Update dependency handsontable to v10 [SECURITY] #42
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^7.4.2->^10.0.0GitHub Vulnerability Alerts
CVE-2021-23446
The package handsontable before 10.0.0; the package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) in Handsontable.helper.isNumeric function.
Release Notes
handsontable/handsontable
v10.0.0Compare Source
Changed
controller, for selection manipulation in thebeforeOnCellMouseDownandbeforeOnCellMouseOverhooks. #4996beforeRenderandafterRenderhooks are, and when they are triggered. Added two new hooks:beforeViewRenderandafterViewRender. #6303Formulasplugin users. #8502rowsLimitandcolumnsLimitoptions of theCopyPasteplugin. #8660autoWrapRowandautoWrapColoptions` default values fromtruetofalse. #8662getCellMeta()method. #6303selectOptionsoption. #8488Fixed
NestedRowsplugin, occurring with theFormulasplugin enabled. #8048Formulasplugin if a provided sheet name contained a dash character. #8057Formulasplugin. #8078beforeChangehook when theFormulasplugin was enabled #8107NestedRowsplugin won't be corrupted by some actions. #8180dataMap, to prevent potential circular references. #8704v9.0.2Compare Source
Fixed
updateSettingscalls containingcolumns. #7689parseTableutility. #8041nestedRowsplugin enabled crashed the table. #8171Added
v9.0.1Compare Source
Fixed
checkboxtype to restore previous behaviour. #8196Removed
jsonpatchlibrary from the source code. #8140v9.0.0Compare Source
Changed
hot-formula-parserdependency for the sake of an optional one,hyperformula. #6466afterAutofillandbeforeAutofillhooks' signatures. #7987eslintand eslint-related modules. #7531fit&fdescribeto restricted globals in test files. #8088Fixed
afterCreateColhooks being triggered after undoing a removal of a column. #8076Removed
Deprecated
beforeAutofillInsidePopulatehook. It will be removed in the next major release. #8095v8.4.0Compare Source
Added
separatedattribute for the label options (thelabelDOM element may wrapinputor be placed next to it). #3172modifyAutoColumnSizeSeedhook to let developers overwrite the default behaviour of the AutoColumnSize sampling. #3339UndoRedoplugin and introduced new hooks. #6948Fixed
checkbox-typed cells and an issue with empty cells not being displayed properly. #4047readOnlycells was not performed properly. #4754fragmentSelectionoption enabled. #6083numericFormat's type definition. #7420trimWhitespacetests on Firefox. #7593postbuildandexamples:installscripts on Windows. #7680package.json. #7723Changed
v8.3.2Compare Source
Fixed
disableVisualSelectionfor cells/columns. #5082currentoption of thedisableVisualSelectionsetting. #5869headeroption of thedisableVisualSelectionsetting. #6025updateSettingsmethod in the body of some callbacks would break the table. #7231maxRowsandmaxColsoptions interfered with hidden index calculations. #7350windowwas a scrollable container. #7356AutoRowSizeplugin would break the table when placed in an iframe. #7424HOMEandENDkeys with hidden rows/columns enabled. #7454trimWhitespaceoption not working properly. #7458colWidthsandrowHeightsoptions. #7507cellTypesmodule paths in theexportsentry of thepackage.jsonfile. #7597Added
handsontable,@handsontable/angular,@handsontable/react, and@handsontable/vuewill all be developed in the same repo -handsontable. #7380importor re-exporting. #7473v8.3.1Compare Source
Fixed
v8.3.0Compare Source
Added
Introduced a new feature that allows postponing the table render and internal data cache update. The table rendering time can be reduced several-fold times by batching (using the
batchmethod), multi-line API calls, or manually suspending rendering using thesuspendRenderandresumeRendermethods. #7274Introduced a possibility to import:
as separate modules, along with the Handsontable base. This change allows utilizing only the parts of Handsontable the end application is actually using, without the overhead of the full bundle. #7403
Added a new workflow for managing and generating changelogs. #7405
Fixed
skipRowOnPasteoption in the TypeScript definition file. #7394Changed
minSpareRows,minSpareCols,minRows, andminColsoptions). #7439v8.2.0Compare Source
Added
LinkedPhysicalIndexToValueMap#7276DOMPurify, to add HTML sanitization what should minimize the risk of inserting insecure code using Handsontable built-in functionalities. #7292Fixed
htmlToGridSettingshelper if passed<table>had no rows. #7311event.target's parent in themouseoverevent was not defined, the table threw an error when hovering over row/column headers. #6926hiddenColumns-enabled Handsontable instance rendered the validated cells improperly. #7301text/htmlmime-type. #7369v8.1.0Compare Source
Added
Fixed
updateSettings, while there werefixedColumnsLeftdefined. #5735windowobject. #7260;updateSettings. #6004Changed
v8.0.0Compare Source
Added
modifySourceDatahook andsetSourceDataAtCellmethod. #6664scrollViewportTomethod: optionalconsiderHiddenIndexeswhich is aboolean. #6547autofillin thebeforeAutofillhook. #4441afterAutoFillhook. #6135instance.undoRedo. #6346countRenderableColumnsmethod to theTableView. #6177CustomBorderstypings. #6788beforeSetCellMetahook with an ability to cancel the changes. #5388Changed
manualRowMoveandmanualColumnMoveplugins work #5945CellMetamanager was refactored for future features and improvements. #6233rowHeights. #6149RMB) click on the corner, column and row headers will show just some options, defined by newly created specification #7082afterRenderer,modifyColWidth,beforeStretchingColumnWidthwill be executable only on visible (meaning, rendered) rows and columns. #6547getColWidthfor hidden index will return 0 - it used to return 0.1 #6547modifyColWidthhook isn't called internally. However, it will be executed when the user will call thegetColWidth. #6547beforeValueRender,beforeRenderer,afterRenderer,modifyColWidth,beforeStretchingColumnWidthetc. will be executed just for some of the columns (just the renderable ones). #6547ContextMenu, now it is selecting a column on the right when there is space on right to the last selected column, selecting a column on the left otherwise. #6547NestedHeadersplugin was rewritten, from now on, only a tree-like structure will be allowed, meaning, there will be no possibility to place nested headers in-between layers. #6716CustomBordersplugin was adapted to work withHiddenColumnsproperly, from now on hiding cells at the start or at the end of a range will also hide their borders. Also, hiding a single cell with borders will hide all of its borders. #7083CollapsibleColumnswill no longer useHiddenColumnsplugin to work. #6204render()will not work properly anymore. From this point onward, all the data-related operations need to be performed using the API methods, such aspopulateFromArrayorsetDataAtCell. #5945manualColumnFreezeplugin doesn't use themanualColumnMove, thecollapsibleColumnsplugin doesn't use thehiddenColumnsplugin,nestedRowsplugin doesn't use thetrimRowsplugin,filtersplugin doesn't use thetrimRowsplugin anymore. #5945 along with other adjustments #6547:minSpareRowsandminRowsoptions will ensure that the number of visible rows corresponds to the value provided to them (for example, thetrimRowsplugin won't have an impact on the number of displayed rows). #5945toPhysicalRowandtoVisualColumnnow returnnullfor non-existant rows/columns. #5945afterLoadDatahook receives a different set of arguments. It used to be just the initialLoad flag, now the first argument issourceData, followed byinitialLoad. #5945manualColumnFreezeplugin unfreezes the column just after the "line of freeze". #5945RecordTranslatorobject and thetproperty available in the plugins were removed. #5945afterLoadData,afterFilter, etc.) are now called just before therendercall. #5945nestedRowsplugin isenabled, moving rows will be possible only using the UI or by calling thedragRowsmethod of themanualRowMoveplugin. #5945beforeRowResize,afterRowResize,beforeColumnResize,afterColumnResizehooks have the order of their arguments rearranged for the sake of consistency with other hooks. #3328collapsibleColumns'toggleCollapsibleSectionmethod. #6193moment,numbroandpikadaydependencies to their latest versions. #6610z-indexproperties between the overlays. #6269Deprecated
HeaderTooltipsplugin becomes deprecated and will be removed in the next major version. #7023Removed
firstVisibleColumnCSS class as no longer needed. #6547beforeChangecallback. #6792debugkey (key, css, docs). #6672hiddenRowandhiddenColumnhooks. #6547modifyDocumentFocusfrom thelistenfunction. #6547rowOffsetandcolOffsetpublic API methods since they aliased the methods from Walkontable. #6547GanttChartplugin. #7022modifyRow,modifyCol,unmodifyRow,unmodifyColandskipLengthCachehooks are no longer needed and were removed. #5945Fixed
columnSortingoption enabled. #2685loadDatanot resetting the row order changed by themanualRowMoveplugin. #3568alter'sinsert_rowafter using theloadDatamethod and sorting the data would add unintentional additional rows to the table. #3809loadDataalong with theminSpareRowsoption. #3937columnSummaryplugin not working properly after adding new rows using the Context Menu and sorting the data. #3924loadDatawith an object-based data source would not work properly. #4204updateSettings. #4121filtersplugin using incorrect indexes after moving and/or sorting the table. #44420. #4470afterRowMovehook receiving an impropertargetargument. #4501manualColumnFreezeplugin enablingmanualColumnMove, even if it was declared asfalse. #4553arrayMappersnot working properly after updating the dataset. #4567loadDatawithminSpareRowsandmanualRowMoveenabled caused the table to improperly load the data. #4576columnSortingcaused themanualColumnFreezeto be unusable. #4601persistentStatewas enabled. #4713manualColumnMovedidn't work if the dataset was empty. #4926collapseAllmethod from thecollapsibleColumnsplugin did not work properly ifcolumnSortingwas enabled. #4999loadDatawithminSpareRowsenabled would cause unwanted blank rows to appear. #5707afterColumnMovehook receiving an impropertargetargument. #5173loadDatamadeNaNappear in the column headers. #5369skipColumnOnPasteoption not working properly when usingcolumnSortingandhiddenColumns. #5824trimRowsplugin did not work properly after moving rows. #5860minSpareRowsnot working properly with thetrimRowsplugin being used. #5862nestedRowsplugin. #5889toVisualRowmethod to return the wrong results. #5890filtersandtrimRowsplugins not working properly alongside each other. #5915manualColumnMovewould not work properly when the data object properties count would be lower than the table column count. #5931trimRowsplugin did not work properly with thestartRowsoption. #5953loadDataafter sorting would not work as expected. #5956beforeColumnMoveandafterColumnMovehooks not containing information about their destination indexes. #6005filtersandminSpareRowswould make the table add an empty row at the beginning of the table. #6278manualRowMoveplugin would duplicate data in the moved rows, when used with a row index greater than the table row count. #6088toVisualRowmethod returnednullwhen using thetrimRowsandcolumnSortingplugins together. #6310updateSettingsin theafterColumnMovehook callback would have no effect. #4480loadDatawould make thefiltersplugin to not behave as expected. #5244nestedRowsplugin would cause a+/-button misalignment. #5900columnSummaryplugin creating a doubled summary row. #5794nestedRowsplugin would throw an error. #6066nestedRowsplugin would throw an error. #3914columnSortingplugin. #6086updateSettings. #4121hiddenColumnsandstretchHshowed a redundant horizontal scrollbar. #4181stretchHwas enabled, the last column was displayed. #4370updateSettingsperformance was very low because ofhiddenColumnsbeing rendered. #4381nestedHeadersplugin. #4716hiddenColumnsdid not work properly withcolumnSorting. #5571manualColumnMoveshould work withhiddenColumns. #5598hiddenColumnsoption interfered with the keyboard movement. #5704collapsibleColumnswere set totrueit was impossible to exit selection mode. #5875hiddenColumnsdid not work properly withautoWrapRow/autoWrapCol. #5877nestedHeadersduplicated a header name if more columns are added. #5882hiddenColumnsplugin unset cell'srenderer. #5883hiddenColumnshad stored visual indexes and should have used physical indexes. #5909columnscaused an issue with showing column once it was hidden. #6426colHeaderwas truncated after movinghiddenColumn. #6463columnSortingtotrue(on initialization or viaupdateSettings) made headers non-collapsible programmatically viacollapseAllmethod. #4999customBordersplugin was missing in the definition file. #6477wtHiderandwtHolderin overlays. #3873updateSettingscould not updatetableClassName. #6295minSpareColswithundoadded too many columns. #6363readOnlyfor column was erased (did not apply) if filters were used. #6559beforeRemoveColorbeforeRemoverow. #6332readOnlystate for some cells was lost when rows withtrimRowsturned on were removed. #6990hiddenColumnswere used. #6978selectAllwhen the first row was hidden. #6975nestedRowsblocked table from loading if data was not provided. #6928trimRowsandhiddenRowswith specific settings broke borders. #6904startPosition. #6840Handsontable.plugins.ContextMenu. #6347manualColumnMovedid not modify thecolumnsinupdateSettings. #5200updateSettings. #3770currentColClassNamedid not work properly withnestedHeaders. #5861stretchH. #6186getSourceDatafunctions returned wrong data for nested rows. #5771nestedRows. #4154getByRangefor sourceData did not work properly with nested object data. #6548window.frameElementthrew errors in MSEdge, IE and Safari. #6478DataSource.countColumnsreturned invalid number of columns for nested objects. #3958mergedCellswith hidden cells caused problems with rendering. #7020ctrl + a. #6355onMouseOutevent caused critical errors when hovering over vertical scrollbar. #6699NestedHeadersdid not allow to define header level as an empty array. #7035nestedHeadersas a single empty array stoped the table from rendering. #7036hot.updateSettingswas called inafterSelection. #3726exportToFilein the specific case. #4176Configuration
📅 Schedule: "" (UTC).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.