fds-vue-core 6.0.11 → 6.0.13

package/package.json

@@ -1,8 +1,11 @@
 {
   "name": "fds-vue-core",
-  "version": "6.0.11",
+  "version": "6.0.13",
   "description": "FDS Vue Core Component Library",
   "type": "module",
+  "bin": {
+    "fds-vuln-commit": "./scripts/vuln-commit.mjs"
+  },
   "main": "./dist/fds-vue-core.cjs.js",
   "module": "./dist/fds-vue-core.es.js",
   "types": "./components.d.ts",
@@ -24,7 +27,8 @@
     "./tsconfig.base.json": "./configs/tsconfig.base.json",
     "./eslint.config.base.js": "./configs/eslint.config.base.js",
     "./prettier.config.js": "./configs/prettier.config.js",
-    "./vscode-settings.json": "./configs/vscode-settings.json"
+    "./vscode-settings.json": "./configs/vscode-settings.json",
+    "./vuln-commit": "./scripts/vuln-commit.mjs"
   },
   "files": [
     "dist",
@@ -45,11 +49,31 @@
   "engines": {
     "node": "^20.19.0 || >=22.12.0"
   },
+  "scripts": {
+    "serve": "vite",
+    "build": "vite build && npm run build:types && cp ./src/tokens.css ./dist/tokens.css && cp ./src/slot-styles.css ./dist/slot-styles.css && cp ./src/apply.css ./dist/apply.css && cp ./src/fonts.css ./dist/fonts.css && cp -r ./public/assets ./dist/assets && mkdir -p ./dist/assets/img/logos && cp -r ./src/assets/img/logos/* ./dist/assets/img/logos/",
+    "build:types": "vue-tsc --project tsconfig.build.json",
+    "preview": "vite preview",
+    "lint": "eslint . --fix",
+    "lint:ts": "vue-tsc --noEmit --project tsconfig.app.json && vue-tsc --noEmit --project tsconfig.node.json",
+    "lint:all": "pnpm lint && pnpm lint:ts",
+    "format": "prettier --write src/",
+    "prepublishOnly": "npm run build",
+    "storybook": "STORYBOOK=true storybook dev -p 6006",
+    "build-storybook": "STORYBOOK=true storybook build",
+    "sync:peers": "node scripts/sync-peers-from-dev.mjs",
+    "postinstall": "test -f scripts/sync-peers-from-dev.mjs && node scripts/sync-peers-from-dev.mjs || true",
+    "yalc:publish": "npm run build && yalc publish",
+    "yalc:push": "npm run build && yalc push",
+    "serve:playground": "pnpm --dir playground-consumer dev",
+    "create:release": "bash ./scripts/release.sh",
+    "vuln-commit": "node scripts/vuln-commit.mjs"
+  },
   "peerDependencies": {
     "vue": "^3.5.25"
   },
   "dependencies": {
-    "axios": "^1.13.6",
+    "axios": "1.15.0",
     "imask": "^7.6.1",
     "tailwindcss": "^4.1.18"
   },
@@ -95,22 +119,18 @@
       "src/apply.css"
     ]
   },
-  "scripts": {
-    "serve": "vite",
-    "build": "vite build && npm run build:types && cp ./src/tokens.css ./dist/tokens.css && cp ./src/slot-styles.css ./dist/slot-styles.css && cp ./src/apply.css ./dist/apply.css && cp ./src/fonts.css ./dist/fonts.css && cp -r ./public/assets ./dist/assets && mkdir -p ./dist/assets/img/logos && cp -r ./src/assets/img/logos/* ./dist/assets/img/logos/",
-    "build:types": "vue-tsc --project tsconfig.build.json",
-    "preview": "vite preview",
-    "lint": "eslint . --fix",
-    "lint:ts": "vue-tsc --noEmit --project tsconfig.app.json && vue-tsc --noEmit --project tsconfig.node.json",
-    "lint:all": "pnpm lint && pnpm lint:ts",
-    "format": "prettier --write src/",
-    "storybook": "STORYBOOK=true storybook dev -p 6006",
-    "build-storybook": "STORYBOOK=true storybook build",
-    "sync:peers": "node scripts/sync-peers-from-dev.mjs",
-    "postinstall": "test -f scripts/sync-peers-from-dev.mjs && node scripts/sync-peers-from-dev.mjs || true",
-    "yalc:publish": "npm run build && yalc publish",
-    "yalc:push": "npm run build && yalc push",
-    "serve:playground": "pnpm --dir playground-consumer dev",
-    "create:release": "bash ./scripts/release.sh"
-  }
-}
+  "pnpm": {
+    "overrides": {
+      "minimatch": "^10.2.3",
+      "flatted": "^3.4.2",
+      "lodash": ">=4.18.0"
+    },
+    "onlyBuiltDependencies": [
+      "@parcel/watcher",
+      "core-js-pure",
+      "esbuild",
+      "vue-demi"
+    ]
+  },
+  "packageManager": "pnpm@10.17.1"
+}

package/scripts/vuln-commit.mjs

@@ -0,0 +1,129 @@
+#!/usr/bin/env node
+
+import { execSync } from "node:child_process";
+
+function run(command) {
+  try {
+    return execSync(command, { encoding: "utf8" }).trim();
+  } catch {
+    return "";
+  }
+}
+
+function runOrThrow(command) {
+  return execSync(command, { encoding: "utf8", stdio: "inherit" });
+}
+
+function out(text = "") {
+  process.stdout.write(`${text}\n`);
+}
+
+function parseJsonAtRef(refPath) {
+  const raw = run(`git show ${refPath}`);
+  if (!raw) return null;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+
+function readStagedFile(path) {
+  return parseJsonAtRef(`:${path}`);
+}
+
+function readHeadFile(path) {
+  return parseJsonAtRef(`HEAD:${path}`);
+}
+
+function collectDeps(pkgJson) {
+  if (!pkgJson) return {};
+  return {
+    ...(pkgJson.dependencies || {}),
+    ...(pkgJson.devDependencies || {}),
+    ...(pkgJson.peerDependencies || {}),
+    ...(pkgJson.optionalDependencies || {}),
+    ...(pkgJson.overrides || {}),
+    ...((pkgJson.pnpm && pkgJson.pnpm.overrides) || {}),
+  };
+}
+
+function normalize(version) {
+  if (typeof version !== "string") return version;
+  return version.trim();
+}
+
+function semverFrom(value) {
+  if (typeof value !== "string") return null;
+  const match = value.match(/(\d+\.\d+\.\d+)/);
+  return match ? match[1] : null;
+}
+
+function main() {
+  const stagedFiles = run("git diff --cached --name-only")
+    .split("\n")
+    .map((s) => s.trim())
+    .filter(Boolean);
+
+  const packageJsonPaths = stagedFiles.filter((p) => p.endsWith("package.json"));
+  if (packageJsonPaths.length === 0) {
+    out("No staged package.json changes found.");
+    process.exit(0);
+  }
+
+  const updates = [];
+
+  for (const path of packageJsonPaths) {
+    const stagedPkg = readStagedFile(path);
+    const headPkg = readHeadFile(path) || {};
+    if (!stagedPkg) continue;
+
+    const before = collectDeps(headPkg);
+    const after = collectDeps(stagedPkg);
+    const keys = new Set([...Object.keys(before), ...Object.keys(after)]);
+
+    for (const name of keys) {
+      const oldV = normalize(before[name]);
+      const newV = normalize(after[name]);
+      if (oldV && newV && oldV !== newV) {
+        updates.push({ name, from: oldV, to: newV, path });
+      }
+    }
+  }
+
+  if (updates.length === 0) {
+    out("No staged dependency version changes found in package.json.");
+    process.exit(0);
+  }
+
+  out("Detected staged dependency updates:\n");
+  for (const u of updates) {
+    out(`- ${u.name}: ${u.from} -> ${u.to} (${u.path})`);
+  }
+
+  const commitMessage =
+    updates.length === 1
+      ? `vuln(${updates[0].name}@${semverFrom(updates[0].from) || updates[0].from}): bump to ${semverFrom(updates[0].to) || updates[0].to}`
+      : "vuln(): updated dependencies";
+  const commitBody =
+    updates.length > 1
+      ? `updated dependencies\n${updates.map((u) => `- ${u.name}: ${u.from} -> ${u.to}`).join("\n")}`
+      : "";
+
+  const hasStagedChanges = run("git diff --cached --name-only");
+  if (!hasStagedChanges) {
+    out("\nNo staged changes to commit.");
+    process.exit(1);
+  }
+
+  const escapedMessage = commitMessage.replace(/"/g, '\\"');
+  const escapedBody = commitBody.replace(/"/g, '\\"');
+  const commitCommand = commitBody
+    ? `git commit -m "${escapedMessage}" -m "${escapedBody}"`
+    : `git commit -m "${escapedMessage}"`;
+
+  out(`\nCreating commit:\n${commitMessage}\n`);
+  runOrThrow(commitCommand);
+}
+
+main();

package/src/apply.css

@@ -39,7 +39,7 @@
   }
   .link,
   .html a {
-    @apply text-blue-600 hover:text-blue-700 active:text-blue-800 underline focus-visible:outline-dashed focus-visible:outline-2 focus-visible:outline-offset-4 focus-visible:outline-blue-500;
+    @apply text-blue-600 hover:text-blue-700 active:text-blue-800 underline focus-visible:outline-dashed focus-visible:outline-2 focus-visible:outline-offset-4 focus-visible:outline-blue-500 cursor-pointer;
   }
 
   .link--with-parens::before {

package/src/style.css

@@ -49,7 +49,7 @@
   }
   .link,
   .html a {
-    @apply text-blue-600 hover:text-blue-700 active:text-blue-800 underline focus-visible:outline-dashed focus-visible:outline-2 focus-visible:outline-offset-4 focus-visible:outline-blue-500;
+    @apply text-blue-600 hover:text-blue-700 active:text-blue-800 underline focus-visible:outline-dashed focus-visible:outline-2 focus-visible:outline-offset-4 focus-visible:outline-blue-500 cursor-pointer;
   }
 
   .capitalize-first::first-letter {