Skip to content
This repository was archived by the owner on Apr 17, 2021. It is now read-only.

Commit e6a855a

Browse files
authored
Bump to jQuery v3.0.0 (#941)
To address security vulnerabilities [1, 2] (moderate severity) identified by GitHub's dependency graph. jQuery 3.0 introduced several breaking changes, one of which is the removal of `.load()` [3], so this includes update to StickySort for compatibility. Also submitted PR. terrymun/StickySort#13 [1] https://nvd.nist.gov/vuln/detail/CVE-2015-9251 [2] https://nvd.nist.gov/vuln/detail/CVE-2016-10707 [3] https://jquery.com/upgrade-guide/3.0/#breaking-change-load-unload-and-error-removed
1 parent 242324f commit e6a855a

File tree

3 files changed

+7
-3
lines changed

3 files changed

+7
-3
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@
5151
"dependencies": {
5252
"csvtojson": "^1.0.2",
5353
"formvalidation": "github:formvalidation/formvalidation",
54-
"jquery": "^2.2.4",
54+
"jquery": "~3.0.0",
5555
"jquery-ui": "1.12.1",
5656
"list.js": "^1.2.0",
5757
"semantic-ui-calendar": "0.0.3",

src/js/vendor/sticky-sort/jquery.stickysort.min.js

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

yarn.lock

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2884,10 +2884,14 @@ jquery-ui@1.12.1:
28842884
version "1.12.1"
28852885
resolved "https://registry.yarnpkg.com/jquery-ui/-/jquery-ui-1.12.1.tgz#bcb4045c8dd0539c134bc1488cdd3e768a7a9e51"
28862886

2887-
jquery@>=1.7.2, jquery@^2.2.4, jquery@x.*:
2887+
jquery@>=1.7.2, jquery@x.*:
28882888
version "2.2.4"
28892889
resolved "https://registry.yarnpkg.com/jquery/-/jquery-2.2.4.tgz#2c89d6889b5eac522a7eea32c14521559c6cbf02"
28902890

2891+
jquery@~3.0.0:
2892+
version "3.0.0"
2893+
resolved "https://registry.yarnpkg.com/jquery/-/jquery-3.0.0.tgz#95a2a9541291a9f819e016f85ba247116d03e4ab"
2894+
28912895
js-base64@^2.1.8, js-base64@^2.1.9:
28922896
version "2.1.9"
28932897
resolved "https://registry.yarnpkg.com/js-base64/-/js-base64-2.1.9.tgz#f0e80ae039a4bd654b5f281fc93f04a914a7fcce"

0 commit comments

Comments
 (0)