fix(deps): update dependency plotly.js to v2 [security] #219
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.58.4
->2.25.2
GitHub Vulnerability Alerts
CVE-2023-46308
In Plotly plotly.js before 2.25.2, plot API calls have a risk of proto being polluted in expandObjectPaths or nestedProperty.
Release Notes
plotly/plotly.js (plotly.js)
v2.25.2
Compare Source
Changed
hr
locale [#6690],with thanks to @Mkranj for the contribution!
Fixed
v2.25.1
Compare Source
Fixed
v2.25.0
Compare Source
Added
with thanks to @apparebit for the contribution!
newshape
[#6653]Fixed
zmin
,zmax
,cmin
andcmax
) [#6625],with thanks to @lvlte for the contribution!
with thanks to @baurt for the contribution!
v2.24.3
Compare Source
Fixed
v2.24.2
Compare Source
Fixed
hovertemplate
not showing delta on totals similar(https://redirect.github.com/plotly/plotly.js/issues/6635)y.js/issues/6635\))v2.24.1
Compare Source
Fixed
(regression introduced in 2.24.0)(https://redirect.github.com/plotly/plotly.js/issues/6632)y.js/issues/6632\))
v2.24.0
Compare Source
Added
with thanks to @thierryVergult for the contribution!
Fixed
have hoverinfo: "none" (regression introduced in 2.6.0)(https://redirect.github.com/plotly/plotly.js/issues/6614)y.js/issues/6614\)),
with thanks to @Domino987 for the contribution!
v2.23.2
Compare Source
Fixed
with thanks to the Volkswagen Center of Excellence for Battery Systems for sponsoring development!
v2.23.1
Compare Source
Fixed
zsmooth
is set to false [#6605], with thanks to @lvlte for the contribution!v2.23.0
Compare Source
Added
legend.xref
andlegend.yref
to enable container-referenced positioning of legends [#6589], with thanks to Gamma Technologies for sponsoring the related development.colorbar.xref
andcolorbar.yref
to enable container-referenced positioning of colorbars [#6593], with thanks to Gamma Technologies for sponsoring the related development.Changed
zsmooth
is set to false [#6574], with thanks to @lvlte for the contribution!v2.22.0
Compare Source
Added
legend
references to traces andlegend2
,legend3
, etc. to layout,also add
visible
to legend i.e. to allow positioning multiple legends on a graph [#6535],this feature was anonymously sponsored: thank you to our sponsor!
Changed
no
locale [#5410],with thanks to @bjornol for the contribution!
sk
locale [#6580], with thanks to @Libco for the contribution!Fixed
plotly_click
in gl3d scenes to fire on touch devices [#6563],with thanks to @NickTominaga for the contribution!
marker.opacity
is set to zero [#6581], with thanks to @dmyronuk for the contribution!v2.21.0
Compare Source
Added
texttemplate
to shape.label for parametric shapes i.e. line, rect and circle [#6527],with thanks to the Volkswagen Center of Excellence for Battery Systems for sponsoring development!
with thanks to @CallumNZ for the contribution!
Fixed
with thanks to @bmaranville for the contribution!
zsmooth
is set to "fast" [#6565],with thanks to @lvlte for the contribution!
v2.20.0
Compare Source
Added
title.automargin
to enable automatic top and bottom margining for both container and paper referenced titles [#6428],with thanks to Gamma Technologies for sponsoring the related development.
v2.19.1
Compare Source
Fixed
with thanks to @jay-bis for the contribution!
v2.19.0
Compare Source
Added
label
attribute to shapes [#6454],with thanks to the Volkswagen Center of Excellence for Battery Systems for sponsoring development!
labelalias
to various axes namely cartesian, gl3d, polar, smith, ternary, carpet,indicator and colorbar [#6481],
this feature was anonymously sponsored: thank you to our sponsor!
Changed
is-mobile
dependency [#6517]Fixed
hovermode: 'x'|'y'
[#6442],with thanks to @dagroe for the contribution!
v2.18.2
Compare Source
Fixed
with thanks to @Gagaro for the contribution!
with thanks to @andresrcs for the contribution!
v2.18.1
Compare Source
Changed
d3-interpolate
andd3-color
to v3 to address audit warnings [#6463]Fixed
vector-effect
CSS to static plots [#6445]v2.18.0
Compare Source
Added
sync
tickmode option [#6356, #6443],with thanks to @filipesantiagoAM and @VictorBezak for the contribution!
Changed
is-mobile
[#6432]Fixed
requirejs
AMD loader (regression introduced in 2.17.0) [#6440]v2.17.1
Compare Source
Fixed
v2.17.0
Compare Source
Added
shift
andautoshift
to cartesian y axes to help avoid overlapping of multiple axes [#6334],with thanks to Gamma Technologies for sponsoring the related development!
scatter
trace i.e.alignmentgroup
,offsetgroup
,scattermode
andscattergap
[#6381],this feature was anonymously sponsored: thank you to our sponsor!
marker.cornerradius
attribute totreemap
trace [#6351]Changed
Fixed
backoff
when marker symbols and sizes are arrays [#6414]v2.16.5
Compare Source
Fixed
staticPlot
is set to true [#6393]v2.16.4
Compare Source
Fixed
scattermapbox
redraw (regression introduced in 2.16.0) [#6387]v2.16.3
Compare Source
Fixed
with thanks to @filipesantiagoAM for the contribution!
v2.16.2
Compare Source
Fixed
v2.16.1
Compare Source
Fixed
choroplethmapbox
selection when adding new traces on top [#6345]v2.16.0
Compare Source
Added
scattermapbox
[#5827],with thanks to @elben10 for the contribution!
v2.15.1
Compare Source
Fixed
v2.15.0
Compare Source
Added
angle
,angleref
andstandoff
tomarker
and addbackoff
toline
; also introduce new arrow symbols to facilitate drawing networks [#6297]minreducedwidth
andminreducedheight
to layout for increasing control over automargin [#6307]entrywidth
andentrywidthmode
to legend [#6202, #6324]Changed
angle
forrotation
inpie
[#6304]Fixed
touch event
after switching back from select mode [#6281],with thanks to @mmtmr for the contribution!
treemap
,icicle
,sunburst
,pie
,funnelarea
,parcats
,parcoords
andsankey
traces whenstaticPlot
is set to true [#6296]v2.14.0
Compare Source
Added
with thanks to @Andy2003 for the contribution!
editSelection
option to config [#6285]Changed
nl
locale to confirm with expected nl format [#6261],with thanks to @eirvandelden for the contribution!
v2.13.3
Compare Source
Fixed
v2.13.2
Compare Source
Fixed
sankey
select error (regression introduced in 2.13.0) [#6265]sankey
traces to fix select error [#6267]dragmode
s when an existing selection is modified [#6262]v2.13.1
Compare Source
Fixed
selections
to undefined eventData (regression introduced in 2.13.0) [#6260]v2.13.0
Compare Source
Added
selections
,newselection
andactiveselection
layout attributes to havepersistent and editable selections over cartesian subplots [#6243]
unselected.line.color
andunselected.line.opacity
options toparcoords
trace [#6216, #6236]violin
tracevia
quartilemethod
attribute [#6187]to control the direction of
automargin
on cartesian axes [#6193]delta.prefix
anddelta.suffix
toindicator
trace [#6246],with thanks to @paulovieira for the contribution!
zh-tw
) [#6247],with thanks to @sec2 for the contribution!
si
) [#6238],with thanks to @sujithranga for the contribution!
Changed
Fixed
box
&violin
traces [#6189]xref
description ofshapes
[#6194]v2.12.1
Compare Source
Fixed
dragmode
is set to false [#6147],with thanks to @jonfunkhouser for the contribution!
v2.12.0
Compare Source
Added
griddash
axis property to cartesian, polar, smith, ternary and geo subplots and addgriddash
andminorgriddash
tocarpet
trace [6144], with thanks to @njwhite for the contribution!minor
ticks and grid lines on cartesian axis types includingminor.tickmode
,minor.tickvals
,minor.tickcolor
,minor.ticklen
,minor.tickwidth
,minor.dtick
,minor.tick0
,minor.nticks
,minor.ticks
,minor.showgrid
,minor.gridcolor
,minor.griddash
andminor.gridwidth
[6166]Changed
with thanks to @junov for the contribution!
Fixed
v2.11.1
Compare Source
Fixed
v2.11.0
Compare Source
Added
parcoords
,splom
,scattergl
,scatterpolargl
to the "strict" bundle [#6083]scattersmith
trace to the "strict" bundle [#6135]v2.10.1
Compare Source
Fixed
mesh3d
generation whenalphahull
is a positive number (regression introduced in 2.5.1) [#6133]v2.10.0
Compare Source
Added
typesetMath
attribute to config [#6073],with thanks to Equinor for sponsoring the related development!
fillpattern
options toscatter
trace [#6101],with thanks to @s417-lama for the contribution!
v2.9.0
Compare Source
Added
ticklabelstep
to reduce labels on 2D axes and colorbars [#6088],this feature was anonymously sponsored: thank you to our sponsor!
Changed
Fixed
v2.8.3
Compare Source
Fixed
texttempate
forhistogram
trace [#6070]v2.8.2
Compare Source
Fixed
texttemplate
forhistogram
,bar
,funnel
andwaterfall
traces [#6069]v2.8.1
Compare Source
Fixed
textfont
is set to "auto" forheatmap
,histogram2d
,contour
andhistogram2dcontour
traces [#6061]v2.8.0
Compare Source
Added
legend.grouptitlefont
andhoverlabel.grouptitlefont
[#6040]texttemplate
andtextfont
toheatmap
andhistogram2d
traces as well ashistogram2dcontour
andcontour
traces whencoloring
is set "heatmap" [#6028]Fixed
pie
chart post-aggregation instead of during summation [#6051],with thanks to @destiny-wu for the contribution!
v2.7.0
Compare Source
Added
texttemplate
,textposition
,textfont
,textangle
,outsidetextfont
,insidetextfont
,insidetextanchor
,constraintext
andcliponaxis
tohistogram
trace [#6038]Changed
probe-image-size
module to v7.2.2 [#6036]Fixed
uirevision
andautorange
. Because we pushautorange
andrange
back intolayout
,there can be times it looks like we're applying GUI-driven changes on top of explicit autorange and other times
it's an implicit autorange, even though the user's intent was always implicit. This fix treats them as equivalent. [#6046]
v2.6.4
Compare Source
Fixed
v2.6.3
Compare Source
Fixed
with thanks to @SabineWren for the contribution!
v2.6.2
Compare Source
Fixed
v2.6.1
Compare Source
Fixed
v2.6.0
Compare Source
Added
smith
subplots and thescattersmith
trace type for displaying Smith charts [#5956, #5992],with thanks to Kitware and @waxlamp for kicking off this effort.
Changed
no-new-func
test [#5969]Fixed
npm install
problem fornpm v6
users (regression introduced in 2.5.0) [#6004]with thanks to @dwoznicki for the contribution!
with thanks to @dwoznicki for the contribution!
"hoverinfo": "none"
trace display for hover modes [#5854],with thanks to @Domino987 for the contribution!
getBoundingClientRect
inconvertToTspans
[#5976]xanchor
is set to "center" [#6002]v2.5.1
Compare Source
Fixed
surface-nets
,robust-determinant
,robust-linear-solve
modules [#5934, #5935, #5936]npm v7
andnode.js v16
[#5933],with thanks to @sleighsoft for the contribution!
v2.5.0
Compare Source
Added
surface
,isosurface
,volume
,streamtube
,cone
,mesh3d
,scatter3d
,pointcloud
and
heatmapgl
in the "strict" bundle by avoid function generation for these traces at runtime [#5888]Changed
node.js v16
andnpm v7
in development and upgrade the version ofpackage-lock.json
[#5922, #5919]Fixed
v2.4.2
Compare Source
Fixed
(regression introduced in 2.3.0) [#5913]
v2.4.1
Compare Source
Fixed
groupclick
is set to "toggleitem" [#5909]v2.4.0
Compare Source
Added
legend.groupclick
options [#5849, #5906],with thanks to @brussee for the contribution!
slider
component [#5856],with thanks to @keul for the contribution!
bbox
of hover items in event data [#5512]Changed
regl
module from version 1.6.1 to version 2.1.0 [#5870]Fixed
lib.promiseError
in lib.syncOrAsync [#5878],with thanks to @jklimke for the contribution!
hoverlabel.font
for group titles in unified hover modes [#5895]v2.3.1
Compare Source
Fixed
parcoords
,splom
,scattergl
andscatterpolargl
in the "strict" bundle so that it could be used with CSP without WebGL warning [#5865]v2.3.0
Compare Source
Added
d3.format
method from d3@v3 to version 1.4.5 ofd3-format
module [#5125, #5842]scattergl
,splom
andparcoords
by implementingplotGlPixelRatio
for those traces [#5500]Changed
d3.geo
method from d3@v3 to version 1.12.1 ofd3-geo
module and version 2.9.0 ofd3-geo-projection
module [#5112]d3.interpolate
method from d3@v3 to version 1.4.0 ofd3-interpolate
module inicicle
,indicator
,parcats
,sunburst
andtreemap
[#5826]regl-scatter2d
,regl-line2d
andregl-error2d
modules to use version 1.1.0 ofto-float32
module to improve the performance [#5786],with thanks to @Seranicio for the contribution!
constraintrange
inparcoords
trace to pass validation [#5673]publish-dist
job on CircleCI [#5815]XMLHttpRequest
instead ofd3.json
[#5832]Fixed
with thanks to @rlreamy for the contribution!
with thanks to @andreafonso for the contribution!
in order not to obscure referring data points and fit inside plotting area [#5846]
v2.2.1
Compare Source
Fixed
v2.2.0
Compare Source
Added
this feature was anonymously sponsored: thank you to our sponsor!
this feature was anonymously sponsored: thank you to our sponsor!
Changed
Fixed
rangebreaks
to improve performance [#5659],with thanks to @spasovski for the contribution!
v2.1.0
Compare Source
Added
icicle
trace type [#5546]with thanks to @Kully and @mtwichan of Zyphr for their contribution!
legendrank
attribute in traces [#5591]fgopacity
,fgcolor
& "overlay"fillmode
for bars andhandle bar
pattern
andlegend
whenmarker.colorscale
is present [#5733]Changed
probe-image-size
to v7.2.1 [#5739]Fixed
v2.0.0
Compare Source
Added
basic
,cartesian
,finance
,geo
, andmapbox
partial bundles and added tests to ensure that they will not again do so in the future [#5359, #5383, #5387],
with thanks to Equinor for sponsoring the related development!
strict
partial bundle [#5413, #5444], which includesthe maximal subset of the library which does not rely on function constructors
custom-bundle
script to facilitate generation of custom bundles [#5527, #5508, #5605, #5712]zsmooth
option forimage
trace [#5354, #5386],with thanks to @almarklein for the contribution!
marker.pattern
options inhistogram
,bar
andbarpolar
traces [#5520, #5537]with thanks to @s417-lama for the contribution!
ticklabeloverflow
options on cartesian axes and colorbars to drop tick labels going outside div or domain [#5584](x|y|z)hoverformat
,(u|v|w)hoverformat
andvalueformat
to cartesian and gl3d traces [#5563]hovertemplate
options to format differing positions in compare and unified modes [#5690]modebar.add
andmodebar.remove
[#5660]Removed
Plotly.d3
[#5400, #5406]_has*
plot types tofullLayout
[#5409]sane-topojson
and MathJax v2.3 files from dist folder and change supported MathJax version to v2.7.5 [#5487, #5492, #5494]Plotly.Fx
andPlotly.Plots
in the API [#5420]Plotly.plot
from the API [#5412, #5370, #5393]Plotly.Queue
from the API [#5423]role
keys from attribute definition [#5425, #5432]contourgl
andarea
traces as well as deprecated legacypre-
scatterpolar
polar-related attributesbar.t
,bar.r
,scatter.t
,scatter.r
,layout.radialaxis
,layout.angularaxis
andgd.framework
[#5399, #5408, #5409, #5398, #5438]Deprecated
heatmapgl
andpointcloud
trace types for later removal [#5447]transform
attributes [#5657]Changed
legend.title.font
andcolorbar.title.font
to depend onlegend.font
andcolorbar.tickfont
and increase their sizes [#5611]spikedistance
to "-1" andaxis.spikesnap
to "hovered data" [#5648]hovermode
to "closest" [#5647]textposition
to "auto" inbar
,histogram
andwaterfall
traces [#5638]layout.modebar.add
orconfig.modeBarButtonsToAdd
could be used to bring them back in [#5654, #5658]native-promise-only
module to handle es6 promises [#5358]probe-image-size
module to get width and height of images [#5388, #5635]paper_bgcolor
for better dark mode display ofConfiguration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.