[Snyk] Upgrade react-textarea-autosize from 8.4.0 to 8.5.9#486
[Snyk] Upgrade react-textarea-autosize from 8.4.0 to 8.5.9#486graymalkin77 wants to merge 1 commit intomasterfrom
Conversation
Snyk has created this PR to upgrade react-textarea-autosize from 8.4.0 to 8.5.9. See this package in npm: react-textarea-autosize See this project in Snyk: https://app.snyk.io/org/cognigy-gmbh/project/9925025e-9fa9-4575-b30a-373ebb7ce44d?utm_source=github&utm_medium=referral&page=upgrade-pr
🎉 Snyk checks have passed. No issues have been found so far.✅ security/snyk check is complete. No issues have been found. (View Details) ✅ license/snyk check is complete. No issues have been found. (View Details) ✅ code/snyk check is complete. No issues have been found. (View Details) |
There was a problem hiding this comment.
Pull Request Overview
This PR upgrades the react-textarea-autosize package from version 8.4.0 to 8.5.9, bringing 11 versions of improvements including bug fixes, performance enhancements, and React 19 compatibility.
- Updates dependency version to incorporate recent patches and compatibility improvements
- Includes fixes for race conditions, form reset handling, and SSR environment optimizations
- Adds React 19 support and improved module resolution for edge computing environments
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
| "react-redux": "^7.2.6", | ||
| "react-responsive-carousel": "^3.2.22", | ||
| "react-textarea-autosize": "^8.3.3", | ||
| "react-textarea-autosize": "^8.5.9", |
There was a problem hiding this comment.
The diff shows the current version as 8.3.3 in the removed line, but the PR description states upgrading from 8.4.0. This version mismatch could indicate an inconsistency in the actual current version being used versus what's documented in the PR.
Snyk has created this PR to upgrade react-textarea-autosize from 8.4.0 to 8.5.9.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 11 versions ahead of your current version.
The recommended version was released 5 months ago.
Release notes
Package name: react-textarea-autosize
-
8.5.9 - 2025-03-30
-
-
8.5.8 - 2025-03-13
- #414
-
8.5.7 - 2025-01-10
- #409
-
8.5.6 - 2024-12-09
- #400
-
8.5.5 - 2024-11-13
- #401
-
8.5.4 - 2024-10-10
- #397
-
8.5.3 - 2023-08-22
- #386
-
8.5.2 - 2023-07-04
- #381
-
8.5.1 - 2023-07-01
- #377
-
8.5.0 - 2023-06-21
-
-
-
- #370
-
8.4.1 - 2023-03-21
-
8.4.0 - 2022-11-10
from react-textarea-autosize GitHub release notesPatch Changes
#417
cbced4fThanks @ threepointone! - Addededge-lightandworkerdconditions topackage.jsonmanifest to better serve users using Vercel Edge and Cloudflare Workers.This lets tools like Wrangler and the Cloudflare Vite Plugin pick up the right version of the built module, preventing issues like cloudflare/workers-sdk#8723.
Patch Changes
d12e6a5Thanks @ benjaminwaterlot! - Fixed a race condition leading to an error caused by textarea being unmounted before internalrequestAnimationFrame's callback being firedPatch Changes
8c47e31Thanks @ Andarist! - Fixed an issue with resize not happening after the containing form being resetPatch Changes
7d48e9eThanks @ Yonom! - Add React 19 to the allowed peer dependency range.Patch Changes
4a34e1bThanks @ olee! - Add missingwordSpacingandscrollbarGutteras properties that can impact sizingPatch Changes
bf3cad8Thanks @ Oyveloper! - Forcedisplay: blockfor the hidden textarea to prevent other styles from overriding it and thus breaking the resizing functionalityPatch Changes
b3dc597Thanks @ Andarist! - Distribute completely separate files for theworkercondition to avoid bundlers from aliasing files targeting node to the ones targeting browsers through thepackage.json#browseralias field.Patch Changes
e16c24aThanks @ Andarist! - Publish files that were previously missing for some conditions.Patch Changes
4087205Thanks @ Andarist! - The providedonChangewill get forwarded again to the underlying<textarea/>on the server side.Minor Changes
#373
05b014aThanks @ Andarist! - Compatibility with node's ESM has been improved.import TextareaAutosize from 'react-textarea-autosize';was always meant to provide you the default export of this package (the exported component) and now node should load it this way.#373
05b014aThanks @ Andarist! - SSR environments should now be able to pick smaller bundles throughpackage.json#exports.#373
05b014aThanks @ Andarist! - This package no longer depends onprocess.env.NODE_ENV. To get dev-only warnings you have to configure your bundler/runtime to use thedevelopmentcondition.Patch Changes
d33b120Thanks @ ArnaudRinquin! - Add a guard against potentially missingdocuments.fontsImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: