Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump jquery and bootstrap in /001-StarAdmin-Free-Bootstrap-Admin-Template-master #27

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2023

Bumps jquery and bootstrap. These dependencies needed to be updated together.
Updates jquery from 3.2.1 to 3.6.4

Release notes

Sourced from jquery's releases.

jQuery 3.6.4 Released: Selector Forgiveness

https://blog.jquery.com/2023/03/08/jquery-3-6-4-released-selector-forgiveness/

jQuery supports CSS.supports in jQuery 3.6.3

https://blog.jquery.com/2022/12/20/jquery-3-6-3-released-a-quick-selector-fix/

jQuery 3.6.2 :has arrived!

https://blog.jquery.com/2022/12/13/jquery-3-6-2-released/

jQuery 3.6.1 Maintenance Release

https://blog.jquery.com/2022/08/26/jquery-3-6-1-maintenance-release/

jQuery 3.6.0 Released!

https://blog.jquery.com/2021/03/02/jquery-3-6-0-released/

jQuery 3.5.0 Released!

See the blog post: https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ and the upgrade guide: https://jquery.com/upgrade-guide/3.5/

NOTE: Despite being a minor release, this update includes a breaking change that we had to make to fix a security issue ( CVE-2020-11022). Please follow the blog post & the upgrade guide for more details.

Commits
  • 2f0ac82 3.6.4
  • 25ee194 Release: add support for md5 sums in windows
  • dbe09e3 Build: Update Sizzle from 2.3.9 to 2.3.10
  • a0d68b8 Build: Updating the 3.6-stable version to 3.6.4-pre.
  • 81d5bd1 Build: remove stale Insight package from custom builds
  • 8989500 Selector: Update Sizzle from 2.3.8 to 2.3.9
  • 2c5b47c Build: Updating the 3.x-stable version to 3.6.3-pre.
  • 2215119 Release: update authors
  • 0d9fae4 Build: Limit permissions for GitHub workflows
  • f4809f9 Build: Test on Node.js 18 & 19, stop testing on Node 12
  • Additional commits viewable in compare view

Updates bootstrap from 4.0.0-alpha.6 to 4.0.0-beta

Release notes

Sourced from bootstrap's releases.

v4.0.0-beta

It's a beta! Holy crap this took forever. Thanks for sticking with me on this one—means a lot, y'all <3.


Highlights!

  • Dropped Normalize.css as a dependency, forking some of it and remixing it with our own Reboot for a more stable normalization approach.
  • Update navbar responsive behaviors to be mobile first, use a new class name .navbar-expand instead of .navbar-toggleable, remove toggler position modifiers (relies on flex utils now), and fix a handful of bugs.
  • Stabilize some grid behaviors and update the docs.
  • Updated the grid to drop push, pull, and offset in favor of new .order- modifiers and margin utilities.
  • Renamed tons of variables (see #22414 and #22092) for a more consistent naming scheme.
  • Removed remaining cursor: pointers to restore browser defaults and better indicate actions vs hyperlinks.
  • Renamed flexbox order utilities to better match utility naming scheme of .property-value.
  • Restored Alpha 5's placement of _custom.scss in our import order.
  • Rewrote display and responsive utilities to de-dupe a bunch of functionality.
  • Removed Gruntfile and docs from package manager builds.
  • Overhauled our color system with new Sass maps, variables, classes, and component variants.
  • Updated browser support to bring ranges up to more recent versions.
  • Added a bash script for linting unused variables.
  • Moved jQuery and Popper to peerDependencies as they're not requirements for every part of Bootstrap.

Be sure to read the full ship list.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps [jquery](https://github.com/jquery/jquery) and [bootstrap](https://github.com/twbs/bootstrap). These dependencies needed to be updated together.

Updates `jquery` from 3.2.1 to 3.6.4
- [Release notes](https://github.com/jquery/jquery/releases)
- [Commits](jquery/jquery@3.2.1...3.6.4)

Updates `bootstrap` from 4.0.0-alpha.6 to 4.0.0-beta
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v4.0.0-alpha.6...v4.0.0-beta)

---
updated-dependencies:
- dependency-name: jquery
  dependency-type: indirect
- dependency-name: bootstrap
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
0 participants