Bump bootstrap from 4.6.2 to 5.0.0 #244
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [bootstrap](https://github.com/twbs/bootstrap) from 4.6.2 to 5.0.0. - [Release notes](https://github.com/twbs/bootstrap/releases) - [Commits](twbs/bootstrap@v4.6.2...v5.0.0) --- updated-dependencies: - dependency-name: bootstrap dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
|
This is a breaking change, IIRC known not to be compatible with the codebase. (Trying an update in the past for abs() or calc() changes/deprecations seemed like a lot of manual work to make the forms and layout all work with this version. TBC.) Will need a more thorough investigation, and perhaps some refactoring:( The security content is not relevant to our usage: (no carousel component)
|
|
Dependabot is adding dependency on "node_modules/@popperjs/core" https://github.com/floating-ui/floating-ui Popper is now Floating UI! For Popper v2, visit its dedicated branch and its documentation. For help on migrating, check out the Migration Guide. @janbrasna: ackn and agreed. |
|
The effort to migrate to v5 might as well be spent on something like https://github.com/thednp/bootstrap.native to drop the jQuery and Popper dependency. FWIW PopperJS is only ever used on the "copy to clipboard" affordance so that should be easy to replace/remove. FYI: The Mozilla brand is going to be refreshed soon, with a new typography and general guidelines too, so any updates to the layout can be made along with some framework bumps when that time comes… |
janbrasna
added
help wanted
Bumps bootstrap from 4.6.2 to 5.0.0.
Release notes
Sourced from bootstrap's releases.
... (truncated)
Commits
bf09367Release v5.0.0 (#33647)48ae5a7Rewrite migration guide (#33834)f086572refactor(docs): Added form file input variables (#33833)1a54286Fix doc typo and Bootstrap Icons link (#33832)e2df73fUpdate migration guide for some v5 changes (#33829)1e6356aNeutralise more words from placeholder text (#33731)6633845Bump eslint-config-xo from 0.35.0 to 0.36.0 (#33646)cb38744Tweak toast docs (#33810)c2ff225Bump rollup from 2.46.0 to 2.47.0 (#33818)c090ea2Bump@babel/preset-envfrom 7.14.0 to 7.14.1 (#33819)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.