[Snyk] Upgrade styled-components from 5.1.1 to 5.2.0

[snyk-bot]

Snyk has created this PR to upgrade styled-components from 5.1.1 to 5.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 14 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2020-09-04.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WEBSOCKETEXTENSIONS-570623	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-NODEFORGE-598677	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-608086	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-590103	517/1000 Why? Proof of Concept exploit, CVSS 8.2	No Known Exploit
	Cryptographic Issues SNYK-JS-ELLIPTIC-571484	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept
	Prototype Pollution SNYK-JS-AJV-584908	517/1000 Why? Proof of Concept exploit, CVSS 8.2	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-567746	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: styled-components

• 5.2.0 - 2020-09-04
  

  • Make sure StyleSheetManager renders all styles in iframe / child windows (see #3159) thanks @eramdam!

  • Rework how components self-reference in extension scenarios (see #3236); should fix a bunch of subtle bugs around patterns like & + &

  • Fix keyframes not receiving a modified stylis instance when using something like stylis-plugin-rtl (see #3239)

  • Big performance gain for components using style objects (see #3239)

  • We no longer emit dynamic classNames for empty rulesets, so some className churn may occur in snapshots

  • Preallocate global style placement to ensure cGS is consistently inserted at the top of the stylesheet; note that this is done in runtime order so, if you have multiple cGS that have overlapping styles, ensure they're defined in code in the sequence you would want them injected (see #3239)

  • Add "engines" to package.json (currently set to Node 10, the oldest supported LTS distribution) (see #3201) thanks @MichaelDeBoey!

  Finally, special thanks to @willheslam for testing and some last minute fixes on this release!

• 5.2.0-test.12 - 2020-09-02
• 5.2.0-test.11 - 2020-08-31
• 5.2.0-test.10 - 2020-08-30
  

  We are planning to release 5.2 on September 2/3, please help us test!

  yarn add styled-components@test

  • Preallocate global style placement to ensure cGS is consistently inserted at the top of the stylesheet; note that this is done in runtime order so, if you have multiple cGS that have overlapping styles, ensure they're defined in code in the sequence you would want them injected (see #3239)

    NOTE: This is a behavioral change and might require adjustment in your codebase if you have many createGlobalStyle components in use. We do not think it will affect the majority of projects other than fix existing bugs.

  • createGlobalStyle is now React.StrictMode compliant

  • Make sure StyleSheetManager renders all styles in iframe / child windows (see #3159) thanks @eramdam!

  • Rework how components self-reference in extension scenarios (see #3236); should fix a bunch of subtle bugs around patterns like & + &

  • Fix keyframes not receiving a modified stylis instance when using something like stylis-plugin-rtl (see #3239)

  • Big performance gain for components using style objects (see #3239)

  • We no longer emit dynamic classNames for empty rulesets, so some className churn may occur in snapshots

  • Add "engines" to package.json (currently set to Node 10, the oldest supported LTS distribution) (see #3201) thanks @MichaelDeBoey!

• 5.2.0-test.9 - 2020-08-30
• 5.2.0-test.8 - 2020-08-30
• 5.2.0-test.7 - 2020-08-30
• 5.2.0-test.6 - 2020-08-30
• 5.2.0-test.5 - 2020-08-28
• 5.2.0-test.4 - 2020-08-28
• 5.2.0-test.3 - 2020-08-28
• 5.2.0-test.2 - 2020-08-27
• 5.2.0-test.1 - 2020-08-27
• 5.2.0-test.0 - 2020-08-27
• 5.1.1 - 2020-05-25
  

  New Functionality

  • Implement shouldForwardProp API for native and primitive platforms, which was previously missing in [v5.1.0] (see #3093)
    This has been released under a patch bump instead of a minor, since it's only been missing from Native-support.

  Bugfixes

  • Added useTheme hook to named exports for react-primitives entrypoint (see #2982) thanks @jladuval!
  • Escape every CSS ident character necessary when converting component display names to class names (see #3102) thanks @kripod!

from styled-components GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs