Bump datatables.net-colreorder from 1.6.2 to 2.0.2 in /components

[dependabot]

Bumps datatables.net-colreorder from 1.6.2 to 2.0.2.

Release notes

Sourced from datatables.net-colreorder's releases.

2.0.2

ColReorder 2.0.2

2.0.1

ColReorder 2.0.1

2.0.0

ColReorder 2.0.0

1.7.0

ColReorder 1.7.0

Commits

• 24802d1 8452a1e1e7489a425dae7eddbd8a572071485808 Fix: Error when the first cell in a ...
• 8488f06 23fb4c6564a77111d65125827a81806622fdcd36 Fix: ColReorder would throw an error...
• d8cf138 Sync tag release - 2.0.1
• 8ec6d12 13d70d5737091072327efc90f99fdb01cfc3a00b Dev: Attempt to optimise the width g...
• 944c4c0 Sync tag release - 2.0.0
• 39580ce Package: Remove composer version
• 677f037 40cffdf48773548bb69ceb186b4ee8576684604b Dev: Initial build structure for CR2.
• 93661f2 77b734086dc92450de8174d2fe7d9aec05e8ee6b Fix - typescript: Explicit void retu...
• 1fa2a3f f1c0c18f8b0c945354a9e87768b91bdfdd616d94 Fix - types: Plug-in was on the wron...
• bf268ba Sync tag release - 1.7.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dryrunsecurity]

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security	Status	Findings
Configured Codepaths Analyzer	✅	0 findings
Sensitive Files Analyzer	❕	1 finding
AppSec Analyzer	✅	0 findings
Authn/Authz Analyzer	✅	0 findings
Secrets Analyzer	✅	0 findings

Note

🟢 Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy 🤖.
Note that this summary is auto-generated and not meant to be a definitive list of security issues
but rather a helpful summary from a security perspective.

Summary:

The changes in this pull request involve updating the versions of the datatables.net-colreorder and datatables.net dependencies in the package.json and yarn.lock files. Updating dependencies to their latest versions is generally a good practice, as it can help address known security vulnerabilities and improve overall application security.

However, it's important to review the release notes and change logs of the updated dependencies to ensure that there are no known security issues introduced with the new versions. Additionally, it's recommended to thoroughly test the application after the dependency updates to ensure that the new versions do not introduce any regressions or breaking changes that could impact the application's functionality or security.

Overall, these code changes appear to be routine dependency updates, and there are no immediate security concerns that stand out. Nevertheless, it's crucial to perform due diligence and ensure that the new versions of the dependencies do not introduce any security or stability issues.

Files Changed:

1. components/package.json:

   • The datatables.net-colreorder dependency has been updated from version ^1.6.1 to ^2.0.2.

2. components/yarn.lock:

   • The datatables.net-colreorder dependency has been updated from version 1.6.2 to 2.0.2.
   • The datatables.net dependency has been updated from version 1.13.4 to 2.0.7.

Powered by DryRun Security

[dependabot]

Superseded by #10296.