[Snyk] Upgrade: , react, react-dom, bootstrap, react-bootstrap

[rishisqsh]

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@material-ui/core
from 4.11.2 to 4.12.4 | 9 versions ahead of your current version | 2 years ago
on 2022-04-03
react
from 17.0.1 to 17.0.2 | 1 version ahead of your current version | 3 years ago
on 2021-03-22
react-dom
from 16.13.1 to 16.14.0 | 1 version ahead of your current version | 4 years ago
on 2020-10-14
bootstrap
from 4.5.0 to 4.6.2 | 6 versions ahead of your current version | 2 years ago
on 2022-07-19
react-bootstrap
from 1.3.0 to 1.6.8 | 16 versions ahead of your current version | 9 months ago
on 2023-12-22

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Code Injection SNYK-JS-LODASHES-2434284	467	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASHES-2434289	467	Proof of Concept

Release notes

Package name: @material-ui/core

• 4.12.4 - 2022-04-03
• 4.12.3 - 2021-07-30
• 4.12.2 - 2021-07-19
• 4.12.1 - 2021-07-07
• 4.12.0 - 2021-07-06
• 4.11.4 - 2021-04-27
• 4.11.3 - 2021-01-24
• 4.11.3-deprecations.1 - 2021-01-25
• 4.11.3-deprecations.0 - 2021-01-24
• 4.11.2 - 2020-12-02

from @material-ui/core GitHub release notes

Package name: react

• 17.0.2 - 2021-03-22
  

  React DOM

  • Remove an unused dependency to address the SharedArrayBuffer cross-origin isolation warning. (@ koba04 and @ bvaughn in #20831, #20832, and #20840)

  Artifacts

  • react: https://unpkg.com/react@17.0.2/umd/
  • react-art: https://unpkg.com/react-art@17.0.2/umd/
  • react-dom: https://unpkg.com/react-dom@17.0.2/umd/
  • react-is: https://unpkg.com/react-is@17.0.2/umd/
  • react-test-renderer: https://unpkg.com/react-test-renderer@17.0.2/umd/
  • scheduler: https://unpkg.com/scheduler@0.20.2/umd/
• 17.0.1 - 2020-10-22
  

  React DOM

  • Fix a crash in IE11. (@ gaearon in #20071)

from react GitHub release notes

Package name: react-dom

• 16.14.0 - 2020-10-14
  

  React

  • Add support for the new JSX transform. (@ lunaruan in #18299)
• 16.13.1 - 2020-03-19
  

  React DOM

  • Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@ acdlite in #18238)
  • Revert warning for cross-component updates that happen inside class render lifecycles (componentWillReceiveProps, shouldComponentUpdate, and so on). (@ gaearon in #18330)

  Artifacts

  • react: https://unpkg.com/react@16.13.1/umd/
  • react-art: https://unpkg.com/react-art@16.13.1/umd/
  • react-dom: https://unpkg.com/react-dom@16.13.1/umd/
  • react-is: https://unpkg.com/react-is@16.13.1/umd/
  • react-test-renderer: https://unpkg.com/react-test-renderer@16.13.1/umd/
  • scheduler: https://unpkg.com/scheduler@0.19.1/umd/

from react-dom GitHub release notes

Package name: bootstrap

• 4.6.2 - 2022-07-19
  

  Highlights

  • Added an example to our Collapse plugin docs to show how to use horizontal collapsing. This has long been possible via our JS, but we never had an official class to utilize it.
  • We've replaced the deprecated color-adjust with print-color-adjust in our Sass files as part of the Autoprefixer v10.4.6 issues. This should quiet the issues folks have seen from that dependency change. If you're using our distribution CSS files, like bootstrap.min.css, you may still see the warning.
  • Tweaked the size of small and .small to compute to a whole pixel value (was 12.8px and now is 14px).
  • Improved accessibility around our dropdowns, color contrast, and role attributes.
  • Fixed some broken links to supporting documentation.
  • Updated dependencies across the board.

  What's Changed

  • Removed blurred background reference from the Toast Docs. by @ pricop in #35190
  • Update links to CCA, MQ5 prefers-reduced-motion, evergreen WCAG urls, more resources by @ patrickhlauke in #35427
  • v4-dev backports and updates by @ XhmikosR in #35482
  • Backport #35556 by @ julien-deramond in #35558
  • Tweak toast docs by @ patrickhlauke in #35633
  • v4-dev backports and updates by @ XhmikosR in #35642
  • Doc: Reorder alphabetically lists of components by @ julien-deramond in #36128
  • Updated the small-font-size to use a round value by @ pricop in #36172
  • v4 dev backports and updates by @ XhmikosR in #35767
  • _custom-forms.scss: fix order of attributes by @ twin-elements in #36231
  • Replace the deprecated color-adjust with print-color-adjust by @ AdrianCurtin in #36283
  • [v4] Doc: remove role="group" from some split drop* buttons by @ julien-deramond in #36254
  • Dynamic tabs: use buttons rather than links (backport to v4) by @ patrickhlauke in #33163
  • v4 dev updates by @ XhmikosR in #36430
  • Fix closing HTML tag in navs docs by @ julien-deramond in #36466
  • v4: Horizontal collapse by @ mdo in #36434
  • Fixing tabs' tests v4 by @ louismaximepiton in #36485
  • Docs: fix some ARIA Authoring Practices Guides broken links by @ julien-deramond in #36490
  • v4 - Remove confusing unnecessary id/aria-labelledby for dropdown menus by @ patrickhlauke in #36491
  • v4 Docs: outdated ARIA/PF link, expand contrast explanation in accessibility.md by @ patrickhlauke in #36492
  • v4: Improve accessible name of version dropdown in docs navbar by @ patrickhlauke in #36504
  • Update devDependencies by @ XhmikosR in #36522
  • Docs: update clipboard.js to v2.0.11 by @ julien-deramond in #36631
  • Update devDependencies by @ XhmikosR in #36724
  • v4: Add Fathom by @ mdo in #36727
  • Docs: Capitalize Unicode by @ julien-deramond in #36735
  • Release v4.6.2 by @ XhmikosR in #36725

  New Contributors

  • @ twin-elements made their first contribution in #36231
  • @ AdrianCurtin made their first contribution in #36283

  Full Changelog: v4.6.1...v4.6.2

• 4.6.1 - 2021-10-28
  

  What's changed

  • Replace Sass division with multiplication and custom divide() function by @ mdo in #34571
  • Update RFS to v8.1.0 by @ XhmikosR in #34571
  • fix(forms): input-group and validation icons by @ ffoodd in #32968
  • Fix minor visual bug in Firefox caused by moz-focusring by @ kremit in #32821
  • Adjust SAFE_URL_PATTERN regex for use with test method of regexes by @ nikonthethird in #33153
  • Add sms in the SAFE_URL_PATTERN for sanitizer by @ XhmikosR in #35074
  • Adjust feedback icon position and padding for select.form-control by @ mdo in #33206
  • Carousel: use buttons, not links, for prev/next controls by @ patrickhlauke in #33165
  • v4: Sass docs for default variables by @ mdo in #33392
  • Handle complex expressions in add() & subtract() by @ ffoodd in #34047
  • More concise improvements for add() and subtract() by @ ffoodd in #34432
  • Remove aria-haspopup from dropdowns by @ patrickhlauke in #33624
  • Dropdown: support .dropdown-item wrapped in <li> tags by @ cpsievert in #33649
  • Update Node versions in JS tests (drop Node 10, add Node 16), update docs JS assets and add variables for vertical-align in spinners by @ XhmikosR in #33807
  • Replace Freenode with Libera IRC server by @ midzer #34050
  • Fix repetition in the Navbar docs description by @ coliff in #34208
  • Enable 0.x with negative margins in utilities by @ k-utsumi in #33593
  • Remove print thead rule by @ coliff in #34426
  • Fix prevented show event disabling modals with fade class from being displayed again by @ alpadev in #34087
  • Input group validation with custom-file input by @ ffoodd in #33239
  • Add eslint-plugin-qunit and tighten JS tests by @ XhmikosR in #32270
  • Update our tests to Node 16 and npm 8 by @ XhmikosR in #35142
  • Disabled link cleanup by @ patrickhlauke in #34924
  • Updated our devDependencies including terser; also enabled two passes for terser by @ XhmikosR

  Full changelog

  v4.6.0...v4.6.1

• 4.6.0 - 2021-01-19
• 4.5.3 - 2020-10-13
• 4.5.2 - 2020-08-06
• 4.5.1 - 2020-08-04
• 4.5.0 - 2020-05-12

from bootstrap GitHub release notes

Package name: react-bootstrap

• 1.6.8 - 2023-12-22
  

  1.6.8 (2023-12-22)

  Bug Fixes

  • ModalHeader: fix types (#6735) (54cb179)
• 1.6.7 - 2023-05-03
  

  1.6.7 (2023-05-03)

  Bug Fixes

  • Popover: fix content prop error (#6612) (3d1df53)
• 1.6.6 - 2022-08-25
• 1.6.5 - 2022-05-11
• 1.6.4 - 2021-09-24
• 1.6.3 - 2021-09-08
• 1.6.2 - 2021-09-07
• 1.6.1 - 2021-06-04
• 1.6.0 - 2021-05-11
• 1.5.2 - 2021-03-11
• 1.5.1 - 2021-03-02
• 1.5.0 - 2021-02-16
• 1.4.3 - 2021-01-07
• 1.4.2 - 2021-01-07
• 1.4.1 - 2021-01-07
• 1.4.0 - 2020-10-21
• 1.3.0 - 2020-07-23

from react-bootstrap GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs