@tidbcloud/uikit 2.8.4 → 2.8.6

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @tidbcloud/uikit
 
+## 2.8.6
+
+### Patch Changes
+
+- fix(Form): restrict error message HTML ([#659](https://github.com/tidbcloud/tidbcloud-uikit/pull/659))
+- fix(ci): authorize and isolate snapshot publishing ([#660](https://github.com/tidbcloud/tidbcloud-uikit/pull/660))
+
+## 2.8.5
+
+### Patch Changes
+
+- fix(DateTimePicker): recover from invalid date values ([#657](https://github.com/tidbcloud/tidbcloud-uikit/pull/657))
+
 ## 2.8.4
 
 ### Patch Changes

package/dist/biz/DateTimePicker/index.cjs

@@ -24,6 +24,10 @@ const DatePicker = require("../../node_modules/.pnpm/@mantine_dates@7.17.8_@mant
 const Divider = require("../../node_modules/.pnpm/@mantine_core@7.17.8_patch_hash_3qirwkgu3wxhvd6hnr2gb24yzq_@mantine_hooks@7.17.8_react@18.3.1_e5yvlgwhmeykc75dkphi7jou6q/node_modules/@mantine/core/esm/components/Divider/Divider.cjs");
 const TimeInput = require("../../node_modules/.pnpm/@mantine_dates@7.17.8_@mantine_core@7.17.8_patch_hash_3qirwkgu3wxhvd6hnr2gb24yzq_@mantine_hoo_itsuscsie4edrhi6ero4lpb3hq/node_modules/@mantine/dates/esm/components/TimeInput/TimeInput.cjs");
 const Flex = require("../../node_modules/.pnpm/@mantine_core@7.17.8_patch_hash_3qirwkgu3wxhvd6hnr2gb24yzq_@mantine_hooks@7.17.8_react@18.3.1_e5yvlgwhmeykc75dkphi7jou6q/node_modules/@mantine/core/esm/components/Flex/Flex.cjs");
+const getValidDate = (value) => {
+  const date = value ? dayjs.dayjs(value) : void 0;
+  return (date == null ? void 0 : date.isValid()) ? date : void 0;
+};
 const DateTimePicker = ({
   placeholder = "Select time",
   format = helpers$1.DEFAULT_TIME_FORMAT,
@@ -45,9 +49,11 @@ const DateTimePicker = ({
   const [opened, { close, open }] = useDisclosure.useDisclosure(false);
   const currentDay = dayjs.dayjs(today).startOf("day");
   const minimumDate = dayjs.dayjs(startDate);
+  const initialValue = getValidDate(defaultValue) ?? dayjs.dayjs();
+  const fallbackValue = initialValue.isBefore(minimumDate) ? minimumDate : initialValue.isAfter(endDate) ? dayjs.dayjs(endDate) : initialValue;
   const [currentValue, setCurrentValue] = useUncontrolled.useUncontrolled({
-    value: value ? dayjs.dayjs(value) : void 0,
-    defaultValue: defaultValue ? dayjs.dayjs(defaultValue) : dayjs.dayjs(),
+    value: getValidDate(value),
+    defaultValue: fallbackValue,
     onChange: (v) => {
       onChange == null ? void 0 : onChange(v.toDate());
     }

package/dist/biz/DateTimePicker/index.mjs

@@ -22,6 +22,10 @@ import { DatePicker } from "../../node_modules/.pnpm/@mantine_dates@7.17.8_@mant
 import { Divider } from "../../node_modules/.pnpm/@mantine_core@7.17.8_patch_hash_3qirwkgu3wxhvd6hnr2gb24yzq_@mantine_hooks@7.17.8_react@18.3.1_e5yvlgwhmeykc75dkphi7jou6q/node_modules/@mantine/core/esm/components/Divider/Divider.mjs";
 import { TimeInput } from "../../node_modules/.pnpm/@mantine_dates@7.17.8_@mantine_core@7.17.8_patch_hash_3qirwkgu3wxhvd6hnr2gb24yzq_@mantine_hoo_itsuscsie4edrhi6ero4lpb3hq/node_modules/@mantine/dates/esm/components/TimeInput/TimeInput.mjs";
 import { Flex } from "../../node_modules/.pnpm/@mantine_core@7.17.8_patch_hash_3qirwkgu3wxhvd6hnr2gb24yzq_@mantine_hooks@7.17.8_react@18.3.1_e5yvlgwhmeykc75dkphi7jou6q/node_modules/@mantine/core/esm/components/Flex/Flex.mjs";
+const getValidDate = (value) => {
+  const date = value ? dayjs(value) : void 0;
+  return (date == null ? void 0 : date.isValid()) ? date : void 0;
+};
 const DateTimePicker = ({
   placeholder = "Select time",
   format = DEFAULT_TIME_FORMAT,
@@ -43,9 +47,11 @@ const DateTimePicker = ({
   const [opened, { close, open }] = useDisclosure(false);
   const currentDay = dayjs(today).startOf("day");
   const minimumDate = dayjs(startDate);
+  const initialValue = getValidDate(defaultValue) ?? dayjs();
+  const fallbackValue = initialValue.isBefore(minimumDate) ? minimumDate : initialValue.isAfter(endDate) ? dayjs(endDate) : initialValue;
   const [currentValue, setCurrentValue] = useUncontrolled({
-    value: value ? dayjs(value) : void 0,
-    defaultValue: defaultValue ? dayjs(defaultValue) : dayjs(),
+    value: getValidDate(value),
+    defaultValue: fallbackValue,
     onChange: (v) => {
       onChange == null ? void 0 : onChange(v.toDate());
     }

package/dist/biz/DateTimePicker/types.d.cts

@@ -50,7 +50,14 @@ export interface DateTimePickerProps extends Omit<TextInputProps, 'value' | 'onC
      * @deprecated
      */
     utcOffset?: number;
+    /**
+     * Initial date for an uncontrolled picker. Missing or invalid dates fall back
+     * to the current time within the selectable range.
+     */
     defaultValue?: Date;
+    /**
+     * Controlled date. Invalid dates are treated as missing values.
+     */
     value?: Date;
     /**
      * The current date used to highlight "today" in the calendar.

package/dist/biz/DateTimePicker/types.d.mts

@@ -50,7 +50,14 @@ export interface DateTimePickerProps extends Omit<TextInputProps, 'value' | 'onC
      * @deprecated
      */
     utcOffset?: number;
+    /**
+     * Initial date for an uncontrolled picker. Missing or invalid dates fall back
+     * to the current time within the selectable range.
+     */
     defaultValue?: Date;
+    /**
+     * Controlled date. Invalid dates are treated as missing values.
+     */
     value?: Date;
     /**
      * The current date used to highlight "today" in the calendar.

package/dist/biz/Form/FormErrorMessage.cjs

@@ -42,7 +42,20 @@ const FormErrorMessage = ({
       },
       ...rest,
       children: [
-        /* @__PURE__ */ jsxRuntime.jsx("div", { dangerouslySetInnerHTML: { __html: DOMPurify.sanitize(message) } }),
+        /* @__PURE__ */ jsxRuntime.jsx(
+          "div",
+          {
+            dangerouslySetInnerHTML: {
+              __html: DOMPurify.sanitize(message, {
+                ALLOWED_TAGS: ["a", "b", "br", "code", "em", "i", "li", "ol", "p", "span", "strong", "ul"],
+                ALLOWED_ATTR: ["href", "title"],
+                ALLOW_ARIA_ATTR: false,
+                ALLOW_DATA_ATTR: false,
+                ALLOWED_URI_REGEXP: /^(?:(?:https?|mailto):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i
+              })
+            }
+          }
+        ),
         /* @__PURE__ */ jsxRuntime.jsx("div", { ref: bottomRef })
       ]
     }

package/dist/biz/Form/FormErrorMessage.mjs

@@ -40,7 +40,20 @@ const FormErrorMessage = ({
       },
       ...rest,
       children: [
-        /* @__PURE__ */ jsx("div", { dangerouslySetInnerHTML: { __html: DOMPurify.sanitize(message) } }),
+        /* @__PURE__ */ jsx(
+          "div",
+          {
+            dangerouslySetInnerHTML: {
+              __html: DOMPurify.sanitize(message, {
+                ALLOWED_TAGS: ["a", "b", "br", "code", "em", "i", "li", "ol", "p", "span", "strong", "ul"],
+                ALLOWED_ATTR: ["href", "title"],
+                ALLOW_ARIA_ATTR: false,
+                ALLOW_DATA_ATTR: false,
+                ALLOWED_URI_REGEXP: /^(?:(?:https?|mailto):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i
+              })
+            }
+          }
+        ),
         /* @__PURE__ */ jsx("div", { ref: bottomRef })
       ]
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tidbcloud/uikit",
-  "version": "2.8.4",
+  "version": "2.8.6",
   "description": "tidbcloud uikit",
   "type": "module",
   "main": "dist/primitive/index.cjs",
@@ -70,7 +70,7 @@
     "ahooks": "^3.7.8",
     "clsx": "^2.1.1",
     "dayjs": "^1.11.5",
-    "dompurify": "^3.0.3",
+    "dompurify": "^3.4.17",
     "embla-carousel-react": "^7.0.5",
     "google-libphonenumber": "^3.2.30",
     "html-react-parser": "5.1.18",