nicegui 3.3.0__tar.gz → 3.4.0__tar.gz

{nicegui-3.3.0 → nicegui-3.4.0}/PKG-INFO

@@ -1,14 +1,13 @@
 Metadata-Version: 2.4
 Name: nicegui
-Version: 3.3.0
+Version: 3.4.0
 Summary: Create web-based user interfaces with Python. The nice way.
-License: MIT
+License-Expression: MIT
 License-File: LICENSE
 Keywords: gui,ui,web,interface,live
 Author: Zauberzeug GmbH
 Author-email: info@zauberzeug.com
-Requires-Python: >=3.9,<4.0
-Classifier: License :: OSI Approved :: MIT License
+Requires-Python: >=3.9,<4
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
@@ -21,28 +20,27 @@ Provides-Extra: matplotlib
 Provides-Extra: native
 Provides-Extra: plotly
 Provides-Extra: redis
-Provides-Extra: sass
 Requires-Dist: Pygments (>=2.15.1,<3.0.0)
 Requires-Dist: aiofiles (>=23.1.0)
 Requires-Dist: aiohttp (>=3.10.2)
 Requires-Dist: certifi (>=2024.07.04)
 Requires-Dist: docutils (>=0.19.0)
-Requires-Dist: fastapi (>=0.109.1)
+Requires-Dist: fastapi (>=0.109.1,!=0.123.5)
 Requires-Dist: h11 (>=0.16.0)
 Requires-Dist: httpx (>=0.24.0)
 Requires-Dist: ifaddr (>=0.2.0)
-Requires-Dist: itsdangerous (>=2.1.2,<3.0.0)
-Requires-Dist: jinja2 (>=3.1.6,<4.0.0)
-Requires-Dist: libsass (>=0.23.0,<0.24.0) ; extra == "sass"
+Requires-Dist: itsdangerous (>=2.1.2,<3)
+Requires-Dist: jinja2 (>=3.1.6,<4)
 Requires-Dist: markdown2 (>=2.4.7,!=2.4.11)
-Requires-Dist: matplotlib (>=3.5.0,<4.0.0) ; extra == "matplotlib"
-Requires-Dist: nicegui-highcharts (>=2.0.2,<3.0.0) ; extra == "highcharts"
-Requires-Dist: orjson (>=3.9.15) ; platform_machine != "i386" and platform_machine != "i686"
+Requires-Dist: matplotlib (>=3.5.0,<4) ; extra == "matplotlib"
+Requires-Dist: nicegui-highcharts (>=2.0.2,<3) ; extra == "highcharts"
+Requires-Dist: orjson (>=3.9.15) ; platform_machine != "i386" and platform_machine != "i686" and platform_python_implementation != "PyPy"
 Requires-Dist: plotly (>=5.13,<7.0) ; extra == "plotly"
+Requires-Dist: pydantic-core (>=2.35.0)
 Requires-Dist: python-engineio (>=4.12.0)
 Requires-Dist: python-multipart (>=0.0.18)
 Requires-Dist: python-socketio[asyncio-client] (>=5.14.0)
-Requires-Dist: pywebview (>=5.0.1,<6.0.0) ; extra == "native"
+Requires-Dist: pywebview (>=5.0.1,<7) ; extra == "native"
 Requires-Dist: redis (>=4.0.0) ; extra == "redis"
 Requires-Dist: starlette (>=0.49.1)
 Requires-Dist: typing-extensions (>=4.0.0)

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/app/app.py

@@ -274,8 +274,9 @@ class App(FastAPI):
         """
         @self.get(url_path.rstrip('/') + '/{filename:path}')  # NOTE: prevent double slashes in route pattern
         def read_item(request: Request, filename: str, nicegui_chunk_size: int = 8192) -> Response:
-            filepath = Path(local_directory) / filename
-            if not filepath.is_file():
+            local_dir = Path(local_directory).resolve()
+            filepath = (local_dir / filename).resolve()
+            if not filepath.is_relative_to(local_dir) or not filepath.is_file():
                 raise HTTPException(status_code=404, detail='Not Found')
             return get_range_response(filepath, request, chunk_size=nicegui_chunk_size)
 

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/app/app_config.py

@@ -35,7 +35,7 @@ class AppConfig:
     favicon: Optional[Union[str, Path]] = field(init=False)
     dark: Optional[bool] = field(init=False)
     language: Language = field(init=False)
-    binding_refresh_interval: float = field(init=False)
+    binding_refresh_interval: Optional[float] = field(init=False)
     reconnect_timeout: float = field(init=False)
     message_history_length: int = field(init=False)
     cache_control_directives: str = field(init=False)
@@ -52,7 +52,7 @@ class AppConfig:
                        favicon: Optional[Union[str, Path]],
                        dark: Optional[bool],
                        language: Language,
-                       binding_refresh_interval: float,
+                       binding_refresh_interval: Optional[float],
                        reconnect_timeout: float,
                        message_history_length: int,
                        cache_control_directives: str = 'public, max-age=31536000, immutable, stale-while-revalidate=31536000',

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/binding.py

@@ -25,6 +25,7 @@ propagation_visited: ContextVar[set[tuple[int, str]] | None] = ContextVar('propa
 bindings: defaultdict[tuple[int, str], list[tuple[Any, Any, str, Callable[[Any], Any] | None]]] = defaultdict(list)
 bindable_properties: weakref.WeakValueDictionary[tuple[int, str], Any] = weakref.WeakValueDictionary()
 active_links: list[tuple[Any, str, Any, str, Callable[[Any], Any] | None]] = []
+_active_links_added = asyncio.Event()
 
 TC = TypeVar('TC', bound=type)
 T = TypeVar('T')
@@ -51,6 +52,12 @@ def _set_attribute(obj: object | Mapping, name: str, value: Any) -> None:
 
 async def refresh_loop() -> None:
     """Refresh all bindings in an endless loop."""
+    global _active_links_added  # pylint: disable=global-statement # noqa: PLW0603
+    _active_links_added = asyncio.Event()
+    await _active_links_added.wait()
+    if core.app.config.binding_refresh_interval is None:
+        core.app.config.binding_refresh_interval = 0.1
+        log.warning('Starting active binding loop even though it was disabled via binding_refresh_interval=None.')
     while True:
         _refresh_step()
         try:
@@ -148,6 +155,7 @@ def bind_to(self_obj: Any, self_name: str, other_obj: Any, other_name: str,
     bindings[(id(self_obj), self_name)].append((self_obj, other_obj, other_name, forward))
     if (id(self_obj), self_name) not in bindable_properties:
         active_links.append((self_obj, self_name, other_obj, other_name, forward))
+        _active_links_added.set()
     _propagate(self_obj, self_name)
 
 
@@ -173,6 +181,7 @@ def bind_from(self_obj: Any, self_name: str, other_obj: Any, other_name: str,
     bindings[(id(other_obj), other_name)].append((other_obj, self_obj, self_name, backward))
     if (id(other_obj), other_name) not in bindable_properties:
         active_links.append((other_obj, other_name, self_obj, self_name, backward))
+        _active_links_added.set()
     _propagate(other_obj, other_name)
 
 

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/client.py

@@ -40,6 +40,8 @@ HTML_ESCAPE_TABLE = str.maketrans({
     '$': '$',
 })
 
+HEADWIND_CONTENT = (Path(__file__).parent / 'static' / 'headwind.css').read_text().strip()
+
 
 class ClientConnectionTimeout(TimeoutError):
     def __init__(self, client: Client) -> None:
@@ -179,6 +181,7 @@ class Client:
                 'translations': translations.get(self.page.resolve_language(), translations['en-US']),
                 'prefix': prefix,
                 'tailwind': core.app.config.tailwind,
+                'headwind_css': HEADWIND_CONTENT if core.app.config.tailwind else '',
                 'prod_js': core.app.config.prod_js,
                 'socket_io_js_query_params': socket_io_js_query_params,
                 'socket_io_js_extra_headers': core.app.config.socket_io_js_extra_headers,

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/dependencies.py

@@ -168,6 +168,8 @@ def generate_resources(prefix: str, elements: Iterable[Element]) -> tuple[list[s
     vue_styles: list[str] = []
     imports: dict[str, str] = {
         'vue': f'{prefix}/_nicegui/{__version__}/static/vue.esm-browser{".prod" if core.app.config.prod_js else ""}.js',
+        'sass': f'{prefix}/_nicegui/{__version__}/static/sass.default.js',
+        'immutable': f'{prefix}/_nicegui/{__version__}/static/immutable.es.js',
     }
     js_imports: list[str] = []
     js_imports_urls: list[str] = []
@@ -191,6 +193,7 @@ def generate_resources(prefix: str, elements: Iterable[Element]) -> tuple[list[s
             js_imports.append(f'import {{ default as {vue_component.name} }} from "{url}";')
             js_imports.append(f"{vue_component.name}.template = '#tpl-{vue_component.name}';")
             js_imports.append(f'app.component("{vue_component.tag}", {vue_component.name});')
+            js_imports_urls.append(url)
             vue_styles.append(vue_component.style)
             done_components.add(key)
 

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/element.py

@@ -334,8 +334,7 @@ class Element(Visibility):
         :param text: text of the tooltip
         """
         from .elements.tooltip import Tooltip  # pylint: disable=import-outside-toplevel, cyclic-import
-        with self:
-            Tooltip(text)
+        Tooltip(text).props['target'] = f'#{self.html_id}'
         return self
 
     def on(self,
@@ -450,12 +449,13 @@ class Element(Visibility):
         for child in self:
             yield from child.descendants(include_self=True)
 
-    def clear(self) -> None:
+    def clear(self) -> Self:
         """Remove all child elements."""
         self.client.remove_elements(self.descendants())
         for slot in self.slots.values():
             slot.children.clear()
         self.update()
+        return self
 
     def move(self,
              target_container: Element | None = None,

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/element_filter.py

@@ -74,7 +74,7 @@ class ElementFilter(Generic[T]):
 
         :param kind: filter by element type; the iterator will be of type ``kind``
         :param marker: filter by element markers; can be a list of strings or a single string where markers are separated by whitespace
-        :param content: filter for elements which contain ``content`` in one of their content attributes like ``.text``, ``.value``, ``.source``, ...; can be a singe string or a list of strings which all must match
+        :param content: filter for elements which contain ``content`` in one of their content attributes like ``.text``, ``.value``, ``.source``, ...; can be a single string or a list of strings which all must match
         :param local_scope: if `True`, only elements within the current scope are returned; by default the whole page is searched (this default behavior can be changed with ``ElementFilter.DEFAULT_LOCAL_SCOPE = True``)
         """
         self._kind = kind

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/elements/aggrid/package-lock.json

@@ -678,15 +678,15 @@
       }
     },
     "node_modules/glob": {
-      "version": "11.0.3",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-11.0.3.tgz",
-      "integrity": "sha512-2Nim7dha1KVkaiF4q6Dj+ngPPMdfvLJEOpZk/jKiUAkqKebpGAWQXAq9z1xu9HKu5lWfqw/FASuccEjyznjPaA==",
+      "version": "11.1.0",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-11.1.0.tgz",
+      "integrity": "sha512-vuNwKSaKiqm7g0THUBu2x7ckSs3XJLXE+2ssL7/MfTGPLLcrJQ/4Uq1CjPTtO5cCIiRxqvN6Twy1qOwhL0Xjcw==",
       "dev": true,
-      "license": "ISC",
+      "license": "BlueOak-1.0.0",
       "dependencies": {
         "foreground-child": "^3.3.1",
         "jackspeak": "^4.1.1",
-        "minimatch": "^10.0.3",
+        "minimatch": "^10.1.1",
         "minipass": "^7.1.2",
         "package-json-from-dist": "^1.0.0",
         "path-scurry": "^2.0.0"
@@ -781,11 +781,11 @@
       }
     },
     "node_modules/minimatch": {
-      "version": "10.0.3",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.0.3.tgz",
-      "integrity": "sha512-IPZ167aShDZZUMdRk66cyQAW3qr0WzbHkPdMYa8bzZhlHhO3jALbKdxcaak7W9FfT2rZNpQuUu4Od7ILEpXSaw==",
+      "version": "10.1.1",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.1.1.tgz",
+      "integrity": "sha512-enIvLvRAFZYXJzkCYG5RKmPfrFArdLv+R+lbQ53BmIMLIry74bjKzX6iHAm8WYamJkhSSEabrWN5D97XnKObjQ==",
       "dev": true,
-      "license": "ISC",
+      "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/brace-expansion": "^5.0.0"
       },
@@ -898,7 +898,7 @@
       "dev": true,
       "license": "ISC",
       "dependencies": {
-        "glob": "^11.0.0",
+        "glob": "^11.1.0",
         "package-json-from-dist": "^1.0.0"
       },
       "bin": {

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/elements/codemirror/package-lock.json

@@ -1759,15 +1759,15 @@
       }
     },
     "node_modules/glob": {
-      "version": "11.0.3",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-11.0.3.tgz",
-      "integrity": "sha512-2Nim7dha1KVkaiF4q6Dj+ngPPMdfvLJEOpZk/jKiUAkqKebpGAWQXAq9z1xu9HKu5lWfqw/FASuccEjyznjPaA==",
+      "version": "11.1.0",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-11.1.0.tgz",
+      "integrity": "sha512-vuNwKSaKiqm7g0THUBu2x7ckSs3XJLXE+2ssL7/MfTGPLLcrJQ/4Uq1CjPTtO5cCIiRxqvN6Twy1qOwhL0Xjcw==",
       "dev": true,
-      "license": "ISC",
+      "license": "BlueOak-1.0.0",
       "dependencies": {
         "foreground-child": "^3.3.1",
         "jackspeak": "^4.1.1",
-        "minimatch": "^10.0.3",
+        "minimatch": "^10.1.1",
         "minipass": "^7.1.2",
         "package-json-from-dist": "^1.0.0",
         "path-scurry": "^2.0.0"
@@ -1862,11 +1862,11 @@
       }
     },
     "node_modules/minimatch": {
-      "version": "10.0.3",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.0.3.tgz",
-      "integrity": "sha512-IPZ167aShDZZUMdRk66cyQAW3qr0WzbHkPdMYa8bzZhlHhO3jALbKdxcaak7W9FfT2rZNpQuUu4Od7ILEpXSaw==",
+      "version": "10.1.1",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.1.1.tgz",
+      "integrity": "sha512-enIvLvRAFZYXJzkCYG5RKmPfrFArdLv+R+lbQ53BmIMLIry74bjKzX6iHAm8WYamJkhSSEabrWN5D97XnKObjQ==",
       "dev": true,
-      "license": "ISC",
+      "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/brace-expansion": "^5.0.0"
       },
@@ -1979,7 +1979,7 @@
       "dev": true,
       "license": "ISC",
       "dependencies": {
-        "glob": "^11.0.0",
+        "glob": "^11.1.0",
         "package-json-from-dist": "^1.0.0"
       },
       "bin": {

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/elements/echart/package-lock.json

@@ -1068,15 +1068,15 @@
       }
     },
     "node_modules/glob": {
-      "version": "11.0.3",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-11.0.3.tgz",
-      "integrity": "sha512-2Nim7dha1KVkaiF4q6Dj+ngPPMdfvLJEOpZk/jKiUAkqKebpGAWQXAq9z1xu9HKu5lWfqw/FASuccEjyznjPaA==",
+      "version": "11.1.0",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-11.1.0.tgz",
+      "integrity": "sha512-vuNwKSaKiqm7g0THUBu2x7ckSs3XJLXE+2ssL7/MfTGPLLcrJQ/4Uq1CjPTtO5cCIiRxqvN6Twy1qOwhL0Xjcw==",
       "dev": true,
-      "license": "ISC",
+      "license": "BlueOak-1.0.0",
       "dependencies": {
         "foreground-child": "^3.3.1",
         "jackspeak": "^4.1.1",
-        "minimatch": "^10.0.3",
+        "minimatch": "^10.1.1",
         "minipass": "^7.1.2",
         "package-json-from-dist": "^1.0.0",
         "path-scurry": "^2.0.0"
@@ -1135,11 +1135,11 @@
       }
     },
     "node_modules/minimatch": {
-      "version": "10.0.3",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.0.3.tgz",
-      "integrity": "sha512-IPZ167aShDZZUMdRk66cyQAW3qr0WzbHkPdMYa8bzZhlHhO3jALbKdxcaak7W9FfT2rZNpQuUu4Od7ILEpXSaw==",
+      "version": "10.1.1",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.1.1.tgz",
+      "integrity": "sha512-enIvLvRAFZYXJzkCYG5RKmPfrFArdLv+R+lbQ53BmIMLIry74bjKzX6iHAm8WYamJkhSSEabrWN5D97XnKObjQ==",
       "dev": true,
-      "license": "ISC",
+      "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/brace-expansion": "^5.0.0"
       },
@@ -1269,7 +1269,7 @@
       "dev": true,
       "license": "ISC",
       "dependencies": {
-        "glob": "^11.0.0",
+        "glob": "^11.1.0",
         "package-json-from-dist": "^1.0.0"
       },
       "bin": {

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/elements/interactive_image.js

@@ -10,7 +10,7 @@ export default {
         v-on="onUserEvents"
         draggable="false"
       />
-      <svg ref="svg" style="position:absolute;top:0;left:0;pointer-events:none" :viewBox="viewBox">
+      <svg ref="svg" style="position:absolute;top:0;left:0;width:100%;height:100%;pointer-events:none" :viewBox="viewBox" preserveAspectRatio="none">
         <g :style="{ display: showCross ? 'block' : 'none' }">
           <line v-if="cross" :x1="x" y1="0" :x2="x" y2="100%" :stroke="cross === true ? 'black' : cross" />
           <line v-if="cross" x1="0" :y1="y" x2="100%" :y2="y" :stroke="cross === true ? 'black' : cross" />

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/elements/interactive_image.py

@@ -1,12 +1,13 @@
 from __future__ import annotations
 
 import time
+from collections.abc import Callable
 from pathlib import Path
-from typing import cast
+from typing import Literal, cast
 
 from typing_extensions import Self
 
-from .. import optional_features
+from .. import helpers, optional_features
 from ..events import GenericEventArguments, Handler, MouseEventArguments, handle_event
 from ..logging import log
 from .image import pil_to_base64
@@ -31,6 +32,7 @@ class InteractiveImage(SourceElement, ContentElement, component='interactive_ima
                  on_mouse: Handler[MouseEventArguments] | None = None,
                  events: list[str] = ['click'],  # noqa: B006
                  cross: bool | str = False,
+                 sanitize: Callable[[str], str] | Literal[False] | None = None,
                  ) -> None:
         """Interactive Image
 
@@ -50,13 +52,20 @@ class InteractiveImage(SourceElement, ContentElement, component='interactive_ima
         You can also pass a tuple of width and height instead of an image source.
         This will create an empty image with the given size.
 
+        Note that since NiceGUI 3.4.0, you need to specify how to ``sanitize`` the SVG content (if any).
+        Especially if you are displaying user input, you should sanitize the content to prevent XSS attacks.
+        We recommend ``Sanitizer().sanitize`` which requires the html-sanitizer package to be installed.
+        If you are not displaying user input, you can pass ``False`` to disable sanitization.
+
         :param source: the source of the image; can be an URL, local file path, a base64 string or just an image size
         :param content: SVG content which should be overlaid; viewport has the same dimensions as the image
         :param size: size of the image (width, height) in pixels; only used if `source` is not set
         :param on_mouse: callback for mouse events (contains image coordinates `image_x` and `image_y` in pixels)
         :param events: list of JavaScript events to subscribe to (default: `['click']`)
         :param cross: whether to show crosshairs or a color string (default: `False`)
+        :param sanitize: a sanitize function to be applied to the content, ``False`` to deactivate sanitization (default ``None``: warns if content is provided, *added in version 3.4.0*)
         """
+        self._sanitize = sanitize
         super().__init__(source=source, content=content)
         self._props['events'] = events[:]
         self._props['cross'] = cross
@@ -107,23 +116,39 @@ class InteractiveImage(SourceElement, ContentElement, component='interactive_ima
         *Added in version 2.17.0*
         """
         with self:
-            layer = InteractiveImageLayer(source=self.source, content=content, size=self._props['size']) \
-                .classes('nicegui-interactive-image-layer')
+            layer = InteractiveImageLayer(
+                source=self.source,
+                content=content,
+                size=self._props['size'],
+                sanitize=self._sanitize,
+            ).classes('nicegui-interactive-image-layer')
             self.on('loaded', lambda e: layer.run_method('updateViewbox', e.args['width'], e.args['height']))
             return layer
 
+    def _handle_content_change(self, content: str) -> None:
+        if content and self._sanitize is None:
+            helpers.warn_once('ui.interactive_image: content provided but no explicit sanitize function set; '
+                              'to avoid XSS vulnerabilities, please provide a sanitize function or set sanitize=False')
+        return super()._handle_content_change(self._sanitize(content) if self._sanitize else content)
+
 
 class InteractiveImageLayer(SourceElement, ContentElement, component='interactive_image.js'):
     CONTENT_PROP = 'content'
     PIL_CONVERT_FORMAT = 'PNG'
 
-    def __init__(self, *, source: str, content: str, size: tuple[float, float] | None) -> None:
+    def __init__(self, *,
+                 source: str,
+                 content: str,
+                 size: tuple[float, float] | None,
+                 sanitize: Callable[[str], str] | Literal[False] | None = None,
+                 ) -> None:
         """Interactive Image Layer
 
         This element is created when adding a layer to an ``InteractiveImage``.
 
         *Added in version 2.17.0*
         """
+        self._sanitize = sanitize
         super().__init__(source=source, content=content)
         self._props['size'] = size
 
@@ -131,3 +156,9 @@ class InteractiveImageLayer(SourceElement, ContentElement, component='interactiv
         if optional_features.has('pillow') and isinstance(source, PIL_Image):
             source = pil_to_base64(source, self.PIL_CONVERT_FORMAT)
         super()._set_props(source)
+
+    def _handle_content_change(self, content: str) -> None:
+        if self._sanitize is None:
+            helpers.warn_once('ui.interactive_image layer: content provided but no explicit sanitize function set; '
+                              'to avoid XSS vulnerabilities, please provide a sanitize function or set sanitize=False')
+        return super()._handle_content_change(self._sanitize(content) if self._sanitize else content)

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/elements/joystick/package-lock.json

@@ -663,15 +663,15 @@
       }
     },
     "node_modules/glob": {
-      "version": "11.0.3",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-11.0.3.tgz",
-      "integrity": "sha512-2Nim7dha1KVkaiF4q6Dj+ngPPMdfvLJEOpZk/jKiUAkqKebpGAWQXAq9z1xu9HKu5lWfqw/FASuccEjyznjPaA==",
+      "version": "11.1.0",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-11.1.0.tgz",
+      "integrity": "sha512-vuNwKSaKiqm7g0THUBu2x7ckSs3XJLXE+2ssL7/MfTGPLLcrJQ/4Uq1CjPTtO5cCIiRxqvN6Twy1qOwhL0Xjcw==",
       "dev": true,
-      "license": "ISC",
+      "license": "BlueOak-1.0.0",
       "dependencies": {
         "foreground-child": "^3.3.1",
         "jackspeak": "^4.1.1",
-        "minimatch": "^10.0.3",
+        "minimatch": "^10.1.1",
         "minipass": "^7.1.2",
         "package-json-from-dist": "^1.0.0",
         "path-scurry": "^2.0.0"
@@ -766,11 +766,11 @@
       }
     },
     "node_modules/minimatch": {
-      "version": "10.0.3",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.0.3.tgz",
-      "integrity": "sha512-IPZ167aShDZZUMdRk66cyQAW3qr0WzbHkPdMYa8bzZhlHhO3jALbKdxcaak7W9FfT2rZNpQuUu4Od7ILEpXSaw==",
+      "version": "10.1.1",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.1.1.tgz",
+      "integrity": "sha512-enIvLvRAFZYXJzkCYG5RKmPfrFArdLv+R+lbQ53BmIMLIry74bjKzX6iHAm8WYamJkhSSEabrWN5D97XnKObjQ==",
       "dev": true,
-      "license": "ISC",
+      "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/brace-expansion": "^5.0.0"
       },
@@ -889,7 +889,7 @@
       "dev": true,
       "license": "ISC",
       "dependencies": {
-        "glob": "^11.0.0",
+        "glob": "^11.1.0",
         "package-json-from-dist": "^1.0.0"
       },
       "bin": {

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/elements/json_editor/package-lock.json

@@ -1000,15 +1000,15 @@
       }
     },
     "node_modules/glob": {
-      "version": "11.0.3",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-11.0.3.tgz",
-      "integrity": "sha512-2Nim7dha1KVkaiF4q6Dj+ngPPMdfvLJEOpZk/jKiUAkqKebpGAWQXAq9z1xu9HKu5lWfqw/FASuccEjyznjPaA==",
+      "version": "11.1.0",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-11.1.0.tgz",
+      "integrity": "sha512-vuNwKSaKiqm7g0THUBu2x7ckSs3XJLXE+2ssL7/MfTGPLLcrJQ/4Uq1CjPTtO5cCIiRxqvN6Twy1qOwhL0Xjcw==",
       "dev": true,
-      "license": "ISC",
+      "license": "BlueOak-1.0.0",
       "dependencies": {
         "foreground-child": "^3.3.1",
         "jackspeak": "^4.1.1",
-        "minimatch": "^10.0.3",
+        "minimatch": "^10.1.1",
         "minipass": "^7.1.2",
         "package-json-from-dist": "^1.0.0",
         "path-scurry": "^2.0.0"
@@ -1202,11 +1202,11 @@
       "license": "MIT"
     },
     "node_modules/minimatch": {
-      "version": "10.0.3",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.0.3.tgz",
-      "integrity": "sha512-IPZ167aShDZZUMdRk66cyQAW3qr0WzbHkPdMYa8bzZhlHhO3jALbKdxcaak7W9FfT2rZNpQuUu4Od7ILEpXSaw==",
+      "version": "10.1.1",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.1.1.tgz",
+      "integrity": "sha512-enIvLvRAFZYXJzkCYG5RKmPfrFArdLv+R+lbQ53BmIMLIry74bjKzX6iHAm8WYamJkhSSEabrWN5D97XnKObjQ==",
       "dev": true,
-      "license": "ISC",
+      "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/brace-expansion": "^5.0.0"
       },
@@ -1334,7 +1334,7 @@
       "dev": true,
       "license": "ISC",
       "dependencies": {
-        "glob": "^11.0.0",
+        "glob": "^11.1.0",
         "package-json-from-dist": "^1.0.0"
       },
       "bin": {

{nicegui-3.3.0 → nicegui-3.4.0}/nicegui/elements/leaflet/leaflet.py

@@ -49,18 +49,26 @@ class Leaflet(Element, component='leaflet.js', esm={'nicegui-leaflet': 'dist'},
         self.layers: list[Layer] = []
         self.is_initialized = False
 
+        # read-write public API
         self.center = center
         self.zoom = zoom
+
+        # internal state, mutates client state via _to_dict
         self._props['center'] = center
         self._props['zoom'] = zoom
+
+        # client state
+        self._client_center = center
+        self._client_zoom = zoom
+
         self._props['options'] = {**options}
         self._props['draw_control'] = draw_control
         self._props['hide_drawn_items'] = hide_drawn_items
         self._props['additional_resources'] = additional_resources or []
 
         self.on('init', self._handle_init)
-        self.on('map-moveend', self._handle_moveend)
-        self.on('map-zoomend', self._handle_zoomend)
+        self.on('map-moveend', self._handle_move_or_zoom_end)
+        self.on('map-zoomend', self._handle_move_or_zoom_end)
 
         self.tile_layer(
             url_template=r'https://{s}.tile.osm.org/{z}/{x}/{y}.png',
@@ -91,14 +99,10 @@ class Leaflet(Element, component='leaflet.js', esm={'nicegui-leaflet': 'dist'},
         await self.client.connected()
         await event.wait()
 
-    def _handle_moveend(self, e: GenericEventArguments) -> None:
+    def _handle_move_or_zoom_end(self, e: GenericEventArguments) -> None:
         self._send_update_on_value_change = False
-        self.center = e.args['center']
-        self._send_update_on_value_change = True
-
-    def _handle_zoomend(self, e: GenericEventArguments) -> None:
-        self._send_update_on_value_change = False
-        self.zoom = e.args['zoom']
+        self.center = self._client_center = e.args['center']
+        self.zoom = self._client_zoom = e.args['zoom']
         self._send_update_on_value_change = True
 
     def run_method(self, name: str, *args: Any, timeout: float = 1) -> AwaitableResponse:
@@ -111,16 +115,12 @@ class Leaflet(Element, component='leaflet.js', esm={'nicegui-leaflet': 'dist'},
         if self._props['center'] == center:
             return
         self._props['center'] = center
-        if self._send_update_on_value_change:
-            self.run_map_method('setView', center, self.zoom)
 
     def set_zoom(self, zoom: int) -> None:
         """Set the zoom level of the map."""
         if self._props['zoom'] == zoom:
             return
         self._props['zoom'] = zoom
-        if self._send_update_on_value_change:
-            self.run_map_method('setView', self.center, zoom)
 
     def remove_layer(self, layer: Layer) -> None:
         """Remove a layer from the map."""
@@ -166,3 +166,11 @@ class Leaflet(Element, component='leaflet.js', esm={'nicegui-leaflet': 'dist'},
     def _handle_delete(self) -> None:
         binding.remove(self.layers)
         super()._handle_delete()
+
+    def _to_dict(self):
+        if self._send_update_on_value_change and (
+            self._props['center'] != self._client_center or
+            self._props['zoom'] != self._client_zoom
+        ):
+            self.run_map_method('setView', self._props['center'], self._props['zoom'])
+        return super()._to_dict()