[Snyk] Upgrade plotly.js from 1.52.0 to 1.52.2

[snyk-bot]

Snyk has created this PR to upgrade plotly.js from 1.52.0 to 1.52.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released a month ago, on 2020-02-03.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-536840	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-450202	Proof of Concept

Release notes

Package name: plotly.js

• 1.52.2 - 2020-02-03
  

  Fixed

  • Handle 'missing' matching axes [#4529]
  • Fix hover for mesh3d, isosurface and volume
    when using plotGlPixelRatio > 1 (bug introduced in 1.45.0) [#4534]
  • Fix hover of mesh3d traces with facecolor and intensitymode: 'cell' [#4539]
  • Fix gl3d rendering on iPad Pro & iPad 7th + iOs v13 + Safari [#4360, #4546]
  • Fix pixel-rounding logic for blank bars [#4522]
  • Fix pathbar.visible updates in treemap traces [#4516]
  • Fix waterfall 'closest' hover when cursor is below the size axis [#4537]
  • Fix mapbox layout layer opacity for raster types [#4525]
  • Allow 0 in grouby transform nameformat templates [#4526]
  • Fix Plotly.validate for valType:'any' attributes [#4526]
  • Bump d3-interpolate to v1.4.0 [#4475]
  • Bump d3-hierarchy to v1.1.9 [#4475]
  • Fix typo in annotation align attribute description [#4528]
  • Fix plot_bgcolor and paper_bgcolor attribute description [#4536]
  • Fix insidetextorientation description for pie and sunburst traces [#4523]
• 1.52.1 - 2020-01-13
  

  [1.52.1] -- 2020-01-13

  Fixed

  • Fix handling of geo.visible false edge case in order to
    override template.layout.geo.show* attributes [#4483]
• 1.52.0 - 2020-01-08
  

  [1.52.0] -- 2020-01-08

  Added

  • Add uniformtext behavior to bar, funnel, waterfall, pie, funnelarea,
    sunburst and treemap traces [#4420, #4444, #4469]
  • Add "pre-computed" q1/median/q3 input signature for box traces [#4432]
  • Add support for legend titles [#4386]
  • Add legend items for choropleth, choroplethmapbox, cone, densitymapbox,
    heatmap, histogram2d, isosurface, mesh3d, streamtube,
    surface, volume traces [#4386, #4441]
  • Add "auto-fitting" behavior to geo subplots via geo.fitbounds attribute [#4419]
  • Add support for custom geojson geometries in choropleth
    and scattergeo traces [#4419]
  • Add "exclusive" and "inclusive" quartile-computing algorithm to box traces
    via quartilemethod attribute [#4432]
  • Add insidetextorientation attribute to pie and sunburst traces [#4420]
  • Add intensitymode to allow cell intensity values in mesh3d traces [#4446]
  • Add featureidkey attribute to choroplethmapbox, choropleth
    and scattergeo traces [#4419]
  • Add geo.visible shortcut attribute [#4419]
  • Add coordinates of mapbox subplot view as a derived property in plotly_relayout
    event data [#4413]
  • Add modebar buttons zoomInMapbox and zoomOutMapbox [#4398]
  • Add support for typed array in groupby transforms groups [#4410]
  • Add notifyOnLogging config option that allows log/warn/error messages
    to show up in notifiers pop-ups [#4464]
  • Enable loading locale bundles before plotly.js bundles [#4453]
  • Add Korean ko locale [#4315]

  Changed

  • Skip mapbox subplot map position updates while panning/zooming removing
    potential stuttering [#4418]
  • Optimize mapbox raster layout layer updates [#4418]
  • Improve sunburst and treemap click events behavior [#4454]
  • Improve attribute description of sunburst/treemap outsidetextfont [#4463]
  • Update source and dist file headers to 2020 [#4457]

  Fixed

  • Fix streamtube traces with numeric string coordinates
    (bug introduced in 1.51.0) [#4431]
  • Correctly handle different data orders in isosurface and volume traces [#4431]
  • Fix symbol numbers in scattergl and splom traces [#4465]
  • Fix coloraxis colorbars for sunburst and treemap with
    values colorscales [#4444]
  • Fix inside text fitting for bar, funnel and waterfall traces with
    set textangle [#4444]
  • Fix handling of invalid values and zero totals for pie and funnelarea [#4416]
  • Fix colorbar of reversescale colorscales of heatmap-coloring contours [#4437]
  • Fix colorbar templating for "non-root" colorscales [#4470]
  • Fix event data and some hover templates for x/y/z heatmap + contour [#4472]
  • Fix "toggleothers" behavior for graphs with traces not in legend [#4406]
  • Fix histogram bingroup logic when calendars module is not registered [#4439]
  • Fix "almost equal" branchvalue: 'total' partial sum cases [#4442]
  • Fix handling of treemap pathbar.textfont [#4444]

from plotly.js GitHub release notes

Commit messages

Package name: plotly.js

• 52a5d83 1.52.2
• 93ebb2a update changelog for 1.52.2
• b840d52 Merge pull request #4546 from plotly/fix-webgl-ipad-pro
• aa28eba return early if there is no navigator
• 436fca4 add extra logic to get userAgent
• 63c51d1 bump gl-plot3d and fix issue 4502 - handle Safari with iPad (Pro) + iOS 13
• e1e12b9 Merge pull request #4541 from plotly/mesh3d-improve-cell-intensity-tests
• 861a503 Merge pull request #4542 from plotly/safe-gl-fbo-call
• b618ed3 bump gl-plot3d & gl-plot2d as well as gl-select-static
• fc16004 match createFBO arguments with gl-fbo arguments
• d5b80cc improve mesh3d hover and image test
• e7f38c0 Merge pull request #4539 from plotly/mesh3d-hover-on-face-data
• 71e87e6 Merge pull request #4537 from plotly/waterfall-closest-below-value-axis
• d1cb618 bump gl-mesh3d v2.3.0
• ff71362 modify the list of flaky mocks again
• 4052a03 Merge pull request #4536 from plotly/update-bg-color-description
• d348dd0 fix gl-mesh3d hover to return position and index of faces when face-color or face-intensity provided
• e131cb7 add the word background to description so it will get indexed by algolia
• d470090 fix waterfall sizeFn for hover values below the size axis
• 11fbcc0 Merge pull request #4534 from plotly/mesh3d-hover-fix4533
• 6cf8b64 Merge pull request #4529 from plotly/axis-matches-with-trace-less-axis
• e386e5f bump gl-mesh3d v2.2.1
• 2589451 modify the list of flaky mocks
• f151aed add treemap_with-without_values to list of flaky mocks

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs