Skip to content

Conversation

@q1blue
Copy link
Collaborator

@q1blue q1blue commented Aug 21, 2025

snyk-top-banner

Snyk has created this PR to upgrade @mui/icons-material from 5.10.9 to 5.18.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 64 versions ahead of your current version.

  • The recommended version was released a month ago.

Release notes
Package name: @mui/icons-material
  • 5.18.0 - 2025-07-08

    A big thanks to the 2 contributors who made this release possible.

    CSS layers make it easier to override styles by splitting a single style sheet into multiple layers.
    To learn more, check out the CSS layers documentation.

    @ mui/[email protected]

    @ mui/[email protected]

    Docs

    All contributors of this release in alphabetical order: @ oliviertassinari, @ siriwatknp

  • 5.17.1 - 2025-03-18
  • 5.17.0 - 2025-03-18
  • 5.16.14 - 2025-01-06
  • 5.16.13 - 2024-12-25
  • 5.16.12 - 2024-12-17
  • 5.16.11 - 2024-12-11
  • 5.16.10 - 2024-12-11
  • 5.16.9 - 2024-12-04
  • 5.16.8 - 2024-11-28
  • 5.16.7 - 2024-08-09
  • 5.16.6 - 2024-07-30
  • 5.16.5 - 2024-07-25
  • 5.16.4 - 2024-07-16
  • 5.16.3 - 2024-07-16
  • 5.16.2 - 2024-07-16
  • 5.16.1 - 2024-07-11
  • 5.16.0 - 2024-07-05
  • 5.15.21 - 2024-06-28
  • 5.15.20 - 2024-06-12
  • 5.15.19 - 2024-05-29
  • 5.15.18 - 2024-05-16
  • 5.15.17 - 2024-05-08
  • 5.15.16 - 2024-05-01
  • 5.15.15 - 2024-04-04
  • 5.15.14 - 2024-03-19
  • 5.15.13 - 2024-03-13
  • 5.15.12 - 2024-03-05
  • 5.15.11 - 2024-02-24
  • 5.15.10 - 2024-02-12
  • 5.15.9 - 2024-02-08
  • 5.15.8 - 2024-02-06
  • 5.15.7 - 2024-01-31
  • 5.15.6 - 2024-01-22
  • 5.15.5 - 2024-01-17
  • 5.15.4 - 2024-01-10
  • 5.15.3 - 2024-01-03
  • 5.15.2 - 2023-12-25
  • 5.15.1 - 2023-12-19
  • 5.15.0 - 2023-12-12
  • 5.14.19 - 2023-11-29
  • 5.14.18 - 2023-11-14
  • 5.14.16 - 2023-10-31
  • 5.14.15 - 2023-10-24
  • 5.14.14 - 2023-10-17
  • 5.14.13 - 2023-10-10
  • 5.14.12 - 2023-10-04
  • 5.14.11 - 2023-09-26
  • 5.14.9 - 2023-09-13
  • 5.14.8 - 2023-09-05
  • 5.14.7 - 2023-08-29
  • 5.14.6 - 2023-08-24
  • 5.14.5 - 2024-01-17
  • 5.14.3 - 2023-08-01
  • 5.14.1 - 2023-07-19
  • 5.14.0 - 2023-07-11
  • 5.13.7 - 2023-07-04
  • 5.11.16 - 2023-04-04
  • 5.11.11 - 2023-02-28
  • 5.11.9 - 2023-02-14
  • 5.11.0 - 2022-12-13
  • 5.10.16 - 2022-11-28
  • 5.10.15 - 2022-11-22
  • 5.10.14 - 2022-11-15
  • 5.10.9 - 2022-10-11
from @mui/icons-material GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @mui/icons-material from 5.10.9 to 5.18.0.

See this package in npm:
@mui/icons-material

See this project in Snyk:
https://app.snyk.io/org/q1bluequantumblockchainlabs.onmicrosoft.com/project/da0af71a-b3d1-4f60-96fa-757f094054c3?utm_source=github&utm_medium=referral&page=upgrade-pr
@changeset-bot
Copy link

changeset-bot bot commented Aug 21, 2025

⚠️ No Changeset found

Latest commit: 060bf50

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​@​tidb-community/​tracking-script@​0.1.0691006080100
Addednpm/​@​docusaurus/​module-type-aliases@​2.1.0991006697100
Addednpm/​@​djagger/​echartsx@​0.0.22741006676100
Addednpm/​@​docusaurus/​preset-classic@​2.1.0991006799100
Addednpm/​@​docusaurus/​plugin-google-gtag@​2.1.01001006899100
Addednpm/​@​stackql/​docusaurus-plugin-hubspot@​1.0.1691008078100
Addednpm/​@​types/​grecaptcha@​3.0.41001006977100
Addednpm/​@​docusaurus/​plugin-client-redirects@​2.1.0991007199100
Addednpm/​@​tsconfig/​docusaurus@​1.0.61001007278100
Addednpm/​@​types/​webpack-env@​1.18.01001007279100
Addednpm/​@​docusaurus/​theme-search-algolia@​2.1.0991007299100
Addednpm/​@​docusaurus/​core@​2.1.0971007397100
Addednpm/​@​emotion/​server@​11.10.01001007381100
Addednpm/​@​types/​d3-hierarchy@​3.1.01001007477100
Addednpm/​@​primer/​octicons-react@​16.3.1961007495100
Addednpm/​@​geo-maps/​countries-land-10km@​0.6.0771008876100
Addednpm/​@​types/​luxon@​2.4.01001007687100
Addednpm/​@​makotot/​ghostui@​2.0.0981007776100
Addednpm/​@​sentry/​tracing@​7.16.01001001008860
Addednpm/​country-code-emoji@​2.3.0991008476100
Addednpm/​@​types/​is-hotkey@​0.1.71001009676100
Addednpm/​ace-builds@​1.12.3761008494100
Addednpm/​clsx@​1.2.11001008976100
Addednpm/​@​types/​react-copy-to-clipboard@​5.0.41001007776100
Addednpm/​deepmerge@​4.2.210010010076100
Addednpm/​babel-plugin-direct-import@​1.0.09710010076100
Addednpm/​is-hotkey@​0.2.010010010078100
Addednpm/​chartjs-plugin-datalabels@​2.1.01001008778100
Addednpm/​animate.css@​4.1.11001008679100
Addednpm/​eslint-config-standard-with-typescript@​23.0.0991009079100
See 23 more rows in the dashboard

View full report

@socket-security
Copy link

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
npm/[email protected] has Obfuscated code.

Confidence: 0.95

Location: Package overview

From: web/package-lock.jsonnpm/[email protected]

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
npm/[email protected] has a License Policy Violation.

License: CC-BY-4.0 (npm metadata)

License: CC-BY-4.0 (package/LICENSE)

License: CC-BY-4.0 (package/package.json)

From: web/package-lock.jsonnpm/@emotion/[email protected]npm/@emotion/[email protected]npm/@docusaurus/[email protected]npm/@docusaurus/[email protected]npm/@docusaurus/[email protected]npm/@docusaurus/[email protected]npm/@docusaurus/[email protected]npm/[email protected]

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants