minor v1.19.0 #203

Merged

jkeffects merged 42 commits from develop into main 2026-09-03 14:12:38 +00:00

Conversation 0 Commits 42 Files changed 168 +7045 -5429

jkeffects commented 2026-09-03 12:18:26 +00:00

Owner

Copy link

enhance: show originial filename in proof and maintenance
enhance: maintenance document upload
enhance: remove required title
update full calendar to latest
remove: outdated docs in UI
update package and cve close
update vite 8
update core package
Merge pull request 'update/core-to-1.6.0' (#202) from update/core-to-1.6.0 into develop
update package
Merge pull request 'feature/#101-Requirements-&-Compliance-Tracking' (#201) from feature/#101-Requirements-&-Compliance-Tracking into develop
enhance: ci workflow with checks an layer caching
enhance: check workflow
fix: typo in maintenance

enhance: show originial filename in proof and maintenance enhance: maintenance document upload enhance: remove required title update full calendar to latest remove: outdated docs in UI update package and cve close update vite 8 update core package Merge pull request 'update/core-to-1.6.0' (#202) from update/core-to-1.6.0 into develop update package Merge pull request 'feature/#101-Requirements-&-Compliance-Tracking' (#201) from feature/#101-Requirements-&-Compliance-Tracking into develop enhance: ci workflow with checks an layer caching enhance: check workflow fix: typo in maintenance

jkeffects self-assigned this 2026-09-03 12:18:26 +00:00

jkeffects added 39 commits 2026-09-03 12:18:26 +00:00

base proof pages 72c67dea2a

fix: typo in maintenance 624a40a425

basic file structure 72778bbe09

stores and viewmodels 8ad8117a12

proof plan 03d8ad2a75

create or update requirement rule 41cba7a9c8

sync proof plan required 5c38600597

appointment base vis 8d70bcf83f

appointment cancel, update, delete 976fa4e571

enhance: check workflow c34692d576

proof create 2f2844993c

claude config 471705c7f2

Merge branch 'develop' into feature/#101-Requirements-&-Compliance-Tracking 14fec5c0ad

enhance: ci workflow with checks an layer caching abd4a5b78b

proof by member 9a1643456f

proof file viewing 733a24b862

Merge pull request 'feature/#101-Requirements-&-Compliance-Tracking' (#201) from feature/#101-Requirements-&-Compliance-Tracking into develop ... 99b6ae7050

Reviewed-on: #201

update package b75da9a88d

provide client info 8860fba6f6

adapt package list item styling 26e8530ca8

update core version 4547ef4871

update baseSearchSelect usage to core package (simple single selects) ab3c4123d2

update baseSearchSelect usage to core package (scanner-enabled selects) 1ab40e9272

update baseSearchSelect usage to core package (member search selects) b8db6f2e1c

update baseSearchSelect usage to core package (multi-selects) f4fcce23f1

update baseSearchSelect usage to core package (related-scoped selects) f3b7c06cea

update core version 3677442cc7

use uuid v7 in client generation f7bf684a17

fix z-index of search-select dropdowns opened inside modals ... 5399b28646

BaseSearchSelect's ComboboxPortal defaults to z-20 while core's Modal
overlay is z-50, so any search-select nested inside a modal rendered
its dropdown behind the modal backdrop. Raise it above the modal via
the contentZIndexClass prop on every search-select used inside a
Modal-rendered component.

expose contentZIndexClass prop on all search-select wrapper components ... b11adb8a51

Forward it explicitly to BaseSearchSelect like every other prop these
wrappers already expose (title, disabled, placeholder, ...), instead
of relying on implicit attribute fallthrough for the z-index fix.

Merge pull request 'update/core-to-1.6.0' (#202) from update/core-to-1.6.0 into develop ... 0531bc073a

Reviewed-on: #202

update core package d61ff22790

update vite 8 7cc939b213

update package and cve close ... 15c10786f1

@babel/core  <=7.29.0
@babel/core: Arbitrary File Read via sourceMappingURL Comment - https://github.com/advisories/GHSA-4x5r-pxfx-6jf8

@humanfs/node  <0.16.8
Severity: moderate
humanfs: Recursive copy follows symlinked files and copies data from outside the source tree - https://github.com/advisories/GHSA-p498-v437-472g

brace-expansion  2.0.0 - 2.1.3 || 3.0.0 - 5.0.8
Severity: high
brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups - https://github.com/advisories/GHSA-3jxr-9vmj-r5cp
brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups - https://github.com/advisories/GHSA-3jxr-9vmj-r5cp
brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash - https://github.com/advisories/GHSA-mh99-v99m-4gvg
brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash - https://github.com/advisories/GHSA-mh99-v99m-4gvg
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation - https://github.com/advisories/GHSA-rgw5-rvv9-x895
brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation - https://github.com/advisories/GHSA-rgw5-rvv9-x895

browserslist  <=4.28.6
Severity: high
Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM - https://github.com/advisories/GHSA-c83g-rgw3-j3cx
Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) - https://github.com/advisories/GHSA-73wf-gq98-2v4g

fast-uri  3.0.0 - 3.1.5
Severity: high
fast-uri vulnerable to host confusion via literal backslash authority delimiter - https://github.com/advisories/GHSA-v2hh-gcrm-f6hx
fast-uri vulnerable to host confusion via backslash authority introducer - https://github.com/advisories/GHSA-7p8r-x3mc-p8w7
fast-uri vulnerable to host confusion via failed IDN canonicalization - https://github.com/advisories/GHSA-4c8g-83qw-93j6
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization - https://github.com/advisories/GHSA-f65p-4m7j-42xc
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding - https://github.com/advisories/GHSA-fph4-wmhf-6fwf
fast-uri vulnerable to host confusion via percent-encoded scheme normalization - https://github.com/advisories/GHSA-jqff-g426-hqxp

js-yaml  <=3.15.0
Severity: high
JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases - https://github.com/advisories/GHSA-h67p-54hq-rp68
js-yaml: YAML merge-key chains can force quadratic CPU consumption - https://github.com/advisories/GHSA-52cp-r559-cp3m
JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported - https://github.com/advisories/GHSA-5p4m-2wfm-xmqj

linkify-it  <=5.0.1
Severity: high
linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text - https://github.com/advisories/GHSA-v245-v573-v5vm

socket.io-parser  4.0.0 - 4.2.6
Severity: high
Socket.IO: Zero-attachment Memory Exhaustion - https://github.com/advisories/GHSA-2m8v-j782-fhvr

ws  8.0.0 - 8.20.1
Severity: high
ws: Memory exhaustion DoS from tiny fragments and data chunks - https://github.com/advisories/GHSA-96hv-2xvq-fx4p

remove: outdated docs in UI 4f07d6d6c2

update full calendar to latest dbb70ef57e

enhance: remove required title d3cf407a4b

enhance: maintenance document upload 66d1cf8dcc

enhance: show originial filename in proof and maintenance e4867b9395

jkeffects added 1 commit 2026-09-03 12:20:59 +00:00

Merge branch 'main' into develop a22e0d9e41

jkeffects added 1 commit 2026-09-03 14:05:42 +00:00

code: import with @/ 94ac69685b

jkeffects added 1 commit 2026-09-03 14:08:48 +00:00

fix: public calendar item color 53e973ca80

jkeffects merged commit f4e1e20e67 into main 2026-09-03 14:12:38 +00:00

jkeffects referenced this pull request from a commit 2026-09-03 14:12:39 +00:00

Merge pull request 'minor v1.19.0' (#203) from develop into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

bug

  

feature

  

feature

backlog

  

feature

optional

No labels

bug

feature

feature

backlog

feature

optional

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

jkeffects

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

FF-Admin/ff-admin!203

No description provided.