Bump @mantine/form from 7.3.2 to 7.14.1

[dependabot]

Bumps @mantine/form from 7.3.2 to 7.14.1.

Release notes

Sourced from @​mantine/form's releases.

7.14.1

What's Changed

• [@mantine/hooks] use-hotkeys: Fix + sign not being supported (syntax: shift+[plus]) (#7123)
• [@mantine/core] Popover: Fix styles prop being handled incorrectly (#7120)
• [@mantine/charts] Fix valueFormatter not working in point labels of LineChant, AreaChart and CompositeChart components (#6989)
• [@mantine/core] Popover: Fix onOpen and onClose callbacks being called on each render (#7022, #7111, #7115)
• [@mantine/core] Menu: Fix Blocked aria-hidden warning when an interactive element is clicked outside of the Menu.Dropdown when the Menu is opened (#7035)
• [@mantine/core] Fix top style prop not being conveted to rem (#7112)
• [@mantine/dates] DateInput: Fix defaultDate prop not working when the value is set to null (#4426)
• [@mantine/core] NumberInput: Remove increment/decrement control if value cannot be safely incremented (is larger than Number.MAX_SAFE_INTEGER) (#7033)
• [@mantine/core] NumberInput: Fix value being reverted to start value if intial component value is a string
• [@mantine/notifications] Fix NotificationData type being too broad (#7097)
• [@mantine/core] RingProgress: Add transitionDuration prop support (#7103)
• [@mantine/core] TagsInput: Fix incorrect tag remove logic with duplicated tags (#7105)
• [@mantine/core] Combobox: Fix incorrect aria-controls attribute being set on the target element when the dropdown is closed (#7114)

New Contributors

• @​Samy0412 made their first contribution in mantinedev/mantine#7114

Full Changelog: mantinedev/mantine@7.14.0...7.14.1

7.14.0 💋

View changelog with demos on mantine.dev website

AngleSlider component

New AngleSlider component:

import { AngleSlider, Group } from '@mantine/core';
function Demo() {
return (
<Group p="lg" gap={50}>
<AngleSlider
aria-label="Angle slider"
formatLabel={(value) => ${value}°}
size={100}
restrictToMarks
marks={[
{ value: 0 },
{ value: 45 },
{ value: 90 },
{ value: 135 },
{ value: 180 },
{ value: 225 },
{ value: 270 },
{ value: 315 },
]}
/>
</tr></table>

... (truncated)

Commits

• 12adf69 [release] Version: 7.14.1
• 811b104 [release] Version: 7.14.0
• 727c9e4 Merge branch master into 7.14
• 1d07a31 [release] Version: 7.13.5
• a56501b [release] Version: 7.13.5-alpha.2
• 34ee3cd [release] Version: 7.13.5-alpha.1
• f34ab08 [core] Replace versions for alpha patch release
• e5a8d4f [@​mantine/core] Update peer dependencies range for react to allow react and r...
• a58f00b [@​mantine/form] Add useCallback wrapper to form.resetDirty (#7029)
• d60e538 [@​mantine/form] Add additional type exports from the package (#7062)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dryrunsecurity]

DryRun Security Summary

The provided code change updates the version of the @mantine/form package from ^7.3.2 to ^7.14.1, which is a significant version bump that requires thorough review to ensure there are no newly introduced vulnerabilities or security issues.

Expand for full summary

Summary:

The provided code change updates the version of the @mantine/form package from ^7.3.2 to ^7.14.1 in the package.json file. This is a significant version bump, indicating that the update likely includes new features, bug fixes, or performance improvements. From an application security perspective, this update is worth reviewing to ensure there are no newly introduced vulnerabilities or security issues.

Key considerations for this change include checking for any published security advisories, performing thorough regression testing of the application's form functionality, reviewing the dependency chain to understand any transitive dependencies that may also need to be updated, and carefully reviewing changes in the @mantine/form package's API or functionality. While the Mantine library is generally considered secure, it's important to approach dependency updates, especially for critical components like form handling, with due diligence to maintain the application's security and stability.

Files Changed:

• package.json: The version of the @mantine/form package has been updated from ^7.3.2 to ^7.14.1.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[dependabot]

Superseded by #119.