agw/overleaf-cep
1
0
Fork 0
mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-11-12 21:23:45 +01:00
Code Issues Packages Projects Releases Wiki Activity
28,385 Commits 13 Branches 23 Tags
652acede709a87d04cda9b6bddb6f237a19bbd04
Commit Graph
125 Commits
Author SHA1 Message Date
yu-i-i cae6088557 Patches handled by yarn 2026-07-17 18:03:39 +02:00
yu-i-i 42e7969f42 Linked URL: add sanitize and normalize 2026-07-17 17:56:49 +02:00
Eric Mc Sween 2c54574377 Merge pull request #34922 from overleaf/lg-vite-security-upgrade-v2 
[Security upgrade] bump vite to 7.3.5 in root workspace

GitOrigin-RevId: 278475d98e23f0679ec45993e2a6816e9b93eb64
 2026-06-26 08:07:25 +00:00
Brian Gough 29c8717b60 Merge pull request #33845 from overleaf/lg-ws-security-upgrade 
[Security upgrade] pin ws@^8 to 8.21.0

GitOrigin-RevId: 40b839757122c1116debe8b7ebfa4eba9187bfa8
 2026-06-24 08:06:51 +00:00
Brian Gough c6a46fbdad Merge pull request #33961 from overleaf/lg-qs-security-upgrade 
[Security upgrade] pin qs to 6.15.2 in root yarn.lock

GitOrigin-RevId: 4819f0a1f9b41821ccda354a309d190d8395ef56
 2026-06-24 08:05:31 +00:00
Brian Gough 81f85293f2 Merge pull request #33656 from overleaf/lg-protobufjs-security-upgrade 
[Security upgrade] Pin protobufjs to 7.6.3 and @protobufjs/utf8 to 1.1.1 via resolutions

GitOrigin-RevId: 7d71d564d7296af76f04fda8b35f178c5014a9b9
 2026-06-24 08:05:26 +00:00
Jakob Ackermann 6b084424b5 [monorepo] fix running make lint from root (#33559) 
* [monorepo] remove spurious package-name field from buildscript.txt

* [monorepo] align variables/paths across build script variants

* [monorepo] align linting/test setup for jobs/libraries

* [monorepo] fix "make lint/lint_fix" from root

* [wiki-algolia] integrate with yarn workspace

GitOrigin-RevId: a0954f2936d03cd4a69b3f2c8098d9ee2e361993
 2026-06-23 08:06:37 +00:00
Anna Claire Fields 7035a2e025 Revert "Acf pnp migration master" (#34709) 
GitOrigin-RevId: ec7d63e1212e05dd6dfc7a0ddf785c11eca76ad6
 2026-06-17 08:07:56 +00:00
Anna Claire Fields 8f07308342 Acf pnp migration master (#34040) 
GitOrigin-RevId: 418eab9bc733f27a6e0f8f04a2a8e21c2f5a491f
 2026-06-17 08:07:16 +00:00
Anna Claire Fields b2edd33ca5 [PnP Migration] update ESLint cache location to use a unified .cache directory (#34485) 
GitOrigin-RevId: 3b4551405e4b9fa552d6f289a31dd4eb2a73d875
 2026-06-10 11:58:34 +00:00
Jakob Ackermann 52453edfa5 [clsi-lb] migrate to node.js (#34242) 
* [clsi-lb] migrate to node.js

- Add env var for dynamically defining backends
- Reuse the server params across template and haproxy admin commands
- Keep the exact same rendering of the template

* [clsi-lb] fix WORKDIR for CI

* [k8s] clsi-lb: populate PROJECT_ID

* [k8s] clsi-lb: c3d compile backend class sports c3d and c3 instances

* [clsi-lb] update build scripts

* [clsi-lb] adopt @overleaf/stream-utils

* [clsi-lb] enable --watch mode in dev-env

* [clsi-lb] update build scripts

* [clsi-lb] update build scripts

GitOrigin-RevId: e05165b04a09d8200ce7f3a2321f9f2556544788
 2026-06-10 08:07:10 +00:00
Lucie Germain 4024a3822c [Security upgrade] bump fast-xml-parser to 5.7.0 (#33916) 
GitOrigin-RevId: cef87a7ce71a5d3742082a2af08a554265c9fbde
 2026-06-10 08:06:59 +00:00
Andrew Rumble b703acb55a Merge pull request #34325 from overleaf/ar-remove-noop-pins 
[monorepo] remove no-op pins

GitOrigin-RevId: 9b059ae72e63f01b836a72501de893c28a4bbcbf
 2026-06-09 08:06:52 +00:00
Anna Claire Fields 97247b8ea5 [PnP migration] Remove mock-fs dependency (#33835) 
GitOrigin-RevId: ff8df32d85b2ecd2837c9eee6d6d2b3b95285239
 2026-06-05 08:06:54 +00:00
Brian Gough f8c7e092fa upgrade to eslint v10 (#34054) 
* upgrade from eslint version 8 to eslint version 10

* remove unsupported eslint-env directive

* include jsx files in latexqc linting

* use basePath and extends to maintain paths in writefull eslint

* fix yarn.lock

with ./bin/yarn install

* preserve existing glob patterns in web eslint config

* restore original comments

* fix worker path

* corrected comment about eslint-plugin-mocha

* remove unused imports

* remove unused import of includeIgnoreFile

* switch to individual eslit.config.mjs files

* fix lint errors on eslint.config.mjs in web

* update build scripts for eslint.config.mjs

* update volumes for RUN_LINTING_CI_MONOREPO in web Makefile

updated manually as this makefile is not autogenerated
the RUN_LINTING_CI_MONOREPO command is only used for prettier, not eslint, but updating for consistency.

* migrate from mocha/no-skipped-tests to mocha/no-pending-tests

see https://github.com/lo1tuma/eslint-plugin-mocha/pull/365
"rule no-skipped-tests has been removed, its functionality has been merged into the existing no-pending-tests rule"

GitOrigin-RevId: 2c8f25c8049a0dba374a51df1214286bb5093a51
 2026-06-03 08:06:29 +00:00
Brian Gough fda0283490 Merge pull request #33377 from overleaf/lucie/js-yaml-security-fix 
[Security Upgrade]: js-yaml in yarn.lock

GitOrigin-RevId: 4f388ca74de0e33a4f8894b1aa7e7963d1de552d
 2026-06-02 08:07:45 +00:00
Miguel Serrano 63852c5934 [web] bump js-yaml in reference-parser (#33953) 
* [web] bump `js-yaml` in `reference-parser`

`.yarn/patches/referer-parser-npm-0.0.3.patch` bumps the `js-yaml` dependency,
but yarn patches don't take that into account the patched package.json for dependency resolution.

* Add RequestHelper test

GitOrigin-RevId: 8246f8ab54956897cc361d7c02b65e5363ad43ec
 2026-05-29 08:06:27 +00:00
Lucie GermainClaude Opus 4.7Jakob Ackermann
 		5e47353ad4 [Security upgrade] Pin @babel/plugin-transform-modules-systemjs to 7.29.4 via resolutions (GHSA-fv7c-fp4j-7gwp) (#33650) 
* Pin @babel/plugin-transform-modules-systemjs to 7.29.4 via resolutions (GHSA-fv7c-fp4j-7gwp)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* Fix missing comma in package.json resolutions

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-authored-by: Jakob Ackermann <jakob.ackermann@overleaf.com>
GitOrigin-RevId: d6f3e72234d64fd0afb8676b8652cc03b0cddbe0
 2026-05-28 08:07:54 +00:00
Miguel Serrano 8ce9d184cb [migrations] pin underscore version to 1.13.8 (#33951) 
`east` is the only workspace pointing to an old version of `underscore`, which is now pinned to `1.13.8` the same way it's done for `argparse`.

GitOrigin-RevId: a938067ba62aca7b73e15f030d9c341f9337c26d
 2026-05-28 08:05:30 +00:00
Eric Mc Sween 52a8a447aa Merge pull request #33909 from overleaf/em-remove-tpdsworker 
Remove tpdsworker service

GitOrigin-RevId: 9014d7d5bdc4e3cc7a7168d93b90ef8aa72d0c1a
 2026-05-27 08:08:00 +00:00
Jakob Ackermann c7b56ff295 [monorepo] remove contacts service (#33550) 
GitOrigin-RevId: 15478243e4d6a56b81eee28f76f9ef7dc54a45d7
 2026-05-27 08:07:19 +00:00
Lucie GermainandClaude Sonnet 4.6 ae00bcbeca [Security Upgrade]: pin @xmldom/xmldom to 0.8.13 (#33373) 
Adds a resolution in root package.json to force all consumers to
@xmldom/xmldom@0.8.13, fixing GHSA-wh4c-j3r5-mjhp, GHSA-j759-j44w-7fr8,
GHSA-x6wf-f3px-wcqx, GHSA-f6ww-3ggp-fr8h, and GHSA-2v35-w6hq-6mfw.

The vulnerable 0.7.13 entry in yarn.lock is replaced by 0.8.13
(minimum safe version across all five advisories).

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
GitOrigin-RevId: e1a301e3a1d637894284f35238ca0e8c23534276
 2026-05-25 08:05:19 +00:00
Lucie Germain 6fa708982b Pin argparse/underscore to 1.13.8 via yarn resolution (#33364) 
Fixes GHSA-cf4h-3jhx-xvhq (critical, arbitrary code execution) and
GHSA-qpx9-hpmf-5gmw (high, DoS via _.flatten/_.isEqual).

Vulnerable underscore@1.7.0 came from js-yaml@2.1.3 → argparse@0.1.16.
All other instances were already ≥1.13.8.

GitOrigin-RevId: b2ab4bc2682e19709694b7dd686134a439ade90c
 2026-05-22 08:06:48 +00:00
Olzhas Askar bb0dc07d22 Merge pull request #33741 from overleaf/lg-sanitize-html-upgrade 
[Security upgrade] Upgrade sanitize-html to 2.17.4 (GHSA-rpr9-rxv7-x643)

GitOrigin-RevId: 40a11361eac35d44a6fd7069e0d0d7c02a6628ec
 2026-05-21 08:06:33 +00:00
Mathias Jakobsen 5d4f38e57a Merge pull request #33629 from overleaf/lg-fast-uri-resolution 
[Security upgrade] Pin fast-uri to 3.1.2 via resolutions (GHSA-q3j6-qgpj-74h6, GHSA-v39h-62p7-jpjc)

GitOrigin-RevId: 154e742e12cb68e8b1c8d5b88e1a188160746784
 2026-05-20 08:07:34 +00:00
Lucie GermainandClaude Opus 4.7 2f08f6f6eb Bump mongoose to 8.22.1 (GHSA-wpg9-53fq-2r8h) (#33648) 
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
GitOrigin-RevId: f092e8d914ea5825e285fe4741bb42dd2c5d5fa3
 2026-05-20 08:07:05 +00:00
Jakob Ackermann c0111fec29 [monorepo] run format_fix and trigger prettier on .agents changes (#33759) 
* [monorepo] run format_fix and trigger prettier on .agents changes

* [monorepo] cleanup stale prettier ignore rule

* [monorepo] tweak format:monorepo-check:fix

GitOrigin-RevId: e6c29a0c601fbf388a048eb42706f9bd0a18344f
 2026-05-19 08:04:48 +00:00
Andrew Rumble e9aedce4ab Merge pull request #33625 from overleaf/ar-update-vitest 
[monorepo] bump vitest to 4.1.5

GitOrigin-RevId: 22ba2249ae384fd59347c9aa45c70f51ccdf8890
 2026-05-18 08:06:49 +00:00
Andrew Rumble 19ad00c329 Merge pull request #33743 from overleaf/lg-systeminformation-upgrade 
[Security Upgrade] Upgrade systeminformation to 5.31.6 (GHSA-hvx9-hwr7-wjj9)

GitOrigin-RevId: bd75d2bc59e183d23972e367f40f753c08ca6967
 2026-05-18 08:06:41 +00:00
Andrew Rumble 25dfaab2a1 Merge pull request #33641 from overleaf/lg-fast-xml-builder-resolution 
[Security upgrade] Pin fast-xml-builder to 1.1.7 via resolutions (GHSA-5wm8-gmm8-39j9, GHSA-45c6-75p6-83cc)

GitOrigin-RevId: ab13841bd8c20da98a136567cf7436ebb9f73722
 2026-05-15 08:08:40 +00:00
Alf Eaton 00ddd8185c Upgrade webpack and related dependencies (#31638) 
GitOrigin-RevId: e188a6ab9f7a024c1769a85e1d4e40ccb5d02213
 2026-05-14 08:05:51 +00:00
Jakob Ackermann b62d4814c3 [monorepo] turn throw statements in callback code into callback calls (#33524) 
* [eslint-plugin] add rule for throw inside callback code

* [monorepo] enable our custom eslint plugins globally

* [monorepo] fix running make lint from root

* [monorepo] turn throw statements in callback code into callback calls

* [monorepo] add eslint-plugin libraries to all the Dockerfiles

* [monorepo] install eslint-plugin library at the root level

* [linked-url-proxy] add eslint-plugin library into Dockerfile

* [latexqc] add our eslint-plugin to eslint config

GitOrigin-RevId: b05e3ebbefb62370f2422e83880dd3913815270d
 2026-05-14 08:05:47 +00:00
Andrew Rumble 5e3561aedc Merge pull request #33655 from overleaf/lg-ip-address-resolution 
Pin ip-address to 10.1.1 via resolutions (GHSA-v2v4-37r5-5v8g)

GitOrigin-RevId: c0233698549fee7f32c8a95a17b793b8535922c1
 2026-05-14 08:05:30 +00:00
renovate[bot] 5c5a80923a [Platform] Update dependency dompurify to v3.4.0 from 3.3.3 [SECURITY] (#33227) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: da9d98ac0b4d3690bd2db18f7c4f61cf45fb379a
 2026-05-12 08:05:58 +00:00
renovate[bot] 47f80317e4 [CoreI] Update dependency nodemailer to v8.0.5 [SECURITY] (#32703) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 3ae15cc3adad3d0212c46b5c478210dc9f20ef08
 2026-05-08 08:10:18 +00:00
renovate[bot]Claude Sonnet 4.6Eric Mc SweenAnna Fields
 		de9b07f0b9 [Platform] Update dependency lodash to v4.18.1 from 4.17.23 [SECURITY] (#33229) 
* Upgrade lodash resolution to 4.18.1

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* update lodash in rest of packages

---------

Co-authored-by: Eric Mc Sween <5454374+emcsween@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Anna Fields <acfields11@gmail.com>
GitOrigin-RevId: 66ce1610993a592899c25155757ca3267ebcd5c1
 2026-05-07 08:07:41 +00:00
Alf Eaton 37a68a9c5e Reapply "Add Vertex as an AI provider (#32450)" (#33339) 
GitOrigin-RevId: d506c99cf32fae97b6721923256bd980120fbeed
 2026-05-06 08:07:19 +00:00
Alf Eaton e3f88791da Revert "Add Vertex as an AI provider (#32450)" (#33309) 
This reverts commit 20d895350ee13a7683f178bc83b87f0e765c7af6.

GitOrigin-RevId: 6be06b0fee0b038c42db45fce2377efd5d5a47dc
 2026-05-01 08:06:32 +00:00
Alf Eaton f00dab5cc0 Add Vertex as an AI provider (#32450) 
GitOrigin-RevId: 20d895350ee13a7683f178bc83b87f0e765c7af6
 2026-05-01 08:06:25 +00:00
Anna Claire Fields 0d64a88a46 Yarn 4 Migration (#32253) 
Migrates the Overleaf monorepo package manager from npm (v11) to Yarn 4 (v4.9.1) using node-modules linker mode.

GitOrigin-RevId: 50d32ab01955c15e29679eff9e9e9cfb897fab2d
 2026-04-28 08:52:37 +00:00
Andrew Rumble bddc1d3fab Merge pull request #32906 from overleaf/ar-upgrade-protobufjs-7.5.5 
[monorepo] upgrade protobufjs 7.5.5

GitOrigin-RevId: 7a8038737f8160e55031fa0365242f22c2dd97f5
 2026-04-22 08:05:45 +00:00
Domagoj Kriskovic d396c6d722 [ds-mobile-app] add support for file upload 
GitOrigin-RevId: d874439a7a8a820324e0568fc2eec2c78d72cadc
 2026-04-20 08:04:39 +00:00
Andrew Rumble d0c623d266 Merge pull request #32750 from overleaf/ar-serialize-javascript-7.0.5 
[monorepo] serialize javascript 7.0.5

GitOrigin-RevId: 606dc65b0ce21d708ca4118fe5505483f1e927c7
 2026-04-16 08:06:22 +00:00
Andrew Rumble 85ade7c105 Merge pull request #32773 from overleaf/ar-update-engines-npm-11.11.0 
[monorepo] update engines field in package.json

GitOrigin-RevId: a9d2ff27d0a8dfc64a5a51484e9d8f2d8fb70ba4
 2026-04-14 08:05:04 +00:00
Jakob Ackermann 5ded3f5f90 [monorepo] fix prettier formatting (#32483) 
* [monorepo] fix prettier formatting

* [monorepo] use a single prettier invocation for monorepo-check

GitOrigin-RevId: cf0cc2293b228be707ff23bdb3c5781c1f8d69f3
 2026-03-27 09:06:15 +00:00
Andrew Rumble 4527b1934d Merge pull request #32054 from overleaf/ar-serialize-javascript-7.0.4 
[web] bump serialize-javascript to 7.0.4

GitOrigin-RevId: 2f49ef0f8ece8636d54f29fdf5bc8443030b4349
 2026-03-19 09:06:04 +00:00
Andrew Rumble d8f9a643cd Merge pull request #31794 from overleaf/ar-prefer-dedupe-when-installing-npm-modules 
[monorepo] use prefer-dedupe when installing npm modules

GitOrigin-RevId: de814fa1e91e37a20cb4024f8aa0454e5e86f0a6
 2026-03-06 09:08:46 +00:00
Jakob Ackermann f9ad6cf5d1 [monorepo] add eslint and prettier check to tools (#31720) 
* [dependency-management] check eslint and prettier in Jenkins pipeline

* [npm-overrides-helper] check eslint and prettier in Jenkins pipeline

GitOrigin-RevId: 647f105babd536d0962ac2dbb3d6a0235ba73976
 2026-02-24 09:06:12 +00:00
Alf Eaton aab1764236 Upgrade Streamdown to v2 (#31287) 
GitOrigin-RevId: c092a9491b086a186cd7a5d88698bd1aaf745e96
 2026-02-19 09:06:31 +00:00
Andrew Rumble 2a6da7b186 Merge pull request #31500 from overleaf/ar-qs-tools-saas-e2e 
[monorepo] bump qs as dependency of @cypress/request

GitOrigin-RevId: a36bcf35b69246cef2614adb3d24db2233f6fcfb
 2026-02-13 09:05:14 +00:00