[Snyk] Upgrade codemirror from 5.30.0 to 5.65.1 #40
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade codemirror from 5.30.0 to 5.65.1. See this package in npm: https://www.npmjs.com/package/codemirror See this project in Snyk: https://app.snyk.io/org/hafixo/project/386a545f-c808-4f38-88e3-2f7b61b7537b?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade codemirror from 5.30.0 to 5.65.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-CODEMIRROR-1016937
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-JS-CODEMIRROR-569611
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: codemirror
-
5.65.1 - 2022-01-20
-
5.65.0 - 2021-12-20
-
5.64.0 - 2021-11-20
-
5.63.3 - 2021-10-12
-
5.63.2 - 2021-10-11
-
5.63.1 - 2021-09-29
-
5.63.0 - 2021-09-20
-
5.62.3 - 2021-08-20
-
5.62.2 - 2021-07-21
-
5.62.1 - 2021-07-20
-
5.62.0 - 2021-06-21
-
5.61.1 - 2021-05-20
-
5.61.0 - 2021-04-20
-
5.60.0 - 2021-03-20
-
5.59.4 - 2021-02-24
-
5.59.3 - 2021-02-20
-
5.59.2 - 2021-01-20
-
5.59.1 - 2020-12-31
-
5.59.0 - 2020-12-20
-
5.58.3 - 2020-11-19
-
5.58.2 - 2020-10-23
-
5.58.1 - 2020-09-23
-
5.58.0 - 2020-09-21
-
5.57.0 - 2020-08-20
-
5.56.0 - 2020-07-20
-
5.55.0 - 2020-06-21
-
5.54.0 - 2020-05-20
-
5.53.2 - 2020-04-21
-
5.53.0 - 2020-04-21
-
5.52.2 - 2020-03-20
-
5.52.0 - 2020-02-20
-
5.51.0 - 2020-01-20
-
5.50.2 - 2020-01-01
-
5.50.0 - 2019-12-20
-
5.49.2 - 2019-10-21
-
5.49.0 - 2019-09-20
-
5.48.4 - 2019-08-19
-
5.48.2 - 2019-07-19
-
5.48.0 - 2019-06-20
-
5.47.0 - 2019-05-21
-
5.46.0 - 2019-04-22
-
5.45.0 - 2019-03-20
-
5.44.0 - 2019-02-21
-
5.43.0 - 2019-01-21
-
5.42.2 - 2018-12-21
-
5.42.0 - 2018-11-20
-
5.41.0 - 2018-10-25
-
5.40.2 - 2018-09-20
-
5.40.0 - 2018-08-25
-
5.39.2 - 2018-07-20
-
5.39.0 - 2018-06-20
-
5.38.0 - 2018-05-22
-
5.37.0 - 2018-04-20
-
5.36.0 - 2018-03-20
-
5.35.0 - 2018-02-20
-
5.34.0 - 2018-01-29
-
5.33.0 - 2017-12-21
-
5.32.0 - 2017-11-22
-
5.31.0 - 2017-10-20
-
5.30.0 - 2017-09-20
from codemirror GitHub release notesVersion 5.65.1
Bug fixes
Fix miscalculation of vertical positions in lines that have both line widgets and replaced newlines.
Version 5.65.0
Bug fixes
brace-folding addon: Fix broken folding on lines with both braces and square brackets.
New features
vim bindings: Support g0, g$, g.
Version 5.64.0
Bug fixes
Fix a crash that occurred in some situations with replacing marks across line breaks.
Make sure native scrollbars reset their position when hidden and re-shown.
New features
vim bindings: Support C-u to delete back a line.
Version 5.63.3
Bug fixes
Re-publish 5.63.2 because npm somehow swallowed that, but won't let me publish it again.-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEErLY20j+/ljvJRHotcD8b7W0zrh4FAmFlhk0ACgkQcD8b7W0z
rh6lWgf/WRGEk/c0cqPKXuKvFAMK1El2R/IC6lapruHsOYuF4FilKHy0hssu4W+D
Fm15suBTDmxGhlP06dcjbJfmS28qBPVzA061guHg63dzFgbCS10+6pBbiRTMgzsG
rDWAlMawlIfFrW4LIzt7HajaenybGiJKgKezvChTmrhLeLDkvmn442u1PGmuRa5C
ZtAhL0yPYhbpuqK0wQXL3OuGhgQFHwp3xAiuPVLUJZ4VI2T9caNmckic7y5cJ4NT
8WXyDjwWTjboeEyYNyqm88uFqf0B0VO5B/vJnbcgfJbplCcQyn9kQDj1pb2jmuBp
haki+zoTerm6nfBjyBpy6mv68Wcqzw==
=mCdh
-----END PGP SIGNATURE-----
Mark version 5.63.3
Version 5.63.2
Bug fixes
Prevent external styles from giving the hidden textarea a min-height.
Remove a stray autosave file that was part of the previous release.
Version 5.63.1
Bug fixes
Fix an issue with mouse scrolling on Chrome 94 Windows, which made scrolling by wheel move unusably slow.
Version 5.63.0
Bug fixes
Fix scroll position jumping when scrolling a document with very different line heights.
xml mode: Look up HTML element behavior in a case-insensitive way.
New features
vim bindings: Support guu for case-changing.
Version 5.62.3
Bug fixes
Give the editor a
translate=noattribute to prevent automatic translation from modifying its content.Give vim-style cursors a width that matches the character after them.
merge addon: Make buttons keyboard-accessible.
emacs bindings: Fix by-page scrolling keybindings, which were accidentally inverted.
Version 5.62.2
Bug fixes
lint addon: Fix a regression that broke several addon options.
Version 5.62.1
Bug fixes
vim bindings: Make matching of upper-case characters more Unicode-aware.
lint addon: Prevent options passed to the addon itself from being given to the linter.
show-hint addon: Improve screen reader support.
search addon: Avoid using
innerHTML.Commit messages
Package name: codemirror
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs