You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@zeppelin.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/04/13 14:26:35 UTC
[PR] Bump jquery and angular-xeditable in /zeppelin-web [zeppelin]
dependabot[bot] opened a new pull request, #5214:
URL: https://github.com/apache/zeppelin/pull/5214
Bumps [jquery](https://github.com/jquery/jquery) to 3.7.1 and updates ancestor dependency [angular-xeditable](https://github.com/vitalets/angular-xeditable). These dependencies need to be updated together.
Updates `jquery` from 1.12.4 to 3.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/jquery/jquery/releases">jquery's releases</a>.</em></p>
<blockquote>
<h2>jQuery 3.7.1 Released: Reliable Table Row Dimensions</h2>
<p><a href="https://blog.jquery.com/2023/08/28/jquery-3-7-1-released-reliable-table-row-dimensions/">https://blog.jquery.com/2023/08/28/jquery-3-7-1-released-reliable-table-row-dimensions/</a></p>
<h2>jQuery 3.7.0: Staying in Order</h2>
<p><a href="https://blog.jquery.com/2023/05/11/jquery-3-7-0-released-staying-in-order/">https://blog.jquery.com/2023/05/11/jquery-3-7-0-released-staying-in-order/</a></p>
<h2>jQuery 3.6.4 Released: Selector Forgiveness</h2>
<p><a href="https://blog.jquery.com/2023/03/08/jquery-3-6-4-released-selector-forgiveness/">https://blog.jquery.com/2023/03/08/jquery-3-6-4-released-selector-forgiveness/</a></p>
<h2>jQuery supports CSS.supports in jQuery 3.6.3</h2>
<p><a href="https://blog.jquery.com/2022/12/20/jquery-3-6-3-released-a-quick-selector-fix/">https://blog.jquery.com/2022/12/20/jquery-3-6-3-released-a-quick-selector-fix/</a></p>
<h2>jQuery 3.6.2 :has arrived!</h2>
<p><a href="https://blog.jquery.com/2022/12/13/jquery-3-6-2-released/">https://blog.jquery.com/2022/12/13/jquery-3-6-2-released/</a></p>
<h2>jQuery 3.6.1 Maintenance Release</h2>
<p><a href="https://blog.jquery.com/2022/08/26/jquery-3-6-1-maintenance-release/">https://blog.jquery.com/2022/08/26/jquery-3-6-1-maintenance-release/</a></p>
<h2>jQuery 3.6.0 Released!</h2>
<p><a href="https://blog.jquery.com/2021/03/02/jquery-3-6-0-released/">https://blog.jquery.com/2021/03/02/jquery-3-6-0-released/</a></p>
<h2>jQuery 3.5.0 Released!</h2>
<p>See the blog post:
<a href="https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/">https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/</a>
and the upgrade guide:
<a href="https://jquery.com/upgrade-guide/3.5/">https://jquery.com/upgrade-guide/3.5/</a></p>
<p><strong>NOTE:</strong> Despite being a minor release, this update includes a breaking change that we had to make to fix <a href="https://github.com/advisories/GHSA-gxr4-xjj5-5px2">a security issue</a> ( <a href="https://nvd.nist.gov/vuln/detail/CVE-2020-11022"><code>CVE-2020-11022</code></a>). Please follow the blog post & the upgrade guide for more details.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jquery/jquery/commit/f79d5f1a337528940ab7029d4f8bbba72326f269"><code>f79d5f1</code></a> 3.7.1</li>
<li><a href="https://github.com/jquery/jquery/commit/399b201bb3143a3952894cf3489b4848fc003967"><code>399b201</code></a> Release: revert change that broke release</li>
<li><a href="https://github.com/jquery/jquery/commit/f85d521cdeeb3c6d3f4563a06dba8be793e26ef0"><code>f85d521</code></a> Release: update authors</li>
<li><a href="https://github.com/jquery/jquery/commit/763ade6dda092709b36d97491951bcae415d91d1"><code>763ade6</code></a> Build: Generate the slim build on <code>grunt</code> & run <code>compare_size</code> on it</li>
<li><a href="https://github.com/jquery/jquery/commit/a288838c6f2ddd08c41e09b4672ad39a03822b04"><code>a288838</code></a> CSS: Make the reliableTrDimensions support test work with Bootstrap CSS (3.x ...</li>
<li><a href="https://github.com/jquery/jquery/commit/87467a6f62b5fbd820ab387836e2a6fb186cbc1b"><code>87467a6</code></a> Selector: Only attach the unload handler in IE & Edge Legacy</li>
<li><a href="https://github.com/jquery/jquery/commit/3c18c1f33cfc69e1e1bd1410ab5176b2abc5fe3a"><code>3c18c1f</code></a> Build: Make sure <code>*.cjs</code> & <code>*.mjs</code> files use UNIX line endings as well</li>
<li><a href="https://github.com/jquery/jquery/commit/72ae577c948f3577894bc7430a264ec27d9c2ba3"><code>72ae577</code></a> Build: switch preferred email for timmywil</li>
<li><a href="https://github.com/jquery/jquery/commit/a370d7df4232c98f536bd97c049a0445d75c0f9e"><code>a370d7d</code></a> Build: Build: Bump actions/checkout from 3.5.2 to 3.5.3</li>
<li><a href="https://github.com/jquery/jquery/commit/4a29888c759d0ca9a3ef7be90a2d7936cc48f5c8"><code>4a29888</code></a> Docs: Fix typos found by codespell</li>
<li>Additional commits viewable in <a href="https://github.com/jquery/jquery/compare/1.12.4...3.7.1">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~timmywil">timmywil</a>, a new releaser for jquery since your current version.</p>
</details>
<br />
Updates `angular-xeditable` from 0.1.12 to 0.10.2
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/vitalets/angular-xeditable/blob/master/CHANGELOG.txt">angular-xeditable's changelog</a>.</em></p>
<blockquote>
<h1>Angular-xeditable changelog</h1>
<p>Version 0.10.2 Nov 1, 2019</p>
<p>[bug] Comment out console.log</p>
<p>Version 0.10.1 Oct 22, 2019</p>
<hr />
<p>[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/750">#750</a>] Fix rendering of editable ui-bootstrap popover (ckosloski)
[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/754">#754</a>] Fix radiolist issue with string values (ckosloski)
[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/753">#753</a>] Change main entry to index.js and export module name (madflow)
[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/755">#755</a>] Fix activationEvent of focus doesn't allow editing (ckosloski)
[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/758">#758</a>] Control deselects when navigating outside the area - mouseup on outside (drsmog)</p>
<p>Version 0.10.0 Jun 24, 2019</p>
<hr />
<p>[enh <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/747">#747</a>] Add Bootstrap 4 template (ckosloski)
[enh <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/745">#745</a>] Allow users to disable checkboxes based on a condition (lohxx)</p>
<p>Version 0.9.0 Jul 20, 2018</p>
<hr />
<p>[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/732">#732</a>] Fix starter template (ckosloski)
[enh <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/729">#729</a>] Add datepicker-template-url support for editableBsDate (ckosloski)
[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/716">#716</a>] Update bsdate.js (heart4hackers)
[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/715">#715</a>] Add ng-bind for input group (ckosloski)
[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/709">#709</a>] Fix editable-combodate for single date fields (ckosloski)</p>
<p>Version 0.8.1 Nov 14, 2017</p>
<hr />
<p>[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/702">#702</a>] Fix Node/Phantomjs/Karma syntax error (ckosloski)
[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/690">#690</a>] Fix e-formclass for textarea (ckosloski)
[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/679">#679</a>] Fix combodate not updating value if the combobox is not changed (chiu0602)</p>
<p>Version 0.8.0 Jun 6, 2017</p>
<hr />
<p>[enh <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/659">#659</a>] Add no buttons support for ui-select (ckosloski)
[enh <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/657">#657</a>] Add support for ui-boostrap popover (ckosloski)</p>
<p>Version 0.7.1 Apr 24, 2017</p>
<hr />
<p>[bug <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/649">#649</a>] Update bsdate to work with no buttons and submit on blur (ckosloski)</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/vitalets/angular-xeditable/commit/23a9364fc018d78b7a7fe316e4ca10a4bbef7d99"><code>23a9364</code></a> Release 0.10.2</li>
<li><a href="https://github.com/vitalets/angular-xeditable/commit/1e9b6f28b43b272d8955f717dbe233b77fe25822"><code>1e9b6f2</code></a> Comment out console.log</li>
<li><a href="https://github.com/vitalets/angular-xeditable/commit/f1275c8cbc2f968216db9ef02b6880bc3c2831f0"><code>f1275c8</code></a> npm audit fixe</li>
<li><a href="https://github.com/vitalets/angular-xeditable/commit/659427a404e8fede13b9967e2eca895aa87f3851"><code>659427a</code></a> Release 0.10.1</li>
<li><a href="https://github.com/vitalets/angular-xeditable/commit/dcb5b818d34c8b01fe7fb5bfb891f7785668626d"><code>dcb5b81</code></a> Control deselects when navigating outside the area - mouseup on outside <a href="https://redirect.github.com/vitalets/angular-xeditable/issues/757">#757</a> ...</li>
<li><a href="https://github.com/vitalets/angular-xeditable/commit/ca6d768a74f341df2ab6fe498a09fde24ec66926"><code>ca6d768</code></a> Fix activationEvent of focus doesn't allow editing.</li>
<li><a href="https://github.com/vitalets/angular-xeditable/commit/444c3320f25f3e836eb51636c7da0bdeac6f1571"><code>444c332</code></a> Change main entry to index.js and export module name (<a href="https://redirect.github.com/vitalets/angular-xeditable/issues/753">#753</a>)</li>
<li><a href="https://github.com/vitalets/angular-xeditable/commit/eca23c91b4f1674d17b978000d97871a3c25852c"><code>eca23c9</code></a> Fix radiolist issue with string values</li>
<li><a href="https://github.com/vitalets/angular-xeditable/commit/ee9c195cb0ec0daaa61927c8971fb5757ce208a5"><code>ee9c195</code></a> Fix rendering of editable ui-bootstrap popover</li>
<li><a href="https://github.com/vitalets/angular-xeditable/commit/fca351be91e9f71f8a15a3f9c73a6f6ef505ce35"><code>fca351b</code></a> Release 0.10.0</li>
<li>Additional commits viewable in <a href="https://github.com/vitalets/angular-xeditable/compare/0.1.12...0.10.2">compare view</a></li>
</ul>
</details>
<details>
<summary>Install script changes</summary>
<p>This version adds <code>prepublish</code> script that runs during installation. Review the package contents before updating.</p>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/zeppelin/network/alerts).
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump jquery and angular-xeditable in /zeppelin-web [zeppelin]
Posted by "jongyoul (via GitHub)" <gi...@apache.org>.
jongyoul closed pull request #5214: Bump jquery and angular-xeditable in /zeppelin-web
URL: https://github.com/apache/zeppelin/pull/5214
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump jquery and angular-xeditable in /zeppelin-web [zeppelin]
Posted by "jongyoul (via GitHub)" <gi...@apache.org>.
jongyoul commented on PR #5214:
URL: https://github.com/apache/zeppelin/pull/5214#issuecomment-4295002324
Closing this older individual Dependabot security PR now that #5213 has been merged and grouped security PRs are starting to appear by path (for example #5219). We expect Dependabot security updates to come through as one grouped PR per path going forward.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump jquery and angular-xeditable in /zeppelin-web [zeppelin]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] commented on PR #5214:
URL: https://github.com/apache/zeppelin/pull/5214#issuecomment-4295002690
OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@zeppelin.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org