[Snyk] Upgrade styled-components from 6.0.7 to 6.1.8

[JesHardyM]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade styled-components from 6.0.7 to 6.1.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 12 versions ahead of your current version.
• The recommended version was released a month ago, on 2024-01-08.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Proof of Concept
	Improper Input Validation SNYK-JS-POSTCSS-5926692	572/1000 Why? Proof of Concept exploit, CVSS 9.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: styled-components

• 6.1.8 - 2024-01-08
  

  Revert adding peerDependencies from v6.1.7; apparently some package managers have differing behaviors around peerDependenciesMeta[package].optional which is causing issues. Will revisit at a later date if possible.

  Full Changelog: v6.1.7...v6.1.8

• 6.1.7 - 2024-01-08
  

  What's Changed

  • chore: add all missing peer dependency statements by @ quantizor in #4243

    NOTE: this change may cause some installed dependency duplication until this NPM bug is addressed but yarn and pnpm have correct behavior. Bun also has a similar bug.

    Overall these changes ensure that styled-components is specifying a known working version of all utilized libraries, while instructing the client package manager that higher semver-compliant versions are permissible and should work, assuming the relevant libraries are compliant in practice.

  Full Changelog: v6.1.6...v6.1.7

• 6.1.6 - 2023-12-27
  

  What's Changed

  • fix: bump stylis to 4.3.1 to resolve issue with leaking nested selectors by @ quantizor in #4245

  Full Changelog: v6.1.5...v6.1.6

• 6.1.5 - 2023-12-27
  

  What's Changed

  • fix: further constrain self-referencing to match v5 behavior by @ quantizor in #4244

  Full Changelog: v6.1.4...v6.1.5

• 6.1.5-rc.0 - 2023-12-27
• 6.1.4 - 2023-12-27
  

  What's Changed

  • fix: allow using attrs to provide a custom theme prop to child components by @ quantizor in #4242

  Full Changelog: v6.1.3...v6.1.4

• 6.1.3 - 2023-12-22
  

  What's Changed

  • fix(types): missing type declarations by @ benjaminrae in #4237
  • fix(deps): pin dependencies to exact versions prior to bun migration by @ quantizor in #4238
  • fix(types): nested styled with additional prop types by @ justinbhopper in #4236

  New Contributors

  • @ benjaminrae made their first contribution in #4237

  Full Changelog: v6.1.2...v6.1.3

• 6.1.2 - 2023-12-20
  

  What's Changed

  • fix(types): StyledObject type to allow nested selectors by @ maximebiloe in #4212
  • feat(types): expose FastOmit to improve emit performance by @ justinbhopper in #4230

  New Contributors

  • @ maximebiloe made their first contribution in #4212

  Full Changelog: v6.1.1...v6.1.2

• 6.1.1 - 2023-11-08
  

  What's Changed

  • fix(types): remove duplicated type by @ takurinton in #4200
  • fix(native): image unsupported border color style by @ nazmeln in #4195
  • fix(styled): add displayName in all environments by @ delijah in #4208
  • fix(ssr): correctly place new rules after hydrated rules by @ probablyup in #4210

  New Contributors

  • @ nazmeln made their first contribution in #4195
  • @ delijah made their first contribution in #4208

  Full Changelog: v6.1.0...v6.1.1

• 6.1.0 - 2023-10-14
  

  What's Changed

  • fix(native): bump postcss version from 8.4.23 to 8.4.31 by @ davidlacasse in #4188
  • fix(native): solve ts warning by @ krudos in #4190
  • chore: remove babel macro due to lack of usage by @ probablyup in #4193

  New Contributors

  • @ davidlacasse made their first contribution in #4188

  Full Changelog: v6.0.9...v6.1.0

• 6.0.9 - 2023-10-12
  

  fix bundling to not hardcode window (should fix some testing use cases that were incorrectly assuming a server environment when JSDOM and similar are in use)

  Full Changelog: v6.0.8...v6.0.9

• 6.0.8 - 2023-09-13
• 6.0.7 - 2023-08-03

from styled-components GitHub release notes

Commit messages

Package name: styled-components

• f122b18 Revert "chore: add all missing peer dependency statements (#4243)"
• af1300b chore: bump version
• 20eb8ef chore: add all missing peer dependency statements (#4243)
• 6fac99e chore: bump version
• 29e0445 chore(ci): bump codeql action versions
• 6299db9 chore(ci): just enable hardened mode for one job
• f9f0168 fix: bump stylis to 4.3.1 to resolve issue with leaking nested selectors
• 3cccfe4 test: add failing test for #4224
• db467d9 chore: v6.1.5
• b6fe70d fix: further constrain self-referencing to match v5 behavior (#4244)
• a7674ba chore: remove old lockfile
• a7ed139 chore: v6.1.4
• ef9097d chore: fix type signature in test
• c4388c2 chore: fix react types
• 9bbf128 fix: allow passing theme prop to child if using attrs
• b34036a chore: switch back to yarn (#4241)
• 162d209 chore: v6.1.3
• c38ee2a fix(types): nested styled with additional prop types (#4236)
• 93ea0f3 chore: apply prettier
• 833e01e fix: pin dependencies to exact versions prior to bun migration
• 69d6f33 fix(type): missing type declarations (#4237)
• a6d9a96 chore: v6.1.2
• b6af93e feat(types): expose FastOmit to improve emit performance (#4230)
• 7c065e0 chore: update contributor guide

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs