[TikiWiki-commits] [Git][tikiwiki/tiki][master] [UPD] Update most js build dependencies

Benoit Grégoire pushed to branch master at Tiki Wiki CMS Groupware / Tiki


Commits:
328f2b81 by Benoit Grégoire at 2025-12-18T17:12:45+00:00
[UPD] Update most js build dependencies
---
* [UPD] Update most js build dependencies

See merge request tikiwiki/tiki!9250

- - - - -


6 changed files:

- package-lock.json
- package.json
- src/js/common-externals/package.json
- src/js/jquery-tiki/package.json
- − src/js/vue-mf/styleguide/.gitignore
- src/scss/package.json


Changes:

=====================================
package-lock.json
=====================================
The diff for this file was not included because it is too large.

=====================================
package.json
=====================================
@@ -66,29 +66,29 @@
     "devDependencies" : {
         "@commitlint/cli" : "^19.8.1",
         "@commitlint/config-conventional" : "^19.8.1",
-        "@stylistic/eslint-plugin" : "^5.0.0",
+        "@stylistic/eslint-plugin" : "^5.6.1",
         "@testing-library/vue" : "^8.1.0",
-        "@vitejs/plugin-vue" : "^6.0.0",
+        "@vitejs/plugin-vue" : "^6.0.3",
         "@vitest/coverage-istanbul" : "^3.2.4",
         "check-engine" : "^1.14.0",
-        "concurrently" : "^9.2.0",
+        "concurrently" : "^9.2.1",
         "copy-and-watch" : "^0.1.8",
-        "es-module-shims" : "^2.6.1",
-        "eslint" : "^9.29.0",
-        "eslint-config-prettier" : "^10.1.5",
-        "eslint-plugin-prettier" : "^5.5.1",
-        "eslint-plugin-vue" : "^10.2.0",
-        "happy-dom" : "^20.0.0",
+        "es-module-shims" : "^2.7.0",
+        "eslint" : "^9.39.2",
+        "eslint-config-prettier" : "^10.1.8",
+        "eslint-plugin-prettier" : "^5.5.4",
+        "eslint-plugin-vue" : "^10.6.2",
+        "happy-dom" : "^20.0.11",
         "husky" : "^9.1.7",
         "npm-run-all2" : "^8.0.4",
-        "patch-package" : "^8.0.0",
-        "prettier" : "^3.6.1",
-        "rollup-plugin-visualizer" : "^6.0.3",
-        "tinyglobby" : "^0.2.14",
+        "patch-package" : "^8.0.1",
+        "prettier" : "^3.7.4",
+        "rollup-plugin-visualizer" : "^6.0.5",
+        "tinyglobby" : "^0.2.15",
         "unplugin-auto-import" : "^19.3.0",
         "unplugin-vue-components" : "^28.7.0",
-        "vite" : "^7.0.0",
-        "vite-plugin-static-copy" : "^3.1.0",
+        "vite" : "^7.3.0",
+        "vite-plugin-static-copy" : "^3.1.4",
         "vitest" : "^3.2.4"
     },
     "devDepencenciesCommentWillAlsoBeAvailableAsDevDependenciesInWorkspace" : {
@@ -111,11 +111,11 @@
         "vitest" : "https://github.com/vitest-dev/vitest/releases"
     },
     "overrides" : {
-        "dompurify" : "3.2.7"
+        "dompurify" : "3.3.1"
     },
     "overridesComment" : {
         "dompurify": [
-            "This override forces all packages to use DOMPurify v3.2.7 to fix a security vulnerability present in DOMPurify v2.x.",
+            "This override forces all packages to use DOMPurify v3.3.1 to fix a security vulnerability present in DOMPurify v2.x.",
             "Upgrading from v2 to v3 is safe for our project because we do not support Internet Explorer (IE).",
             "As noted by Victor Buzinaro in https://github.com/cure53/DOMPurify/issues/785, the only breaking change introduced in v3 is the removal of IE-specific support.",
             "After reviewing the changes between versions 2.5.8 and 3.3.0 (https://github.com/cure53/DOMPurify/compare/2.5.8...3.3.0), we confirmed there are no functional breaking changes that affect our usage.",


=====================================
src/js/common-externals/package.json
=====================================
@@ -14,14 +14,14 @@
     "@zxing/library": "^0.21.2",
     "animejs": "~3.2.2",
     "boomerangjs": "^1.815.1",
-    "bootstrap": "^5.3.6",
-    "bootstrap-icons": "^1.11.3",
+    "bootstrap": "^5.3.8",
+    "bootstrap-icons": "^1.13.1",
     "chart.js": "^4.4.2",
     "clipboard": "^2.0.11",
     "codemirror": "^5.65.17",
     "converse.js": "^12.0.0",
     "d3-milestones": "^1.5.0",
-    "dompurify": "^3.2.7",
+    "dompurify": "3.3.1",
     "driver.js": "^1.3.1",
     "fieldslinker": "^1.0.4",
     "fitvids": "^2.1.1",
@@ -30,7 +30,7 @@
     "jqdoublescroll": "^1.0.0",
     "jquery": "^3.7.1",
     "jquery-form": "^4.3.0",
-    "jquery-migrate": "^3.4.1",
+    "jquery-migrate": "^3.6.0",
     "jquery-tagcanvas": "2.9.0",
     "jquery-treetable": "^3.2.0-1",
     "jquery-ui": "^1.13.2",
@@ -62,6 +62,7 @@
       "bootstrap-icons": "",
       "clipboard": "",
       "converse.js": "",
+      "dompurify": "Warning, resolve version override set.  See main package.json Changelog: https://github.com/cure53/DOMPurify/releases",
       "driver.js": "Release notes: https://github.com/kamranahmedse/driver.js/releases",
       "jquery": "",
       "jquery-migrate": "",


=====================================
src/js/jquery-tiki/package.json
=====================================
@@ -10,7 +10,10 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "svgedit": "^7.3.3"
+    "svgedit": "~7.3.3"
+  },
+  "dependenciesComment": {
+    "svgedit": "version 7.4.0 switched to pnpm and causes build failures if used"
   },
   "devDependenciesComment": {
     "@svgedit/svgcanvas": "https://github.com/SVG-Edit/svgedit/blob/master/packages/svgcanvas/CHANGES.md"


=====================================
src/js/vue-mf/styleguide/.gitignore deleted
=====================================
@@ -1,5 +0,0 @@
-node_modules
-.DS_Store
-dist
-dist-ssr
-*.local
\ No newline at end of file


=====================================
src/scss/package.json
=====================================
@@ -4,14 +4,14 @@
   "description": "Sass (scss) build system for themes.  Note that for themes in _custom to actually work, you also need the main vite js build to run to copy the assets (images, fonts, etc.)",
   "type": "module",
   "scriptsComments": {
-    "build/watch": "The flags --silence-deprecation=color-functions,global-builtin,import are there because as of 2025-06-09, bootstrap 5.3.6 hasn't fixed everything.  See https://github.com/orgs/twbs/discussions/41370.  In addition, our own code requires ignoring @import deprecation, because we can't run px sass-migrator module --migrate-deps --load-path=../../templates --load-path=../../themes ../../themes/**/**/*.scss on our own codebase until bootstrap is fixed.  benoitg - 2025-06-09 EDIT Jomagene 2025-10-20: The 'mixed-decls' flag was removed as it became obsolete in newer Sass compiler versions (post v1.92.0) and was causing a new build warning."
+    "build/watch": "The flags --silence-deprecation=color-functions,global-builtin,import,if-function are there because as of 2025-12-18, bootstrap 5.3.6 hasn't fixed everything.  See https://github.com/orgs/twbs/discussions/41370.  In addition, our own code requires ignoring @import deprecation, because we can't run px sass-migrator module --migrate-deps --load-path=../../templates --load-path=../../themes ../../themes/**/**/*.scss on our own codebase until bootstrap is fixed.  benoitg - 2025-06-09 EDIT Jomagene 2025-10-20: The 'mixed-decls' flag was removed as it became obsolete in newer Sass compiler versions (post v1.92.0) and was causing a new build warning."
   },
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1",
     "prebuild": "node scripts/check_custom.js",
     "prewatch": "node scripts/check_custom.js",
-    "build": "sass --load-path=../../templates --load-path=../../themes ../../themes ../../_custom:../../public/generated/_custom --silence-deprecation=color-functions,global-builtin,import",
-    "watch": "sass --watch --load-path=../../templates --load-path=../../themes ../../themes ../../_custom:../../public/generated/_custom --silence-deprecation=color-functions,global-builtin,import",
+    "build": "sass --load-path=../../templates --load-path=../../themes ../../themes ../../_custom:../../public/generated/_custom --silence-deprecation=color-functions,global-builtin,import,if-function",
+    "watch": "sass --watch --load-path=../../templates --load-path=../../themes ../../themes ../../_custom:../../public/generated/_custom --silence-deprecation=color-functions,global-builtin,import,if-function",
     "clean": "git clean -f -x \"../../themes/**/*.css\" \"../../themes/**/*.css.map\" \"../../public/generated/_custom/**/*.css\" \"../../public/generated/_custom/**/*.css.map\""
   },
   "author": "",
@@ -23,7 +23,7 @@
   },
   "devDependencies": {
     "boosted": "~5.2",
-    "bootswatch": "^5.3.6",
-    "sass": "^1.77.5"
+    "bootswatch": "^5.3.8",
+    "sass": "^1.97.0"
   }
 }



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/328f2b811ddefa7d6a08520d2868ba49e622cbc7

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/328f2b811ddefa7d6a08520d2868ba49e622cbc7
You're receiving this email because of your account on gitlab.com.

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs