[Snyk] Upgrade chart.js from 4.0.1 to 4.5.0 #30

mytamDo · 2025-07-13T09:37:14Z

Snyk has created this PR to upgrade chart.js from 4.0.1 to 4.5.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 20 versions ahead of your current version.
The recommended version was released a month ago.

Release notes

Package name: chart.js

4.5.0 - 2025-06-14
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Enhancements
- #11470 Fix min js two renames
- #12054 [fix] #12048 - Add selfJoin option for doughnut graphs
- #12058 feature: make above/below colors in filler plugin work with pivoted line charts
Bugs Fixed
- #12070 Fix: display stacked bar with multiple x-Axis
Types
- #12064 Document requirement of 'this' when calling tick formatters
- #12063 Add type definition for beforeEvent changed
Documentation
- #12088 Fix grammar typo: 'only draw line' -> 'only draw lines'
- #12087 Fix minified URL for development builds in the docs
- #12084 fix: correct grammar in segment comments (an segment -> a segment)
- #12082 Update docs for Developers API
- #12068 Fix minor typo, missing period
Development
- #12090 bump version to 4.5.0
- #12025 Bump pnpm/action-setup from 4.0.0 to 4.1.0
Thanks to @ FabTechAT, @ Jee-on, @ LeeLenaleee, @ R2Jeu-prive, @ dependabot[bot], @ ffdm, @ fulldecent, @ joshkel, @ lucasleung8, @ nakanoh, @ xavierleune and dependabot[bot]
4.4.9 - 2025-04-15
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
- #12037 Update docs
Bugs Fixed
- #12057 fix: respect dataset clipping area when filling line charts
Documentation
- #12039 Add docs on using from Node.js
Development
- #12062 Bump version to 4.4.9
Thanks to @ LeeLenaleee, @ adrianbrs and @ joshkel
4.4.8 - 2025-02-19
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
- #12034 [fix] Handle non-primitives in isNumber
Bugs Fixed
- #12035 Export ...ParsedData interfaces
- #12012 Fix helpers `Chart` type
- #11991 Bugfix: TypeError in Interaction due to out-of-bounds index
- #11986 Bugfix: return nearest non-null point on interaction when spanGaps=true
- #11984 Bugfix: span gaps over null values beyond scale limits
Types
- #12035 Export ...ParsedData interfaces
- #12012 Fix helpers `Chart` type
- #12010 Type fixes for time adapters
Documentation
- #12005 Correct broken link in animations.md
- #11997 Update linear-step-size.md
Development
- #12036 chore: bump to v4.4.8
Thanks to @ etimberg, @ joshkel, @ marisst, @ pensono and @ prems51
4.4.7 - 2024-12-01
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Types
- #11521 fix: correct typing for doughnut, pie, and polarArea charts
- #11948 Export TRBL from geometric
Documentation
- #11968 Add documentation about setting default tooltip fonts
- #11962 Show correct title in multi series pie chart example
Development
- #11969 Chore: bump version to 4.4.7
- #11959 Bump cross-spawn from 6.0.5 to 6.0.6
- #11501 Simplify check undefinded
Thanks to @ Connormiha, @ DustinEwan, @ LeeLenaleee, @ dependabot and @ dependabot[bot]
4.4.6 - 2024-10-28
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Bugs Fixed
- #11938 Fix: applyStack() returned the sum of all values for hidden dataset indices, which causes incorrect animations when showing/hiding stacked datasets.
Development
- #11943 chore: version bump for 4.4.6 release
- #11933 Fix 404 to samples in release drafter
Thanks to @ DeyLak, @ LeeLenaleee and @ etimberg
4.4.5 - 2024-10-15
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Bugs Fixed
- #11927 Don't apply default colors in the colors plugin when defaults are used
- #11907 Avoid error if borderOpts.dash is undefined
- #11882 Fix initial dataset stacks
Types
- #11931 Allow array's in backgroundColor defaults and add hover background and border color to defaults
Documentation
- #11930 Fix typo in time.md
Development
- #11932 Bump package version to 4.4.5
- #11875 Bump socket.io from 4.6.1 to 4.7.5
Thanks to @ HieroglypH, @ LeeLenaleee, @ dependabot, @ dependabot[bot] and @ dregad
4.4.4 - 2024-08-20
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Bugs Fixed
- #11873 Check if range method exists on element before executing it
- #11863 Return false from the average tooltip positioner on no valid data
- #11858 Bugfix/issue 11804 tooltip show for all invisible
- #11851 fix: Unset _resizeBeforeDraw before _resize() call to avoid possible recursion
- #11844 fix issue #11717
- #11788 Fix drawing angle lines on reversed radial scale
Types
- #11867 fix(types): exclude DeepPartial<unknown[]> from ChartOptions interface
- #11862 fix(types): add xCenter and yCenter properties to RadialLinearScale interface
- #11817 Remove box padding from legend types
- #11796 Add fit method to LegendElement interface
- #11780 types: Allow passing undefined for chart options
Documentation
- #11871 Add radial linear scale to docs section of samples
- #11823 Update OffscreenCanvas documentation, as it is widely available now
- #11781 Fix some typos
Development
- #11874 Bump package version to 4.4.4
Thanks to @ CatchABus, @ LeeLenaleee, @ MichelHMachado, @ artus9033, @ huqingkun, @ jdufresne and @ joliss
4.4.3 - 2024-05-17
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
- #11754 Fix error when object prototype is frozen
Bugs Fixed
- #11764 do not attempt to clear canvas if one does not exist
- #11755 #11450 hide bar by dataindex
- #11690 Create parsed object with correct keys
- #11707 platform.isAttached should return false if canvas is false-y
Documentation
- #11762 Update license year
Development
- #11776 Bump to 4.4.3
- #11773 Bump pnpm/action-setup from 3.0.0 to 4.0.0
- #11720 Bump follow-redirects from 1.15.4 to 1.15.6
Thanks to @ DAcodedBEAT, @ EricWittrock, @ LeeLenaleee, @ LiamSwayne, @ dependabot and @ dependabot[bot]
4.4.2 - 2024-02-28
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Bugs Fixed
- #11685 addListener and removeListener should be only invoked on truthy values
- #11682 fix #11503, autoskipping 0 tick when min is below 0
- #11616 fix(#11615): fix calculating caretX position on stacked bar with index interaction.
Types
- #11662 bugfix #10896 - Changed 'r' to optional for BubbleChart
Documentation
- #11674 docs(types): fix description in index.d.ts
- #11614 Add extra calrification for html legend
Development
- #11689 Bump to 4.4.2
- #11664 Bump pnpm/action-setup from 2.4.0 to 3.0.0
- #11657 Bump release-drafter/release-drafter from 5 to 6
- #11650 Bump dorny/paths-filter from 2 to 3
- #11636 Bump socket.io-parser from 4.2.2 to 4.2.4
- #11635 Bump follow-redirects from 1.15.2 to 1.15.4
- #11633 Update pnpm lockfile
Thanks to @ DAcodedBEAT, @ LeeLenaleee, @ Megaemce, @ dependabot, @ dependabot[bot], @ mirumirumi, @ smoonsf and @ waszkiewiczja
4.4.1 - 2023-12-04
Essential Links
- npm
- Migration guide
- Docs
- API
- Samples
Bugs Fixed
- #11605 Update font spec type
- #11596 Tooltip fixes (getLabelAndValue on null controller, null getParsed)
- #11588 fix: Guard access to window in helpers.dom.ts for browserless rendering
- #11577 Fix backdrop padding
- #11488 Change type of mode in chart.update(mode)
Types
- #11605 Update font spec type
- #11572 fix: Property platform missing from chart configuration typings
- #11569 fix: pass Plugin TType down to hooks chart arg
- #11488 Change type of mode in chart.update(mode)
Documentation
- #11562 Fix migration docs links
- #11483 docs: Fix typo for documentation of plugins.tooltip.textDirection
Development
- #11606 Bump 4.4.1
- #11599 Remove size limit from CI
- #11570 Replace deprecated command with environment file
- #11560 Bump actions/setup-node from 3 to 4
- #11490 fix: simplify check hasFunction
Thanks to @ CatchABus, @ Cazka, @ Connormiha, @ LeeLenaleee, @ Sengulair, @ bboy-chocomint, @ dependabot, @ dependabot[bot], @ jongwooo, @ joshkel and

Snyk has created this PR to upgrade chart.js from 4.0.1 to 4.5.0. See this package in npm: chart.js See this project in Snyk: https://app.snyk.io/org/joshabar/project/d375c2e2-a7f8-4df9-95ad-ce585b869760?utm_source=github&utm_medium=referral&page=upgrade-pr

vercel · 2025-07-13T09:37:17Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
atbmhttt-ssrf-web-demo	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jul 13, 2025 9:37am
fbfood-is335-demo	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jul 13, 2025 9:37am

vercel bot deployed to Preview – fbfood-is335-demo July 13, 2025 09:37 View deployment

vercel bot deployed to Preview – atbmhttt-ssrf-web-demo July 13, 2025 09:37 View deployment

[Snyk] Upgrade chart.js from 4.0.1 to 4.5.0 #30

Are you sure you want to change the base?

[Snyk] Upgrade chart.js from 4.0.1 to 4.5.0 #30

Uh oh!

Conversation

mytamDo commented Jul 13, 2025

Snyk has created this PR to upgrade chart.js from 4.0.1 to 4.5.0.

Essential Links

Enhancements

Bugs Fixed

Types

Documentation

Development

Essential Links

Bugs Fixed

Documentation

Development

Essential Links

Bugs Fixed

Types

Documentation

Development

Essential Links

Types

Documentation

Development

Essential Links

Bugs Fixed

Development

Essential Links

Bugs Fixed

Types

Documentation

Development

Essential Links

Bugs Fixed

Types

Documentation

Development

Essential Links

Bugs Fixed

Documentation

Development

Essential Links

Bugs Fixed

Types

Documentation

Development

Essential Links

Bugs Fixed

Types

Documentation

Development

Uh oh!

vercel bot commented Jul 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

vercel bot commented Jul 13, 2025 •

edited

Loading