Re: [PR] Upgrade Underscore.js to version 1.13.6 [tapestry-5]

On Thu, Oct 19, 2023 at 1:53 PM Numa Schmeder <[email protected]> wrote:

> Hello,

Hi!

> Why don’t we update tapestry to use webpack and stop using underscore all together. It would make much more sense.
> We could also upgrade all tapestry async handling at least partial page rendering with a library like: https://hotwired.dev/
> There is a reference implementation for ruby. Could this be interesting for the future of Tapestry ?

Tapestry's Zone component already does what I understand Hotwired
does: rendering HTML server-side and send it to the client to be
applied unchanged to the client-side HTML DOM.  So I'm afraid I don't
see the benefit of using Hotwired in Tapestry.

>
> Best,
>
>
>   <http://www.dfacto.ch/>       Numa Schmeder    www.dfacto.ch  <http://www.dfacto.ch/>
> [email protected] <mailto:[email protected]>   |   M +41 79 538 30 01
>
> DIGITAL STRATEGY   |   DESIGN   |   DEVELOPMENT
>
>
>
>
> > Le 19 oct. 2023 à 17:28, benweidig (via GitHub) <[email protected]> a écrit :
> >
> >
> > benweidig commented on PR #45:
> > URL: https://github.com/apache/tapestry-5/pull/45#issuecomment-1771222694
> >
> >   We ran into the same issue after a recent pen test and updated it internally; there have been no issues so far.
> >
> >   Initially, I thought about removing underscore.js altogether, as only a few methods appeared to be used.
> >   After a closer look, there are 23 methods used, and removing the library would introduce a breaking change anyway.
> >   So updating it is the better approach.
> >
> >   For easier release management, I will create a Jira ticket this weekend to track the changes before merging the PR.
> >
> >
> > --
> > This is an automated message from the Apache Git Service.
> > To respond to the message, please log on to GitHub and use the
> > URL above to go to the specific comment.
> >
> > To unsubscribe, e-mail: [email protected]
> >
> > For queries about this service, please contact Infrastructure at:
> > [email protected]
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [email protected]
> > For additional commands, e-mail: [email protected]
> >
>


-- 
Thiago H. de Paula Figueiredo