Skip to content

[Snyk] Security upgrade daisyui from 3.9.4 to 4.0.0 - #46

Open
durasj wants to merge 1 commit into
mainfrom
snyk-fix-96f70c7b99e5efe0be439dfa61fb22c5
Open

durasj wants to merge 1 commit into
mainfrom
snyk-fix-96f70c7b99e5efe0be439dfa61fb22c5

Conversation

@durasj

@durasj durasj commented Nov 2, 2026

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PICOMATCH-21248802
  721  

Breaking Change Risk

Merge Risk: High

Notice: This assessment is enhanced by AI.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

@durasj

durasj commented Nov 2, 2026

Copy link
Copy Markdown
Owner Author

Merge Risk: High

The upgrade from daisyUI v3 to v4 is a major version update with significant breaking changes that require developer action.

Key Breaking Changes:

  • Color System: The internal color system has changed from HSL to OKLCH. If you use daisyUI's CSS variables directly (e.g., hsl(var(--p))), you must update your code to use the oklch() function (e.g., oklch(var(--p))). Standard Tailwind classes like bg-primary are unaffected.
  • Removed *-focus Colors: All *-focus color variants like primary-focus have been removed. You must now use utility classes to define focus states, for example, by mixing colors with bg-[color-mix(in_oklab,oklch(var(--p)),black_7%)].
  • Tab Component: Modifier classes like tab-lifted and tab-bordered have been removed from the tab element. These classes must now be applied to the parent tabs container instead.
  • Button Styling: Buttons are no longer uppercase by default. You must add the uppercase class if you want to retain the uppercase styling.
  • Theme Customization: If you extend or customize built-in themes, you will need to update your configuration as property names in the theme files have changed.

Recommendation: This upgrade requires careful code review and modification. Developers must follow the official migration guide to address these breaking changes before merging.

Source: daisyUI v4 Upgrade Guide

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

@vercel

vercel Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
chipsandcode Error Error Nov 2, 2026 8:33pm UTC

Request Review

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

Deploying chipsandcode with  Cloudflare Pages  Cloudflare Pages

Latest commit: 4588c89
Status:🚫  Build failed.

View logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants