[Snyk] Upgrade zustand from 4.3.9 to 4.4.6 #23
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade zustand from 4.3.9 to 4.4.6. See this package in npm: https://www.npmjs.com/package/zustand See this project in Snyk: https://app.snyk.io/org/sammytezzy/project/966f2c8d-e98f-4366-9980-1b3b4b9e9513?utm_source=github&utm_medium=referral&page=upgrade-pr
|
|
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade zustand from 4.3.9 to 4.4.6.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
npm:string:20170907
Why? Mature exploit, CVSS 5.3
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: zustand
-
4.4.6 - 2023-11-02
- Update export types by @ dbritto-dev in #2170
- @ cheatkey made their first contribution in #2147
- @ frixaco made their first contribution in #2166
-
4.4.5 - 2023-10-31
- fix: importing CJS React in ESM by @ dai-shi in #2154
- Apply publint recommendations by @ dbritto-dev in #2157
- @ plrs9816 made their first contribution in #2137
- @ Brammm made their first contribution in #2139
- @ sobies93 made their first contribution in #2142
-
4.4.4 - 2023-10-21
- fix(build): patch entry points zustand/shallow for CJS by @ dai-shi in #2128
-
4.4.3 - 2023-10-05
- fix(shallow): Extract shallow vanilla and react by @ dbritto-dev in #2097
- fix(types): mitigate devtools typing by @ dai-shi in #2099
-
4.4.2 - 2023-10-02
- fix(types)(middleware/devtools): avoid copying types by @ dai-shi in #1991
- fix(traditional): make defaultEqualityFn optional in TS Types by @ charkour in #2060
- feat: add useShallow by @ FaberVitale in #2090
- @ aykutkardas made their first contribution in #1993
- @ michelts made their first contribution in #1997
- @ elusive made their first contribution in #2001
- @ mayank1513 made their first contribution in #2015
- @ fdb made their first contribution in #2029
- @ tmkx made their first contribution in #2032
- @ OshriAsulin made their first contribution in #2028
- @ ivanquirino made their first contribution in #2047
- @ stavkamil made their first contribution in #2071
- @ NaamuKim made their first contribution in #2088
- @ FaberVitale made their first contribution in #2090
-
4.4.1 - 2023-08-06
- fix(types): accept undefined equalityFn for the deprecated useStore by @ dai-shi in #1972
- fix: improve warning for deprecated equalityFn by @ dai-shi in #1976
- @ kangju2000 made their first contribution in #1969
-
4.4.0 - 2023-08-01
-
4.3.9 - 2023-07-04
from zustand GitHub release notesv4.4.5 has an issue with some TypeScript configs about module resolution. It should be fixed now. Thanks for the patience.
What's Changed
New Contributors
Full Changelog: v4.4.5...v4.4.6
Hopefully, it should fix some issues with Node.js environment including Next.js.
What's Changed
New Contributors
Full Changelog: v4.4.4...v4.4.5
There was a tiny issue in v4.4.3, which broke with some bundlers, which this version fixes.
What's Changed
Full Changelog: v4.4.3...v4.4.4
The changes in v4.4.2 were troublesome for some users. This version should fix/mitigate such cases.
What's Changed
Full Changelog: v4.4.2...v4.4.3
This adds
useShallowhook to cover some use cases that are deprecated with v4.4.0 change. Check out the guide.Migration Guide
#1991 requires something like below if you are using the
devtoolsmiddleware and TypeScript.import { devtools } from 'zustand/middleware' + import type {} from '@ redux-devtools/extension'What's Changed
New Contributors
Full Changelog: v4.4.1...v4.4.2
Fixes some issues reported with the deprecated feature in v4.4.0.
What's Changed
New Contributors
Full Changelog: v4.4.0...v4.4.1
Read more
Read more
Commit messages
Package name: zustand
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs