Finish version bump

Address security vulnerabilities in dependencies
Move favicons
2025-11-25 05:14:23 +00:00 · 2025-03-18 11:22:43 +01:00 · 2025-03-18 11:20:46 +01:00 · 2025-02-24 11:48:02 +01:00 · 2025-02-18 11:47:59 +00:00 · 2025-02-10 07:23:20 +01:00
11 changed files with 1303 additions and 770 deletions
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -6,7 +6,7 @@ libreevent gets security updates as part of regular software updates. Since ther

 | Version | Supported          |
 | ------- | ------------------ |
-| 1.0.x   | :white_check_mark: |
+| 1.x.x   | :white_check_mark: |
 | 0.x.x   | :x:                |

 ## Reporting a Vulnerability
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "libreevent",
-  "version": "1.1.4",
+  "version": "1.1.8",
  "description": "A free and open source event management solution",
  "main": "/dist/app.js",
  "scripts": {
--- a/package.sh
+++ b/package.sh
@@ -6,7 +6,7 @@
 #
 #

-v="V1.1.4"
+v="V1.1.8"

 echo "
 _ _ _                                   _   
--- a/src/server/package-lock.json
+++ b/src/server/package-lock.json
@@ -1,12 +1,12 @@
 {
  "name": "libreevent",
-  "version": "1.1.4",
+  "version": "1.1.8",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "libreevent",
-      "version": "1.1.4",
+      "version": "1.1.8",
      "license": "GPL-3.0-or-later",
      "dependencies": {
        "@pdfme/generator": "^1.2.6",
@@ -464,9 +464,9 @@
      }
    },
    "node_modules/axios": {
-      "version": "1.7.4",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.4.tgz",
-      "integrity": "sha512-DukmaFRnY6AzAALSH4J2M3k6PkaC+MfaAGdEERRWcC9q3/TWQwLpHR8ZRLKTdQ3aBDL64EdluRDjJqKw+BPZEw==",
+      "version": "1.8.3",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.8.3.tgz",
+      "integrity": "sha512-iP4DebzoNlP/YN2dpwCgb8zoCmhtkajzS48JvwmkSkXvPI3DHc7m+XYL5tGnSlJtR6nImXZmdCuN5aP8dh1d8A==",
      "license": "MIT",
      "dependencies": {
        "follow-redirects": "^1.15.6",
@@ -784,19 +784,19 @@
      }
    },
    "node_modules/cookie": {
-      "version": "0.4.1",
-      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.4.1.tgz",
-      "integrity": "sha512-ZwrFkGJxUR3EIoXtO+yVE69Eb7KlixbaeAWfBQB9vVsNn/o+Yw69gBWSSDK825hQNdN+wF8zELf3dFNl/kxkUA==",
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
      "engines": {
        "node": ">= 0.6"
      }
    },
    "node_modules/cookie-parser": {
-      "version": "1.4.6",
-      "resolved": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.4.6.tgz",
-      "integrity": "sha512-z3IzaNjdwUC2olLIB5/ITd0/setiaFMLYiZJle7xg5Fe9KWAceil7xszYfHHBtDFYLSgJduS2Ty0P1uJdPDJeA==",
+      "version": "1.4.7",
+      "resolved": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.4.7.tgz",
+      "integrity": "sha512-nGUvgXnotP3BsjiLX2ypbQnWoGUPIIfHQNZkkC668ntrzGWEZVW70HDEB1qnNGMicPje6EttlIgzo51YSwNQGw==",
      "dependencies": {
-        "cookie": "0.4.1",
+        "cookie": "0.7.2",
        "cookie-signature": "1.0.6"
      },
      "engines": {
@@ -1065,9 +1065,9 @@
      }
    },
    "node_modules/express": {
-      "version": "4.21.0",
-      "resolved": "https://registry.npmjs.org/express/-/express-4.21.0.tgz",
-      "integrity": "sha512-VqcNGcj/Id5ZT1LZ/cfihi3ttTn+NJmkli2eZADigjq29qTlWi/hAQ43t/VLPq8+UX06FCEx3ByOYet6ZFblng==",
+      "version": "4.21.2",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.21.2.tgz",
+      "integrity": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==",
      "license": "MIT",
      "dependencies": {
        "accepts": "~1.3.8",
@@ -1075,7 +1075,7 @@
        "body-parser": "1.20.3",
        "content-disposition": "0.5.4",
        "content-type": "~1.0.4",
-        "cookie": "0.6.0",
+        "cookie": "0.7.1",
        "cookie-signature": "1.0.6",
        "debug": "2.6.9",
        "depd": "2.0.0",
@@ -1089,7 +1089,7 @@
        "methods": "~1.1.2",
        "on-finished": "2.4.1",
        "parseurl": "~1.3.3",
-        "path-to-regexp": "0.1.10",
+        "path-to-regexp": "0.1.12",
        "proxy-addr": "~2.0.7",
        "qs": "6.13.0",
        "range-parser": "~1.2.1",
@@ -1104,15 +1104,19 @@
      },
      "engines": {
        "node": ">= 0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
      }
    },
    "node_modules/express-session": {
-      "version": "1.17.3",
-      "resolved": "https://registry.npmjs.org/express-session/-/express-session-1.17.3.tgz",
-      "integrity": "sha512-4+otWXlShYlG1Ma+2Jnn+xgKUZTMJ5QD3YvfilX3AcocOAbIkVylSWEklzALe/+Pu4qV6TYBj5GwOBFfdKqLBw==",
+      "version": "1.18.1",
+      "resolved": "https://registry.npmjs.org/express-session/-/express-session-1.18.1.tgz",
+      "integrity": "sha512-a5mtTqEaZvBCL9A9aqkrtfz+3SMDhOVUnjafjo+s7A9Txkq+SVX2DLvSp1Zrv4uCXa3lMSK3viWnh9Gg07PBUA==",
      "dependencies": {
-        "cookie": "0.4.2",
-        "cookie-signature": "1.0.6",
+        "cookie": "0.7.2",
+        "cookie-signature": "1.0.7",
        "debug": "2.6.9",
        "depd": "~2.0.0",
        "on-headers": "~1.0.2",
@@ -1124,13 +1128,10 @@
        "node": ">= 0.8.0"
      }
    },
-    "node_modules/express-session/node_modules/cookie": {
-      "version": "0.4.2",
-      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.4.2.tgz",
-      "integrity": "sha512-aSWTXFzaKWkvHO1Ny/s+ePFpvKsPnjc551iI41v3ny/ow6tBG5Vd+FuqGNhh1LxOmVzOlGUriIlOaokOvhaStA==",
-      "engines": {
-        "node": ">= 0.6"
-      }
+    "node_modules/express-session/node_modules/cookie-signature": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.7.tgz",
+      "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA=="
    },
    "node_modules/express-session/node_modules/debug": {
      "version": "2.6.9",
@@ -1146,9 +1147,9 @@
      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A=="
    },
    "node_modules/express/node_modules/cookie": {
-      "version": "0.6.0",
-      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.6.0.tgz",
-      "integrity": "sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==",
+      "version": "0.7.1",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
+      "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==",
      "engines": {
        "node": ">= 0.6"
      }
@@ -1994,15 +1995,16 @@
      }
    },
    "node_modules/nanoid": {
-      "version": "3.3.6",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.6.tgz",
-      "integrity": "sha512-BGcqMMJuToF7i1rt+2PWSNVnWIkGCU78jBG3RxO/bZlnZPK2Cmi2QaffxGO/2RvWi9sL+FAiRiXMgsyxQ1DIDA==",
+      "version": "3.3.8",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.8.tgz",
+      "integrity": "sha512-WNLf5Sd8oZxOm+TzppcYk8gVOgP+l58xNy58D0nbUnOxOWRWvlcCV4kUF7ltmI6PsrLl/BgKEyS4mqsGChFN0w==",
      "funding": [
        {
          "type": "github",
          "url": "https://github.com/sponsors/ai"
        }
      ],
+      "license": "MIT",
      "bin": {
        "nanoid": "bin/nanoid.cjs"
      },
@@ -2225,9 +2227,9 @@
      }
    },
    "node_modules/path-to-regexp": {
-      "version": "0.1.10",
-      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.10.tgz",
-      "integrity": "sha512-7lf7qcQidTku0Gu3YDPc8DJ1q7OOucfa/BSsIwjuh56VU7katFvuM8hULfkwB3Fns/rsVF7PwPKVw1sl5KQS9w==",
+      "version": "0.1.12",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz",
+      "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==",
      "license": "MIT"
    },
    "node_modules/pdf-lib": {
--- a/src/server/package.json
+++ b/src/server/package.json
@@ -1,6 +1,6 @@
 {
  "name": "libreevent",
-  "version": "1.1.4",
+  "version": "1.1.8",
  "description": "Free & Open source event management solution",
  "main": "index.js",
  "directories": {
--- a/src/webapp/main/favicon.ico
+++ b/src/webapp/main/favicon.ico
--- a/src/webapp/main/package-lock.json
+++ b/src/webapp/main/package-lock.json
--- a/src/webapp/main/package.json
+++ b/src/webapp/main/package.json
@@ -1,6 +1,6 @@
 {
  "name": "libreevent",
-  "version": "1.1.4",
+  "version": "1.1.8",
  "private": false,
  "scripts": {
    "dev": "vite --host",
@@ -18,9 +18,9 @@
    "vue3-draggable-resizable": "^1.6.5"
  },
  "devDependencies": {
-    "@vitejs/plugin-vue": "^5.1.4",
+    "@vitejs/plugin-vue": "^5.2.0",
    "eslint": "^8.39.0",
    "eslint-plugin-vue": "^9.17.0",
-    "vite": "^5.4.6"
+    "vite": "^6.2.2"
  }
 }
--- a/src/webapp/setup/favicon.ico
+++ b/src/webapp/setup/favicon.ico
--- a/src/webapp/setup/package-lock.json
+++ b/src/webapp/setup/package-lock.json
--- a/src/webapp/setup/package.json
+++ b/src/webapp/setup/package.json
@@ -1,6 +1,6 @@
 {
  "name": "libreevent-setup",
-  "version": "1.1.4",
+  "version": "1.1.8",
  "private": true,
  "scripts": {
    "dev": "vite",
@@ -14,9 +14,9 @@
    "vue-router": "^4.2.2"
  },
  "devDependencies": {
-    "@vitejs/plugin-vue": "^4.2.3",
+    "@vitejs/plugin-vue": "^5.2.3",
    "eslint": "^8.39.0",
    "eslint-plugin-vue": "^9.11.0",
-    "vite": "^4.5.3"
+    "vite": "^6.2.2"
  }
 }
Author	SHA1	Message	Date
Janis Hutz	ef90b9f089	Finish version bump	2025-03-18 11:22:43 +01:00
Janis Hutz	e1980c21d3	Address security vulnerabilities in dependencies	2025-03-18 11:20:46 +01:00
Janis Hutz	27cf7b04d8	Move favicons	2025-02-24 11:48:02 +01:00
Janis Hutz	2c7a476321	Update SECURITY.md	2025-02-18 11:47:59 +00:00
Janis Hutz	57feeb0f50	Address security vulnerabilities in dependencies, Version bump	2025-02-10 07:23:20 +01:00
Janis Hutz	b71f8e42f8	version bump	2024-10-11 14:16:11 +02:00
Janis Hutz	c99fe308ec	Merge pull request #25 from janishutz/dependabot/npm_and_yarn/src/server/multi-b9178efa7f	2024-10-11 08:17:17 +00:00
dependabot[bot]	8aba1aff3c	Bump cookie, cookie-parser, express and express-session in /src/server Bumps [cookie](https://github.com/jshttp/cookie) to 0.7.2 and updates ancestor dependencies [cookie](https://github.com/jshttp/cookie), [cookie-parser](https://github.com/expressjs/cookie-parser), [express](https://github.com/expressjs/express) and [express-session](https://github.com/expressjs/session). These dependencies need to be updated together. Updates `cookie` from 0.4.1 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](https://github.com/jshttp/cookie/compare/v0.4.1...v0.7.2) Updates `cookie-parser` from 1.4.6 to 1.4.7 - [Release notes](https://github.com/expressjs/cookie-parser/releases) - [Changelog](https://github.com/expressjs/cookie-parser/blob/master/HISTORY.md) - [Commits](https://github.com/expressjs/cookie-parser/compare/1.4.6...1.4.7) Updates `express` from 4.21.0 to 4.21.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.1/History.md) - [Commits](https://github.com/expressjs/express/compare/4.21.0...4.21.1) Updates `express-session` from 1.17.3 to 1.18.1 - [Release notes](https://github.com/expressjs/session/releases) - [Changelog](https://github.com/expressjs/session/blob/master/HISTORY.md) - [Commits](https://github.com/expressjs/session/compare/v1.17.3...v1.18.1) --- updated-dependencies: - dependency-name: cookie dependency-type: indirect - dependency-name: cookie-parser dependency-type: direct:production - dependency-name: express dependency-type: direct:production - dependency-name: express-session dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2024-10-10 13:45:26 +00:00
Janis Hutz	2258aff2b7	complete version update	2024-10-02 18:39:56 +02:00
Janis Hutz	d0589dfbd7	address security vulnerability in rollup.js - Update coming soon	2024-10-02 14:49:38 +02:00