[Snyk] Upgrade react-dropzone from 10.2.2 to 14.2.3

[snyk-bot]

Snyk has created this PR to upgrade react-dropzone from 10.2.2 to 14.2.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 44 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2022-10-12.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Buffer Overflow SNYK-JS-LIBHEIFJS-3332736	436/1000 Why? Recently disclosed, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	436/1000 Why? Recently disclosed, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	436/1000 Why? Recently disclosed, CVSS 7.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-dropzone

• 14.2.3 - 2022-10-12
  

  14.2.3 (2022-10-12)

  Bug Fixes

  • work around Chromium File System Access API bug (c36ab5b), closes #1127 #1222 #1190
• 14.2.2 - 2022-07-03
  

  14.2.2 (2022-07-03)

  Bug Fixes

  • allow {accept} file selection w/o using the OS options (8127759)
• 14.2.1 - 2022-05-07
  

  14.2.1 (2022-05-07)

  Bug Fixes

  • call onError if FS access API fails in secure ctx (a2039fd)
• 14.2.0 - 2022-05-03
  

  14.2.0 (2022-05-03)

  Features

  • bump file-selector to v0.6 (239dd29)
• 14.1.2 - 2022-05-03
  

  14.1.2 (2022-05-03)

  Bug Fixes

  • add missing onError type (7aff9a5)
• 14.1.1 - 2022-05-02
  

  14.1.1 (2022-05-02)

  Bug Fixes

  • apply custom validator on {isDragAccept,isDragReject} (2d33fdf)
• 14.1.0 - 2022-05-02
  

  14.1.0 (2022-05-02)

  Features

  • add option to auto focus the root and close #1145 (1b91e50)
• 14.0.1 - 2022-05-01
  

  14.0.1 (2022-05-01)

  Bug Fixes

  • use aria role presentation by default and close #1152 (7a2f405)
• 14.0.0 - 2022-05-01
  

  14.0.0 (2022-05-01)

  Features

  • add support for React 18 and close #1121, #1167 (ed32886)

  BREAKING CHANGES

  • the {draggedFiles} prop on the returned hook state has been removed and the accept/reject state is only computed on drag enter and drop.
• 13.0.0 - 2022-04-30
  

  13.0.0 (2022-04-30)

  Features

  • add {onError} cb to allow users to handle errors (9134893)
  • allow passing file ext. to the file picker options and close #1141 (58976f4)

  BREAKING CHANGES

  • The {accept} prop will now require an object instead of a string or array of strings:

  Before:

  useDropzone({
    accept: ".jpeg,.png"
    // accept: [".jpeg", ".png"]
  })
  

  After:

  useDropzone({
    accept: {
      "image/*": [".jpeg", ".png"]
    }
  })
  

• 12.1.0 - 2022-04-26
• 12.0.6 - 2022-04-26
• 12.0.5 - 2022-04-10
• 12.0.4 - 2022-02-13
• 12.0.3 - 2022-02-13
• 12.0.2 - 2022-02-09
• 12.0.1 - 2022-02-07
• 12.0.0 - 2022-02-06
• 11.7.1 - 2022-02-06
• 11.7.0 - 2022-02-05
• 11.6.0 - 2022-02-05
• 11.5.3 - 2022-01-29
• 11.5.2 - 2022-01-29
• 11.5.1 - 2022-01-10
• 11.5.0 - 2022-01-10
• 11.4.2 - 2021-09-23
• 11.4.1 - 2021-09-22
• 11.4.0 - 2021-09-14
• 11.3.5 - 2021-09-13
• 11.3.4 - 2021-06-25
• 11.3.3 - 2021-06-25
• 11.3.2 - 2021-03-26
• 11.3.1 - 2021-02-08
• 11.3.0 - 2021-02-03
• 11.2.4 - 2020-11-08
• 11.2.3 - 2020-10-30
• 11.2.2 - 2020-10-28
• 11.2.1 - 2020-10-23
• 11.2.0 - 2020-09-18
• 11.1.0 - 2020-09-09
• 11.0.3 - 2020-08-13
• 11.0.2 - 2020-07-14
• 11.0.1 - 2020-04-26
• 11.0.0 - 2020-04-26
• 10.2.2 - 2020-03-26

from react-dropzone GitHub release notes

Commit messages

Package name: react-dropzone

• c36ab5b fix: work around Chromium File System Access API bug
• 8127759 fix: allow {accept} file selection w/o using the OS options
• 86ea1df docs: typo fix in previews page
• a2039fd fix: call onError if FS access API fails in secure ctx
• 2556af7 ci: bump bundle size limit to 8kb
• 239dd29 feat: bump file-selector to v0.6
• 7aff9a5 fix: add missing onError type
• 2d33fdf fix: apply custom validator on {isDragAccept,isDragReject}
• 1b91e50 feat: add option to auto focus the root and close replace webkit-search-cancel-button pseudo-element with a button. signalapp/Signal-Desktop#1145
• 7a2f405 fix: use aria role `presentation` by default and close Jumbomoji support matching Android support signalapp/Signal-Desktop#1152
• ed32886 feat: add support for React 18 and close Many errors: Missing Signed PreKey for PreKeyWhisperMessage signalapp/Signal-Desktop#1121, I18n signalapp/Signal-Desktop#1167
• 9134893 feat: add {onError} cb to allow users to handle errors
• 58976f4 feat: allow passing file ext. to the file picker options and close Error in the Japanese translation signalapp/Signal-Desktop#1141
• 2a71cc9 feat(deps): bump file-selector from 0.4.0 to 0.5.0
• 5bc4273 fix: remove autocomplete for file input type
• 888fb6f docs: fix the image preview example
• 67e3f59 fix: use KeyboardEvent.key to detect space/enter events
• e40ab3a docs: mention hosting is done via netlify
• c178314 fix: fix SSR when window is not defined (Message bubbles empty after accepting new safety numbers signalapp/Signal-Desktop#1143)
• dbaec3f fix: fallback to input click to open the file picker
• 8eb49d4 fix: do not use FS access API if code is not in secure context
• 650af62 docs: clarify the breaking change in v12 and close Every Disappearing Message Sent on Signal iOS Received Twice on Signal Desktop on Mac signalapp/Signal-Desktop#1138 (Contacts and Groups do not import from mobile at all signalapp/Signal-Desktop#1139)
• df8a9b4 fix: add useFsAccessApi type
• a034252 feat: enable file system access API by default

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs