Repository navigation

Check the UI's third-party libraries for advisories every week - #2745

Merged

Flix6x merged 18 commits into

mainfrom

ui-library-advisories

Oct 19, 2026

Merged

Check the UI's third-party libraries for advisories every week#2745
Flix6x merged 18 commits into
mainfrom
ui-library-advisories

Commits on Oct 15, 2026
- feat!: serve UI assets from FlexMeasures, not CDNs
  TeaDrinkingProgrammer
  committed
  f611f12
- feat: serve asset type icons locally
  TeaDrinkingProgrammer
  committed
  9d93a2c
- docs: link PR #2711 in the changelog entry
  TeaDrinkingProgrammer
  committed
  783093d
Commits on Oct 18, 2026
- Merge main into feat/vendor-ui-assets
  
  Flix6x
  and
  claude
  committed
  45fdb7d
- Keep the asset type icons apart from the vendored libraries, with their licences
  
  Flix6x
  and
  claude
  committed
  02d5bd7
- Load the UI's libraries from CDNs unless fetched, from a manifest of their files and hashes
  
  Flix6x
  and
  claude
  committed
  1da9189
- Fetch the UI's libraries into the Docker image, and check that it has them
  
  Flix6x
  and
  claude
  committed
  e48d6ce
- Document how to serve the UI's libraries without internet access
  
  Flix6x
  and
  claude
  committed
  af1d2be
- Check the UI's libraries for known advisories every week
  
  Flix6x
  and
  claude
  committed
  c2419f3
- Ignore the ECharts advisory, which only affects a series type that FlexMeasures does not use
  
  Flix6x
  and
  claude
  committed
  8900b5c
- Put the comment on VendorLibrary.name above it, where black leaves it on one line
  
  Flix6x
  and
  claude
  committed
  6cfa981
- Merge feat/vendor-ui-assets (#2711) into ui-library-advisories
  
  Flix6x
  and
  claude
  committed
  3653174
Commits on Oct 19, 2026
- Fetch the UI's libraries into the installed package rather than the source copy in the Docker build
  
  Flix6x
  and
  claude
  committed
  57e6794
- Merge feat/vendor-ui-assets (#2711)
  
  Flix6x
  and
  claude
  committed
  e19ea75
- Keep the FLEXMEASURES_JS_VERSIONS setting, so hosts can load other versions of the UI's libraries, optionally with the hashes of their files
  
  Flix6x
  and
  claude
  committed
  c645670
- Merge feat/vendor-ui-assets (#2711)
  Flix6x
  committed
  8184dd3
- Merge main, now that #2711 was squash-merged
  
  Flix6x
  and
  claude
  committed
  1338cd4
- Merge main, now that the Vega and DataTables upgrades were merged
  
  Flix6x
  and
  claude
  committed
  8fa5e81

Commits

Commits on Oct 15, 2026

Commits on Oct 18, 2026

Commits on Oct 19, 2026