[Snyk] Upgrade mapbox-gl from 2.9.2 to 2.15.0

[kallyas]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade mapbox-gl from 2.9.2 to 2.15.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 18 versions ahead of your current version.

• The recommended version was released on a year ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	696	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SCSSTOKENIZER-2339884	696	No Known Exploit
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962463	696	Proof of Concept

Release notes

Package name: mapbox-gl

• 2.15.0 - 2023-05-25
  

  Features ✨ and improvements 🏁

  • Improve performance of symbol layers with identical or no text. Eliminate stuttering when zooming on maps with many identical symbols. (#12669)
  • Improve performance of clustered sources: 20% faster loading & 40–60% less memory overhead. Improve performance of symbol collisions. (#12682)
  • Add respectPrefersReducedMotion map option (#12694)
  • Add the isPointOnSurface map method to determine if the given point is located on a visible map surface. (#12695)

  Bug fixes 🐞

  • Fix inconsistent spacing in the Scale control (#12644) (h/t kathirgounder)
  • Fix tiles preloading when a source is not yet loaded (#12699)
• 2.15.0-beta.1 - 2023-05-17
  

  Update package version and the CHANGELOG for the 2.15.0-beta.1 release (

  #12717)

• 2.14.1 - 2023-04-14
  

  Bug fixes 🐞

  • Fix a bug where certain bundling configurations involving Vite or ESBuild could produce a broken build. #12658
• 2.14.0 - 2023-04-12
  

  Features ✨ and improvements 🏁

  • Support referrerPolicy option for the transformRequest function when using fetch (#12590) (h/t robertcepa)

  Bug fixes 🐞

  • Enable anisotropic filtering on tiles beyond 20 degrees pitch to prevent it from compromising image crispness on flat or low-tilted maps. (#12577)
  • Fix LngLatBounds.extend() with literal LngLat object. (#12605)
  • Add arrow characters to the map of verticalized character (#12608) (h/t kkokkojeong)
  • Disable panning inertia if prefers-reduced-motion is enabled (#12631)
• 2.14.0-beta.1 - 2023-04-06
  

  Update package version and the CHANGELOG for the 2.14.0-beta.1 release (

  #12642)

• 2.13.0 - 2023-02-21
  

  Features ✨ and improvements 🏁

  • Support draping over terrain and globe in CustomLayer API (#12182)
  • Improve the rendering performance of terrain slightly by reducing its GPU memory footprint. (#12472)
  • Add methods for changing a raster tile source dynamically (e.g. setTiles, setUrl). (#12352)

  Bug fixes 🐞

  • Fix line-border-color when used with line-trim-offset (#12461)
  • Fix potential infinite loop when calling fitBounds with globe projection (#12488)
  • Fix map.getBounds() returning incorrect bounds with adaptive projections. (#12503)
  • Introduce skirts for terrain globe mode (#12523)
  • Fix blur on draped lines while zoom-in (#12510)
  • Fix map pan speed while pinching in (#12543)
  • Fix negative-width diacritics handling (#12554)
  • Fixes undefined is not an object in coalesceChanges (#12497) (h/t nick-romano)
• 2.13.0-dev - 2023-02-07
• 2.13.0-beta.1 - 2023-02-07
  No content.
• 2.12.1 - 2023-02-06
  

  Bug fixes 🐞

  • Fix a rare bug where certain diacritical characters could break the rendering of a symbol layer. (#12554)
• 2.12.0 - 2023-01-04
• 2.12.0-beta.1 - 2022-12-15
• 2.11.1 - 2022-12-06
• 2.11.1-beta.1 - 2022-11-21
• 2.11.0 - 2022-11-14
• 2.11.0-beta.2 - 2022-11-07
• 2.11.0-beta.1 - 2022-10-21
• 2.10.0 - 2022-08-23
• 2.10.0-beta.1 - 2022-08-12
• 2.9.2 - 2022-07-14

from mapbox-gl GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
safe-courier	❌ Failed (Inspect)			Jul 17, 2024 5:32am
safe-courier-staging	❌ Failed (Inspect)			Jul 17, 2024 5:32am