bootstrap-vue · jacobmllr95 · Nov 8, 2020 · Oct 22, 2020 · Oct 22, 2020 · Oct 22, 2020
diff --git a/.bundlewatch.config.json b/.bundlewatch.config.json
@@ -2,7 +2,7 @@
   "files": [
     {
       "path": "./dist/bootstrap-vue-icons.js",
-      "maxSize": "110 kB"
+      "maxSize": "115 kB"
     },
     {
       "path": "./dist/bootstrap-vue-icons.min.js",

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -1,6 +1,36 @@
 version: 2
 updates:
   - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: tuesday
+      time: "12:00"
+      timezone: Europe/Berlin
+    reviewers:
+      - jackmu95
+    labels:
+      - "Type: CI"
+      - "Type: Dependencies"
+
+  - package-ecosystem: npm
     directory: "/"
     schedule:
       interval: "daily"
+      time: "12:00"
+      timezone: Europe/Berlin
+    ignore:
+      - dependency-name: "bootstrap"
+        versions: [">=5.0.0"]
+      - dependency-name: "highlight.js"
+        versions: [">=10.0.0"]
+      - dependency-name: "prettier"
+        versions: [">1.14.3"]
+      - dependency-name: "@vue/test-utils"
+        versions: [">=2.0.0"]
+    reviewers:
+      - jackmu95
+    labels:
+      - "Type: Dependencies"
+    versioning-strategy: increase
+    rebase-strategy: disabled
diff --git a/.github/renovate.json b/.github/renovate.json
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -17,7 +17,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest]
-        node: [10, 12]
+        node: [10, 12, 14]
 
     steps:
       - name: Clone repository
@@ -50,6 +50,6 @@ jobs:
 
       - name: BundleWatch
         run: yarn run bundlewatch
-        if: matrix.node == '12'
+        if: matrix.node == '14'
         env:
           BUNDLEWATCH_GITHUB_TOKEN: "${{ secrets.BUNDLEWATCH_GITHUB_TOKEN }}"
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -0,0 +1,58 @@
+name: "CodeQL"
+
+on:
+  push:
+  pull_request:
+  schedule:
+    - cron: "0 2 * * 5"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ["javascript"]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2
+        with:
+          # We must fetch at least the immediate parents so that if this is
+          # a pull request then we can checkout the head
+          fetch-depth: 2
+
+      # If this run was triggered by a pull request event, then checkout
+      # the head of the pull request instead of the merge commit
+      - run: git checkout HEAD^2
+        if: ${{ github.event_name == 'pull_request' }}
+
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v1
+        with:
+          languages: ${{ matrix.language }}
+          # If you wish to specify custom queries, you can do so here or in a config file
+          # By default, queries listed here will override any specified in a config file
+          # Prefix the list here with "+" to use these queries and those in the config file
+          # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+      # Autobuild attempts to build any compiled languages (C/C++, C#, or Java)
+      # If this step fails, then you should remove it and run the build manually (see below)
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v1
+
+      # ℹ️ Command-line programs to run using the OS shell.
+      # 📚 https://git.io/JvXDl
+
+      # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines and
+      #    modify them (or add more) to build your code if your project uses a compiled language
+
+      #- run: |
+      #   make bootstrap
+      #   make release
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v1
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -17,7 +17,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest]
-        node: [12]
+        node: [14]
 
     steps:
       - name: Clone repository
@@ -54,7 +54,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest]
-        node: [12]
+        node: [14]
 
     steps:
       - name: Clone repository
@@ -91,7 +91,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest]
-        node: [10, 12]
+        node: [10, 12, 14]
 
     steps:
       - name: Clone repository
@@ -124,7 +124,7 @@ jobs:
 
       - name: CodeCov
         uses: codecov/codecov-action@v1
-        if: matrix.node == '12'
+        if: matrix.node == '14'
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           flags: unittests
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,48 @@ All notable changes to this project will be documented in this file. See
 [standard-version](https://github.com/conventional-changelog/standard-version) for commit
 guidelines.
 
+<a name="2.19.0"></a>
+
+## [v2.19.0](https://github.com/bootstrap-vue/bootstrap-vue/compare/v2.18.1...v2.19.0)
+
+Released: 2020-11-08
+
+### Features v2.19.0
+
+- **b-media:** improve aside right handling
+  ([#5965](https://github.com/bootstrap-vue/bootstrap-vue/issues/5965))
+  ([49a3f00](https://github.com/bootstrap-vue/bootstrap-vue/commit/49a3f00420bf9958deda3a6be0ccb76cc3ea06ba))
+- **config:** improved defaults handling (closes
+  [#4507](https://github.com/bootstrap-vue/bootstrap-vue/issues/4507),
+  [#5138](https://github.com/bootstrap-vue/bootstrap-vue/issues/5138),
+  [#5291](https://github.com/bootstrap-vue/bootstrap-vue/issues/5291),
+  [#5459](https://github.com/bootstrap-vue/bootstrap-vue/issues/5459),
+  [#5958](https://github.com/bootstrap-vue/bootstrap-vue/issues/5958))
+  ([#5981](https://github.com/bootstrap-vue/bootstrap-vue/issues/5981))
+  ([7ea0cc4](https://github.com/bootstrap-vue/bootstrap-vue/commit/7ea0cc4a16d27b179eca47d351eaa9fe6fdfd56e))
+
+### Bug Fixes v2.19.0
+
+- **b-avatar:** badge `z-index` handling
+  ([#5975](https://github.com/bootstrap-vue/bootstrap-vue/issues/5975))
+  ([ecb33bd](https://github.com/bootstrap-vue/bootstrap-vue/commit/ecb33bdb510832096bc5a5196a11c97388bf6411))
+- **b-avatar:** prevent avatar from being squished
+  ([#5963](https://github.com/bootstrap-vue/bootstrap-vue/issues/5963))
+  ([b3946ed](https://github.com/bootstrap-vue/bootstrap-vue/commit/b3946ed7a7b327fb7c66b44caaf122460fc24005)),
+  closes [#5962](https://github.com/bootstrap-vue/bootstrap-vue/issues/5962)
+- **b-dropdown:** click handling on close (closes
+  [#5982](https://github.com/bootstrap-vue/bootstrap-vue/issues/5982))
+  ([#6009](https://github.com/bootstrap-vue/bootstrap-vue/issues/6009))
+  ([cf7a1cb](https://github.com/bootstrap-vue/bootstrap-vue/commit/cf7a1cb017e2263939a64e300abbbbac35c121d4))
+- **b-form-checkbox/b-form-radio:** `change` event timing
+  ([#6008](https://github.com/bootstrap-vue/bootstrap-vue/issues/6008))
+  ([37ec7e9](https://github.com/bootstrap-vue/bootstrap-vue/commit/37ec7e9991b66af51ff81420da8eb88928615f9d))
+- **b-form-group:** accessibility when `label-for` prop not set
+  ([#6006](https://github.com/bootstrap-vue/bootstrap-vue/issues/6006))
+  ([16f777b](https://github.com/bootstrap-vue/bootstrap-vue/commit/16f777b14bdcf9ebb6fae0325d355c7f5272bd98))
+
+<a name="2.18.1"></a>
+
 ## [v2.18.1](https://github.com/bootstrap-vue/bootstrap-vue/compare/v2.18.0...v2.18.1)
 
 Released: 2020-10-21
@@ -22,6 +64,8 @@ Released: 2020-10-21
   ([#5934](https://github.com/bootstrap-vue/bootstrap-vue/issues/5934))
   ([8a367b6](https://github.com/bootstrap-vue/bootstrap-vue/commit/8a367b6296b0aa9700f67633fd60fb351e2f7373))
 
+<a name="2.18.0"></a>
+
 ## [v2.18.0](https://github.com/bootstrap-vue/bootstrap-vue/compare/v2.17.3...v2.18.0)
 
 Released: 2020-10-19

diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,20 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 2.x     | :white_check_mark: |
+| 1.x     | :x:                |
+| < 1.0   | :x:                |
+
+## Reporting a Vulnerability
+
+The BootstrapVue team takes security issues very seriously. We appreciate your efforts to
+responsibly disclose your findings, and will make every effort to acknowledge your contributions.
+
+To report a security issue, email
+[bootstrapvue.js@gmail.com](mailto:security@bootstrapvue.js@gmail.com) and include the word
+"SECURITY" in the subject line.
+
+We'll endeavor to respond quickly, and will keep you updated throughout the process.
diff --git a/docs/components/componentdoc.vue b/docs/components/componentdoc.vue
@@ -85,6 +85,11 @@
       <anchored-heading :id="`comp-ref-${componentName}-props`" level="4" class="mb-3">
         Properties
       </anchored-heading>
+
+      <p>
+        All property default values are <b-link href="/docs/reference/settings">globally configurable</b-link>.
+      </p>
+
       <b-table
         :items="propsItems"
         :fields="propsFields"
@@ -98,7 +103,6 @@
         <template #cell(prop)="{ value, item }">
           <code class="text-nowrap notranslate" translate="no">{{ value }}</code><br>
           <b-badge v-if="item.required" variant="info">Required</b-badge>
-          <b-badge v-if="item.settings" variant="dark" href="/docs/reference/settings" title="Configurable in settings">Settings</b-badge>
           <b-badge v-if="item.version" variant="secondary">v{{ item.version }}+</b-badge>
           <b-badge v-if="item.isVModel" variant="primary">v-model</b-badge>
           <b-badge v-if="item.xss" variant="warning">Use with caution</b-badge>
@@ -298,8 +302,7 @@
 <script>
 import Vue from 'vue'
 import commonProps from '../common-props.json'
-import { defaultConfig } from '../content'
-import { kebabCase } from '../utils'
+import { getComponentName, getCleanComponentName, kebabCase } from '../utils'
 import AnchoredHeading from './anchored-heading'
 
 export default {
@@ -425,7 +428,6 @@ export default {
     propsItems() {
       const props = this.componentProps
       const propsMetaObj = this.componentPropsMetaObj
-      const componentSettings = defaultConfig[this.componentOptions.name] || {}
 
       return Object.keys(props).map(prop => {
         const p = props[prop]
@@ -457,16 +459,13 @@ export default {
             ? ''
             : String(JSON.stringify(defaultValue, undefined, 1)).replace(/"/g, "'")
 
-        const settings = Object.prototype.hasOwnProperty.call(componentSettings, prop)
-
         return {
           prop: kebabCase(prop),
           type,
           defaultValue,
           required: p.required || false,
           description: meta.description || '',
           version: meta.version || '',
-          settings,
           xss: /[a-z]Html$/.test(prop),
           isVModel: this.componentVModel && this.componentVModel.prop === prop,
           deprecated: p.deprecated || false,
@@ -478,13 +477,13 @@ export default {
     slotsItems() {
       // We use object spread here so that `_showDetails` doesn't
       // mutate the original array objects
-      return this.slots ? this.slots.map(s => ({ ...s })) : []
+      return this.slots ? this.slots.map(slot => ({ ...slot })) : []
     },
     componentName() {
-      return kebabCase(this.component).replace('{', '-{')
+      return getComponentName(this.component)
     },
     componentNameClean() {
-      return this.componentName.replace('{', '').replace('}', '')
+      return getCleanComponentName(this.component)
     },
     tag() {
       return `<${this.componentName}>`
@@ -523,7 +522,7 @@ ul.component-ref-mini-toc:empty {
   display: none;
 }
 
-/deep/ .word-wrap-normal {
+>>> .word-wrap-normal {
   white-space: normal !important;
   word-break: normal !important;
   overflow-wrap: normal !important;

diff --git a/docs/components/contributors.vue b/docs/components/contributors.vue
@@ -129,7 +129,7 @@ export default {
           cb(this.processOcNodes(response.nodes || []), null)
         } else {
           // We just return an empty node list rather than spew an error
-          // eslint-disable-next-line standard/no-callback-literal
+          // eslint-disable-next-line node/no-callback-literal
           cb([], xhr.statusText)
         }
       }

diff --git a/docs/components/icons-table.vue b/docs/components/icons-table.vue
@@ -118,16 +118,16 @@ export default {
   position: relative;
 }
 
-#bv-icons-table-result /deep/ .bi {
+#bv-icons-table-result >>> .bi {
   font-size: 1.5rem;
 }
 
-.form-group /deep/ .form-text {
+.form-group >>> .form-text {
   text-align: right;
 }
 
 // Icon zoom on hover
-.flip-icon-list-icon /deep/ .card {
+.flip-icon-list-icon >>> .card {
   .bi {
     transition: transform 0.15s;
   }