- Sep 08, 2023
-
-
Saurabh Kumar authored
Add black and prettier check to lint
-
- Sep 05, 2023
-
-
Saurabh Kumar authored
Use reference scale from tailwind to update the styles of different headers. Overall the fonts for headers were little too large and they are now little scaled down so they don't look blown up. Sensible formatting is applied to form elements, esp. help-text is made smaller. Adminbar component used on even more pages. PS: A lot of files are touched and also a lot of code cleanup can still be done. So for now the best way to test this would be to navigate through the pages pages and find any obvious issues.
-
- Aug 11, 2023
-
-
Saurabh Kumar authored
- Add black, djhtml, prettier - Add precommit This PR add configurations for black, djhtml and prettier. - black is used for formatting python files - djhtml for formatting html files. Use `{# fmt: off #}` and `{# fmt: on #}` where needed. - prettier for formatting of sass,css,yml and js files Note: prettier picks up some of it's config from `.editorconfig`, so it's updated appropriately Formating of mardown files, minified or vendored js files are ignored. Formatting used off-the-self rules for better consistency with the community as large. The formatting is not applied to all the files as it will introduce a lot of merge conflict with current PRs, instead `pre-commit` config is provide which can be installed by `precommit install` locally. It will format only the modified files in the PR/commits. Once majority of the current active PRs are either rebased & formatted using precommit or merged, we can run the `make fmt` on the full repo and activate additional prettier and black checks in our lint rules. The modified sass files fixes the eslint error that would came up if we were to apply the prettier formatter on them. Fixes #3500
-
- Jul 13, 2023
-
-
Fredrik Jonsson authored
-
- Jun 15, 2023
-
-
Saurabh Kumar authored
Fixes #3430 - [x] Simplified code - [x] Use postgres FTS search - [x] Improve UX for filters - [x] Improve submission listing - [x] Add filter for submission date, OTF have asked about this. - [x] Add submission ID search, see https://github.com/HyphaApp/hypha/pull/3294 - [x]
Make sure the batch actions are working - [x] Permissions check for batch actions - [x] Ensure search index works after submissions is updated - [x] ~Integrate Django messages framework with htmx responses~ (Not needed) - [x] [Fix Polynomial regular expression used on uncontrolled data](https://github.com/HyphaApp/hypha/security/code-scanning/74 ) - [ ] make bulk update status working, currently it's hidden. --------- Co-authored-by:Fredrik Jonsson <frjo@xdeb.org>
-
- Mar 20, 2023
-
-
Saurabh Kumar authored
Fixes #ISSUEID Introduce tailwindcss[1] utilities and django-web-component[2] for frontend design isolation and reusability. Notes: - Saas rules take preference over the tailwind (we might want to change it) - In the future, the saas should be depreciated, and reusable classes should be updated to use tailwindcss [1] https://tailwindcss.com/ [2] https://github.com/Xzya/django-web-components --------- Co-authored-by:
Fredrik Jonsson <frjo@xdeb.org>
-
- Feb 20, 2023
-
-
Sandeep Chauhan authored
Partial Fix #3127 --------- Co-authored-by:
Fredrik Jonsson <frjo@xdeb.org>
-
- Jan 03, 2023
-
-
dependabot[bot] authored
Bumps [json5](https://github.com/json5/json5) from 2.2.1 to 2.2.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/releases">json5's releases</a>.</em></p> <blockquote> <h2>v2.2.3</h2> <ul> <li>Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/299">#299</a>)</li> </ul> <h2>v2.2.2</h2> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://github-redirect.dependabot.com/json5/json5/issues/295">#295</a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/blob/main/CHANGELOG.md">json5's changelog</a>.</em></p> <blockquote> <h3>v2.2.3 [<a href="https://github.com/json5/json5/tree/v2.2.3">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.2...v2.2.3">diff</a>]</h3> <ul> <li>Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/299">#299</a>)</li> </ul> <h3>v2.2.2 [<a href="https://github.com/json5/json5/tree/v2.2.2">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.1...v2.2.2">diff</a>]</h3> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://github-redirect.dependabot.com/json5/json5/issues/295">#295</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/json5/json5/commit/c3a75242772a5026a49c4017a16d9b3543b62776"><code>c3a7524</code></a> 2.2.3</li> <li><a href="https://github.com/json5/json5/commit/94fd06d82eeed225fa172f6fb2ca27375cbd2e39"><code>94fd06d</code></a> docs: update CHANGELOG for v2.2.3</li> <li><a href="https://github.com/json5/json5/commit/3b8cebf0c474a8b20c78bd75c89cca0c4dce84ce"><code>3b8cebf</code></a> docs(security): use GitHub security advisories</li> <li><a href="https://github.com/json5/json5/commit/f0fd9e194dde282caff114a110f4fac635f3a62c"><code>f0fd9e1</code></a> docs: publish a security policy</li> <li><a href="https://github.com/json5/json5/commit/6a91a05fffeda16ff6b3b5008b6b340d42d31ec0"><code>6a91a05</code></a> docs(template): bug -> bug report</li> <li><a href="https://github.com/json5/json5/commit/14f8cb186e8abdfaccf6527171da7b1224374650"><code>14f8cb1</code></a> 2.2.2</li> <li><a href="https://github.com/json5/json5/commit/10cc7ca9169b59c5e0f5afc03dbd870cd06bcc46"><code>10cc7ca</code></a> docs: update CHANGELOG for v2.2.2</li> <li><a href="https://github.com/json5/json5/commit/7774c1097993bc3ce9f0ac4b722a32bf7d6871c8"><code>7774c10</code></a> fix: add <strong>proto</strong> to objects and arrays</li> <li><a href="https://github.com/json5/json5/commit/edde30abd8b22facf2c06c72586b9f6edf12700d"><code>edde30a</code></a> Readme: slight tweak to intro</li> <li><a href="https://github.com/json5/json5/commit/97286f8bd542c89dcee096bc05dd28ed2dfc1e16"><code>97286f8</code></a> Improve example in readme</li> <li>Additional commits viewable in <a href="https://github.com/json5/json5/compare/v2.2.1...v2.2.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/HyphaApp/hypha/network/alerts ). </details> Signed-off-by:
dependabot[bot] <support@github.com> Co-authored-by:
dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
- Dec 07, 2022
-
-
Fredrik Jonsson authored
Fixes #3074 The React app or "three column view" was built for an organisation that no longer use Hypha. No current implementors use it. Removing it simplifies Hypha quite a bit. Co-authored-by:
Saurabh Kumar <theskumar@users.noreply.github.com>
-
- Nov 17, 2022
-
-
dependabot[bot] authored
Bumps [loader-utils](https://github.com/webpack/loader-utils) from 1.4.1 to 1.4.2. - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](https://github.com/webpack/loader-utils/compare/v1.4.1...v1.4.2 ) --- updated-dependencies: - dependency-name: loader-utils dependency-type: indirect ... Signed-off-by:
dependabot[bot] <support@github.com>
-
- Nov 09, 2022
-
-
dependabot[bot] authored
Bumps [loader-utils](https://github.com/webpack/loader-utils) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.1/CHANGELOG.md) - [Commits](https://github.com/webpack/loader-utils/compare/v1.4.0...v1.4.1 ) --- updated-dependencies: - dependency-name: loader-utils dependency-type: indirect ... Signed-off-by:
dependabot[bot] <support@github.com>
-
- Sep 01, 2022
-
-
Fredrik Jonsson authored
-
- Jul 20, 2022
-
-
dependabot[bot] authored
Bumps [terser](https://github.com/terser/terser) from 5.11.0 to 5.14.2. - [Release notes](https://github.com/terser/terser/releases) - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](https://github.com/terser/terser/commits ) --- updated-dependencies: - dependency-name: terser dependency-type: indirect ... Signed-off-by:
dependabot[bot] <support@github.com>
-
- Apr 14, 2022
-
-
Fredrik Jonsson authored
-
- Mar 26, 2022
-
-
dependabot[bot] authored
Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. - [Release notes](https://github.com/substack/minimist/releases) - [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6 ) --- updated-dependencies: - dependency-name: minimist dependency-type: indirect ... Signed-off-by:
dependabot[bot] <support@github.com>
-
dependabot[bot] authored
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/digitalbazaar/forge/releases) - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](https://github.com/digitalbazaar/forge/compare/v1.2.1...v1.3.0 ) --- updated-dependencies: - dependency-name: node-forge dependency-type: indirect ... Signed-off-by:
dependabot[bot] <support@github.com>
-
- Mar 16, 2022
-
-
Fredrik Jonsson authored
-
- Mar 08, 2022
-
-
Fredrik Jonsson authored
-
Fredrik Jonsson authored
-
Fredrik Jonsson authored
-
Fredrik Jonsson authored
-
vimal1083 authored
-
vimal1083 authored
-
vimal1083 authored
-
vimal1083 authored
-
vimal1083 authored
-
- Feb 28, 2022
-
-
dependabot[bot] authored
Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.5.7 to 1.5.10. - [Release notes](https://github.com/unshiftio/url-parse/releases) - [Commits](https://github.com/unshiftio/url-parse/compare/1.5.7...1.5.10 ) --- updated-dependencies: - dependency-name: url-parse dependency-type: indirect ... Signed-off-by:
dependabot[bot] <support@github.com>
-
- Feb 17, 2022
-
-
dependabot[bot] authored
Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.5.3 to 1.5.7. - [Release notes](https://github.com/unshiftio/url-parse/releases) - [Commits](https://github.com/unshiftio/url-parse/compare/1.5.3...1.5.7 ) --- updated-dependencies: - dependency-name: url-parse dependency-type: indirect ... Signed-off-by:
dependabot[bot] <support@github.com>
-
- Feb 12, 2022
-
-
dependabot[bot] authored
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.7 to 1.14.8. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.14.7...v1.14.8 ) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by:
dependabot[bot] <support@github.com>
-
- Feb 10, 2022
-
-
Fredrik Jonsson authored
-
vimal1083 authored
-
- Jan 31, 2022
-
-
Fredrik Jonsson authored
-
sandeepsajan0 authored
-
Fredrik Jonsson authored
-
- Jan 26, 2022
-
-
Fredrik Jonsson authored
-
Fredrik Jonsson authored
-
- Jan 13, 2022
-
-
dependabot[bot] authored
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.5 to 1.14.7. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.14.5...v1.14.7 ) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by:
dependabot[bot] <support@github.com>
-
- Dec 07, 2021
-
-
Fredrik Jonsson authored
-
Fredrik Jonsson authored
-
dependabot[bot] authored
Bumps [tinymce](https://github.com/tinymce/tinymce/tree/HEAD/modules/tinymce) from 5.8.2 to 5.10.2. - [Release notes](https://github.com/tinymce/tinymce/releases) - [Changelog](https://github.com/tinymce/tinymce/blob/develop/modules/tinymce/CHANGELOG.md) - [Commits](https://github.com/tinymce/tinymce/commits/5.10.2/modules/tinymce ) --- updated-dependencies: - dependency-name: tinymce dependency-type: indirect ... Signed-off-by:
dependabot[bot] <support@github.com>
-