Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update material-ui monorepo #9426

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 5, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@mui/icons-material (source) 5.15.3 -> 5.16.14 age adoption passing confidence
@mui/lab (source) 5.0.0-alpha.159 -> 5.0.0-alpha.175 age adoption passing confidence
@mui/material (source) 5.15.3 -> 5.16.14 age adoption passing confidence

Release Notes

mui/material-ui (@​mui/icons-material)

v5.16.14

Compare Source

A big thanks to the 1 contributor who made this release possible.

@mui/[email protected]

All contributors of this release in alphabetical order: @​ZeeshanTamboli

v5.16.13

Compare Source

A big thanks to the 2 contributors who made this release possible.

@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​DiegoAndai, @​sai6855

v5.16.12

Compare Source

Material UI v5 is now compatible with React 19 (#​44720) @​DiegoAndai

Core

All contributors of this release in alphabetical order: @​DiegoAndai

v5.16.11

A big thanks to the contributor who made this release possible.

Core

All contributors of this release in alphabetical order: @​DiegoAndai

v5.16.9

Compare Source

A big thanks to the 2 contributors who made this release possible.

@mui/[email protected]
Core

All contributors of this release in alphabetical order: @​DiegoAndai, @​siriwatknp

v5.16.8

Compare Source

A big thanks to the 8 contributors who made this release possible.

@mui/[email protected]
@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​alexfauquette, @​cherniavskii, @​DiegoAndai, @​jukkatupamaki, @​michelengelen, @​oliviertassinari, @​rluzists1, @​siriwatknp

v5.16.7

Compare Source

Aug 9, 2024

A big thanks to the 3 contributors who made this release possible.

@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​DiegoAndai, @​oliviertassinari, @​zanivan

v5.16.6

Compare Source

Jul 30, 2024

A big thanks to the 5 contributors who made this release possible.

@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​aliharis99, @​anuujj, @​mnajdova, @​sai6855, @​shahzaibdev1

v5.16.5

Compare Source

Jul 25, 2024

A big thanks to the 4 contributors who made this release possible.

@mui/[email protected]
Docs

All contributors of this release in alphabetical order: @​ManthanGajjar, @​mnajdova, @​navedqb, @​oliviertassinari

Full Changelog: mui/material-ui@v5.16.4...v5.16.5

v5.16.4

Compare Source

Jul 16, 2024

A big thanks to the one contributor who made this release possible.

@mui/[email protected]

All contributors of this release in alphabetical order: @​mnajdova

v5.16.3

Compare Source

Jul 16, 2024

A big thanks to the 3 contributors who made this release possible.

@mui/[email protected]
Docs

All contributors of this release in alphabetical order: @​HoFa1997, @​mnajdova, @​oliviertassinari

v5.16.2

Compare Source

Jul 16, 2024

A big thanks to the 2 contributors who made this release possible.

@mui/[email protected]
Core

All contributors of this release in alphabetical order: @​mnajdova, @​oliviertassinari

v5.16.1

Compare Source

A big thanks to the 4 contributors who made this release possible. Here are some highlights ✨:

  • ⚛️ All packages, including Material UI, are now compatible with React 18.3.1
@mui/[email protected]
@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​aarongarciah, @​oliviertassinari, @​omahs, @​ZeeshanTamboli

v5.16.0

Compare Source

A big thanks to the 5 contributors who made this release possible. Here are some highlights ✨:

@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​aarongarciah, @​alexey-kozlenkov, @​jxdp, @​oliviertassinari, @​siriwatknp

v5.15.21

Compare Source

Jun 28, 2024

A big thanks to the 7 contributors who made this release possible.

@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​alexfauquette, @​alexismo, @​arminmeh, @​Danielkhakbaz, @​DiegoAndai, @​mnajdova, @​oliviertassinari

v5.15.20

Compare Source

Jun 12, 2024

A big thanks to the 9 contributors who made this release possible.

@mui/[email protected]
@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​aarongarciah, @​anle9650, @​DanailH, @​danilo-leal, @​erezstmn-doit, @​iammminzzy, @​oliviertassinari, @​sai6855, @​ZeeshanTamboli

v5.15.19

Compare Source

May 29, 2024

A big thanks to the 12 contributors who made this release possible.
This release was mostly about 🐛 bug fixes and 📚 documentation improvements.

@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​aarongarciah, @​brijeshb42, @​danilo-leal, @​DiegoAndai, @​KenanYusuf, @​lucasgmelo, @​Mandar-Pandya, @​MatheusEli, @​mnajdova, @​nikitaa24, @​oliviertassinari, @​ZeeshanTamboli

v5.15.18

Compare Source

May 14, 2024

A big thanks to the 5 contributors who made this release possible. Here are some highlights ✨:

@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​arthurbalduini, @​oliviertassinari, @​samuelsycamore, @​TahaRhidouani, @​tarunrajput

v5.15.17

Compare Source

May 8, 2024

A big thanks to the 4 contributors who made this release possible.
This release was mostly about 🐛 bug fixes and 📚 documentation improvements.

@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​github-actions[bot], @​joserodolfofreitas, @​oliviertassinari, @​siriwatknp

v5.15.16

Compare Source

A big thanks to the 8 contributors who made this release possible. Here are some highlights ✨:
This release was mostly about 🐛 bug fixes and 📚 documentation improvements.

@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​aarongarciah, @​alexfauquette, @​DanailH, @​DiegoAndai, @​github-actions[bot], @​JCQuintas, @​mnajdova, @​oliviertassinari

v5.15.15

Compare Source

A big thanks to the 7 contributors who made this release possible. Here are some highlights ✨:
This release was mostly about 🐛 bug fixes and 📚 documentation improvements.

@mui/[email protected]
@mui/[email protected]
Docs
Core

All contributors of this release in alphabetical order: @​aarongarciah, @​bharatkashyap, @​cherniavskii, @​danilo-leal, @​mnajdova, @​oliviertassinari, @​ZeeshanTamboli

v5.15.14

Compare Source

Mar 19, 2024

A big thanks to the 15 contributors who made this release possible.
This release was mostly about 🐛 bug fixes and 📚 documentation improvements.

@mui/[email protected]
@pigment-css/[email protected]
pigment-css/[email protected]
Docs
  • ​[joy-ui] Add UI improvements

Configuration

📅 Schedule: Branch creation - "after 7pm every weekday,before 5am every weekday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Mar 5, 2025
@renovate renovate bot enabled auto-merge (squash) March 5, 2025 03:22
Copy link

vercel bot commented Mar 5, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
unleash-monorepo-frontend ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 7, 2025 0:18am
1 Skipped Deployment
Name Status Preview Comments Updated (UTC)
unleash-docs ⬜️ Ignored (Inspect) Visit Preview Mar 7, 2025 0:18am

Copy link
Contributor

github-actions bot commented Mar 5, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@mui/icons-material 5.16.14 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@mui/lab 5.0.0-alpha.175 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@mui/material 5.16.14 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@emotion/cache 11.14.0 🟢 5.8
Details
CheckScoreReason
Code-Review🟢 8Found 18/21 approved changesets -- score normalized to 8
Maintained🟢 94 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 9
Security-Policy🟢 4security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 0151 existing vulnerabilities detected
npm/@emotion/memoize 0.9.0 🟢 5.8
Details
CheckScoreReason
Code-Review🟢 8Found 18/21 approved changesets -- score normalized to 8
Maintained🟢 94 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 9
Security-Policy🟢 4security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 0151 existing vulnerabilities detected
npm/@emotion/sheet 1.4.0 🟢 5.8
Details
CheckScoreReason
Code-Review🟢 8Found 18/21 approved changesets -- score normalized to 8
Maintained🟢 94 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 9
Security-Policy🟢 4security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 0151 existing vulnerabilities detected
npm/@emotion/utils 1.4.2 🟢 5.8
Details
CheckScoreReason
Code-Review🟢 8Found 18/21 approved changesets -- score normalized to 8
Maintained🟢 94 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 9
Security-Policy🟢 4security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 0151 existing vulnerabilities detected
npm/@emotion/weak-memoize 0.4.0 🟢 5.8
Details
CheckScoreReason
Code-Review🟢 8Found 18/21 approved changesets -- score normalized to 8
Maintained🟢 94 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 9
Security-Policy🟢 4security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 0151 existing vulnerabilities detected
npm/@floating-ui/react-dom 2.1.2 UnknownUnknown
npm/@mui/core-downloads-tracker 5.16.14 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@mui/icons-material 5.16.14 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@mui/lab 5.0.0-alpha.175 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@mui/material 5.16.14 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@mui/private-theming 5.16.14 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@mui/styled-engine 5.16.14 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@mui/system 5.16.14 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@mui/types 7.2.23 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@mui/utils 5.16.14 🟢 8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices🟢 5badge detected: Passing
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Signed-Releases⚠️ -1no releases found
SAST🟢 7SAST tool detected but not run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 28 existing vulnerabilities detected
npm/@types/prop-types 15.7.14 🟢 6.8
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 7Found 23/29 approved changesets -- score normalized to 7
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/react-is 19.0.0 🟢 5.1
Details
CheckScoreReason
Code-Review🟢 6Found 18/30 approved changesets -- score normalized to 6
Security-Policy🟢 10security policy file detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 2badge detected: InProgress
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 0201 existing vulnerabilities detected

Scanned Files

  • frontend/package.json
  • frontend/yarn.lock

@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch 2 times, most recently from 9fa4d40 to cc16f7d Compare March 5, 2025 07:13
@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch from cc16f7d to 1d20023 Compare March 5, 2025 08:10
@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch from 1d20023 to 03fe951 Compare March 5, 2025 08:42
@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch from 03fe951 to 46f0870 Compare March 5, 2025 09:04
@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch from 46f0870 to eb88294 Compare March 5, 2025 09:37
@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch from eb88294 to 3f04b3a Compare March 5, 2025 11:10
@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch from 3f04b3a to 58771a8 Compare March 5, 2025 18:35
@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch from 58771a8 to 3405e7c Compare March 5, 2025 23:11
@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch from 3405e7c to 6ad1876 Compare March 6, 2025 09:37
@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch from 6ad1876 to b134033 Compare March 6, 2025 13:23
@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch from b134033 to 7e72e63 Compare March 6, 2025 14:14
@renovate renovate bot force-pushed the renovate/material-ui-monorepo branch from 7e72e63 to 94e9bc9 Compare March 6, 2025 14:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
Status: Approved PRs
Development

Successfully merging this pull request may close these issues.

0 participants