@burdenoff/fluidgrids-fe-sdk 2026.1013.3 → 2026.1014.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -0
- package/package.json +3 -1
package/README.md
CHANGED
|
@@ -191,6 +191,15 @@ phrase, but the FluidGrids name always stays.
|
|
|
191
191
|
|
|
192
192
|
## Security Notes
|
|
193
193
|
|
|
194
|
+
- Codegen's transitive `@graphql-tools/utils` is pinned to `12.0.3` for
|
|
195
|
+
GHSA-7mx3-vvmw-hjmv; `source-map-js` is pinned to `1.2.2` for
|
|
196
|
+
GHSA-68fv-2mgg-jv7q. The utils override crosses older plugin ranges because
|
|
197
|
+
even the current Apollo hook plugin retains an affected helper dependency.
|
|
198
|
+
Keep the existing codegen contract tests and compare all four generated files
|
|
199
|
+
when changing this pin; its GraphQL 17 execution-helper changes are not used
|
|
200
|
+
by this repository's GraphQL 16 codegen path.
|
|
201
|
+
Validate with a clean frozen-lockfile install: an incremental Bun install can
|
|
202
|
+
leave old nested copies in `node_modules` after an override changes resolution.
|
|
194
203
|
- Pass runtime URLs through environment variables instead of hardcoded localhost defaults.
|
|
195
204
|
- Use `trustedOrigins` when embedding the SDK into known host applications.
|
|
196
205
|
- Avoid logging or persisting `authToken` values in app telemetry or error reports.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@burdenoff/fluidgrids-fe-sdk",
|
|
3
|
-
"version": "2026.
|
|
3
|
+
"version": "2026.1014.1",
|
|
4
4
|
"description": "FluidGrids Workflow Builder SDK - Embeddable visual workflow automation",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"imports": {
|
|
@@ -168,6 +168,8 @@
|
|
|
168
168
|
"access": "public"
|
|
169
169
|
},
|
|
170
170
|
"overrides": {
|
|
171
|
+
"@graphql-tools/utils": "12.0.3",
|
|
172
|
+
"source-map-js": "1.2.2",
|
|
171
173
|
"lodash": "4.18.1",
|
|
172
174
|
"lodash-es": "4.18.1",
|
|
173
175
|
"dompurify": "3.4.0",
|