Skip to content

Release/11.14.0#318

Merged
hebus merged 20 commits into
masterfrom
release/11.14.0
Jun 24, 2026
Merged

Release/11.14.0#318
hebus merged 20 commits into
masterfrom
release/11.14.0

Conversation

@hebus

@hebus hebus commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

No description provided.

hebus and others added 20 commits May 4, 2026 17:42
- Update webpack-dev-server override to 5.2.4
- Bump transitive dependencies in package-lock.json
- Bump vulnerable packages in docusaurus/package-lock.json
…dependabot security vulnerabilities

#noJiraCheck ES-31800 #done ES-31801 #done ES-31802 #done chore: fix dependabot security vulnerabilities
test(components): fix specs for Angular 20 standalone default #noJiraCheck
Replace the global @import scoping with the Sass module system across the
components theme and the consuming apps, removing all Sass deprecation
warnings (@import, global built-in functions, mixed-decls).

- Add theme/_bootstrap.scss: single configuration point that forwards
  Bootstrap via `@forward "bootstrap/scss/bootstrap" with (...)`. App-level
  overrides ($secondary, $navbar-padding-y, custom $grid-breakpoints) thread
  through as configurable knobs.
- Add theme/_tokens.scss: all Sinequa-only tokens (forwards _colors.scss).
- Split former _variables.scss: Bootstrap overrides -> _bootstrap.scss with();
  Sinequa tokens -> _tokens.scss; sq-button-variant mixin -> _buttons.scss.
- Convert ~18 theme partials, action/notification/advanced, the 4 app entries
  and preview/navbar/menu component styles to @use/@forward.
- Load CDK overlay & ngx datepicker CSS via `@use "*.css"` (inlined).
- Namespace deprecated global fns: map.get, meta.type-of, color.mix,
  color.adjust (metadata.scss); fix mixed-decls in _dark.scss.
- Drop dead $breadcrumb-item-active-color override (misnamed, never applied).

Verified: ng build components / vanilla-search / pepper / components-docs all
build with zero Sass deprecation warnings.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
chore(theme): migrate Sass @import to @use/@forward (Dart Sass 3 ready) #noJiraCheck
…cet-filters

BsFacetDate pinned this.query in setCustomDateSelect (this.query = query).
After applying a date range, searchService.search() rebuilds the live query
from the URL, leaving this.query stale: the clear action removed the filter
from the stale query while the search re-ran against the live one, so the
button had no effect (unless the facet was collapsed/recreated first).

Stop pinning this.query and use the local query for applyFilterSearch, like
BsFacetRange.setRange(). Also pass the facet name to clearFiltersSearch for
consistent audit events with list/range facets.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…cet-filters

ES-32242 fix(facet-date): clear filters button has no effect in sq-facet-filters
… audit fix

37 vulnerabilities fixed (37 → 11 remaining require breaking changes)

Fixed packages:
- esbuild: arbitrary file read on Windows dev server
- http-proxy-middleware: CRLF injection + host-header bypass
- piscina: prototype pollution gadget → RCE via options.filename
- vite: server.fs.deny bypass on Windows + NTLMv2 hash disclosure
- ws: memory exhaustion DoS
- engine.io / socket.io-adapter: ws transitive fixes
- and related transitive dependencies

Remaining 11 vulnerabilities require --force (breaking changes):
- @babel/core: would downgrade @angular/compiler-cli to 15.0.4
- uuid: would upgrade to v14 (breaking API change)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…vulnerabilities

ES-32428 #done ES-32427 #done ES-32334 #done ES-32281 #done ES-32280 #done ES-32279 #done ES-32278 #done ES-32277 #done ES-32276 #done ES-32275 #done ES-32183 #done ES-31996 #done chore: fix dependabot security vulnerabilities
- Override uuid to ^11.1.1 (GHSA-w5hq-g745-h8pq)
- Override gray-matter js-yaml to ^4.2.0 (GHSA-h67p-54hq-rp68)
- Patch gray-matter engines.js to use js-yaml 4.x API (load/dump)
- Add postinstall to apply patch and remove gray-matter nested node_modules

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
#noJiraCheck chore: fix npm audit vulnerabilities in docusaurus
sync: release/11.14.0 (sba-internal → sba-angular)
@hebus hebus merged commit 9c74484 into master Jun 24, 2026
0 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant