mbox series

[layerindex-web,0/4] JavaScript libraries upgrade for CVEs

Message ID 20231017005921.2618459-1-tim.orling@konsulko.com
Headers show
Series JavaScript libraries upgrade for CVEs | expand

Message

Tim Orling Oct. 17, 2023, 12:59 a.m. UTC 
This series upgrades our dependent JavaScript libraries to fix some known
vulnerabilities.

We are currently pinned to bootstrap 3.x because the syntax change in 4.x
is significantly different. bootsrap 5.x is even more invasive, as it drops
jquery.

We are currently pinned to Chart.js 2.9.x likewise because the syntax changes
in 3.x are a bit too invasive for now.

Tim Orling (4):
  jquery: upgrade 3.4.1 -> 3.7.1
  bootstrap: add version to filenames
  Chart.js: add version to filenames
  Chart.js: upgrade from 2.9.3 to 2.9.4

 layerindex/static/LICENSE.jquery              |    18 +-
 .../static/js/{Chart.js => Chart-2.9.4.js}    | 27979 ++++++++--------
 layerindex/static/js/Chart-2.9.4.min.js       |     7 +
 layerindex/static/js/Chart.min.js             |     7 -
 ...bootstrap.min.js => boostrap-3.4.1.min.js} |     0
 .../js/{bootstrap.js => bootstrap-3.4.1.js}   |     0
 .../js/{jquery-3.4.1.js => jquery-3.7.1.js}   |  2926 +-
 layerindex/static/js/jquery-3.7.1.min.js      |     2 +
 templates/base.html                           |     4 +-
 9 files changed, 15534 insertions(+), 15409 deletions(-)
 rename layerindex/static/js/{Chart.js => Chart-2.9.4.js} (96%)
 create mode 100644 layerindex/static/js/Chart-2.9.4.min.js
 delete mode 100644 layerindex/static/js/Chart.min.js
 rename layerindex/static/js/{bootstrap.min.js => boostrap-3.4.1.min.js} (100%)
 rename layerindex/static/js/{bootstrap.js => bootstrap-3.4.1.js} (100%)
 rename layerindex/static/js/{jquery-3.4.1.js => jquery-3.7.1.js} (82%)
 create mode 100644 layerindex/static/js/jquery-3.7.1.min.js