Ant Design (antd) is a popular, enterprise-class UI design language and React component library. Comparing versions 3.11.3 and 3.11.4 reveals subtle but notable differences valuable to developers. Beyond the version bump that indicates a patch or minor update, the key distinctions lie in their dependency specifications.
In antd@3.11.4, @ant-design/icons has a dependency version ~1.1.15 while antd@3.11.3 lacks this dependency in its devDependencies. Similarly, the devDependency antd-tools moves from version ^6.2.3 to ^6.4.3 while the dependency rc-form moved from 2.2.7 to 2.4.0. These updates likely involve bug fixes, performance improvements, or new features within these specific utility and tooling packages that developers consuming the library will potentially benefit from.
Additionally, the *unpackedSize* property in the "dist" object is different. Version 3.11.4 is slightly larger, implying added assets, code, or resources contributing to the component library. For front-end developers, such changes are important for bundle size optimizations and overall application performance considerations. Depending on the developer's update strategy, these delta should be considered before upgrading.
All the vulnerabilities related to the version 3.11.4 of the package
node-fetch forwards secure headers to untrusted sites
node-fetch forwards secure headers such as authorization
, www-authenticate
, cookie
, & cookie2
when redirecting to a untrusted site.