@mapbox/mapbox-gl-style-spec - npm Package Compare versions

Comparing version 13.3.0 to 13.4.0

CHANGELOG.md

@@ -0,7 +1,28 @@
+## 13.4.0
+
+### ✨ Features and improvements
+* **Tighten style validation** 
+    * Disallow expressions as stop values ([#7396](https://github.com/mapbox/mapbox-gl-js/pull/7396))
+    * Disallow `feature-state` expressions in filters ([#7366](https://github.com/mapbox/mapbox-gl-js/pull/7366))
+
+## 13.3.0
+
+### 🐛 Bug fixes
+* **Expressions**
+    * Fix `let` expression stripping expected type during parsing ([#7300](https://github.com/mapbox/mapbox-gl-js/issues/7300), fixed by [#7301](https://github.com/mapbox/mapbox-gl-js/pull/7301))
+    * Fix superfluous wrapping of literals in `literal` expression ([#7336](https://github.com/mapbox/mapbox-gl-js/issues/7336), fixed by [#7337](https://github.com/mapbox/mapbox-gl-js/pull/7337))
+    * Allow calling `to-color` on values that are already of type `Color` ([#7260](https://github.com/mapbox/mapbox-gl-js/pull/7260))
+    * Fix `to-array` for empty arrays (([#7261](https://github.com/mapbox/mapbox-gl-js/pull/7261)))
+    * Fix identity functions for `text-field` when using formatted text ([#7351](https://github.com/mapbox/mapbox-gl-js/pull/7351))
+    * Fix coercion of `null` to `0` in `to-number` expression ([#7083](https://github.com/mapbox/mapbox-gl-js/issues/7083), fixed by [#7274](https://github.com/mapbox/mapbox-gl-js/pull/7274))
+
+### ✨ Features and improvements
+*  Add `fill-extrusion-vertical-gradient` property for controlling shading of fill extrusions ([#5768](https://github.com/mapbox/mapbox-gl-js/issues/5768), fixed by [#6841](https://github.com/mapbox/mapbox-gl-js/pull/6841))
+
 ## 13.2.0
 
-## 🐛 Bug fixes
+### 🐛 Bug fixes
 * Update the style-spec's old `gl-style-migrate` script to include conversion of legacy functions and filters to their expression equivalents ([#6927](https://github.com/mapbox/mapbox-gl-js/issues/6927), fixed by [#7095](https://github.com/mapbox/mapbox-gl-js/pull/7095))
 
-## ✨ Features and improvements
+### ✨ Features and improvements
 * Add `symbol-z-order` symbol layout property to style spec ([#7219](https://github.com/mapbox/mapbox-gl-js/pull/7219))
@@ -12,6 +33,6 @@ * Implement data-driven styling support for `*-pattern properties` ([#6289](https://github.com/mapbox/mapbox-gl-js/pull/6289))
 
-## 🐛 Bug fixes
+### 🐛 Bug fixes
 * Fix broken module import in mapboxgl-style-spec (v13.0.1) ([#6984](https://github.com/mapbox/mapbox-gl-js/issues/6984), fixed by [#6997](https://api.github.com/repos/mapbox/mapbox-gl-js/pulls/6997))
 
-## ✨ Features and improvements
+### ✨ Features and improvements
 * Improve formatting for style output ([#7029](https://github.com/mapbox/mapbox-gl-js/pull/7029))
@@ -21,3 +42,3 @@
 
-## ✨ Features and improvements
+### ✨ Features and improvements
 * Add `raster-resampling` raster paint property ([#6411](https://github.com/mapbox/mapbox-gl-js/pull/6411)) (h/t [andrewharvey](https://github.com/andrewharvey))
@@ -24,0 +45,0 @@ * Add `symbol-placement: line-center` ([#6821](https://github.com/mapbox/mapbox-gl-js/pull/6821))

package.json

 {
   "name": "@mapbox/mapbox-gl-style-spec",
   "description": "a specification for mapbox gl styles",
-  "version": "13.3.0",
+  "version": "13.4.0",
   "author": "Mapbox",
@@ -6,0 +6,0 @@ "keywords": [

validate/validate_expression.js

@@ -26,3 +26,8 @@ // @flow
     }
+
+    if (options.expressionContext === 'filter' && !isStateConstant((expression.value: any).expression)) {
+        return [new ValidationError(options.key, options.value, '"feature-state" data expressions are not supported with filters.')];
+    }
+
     return [];
 }

validate/validate_function.js

@@ -8,3 +8,4 @@
 import validateNumber from './validate_number';
-import { unbundle } from '../util/unbundle_jsonlint';
+import { isExpression } from '../expression';
+import { unbundle, deepUnbundle } from '../util/unbundle_jsonlint';
 import {
@@ -142,2 +143,6 @@ supportsPropertyExpression,
 
+        if (isExpression(deepUnbundle(value[1]))) {
+            return errors.concat([new ValidationError(`${key}[1]`, value[1], 'expressions are not allowed in function stops.')]);
+        }
+
         return errors.concat(validate({
@@ -144,0 +149,0 @@ key: `${key}[1]`,

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1480044

increased by2.66%

Number of package files

108

increased by1.89%

Lines of code

21526

increased by5.78%

Worsened metrics

Number of low supply chain risk alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes