Open himdel opened 5 years ago
(TODO libraries)
EDIT see below
Problematic packages (any one of these may not be compatible without fixing, and is not maintained by anyone else):
[ ] @pf3/select
- my fork of bootstrap-select
(2018); we're overriding any dependencies on bootstrap-select with this package, needed until all select pickers use react (so, all forms really, old or angular)
miq-select
(or pf-select
) directivemiqInitSelectPicker()
call, (+ miqSelectPickerEvent
does the equivalent of miq_observe
for selects)[x] @pf3/timeline
- my fork of patternfly-timeline
(2017); using to fix original dependencies to prevent it from bringing in ancient patternfly and d3, timelines
[ ] bootstrap-switch
- 2017, newer versions break with patternfly; used wherever there's a yes/no switch (except in react)
bs-switch
directivemiqInitBootstrapSwitch()
call[ ] bootstrap-filestyle
- last 2016; upload file in old forms
$(selector).filestyle(...)
[ ] eonasdan-bootstrap-datetimepicker
- last 2017; all datetimepickers, including angular
datetimepicker
directive (ours)datetimepicker_input_tag
helper[ ] jquery-rjs
- 2016 fork by matthewd; gem in core Gemfile, not npm; used in explorer ajax, old forms (also see https://github.com/ManageIQ/manageiq-ui-classic/issues/1#issuecomment-302066060)
:remote => true
[ ] jquery-ui
- 2016
[ ] jquery-ujs
- 2016; used in explorer ajax code, old forms
miq_ujs_bindings.js
data-*
attributes, ajax:*
events[ ] jquery.hotkeys
- 2016, only used in development mode
.bind('keyup
[ ] jquery.observe_field
- my fork of jquery.observe_field
(2016) to release a npm package; used in all old forms
miq_observe
in views, with ujs[ ] patternfly-bootstrap-treeview
- 2018
[ ] spice-html5-bower
- my fork of spice-html5-rails
(2014) updated with spice code from their freedesktop git repo in 2018
[ ] xml_display
- my release of code we had copied from a now defunct website
@MelsHyrule @GilbertCherrie I know we've made some progress with the react conversions. From the list in https://github.com/ManageIQ/manageiq-ui-classic/issues/5585#issuecomment-686786939, has anything been completed there?
:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.
Bad bot
@Fryguy Looking through the list i think jquery.hotkeys
has been fully removed and we're be close to fully removing some like the bootstrap-filestyle
(i think we've only got one haml file that uses it). As for the rest of them there are some that are being required but i'm not entirely sure if they're being used. @jeffibm if you have any additional info you can share about this let us know
We're still using jQuery 2, because of some breaking changes in 3.0. But, we should upgrade as soon as realistic :).
ui-classic changes needed:
this
inside the handlers.catch
everywheresuccess
/error
/complete
should bethen
+catch
, might as well rename done/fail/always too$.param
is treating spaces differently, check form serialization.foo
event handlers removed in favor of.on('foo'
- we have 42 $().click(...), and various other eventsmiqInitAccordions
andmiqInitMainContent
computations may now fail when horizontal scrollbar is present (outerHeight now includes the scrollbar size).size()
in app/assets/javascripts/services/topology_service.jsjust deprecations but still:
$(fn)