@yuneta/gobj-ui 6.3.2 → 7.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -13,8 +13,13 @@ Published as `@yuneta/gobj-ui`. Built on top of [`@yuneta/gobj-js`](https://gith
13
13
  > routing contract (URL = source of truth, push/replace history, the
14
14
  > position/preference/transient litmus).
15
15
  >
16
+ > **BREAKING (7.0.0):** a **dependency-only major** — no component API moved.
17
+ > The `maplibre-gl` peer floor rises to `^6.4.1`, which is where `DOM.sanitize`
18
+ > stops leaving dangerous attributes behind when several sit next to each other.
19
+ > Raise the range in every consumer that declares maplibre.
20
+ >
16
21
  > **BREAKING (5.0.0):** a **dependency-only major** — no component API moved.
17
- > The peer floors are now `maplibre-gl` `^6.0.0`, `@yuneta/gobj-js` `^7.8.7`,
22
+ > The peer floors moved to `maplibre-gl` `^6.0.0` (see 7.0.0 above), `@yuneta/gobj-js` `^7.8.7`,
18
23
  > `i18next` `^26.3.6`, `tom-select` `^2.6.2`, `vanilla-jsoneditor` `^3.13.0`.
19
24
  > maplibre v6 is ESM-only with no default export, so a consumer imports it as
20
25
  > `import * as maplibregl`; bundling the map with Vite 8 also means emitting
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@yuneta/gobj-ui",
3
- "version": "6.3.2",
3
+ "version": "7.0.1",
4
4
  "type": "module",
5
5
  "main": "dist/gobj-ui.cjs.js",
6
6
  "module": "dist/gobj-ui.es.js",
@@ -38,7 +38,7 @@
38
38
  "@yuneta/gobj-js": "^7.13.2",
39
39
  "bulma": "^1.0.4",
40
40
  "i18next": "^26.3.6",
41
- "maplibre-gl": "^6.1.0",
41
+ "maplibre-gl": "^6.4.1",
42
42
  "tabulator-tables": "^6.5.2",
43
43
  "tom-select": "^2.6.2",
44
44
  "uplot": "^1.6.32",
@@ -1238,7 +1238,19 @@ function subscribe_treedb(gobj, topic_name)
1238
1238
  }
1239
1239
 
1240
1240
  /************************************************************
1241
+ * The counterpart of subscribe_treedb(), and NOBODY CALLS IT
1242
+ * today: a topic subscribed once stays subscribed for the life
1243
+ * of the view, and the whole set is released when the view (and
1244
+ * with it its transport) is destroyed. So there is no leak to
1245
+ * fix, and no caller to add on that account.
1241
1246
  *
1247
+ * It is kept deliberately. It is the only place that knows the
1248
+ * exact shape the remote subscription was made with — the three
1249
+ * events, `__service__` and the `treedb_name`+`topic_name`
1250
+ * filter — and a remote unsubscribe only lands if it matches
1251
+ * the subscribe verbatim. Deleting it would not remove that
1252
+ * knowledge, it would move it to whoever needs it next, to be
1253
+ * rederived from the subscribe side and got right again.
1242
1254
  ************************************************************/
1243
1255
  function unsubscribe_treedb(gobj, topic_name)
1244
1256
  {