Commit graph

5055 commits

Author SHA1 Message Date
a9e5c204fe Upgrade CodeMirror package to latest version 5.x 2023-08-26 18:14:42 +02:00
e59635f4ae Upgrade Less.js package to the latest version 2023-08-26 18:14:42 +02:00
f9c8214348 Upgrade JSDoc package to the latest version 2023-08-26 18:14:42 +02:00
3e29317264 Upgrade jQuery to the latest version 2023-08-26 18:14:42 +02:00
6a12114927 Upgrade Alpine.js package to the latest version 2023-08-26 18:14:42 +02:00
c437076c49 Pin versions 2023-08-26 17:05:05 +02:00
ffa3f65f10 Rename dev scripts/prefix to watch 2023-08-26 16:58:35 +02:00
31a1cb0a86 Migrate from Yarn back to NPM 2023-08-26 16:35:10 +02:00
50ff264517 Fix version bump of GSON Java library 2023-05-21 12:42:40 +02:00
416898f83b
Merge pull request #356 from antville/355-harden-search-against-sql-injection
Harden search against SQL injection
2023-03-05 15:33:16 +01:00
f42812d771 Transform SQL search queries to support prepared statements 2023-03-05 13:28:25 +01:00
f25200f5fd Support prepared statements in Sql library 2023-03-05 13:27:19 +01:00
a55999a14c Let Sql.prepare() automagically set int and string values
Return the actual prepared statement for further processing
2023-03-05 13:26:20 +01:00
c9f25316a2 Revert to previous code
with the exception of introducing an option for prepared statements
2023-03-05 13:22:29 +01:00
ab10032de9 Merge branch 'main' into 355-harden-search-against-sql-injection 2023-03-04 00:20:19 +01:00
1356b7cb67
Merge pull request #358 from antville/357-upgrade-codeql-action
Bump CodeQL Action to version 2
2023-03-04 00:17:34 +01:00
e3dfbc704e Bump CodeQL Action to version 2 2023-03-03 23:13:29 +00:00
c7cf535652 Prevent SQL injection in search by using prepared statement 2023-03-03 17:59:59 +01:00
a5424825b8 Add Sql.prepare() method for handling prepared statements 2023-03-03 17:59:24 +01:00
dependabot[bot]
9ab30b47e8
build(deps): bump com.github.node-gradle.node from 3.1.1 to 3.5.1
Bumps com.github.node-gradle.node from 3.1.1 to 3.5.1.

---
updated-dependencies:
- dependency-name: com.github.node-gradle.node
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-27 16:01:51 +00:00
dependabot[bot]
04550673f9
build(deps): bump commonmark-ext-autolink from 0.18.1 to 0.21.0
Bumps [commonmark-ext-autolink](https://github.com/commonmark/commonmark-java) from 0.18.1 to 0.21.0.
- [Release notes](https://github.com/commonmark/commonmark-java/releases)
- [Changelog](https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/commonmark/commonmark-java/compare/commonmark-parent-0.18.1...commonmark-parent-0.21.0)

---
updated-dependencies:
- dependency-name: org.commonmark:commonmark-ext-autolink
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-17 16:05:49 +00:00
dependabot[bot]
7852d26b6c
build(deps): bump org.ajoberstar.grgit from 4.1.1 to 5.0.0
Bumps [org.ajoberstar.grgit](https://github.com/ajoberstar/grgit) from 4.1.1 to 5.0.0.
- [Release notes](https://github.com/ajoberstar/grgit/releases)
- [Commits](https://github.com/ajoberstar/grgit/compare/4.1.1...5.0.0)

---
updated-dependencies:
- dependency-name: org.ajoberstar.grgit
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-11 16:10:16 +00:00
dependabot[bot]
40e1d2d6fa
build(deps): bump com.github.jk1.dependency-license-report
Bumps com.github.jk1.dependency-license-report from 2.0 to 2.1.

---
updated-dependencies:
- dependency-name: com.github.jk1.dependency-license-report
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-20 16:15:29 +00:00
af1f560c66
Merge pull request #308 from antville/dependabot/gradle/org.ajoberstar.grgit-4.1.1
build(deps): bump org.ajoberstar.grgit from 4.1.0 to 4.1.1
2021-12-11 16:03:46 +01:00
6ec7fccac9 Merge remote-tracking branch 'origin/dependabot/gradle/org.ajoberstar.grgit-4.1.1' into dependabot/gradle/org.ajoberstar.grgit-4.1.1 2021-12-11 16:00:38 +01:00
288e21a710 Merge branch 'main' into dependabot/gradle/org.ajoberstar.grgit-4.1.1 2021-12-11 15:55:53 +01:00
dependabot[bot]
b063643e2f
build(deps): bump org.ajoberstar.grgit from 4.1.0 to 4.1.1
Bumps org.ajoberstar.grgit from 4.1.0 to 4.1.1.

---
updated-dependencies:
- dependency-name: org.ajoberstar.grgit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-12-11 14:55:34 +00:00
81a5bac780
Merge pull request #307 from antville/dependabot/gradle/com.github.node-gradle.node-3.1.1
build(deps): bump com.github.node-gradle.node from 3.1.0 to 3.1.1
2021-12-11 15:54:56 +01:00
1f5094c165 Merge branch 'main' into dependabot/gradle/com.github.node-gradle.node-3.1.1 2021-12-11 15:50:43 +01:00
f4de3114b8
Merge pull request #306 from antville/dependabot/gradle/com.github.jk1.dependency-license-report-2.0
build(deps): bump com.github.jk1.dependency-license-report from 1.16 to 2.0
2021-12-11 15:49:59 +01:00
c9f7043a90 Merge branch 'main' into dependabot/gradle/com.github.jk1.dependency-license-report-2.0 2021-12-11 15:41:36 +01:00
b7e7645eef
Merge pull request #293 from antville/dependabot/npm_and_yarn/codemirror-5.64.0
build(deps): bump codemirror from 5.61.0 to 5.64.0
2021-12-11 15:31:51 +01:00
dependabot[bot]
0dc29460e4
build(deps): bump org.ajoberstar.grgit from 4.1.0 to 4.1.1
Bumps org.ajoberstar.grgit from 4.1.0 to 4.1.1.

---
updated-dependencies:
- dependency-name: org.ajoberstar.grgit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-12-11 12:01:37 +00:00
5f4dc8b314 Merge branch 'main' into dependabot/npm_and_yarn/codemirror-5.64.0 2021-12-11 13:01:36 +01:00
dbe96d4cdd
Merge pull request #289 from antville/dependabot/npm_and_yarn/less-4.1.2
build(deps-dev): bump less from 4.1.1 to 4.1.2
2021-12-11 13:00:54 +01:00
cf4486e397 Merge branch 'main' into dependabot/npm_and_yarn/less-4.1.2 2021-12-11 12:58:01 +01:00
180d271c66 Bump Node and Yarn versions 2021-12-11 12:53:58 +01:00
71c3eec62d Merge branch 'main' into dependabot/npm_and_yarn/less-4.1.2 2021-12-11 12:44:51 +01:00
dependabot[bot]
99c9f00db4
build(deps): bump com.github.node-gradle.node from 3.1.0 to 3.1.1
Bumps com.github.node-gradle.node from 3.1.0 to 3.1.1.

---
updated-dependencies:
- dependency-name: com.github.node-gradle.node
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-12-11 11:42:04 +00:00
e27958fd2f
Merge pull request #288 from antville/dependabot/gradle/org.jsoup-jsoup-1.14.3
build(deps): bump jsoup from 1.13.1 to 1.14.3
2021-12-11 12:41:29 +01:00
174864b3aa Bump JSoup version in JS code 2021-12-11 12:33:58 +01:00
dependabot[bot]
adf2d4002d
build(deps): bump jsoup from 1.13.1 to 1.14.3
Bumps [jsoup](https://github.com/jhy/jsoup) from 1.13.1 to 1.14.3.
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES)
- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.13.1...jsoup-1.14.3)

---
updated-dependencies:
- dependency-name: org.jsoup:jsoup
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-12-11 11:29:02 +00:00
dependabot[bot]
559d95cf16
build(deps): bump com.github.jk1.dependency-license-report
Bumps com.github.jk1.dependency-license-report from 1.16 to 2.0.

---
updated-dependencies:
- dependency-name: com.github.jk1.dependency-license-report
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-12-11 11:28:36 +00:00
9c737b5552
Merge pull request #305 from antville/upgrade-commonmark-0.17.1-0.18.1
Upgrade commonmark 0.17.1 to 0.18.1
2021-12-11 12:28:17 +01:00
e82eda3252 Merge remote-tracking branch 'origin/dependabot/gradle/org.commonmark-commonmark-ext-gfm-tables-0.18.1' into upgrade-commonmark-0.17.1-0.18.1
Fix #295 #296 #297 #298
2021-12-11 12:26:25 +01:00
229209c3a3 Merge remote-tracking branch 'origin/dependabot/gradle/org.commonmark-commonmark-ext-gfm-strikethrough-0.18.1' into upgrade-commonmark-0.17.1-0.18.1 2021-12-11 12:13:06 +01:00
1d445b72f0 Merge remote-tracking branch 'origin/dependabot/gradle/org.commonmark-commonmark-ext-autolink-0.18.1' into upgrade-commonmark-0.17.1-0.18.1 2021-12-11 12:12:20 +01:00
2ec999c49d Merge remote-tracking branch 'origin/dependabot/gradle/org.commonmark-commonmark-0.18.1' into upgrade-commonmark-0.17.1-0.18.1 2021-12-11 12:09:54 +01:00
8f8a5fa341
Merge pull request #304 from antville/fix-codeql-js-incomplete-sanitization
Fix CodeQL issue js/incomplete-sanitization
2021-12-11 11:48:40 +01:00
dbec5531e8 Fix CodeQL issue js/incomplete-sanitization 2021-12-11 11:45:54 +01:00