@opencorestack/opengridx 3.2.1 → 3.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +13 -0
- package/dist/opengridx.es.js +186 -180
- package/dist/opengridx.es.js.map +1 -1
- package/dist/opengridx.umd.js +6 -6
- package/dist/opengridx.umd.js.map +1 -1
- package/lib/hooks/core/useGridThemeDimensions.ts +1 -1
- package/lib/utils/columnAutosize.ts +1 -1
- package/lib/utils/export/exportShared.ts +11 -2
- package/llms.txt +1 -1
- package/package.json +5 -1
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,19 @@
|
|
|
5
5
|
|
|
6
6
|
---
|
|
7
7
|
|
|
8
|
+
## [3.2.2] — 2026-10-01
|
|
9
|
+
|
|
10
|
+
### Security
|
|
11
|
+
|
|
12
|
+
- **Exports no longer slow down on crafted cell text** — the check that tells plain signed numbers ("-12.50") from spreadsheet formulas (CSV/Excel formula-injection guard) could backtrack quadratically on long runs of digits, spaces and separators that end in a non-number character, freezing CSV or Excel export of such a value. It now runs in linear time; results are unchanged. Found by CodeQL.
|
|
13
|
+
- **Sheet names and theme heights** — stripping apostrophes from Excel sheet names and parsing `'36px'`-style theme heights used patterns with the same quadratic worst case; both are linear now, results unchanged.
|
|
14
|
+
- **Column auto-size selector fallback** — where `CSS.escape` is unavailable, field names are now escaped for backslashes as well as quotes.
|
|
15
|
+
|
|
16
|
+
### Internal
|
|
17
|
+
|
|
18
|
+
- `exceljs` is a devDependency (it stays an optional peer for consumers), so a regenerated lockfile keeps it.
|
|
19
|
+
- Dev-only dependency alerts: `undici` 7.30.0, `dompurify` 3.4.16, and `uuid` overridden to `^11.1.1` (pulled in by `exceljs` 4.4.0) in the repo and smoke fixtures. Consumers who install `exceljs` themselves still get its `uuid` 8 until `exceljs` updates it.
|
|
20
|
+
|
|
8
21
|
## [3.2.1] — 2026-10-01
|
|
9
22
|
|
|
10
23
|
### Fixed
|