Update dependency swagger-ui to v3.23.11 - autoclosed #51
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![uriel-mend-app[bot]](https://avatars.githubusercontent.com/u/99661840?s=60&v=4){kind=small}
uriel-mend-app
bot
force-pushed
the
whitesource-remediate/swagger-ui-3.x
branch
from
332fd9c
to
25480a2
Compare
uriel-mend-app
bot
changed the title
uriel-mend-app
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.2.2->3.23.11By merging this PR, the issue #45 will be automatically resolved and closed:
Release Notes
swagger-api/swagger-ui
v3.23.11Compare Source
Changelog
@importchaining" vulnerability (via #5616)v3.23.10Compare Source
This release fixes two bugs: one visual issue within static documentation, and another within runtime validation for Array-typed parameters.
Changelog
<Select disabled>fortype: string+enumschemas (#5601)v3.23.9Compare Source
This release changes the default value for the
validatorUrlconfiguration option fromhttps://online.swagger.io/validatortohttps://validator.swagger.io/validator.v3.23.8Compare Source
This release fixes an issue with Swagger 2.0 required body parameter runtime validation (#5583) that was introduced in v3.23.7.
v3.23.7Compare Source
This release includes new support for display and Try-It-Out functionality of OAS 3.0
Parameter.contentvalues.Changelog
Parameter.content(#5571)43db1642019-08-27 | docs: clarify that preauthorizeApiKey works for OAS3 Bearer auth too (#5566)v3.23.6Compare Source
This release fixes a React warning originating in Swagger UI and a CSS class name collision with Bootstrap 4.0.
It also includes several in-range updates to minimum dependency versions.
Changelog
.colclass that causes collision with Bootstrap (via #5541)v3.23.5Compare Source
This release includes a fix to our Markdown parsing implementation that should resolve display issues with certain Markdown strings.
Changelog
v3.23.4Compare Source
Changelog
@kyleshockey/js-yaml->js-yaml(via #5511)npm auditresolutions (via #5509)v3.23.3Compare Source
This release resolves an undeclared dependency issue visible in
[email protected]due to usage of@babel/runtime-corejs2. No source changes were made.See #5505 for more information.
v3.23.2Compare Source
This release includes improvements to our Docker container permissions, bug fixes for OpenAPI 3.0 rendering of Responses and Request Bodies, and resolution of most
npm auditwarnings visible to consumers.Channgelog
content(via #5504)nullas a notSetValue for examplesForMediaType (via #5503)npm auditwarnings (via #5457)v3.23.1Compare Source
This release fixes a couple of minor regressions introduced in v3.23.0, and also includes improvements to our module sizes and sourcemap quality.
Changelog
Response.examples(via #5464 + #5465)Note:
[email protected]was unpublished due to a bad build being pushed to npm. It will be updated again with the next release of Swagger UI.v3.23.0Compare Source
This release includes support for OpenAPI 3.0's Examples Object within Parameter, Request Body, and Response Objects.
Changelog
Internal API notes
Several things have moved around internally.
If you make heavy use of the Plugin API, this may be of concern to you:
Parameterscomponent no longer has awrapComponentin OpenAPI 3.0. Version-specific logic is now contained within one component.ParameterRownow needsoas3Actionsandoas3Selectorsas props.Responsenow needspathandmethodas props.Responses'shouldComponentUpdatecheck has been removed, it now re-renders as the Redux store changes.RequestBodyEditorhas been heavily modified. It is no longer aware of the underlying request body or schema, and only concerns itself with the string value being edited. It will now also update its own internal state if thevalueprop given to it changes.v3.22.3Compare Source
No source changes.
This release moves Swagger UI to
[email protected].v3.22.2Compare Source
Changelog
isShowncheck to 's propexpandedlogic (via #5331)v3.22.1Compare Source
[email protected]lacked the changes that were advertised for it in that version - specifically,docExpansionsupport was missing.[email protected]is now available with the new changes. See #5294 for more information.Changelog
v3.22.0Compare Source
This release introduces a new configuration option (
withCredentials) which allows control of Swagger UI's underlying Fetch/XHR instance's credential inclusion mode. You may find this option helpful if your API requires an authentication/authorization scheme that Swagger UI doesn't directly support, but can be handled out-of-band by your browser.Also notable: GitHub Flavored Markdown table syntax is now supported in our OpenAPI 3 Markdown parser,
swagger-ui-react's underlying UI system object is now exposed in theonCompleteprop callback,react-addons-perfis removed from our dependencies to avoid BSD+Patents licensing, and we've improved how Markdown is rendered across Swagger UI.Changelog
withCredentialsconfiguration key (via #5149)v3.21.0Compare Source
This release marks the introduction of a new flavor of Swagger UI:
swagger-ui-react.This new module exports a component for use in React applications, and allows you to use any React version you'd like, without fear of colliding with Swagger UI's internal React version.
We recommend that anyone using Swagger UI within a React application migrate to this module, instead of continuing to mount Swagger UI onto a React-created DOM node by ID.
This release also includes some fixes that improve Swagger UI's handling of rare edge cases in the resolver engine.
Note: this release was also erroneously pushed out as
v3.20.10- both versions' contents are identical.Changelog
swagger-ui-reactmodule (via #5207)v3.20.10Compare Source
v3.20.9Compare Source
This release contains a security fix that addresses a cross-site scripting vulnerability. If you use Swagger UI to display untrusted OpenAPI documents, you should upgrade to this version ASAP.
This release also changes Swagger UI's
OperationSummarycomponent to better tolerate badly-formed (i.e., non-string)summaryfields.Changelog:
v3.20.8Compare Source
Summary
This release contains styling fixes, support for
x-www-form-urlencodedbodies without explicitly-defined request properties, and non-material security fixes from upstream modules.In order to take advantage of the new
X-Requested-Withheader in OAuth2 token requests, cross-origin APIs (which require CORS configuration) needs to sendAccess-Control-Allow-Headers: X-Requested-Withas part of the OPTIONS response for your token endpoint. A CORS library will handle this for you - visit https://enable-cors.org for more guidance.Changelog
X-Requested-Withto prevent browser authentication dialog (via #4934)v3.20.7Compare Source
Interface changes: none.
Changelog:
urlremote document load ifurlsis provided (via #5161)v3.20.6Compare Source
Interface changes: none.
Changelog:
allowEmptyValue+requiredinteractions (via #5142)v3.20.5Compare Source
Interface changes: None.
Changelog:
v3.20.4Compare Source
Interface changes: none.
Changelog:
urls.primaryNamefunctionality regression (via #5097)v3.20.3Compare Source
Interface changes: none.
Changelog:
v3.20.2Compare Source
Interface changes: none.
Changelog:
Schemasin OpenAPI 3 (via #5065)v3.20.1Compare Source
Private interface changes:
specSelectors.operationConsumeswas removed in favor of the newspecSelectors.consumesOptionsForselector.Changelog:
v3.20.0Compare Source
Interface changes: none.
Changelog:
.js->.jsxfile extensions (via #5014)v3.19.5Compare Source
Interface changes: A handful of Docker environment variables were added and deprecated, see #4965 and #4987 for more information.
Changelog:
xmlfork (via #4985)v3.19.4Compare Source
Interface changes: whitespaced tags and operation IDs are now percent-encoded when included in deep links. Links generated by older 3.x versions of Swagger UI should continue to work as before, but support for them will be dropped in the next major version of Swagger UI.
Changelog:
Additional work around deep linking was also made in #4960 and #4958.
v3.19.3Compare Source
This release was made specifically to fix inconsistent plugin behavior related to multiple invocations of Swagger UI, which was patched in #4923.
v3.19.2Compare Source
This release fixes a regression (#4912), in which some OpenAPI 3 definitions would not have their Servers block rendered.
v3.19.1Compare Source
Interface changes: none.
Changelog:
v3.19.0Compare Source
Interface changes: added
CONFIG_URLoption for Docker image.Changelog:
v3.18.3Compare Source
Interface changes: none.
Changelog:
testscript (via #4847)v3.18.2Compare Source
Interface changes: none.
Changelog:
v3.18.1Compare Source
Interface changes: none.
Changelog:
v3.18.0Compare Source
Interface changes:
rel="noopener noreferrer", which blocks linked pages from accessingwindow.openerand theReferrerheader.Changelog:
allowEmptyValueparameters (via #4788)updateJsonSpecwrap-action (via #4785)v3.17.6Compare Source
Interface changes: none.
Changelog:
v3.17.5Compare Source
Interface changes: none.
Changelog:
v3.17.3Compare Source
Interface changes: none.
Changelog:
v3.17.2Compare Source
Interface changes: none.
Changelog:
v3.17.1Compare Source
Interface changes:
BaseLayoutwas changed - if you've copied it into your application, you can copy over the new, simplified version.Changelog:
v3.17.0Compare Source
Interface changes: none.
Changelog:
urlsconfiguration via docker (via #4601)<OperationTag>(via #4349)v3.16.0Compare Source
Interface changes: none.
Changelog:
npm startscript (via #4572)v3.15.0Compare Source
Interface changes: Docker images are now tagged without a leading
v, e.g.3.15.0instead ofv3.15.10.Changelog:
vfrom Docker image names (via #4567)v3.14.2Compare Source
Interface changes: none.
Changelog:
titleprpoerty as the name for a model, if it is available (via #4542)v3.14.1Compare Source
Interface changes: none.
Changelog:
dompurify(via #4513)v3.14.0Compare Source
Interface changes: added
showCommonExtensionsoption.Changelog:
showCommonExtensionsoption to showpattern,minLength,maxLength,minimum, andmaximumfields for Parameters (via #4245)v3.13.6Compare Source
Fixes a regression related to parameter normalization that was causing an infinite loop; see https:/swagger-api/swagger-ui/issues/4466 and https:/swagger-api/swagger-ui/issues/4467.
v3.13.5Compare Source
Interface changes: none.
Changelog:
v3.13.4Compare Source
Interface changes: you no longer need to include the
<svg>tag in your HTML when you run Swagger-UI - the SVG data is now bundled in with the rest of the app!Changelog:
<Schemes>select list through Redux application state (via #4436)v3.13.3Compare Source
(released on Friday, April 6, 2018)
Interface changes: you can now return a Promise from a
requestInterceptororresponseInterceptorand Swagger-UI will wait for it to resolve.Changelog:
enumanddefaultin documentation (via #4191)additionalQueryStringParamsoption (via #4419)v3.13.2Compare Source
Interface changes: none.
Changelog:
MAINTAINERusage toLABEL(via #4370)v3.13.1Compare Source
Interface changes: none.
Changelog:
specanddocExpansionoptions now work together (via #4358)examplekeys are no longer placed in model displays for examples (via #4365)v3.13.0Compare Source
Interface changes: Added
onCompleteconfig option;preauthorizeApiKeyandpreauthorizeBasicinstance methods.Changelog:
onCompleteconfig option (#4322)InfoUrlandInfoBasePath(#4330)v3.12.1Compare Source
Interface changes: none.
Changelog:
data:scheme (via #4236)v3.12.0Compare Source
Interface changes: none.
Changelog:
x-examplefields and use them as initial values (via #3538)urlsanddeepLinkingoptions now play well together, by usinglocation.replaceStateto update theurls.primaryNamesetting in the browser query string (via #4181)filteris now housed within a plugin, which allows custom filtering logic through the plugin system (via #4255)anyOfandoneOf(via #4136)consumesvalue regression (#4265)baseDocto Swagger-Client (via #4273)[email protected]to solve a fatal error experienced by a small subset of users (via #4270)v3.11.0Compare Source
This release includes significant improvements to Swagger-UI's performance. The concept of an entirely-resolved spec representation has been done away with in favor of resolved subtrees: as the user expands operations and models in Swagger-UI, work is done to resolve only the parts needed for display. This allows us to do initial renders more quickly and paves the way for a more responsive editing experience in Swagger-Editor.
As a result, there are some breaking changes to various private APIs (mostly
specfacilities that focus on the resolved state). If you run custom plugins that rely on that data, you'll want to check for compatibility before upgrading.As a reminder: breaking private API changes result in a minor version bump, not a major bump.
Interface changes:
defaultModelsExpandDepthbehavior has changed; the default1value now leaves all models collapsed for performance reasons related to the new lazy resolution.specResolvedis no longer updated by default; plugins that rely on it should move tospecJsonorspecJsonWithResolvedSubtrees.Changelog:
lodashdependency due to potential vulnerability (via #4224)v3.10.0Compare Source
Interface changes: added
supportedSubmitMethodsoption to public API.Changelog:
supportedSubmitMethodsoption for disabling Try-It-Out based on operation method (via #4186)v3.9.3Compare Source
Interface changes: none.
v3.9.2Compare Source
Interface changes: none.
urlsoption to be specified in Docker (via #4044)Content-Disposition: attachmentpriority overContent-Typewhen choosing to display or offer download of a response (via #4140)OperationContainer(via #4137)border-boxbox styling in main stylesheet (via #4121)v3.9.1Compare Source
Interface changes: none.
swagger.jsoncan be modified within the container (via #4024)swagger-uinpm module now includes Standalone Preset (via #4101)format: uuidis no longer case-sensitive (via #4102)v3.9.0Compare Source
Interface changes: one core plugin API change, no public API changes.
Introduced a breaking function signature change to
errActions.newThrownErraction creator (from(err, action)to(err)) anderr_new_thrown_erraction payload (stopped nesting error content undererrorkey in payload, now the error is the payload).console.errorand walk down the stack to see what's going wrong.hasOwnPropertychecks to a handful offor...inloops (via #4043)locationto set Docker base url instead of moving things around the filesystem (via #4073)Promiseon global/window object, which makes IE11 a very happy browser (via #4077)zopflipngto compress PNG assets in repo (via #4037)v3.8.1Compare Source
thisbinding toafterLoadplugin interface to expose raw plugin context (via #4059)specPathinequality (via #4060)v3.8.0Compare Source
Interface changes:
afterLoadmethod in order to make changes to the top-level system after the plugin is merged into the system.initialStateparameter now allows removal of default keys by setting its value toundefinedin the parameter.afterLoadplugin