Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade react-hook-form from 7.51.1 to 7.53.0 #342

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

psturc
Copy link
Member

@psturc psturc commented Sep 24, 2024

snyk-top-banner

Snyk has created this PR to upgrade react-hook-form from 7.51.1 to 7.53.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 8 versions ahead of your current version.

  • The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Server-side Request Forgery (SSRF)
SNYK-JS-AXIOS-7361793
761 Proof of Concept
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860
761 No Known Exploit
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
761 Proof of Concept
high severity Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137
761 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
761 Proof of Concept
high severity Path Traversal
SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555
761 Proof of Concept
medium severity Open Redirect
SNYK-JS-EXPRESS-6474509
761 No Known Exploit
medium severity Cross-site Scripting
SNYK-JS-EXPRESS-7926867
761 No Known Exploit
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610
761 Proof of Concept
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610
761 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106
761 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-SERIALIZEJAVASCRIPT-6147607
761 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-WEBPACK-7840298
761 Proof of Concept
low severity Cross-site Scripting
SNYK-JS-SEND-7926862
761 No Known Exploit
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865
761 No Known Exploit
Release notes
Package name: react-hook-form
  • 7.53.0 - 2024-08-24

    🌫️ feat: #12148 support isValid when mode is set to onBlur (#12194)

    // update formstate isValid with onBlur event
    const { formState: { isValid } } = useForm({
      mode: 'onBlur'
    })

    🐞 fix #12021 issue with disable prop not reflecting on re-render without trigger by useEffect (#12193)
    👩‍🌾 close #12168 optimise re-render with validating fields subscription (#12192)
    🐞 fix #12127 issue with compare object value changed with object input (#12185)
    🎲 improve : break out of recursive loops on first focus (#11827)
    📖 fix example of ObjectKeys type (#11965)

    thanks to @ suke & @ DPflasterer

  • 7.52.2 - 2024-08-03

    👍 close #12108 useController should subscribe to exact field name of form's state (#12109)
    👍 chore: upgrade app deps
    🩻 fix: add useCallback for ref callback (#12078)
    🚀 fix: skip call executeBuiltInValidation if no sub-fields left (#12054)

    thanks to @ newsiberian, @ Wendystraite and @ abnud11

  • 7.52.1 - 2024-07-02

    🐞 fix #12024 dirty not update issue with values prop (#12041)
    🐞 fix: field array validate rules shift errors (#12033)

    thanks to @ JardelCheung

  • 7.52.0 - 2024-06-15

    ⚛️ close #11932 enable react 19 peer dependency (#11935)
    👮‍♀️ close #11954 getFieldState remove unnessaried inValidating and touched subscription (#11995)
    🐞 fix #11985 logic createFormControl check field before usage (#11986)
    ⌨️ fix: enforce type safety for deps property in RegisterOptions (#11969)
    🐞 fix #11922 keep dirty on reset with dirty fields (#11958)
    🚔 close #11937 add validation in the cleanup process in useController (#11938)
    Revert "⌨️ close: correct type of error field in getFieldState return object (#11831)"
    📖 fix: change info.values type in WatchObserver (#11917)

    thanks to @ nakaakist, @ IdoBouskila, @ pincy and @ peinguin

  • 7.51.5 - 2024-05-21

    📖 fix broken link to examples in README.md (#11805)
    ⌨️ close: correct type of error field in getFieldState return object (#11831)
    🐞 fix #11842 radio buttons not disabled when multiple share a name (#11873)
    🐞 fix #11821 set value with disabled false before mount (#11880)
    🐞 fix setError to preserve existing errors elsewhere in the object (#11888)
    ⌨️ fix: add info.value type to WatchObserver (#11872)
    🫡 fix issue with internal set api (#11915)

    thanks to @ mjr2595 @ erashu212 @ SimonJTurner and @ peinguin

  • 7.51.4 - 2024-05-04

    👹 close #11778 improve unregister omit key with getValues method (#11779)
    🐞 fix #11794 issue: Fields dirty state is not updated when passing values to useForm

  • 7.51.3 - 2024-04-11

    🐞 fix #11773 regression on dirty check with reset (#11775)

  • 7.51.2 - 2024-03-26

    🐞 fix #11719 validation stuck on true state (#11723)

  • 7.51.1 - 2024-03-17

    🐛 bug(validatingFields, trigger): handle all fields validation trigger (#11624)
    💚 ci: cleanup actions versions (#11629)
    🐞 fix #11590 issue with trigger on validatingFields (#11613)

    thanks to @ Moshyfawn

from react-hook-form GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment