diff --git a/.bundlewatch.config.json b/.bundlewatch.config.json
index d425cf314d8..0248c54b04d 100644
--- a/.bundlewatch.config.json
+++ b/.bundlewatch.config.json
@@ -2,7 +2,7 @@
"files": [
{
"path": "./dist/bootstrap-vue-icons.js",
- "maxSize": "110 kB"
+ "maxSize": "115 kB"
},
{
"path": "./dist/bootstrap-vue-icons.min.js",
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 123014908be..bd3fac2db9c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,6 +1,36 @@
version: 2
updates:
- package-ecosystem: "github-actions"
+ directory: "/"
+ schedule:
+ interval: weekly
+ day: tuesday
+ time: "12:00"
+ timezone: Europe/Berlin
+ reviewers:
+ - jackmu95
+ labels:
+ - "Type: CI"
+ - "Type: Dependencies"
+
+ - package-ecosystem: npm
directory: "/"
schedule:
interval: "daily"
+ time: "12:00"
+ timezone: Europe/Berlin
+ ignore:
+ - dependency-name: "bootstrap"
+ versions: [">=5.0.0"]
+ - dependency-name: "highlight.js"
+ versions: [">=10.0.0"]
+ - dependency-name: "prettier"
+ versions: [">1.14.3"]
+ - dependency-name: "@vue/test-utils"
+ versions: [">=2.0.0"]
+ reviewers:
+ - jackmu95
+ labels:
+ - "Type: Dependencies"
+ versioning-strategy: increase
+ rebase-strategy: disabled
diff --git a/.github/renovate.json b/.github/renovate.json
deleted file mode 100644
index 3d3145edeaa..00000000000
--- a/.github/renovate.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
- "extends": ["@nuxtjs"],
- "labels": ["Type: Dependencies"],
- "packageRules": [
- {
- "packageNames": ["bootstrap"],
- "allowedVersions": "<5.0.0"
- },
- {
- "packageNames": ["highlight.js"],
- "allowedVersions": "<10.0.0"
- },
- {
- "packageNames": ["prettier"],
- "allowedVersions": "<=1.14.3"
- },
- {
- "packageNames": ["@vue/test-utils"],
- "allowedVersions": "<2.0.0"
- }
- ]
-}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f54718c260d..fc6b5425aef 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,7 +17,7 @@ jobs:
strategy:
matrix:
os: [ubuntu-latest]
- node: [10, 12]
+ node: [10, 12, 14]
steps:
- name: Clone repository
@@ -50,6 +50,6 @@ jobs:
- name: BundleWatch
run: yarn run bundlewatch
- if: matrix.node == '12'
+ if: matrix.node == '14'
env:
BUNDLEWATCH_GITHUB_TOKEN: "${{ secrets.BUNDLEWATCH_GITHUB_TOKEN }}"
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 00000000000..5e14f515e7f
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,58 @@
+name: "CodeQL"
+
+on:
+ push:
+ pull_request:
+ schedule:
+ - cron: "0 2 * * 5"
+
+jobs:
+ analyze:
+ name: Analyze
+ runs-on: ubuntu-latest
+
+ strategy:
+ fail-fast: false
+ matrix:
+ language: ["javascript"]
+
+ steps:
+ - name: Checkout repository
+ uses: actions/checkout@v2
+ with:
+ # We must fetch at least the immediate parents so that if this is
+ # a pull request then we can checkout the head
+ fetch-depth: 2
+
+ # If this run was triggered by a pull request event, then checkout
+ # the head of the pull request instead of the merge commit
+ - run: git checkout HEAD^2
+ if: ${{ github.event_name == 'pull_request' }}
+
+ # Initializes the CodeQL tools for scanning.
+ - name: Initialize CodeQL
+ uses: github/codeql-action/init@v1
+ with:
+ languages: ${{ matrix.language }}
+ # If you wish to specify custom queries, you can do so here or in a config file
+ # By default, queries listed here will override any specified in a config file
+ # Prefix the list here with "+" to use these queries and those in the config file
+ # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+ # Autobuild attempts to build any compiled languages (C/C++, C#, or Java)
+ # If this step fails, then you should remove it and run the build manually (see below)
+ - name: Autobuild
+ uses: github/codeql-action/autobuild@v1
+
+ # âšī¸ Command-line programs to run using the OS shell.
+ # đ https://git.io/JvXDl
+
+ # âī¸ If the Autobuild fails above, remove it and uncomment the following three lines and
+ # modify them (or add more) to build your code if your project uses a compiled language
+
+ #- run: |
+ # make bootstrap
+ # make release
+
+ - name: Perform CodeQL Analysis
+ uses: github/codeql-action/analyze@v1
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 779c9495a3c..eb24fe4f135 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -17,7 +17,7 @@ jobs:
strategy:
matrix:
os: [ubuntu-latest]
- node: [12]
+ node: [14]
steps:
- name: Clone repository
@@ -54,7 +54,7 @@ jobs:
strategy:
matrix:
os: [ubuntu-latest]
- node: [12]
+ node: [14]
steps:
- name: Clone repository
@@ -91,7 +91,7 @@ jobs:
strategy:
matrix:
os: [ubuntu-latest]
- node: [10, 12]
+ node: [10, 12, 14]
steps:
- name: Clone repository
@@ -124,7 +124,7 @@ jobs:
- name: CodeCov
uses: codecov/codecov-action@v1
- if: matrix.node == '12'
+ if: matrix.node == '14'
with:
token: ${{ secrets.CODECOV_TOKEN }}
flags: unittests
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4153c8a7b8d..c3c85201683 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,48 @@ All notable changes to this project will be documented in this file. See
[standard-version](https://github.com/conventional-changelog/standard-version) for commit
guidelines.
+
+
+## [v2.19.0](https://github.com/bootstrap-vue/bootstrap-vue/compare/v2.18.1...v2.19.0)
+
+Released: 2020-11-08
+
+### Features v2.19.0
+
+- **b-media:** improve aside right handling
+ ([#5965](https://github.com/bootstrap-vue/bootstrap-vue/issues/5965))
+ ([49a3f00](https://github.com/bootstrap-vue/bootstrap-vue/commit/49a3f00420bf9958deda3a6be0ccb76cc3ea06ba))
+- **config:** improved defaults handling (closes
+ [#4507](https://github.com/bootstrap-vue/bootstrap-vue/issues/4507),
+ [#5138](https://github.com/bootstrap-vue/bootstrap-vue/issues/5138),
+ [#5291](https://github.com/bootstrap-vue/bootstrap-vue/issues/5291),
+ [#5459](https://github.com/bootstrap-vue/bootstrap-vue/issues/5459),
+ [#5958](https://github.com/bootstrap-vue/bootstrap-vue/issues/5958))
+ ([#5981](https://github.com/bootstrap-vue/bootstrap-vue/issues/5981))
+ ([7ea0cc4](https://github.com/bootstrap-vue/bootstrap-vue/commit/7ea0cc4a16d27b179eca47d351eaa9fe6fdfd56e))
+
+### Bug Fixes v2.19.0
+
+- **b-avatar:** badge `z-index` handling
+ ([#5975](https://github.com/bootstrap-vue/bootstrap-vue/issues/5975))
+ ([ecb33bd](https://github.com/bootstrap-vue/bootstrap-vue/commit/ecb33bdb510832096bc5a5196a11c97388bf6411))
+- **b-avatar:** prevent avatar from being squished
+ ([#5963](https://github.com/bootstrap-vue/bootstrap-vue/issues/5963))
+ ([b3946ed](https://github.com/bootstrap-vue/bootstrap-vue/commit/b3946ed7a7b327fb7c66b44caaf122460fc24005)),
+ closes [#5962](https://github.com/bootstrap-vue/bootstrap-vue/issues/5962)
+- **b-dropdown:** click handling on close (closes
+ [#5982](https://github.com/bootstrap-vue/bootstrap-vue/issues/5982))
+ ([#6009](https://github.com/bootstrap-vue/bootstrap-vue/issues/6009))
+ ([cf7a1cb](https://github.com/bootstrap-vue/bootstrap-vue/commit/cf7a1cb017e2263939a64e300abbbbac35c121d4))
+- **b-form-checkbox/b-form-radio:** `change` event timing
+ ([#6008](https://github.com/bootstrap-vue/bootstrap-vue/issues/6008))
+ ([37ec7e9](https://github.com/bootstrap-vue/bootstrap-vue/commit/37ec7e9991b66af51ff81420da8eb88928615f9d))
+- **b-form-group:** accessibility when `label-for` prop not set
+ ([#6006](https://github.com/bootstrap-vue/bootstrap-vue/issues/6006))
+ ([16f777b](https://github.com/bootstrap-vue/bootstrap-vue/commit/16f777b14bdcf9ebb6fae0325d355c7f5272bd98))
+
+
+
## [v2.18.1](https://github.com/bootstrap-vue/bootstrap-vue/compare/v2.18.0...v2.18.1)
Released: 2020-10-21
@@ -22,6 +64,8 @@ Released: 2020-10-21
([#5934](https://github.com/bootstrap-vue/bootstrap-vue/issues/5934))
([8a367b6](https://github.com/bootstrap-vue/bootstrap-vue/commit/8a367b6296b0aa9700f67633fd60fb351e2f7373))
+
+
## [v2.18.0](https://github.com/bootstrap-vue/bootstrap-vue/compare/v2.17.3...v2.18.0)
Released: 2020-10-19
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000000..0418354d1aa
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,20 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported |
+| ------- | ------------------ |
+| 2.x | :white_check_mark: |
+| 1.x | :x: |
+| < 1.0 | :x: |
+
+## Reporting a Vulnerability
+
+The BootstrapVue team takes security issues very seriously. We appreciate your efforts to
+responsibly disclose your findings, and will make every effort to acknowledge your contributions.
+
+To report a security issue, email
+[bootstrapvue.js@gmail.com](mailto:security@bootstrapvue.js@gmail.com) and include the word
+"SECURITY" in the subject line.
+
+We'll endeavor to respond quickly, and will keep you updated throughout the process.
diff --git a/docs/components/componentdoc.vue b/docs/components/componentdoc.vue
index 86aa86150b2..0d25b5671f9 100644
--- a/docs/components/componentdoc.vue
+++ b/docs/components/componentdoc.vue
@@ -85,6 +85,11 @@
+ All property default values are
{{ value }}