chore(deps): bump dropzone from 6.0.0-beta.2 to 6.3.1

[dependabot]

Bumps dropzone from 6.0.0-beta.2 to 6.3.1.

Release notes

Sourced from dropzone's releases.

dropzone@6.3.1

Patch Changes

• #2362 07d3876 - Drop the sass dependency. The stylesheets are plain CSS now, and dist/dropzone.css and dist/basic.css are unchanged in what they do: the output was compared declaration by declaration, and every difference is a value-level equivalence the minifier applies, such as padding: 20px 20px collapsing to padding: 20px.

  This only affects you if you were importing dropzone/src/dropzone.scss directly rather than the built CSS. Import dropzone/src/dropzone.css instead, or the compiled dropzone/dist/dropzone.css.

dropzone@6.3.0

Minor Changes

• #2361 4724f39 - Ship TypeScript types. The library is now written in TypeScript and the package carries its own declarations, so dropzone is typed from its own source.

  If you installed @types/dropzone, uninstall it: it is stuck at 5.7.9 and describes the v5 API, so it will now conflict with — and is less accurate than — the types shipped here.

  Dropzone.prototype.Emitter is now Dropzone.Emitter. It was undocumented and described in the source as being exposed for tests, so this is unlikely to affect you; if you reached for it, the class is in the same place under the shorter name.

Patch Changes

• #2361 4724f39 - Give each dropzone its own thumbnail queue. It lived on the prototype, so every dropzone on a page shared one: queuing a thumbnail on one was visible from the others, and they rendered from a single queue guarded by a single lock. Only pages with more than one dropzone were affected.

dropzone@6.2.1

Patch Changes

• #2355 07a1347 Thanks @​enyo! - Point homepage at https://www.dropzone.dev/. It referenced /js, a route that only ever redirected to the front page and no longer exists, so the homepage link on npm was a 404.

• #2353 bb5af51 Thanks @​enyo! - CODE_OF_CONDUCT.md is no longer part of the published package. It stays in the repository where GitHub looks for it, but the library now lives in packages/dropzone and npm can only pack files from inside that directory. Nothing else about the package changed.

Changelog

Sourced from dropzone's changelog.

6.3.1

Patch Changes

• #2362 07d3876 - Drop the sass dependency. The stylesheets are plain CSS now, and dist/dropzone.css and dist/basic.css are unchanged in what they do: the output was compared declaration by declaration, and every difference is a value-level equivalence the minifier applies, such as padding: 20px 20px collapsing to padding: 20px.

  This only affects you if you were importing dropzone/src/dropzone.scss directly rather than the built CSS. Import dropzone/src/dropzone.css instead, or the compiled dropzone/dist/dropzone.css.

6.3.0

Minor Changes

• #2361 4724f39 - Ship TypeScript types. The library is now written in TypeScript and the package carries its own declarations, so dropzone is typed from its own source.

  If you installed @types/dropzone, uninstall it: it is stuck at 5.7.9 and describes the v5 API, so it will now conflict with — and is less accurate than — the types shipped here.

  Dropzone.prototype.Emitter is now Dropzone.Emitter. It was undocumented and described in the source as being exposed for tests, so this is unlikely to affect you; if you reached for it, the class is in the same place under the shorter name.

Patch Changes

• #2361 4724f39 - Give each dropzone its own thumbnail queue. It lived on the prototype, so every dropzone on a page shared one: queuing a thumbnail on one was visible from the others, and they rendered from a single queue guarded by a single lock. Only pages with more than one dropzone were affected.

6.2.1

Patch Changes

• #2355 07a1347 Thanks @​enyo! - Point homepage at https://www.dropzone.dev/. It referenced /js, a route that only ever redirected to the front page and no longer exists, so the homepage link on npm was a 404.

• #2353 bb5af51 Thanks @​enyo! - CODE_OF_CONDUCT.md is no longer part of the published package. It stays in the repository where GitHub looks for it, but the library now lives in packages/dropzone and npm can only pack files from inside that directory. Nothing else about the package changed.

6.2.0

Minor Changes

• #2351 ee82380 Thanks @​enyo! - addedfiles now reports the files found inside a dropped folder. It previously received e.dataTransfer.files, which holds the folder entries rather than their contents, so anyone counting dropped files got the wrong answer for folders.

  This changes when the event fires. Reading a folder is asynchronous, so on browsers that support folder drops — all of them — addedfiles is now emitted once the walk finishes, after the individual addedfile events, instead of synchronously at the end of the drop handler. Listeners still receive the event; only the timing moves.

  Also adds an emptyfolder event, emitted with the folder's path when a dropped folder turns out to contain nothing at all.

• #2348 f0697ee Thanks @​enyo! - parallelChunkUploads: true now starts at most parallelUploads chunks at a time rather than every chunk of the file at once. Pass a number to set a different limit, or Infinity to restore the previous behaviour.

• #2349 8a8b449 Thanks @​enyo! - Add resizeTransparencyFill, the color shown through transparent parts of a resized image. A transparent PNG resized to image/jpeg previously came out with black where it used to be see-through; set this to "#fff", or any CSS color, for a background instead. Defaults to null, which keeps the current behavior.

Patch Changes

• d3a9221 Thanks @​enyo! - Reword the default dictMaxFilesExceeded message from "You can not upload any more files." to "You cannot upload any more files."

• #2350 9b5015b Thanks @​enyo! - Give the hidden file input an aria-label, so accessibility auditors stop reporting it as an unlabelled input. This does not change anything for screen reader users: browsers leave visibility: hidden elements out of the accessibility tree entirely, and the .dz-button carrying dictDefaultMessage remains the control they interact with.

... (truncated)

Commits

• 616054d Version packages
• 07d3876 Drop the sass dependency and ship plain CSS
• 42ffa61 Version packages
• 253999d Document that the library is TypeScript and ships its types
• b2b820c Resolve the library to its source inside the workspace
• 4724f39 Convert the library to TypeScript and ship the types
• 74931ec Cover the parts of the library nothing reached
• a47ffd7 Measure test coverage and report it on pull requests
• 4af4a8e Version packages
• 07a1347 Fix the homepage and documentation links
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for dropzone since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​dropzone@​6.0.0-beta.2 ⏵ 6.3.1	+1		-14	+12

View full report