@koehler8/cms 1.4.2 → 1.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,32 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 1.5.1
|
|
4
|
+
|
|
5
|
+
### Fixed
|
|
6
|
+
|
|
7
|
+
- **Provenance names the right commit again.** 1.5.0's npm provenance pointed
|
|
8
|
+
at the commit before its release commit, so npmjs.com showed "Unable to
|
|
9
|
+
fetch the source commit". 1.5.1 has the same contents as 1.5.0, published
|
|
10
|
+
from a run on its own release tag. Nothing for a site to change.
|
|
11
|
+
|
|
12
|
+
## 1.5.0
|
|
13
|
+
|
|
14
|
+
### Changed
|
|
15
|
+
|
|
16
|
+
- **Raised the peer-dependency minimums to the versions cms is tested
|
|
17
|
+
against:** `vite ^8.3.0`, `vue ^3.5.43`, `vue-router ^5.3.1`,
|
|
18
|
+
`@vitejs/plugin-vue ^6.0.8` (`vite-ssg` stays `^28.0.0`). A site locked
|
|
19
|
+
below any of these sees a peer-dependency warning when it updates cms and
|
|
20
|
+
should move those packages in the same update. The `cms-create-site`
|
|
21
|
+
template starts new sites at these versions.
|
|
22
|
+
|
|
23
|
+
### Security
|
|
24
|
+
|
|
25
|
+
- **Patched `fast-uri` for GHSA-w74x-v6f9-j3xg and GHSA-xhq7-xmqj-769h.**
|
|
26
|
+
cms's `ajv` accepts any `fast-uri ^3.0.1`, which let sites keep the
|
|
27
|
+
vulnerable 3.1.8. cms now depends on `fast-uri ^3.1.9` directly, so a site
|
|
28
|
+
that updates cms gets the patched copy. No code in cms imports it.
|
|
29
|
+
|
|
3
30
|
## 1.4.2
|
|
4
31
|
|
|
5
32
|
### Fixed
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@koehler8/cms",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.5.1",
|
|
4
4
|
"description": "Vertex CMS — lightweight, config-driven Vue 3 framework with theming, extensions, and SSG support",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -70,16 +70,17 @@
|
|
|
70
70
|
"CHANGELOG.md"
|
|
71
71
|
],
|
|
72
72
|
"peerDependencies": {
|
|
73
|
-
"@vitejs/plugin-vue": "^6.0.
|
|
74
|
-
"vite": "^8.
|
|
73
|
+
"@vitejs/plugin-vue": "^6.0.8",
|
|
74
|
+
"vite": "^8.3.0",
|
|
75
75
|
"vite-ssg": "^28.0.0",
|
|
76
|
-
"vue": "^3.5.
|
|
77
|
-
"vue-router": "^5.
|
|
76
|
+
"vue": "^3.5.43",
|
|
77
|
+
"vue-router": "^5.3.1"
|
|
78
78
|
},
|
|
79
79
|
"dependencies": {
|
|
80
80
|
"@unhead/vue": "^2.1.15",
|
|
81
81
|
"ajv": "^8.20.0",
|
|
82
82
|
"ajv-formats": "^3.0.1",
|
|
83
|
+
"fast-uri": "^3.1.9",
|
|
83
84
|
"pinia": "^4.0.3",
|
|
84
85
|
"sharp": "^0.35.3"
|
|
85
86
|
},
|
|
@@ -13,11 +13,11 @@
|
|
|
13
13
|
"dependencies": {
|
|
14
14
|
"@koehler8/cms": "^1.0.0",
|
|
15
15
|
"@koehler8/cms-ext-compliance": "^1.0.0",
|
|
16
|
-
"@vitejs/plugin-vue": "^6.0.
|
|
17
|
-
"vite": "^8.0
|
|
16
|
+
"@vitejs/plugin-vue": "^6.0.8",
|
|
17
|
+
"vite": "^8.3.0",
|
|
18
18
|
"vite-ssg": "^28.2.2",
|
|
19
|
-
"vue": "^3.5.
|
|
20
|
-
"vue-router": "^5.
|
|
19
|
+
"vue": "^3.5.43",
|
|
20
|
+
"vue-router": "^5.3.1"
|
|
21
21
|
},
|
|
22
22
|
"engines": {
|
|
23
23
|
"node": ">=20.19.0",
|