This series upgrades our dependent JavaScript libraries to fix some known
vulnerabilities.

We are currently pinned to bootstrap 3.x because the syntax change in 4.x
is significantly different. bootsrap 5.x is even more invasive, as it drops
jquery.

We are currently pinned to Chart.js 2.9.x likewise because the syntax changes
in 3.x are a bit too invasive for now.

Tim Orling (4):
  jquery: upgrade 3.4.1 -> 3.7.1
  bootstrap: add version to filenames
  Chart.js: add version to filenames
  Chart.js: upgrade from 2.9.3 to 2.9.4

 layerindex/static/LICENSE.jquery              |    18 +-
 .../static/js/{Chart.js => Chart-2.9.4.js}    | 27979 ++++++++--------
 layerindex/static/js/Chart-2.9.4.min.js       |     7 +
 layerindex/static/js/Chart.min.js             |     7 -
 ...bootstrap.min.js => boostrap-3.4.1.min.js} |     0
 .../js/{bootstrap.js => bootstrap-3.4.1.js}   |     0
 .../js/{jquery-3.4.1.js => jquery-3.7.1.js}   |  2926 +-
 layerindex/static/js/jquery-3.7.1.min.js      |     2 +
 templates/base.html                           |     4 +-
 9 files changed, 15534 insertions(+), 15409 deletions(-)
 rename layerindex/static/js/{Chart.js => Chart-2.9.4.js} (96%)
 create mode 100644 layerindex/static/js/Chart-2.9.4.min.js
 delete mode 100644 layerindex/static/js/Chart.min.js
 rename layerindex/static/js/{bootstrap.min.js => boostrap-3.4.1.min.js} (100%)
 rename layerindex/static/js/{bootstrap.js => bootstrap-3.4.1.js} (100%)
 rename layerindex/static/js/{jquery-3.4.1.js => jquery-3.7.1.js} (82%)
 create mode 100644 layerindex/static/js/jquery-3.7.1.min.js

-- 
2.34.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#61358): https://lists.yoctoproject.org/g/yocto/message/61358
Mute This Topic: https://lists.yoctoproject.org/mt/102009703/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to