4 by @ acywatson in #5900
- fix(@ lexical/react): @ lexical/react 0.14.4 brings in @ lexical/devtools-core dependency without declaring it by @ StyleT in #5902
- update lock file by @ acywatson in #5904
- Fix version script by @ acywatson in #5906
Full Changelog: v0.14.4...v0.14.5
0.14.4 - 2024-04-16
What's Changed
- Fix failing WWW build by @ thegreatercurve in #5826
- feat: export 'IS_' and 'CAN_*' environment constants from @ lexical/utils by @ etrepum in #5831
- Add missing flow type parameters for insertNewAfter by @ Sahejkm in #5832
- fix: webpack needs its own export condition by @ etrepum in #5833
- Use unnamed ESM imports for Prism modules by @ thegreatercurve in #5828
- chore: upgrade to docusaurus 3 by @ etrepum in #5838
- Use updated docRoot count in removeRootElementEvents by @ thegreatercurve in #5847
- Fix #5620 Persist format at paragraph level for new line by @ Sahejkm in #5822
- Fix issue with removing selectionchange correctly by @ thegreatercurve in #5848
- Playground - Clear Format button fix by @ ManuelOjedaWz in #5849
- feat(@ lexical/devtools): Added TreeView rendering instead of a simple textarea by @ StyleT in #5830
- Fix bug with typeahead positioning by @ thegreatercurve in #5859
- Revert "feat(@ lexical/devtools): Added TreeView rendering instead of a simple textarea" by @ thegreatercurve in #5861
- Revert "Revert "feat(@ lexical/devtools): Added TreeView rendering instead of a simple textarea"" by @ thegreatercurve in #5864
- Add missing rewrite of utils import by @ thegreatercurve in #5866
- TextNode support font-weight bold by @ zurfyx in #5852
- Replace async arrow with function by @ zurfyx in #5870
- Fix #5663 styling from td not persisted on copy paste by @ Sahejkm in #5855
- fix test failing after rebase on bug fix for multiple text nodes styles in a cell node by @ Sahejkm in #5872
- fix #4468 Preserv elemement text align format on new paragraph creation by @ Sahejkm in #5878
- fix(playground): wrong logic for FloatingLinkEditorPlugin bad node by @ agriffis in #5814
- feat: use dev/prod conditions instead of webpack in exports by @ etrepum in #5858
- docs: fix typedoc links and add missing packages by @ etrepum in #5850
- Fix nested typo in README by @ zheckert in #5892
- Fix broken style for node overrides example on docs by @ 2wheeh in #5890
- Bump publish scripts to v4 by @ ivailop7 in #5817
- Remove a special case in table deleteTextHandler by @ AlexanderReznik in #5891
- feat(@ lexical/devtools): Extracted store/messaging implementation to the separate packages by @ StyleT in #5894
- Fix #3456 stale selection state after clear format by @ Sahejkm in #5896
- fix(lexical/createEditor): avoid implicit any type by @ jason89521 in #5889
- Remove unnecessary type assertions from useReport.ts by @ 2wheeh in #5884
- Refine useDecorators type by @ zurfyx in #5846
New Contributors
- @ ManuelOjedaWz made their first contribution in #5849
- @ zheckert made their first contribution in #5892
Full Changelog: v0.14.3...v0.14.4
0.14.3 - 2024-04-03
What's Changed

ESM
- Fixes for ESM builds for Server-side rendering frameworks (#5737)
- Node fork modules and 'bundler' module resolution (#5774)
Stability
- A meaningful number of table fixes around selection, navigation, formatting and deletion
- Merging of adjacent lists of the same type (#5803)
- Support for CSS Zoom (#5772)
DevTools Plugin
- Scaffolding for a DevTools Plugin (#5747)
Full Changelog
- Update the publish script channel by @ ivailop7 in #5736
- fixed: #5233 firefox related issue for backspace deletion where "focus" offset is of type element instead of text by @ Sahejkm in #5734
- chore(@ lexical/text): Split into several files for better readability and to simplify further expansion by @ StyleT in #5718
- Update build script to exclude WWW from ESM modules by @ thegreatercurve in #5753
- Generate default entry in package.json exports last & use .mjs for esm modules by @ etrepum in #5737
- Fix clear formatting in table by @ AlexanderReznik in #5765
- Revert "fixed: #5233 firefox related issue for backspace deletion wh… by @ zurfyx in #5776
- Respect CSS zoom by @ ebads67 in #5772
- Fix selection started from inside of the table by @ AlexanderReznik in #5766
- @ lexical/playground: Moved Vite config to TS and removed code duplication by @ StyleT in #5744
- fix: Double input of text including composing, such as Japanese, at TextNode Boundaries with in a MarkNode #5761 by @ matsuyama-k1 in #5762
- fix: restore playground esm build by @ etrepum in #5781
- Update stackblitz iframes to use ctl=1 to prevent focus stealing by @ etrepum in #5784
- fix: Address more flaky collab tests by @ etrepum in #5788
- Fix #5720 update the resolvedOffset correctly on image selection and drag by @ Sahejkm in #5795
- Node-aware Context Menu Items by @ ivailop7 in #5791
- Node fork modules & moduleResolution bundler by @ etrepum in #5774
- Quick fix for #5754: Numbered list does not increment in ImageNode caption #5754 by @ potatowagon in #5798
- Editable immediately when adding link from Floating toolbar by @ ivailop7 in #5801
- Fix #5543 insertText('') was inserting Text as child of "table node" instead of root before tablerow resulting in table node not getting deleted by @ Sahejkm in #5799
- fix: avoid auto-embed menu overflowing off right side of page by @ donotlb in #5804
- Fix typo in docs by @ thegreatercurve in #5805
- Improve table selection and navigation by @ serey-roth in #5767
- feat(@ lexical/devtools): Added basic extension scaffolding by @ StyleT in #5747
- chore: Removed invalid GH action config by @ StyleT in #5808
- docs: clarify read/update language in intro, readme & editor state by @ etrepum in #5809
- #4618 combine list if next sibling is list node by @ potatowagon in #5803
- Table selection stuck fix by @ AlexanderReznik in #5807
- remove duplicate list merging by @ potatowagon in #5810
- fix: removed overwrite of copyright by @ svendjanis in #5811
- Refactor ClickableLinkPlugin by @ ivailop7 in #5800
New Contributors
- @ Sahejkm made their first contribution in #5734
- @ potatowagon made their first contribution in #5798
- @ svendjanis made their first contribution in #5811
Full Changelog: v0.14.2...v0.14.3
0.14.2 - 2024-03-18
What's Changed
- Fix order of exports in lexical-react by @ birtles in #5732 (Hotfix for #5731)
Full Changelog: v0.14.1...v0.14.2
0.14.1 - 2024-03-18
v0.14.1 (2024-03-18)

Main Changes

ESM Support in #5618 (thanks @ etrepum).

canExtractContents has been removed from TableNode in #5628 [BREAKING CHANGE]

What's Changed
- Fix Flow $getCharacterOffsets by @ zurfyx in #5555
- v0.13.1 by @ zurfyx in #5556
- Fix: add class to elements exported from CodeNode by @ 2wheeh in #5558
- Prevent file:/// img conversion by @ zurfyx in #5563
- Add @ lexical/html to docs by @ 2wheeh in #5557
- Edit Link modal fix by @ HarrySIV in #5551
- Update react documentation by @ pavel-shermayster-sage in #5568
- Fix $computeTableMap flow by

Snyk has created this PR to upgrade @lexical/react from 0.10.0 to 0.14.5. See this package in npm: @lexical/react See this project in Snyk: https://app.snyk.io/org/dmitrymarokhonov/project/68008a44-c699-41e6-975b-808aa6e732f3?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @lexical/react from 0.10.0 to 0.14.5 #574

[Snyk] Upgrade @lexical/react from 0.10.0 to 0.14.5 #574

dmitrymarokhonov commented May 19, 2024

What's Changed

What's Changed

New Contributors

What's Changed

ESM

Stability

DevTools Plugin

Full Changelog

New Contributors

What's Changed

Main Changes

What's Changed

[Snyk] Upgrade @lexical/react from 0.10.0 to 0.14.5 #574

Are you sure you want to change the base?

[Snyk] Upgrade @lexical/react from 0.10.0 to 0.14.5 #574

Conversation

dmitrymarokhonov commented May 19, 2024

Snyk has created this PR to upgrade @lexical/react from 0.10.0 to 0.14.5.

What's Changed

What's Changed

New Contributors

What's Changed

ESM

Stability

DevTools Plugin

Full Changelog

New Contributors

What's Changed

Main Changes

What's Changed