Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update JS dependencies #33359

Merged
merged 1 commit into from
Jan 22, 2025
Merged

Update JS dependencies #33359

merged 1 commit into from
Jan 22, 2025

Conversation

silverwind
Copy link
Member

@GiteaBot GiteaBot added the lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. label Jan 22, 2025
@pull-request-size pull-request-size bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Jan 22, 2025
@silverwind silverwind added the skip-changelog This PR is irrelevant for the (next) changelog, for example bug fixes for unreleased features. label Jan 22, 2025
@GiteaBot GiteaBot added lgtm/need 1 This PR needs approval from one additional maintainer to be merged. and removed lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. labels Jan 22, 2025
@techknowlogick techknowlogick added the backport/v1.23 This PR should be backported to Gitea 1.23 label Jan 22, 2025
@GiteaBot GiteaBot added lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. and removed lgtm/need 1 This PR needs approval from one additional maintainer to be merged. labels Jan 22, 2025
@silverwind silverwind merged commit d64c849 into go-gitea:main Jan 22, 2025
26 checks passed
@GiteaBot GiteaBot added this to the 1.24.0 milestone Jan 22, 2025
@silverwind silverwind deleted the deps-87 branch January 22, 2025 22:33
@GiteaBot
Copy link
Collaborator

I was unable to create a backport for 1.23. @silverwind, please send one manually. 🍵

go run ./contrib/backport 33359
...  // fix git conflicts if any
go run ./contrib/backport --continue

@GiteaBot GiteaBot added the backport/manual No power to the bots! Create your backport yourself! label Jan 22, 2025
@silverwind
Copy link
Member Author

silverwind commented Jan 22, 2025 •
edited
Loading

Katex can be manually upgraded on 1.23 branch, the vite vuln does not affect us at all actually because we don't run their dev server.

@silverwind silverwind mentioned this pull request Jan 22, 2025
Merged
@silverwind silverwind added the backport/done All backports for this PR have been created label Jan 22, 2025
silverwind added a commit that referenced this pull request Jan 23, 2025
@silverwind
Update katex to latest version (#33361)
a3c5358 
Partial backport of #33359.
Upgrade katex because there were a number of security problems fixed in
recent versions.
zjjhot added a commit to zjjhot/gitea that referenced this pull request Jan 23, 2025
@zjjhot
Merge remote-tracking branch 'giteaofficial/main'
99da21b 
* giteaofficial/main:
  [skip ci] Updated translations via Crowdin
  Support disable passkey auth (go-gitea#33348)
  Update JS dependencies (go-gitea#33359)
  Enable Typescript `noImplicitAny` (go-gitea#33322)
  Remove duplicate "ResponseWriter.Status" method (go-gitea#33346)
  Fix code button alignment (go-gitea#33345)
  [skip ci] Updated translations via Crowdin
  Support performance trace (go-gitea#32973)
  Make issue suggestion work for all editors (go-gitea#33340)
  Fix issue count (go-gitea#33338)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@lunny lunny lunny approved these changes

@techknowlogick techknowlogick techknowlogick approved these changes

Assignees
No one assigned
Labels
backport/done All backports for this PR have been created backport/manual No power to the bots! Create your backport yourself! backport/v1.23 This PR should be backported to Gitea 1.23 lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. modifies/dependencies size/S Denotes a PR that changes 10-29 lines, ignoring generated files. skip-changelog This PR is irrelevant for the (next) changelog, for example bug fixes for unreleased features.
Projects
None yet
Milestone
1.24.0
Development

Successfully merging this pull request may close these issues.
4 participants
@silverwind @GiteaBot @lunny @techknowlogick