Skip to content

Conversation

@tagliala
Copy link
Contributor

@tagliala tagliala commented May 9, 2024

JavaScript files have been manually updated because:

  • jquery-ui-rails is unmaintained and it is bundling 1.13.0
  • An active fork of jquery-ui-rails is bundling 1.13.2, but there is
    a more recent version (1.13.3)

escape-selector has been removed because jQuery UI is using
jQuery's built-in escape selector. This selector is available from
version 3.0, which is required by Active Admin, so it should not be
a problem

Ref #8327

Ref:


I've manually tested

  • $.ui.version Version in console
  • Datepicker at http://localhost:3000/admin/categories?order=name_asc
  • Tabs switching at http://localhost:3000/admin/kitchensink
  • dropdown menu at http://localhost:3000/admin/users
  • hover menu in the navigation bar at http://localhost:3000/admin
  • sorting at http://localhost:3000/admin/comments
  • clear filters at http://localhost:3000/admin/comments?order=id_desc
  • multiple table checkboxes at http://localhost:3000/admin/tags
  • multiple checkboxes at http://localhost:3000/admin/users

@codecov
Copy link

codecov bot commented May 9, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

❗ No coverage uploaded for pull request base (3-0-stable@9dd364c). Click here to learn what that means.

Additional details and impacted files
@@              Coverage Diff              @@
##             3-0-stable    #8329   +/-   ##
=============================================
  Coverage              ?   99.19%           
=============================================
  Files                 ?      194           
  Lines                 ?     4945           
  Branches              ?        0           
=============================================
  Hits                  ?     4905           
  Misses                ?       40           
  Partials              ?        0           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@tagliala tagliala force-pushed the security/update-vendored-jquery-ui branch from 7e3715a to 0c6df99 Compare May 9, 2024 17:08
@tagliala tagliala marked this pull request as ready for review May 10, 2024 07:10
Copy link
Member

@javierjulio javierjulio left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@tagliala tagliala force-pushed the security/update-vendored-jquery-ui branch 2 times, most recently from 8b3223a to 3521927 Compare May 14, 2024 06:51
@tagliala tagliala requested a review from javierjulio May 14, 2024 06:52
JavaScript files have been manually updated because:
- `jquery-ui-rails` is unmaintained and it is bundling 1.13.0
- An active fork of `jquery-ui-rails` is bundling 1.13.2, but there is
  a more recent version (1.13.3)
 
`escape-selector` has been removed because jQuery UI is using
jQuery's built-in escape selector. This selector is available from
version 3.0, which is required by Active Admin, so it should not be
a problem

Ref activeadmin#8327

Ref:
- https://bugs.jqueryui.com/ticket/14991/
- jquery/jquery-ui#1957
@tagliala tagliala force-pushed the security/update-vendored-jquery-ui branch from 3521927 to 44899a4 Compare May 14, 2024 06:55
@javierjulio javierjulio changed the title Update vendored jquery-ui Update vendored jquery-ui from 1.12.1 to 1.13.3 May 15, 2024
Copy link
Member

@javierjulio javierjulio left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@tagliala tagliala merged commit cce08cb into activeadmin:3-0-stable May 15, 2024
@tagliala tagliala deleted the security/update-vendored-jquery-ui branch May 15, 2024 14:18
cmanetta pushed a commit to bugcrowd/activeadmin that referenced this pull request Jun 3, 2024
Update vendored jquery-ui

JavaScript files have been manually updated because:
- `jquery-ui-rails` is unmaintained and it is bundling 1.13.0
- An active fork of `jquery-ui-rails` is bundling 1.13.2, but there is
  a more recent version (1.13.3)
 
`escape-selector` has been removed because jQuery UI is using
jQuery's built-in escape selector. This selector is available from
version 3.0, which is required by Active Admin, so it should not be
a problem

Ref activeadmin#8327

Ref:
- https://bugs.jqueryui.com/ticket/14991/
- jquery/jquery-ui#1957
rogerkk added a commit to rogerkk/activeadmin that referenced this pull request Jun 7, 2024
4tolexx pushed a commit to velaluqa/activeadmin that referenced this pull request Jul 6, 2024
Update vendored jquery-ui

JavaScript files have been manually updated because:
- `jquery-ui-rails` is unmaintained and it is bundling 1.13.0
- An active fork of `jquery-ui-rails` is bundling 1.13.2, but there is
  a more recent version (1.13.3)

`escape-selector` has been removed because jQuery UI is using
jQuery's built-in escape selector. This selector is available from
version 3.0, which is required by Active Admin, so it should not be
a problem

Ref activeadmin#8327

Ref:
- https://bugs.jqueryui.com/ticket/14991/
- jquery/jquery-ui#1957
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants