abstract-image 14.0.2 → 14.0.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +4 -0
  2. package/package.json +18 -15
package/CHANGELOG.md CHANGED
@@ -2,6 +2,10 @@
2
2
 
3
3
  All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/) and this project adheres to [Semantic Versioning](http://semver.org/).
4
4
 
5
+ ## [Unreleased]
6
+
7
+ - Fixed: depends on handlebars 4.7.10 instead of 4.7.8, whose templates could inject JavaScript or pollute prototypes, and fast-xml-parser 5.
8
+
5
9
  ## [14.0.0] - 2026-10-28
6
10
 
7
11
  - Breaking: dynamic images use jsxpression 0.4, whose schemas are JSON Schemas. `dynamicImage` and `compileDynamicImage` take the data's schema as one object's JSON Schema, `Schema["data"]`, instead of a record of `PropertySchema`s, and their elements' attributes, `dynamicImageBaseSchema`, are an object's schema each. `generateDataSchema` returns such a schema.
package/package.json CHANGED
@@ -1,10 +1,13 @@
1
1
  {
2
2
  "name": "abstract-image",
3
- "version": "14.0.2",
4
- "gitHead": "040e9ee18ef9c0045ef7fb7c49fa3e039720141f",
3
+ "version": "14.0.4",
4
+ "gitHead": "17921b59da5eee6cc446fd37a2134165af4d1901",
5
5
  "description": "Dynamically create images using code or JSX and render to any format",
6
6
  "license": "MIT",
7
- "repository": "https://github.com/dividab/abstract-visuals/tree/master/packages/abstract-image",
7
+ "repository": {
8
+ "type": "git",
9
+ "url": "https://github.com/dividab/abstract-visuals/tree/master/packages/abstract-image"
10
+ },
8
11
  "files": [
9
12
  "/lib",
10
13
  "/src",
@@ -24,22 +27,22 @@
24
27
  },
25
28
  "dependencies": {
26
29
  "base64-js": "^1.5.1",
27
- "fast-xml-parser": "^4.5.0",
28
- "handlebars": "4.7.8",
29
- "handlebars-xml": "^0.6.1",
30
- "jsxpression": "^0.4.2"
30
+ "fast-xml-parser": "^5.11.2",
31
+ "handlebars": "4.7.10",
32
+ "handlebars-xml": "^0.6.2",
33
+ "jsxpression": "^0.4.4"
31
34
  },
32
35
  "devDependencies": {
33
36
  "@types/base64-js": "^1.3.2",
34
- "@types/node": "^24.9.2",
35
- "@types/react": "catalog:",
36
- "@types/react-dom": "catalog:",
37
- "react": "catalog:",
38
- "react-dom": "catalog:",
39
- "vite": "catalog:",
40
- "vitest": "catalog:"
37
+ "@types/node": "^26.6.5",
38
+ "@types/react": "19.2.17",
39
+ "@types/react-dom": "19.2.3",
40
+ "react": "19.2.7",
41
+ "react-dom": "19.2.7",
42
+ "vite": "^8.3.4",
43
+ "vitest": "5.0.5"
41
44
  },
42
45
  "peerDependencies": {
43
46
  "react": ">=17.0.0 <20.0.0"
44
47
  }
45
- }
48
+ }