/
githubmirror
/
photoprism
Обзор
Документация
Войти
/
githubmirror
/
photoprism
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
develop
frontend/package.json
144 строки
9 KB
Michael Mayer
Frontend: Upgrade "hls.js", "postcss", and "vite" to their latest patches
07 авг 2026, 17:16
07 авг 2026, 17:16
1c351ac
Код
Авторство
О чём код?
{ "name": "photoprism", "description": "AI-Powered Photos App", "author": "PhotoPrism UG", "license": "AGPL-3.0", "version": "1", "private": true, "//webpack": "Webpack is pinned to 5.107.2 (no caret, exact version) — DO NOT bump without a production-bundle smoke test. 5.108.0 changed prod scope-hoisting so the option builders in src/options/options.js (Languages, TimeZones, StartPages, MapsAnimate) threw \"Cannot read properties of undefined\", breaking the login and Settings pages in all editions. The build succeeds; the failure only shows up in the minified bundle at runtime, so check the login page and Settings in a browser after `make build-js`. See frontend/README.md.", "//vuetify": "Vuetify is pinned to 3.12.2 (no caret, exact version) — DO NOT bump to 3.12.3+ without revisiting issue #5538. The 3.12.3 release added an onFocusout handler to VAutocomplete/VSelect/VCombobox (PR fixing Vuetify #22697) that flips isFocused=false whenever relatedTarget is outside the textfield. That handler closes long autocomplete/select dropdowns on open, because Vuetify's virtual scroller unmounts the focused list item during scroll-to-selected-index, producing a transient blur with relatedTarget=null. The bug is unfixed in 3.12.5 and Vuetify development has moved to v4. When lifting this pin (e.g., a future v3.12.x patch or v4 migration), test the photo edit dialog's Country and Time Zone autocompletes in Chrome — the menu must stay open on click. KNOWN CAVEATS of 3.12.2: (1) Vuetify #22828 — v-select's @blur event fires when the menu opens (introduced by the 3.12.2 screenreader fix in commit f906336). PhotoPrism is not affected because we only attach @blur handlers to v-text-field, v-textarea, and v-combobox; if you ever add @blur to a v-select, expect spurious calls until that upstream bug is fixed. (2) The .v-field--focused CSS class can linger on a previously-focused v-autocomplete input after the user clicks into another autocomplete — document.activeElement is correct, but Vuetify's isFocused state is under-aggressive about clearing in 3.12.2. This is the inverse symptom of #22697 (which 3.12.3 over-corrected, causing #5538). Visually harmless in the photo edit dialog because the affected fields aren't on screen together. See also frontend/src/common/view.js (sibling-menu gate) and frontend/CODEMAP.md.", "scripts": { "acceptance-local": "testcafe chromium --selector-timeout 5000 -S -s tests/acceptance/screenshots tests/acceptance", "build": "webpack --node-env=production", "build-analyze": "webpack --node-env=analyze", "build-dev": "webpack --node-env=development", "postbuild": "node scripts/precompress.js", "debug": "webpack --stats-error-details", "dep-list": "npx npm-check-updates", "fmt": "eslint --cache --fix src/ *.js *.mjs && npm run fmt-css", "fmt-css": "prettier --write \"src/**/*.{css,scss,sass}\"", "fmt-npm": "prettier --write package.json", "gettext-compile": "cross-env GETTEXT_MERGE=1 vue-gettext-compile --config gettext.config.js", "gettext-extract": "cross-env GETTEXT_MERGE=0 vue-gettext-extract --config gettext.config.js", "lint": "eslint --cache src/ *.js *.mjs && npm run lint-css", "lint-css": "prettier --check \"src/**/*.{css,scss,sass}\"", "test": "cross-env TZ=UTC BUILD_ENV=development NODE_ENV=development BABEL_ENV=test vitest run", "test-watch": "cross-env TZ=UTC BUILD_ENV=development NODE_ENV=development BABEL_ENV=test vitest --watch", "test-coverage": "cross-env TZ=UTC BUILD_ENV=development NODE_ENV=development BABEL_ENV=test vitest run --coverage", "test-component": "cross-env TZ=UTC BUILD_ENV=development NODE_ENV=development BABEL_ENV=test vitest run tests/vitest/component", "testcafe": "testcafe", "trace": "webpack --stats-children", "update": "sh -lc 'cd .. && npm update --save --package-lock --ignore-scripts --no-fund && npm install --ignore-scripts --no-fund --no-audit --no-update-notifier'", "security:scan": "npm run -s security:scan-installs && npm run -s security:scan-xss", "security:scan-installs": "sh -lc 'set -e; MATCHES=\"$(rg -n --hidden --glob !**/.git/** -S \"npm (ci|install|update)\" ./Makefile ./package.json 2>/dev/null || true)\"; if [ -z \"$MATCHES\" ]; then echo \"No npm install/update/ci commands found in frontend/\"; exit 0; fi; VIOLATIONS=\"$(printf %s \"$MATCHES\" | rg -v -e \"ignore-scripts\" -e \"install( .*|) -g npm\" -e \"update( .*|) -g npm\" -e \":[0-9]+:\\s*#\" -e \"install-npm\" || true)\"; if [ -n \"$VIOLATIONS\" ]; then echo \"ERROR: npm install/update/ci without --ignore-scripts (exceptions excluded)\"; printf %s\\n \"$VIOLATIONS\"; exit 1; fi; echo \"OK: All frontend installs/updates use --ignore-scripts or are allowed exceptions.\"'", "security:scan-xss": "sh -lc 'set -e; if rg -n --glob \"src/**\" -S \"v-html=\\\"\" src >/dev/null; then echo \"ERROR: v-html usage detected; prefer v-sanitize or $util.sanitizeHtml()\"; rg -n --glob \"src/**\" -S \"v-html=\\\"\" src; exit 1; fi; SINKS=\"$(rg -n --glob \"src/**\" -e \"\\.innerHTML\\s*=\" -e \"\\.outerHTML\\s*=\" -e \"insertAdjacentHTML\\(\" -e \"document\\.write\\(\" -e \"document\\.writeln\\(\" src || true)\"; VIOLATIONS=\"$(printf %s \"$SINKS\" | rg -v -e \"security-reviewed\" -e \"\\.innerHTML\\s*=\\s*[\\\"\\x27]{2}\" || true)\"; if [ -n \"$VIOLATIONS\" ]; then echo \"ERROR: review required for DOM XSS sinks; prefer textContent or approved sanitization paths\"; printf %s\\n \"$VIOLATIONS\"; exit 1; fi; echo \"OK: No unreviewed v-html or dangerous DOM HTML sinks detected.\"'", "prewatch": "node scripts/precompress.js --clean", "watch": "cross-env BUILD_ENV=development NODE_ENV=production webpack --watch" }, "browserslist": [ ">0.25% and last 2 years" ], "dependencies": { "@babel/cli": "^7.29.7", "@babel/core": "^7.29.7", "@babel/plugin-transform-runtime": "^7.29.7", "@babel/preset-env": "^7.29.7", "@babel/register": "^7.29.7", "@babel/runtime": "^7.29.7", "@eslint/eslintrc": "^3.3.6", "@eslint/js": "^9.33.0", "@mdi/font": "^7.4.47", "@photo-sphere-viewer/core": "^5.15.1", "@photo-sphere-viewer/equirectangular-video-adapter": "^5.15.1", "@photo-sphere-viewer/video-plugin": "^5.15.1", "@testing-library/jest-dom": "^6.9.1", "@vitejs/plugin-vue": "^6.0.8", "@vitest/coverage-v8": "^4.1.10", "@vue/compiler-sfc": "^3.5.41", "@vue/language-server": "^3.3.9", "@vue/test-utils": "^2.4.11", "@vvo/tzdb": "^6.198.0", "axios": "1.19.0", "axios-mock-adapter": "^2.1.0", "babel-loader": "^10.1.1", "babel-plugin-polyfill-corejs3": "^0.14.2", "browserslist": "^4.28.7", "core-js": "^3.50.0", "cross-env": "^10.1.0", "css-loader": "^7.1.4", "cssnano": "^7.1.9", "eslint": "^9.39.5", "eslint-config-prettier": "^10.1.8", "eslint-formatter-pretty": "^6.0.1", "eslint-plugin-html": "^8.1.4", "eslint-plugin-import": "^2.32.0", "eslint-plugin-node": "^11.1.0", "eslint-plugin-vue": "^10.10.0", "eslint-plugin-vuetify": "^2.7.2", "eslint-webpack-plugin": "^5.0.3", "eventsource-polyfill": "^0.9.6", "file-loader": "^6.2.0", "file-saver": "^2.0.5", "globals": "^17.9.0", "hls.js": "^1.6.17", "i": "^0.3.7", "jsdom": "^29.1.1", "luxon": "^3.7.2", "maplibre-gl": "^5.24.0", "memoize-one": "^6.0.0", "mini-css-extract-plugin": "^2.10.2", "minimist": "^1.2.8", "node-storage-shim": "^2.0.1", "passive-events-support": "^1.1.0", "pdfjs-dist": "^6.2.108", "photoswipe": "^5.4.4", "playwright": "^1.62.1", "postcss": "^8.5.26", "postcss-import": "^16.1.1", "postcss-loader": "^8.2.1", "postcss-preset-env": "^10.6.1", "postcss-reporter": "^7.1.0", "prettier": "^3.9.6", "pubsub-js": "^1.9.5", "regenerator-runtime": "^0.14.1", "resolve-url-loader": "^5.0.0", "sanitize-html": "^2.17.6", "sass": "^1.102.0", "sass-loader": "^16.0.8", "sockette": "^2.0.6", "style-loader": "^4.0.0", "svg-url-loader": "^8.1.0", "tar": "^7.5.22", "url-loader": "^4.1.1", "util": "^0.12.5", "vite": "^8.2.1", "vitest": "^4.1.10", "vue": "^3.5.41", "vue-3-sanitize": "^0.1.4", "vue-loader": "^17.4.2", "vue-loader-plugin": "^1.3.0", "vue-luxon": "^0.10.0", "vue-router": "^4.6.4", "vue-sanitize-directive": "^0.2.1", "vue-style-loader": "^4.1.3", "vue3-gettext": "^2.4.0", "vuetify": "3.12.2", "webpack": "5.107.2", "webpack-bundle-analyzer": "^5.3.1", "webpack-cli": "^6.0.1", "webpack-hot-middleware": "^2.26.1", "webpack-manifest-plugin": "^5.0.1", "webpack-md5-hash": "^0.0.6", "webpack-merge": "^6.0.1", "webpack-plugin-vuetify": "^3.1.3", "workbox-webpack-plugin": "^7.4.1" }, "engines": { "node": ">= 22.15.0", "npm": ">= 9.0.0", "yarn": "please use npm" }, "overrides": { "serialize-javascript": "^7.0.5" } }