chore(deps): update dependency chart.js to v2.9.4 [security] - abandoned

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
chart.js (source)	2.8.0 -> 2.9.4

GitHub Vulnerability Alerts

CVE-2020-7746

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.

---

Release Notes

chartjs/Chart.js

v2.9.4

Compare Source

This is the last release of v2 and focused on fixing bugs identified in the v2.9.3 release.

Bugs Fixed

• #​7404 - Preserve prototypes when cloning. Thanks @​iddings
• #​7587 - Fix docs for external moment.js. Thanks @​mojoaxel
• #​7853 - Fix box recursion when dimensions are NaN. Thanks @​alessandroasm
• #​7883 - Fix call stack exception when computing label sizes. Thanks @​silentmatt
• #​7918 - Prevent global prototype pollution via the merge helper
• #​7920 - Use Object.create(null) as merge target, to prevent prototype pollution

v2.9.3

Compare Source

Bug Fixes

• #​6698 Fix undefined variable
• #​6719 Don't make legend empty when fill is false

Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@​kurkle, @​benmccann, and @​etimberg).

v2.9.2

Compare Source

Bug Fixes

• #​6641 IE11 & Edge compatible style injection
• #​6655 Backwards compatible default fill for radar charts
• #​6660 Improve clipping of line charts when border widths are large
• #​6661 When a legend item is clicked, make sure the correct item is hidden
• #​6663 Refresh package-lock file to pick up new dependency

Performance

• #​6671 Stop unnecessary line calculations

Documentation

• #​6643 Combine performance documentation sections

Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@​nagix, @​kurkle, @​benmccann, @​etimberg and @​simonbrunel).

v2.9.1

Compare Source

Bug Fixes

• #​6603 Fix deprecation warnings for horizontal bar charts
• #​6608 Fix zoom plugin by no longer clipping scale.getDecimalForPixel to the chart area
• #​6617 Non numeric Y axes did not work

Documentation

• #​6613 Add link to performance documentation

Development

• #​6609 - Tests no longer use deprecated options

Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@​nagix, @​kurkle, @​benmccann, @​etimberg and @​simonbrunel).

v2.9.0

Compare Source

Breaking changes

• https://github.com/chartjs/Chart.js/pull/6131 helpers._decimalPlaces is now private

Enhancements

• https://github.com/chartjs/Chart.js/pull/6527 Hover styling for dataset in 'dataset' mode
• https://github.com/chartjs/Chart.js/pull/6268 Implement dataset.order
• https://github.com/chartjs/Chart.js/pull/6509 Make autoSkip aware of major ticks
• https://github.com/chartjs/Chart.js/pull/6460 Implemented RTL support for legends and tooltips
• https://github.com/chartjs/Chart.js/pull/6490 HTML DOM building
• https://github.com/chartjs/Chart.js/pull/6326 Draw the rightmost grid line when offsetGridLines is true
• https://github.com/chartjs/Chart.js/pull/6343 Handle reverse support in core.scale
• https://github.com/chartjs/Chart.js/pull/6289 Support spanGaps in radar charts
• https://github.com/chartjs/Chart.js/pull/6323 Support object values for bar charts
• https://github.com/chartjs/Chart.js/pull/6287 Support rotation for pointStyle image
• https://github.com/chartjs/Chart.js/pull/6257 Allow specifying labels in time scale options
• https://github.com/chartjs/Chart.js/pull/6281 Support boundary filling modes in radialLinear scale
• https://github.com/chartjs/Chart.js/pull/6056 Add support for floating bar chart ([start, end])
• https://github.com/chartjs/Chart.js/pull/6241 Implement layers (z-index) for layout items
• https://github.com/chartjs/Chart.js/pull/5621 Make legend appearance consistent with chart elements
• https://github.com/chartjs/Chart.js/pull/5999 Implement per-dataset type (default and per-chart) options
• https://github.com/chartjs/Chart.js/pull/6097 Specify time scale min and max in standard manner
• https://github.com/chartjs/Chart.js/pull/6141 Legend align option. Thanks @​dkichler
• https://github.com/chartjs/Chart.js/pull/6128 Make line options scriptable. Thanks @​janelledement

Performance

• https://github.com/chartjs/Chart.js/pull/6594 Remove a couple calls to helpers.each
• https://github.com/chartjs/Chart.js/pull/6247 Remove duplicate scale building
• https://github.com/chartjs/Chart.js/pull/6579 Cache resolved data element options
• https://github.com/chartjs/Chart.js/pull/6575 Simplify line drawing
• https://github.com/chartjs/Chart.js/pull/6508 Add ticks.sampleSize option
• https://github.com/chartjs/Chart.js/pull/6354 Perf improvement for ticks.source:'labels'
• https://github.com/chartjs/Chart.js/pull/6301 Replace helpers.each with for-loops
• https://github.com/chartjs/Chart.js/pull/6304 Refactor core.layout
• https://github.com/chartjs/Chart.js/pull/6307 Faster major tick calculation
• https://github.com/chartjs/Chart.js/pull/6250 Cache getScaleForId() calls in the line controller
• https://github.com/chartjs/Chart.js/pull/6148 Replace helpers.extend

Bug Fixes

• https://github.com/chartjs/Chart.js/pull/6249 Bar options should be defined on dataset instead of scale
• https://github.com/chartjs/Chart.js/pull/6556 Inject styles into Shadow DOM when inside Shadow DOM
• https://github.com/chartjs/Chart.js/pull/6583 Fix unit determination when autoSkip is enabled
• https://github.com/chartjs/Chart.js/pull/6581 Return correct index/value id in radar/polarArea
• https://github.com/chartjs/Chart.js/pull/6580 Fix logarithmic test to use correct scale
• https://github.com/chartjs/Chart.js/pull/6528 Make sure zeroLineIndex is defined
• https://github.com/chartjs/Chart.js/pull/6523 Fix right side scale ticks
• https://github.com/chartjs/Chart.js/pull/6423 Clamp argument of toExponential between 0 and 20. Thanks @​veggiesaurus
• https://github.com/chartjs/Chart.js/pull/6328 Fix getValueForPixel in time scale
• https://github.com/chartjs/Chart.js/pull/6292 Adjust vertical alignment of tooltip items
• https://github.com/chartjs/Chart.js/pull/6321 Update dataset metadata when axisID changes
• https://github.com/chartjs/Chart.js/pull/6291 Assign unique scale IDs
• https://github.com/chartjs/Chart.js/pull/6288 Fix regression in lineTension
• https://github.com/chartjs/Chart.js/pull/6282 Treat null as NaN in radialLinear scale
• https://github.com/chartjs/Chart.js/pull/6285 Keep lines on the left and right edges from being cut
• https://github.com/chartjs/Chart.js/pull/6269 Apply lineJoin style at the first point in radar charts
• https://github.com/chartjs/Chart.js/pull/6280 Fix point label counting in radialLinear scale
• https://github.com/chartjs/Chart.js/pull/6279 Treat 0 as a valid point label
• https://github.com/chartjs/Chart.js/pull/6265 Utilize tick.major in tickFormatFunction
• https://github.com/chartjs/Chart.js/pull/6264 Apply offset regardless of min/max setting
• https://github.com/chartjs/Chart.js/pull/6258 Fix ticks generation for vertical time scale
• https://github.com/chartjs/Chart.js/pull/6259 Fix determineUnitForFormatting floating point error
• https://github.com/chartjs/Chart.js/pull/6115 Fix overlapping auto-generated ticks on time scale
• https://github.com/chartjs/Chart.js/pull/6238 Fix tooltip title in radar charts
• https://github.com/chartjs/Chart.js/pull/6224 Fix arc size calculation when circumference is under 2*PI
• https://github.com/chartjs/Chart.js/pull/6215 Fix arc border with circumference over 2*PI
• https://github.com/chartjs/Chart.js/pull/5961 Fix tick label rotation and layout issues
• https://github.com/chartjs/Chart.js/pull/6182 Use the appropriate time format for auto tick generation
• https://github.com/chartjs/Chart.js/pull/6208 Fill before drawing lines
• https://github.com/chartjs/Chart.js/pull/6209 Fix missing tooltip value in radar charts
• https://github.com/chartjs/Chart.js/pull/6177 Normalize angle for index in radialLinear scale
• https://github.com/chartjs/Chart.js/pull/6102 Fix ticks.minor and ticks.major issues
• https://github.com/chartjs/Chart.js/pull/6129 Fix hover animation
• https://github.com/chartjs/Chart.js/pull/6120 Improved helpers.almostWhole

Documentation

• https://github.com/chartjs/Chart.js/pull/6585 Add a note to the perf documentation about rotation
• https://github.com/chartjs/Chart.js/pull/6554 Add link to linear radial axis for radar chart doc
• https://github.com/chartjs/Chart.js/pull/6491 Add elements.arc.angle in documentation
• https://github.com/chartjs/Chart.js/pull/6466 Fixed incorrect spelling in pie dataset options. Thanks @​SeppPenner
• https://github.com/chartjs/Chart.js/pull/6435 Add link back to home page from docs
• https://github.com/chartjs/Chart.js/pull/6393 Add radar chart config options
• https://github.com/chartjs/Chart.js/pull/6293 Correct descriptions on ticks.display and add pointLabels.display
• https://github.com/chartjs/Chart.js/pull/6263 Add sample for radar scriptable options
• https://github.com/chartjs/Chart.js/pull/6244 Fix data in timeseries sample
• https://github.com/chartjs/Chart.js/pull/6186 Typo in doughnut documentation. Thanks @​joshuamcewen
• https://github.com/chartjs/Chart.js/pull/6132 Make docs consistent for cubicInterpolationMode and fill. Thanks @​stockiNail
• https://github.com/chartjs/Chart.js/pull/6119 Demonstrate multiple units on timeseries example
• https://github.com/chartjs/Chart.js/pull/6139 Documented tooltip alignment options
• https://github.com/chartjs/Chart.js/pull/6134 Documented date adapter

Development

• https://github.com/chartjs/Chart.js/pull/6507 Improved minimization when calling helpers
• https://github.com/chartjs/Chart.js/pull/6497 Reduce indentation
• https://github.com/chartjs/Chart.js/pull/6355 Do autoSkip in update
• https://github.com/chartjs/Chart.js/pull/6493 Upgrade rollup and plugins
• https://github.com/chartjs/Chart.js/pull/6362 Improved code minimization
• https://github.com/chartjs/Chart.js/pull/6360 Create helpers.math._factorize
• https://github.com/chartjs/Chart.js/pull/6351 Lazily compute label sizes
• https://github.com/chartjs/Chart.js/pull/6347 Render charts only once in time scale tests
• https://github.com/chartjs/Chart.js/pull/6246 Avoid time related deprecation warnings in tests

Thanks to the maintainers and collaborators for their help to improve and test Chart.js (@​nagix, @​kurkle, @​benmccann, @​etimberg and @​simonbrunel).

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[renovate]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.