Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade tailwind-merge from 1.8.1 to 1.14.0 #4

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

hartmutobendorf
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https:/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade tailwind-merge from 1.8.1 to 1.14.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 84 versions ahead of your current version.

  • The recommended version was released on a year ago.

Release notes
Package name: tailwind-merge
  • 1.14.0 - 2023-07-16

    New Features

    • Improve support for arbitrary values by @ dcastil in #263
      • Previously, tailwind-merge checked the content of the arbitrary value portion of a class in most cases to understand whether the type of the arbitrary value is correct (e.g. it checked for number followed by length unit for the length type). That lead to the issue that a class like mt-[calc(theme(fontSize.4xl)/1.125)] would not be recognized correctly because no length unit is present in the arbitrary value.
      • I changed the check of the arbitrary value to also pass when a calc(), min(), max() and clamp() function is used in the arbitrary value.
      • In ambiguous cases, you can use data type labels to mark the type of a class. Read more
      • Moreover, I removed the check where the type of the arbitrary value is unambiguous. In the class mt-[…] the arbitrary value can only be a length, so I don't check for it. A consequence of this is that if you use non-Tailwind classes like mt-[this-is-totally-not-tailwind], tailwind-merge will recognize it as a Tailwind class from now on. Please don't use classes that look like Tailwind classes with arbitrary value but aren't Tailwind classes with tailwind-merge (in default config) to prevent incorrect merging behavior.

    Bug Fixes

    • Fix col-span-full class missing in default config by @ dcastil in #267
    • Fix arbitrary value with no present length unit not being recognized by @ dcastil in #263

    Documentation

    • Add missing info about where to call config functions to docs by @ dcastil in #264

    Full Changelog: v1.13.2...v1.14.0

  • 1.14.0-dev.fb1fc1f9d106f2184e24949e6e6d1a67904706fa - 2023-09-18
  • 1.14.0-dev.f3201afb5b6254093456ee83e2959b4b488b876a - 2023-10-29
  • 1.14.0-dev.f31447b4f4dd875b9c5ad07c7de88d6a350a67fd - 2023-08-19
  • 1.14.0-dev.eb09d5273d14c9287afcd3d789243d191cccbb1b - 2023-09-17
  • 1.14.0-dev.e7c8c8a2d616a1d16d94782a3ba1d8f1df8861af - 2023-10-29
  • 1.14.0-dev.e61df84bbefcc0987d84580c72ddb6a7418869d3 - 2023-07-19
  • 1.14.0-dev.df30d7abe887581042890b1e867d8e796603e69d - 2023-08-19
  • 1.14.0-dev.d1a447ccfabda92a5397b782a3e3ef991c5ce454 - 2023-09-01
  • 1.14.0-dev.cf4cd80bb3d311dd739dcdef3279012bd8a0996e - 2023-08-19
  • 1.14.0-dev.cb8fabe290f2fb6c470303cbdfba7be79d59af27 - 2023-08-19
  • 1.14.0-dev.b2d1c1b614ba1c215b24745ffdf93d8b75367187 - 2023-08-19
  • 1.14.0-dev.a96242821276bcf0de6e34301260b6aa50d57974 - 2023-10-19
  • 1.14.0-dev.a6f27b31c8defcb84d560114432823c6339fe975 - 2023-10-29
  • 1.14.0-dev.91b7d6708ae9ffffca05c98f88c991bd51126d4a - 2023-08-20
  • 1.14.0-dev.82f5ce30545f0692fade54fa2ff63f13259ef58e - 2023-10-01
  • 1.14.0-dev.788822bd2481685db619830556841538eecf967c - 2023-07-16
  • 1.14.0-dev.772ffb9bcb2139bed8a504dd4a0e23368da7867b - 2023-10-01
  • 1.14.0-dev.6f97f4038da635d9879a2f6e45d10ffeb145da0b - 2023-09-01
  • 1.14.0-dev.650405d4a8fbdcef0e4bbf61d33c8e757a08c182 - 2023-08-20
  • 1.14.0-dev.602e1aa9e0e31050cf46960c8c8632455eef7fa8 - 2023-08-18
  • 1.14.0-dev.52e6c9bcced8c08ff62d0db089d9dddd84f3ca04 - 2023-10-01
  • 1.14.0-dev.472f0ca2606e2102f9ce666702a396925d290a59 - 2023-10-01
  • 1.14.0-dev.31dcd2966ebb0e6901602609db1759403f05b251 - 2023-08-27
  • 1.14.0-dev.18e2c7150a361af8fb7e76c0e23289a676ec0bec - 2023-08-19
  • 1.14.0-dev.052e89b08d31049d43d154596ad898d4da366d21 - 2023-08-26
  • 1.14.0-dev.034751a1a1a59adb89b31cc14586c9aa4fd8c0f4 - 2023-08-20
  • 1.14.0-dev.01a1c48904cc7f801870f084fb57f8ccf6c56fad - 2023-08-19
  • 1.13.2 - 2023-06-15

    Bug Fixes

    Documentation

    Full Changelog: v1.13.1...v1.13.2

    Thanks to @ bluetch for sponsoring tailwind-merge! ❤️

  • 1.13.2-dev.fb93d123133fe688cb3be73e59b09a7b9ee2b09e - 2023-06-22
  • 1.13.2-dev.d66158ac70c63fb6dbbf0ba29546bf5dbc5adcbd - 2023-06-15
  • 1.13.2-dev.a759d253501e428446f3b882a388e9f06826d351 - 2023-07-10
  • 1.13.2-dev.93e694415c99e17dcfedbebb304d17e9af4d6059 - 2023-06-22
  • 1.13.2-dev.914203ca146b827854bf7119e8449f835e943dd3 - 2023-07-11
  • 1.13.2-dev.909cb1de2d75e032f503487d3658fd2508d536cd - 2023-06-30
  • 1.13.2-dev.2bd3b98a41a701ba43ea4a6f3e7139b86cc45dc9 - 2023-07-01
  • 1.13.2-dev.01e855712ec348c4ebe80dd82d40436d22f4fcb1 - 2023-06-22
  • 1.13.1 - 2023-06-08

    Bug Fixes

    Full Changelog: v1.13.0...v1.13.1

  • 1.13.1-dev.fec1420b63f705d591408fc1ca0dfc040891d00b - 2023-06-10
  • 1.13.1-dev.f35b26986960c15c33ba2065b8e258e45aba1e1b - 2023-06-10
  • 1.13.1-dev.e0ddd7ccc90a3d017fdbd73594c389dddb670292 - 2023-06-08
  • 1.13.1-dev.bfdf1c3bbf7fb8a2d409b04e22e4c480e5c3a8f1 - 2023-06-10
  • 1.13.1-dev.ba53216d1c7c9f0cf076739a581785c249153feb - 2023-06-10
  • 1.13.1-dev.b57cd92df90dd5f64c6c77166b674823a8dc45e4 - 2023-06-10
  • 1.13.1-dev.ac327bdf407d371982bf01ecb76012ebccf69315 - 2023-06-14
  • 1.13.1-dev.83c525eaecb314ed870ee2c829f45a781c59963f - 2023-06-14
  • 1.13.1-dev.0430cf56d93625a41db9fbf51bf250739b26b2c8 - 2023-06-14
  • 1.13.1-dev.02e86c75a2ae4264534b2f60eee238979cc49936 - 2023-06-10
  • 1.13.0 - 2023-06-01

    This release focuses on improvements to the docs.

    Bug Fixes

    Documentation

    • Add intro video from Simon Vrachliotis to docs by @ dcastil in #239
      • @ simonswiss made an intro video to tailwind-merge which I added to the docs. Check it out here!
    • Add docs about when to use tailwind-merge by @ dcastil in #230
      • I added a new page to the docs about when and how to use tailwind-merge which should help you to decide whether you should use it and what alternative approaches exist.
    • Make it clearer in docs that tailwind-merge supports composition of class strings by @ dcastil in #229

    Other

    • Add npm package provenance by @ dcastil in #219
      • GitHub introduced a new security feature to verify which source commit and build file were used for a specific npm package version. tailwind-merge now publishes provenance signatures alongside all releases on npm. Read more on the GitHub blog.

    Full Changelog: v1.12.0...v1.13.0

  • 1.13.0-dev.da6fa886447c5bdf579861fb960153adcb732891 - 2023-06-08
  • 1.13.0-dev.2ad9e7521cdef3a874f6f019d41b30216b3cfe97 - 2023-06-01
  • 1.12.0 - 2023-04-05
  • 1.12.0-dev.c87b26f901b2ae0caa74b153c2c33c35459708a2 - 2023-05-16
  • 1.12.0-dev.c78b7efb26f7036a5b4c4770ab3200fa83e57037 - 2023-06-01
  • 1.12.0-dev.bf1ecd25027772e637cac39d82ccc6c5b5c42adb - 2023-06-01
  • 1.12.0-dev.93b42f67c19eab3768c5de395888275e444596e8 - 2023-05-02
  • 1.12.0-dev.87c99a601718a65120e4c05eee9273371c6c2613 - 2023-04-23
  • 1.12.0-dev.6a01636799057f770759cdd415109b5a235ce896 - 2023-05-20
  • 1.12.0-dev.4bab65da6e0a1adc2a1916c5c33c95501bb44dac - 2023-05-02
  • 1.12.0-dev.484bb8e141f63be03efef9bc10641e82f775f1d3 - 2023-05-04
  • 1.12.0-dev.32711c49d544365f453c2aca45c73735a035e0a3 - 2023-04-23
  • 1.12.0-dev.2fd82afaa3e9704236a3c7cd0e985511b16b0ef2 - 2023-04-05
  • 1.12.0-dev.278b1dcc9bb93cfd9985f157f892a859537566e7 - 2023-05-02
  • 1.12.0-dev.21e2b9d5bb38a30d4ad44f6821444ddb5f93a01f - 2023-05-31
  • 1.12.0-dev.19eba3581bf392051994eae7bee636a607562fef - 2023-05-20
  • 1.11.0 - 2023-03-29
  • 1.11.0-dev.f8d1de8815f0660489973767f7405313f1eb733e - 2023-04-01
  • 1.11.0-dev.d17ec3a5f570776ddc791642bf8199ea52179d33 - 2023-04-02
  • 1.11.0-dev.a8af8d17fd1cde92f7eb69ddef8240f5eb2a1cf4 - 2023-03-29
  • 1.11.0-dev.6a4efc9b0e6c1310afd2fadf5898d577ce7e239a - 2023-04-01
  • 1.10.0 - 2023-02-20
  • 1.10.0-dev.b00af3ce242ce9d355f9a19b0a83836c52157df4 - 2023-03-08
  • 1.10.0-dev.626ccb0b11d01a85182237154a7dc201faa5332d - 2023-03-13
  • 1.10.0-dev.36393aabdfa1f7fde1b10b13cda0e96a753f3f04 - 2023-02-20
  • 1.10.0-dev.0af954654ffe963d3585a7601c27f2b817cc27aa - 2023-03-29
  • 1.9.1 - 2023-02-04
  • 1.9.1-dev.c186e6fa0cefecef0df55cae17fa4c87abbb514f - 2023-02-20
  • 1.9.1-dev.8daac7f6261e0904a956428143dc543af49200bd - 2023-02-04
  • 1.9.0 - 2023-01-29
  • 1.9.0-dev.df972840b242bde99d5e0c00bcaa2f474284aced - 2023-02-02
  • 1.9.0-dev.b7452f6249886e8d99990e8c73ff86d6023b457d - 2023-02-04
  • 1.9.0-dev.8ca653d529fef0440ef360833fb3b4255b6fc3b6 - 2023-02-01
  • 1.9.0-dev.686d4073c20a64302a49a7df3a23f71822f4cb47 - 2023-02-04
  • 1.9.0-dev.170e2ceefcffe3181e2bd30dfb74d41a5a0f353e - 2023-01-29
  • 1.8.1 - 2022-12-23
from tailwind-merge GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade tailwind-merge from 1.8.1 to 1.14.0.

See this package in npm:
tailwind-merge

See this project in Snyk:
https://app.snyk.io/org/hartmutobendorf/project/6328e112-98b4-4be1-a533-910f2301044d?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants