admin-lte 4.0.0-rc7 → 4.0.1

package/CHANGELOG.md

@@ -7,6 +7,75 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [4.0.1] - 2026-06-11
+
+### Added
+
+- **Official framework integrations announced** — AdminLTE 4 is now available as first-class packages for four ecosystems, maintained under ColorlibHQ:
+  - [adminlte-vue](https://github.com/ColorlibHQ/adminlte-vue) — Vue 3 & Nuxt, 45+ typed components, composables, SSR-safe theming, ⌘K command palette
+  - [adminlte-react](https://github.com/ColorlibHQ/adminlte-react) — React & Next.js (App Router / RSC), 30+ typed components, dark mode, ⌘K command palette
+  - [adminlte-django](https://github.com/ColorlibHQ/adminlte-django) — config-driven sidebar menu, 33+ components, themed `django.contrib.admin`, `{{ form }}` renderer
+  - [adminlte-laravel](https://github.com/ColorlibHQ/adminlte-laravel) — Blade integration, Vite-ready
+- Social preview generator script (`scripts/social-preview.mjs`, dev-only — excluded from the npm package).
+
+### Fixed
+
+- **#6043:** Stored color mode is now applied before first paint — no more light-mode flash when reloading a page in dark mode. (reported by @bsshreesha)
+- **#6044:** Long subject/preview text in the mailbox inbox list is truncated instead of overflowing its container. (reported by @Oscurlo)
+- **#6038:** `accessibility.js` no longer assigns `role="navigation"` to `<ul>`/`<ol>` elements, which broke list semantics and failed the Lighthouse accessibility audit. (reported by @lfiorini)
+
+### Updated
+
+- All dependencies bumped to latest; `axios` pinned via npm overrides to clear a transitive advisory. `npm audit` remains at **0 vulnerabilities**.
+
+## [4.0.0] - 2026-05-19
+
+### Added
+
+- **18 new demo pages** dramatically expanding the page catalog:
+  - **Apps:** Calendar (FullCalendar 6, drag-and-drop scheduling), Kanban (SortableJS, lane-to-lane drag), Chat (full-page conversation app), File Manager (grid + list views, folder tree), Projects (list with status, progress, team avatars)
+  - **Mailbox:** Inbox, Read Message, Compose — three-pane workflow with folders + labels
+  - **Forms:** Wizard (4-step with per-step validation + review summary)
+  - **Tables:** Data Tables — jQuery-free implementation using Tabulator 6
+  - **Pages:** Profile (tabbed activity/timeline/settings), Settings (account / notifications / security / billing / danger zone), Invoice (print-ready with totals math), Pricing (3-tier + comparison table + billing toggle), FAQ (data-driven accordions)
+  - **Error pages:** 404, 500, Maintenance
+- **Recommended Integrations docs page** (`docs/integrations.html`) — copy-paste install snippets for Flatpickr, Tom Select, noUiSlider, Pickr, IMask, Dropzone, FilePond, Quill, EasyMDE, Toast UI Editor, ApexCharts, Chart.js, Tabulator, FullCalendar, SortableJS, GLightbox, and a comparison of icon libraries. AdminLTE doesn't bundle these — the page shows how to drop them in.
+- **Visible color-mode toggle in the default topbar** (#6010) — Light / Dark / Auto dropdown with localStorage persistence and `prefers-color-scheme` integration. Wiring JS shipped globally in `_scripts.astro` so the toggle works on every demo page automatically.
+
+### Changed
+
+- **Forms section restructured:** Split the 623-line `forms/general.html` into three focused pages — `forms/elements.html` (inputs, selects, checks/radios/switches, ranges, floating labels), `forms/layout.html` (horizontal, inline, sizing, width), and `forms/validation.html` (Bootstrap native validation + tooltip variant).
+
+### Fixed
+
+- **#6028:** Color-mode "Auto" icon now renders. The dropdown used `bi-circle-fill-half-stroke` (a FontAwesome class name); replaced with the correct Bootstrap Icons class `bi-circle-half`.
+- **#6026:** `.table-head-fixed` now respects dark mode. Hardcoded `background-color: $white` swapped for `var(--bs-body-bg)` so the sticky header tracks the active colour scheme.
+- **#6021:** Fullscreen button no longer shifts after click. The plugin used to set `iconMaximize.style.display = 'block'` directly, overriding the icon library's natural display value (visible on FontAwesome). Now toggles Bootstrap's `.d-none` utility class. Markup updated accordingly.
+- **#6020:** Sidebar (including brand) now stays put when using `.fixed-header`. New companion rule pins the sidebar sticky on `sidebar-expand-*` breakpoints, giving the menu its own scrollbar instead of scrolling with the page.
+- **#6019:** Pie chart on `index2.html` no longer flickers on browser zoom. Pinned an explicit `height: 350` to break the ApexCharts ResizeObserver feedback loop most visible on Edge.
+
+### Updated
+
+- **Bootstrap variable sync with 5.3.4:**
+  - Added missing null variables: `$btn-close-filter`, `$carousel-control-icon-filter`
+  - Marked deprecated-in-5.3.4 variables with inline comments: `$btn-close-white-filter`, `$carousel-dark-indicator-active-bg`, `$carousel-dark-caption-color`, `$carousel-dark-control-icon-filter`
+  - Documented the intentional override of `$modal-content-color` (null vs Bootstrap's `var(--bs-body-color)`)
+- **All dependencies bumped to latest, including majors:**
+  - eslint: 9.39.4 → 10.4.0
+  - typescript: 5.9.3 → 6.0.3 (`baseUrl` removed, `moduleResolution: "bundler"` set to clear deprecation warnings)
+  - stylelint: 16.26.1 → 17.11.1
+  - eslint-plugin-unicorn: 62 → 64
+  - astro: 6.0.0 → 6.3.3
+  - autoprefixer: 10.4.27 → 10.5.0
+  - postcss: 8.5.8 → 8.5.14
+  - rollup: 4.59.0 → 4.60.4
+  - sass: 1.97.3 → 1.99.0
+  - terser: 5.46.0 → 5.47.1
+  - bundlewatch: 0.4.1 → 0.4.2, fs-extra: 11.3.4 → 11.3.5, prettier: 3.8.1 → 3.8.3
+- **ESLint config flattened:** Removed the legacy `.eslintrc.json` (ignored since ESLint 9), along with three deps that only it referenced: `eslint-plugin-import`, `eslint-config-xo`, `eslint-config-xo-typescript`. Added explicit deps for `@eslint/js`, `globals`, and `typescript-eslint` (now required to be declared since ESLint 10 stopped resolving them transitively).
+- **`stylelint-config-twbs-bootstrap` peer pinned via npm overrides** so it accepts stylelint 17 ahead of an upstream release. This removes the need for `--legacy-peer-deps` on `npm install`.
+- **Security:** `yaml` pinned to `^2.9.0` via overrides to clear the dev-only stack-overflow advisory chain through `@astrojs/check`. `npm audit` now reports **0 vulnerabilities**.
+
 ## [4.0.0-rc7] - 2026-03-10
 
 ### Added

package/README.md

@@ -1,117 +1,222 @@
-# [AdminLTE - Bootstrap 5 Admin Dashboard](https://adminlte.io)
+# [AdminLTE — Bootstrap 5 Admin Dashboard](https://adminlte.io)
 
 [![npm version](https://img.shields.io/npm/v/admin-lte/latest.svg)](https://www.npmjs.com/package/admin-lte)
 [![Packagist](https://img.shields.io/packagist/v/almasaeed2010/adminlte.svg)](https://packagist.org/packages/almasaeed2010/adminlte)
 [![cdn version](https://data.jsdelivr.com/v1/package/npm/admin-lte/badge)](https://www.jsdelivr.com/package/npm/admin-lte)
+[![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](https://opensource.org/licenses/MIT)
 [![Discord Invite](https://img.shields.io/badge/discord-join%20now-green)](https://discord.gg/jfdvjwFqfz)
 [![Netlify Status](https://api.netlify.com/api/v1/badges/1277b36b-08f3-43fa-826a-4b4d24614b3c/deploy-status)](https://app.netlify.com/sites/adminlte-v4/deploys)
 
-**AdminLTE** is a fully responsive administration template. Based on **[Bootstrap 5](https://getbootstrap.com/)** framework and also the JavaScript plugins.
-Highly customizable and easy to use. Fits many screen resolutions from small mobile devices to large desktops.
+**AdminLTE** is the most popular open-source admin dashboard template — fully responsive,
+built on **[Bootstrap 5.3](https://getbootstrap.com/)** with vanilla JavaScript (no jQuery),
+highly customizable, and easy to use. It fits every screen from small mobile devices to
+large desktops, and it's MIT-licensed.
 
-## What's New in v4.0.0-rc7
+**[Live Demo](https://adminlte.io/themes/v4/)** ·
+**[Documentation](https://adminlte.io/themes/v4/docs/introduction.html)** ·
+**[Framework Editions](#framework-editions)** ·
+**[Premium Templates](#premium-templates)**
 
-**Bug Fixes, Refactors & Documentation** - Major plugin refactors, complete JS documentation, and new features:
-
-- **Layout & PushMenu Refactors** - Single-instance architecture, proper responsive logic, configurable via data attributes
-- **Sidebar Without Hover** - New `sidebar-without-hover` class to keep collapsed sidebar from expanding on hover
-- **Complete JS Documentation** - All 7 JavaScript components now fully documented
-- **Astro 6.0.0** - Upgraded to latest Astro with Vite 7 and Shiki 4
-- **Bug Fixes** - Fixed footer with layout-fixed, mobile scroll chaining, print layout, modal escape key, pagination borders
-
-**Key Improvements:**
-
-- Fixed footer now works correctly with `layout-fixed` (#5805)
-- Sidebar no longer causes page scroll chaining on mobile (#5864)
-- Print layout shows both sidebar and content (#5996)
-- Sidebar persistence is now opt-in via `data-enable-persistence="true"` (**breaking change**)
-- All dependencies updated to latest versions
-
-**Install the latest:**
-```bash
-npm install admin-lte@4.0.0-rc7
-```
+<p align="center">
+  <a href="https://adminlte.io/themes/v4/">
+    <img alt="AdminLTE 4 dashboard — light mode" src=".github/assets/dashboard-light.png" width="49%">
+  </a>
+  <a href="https://adminlte.io/themes/v4/">
+    <img alt="AdminLTE 4 dashboard — dark mode" src=".github/assets/dashboard-dark.png" width="49%">
+  </a>
+</p>
 
-See the [CHANGELOG.md](CHANGELOG.md) for complete details.
+## Framework editions
 
-## Looking for Premium Templates?
+The same AdminLTE 4 dashboard, officially integrated for the framework you know best —
+you're looking at the **HTML / Bootstrap** core:
 
-AdminLTE.io just opened a new premium templates page. Hand picked to ensure the best quality and the most affordable
-prices. Visit <https://adminlte.io/premium> for more information.
+<p align="center">
+  <a href="https://github.com/ColorlibHQ/adminlte-react"><img height="36" alt="React" src="https://img.shields.io/badge/React-20232A?style=for-the-badge&logo=react&logoColor=61DAFB"></a>
+  <a href="https://github.com/ColorlibHQ/adminlte-react"><img height="36" alt="Next.js" src="https://img.shields.io/badge/Next.js-000000?style=for-the-badge&logo=nextdotjs&logoColor=white"></a>
+  <a href="https://github.com/ColorlibHQ/adminlte-vue"><img height="36" alt="Vue" src="https://img.shields.io/badge/Vue.js-35495E?style=for-the-badge&logo=vuedotjs&logoColor=4FC08D"></a>
+  <a href="https://github.com/ColorlibHQ/adminlte-vue"><img height="36" alt="Nuxt" src="https://img.shields.io/badge/Nuxt-00DC82?style=for-the-badge&logo=nuxt&logoColor=white"></a>
+  <a href="https://github.com/ColorlibHQ/adminlte-laravel"><img height="36" alt="Laravel" src="https://img.shields.io/badge/Laravel-FF2D20?style=for-the-badge&logo=laravel&logoColor=white"></a>
+  <a href="https://github.com/ColorlibHQ/adminlte-django"><img height="36" alt="Django" src="https://img.shields.io/badge/Django-092E20?style=for-the-badge&logo=django&logoColor=white"></a>
+</p>
 
-!["AdminLTE Presentation"](https://adminlte.io/AdminLTE3.png "AdminLTE Presentation")
+| Edition | Repository | Live demo | Install |
+|---|---|---|---|
+| **HTML / Bootstrap** (this repo) | [AdminLTE](https://github.com/ColorlibHQ/AdminLTE) | [themes/v4](https://adminlte.io/themes/v4/) | `npm install admin-lte` |
+| **React & Next.js** — 30+ typed components, RSC-ready, ⌘K palette | [adminlte-react](https://github.com/ColorlibHQ/adminlte-react) | [themes/next-react](https://adminlte.io/themes/next-react/) | see repo |
+| **Vue 3 & Nuxt** — 45+ typed components, composables, SSR-safe theming | [adminlte-vue](https://github.com/ColorlibHQ/adminlte-vue) | [themes/vue-nuxt](https://adminlte.io/themes/vue-nuxt/) | see repo |
+| **Laravel** — Blade components, config-driven menu, auth scaffolding | [adminlte-laravel](https://github.com/ColorlibHQ/adminlte-laravel) | [laravel.adminlte.io](https://laravel.adminlte.io/) | `composer require colorlibhq/adminlte-laravel` |
+| **Django** — reusable app, menu filter pipeline, themed admin | [adminlte-django](https://github.com/ColorlibHQ/adminlte-django) | [django.adminlte.io](https://django.adminlte.io/) | `pip install django-adminlte4` |
 
-**AdminLTE** has been carefully coded with clear comments in all of its JS, SCSS and HTML files.
-SCSS has been used to increase code customizability.
+Every edition ships the full AdminLTE 4 design — Bootstrap 5.3, dark mode, RTL — with
+idiomatic integrations for its stack (components, routing, auth, theming).
 
 ## Quick start
 
-### Development
-
-To start developing with AdminLTE:
-
-1. **Install dependencies:** `npm install`
-2. **Start development server:** `npm start` *(opens browser at http://localhost:3000)*
-3. **Start coding!** Files auto-compile and refresh on changes
-
-### Production Build
-
-To build for production:
-
-1. **Full production build:** `npm run production` *(includes linting and optimization)*
-2. **Quick build:** `npm run build` *(faster for development/testing)*
+**CDN** — no build step:
 
-### Available Scripts
+```html
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/admin-lte@4/dist/css/adminlte.min.css">
+<script src="https://cdn.jsdelivr.net/npm/admin-lte@4/dist/js/adminlte.min.js"></script>
+```
 
-- `npm start` - Start development server with file watching
-- `npm run build` - Build all assets for development
-- `npm run production` - Full production build with linting and bundlewatch
-- `npm run lint` - Run all linters (JS, CSS, docs, lockfile)
-- `npm run css` - Build CSS only
-- `npm run js` - Build JavaScript only
+**npm:**
 
-## Browser Support
+```bash
+npm install admin-lte@4
+```
 
-AdminLTE supports all modern browsers with the latest Bootstrap 5.3.8:
-- Chrome (latest)
-- Firefox (latest)
-- Safari (latest)
-- Edge (latest)
+**Composer:**
 
-## Platform Support
+```bash
+composer require almasaeed2010/adminlte
+```
 
-AdminLTE v4 build scripts work cross-platform:
-- **Windows** - Command Prompt, PowerShell, Git Bash
-- **macOS** - Terminal, iTerm2
-- **Linux** - Bash, Zsh, and other Unix shells
+Then start from the [Getting Started guide](https://adminlte.io/themes/v4/docs/introduction.html)
+or copy one of the demo pages.
 
-All npm scripts use cross-platform utilities to ensure consistent behavior across different operating systems.
+### Developing AdminLTE itself
 
-## Security & Production Deployment
+1. **Install dependencies:** `npm install`
+2. **Start the dev server:** `npm start` *(opens http://localhost:3000 with live reload)*
+3. **Build:** `npm run build` — or `npm run production` for the full lint + optimize + bundlewatch pipeline
+
+<details>
+<summary>All npm scripts</summary>
+
+- `npm start` — development server with file watching
+- `npm run build` — build all assets for development
+- `npm run production` — full production build with linting and bundlewatch
+- `npm run lint` — run all linters (JS, CSS, docs, lockfile)
+- `npm run css` — build CSS only
+- `npm run js` — build JavaScript only
+
+</details>
+
+## What's new in v4
+
+The v4 line is a ground-up rewrite on Bootstrap 5.3 with **no jQuery**: 18 new demo pages
+(Calendar, Kanban, Chat, File Manager, Mailbox, Wizard, Tabulator data tables, and more),
+a documentation overhaul, and major dependency upgrades. See the
+[CHANGELOG](CHANGELOG.md) for full details.
+
+<details>
+<summary>Highlights</summary>
+
+**18 new demo pages**
+
+- Apps: Calendar (FullCalendar), Kanban (SortableJS), Chat, File Manager, Projects, Mailbox (Inbox / Read / Compose)
+- Forms: Wizard (4-step with validation)
+- Tables: Data Tables (Tabulator — jQuery-free)
+- Pages: Profile, Settings, Invoice, Pricing, FAQ
+- Errors: 404, 500, Maintenance
+
+**Documentation overhaul**
+
+- New pages: Getting Started, Customization & Theming, RTL Support, Migration from v3, Layout Blueprint, Recipes, Deployment & Performance, Recommended Integrations, JavaScript Plugins Overview
+- Rewritten Introduction with four labelled install paths (CDN / npm / source / Composer)
+- FAQ rebuilt with hero, live search, section chips, and an accordion of 19 questions
+- Split sidebar navigation: dashboard demo and docs each have their own nav
+
+**Major dependency upgrades**
+
+- ESLint 10, TypeScript 6, Stylelint 17, Astro 6.3, Bootstrap 5.3.8, Node 22 LTS in CI
+- `npm install` runs clean with **0 vulnerabilities**
+
+</details>
+
+<details>
+<summary>Breaking changes from v3</summary>
+
+- Class renames: `.wrapper` → `.app-wrapper`, `.main-header` → `.app-header`, `.main-sidebar` → `.app-sidebar`, `.content-wrapper` → `.app-main`
+- Data attributes: `data-toggle` → `data-bs-toggle`, `data-widget="pushmenu"` → `data-lte-toggle="sidebar"`, `data-widget="treeview"` → `data-lte-toggle="treeview"`
+- Dark mode: `.dark-mode` body class → `data-bs-theme="dark"` attribute (Bootstrap 5.3 native)
+- jQuery no longer required; plugins are vanilla TypeScript
+
+See the dedicated [Migration from v3](https://adminlte.io/themes/v4/docs/migration.html) guide.
+
+</details>
+
+## Premium templates
+
+AdminLTE will always be free and open source. When a project needs more —
+app-ready pages, framework-native codebases, dedicated support — our team
+hand-picks premium dashboards at **[adminlte.io/premium](https://adminlte.io/premium)**,
+including editions built for the same stacks AdminLTE integrates with:
+
+<table>
+  <tr>
+    <td align="center" width="50%">
+      <a href="https://dashboardpack.com/theme-details/admindek-html/?utm_source=github&utm_medium=readme&utm_campaign=adminlte">
+        <img src=".github/assets/premium/admindek.png" alt="Admindek — feature-rich Bootstrap 5 dashboard with dark mode" width="100%">
+      </a>
+      <br>
+      <a href="https://dashboardpack.com/theme-details/admindek-html/?utm_source=github&utm_medium=readme&utm_campaign=adminlte"><strong>Admindek</strong></a>
+      <br>
+      <sub>The natural next step from AdminLTE: Bootstrap 5 + vanilla JS, 100+ components, dark/light modes, RTL, 10 color presets.<br>
+      Also for <a href="https://dashboardpack.com/theme-details/admindek-dashboard-laravel/?utm_source=github&utm_medium=readme&utm_campaign=adminlte">Laravel</a> ·
+      <a href="https://dashboardpack.com/theme-details/admindek-nextjs/?utm_source=github&utm_medium=readme&utm_campaign=adminlte">Next.js</a> ·
+      <a href="https://dashboardpack.com/theme-details/admindek-dashboard-angular/?utm_source=github&utm_medium=readme&utm_campaign=adminlte">Angular</a></sub>
+    </td>
+    <td align="center" width="50%">
+      <a href="https://dashboardpack.com/theme-details/apex-dashboard-nextjs/?utm_source=github&utm_medium=readme&utm_campaign=adminlte">
+        <img src=".github/assets/premium/apex.png" alt="Apex Dashboard — admin template available for Next.js, Laravel, Django and Angular" width="100%">
+      </a>
+      <br>
+      <a href="https://dashboardpack.com/theme-details/apex-dashboard-nextjs/?utm_source=github&utm_medium=readme&utm_campaign=adminlte"><strong>Apex Dashboard</strong></a>
+      <br>
+      <sub>5 dashboard variants, 20+ app pages, 125+ routes, full CRUD — in your backend's native stack.<br>
+      For <a href="https://dashboardpack.com/theme-details/apex-dashboard-nextjs/?utm_source=github&utm_medium=readme&utm_campaign=adminlte">Next.js</a> ·
+      <a href="https://dashboardpack.com/theme-details/apex-dashboard-laravel/?utm_source=github&utm_medium=readme&utm_campaign=adminlte">Laravel</a> ·
+      <a href="https://dashboardpack.com/theme-details/apex-dashboard-django/?utm_source=github&utm_medium=readme&utm_campaign=adminlte">Django</a> ·
+      <a href="https://dashboardpack.com/theme-details/apex-dashboard-angular/?utm_source=github&utm_medium=readme&utm_campaign=adminlte">Angular</a></sub>
+    </td>
+  </tr>
+  <tr>
+    <td align="center" width="50%">
+      <a href="https://dashboardpack.com/theme-details/zenith-dashboard-django/?utm_source=github&utm_medium=readme&utm_campaign=adminlte">
+        <img src=".github/assets/premium/zenith.png" alt="Zenith — ultra-minimal admin dashboard, Django edition" width="100%">
+      </a>
+      <br>
+      <a href="https://dashboardpack.com/theme-details/zenith-dashboard-django/?utm_source=github&utm_medium=readme&utm_campaign=adminlte"><strong>Zenith Dashboard — Django</strong></a>
+      <br>
+      <sub>Achromatic, ultra-minimal design as a ready-to-run Django project: 50+ pages, 6 dashboards, live theme customizer.</sub>
+    </td>
+    <td align="center" width="50%">
+      <a href="https://dashboardpack.com/theme-details/haze-dashboard-nuxt/?utm_source=github&utm_medium=readme&utm_campaign=adminlte">
+        <img src=".github/assets/premium/haze.png" alt="Haze — Nuxt 4 admin dashboard with 92+ pages and 5 dashboards" width="100%">
+      </a>
+      <br>
+      <a href="https://dashboardpack.com/theme-details/haze-dashboard-nuxt/?utm_source=github&utm_medium=readme&utm_campaign=adminlte"><strong>Haze — Nuxt</strong></a>
+      <br>
+      <sub>Nuxt 4 + Nuxt UI v4 + Tailwind CSS v4. 92+ pages, 7 layouts, 5 dashboards, RTL, i18n, mock API layer.</sub>
+    </td>
+  </tr>
+</table>
 
-### Important Security Notice
+<p align="center">
+  <a href="https://adminlte.io/premium"><strong>View all premium templates →</strong></a>
+</p>
 
-AdminLTE is a **UI template** - when deploying to production, follow these critical guidelines:
+## Browser & platform support
 
-**What to Deploy:**
-- Only compiled production assets: `dist/js/adminlte.min.js` and `dist/css/adminlte.min.css`
-- Your application-specific files
+AdminLTE supports the latest versions of all modern browsers (Chrome, Firefox, Safari,
+Edge) via Bootstrap 5.3.8. The build scripts run cross-platform — Windows (CMD,
+PowerShell, Git Bash), macOS and Linux — using cross-platform npm utilities throughout.
 
-**What NOT to Deploy:**
-- `node_modules/` directory
-- Demo/example HTML files (index.html, index2.html, index3.html, etc.)
-- Source files (`src/` directory)
-- Development configuration files
+## Security & production deployment
 
-**CVE-2021-36471 Notice:**
-This CVE is **disputed** and does not represent a vulnerability in AdminLTE. It refers to demo pages being accessible when developers incorrectly deploy example files to production. AdminLTE v4 has a clear separation between development demos and production assets. See [SECURITY.md](SECURITY.md) for complete details.
+AdminLTE is a **UI template**. Deploy only the compiled production assets
+(`dist/js/adminlte.min.js`, `dist/css/adminlte.min.css`) and your own application files —
+never `node_modules/`, the demo HTML pages, or the `src/` directory.
 
-**Production Build:**
-```bash
-npm run production  # Builds optimized assets in dist/
-```
+> **About CVE-2021-36471:** this CVE is **disputed** and does not represent a
+> vulnerability in AdminLTE — it refers to demo pages being accessible when example
+> files are incorrectly deployed to production. AdminLTE v4 cleanly separates
+> development demos from production assets.
 
-For detailed security guidelines, authentication requirements, and best practices, see [SECURITY.md](SECURITY.md).
+For detailed guidelines, authentication requirements, and best practices, see
+[SECURITY.md](SECURITY.md).
 
 ## Sponsorship
 
@@ -127,7 +232,7 @@ Support AdminLTE development by becoming a sponsor or donor.
   </a>
 </p>
 
-## Our Sponsors
+### Our sponsors
 
 <p align="center">
   <a href="https://github.com/spizzo14"><img src="https://unavatar.io/github/spizzo14?fallback=https%3A%2F%2Fraw.githubusercontent.com%2FJamesIves%2Fgithub-sponsors-readme-action%2Fdev%2F.github%2Fassets%2Fplaceholder.png" width="50" height="50" alt="User avatar: spizzo14" loading="lazy" /></a>&nbsp;&nbsp;
@@ -145,28 +250,23 @@ Support AdminLTE development by becoming a sponsor or donor.
 
 ## Contributing
 
-- Highly welcome.
-- For your extra reference check [AdminLTE v4 Contribution Guide](https://github.com/ColorlibHQ/AdminLTE#contributing)
-- First thing first, you should have bit knowledge about NodeJS.
-- Github Knowledge.
-- Install NodeJS LTS version.
-- Clone this Repository to your machine and change to `master` branch.
-- Go to Cloned Folder.
-- In cli/bash run `npm install` it will install dependency from `package.json`.
-- After installation completes, run `npm start`
-- Cool, Send your changes in PR to `master` branch.
+Contributions are highly welcome:
 
+1. Install [Node.js](https://nodejs.org/) (LTS) and clone this repository (`master` branch).
+2. `npm install`, then `npm start` to run the dev server.
+3. Make your changes (run `npm run lint` before committing) and open a PR against `master`.
 
 ## License
 
-AdminLTE is an open source project by [AdminLTE.io](https://adminlte.io) that is licensed under [MIT](https://opensource.org/licenses/MIT).
-AdminLTE.io reserves the right to change the license of future releases.
+AdminLTE is an open source project by [AdminLTE.io](https://adminlte.io) licensed under
+[MIT](https://opensource.org/licenses/MIT). AdminLTE.io reserves the right to change
+the license of future releases.
 
-## Image Credits
+## Image credits
 
-- [Pixeden](http://www.pixeden.com/psd-web-elements/flat-responsive-showcase-psd)
-- [Graphicsfuel](https://www.graphicsfuel.com/2013/02/13-high-resolution-blur-backgrounds/)
-- [Pickaface](https://pickaface.net/)
-- [Unsplash](https://unsplash.com/)
-- [Uifaces](http://uifaces.com/)
-- [Unavatar](https://unavatar.io/)
+[Pixeden](http://www.pixeden.com/psd-web-elements/flat-responsive-showcase-psd),
+[Graphicsfuel](https://www.graphicsfuel.com/2013/02/13-high-resolution-blur-backgrounds/),
+[Pickaface](https://pickaface.net/),
+[Unsplash](https://unsplash.com/),
+[Uifaces](http://uifaces.com/),
+[Unavatar](https://unavatar.io/)