10390 Commits

Author SHA1 Message Date
Panagiotis Papadopoulos
c9c8ee5556 fix(setup): use safer text method instead of html to prevent possible XSS
see also https://api.jquery.com/html/
under "Additional Notes":
"Do not use these methods to insert strings obtained from untrusted sources such as URL query parameters, cookies, or form inputs. Doing so can introduce cross-site-scripting (XSS) vulnerabilities. Remove or escape any user input before adding content to the document. "

fixes #1072
2025-01-29 10:07:40 +01:00
Panagiotis Papadopoulos
ed33b72f57 chore(assets): remove manual provision of knockout
this is only used in setup.ts and there it is already packed by webpack – so no need to manually provide it as static asset anymore
2025-01-29 08:48:03 +01:00
Panagiotis Papadopoulos
4adaa4bd58 chore(prettier): fix code style for setup.ts 2025-01-28 23:18:17 +01:00
Panagiotis Papadopoulos
0559ebb48a chore(views/setup): remove knockout src tag
-> this is now handled inside setup.ts and is handled by webpack
2025-01-28 23:16:16 +01:00
Panagiotis Papadopoulos
98c4baeb6b chore(views/setup): move syncInProgress to meta tag
makes it easier to hanlde in the setup.ts file
2025-01-28 23:15:16 +01:00
Panagiotis Papadopoulos
c7b368fa46 chore(client/ts): port setup.js entrypoint to TS 2025-01-28 23:13:06 +01:00
Panagiotis Papadopoulos
e614e775fa chore(client/ts): port mobile.js entrypoint to TS 2025-01-28 07:25:26 +01:00
Panagiotis Papadopoulos
4c30853258 chore(client/ts): port desktop.js entrypoint to TS 2025-01-28 07:25:26 +01:00
Panagiotis Papadopoulos
144a7ff3a1 chore(types.d.ts): add missing platform prop to CustomGlobals
as used e.g. in dekstop.js – supplied via ejs (and then rendered via `./src/views/partials/windowGlobal`

I left it as optional however, because e.g. it does not seem to exist on *all* pages
2025-01-28 07:25:26 +01:00
Elian Doran
24026ff013
chore(release): prepare for 0.91.4-beta 2025-01-28 00:09:49 +02:00
Elian Doran
7d8e96d6df
fix(context-menu): keyboard shortcut not filling width 2025-01-28 00:03:04 +02:00
Elian Doran
9125aeca29
Merge pull request #1048 from TriliumNext/chore_webpack-share
chore: make share.js work with webpack
2025-01-27 22:42:13 +02:00
Elian Doran
4264e37256
Merge pull request #1053 from TriliumNext/renovate/mind-elixir-node-menu-1.x
fix(deps): update dependency @mind-elixir/node-menu to v1.0.4
2025-01-27 22:19:59 +02:00
Panagiotis Papadopoulos
21539857c3 build(npm): remove override again, as @mind-elixir/node-menu got updated :-) 2025-01-27 19:46:36 +01:00
renovate[bot]
1d9f15b9a2
fix(deps): update dependency @mind-elixir/node-menu to v1.0.4 2025-01-27 16:35:43 +00:00
Elian Doran
be115e82b6
Merge pull request #1049 from TriliumNext/build_npm-override
build(npm): use specific overrides instead of `legacy-peer-deps`
2025-01-27 14:49:35 +02:00
Elian Doran
3dd5623f73
Merge pull request #1051 from TriliumNext/chore_delete-outdated-issue-template
chore: delete outdated issue_template.md
2025-01-27 14:43:42 +02:00
Panagiotis Papadopoulos
1d9c43f77e
chore: delete outdated issue_template.md
chore: delete outdated issue_template.md, the current ones are already existing under `.github`
2025-01-27 10:40:33 +01:00
Panagiotis Papadopoulos
a234234373 build(npm): use specific overrides instead of legacy-peer-deps
allows us to handle these peer dependency
issues on a case by case basis, instead of
generally allowing it for all packages,
which could lead to unnoticed issues.

in this case the @mind-elixir/node-menu package
is still showing mind-elixir 2.x.x as peerDep,
which cannot be resolved, since we use v4
2025-01-27 07:54:48 +01:00
Panagiotis Papadopoulos
ad02b86719 chore: remove now unnecessary manual copying of share.js
this is now correctly handled by the webpack build
2025-01-26 21:39:34 +01:00
Panagiotis Papadopoulos
74f6ad46ae chore(app/share): add workaround for dead code eliminination by webpack
since fetchNote function is not used anywhere, webpack will treat it as "dead code" and remove it from the final output

I did not have any success with using webpack config flags like "sideEffects", so I've reverted to this workaround for now
2025-01-26 21:23:08 +01:00
Panagiotis Papadopoulos
3ed9528495 chore(app/share): port to TypeScript 2025-01-26 20:54:30 +01:00
Elian Doran
c6730c5467
chore(client/ts): port ribbon_container 2025-01-26 21:24:42 +02:00
Elian Doran
47fb4d7b27
chore(client/ts): port note_info_widget 2025-01-26 21:23:08 +02:00
Elian Doran
20584f622d
chore(client/ts): port zpetne_odkazy 2025-01-26 21:23:08 +02:00
Elian Doran
32fc5def77
chore(client/ts): port note_map 2025-01-26 21:23:08 +02:00
Elian Doran
befdade7ba
chore(client/ts): port similar_notes 2025-01-26 21:23:08 +02:00
Elian Doran
4492c60aa9
chore(client/ts): port note_paths 2025-01-26 21:23:08 +02:00
Elian Doran
3f7bda6289
chore(client/ts): port left_pane_toggle 2025-01-26 21:23:08 +02:00
Elian Doran
8e62c942ea
Merge pull request #1037 from TriliumNext/renovate/ws-8.x
chore(deps): update dependency @types/ws to v8.5.14
2025-01-26 20:48:57 +02:00
Elian Doran
61d4d3fd2c
fix(types): broken types after ws upgrade 2025-01-26 20:39:19 +02:00
Elian Doran
e4b186ce8a
Merge pull request #1036 from TriliumNext/feat_env-config
feat(services/config): Add ability to set Trilium configuration variables via ENV variables
2025-01-26 14:32:13 +02:00
Elian Doran
7ae7831a27
Merge pull request #1022 from TriliumNext/fix_import-utils-#1016
fix(import/utils.handleH1): fix stripping of all <h1> tags that match title tag
2025-01-26 14:28:52 +02:00
Elian Doran
189dfdb5cd
Merge pull request #1046 from TriliumNext/renovate/i18next-24.x
fix(deps): update dependency i18next to v24.2.2
2025-01-26 14:25:17 +02:00
renovate[bot]
af204d0d74
fix(deps): update dependency i18next to v24.2.2 2025-01-26 00:39:49 +00:00
Elian Doran
faf14e1b14
Merge pull request #1043 from TriliumNext/fix_webpack-share-entry
fix(webpack): add missing share.js entry point
2025-01-25 23:42:41 +02:00
Elian Doran
e1a095d111
Merge pull request #1045 from TriliumNext/chore_webpack-config-types
chore(webpack): add Configuration type
2025-01-25 23:41:16 +02:00
Elian Doran
0d82b64ed1
Merge pull request #1033 from TriliumNext/renovate/node-22.x
chore(deps): update node.js to v22.13.1
2025-01-25 23:40:13 +02:00
Elian Doran
395aee5657
Merge pull request #1038 from TriliumNext/renovate/electron-forge-monorepo
chore(deps): update electron-forge monorepo to v7.6.1
2025-01-25 23:39:28 +02:00
Elian Doran
20f2fa3135
Merge pull request #1039 from TriliumNext/renovate/vitest-monorepo
chore(deps): update vitest monorepo to v3.0.4
2025-01-25 23:38:15 +02:00
Elian Doran
24d4375552
Merge pull request #1040 from TriliumNext/renovate/i18next-http-backend-3.x
fix(deps): update dependency i18next-http-backend to v3.0.2
2025-01-25 23:37:40 +02:00
Elian Doran
bc901a1cf6
Merge pull request #1041 from TriliumNext/renovate/playwright-monorepo
chore(deps): update dependency @playwright/test to v1.50.0
2025-01-25 23:37:10 +02:00
Elian Doran
f3219da749
Merge pull request #1032 from TriliumNext/renovate/electron-34.x
chore(deps): update dependency electron to v34.0.1
2025-01-25 23:35:38 +02:00
Panagiotis Papadopoulos
2031029076 chore(webpack): add Configuration type
-> allows for intellisense in e.g. VSCode
2025-01-25 11:31:46 +01:00
Elian Doran
577c61b0d1
Merge pull request #1042 from j9t/refactor/images
refactor: compress images
2025-01-24 22:52:28 +02:00
Panagiotis Papadopoulos
b7f8f00a14 fix(webpack): add missing share.js entry point 2025-01-24 19:30:07 +01:00
Jens Oliver Meiert
2d86d9a7c0 refactor: compress images (losslessly, with Imagemin Guard)
Signed-off-by: Jens Oliver Meiert <jens@meiert.com>
2025-01-24 15:16:05 +01:00
Panagiotis Papadopoulos
8472e44fe6 chore(docker_healthcheck): remove now unused imports 2025-01-24 07:46:39 +01:00
Panagiotis Papadopoulos
2c2a404056 feat(services/config): rename syncProxy to syncServerProxy for naming consistency
backwards compatibility ensured, by still checking the iniConfig for the old value first
2025-01-24 07:45:47 +01:00
renovate[bot]
37cdb2fe5e
chore(deps): update dependency @playwright/test to v1.50.0 2025-01-24 01:20:16 +00:00