@matfsw/docusaurus-plantuml-plugin 1.1.0 → 1.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +18 -1
- package/package.json +6 -1
package/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [1.1.1]
|
|
11
|
+
|
|
12
|
+
### Security
|
|
13
|
+
|
|
14
|
+
- Added `overrides` pinning three transitively-installed packages to patched versions:
|
|
15
|
+
`serialize-javascript` `>= 7.0.7` (RCE and denial-of-service advisories), `uuid` `>= 11.1.1`
|
|
16
|
+
(missing buffer bounds check) and `esbuild` `>= 0.28.1` (development-server request
|
|
17
|
+
handling). `npm audit` now reports no vulnerabilities.
|
|
18
|
+
|
|
19
|
+
**This changes nothing for consumers of the package.** All three arrived through build-time
|
|
20
|
+
tooling — `serialize-javascript` and `uuid` through the `@docusaurus/core` used to build the
|
|
21
|
+
example site, `esbuild` through `tsup` — and none of them is part of what a reader's browser
|
|
22
|
+
downloads. npm also ignores an `overrides` block declared by a dependency, so these apply
|
|
23
|
+
only to this repository's own installs. The plugin's own `copy-webpack-plugin` dependency
|
|
24
|
+
was already resolving a patched `serialize-javascript`.
|
|
25
|
+
|
|
10
26
|
## [1.1.0]
|
|
11
27
|
|
|
12
28
|
### Added
|
|
@@ -201,7 +217,8 @@ Initial release.
|
|
|
201
217
|
opt-out.
|
|
202
218
|
- Plugin option validation that rejects unknown keys and out-of-range values at build time.
|
|
203
219
|
|
|
204
|
-
[Unreleased]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.1.
|
|
220
|
+
[Unreleased]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.1.1...HEAD
|
|
221
|
+
[1.1.1]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.1.0...v1.1.1
|
|
205
222
|
[1.1.0]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.0.3...v1.1.0
|
|
206
223
|
[1.0.3]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.0.2...v1.0.3
|
|
207
224
|
[1.0.2]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.0.1...v1.0.2
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@matfsw/docusaurus-plantuml-plugin",
|
|
3
|
-
"version": "1.1.
|
|
3
|
+
"version": "1.1.1",
|
|
4
4
|
"description": "Render PlantUML diagrams in Docusaurus 3 entirely in the browser - no Java, no PlantUML server, no CDN.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"docusaurus",
|
|
@@ -108,5 +108,10 @@
|
|
|
108
108
|
"typescript": "~5.9.3",
|
|
109
109
|
"typescript-eslint": "^8.46.4",
|
|
110
110
|
"vitest": "^3.2.4"
|
|
111
|
+
},
|
|
112
|
+
"overrides": {
|
|
113
|
+
"serialize-javascript": "^7.0.7",
|
|
114
|
+
"uuid": "^11.1.1",
|
|
115
|
+
"esbuild": "^0.28.1"
|
|
111
116
|
}
|
|
112
117
|
}
|