[Snyk] Upgrade bootstrap-sass from 3.3.7 to 3.4.1

[snyk-bot]

Snyk has created this PR to upgrade bootstrap-sass from 3.3.7 to 3.4.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released a year ago, on 2019-02-13.

Release notes

Package name: bootstrap-sass

• 3.4.1 - 2019-02-13
  
  • Security: Fixed an XSS vulnerability (CVE-2019-8331) in our tooltip and popover plugins by implementing a new HTML sanitizer
  • Handle bad selectors (#) in data-target for Dropdowns
  • Clarified tooltip selector documentation
  • Added support for NuGet contentFiles
• 3.4.0 - 2018-12-14
  
  • New: Added a .row-no-gutters class.
  • New: Added docs searching via Algolia.
  • Fixed: Resolved an XSS issue in Alert, Carousel, Collapse, Dropdown, Modal, and Tab components. See https://snyk.io/vuln/npm:bootstrap:20160627 for details.
  • Fixed: Added padding to .navbar-fixed-* on modal open
  • Fixed: Removed the double border on elements.
  • Removed Gist creation in web-based Customizer since anonymous gists were disabled long ago by GitHub.
  • Removed drag and drop support from Customizer since it didn’t work anymore.

  Framework version: Bootstrap v3.4.0
  See the upstream blog post for a detailed overview.

• 3.3.7 - 2016-07-25
  

  tag v3.3.7

from bootstrap-sass GitHub release notes

Commit messages

Package name: bootstrap-sass

• b34765d Rakefile: require 'bundler/gem_tasks'
• 143aa6a Bump bootstrap-sass to 3.4.1
• 69157ce rake convert[v3.4.1]
• bb7dbf8 v3.4.0
• 3c126b3 Revert relative imports change
• dcdef9b Test Rails app: Depend on sassc-rails
• cd1542b rake convert[v3.4.0]
• 07b9b64 less_conversion.rb: Update stylelint comment removal
• 6634d0a Remove compass support
• 489b6f2 lotus -> hanami
• a1c5ec5 sass -> sassc
• 3db610a rake convert[v3.4.0-dev]
• 58db771 Fix test/node_sass_compile_test.sh
• fe4599d Stop testing with sass-head and rails-head
• 7319f3b travis
• 2e15e66 Fix "$a-$b" -> "#{$a}-#{$b}" conversion
• 8c0b5db rake convert[v3.4.0-dev]
• 92aa0c8 Update converter to support v3.4.0
• 418073f Fix test/compass_test.rb for recent bundler
• b6e3c54 Update package.json devDependencies
• 2dd87b0 readme [ci skip]
• eb15fe0 Merge pull request #1168 from coliff/patch-1
• 16c5dff HTTPS relevant links
• 51486a8 Merge pull request #1145 from zhublik/readme

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs