Bump datatables.net-dt from 1.13.4 to 2.2.1 in /components

[dependabot]

Bumps datatables.net-dt from 1.13.4 to 2.2.1.

Release notes

Sourced from datatables.net-dt's releases.

1.13.11

DataTables 1.13.11

Commits

• db8f8a2 Sync tag release - 2.2.1
• ed82c03 7014cf2dd12427391f894e5d3c2677d8476b9b33 Docs: Update -api columns.adjust()...
• 5e3e2df d2289130c0eff6a77f016020f4a473ea2c96e176 Release 2.2.1
• 4ca1daf 951e0eb8c0065557f29fd79141479d0263d02d05 Fix: Tables with borders would overf...
• 71733ab 02bdbb893b6b0dc34983ebaf6796b06b47dd18ec Tests: Wasn't properly doing a destr...
• 59370e7 Sync tag release - 2.2.0
• 44ef27b 4652edd0ac3e010443a6ec392c94a62d6e424cb5 Dev: State object should be 100% ind...
• c54ff4f 8e155b3eca39175eec7e9c1fe3ecb273e63a438b Release 2.2.0
• b114670 c5876413be0fdb125cb0e05db5c2ca770a436a1b Dev: Tweak to auto column width upda...
• 692671c 5a05ebd839add77d82207f90478871cb3c69546c Fix: If -init columns.className is...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dryrunsecurity]

DryRun Security Summary

The pull request updates the datatables.net and datatables.net-dt dependencies from version 1.13.4 to 2.2.1, which requires careful review of release notes, thorough testing, and attention to potential security implications.

Expand for full summary

Summary:

The code changes in this pull request primarily involve updating the versions of the datatables.net and datatables.net-dt dependencies used in the project. Both dependencies have been updated from version 1.13.4 to 2.2.1, which represents a major version change that could potentially introduce breaking changes.

From an application security perspective, it's crucial to review the release notes and change logs for these updated dependencies to understand any security-related changes or fixes that may have been included. Additionally, thorough testing of the application after the dependency updates is essential to ensure that no regressions or new vulnerabilities have been introduced.

The use of the caret (^) version specifier in the package.json file indicates that the application is set to automatically update to the latest compatible minor or patch version of the dependencies. While this can help keep the application up-to-date with security fixes, it also carries the risk of introducing breaking changes if the dependency maintainers make incompatible changes in a minor or patch release.

It's also important to ensure that the datatables.net library is properly configured and used in a secure manner, as it can be susceptible to vulnerabilities such as Cross-Site Scripting (XSS) if user-supplied data is not properly sanitized before being displayed in the table. Regular dependency auditing using tools like npm audit or yarn audit is recommended to identify any known vulnerabilities.

Files Changed:

1. components/yarn.lock: The changes in this file indicate an update to the datatables.net and datatables.net-dt dependencies, with both being updated from version 1.13.4 to 2.2.1. This represents a major version change that could potentially introduce breaking changes.
2. components/package.json: The changes in this file update the version of the datatables.net-dt dependency from ^1.13.4 to ^2.2.1. This update to a major version should be carefully reviewed and tested to ensure that no regressions or new vulnerabilities have been introduced.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

View PR in the DryRun Dashboard.