[Snyk] Upgrade element-plus from 2.11.4 to 2.11.5#49
[Snyk] Upgrade element-plus from 2.11.4 to 2.11.5#49danelkay93 wants to merge 1 commit intomasterfrom
Conversation
Snyk has created this PR to upgrade element-plus from 2.11.4 to 2.11.5. See this package in npm: element-plus See this project in Snyk: https://app.snyk.io/org/danelkay93/project/1e939798-dc83-4894-9953-0e822208d06a?utm_source=github&utm_medium=referral&page=upgrade-pr
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the ✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary of ChangesHello @danelkay93, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request automates the process of keeping project dependencies current by upgrading the Highlights
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
|
There was a problem hiding this comment.
Pull Request Overview
This PR updates the element-plus UI framework dependency from version ^2.11.4 to ^2.11.5, which also triggers automatic updates to some of its peer and sub-dependencies including @element-plus/icons-vue (2.3.1 → 2.3.2) and dayjs (1.11.13 → 1.11.19). Additionally, the escape-html dependency has been removed as it's no longer required by the new version of element-plus.
- Minor version bump of element-plus UI library
- Automatic updates to related dependencies (@element-plus/icons-vue, dayjs)
- Removal of unused escape-html dependency
Reviewed Changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Updates element-plus from ^2.11.4 to ^2.11.5 |
| package-lock.json | Updates lockfile with new versions of element-plus (2.11.4 → 2.11.5), @element-plus/icons-vue (2.3.1 → 2.3.2), dayjs (1.11.13 → 1.11.19), and removes escape-html dependency |
| @@ -20,7 +20,7 @@ | |||
| "@element-plus/icons-vue": "^2.3.1", | |||
There was a problem hiding this comment.
The @element-plus/icons-vue version should be updated to ^2.3.2 to match the peer dependency requirement of element-plus 2.11.5. The package-lock.json shows element-plus 2.11.5 depends on @element-plus/icons-vue ^2.3.2, but package.json still specifies ^2.3.1. While the caret range will resolve correctly during installation, it's best practice to align the version in package.json with the peer dependency requirements.
| "@element-plus/icons-vue": "^2.3.1", | |
| "@element-plus/icons-vue": "^2.3.2", |
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request, automatically generated by Snyk, upgrades the element-plus dependency from 2.11.4 to 2.11.5. This is a patch update that includes several new features, bug fixes, and refactorings as detailed in the release notes. The changes in package.json and package-lock.json reflect this upgrade and its corresponding transitive dependency updates. My review includes one suggestion to align a related direct dependency for better project consistency and maintainability.
| "@types/file-saver": "^2.0.7", | ||
| "doodle.css": "^0.0.2", | ||
| "element-plus": "^2.11.4", | ||
| "element-plus": "^2.11.5", |
There was a problem hiding this comment.
The upgrade of element-plus to 2.11.5 also brings in @element-plus/icons-vue version 2.3.2 as a transitive dependency (as seen in package-lock.json). To maintain consistency and clarity in your project's direct dependencies, it's recommended to also update the @element-plus/icons-vue dependency in this file to ^2.3.2.
2 participants
Snyk has created this PR to upgrade element-plus from 2.11.4 to 2.11.5.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1 version ahead of your current version.
The recommended version was released 22 days ago.
Release notes
Package name: element-plus
-
2.11.5 - 2025-10-17
- Components [watermark] add
- Components [mention/menu/dropdown/pagination] add popper-style (#22278 by @ keeplearning66)
- Components [cascader]
- Components [radio-group] support options with el-radio-button (#22285 by @ snowbitx)
- Components [checkbox-group] support options el-checkbox-button (#22377 by @ snowbitx)
- Components [autocomplete] support home and end key events (#22324 by @ snowbitx)
- Components [color-picker-panel] hue-slider a11y (#22258 by @ tolking)
- Components [input] add
- Components [input] add
- Components [select] fix label not show when persistent is false (#22317 by @ kooriookami)
- Components [popconfirm] unable to capture focus (#22310 by @ tolking)
- Components [date-picker] allow plain array for modelValue (#22140 by @ Dsaquel)
- Components [date-picker] display value error when persistent:false (#22356 by @ tolking)
- Components [tooltip] close tooltip when cliking iframe (#22345 by @ Dsaquel)
- Components [form-item] dynamically toggle form item slot (#22344 by @ Dsaquel)
- Components [table] make resizable prop reactive (#22340 by @ keeplearning66)
- Components [checkbox-group/radio-group] avoid passing alias fields to component (#22346 by @ cszhjh)
- Translation document path splicing error (#22364 by @ FrontEndDog)
- Components [tree] correct drop indicator with tree scroll offset (#21947 by @ scvzerng)
- Components [date-picker] supplement type for DatePickerInstance (#22387 by @ keeplearning66)
- Components [input-number] arrow key repeat and disabled-scientific not working (#22382 by @ cszhjh)
- Components [slider] support uneven step sizes (#22401 by @ cszhjh)
- Components [time-picker] always take old value on cancel (#22414 by @ Dsaquel)
- Components [select] loading appears on first click when remote (#22323 by @ keeplearning66)
- Components [cascader] issue with expanding levels during search (#21686 by @ keeplearning66)
- Use @ eslint/markdown instead of eslint-plugin-markdown (#22434 by @ FrontEndDog)
- Directives [vRepeatClick] remove event listener during unmounted (#22439 by @ tolking)
- Components [upload] Invalid CSS variable (#22366 by @ FrontEndDog)
- Components [message] use correct namespace for lockscreen (#22465 by @ Lensiq)
- Components [DatePickerPanel] button offset when using unocss (#22449 by @ FrontEndDog)
- Components [cascader/autocomplete] make debounce prop reactive (#22477 by @ keeplearning66)
- Components [input-number] fix step-strictly precision (#14359 by @ cc-hearts)
- Components [color-picker] the panel does not capture focus (#22483 by @ tolking)
- Components replace props.options with options (#22330 by @ cszhjh)
- Components [switch] use shallowRef and remove redundant usage (#22347 by @ snowbitx)
- Style Update Eslint to V9 and Prettier to V3 (#21949 by @ FrontEndDog)
- Components [date-picker] externalize formatToString (#22349 by @ Dsaquel)
- Components remove unnecessary 'props.' in the template (#22381 by @ keeplearning66)
- Components [dropdown] trigger flow for dropdown menu (#22332 by @ tolking)
-
2.11.4 - 2025-09-26
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
from element-plus GitHub release notes2.11.5
2025-10-17
Features
fontGapprop (#22342 by @ suqingyao)lazyLoadsupport reject (#22283 by @ btea)modelModifiersprop (#22415 by @ cszhjh)word-limit-positionattributes (#22359 by @ FrontEndDog)Bug fixes
Refactors
2.11.4
2025-09-26
Features
Components [color-picker] add validation on blur event (#22247 by @ tolking)
Components [autocomplete/time-select/color-picker] add popper-style (#22263 by @ keeplearning66)
Components [date-picker] add
automatic-dropdownprop (#21764 by @ btea)Components [autocomplete] add
loopNavigationattributes (#22281 by @ cszhjh)Components [select-v2] accessibility enhancement (#22153 by @ tolking)
Bug fixes
Components [color-picker-panel] display error when clear the color (#22260 by @ tolking)
The KeyboardEvent.code is always empty string on Android (#22228 by @ tolking)
Components [loading] add missing
contextparam (#22262 by @ cszhjh)Components [loading] allow
setTextto accept VNode type (#22264 by @ cszhjh)Components [cascader] resolve
visibleChangenot triggered on Popper hide (#22206 by @ cszhjh)Components replace KeyboardEvent.code with getEventCode (#22268 by @ cszhjh)
Components [color-picker] incorrect thumb offset (#22266 by @ Dsaquel)
Improvement(components): trigger
enteropen tooltip (#19830 by @ warmthsea)Style(theme-chalk): same height across pickers for range date pickers (#22277 by @ Dsaquel)
Style(components): [message] fix container width adaptation (#22308 by @ cszhjh)
Refactors
Components [cascader] externalize tooltip tag from v-for (#22191 by @ Dsaquel)
Components unify BEM & CSS vars via helpers (#22226 by @ cszhjh)
Remove
tooltip-v2visual-hiddencomponents (#22252 by @ warmthsea)Remove unused code related to tooltip-v2 (#22304 by @ Dsaquel)
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: