| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
If you generate a Checkboxradio from a checkbox/radio with a label that
contains encoded HTML, e.g. `<em>test</em>` this will work fine
at first. If, however a refresh is triggered on that instance (explicitly or
e.g. by turning it into a `Controlgroup`), the previously escaped HTML will
now be evaluated.
If the label was created based on some user input, this could lead to
unexpected code execution even though the initial output was escaped.
Fixes gh-2101
Closes gh-2102
|
| |
|
| |
|
|
|
| |
Closes gh-2067
|
|
|
|
|
|
| |
Replaces a call to the deprecated jQuery `.focus()` method
with `.trigger("focus")`.
Closes gh-2053
|
| |
|
|
|
|
|
|
| |
Fixes gh-2048
Closes gh-2050
Closes gh-2100
|
|
|
|
|
|
|
| |
Follow-up to dfff5e7e999453f5d080c184bd4e3fdbfc93b83e
Fixes gh-2048
Closes gh-2050
|
|
|
|
|
|
| |
Fixes gh-2048
Closes gh-2050
Ref gh-2067
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)
Closes gh-2098
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v3)
Closes gh-2097
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 1 to 3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v1...v3)
Closes gh-2096
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
|
|
|
| |
Closes gh-2093
Ref jquery/jquery#5057
|
|
|
|
|
|
|
| |
More details:
https://github.com/advisories/GHSA-rm36-94g8-835r
Fixes gh-2090
Closes gh-2091
|
|
|
|
|
|
|
| |
Both unminified & minified versions of JS & CSS files are included, for all
themes, as well as images.
Fixes gh-2011
Closes gh-2059
|
| |
|
|
|
|
|
|
| |
Unfortunately, we cannot update all of them to their latest versions as some
of them now require Node.js 12 and we need to be able to build on Node 10 as
that's what our Jenkins runs.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
jQuery UI 1.13.0 changed the logic attaching the `_untrackClassesElement`
listener in the `_classes` widget method; one of the side effects was calling
`this._on` for each node that needed the listener. That caused a severe
performance degradation for large comboboxes as each `_on` jQuery UI call
causes a jQuery `add` call that calls Sizzle's `uniqueSort` underneath.
Instead, collect the nodes that need the listener and then, outside of the loop,
create a jQuery object out of them and attach the listener once. That's still
slower than the jQuery 1.12 version but only slightly: 936 ms to 1.03s on a very
large list on a recent MacBook Pro, compared to ~30 seconds before this patch.
Fixes gh-2014
Closes gh-2037
|
|
|
|
|
|
| |
Beyond the `AUTHORS.txt` changes, this accounts for a recent email change in
one of the commits.
Closes gh-2039
|
|
|
|
|
|
|
|
|
| |
This fixes the issue caused by https://bugs.jqueryui.com/ticket/9357.
We now empty the live region instead of appending to it, and we do so
after a brief timeout so the live region isn't updated on every mousemove
event or when quickly traversing through options.
Fixes gh-2002
Closes gh-2031
|
| |
|
|
|
| |
Closes gh-2021
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Due to the fact the widget factory code is now in strict mode, the check for
being called without using the `new` keyword started breaking if you save the
widget constructor to a variable before calling it:
```js
var customWidget = $.custom.customWidget;
customWidget( {}, elem );
```
as then `this` is undefined and checking for `this._createWidget` crashes.
Account for that with an additional check.
Fixes gh-2015
Closes gh-2019
|
|
|
|
|
|
|
|
|
| |
PR gh-1793 removed setting `this.offset.parent` in the Draggable
`refreshPositions` method which broke position calculations when moving
a Draggable item into a connected Sortable. restore that assignment.
Ref gh-1793
Fixes gh-2001
Closes gh-2009
|
|
|
|
|
|
|
|
|
| |
Note that container specific events will not fire when the dragged element
is interacting with zero height containers.
Fixes gh-1998
Closes gh-2008
Co-authored-by: A. Wells <borgboyone@users.noreply.github.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Commit 1f2011ece removed a `try-catch` around triggering the `remove` handlers
in the `jQuery.cleanData` override. The `try-catch` was meant for old IE but it was
also catching an error coming from the tooltip `remove` handler depending on
being able to find a relevant tooltip. The `_find` method returns `null`, though,
when the tooltip cotent is empty.
Instead of restoring the `try-catch`, handle the `null` case in the `remove` handler.
Fixes gh-1990
Closes gh-1994
Co-authored-by: Claas Augner <github@caugner.de>
Co-authored-by: Michał Gołębiowski-Owczarek <m.goleb@gmail.com>
|
|
|
|
|
|
| |
Also, remove the Weekly Meetings section from README as the meetings are no
longer happening.
Closes gh-1972
|
| |
|
|
|
|
| |
code.jquery.com is now used just for the specific versions.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Revert "Theme: Removes css for ui-state-checked its not used any more"
This reverts commit 1b0e947f46bc1261b15816f2dcbd239d83a86335.
* Revert "Theme: Replace missing definition for default icons"
This reverts commit dde9b83df61d1d676e66cb2a2f7970dd44a05137.
* Revert "Theme: Switch icon background to use bgColorContent"
This reverts commit 265b8f5e533923b9b4c9cbd9f1dd7b7785423381.
This reverts three commits:
* Theme: Removes css for ui-state-checked its not used any more https://github.com/jquery/jquery-ui/commit/1b0e947f46bc1261b15816f2dcbd239d83a86335 (https://github.com/jquery/jquery-ui/pull/1753)
* Theme: Replace missing definition for default icons https://github.com/jquery/jquery-ui/commit/dde9b83df61d1d676e66cb2a2f7970dd44a05137
* Theme: Switch icon background to use bgColorContent https://github.com/jquery/jquery-ui/commit/265b8f5e533923b9b4c9cbd9f1dd7b7785423381
which caused styling issues when compared to UI 1.12.1.
This unfixes a few issues:
* https://github.com/jquery/download.jqueryui.com/issues/335
* https://bugs.jqueryui.com/ticket/15059
* https://forum.jquery.com/topic/checkboxradio-widget-checkbox-click-doesn-t-work-with-ui-lightness-theme-22-9-2016
However, old & known issues are better than new & unknown ones, especially with our current very limited resources.
Closes gh-1983
|
|
|
|
|
|
|
|
|
|
|
|
| |
A fix from 43254468de7d69b5422e667ba7ebbe864fc34a63 introduced a rule setting
`background-image` of a blank icon to none. However, the selector used for that
rule had lower specificity than another one: `.ui-button .ui-icon` which caused
dashes being shown over the icons.
We needed to increase the specificity of the `.ui-icon-blank` rule past the
above selector and past `.ui-button:hover .ui-icon`. We're doing it by repeating
the class name three times.
Closes gh-1987
|
| |
|
|
|
|
|
| |
jQuery 1.12.4 misses some Core APIs that jQuery UI depends on and that are not
polyfilled in demos.
|
| |
|
|
|
|
|
|
|
|
|
|
| |
We need to create a local jQuery because jQuery Color relies on it and the
global may not exist with AMD and a custom build (trac-10199). This worked
in UI 1.12 but stopped in 1.13 as jQuery Color is now sourced as an AMD module
and the variable started being defined after jQuery Color code. To restore the
proper order, move the variable declaration to a separate small module loaded
before jQuery Color.
Closes gh-1973
|
|
|
|
| |
The latest version contains small tweaks to the "use strict" pragma placement.
|
| |
|
|
|
|
|
|
| |
This is needed to make `"use strict"` pragmas not stripped out during the
build.
Closes gh-1969
|
|
|
|
|
|
|
|
|
| |
We're not removing any deprecated API or legacy browser support in 1.13,
re-target comments to mention 1.14.
It's not guaranteed 1.14 will ever get released but if it will, it sounds like
a good moment to do those removals.
Closes gh-1970
|
| |
|
| |
|
|
|
|
| |
Closes gh-1966
|
|
|
|
|
|
|
|
| |
Past npm versions required the `--save` flag to save anything in `package.json`
when installing packages but newer ones do this by default. Pass `--no-save` to
restore the original behavior in the `release-test.js` script.
Ref gh-1966
|
| |
|
|
|
|
|
| |
The older versions were not compatible with Node.js 10 & newer.
Closes gh-1963
|
|
|
| |
Closes gh-1964
|
|
|
|
|
|
|
|
|
| |
jQuery UI 1.12.1 was released using an outdated (at the time of its release)
version of the download.jqueryui.com package; the latest ones wouldn't generate
relevant JS files.
This commit accounts for the changes so that the latest version can be used.
Closes gh-1965
|