Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency video.js to v7 [SECURITY] #7

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 11, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
video.js (source) ^5.12.1 -> ^7.14.3 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-23414

This affects the package video.js before 7.14.3.
The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.


Release Notes

videojs/video.js (video.js)

v7.14.3

Compare Source

Bug Fixes

v7.14.2

Compare Source

Bug Fixes
  • dom: in removeClass, check element for null in case of a disposed player (#​6701) (2990cc7)

v7.14.1

Compare Source

Bug Fixes
Chores
  • use setup-node cache and remove individual cache step (#​7310) (fab6e87)
Documentation
  • react: Added a functional React component using React.useEffect (#​7203) (2360236)

v7.14.0

Compare Source

Features

7.13.4 (2021-06-30)

Bug Fixes
Chores

7.13.3 (2021-06-23)

Chores
  • republish with VHS 2.9.1 (4b50f82)

7.13.2 (2021-06-22)

Bug Fixes

7.13.1 (2021-06-14)

Bug Fixes

v7.13.4

Compare Source

Bug Fixes
Chores

v7.13.3

Compare Source

Chores
  • republish with VHS 2.9.1 (4b50f82)

v7.13.2

Compare Source

Bug Fixes

v7.13.1

Compare Source

Bug Fixes

v7.13.0

Compare Source

Features
Documentation

7.12.4 (2021-06-02)

Bug Fixes
  • allow Video.js to be required in an env without setTimeout (#​7247) (8082c5a)
  • player: accept data for fullscreenchange and error events from the tech (#​7254) (41d5eb3)
  • seek-bar: remove event listener on dispose (#​7258) (c70c298)
Chores

7.12.3 (2021-05-20)

Bug Fixes
Chores

7.12.2 (2021-05-19)

Bug Fixes
Chores

7.12.1 (2021-04-13)

Bug Fixes

v7.12.4

Compare Source

Bug Fixes
  • allow Video.js to be required in an env without setTimeout (#​7247) (8082c5a)
  • player: accept data for fullscreenchange and error events from the tech (#​7254) (41d5eb3)
  • seek-bar: remove event listener on dispose (#​7258) (c70c298)
Chores

v7.12.3

Compare Source

Bug Fixes
Chores

v7.12.2

Compare Source

Bug Fixes
Chores

v7.12.1

Compare Source

Bug Fixes

v7.12.0

Compare Source

Features
Bug Fixes
Chores
Performance Improvements
  • wrap prototype methods in handlers in an arrow function (#​7060) (17a6147)

7.11.8 (2021-03-23)

Bug Fixes
  • remove extra timeupdate event when progress controls is disabled (#​7142) (b2336aa)
Documentation

7.11.7 (2021-03-12)

Bug Fixes

7.11.6 (2021-03-09)

Bug Fixes
Chores
Documentation
Tests
  • a couple of minor fixes, tweak CI config, swap rollup replace plugin (#​7128) (fbf34e3)

7.11.5 (2021-02-04)

Bug Fixes
  • dom: account for translated parent in pointer position on iOS (#​7079) (542cead)
  • dom: stop findPosition at a fullscreenElement (#​7074) (541f2e5)

7.11.4 (2021-01-26)

Bug Fixes

7.11.3 (2021-01-25)

Bug Fixes
Chores
Documentation

7.11.2 (2021-01-14)

Bug Fixes
Chores
Documentation
Tests

7.11.1 (2020-12-22)

Features
Bug Fixes
Chores
  • move unit test build right below main for faster watch (#​6953) (5a13e90)
Documentation

v7.11.8

Compare Source

Bug Fixes
  • remove extra timeupdate event when progress controls is disabled (#​7142) (b2336aa)
Documentation

v7.11.7

Compare Source

Bug Fixes

v7.11.6

Compare Source

Bug Fixes
Chores
Documentation
Tests
  • a couple of minor fixes, tweak CI config, swap rollup replace plugin (#​7128) (fbf34e3)

v7.11.5

Compare Source

Bug Fixes
  • dom: account for translated parent in pointer position on iOS (#​7079) (542cead)
  • dom: stop findPosition at a fullscreenElement (#​7074) (541f2e5)

v7.11.4

Compare Source

Bug Fixes

v7.11.3

Compare Source

Bug Fixes
Chores
Documentation

v7.11.2

Compare Source

Bug Fixes
Chores
Documentation
Tests

v7.11.1

Compare Source

Features
Bug Fixes
Chores
  • move unit test build right below main for faster watch (#​6953) (5a13e90)
Documentation

v7.11.0

Compare Source

Features
Bug Fixes
Chores
Documentation
  • change blog links to most recent blog version, fix typo (#​6904) (8617530)

7.10.2 (2020-11-04)

Bug Fixes

7.10.1 (2020-10-15)

v7.10.2

Compare Source

Bug Fixes

v7.10.1

Compare Source

7.10.1 (2020-10-15)

v7.10.0

Compare Source

Features

7.9.7 (2020-10-06)

Bug Fixes

7.9.6 (2020-10-01)

Bug Fixes
Documentation

7.9.5 (2020-09-10)

7.9.4 (2020-09-10)

Bug Fixes
Chores

7.9.3 (2020-08-17)

Bug Fixes
Documentation

7.9.2 (2020-07-20)

Bug Fixes

7.9.1 (2020-07-13)

Bug Fixes

v7.9.7

Compare Source

Bug Fixes

v7.9.6

Compare Source

Bug Fixes
Documentation

v7.9.5

Compare Source

7.9.5 (2020-09-10)

v7.9.4

Compare Source

Bug Fixes
Chores

v7.9.3

Compare Source

Bug Fixes
Documentation

v7.9.2

Compare Source

Bug Fixes

v7.9.1

Compare Source

Bug Fixes
  • limit fastSeek to Safari based browsers only ([#​6752](https://

Configuration

📅 Schedule: Branch creation - "" in timezone US/Eastern, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 5d91f5b to 47af6df Compare April 14, 2024 02:51
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Apr 14, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 47af6df to d2e02ef Compare April 16, 2024 20:43
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] Apr 16, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch 2 times, most recently from e2c193f to ab2d407 Compare April 16, 2024 22:53
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Apr 16, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from ab2d407 to 9aac9a8 Compare April 20, 2024 06:05
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] Apr 20, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 9aac9a8 to 8c1fe09 Compare April 20, 2024 09:40
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Apr 20, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 8c1fe09 to c74886f Compare April 21, 2024 09:58
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] Apr 21, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from c74886f to a4c1a28 Compare April 21, 2024 13:46
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Apr 21, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from a4c1a28 to bed3f3e Compare April 25, 2024 07:39
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] Apr 25, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from bed3f3e to 2f945ba Compare April 25, 2024 11:22
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Apr 25, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 2f945ba to 9f35e71 Compare May 1, 2024 09:52
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] May 1, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 9f35e71 to b267b55 Compare May 1, 2024 13:54
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] May 1, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from b267b55 to fecfeec Compare May 9, 2024 11:55
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] May 9, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from fecfeec to 45f69f5 Compare May 9, 2024 12:19
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] May 9, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 45f69f5 to d2bb606 Compare May 15, 2024 10:56
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] May 15, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from d2bb606 to c08ffb4 Compare May 15, 2024 21:13
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Dec 22, 2024
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 101e8f8 to 0b54903 Compare January 14, 2025 23:04
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] Jan 14, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 0b54903 to dff7273 Compare January 15, 2025 03:03
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Jan 15, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from dff7273 to 4982876 Compare January 23, 2025 20:02
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] Jan 23, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 4982876 to 4d291d3 Compare January 23, 2025 23:52
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Jan 23, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 4d291d3 to d1de769 Compare January 30, 2025 15:37
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] Jan 30, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from d1de769 to f211bec Compare January 30, 2025 19:49
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Jan 30, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from f211bec to 77ba203 Compare February 9, 2025 15:37
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] Feb 9, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 77ba203 to 3e304ba Compare February 9, 2025 18:15
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Feb 9, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 3e304ba to 9bb0df2 Compare March 3, 2025 13:20
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] Mar 3, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 9bb0df2 to 4fedf94 Compare March 3, 2025 18:24
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Mar 3, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 4fedf94 to 3f13873 Compare March 11, 2025 14:57
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] Mar 11, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 3f13873 to 0a8bacb Compare March 11, 2025 18:38
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Mar 11, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from 0a8bacb to f14f1b9 Compare March 13, 2025 17:43
@renovate renovate bot changed the title Update dependency video.js to v7 [SECURITY] Update dependency video.js to v8 [SECURITY] Mar 13, 2025
@renovate renovate bot force-pushed the renovate/npm-video.js-vulnerability branch from f14f1b9 to d8f029a Compare March 13, 2025 20:45
@renovate renovate bot changed the title Update dependency video.js to v8 [SECURITY] Update dependency video.js to v7 [SECURITY] Mar 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants