sync: release/11.14.0 (sba-internal → sba-angular)#317
Merged
Conversation
#noJiraCheck Release/11.13.0
- Update webpack-dev-server override to 5.2.4 - Bump transitive dependencies in package-lock.json - Bump vulnerable packages in docusaurus/package-lock.json
…dependabot security vulnerabilities #noJiraCheck ES-31800 #done ES-31801 #done ES-31802 #done chore: fix dependabot security vulnerabilities
Release/11.13.0 #noJiraCheck
test(components): fix specs for Angular 20 standalone default #noJiraCheck
Replace the global @import scoping with the Sass module system across the components theme and the consuming apps, removing all Sass deprecation warnings (@import, global built-in functions, mixed-decls). - Add theme/_bootstrap.scss: single configuration point that forwards Bootstrap via `@forward "bootstrap/scss/bootstrap" with (...)`. App-level overrides ($secondary, $navbar-padding-y, custom $grid-breakpoints) thread through as configurable knobs. - Add theme/_tokens.scss: all Sinequa-only tokens (forwards _colors.scss). - Split former _variables.scss: Bootstrap overrides -> _bootstrap.scss with(); Sinequa tokens -> _tokens.scss; sq-button-variant mixin -> _buttons.scss. - Convert ~18 theme partials, action/notification/advanced, the 4 app entries and preview/navbar/menu component styles to @use/@forward. - Load CDK overlay & ngx datepicker CSS via `@use "*.css"` (inlined). - Namespace deprecated global fns: map.get, meta.type-of, color.mix, color.adjust (metadata.scss); fix mixed-decls in _dark.scss. - Drop dead $breadcrumb-item-active-color override (misnamed, never applied). Verified: ng build components / vanilla-search / pepper / components-docs all build with zero Sass deprecation warnings. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…cet-filters BsFacetDate pinned this.query in setCustomDateSelect (this.query = query). After applying a date range, searchService.search() rebuilds the live query from the URL, leaving this.query stale: the clear action removed the filter from the stale query while the search re-ran against the live one, so the button had no effect (unless the facet was collapsed/recreated first). Stop pinning this.query and use the local query for applyFilterSearch, like BsFacetRange.setRange(). Also pass the facet name to clearFiltersSearch for consistent audit events with list/range facets. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…cet-filters ES-32242 fix(facet-date): clear filters button has no effect in sq-facet-filters
… audit fix 37 vulnerabilities fixed (37 → 11 remaining require breaking changes) Fixed packages: - esbuild: arbitrary file read on Windows dev server - http-proxy-middleware: CRLF injection + host-header bypass - piscina: prototype pollution gadget → RCE via options.filename - vite: server.fs.deny bypass on Windows + NTLMv2 hash disclosure - ws: memory exhaustion DoS - engine.io / socket.io-adapter: ws transitive fixes - and related transitive dependencies Remaining 11 vulnerabilities require --force (breaking changes): - @babel/core: would downgrade @angular/compiler-cli to 15.0.4 - uuid: would upgrade to v14 (breaking API change) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…vulnerabilities ES-32428 #done ES-32427 #done ES-32334 #done ES-32281 #done ES-32280 #done ES-32279 #done ES-32278 #done ES-32277 #done ES-32276 #done ES-32275 #done ES-32183 #done ES-31996 #done chore: fix dependabot security vulnerabilities
- Override uuid to ^11.1.1 (GHSA-w5hq-g745-h8pq) - Override gray-matter js-yaml to ^4.2.0 (GHSA-h67p-54hq-rp68) - Patch gray-matter engines.js to use js-yaml 4.x API (load/dump) - Add postinstall to apply patch and remove gray-matter nested node_modules Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
#noJiraCheck chore: fix npm audit vulnerabilities in docusaurus
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Synchronisation automatique de la branche
release/11.14.0depuis le repo internesba-internal.