forked from pool/element-desktop
Dominik Heidler
17bd855ca7
# Security - Fixes for https://github.com/element-hq/element-web/security/advisories/GHSA-w36j-v56h-q9pc - Fixes for https://github.com/element-hq/element-web/security/advisories/GHSA-5486-384g-mcx2 - Update JS SDK with the fixes for https://github.com/matrix-org/matrix-js-sdk/security/advisories/GHSA-xvg8-m4x3-w6xr Version 1.11.84 ## ✨ Features * Remove abandoned MSC3886, MSC3903, MSC3906 implementations (https://github.com/element-hq/element-web/pull/28274). Contributed by @t3chguy. * Update to React 18 (https://github.com/element-hq/element-web/pull/24763). Contributed by @t3chguy. * Deduplicate icons using Compound (https://github.com/element-hq/element-web/pull/28239). Contributed by @t3chguy. * Replace legacy Tooltips with Compound tooltips (https://github.com/element-hq/element-web/pull/28231). Contributed by @t3chguy. * Deduplicate icons using Compound Design Tokens (https://github.com/element-hq/element-web/pull/28219). Contributed by @t3chguy. * Add reactions to html export (https://github.com/element-hq/element-web/pull/28210). Contributed by @langleyd. * Remove feature\_dehydration (https://github.com/element-hq/element-web/pull/28173). Contributed by @florianduros. ## 🐛 Bug Fixes * Remove upgrade encryption in `DeviceListener` and `SetupEncryptionToast` (https://github.com/element-hq/element-web/pull/28299). Contributed by @florianduros. * Fix 'remove alias' button in room settings (https://github.com/element-hq/element-web/pull/28269). Contributed by @Dev-Gurjar. * Add back unencrypted path in `StopGapWidgetDriver.sendToDevice` (https://github.com/element-hq/element-web/pull/28295). Contributed by @florianduros. * Fix other devices not being decorated as such (https://github.com/element-hq/element-web/pull/28279). Contributed by @t3chguy. * Fix pill contrast in invitation dialog (https://github.com/element-hq/element-web/pull/28250). Contributed by @florianduros. * Close right panel chat when minimising maximised voip widget (https://github.com/element-hq/element-web/pull/28241). Contributed by @t3chguy. * Fix develop changelog parsing (https://github.com/element-hq/element-web/pull/28232). Contributed by @t3chguy. * Fix Ctrl+F shortcut not working with minimised room summary card (https://github.com/element-hq/element-web/pull/28223). Contributed by @t3chguy. * Fix network dropdown missing checkbox \& aria-checked (https://github.com/element-hq/element-web/pull/28220). Contributed by @t3chguy. OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/element-desktop?expand=0&rev=86
34 lines
1.5 KiB
Diff
34 lines
1.5 KiB
Diff
hak fetch tries to download devDependencies for two modules. Unfortunately it does so in a very non-deterministic manner (no shrinkwrap file)
|
|
Remove that step since the devDependencies are not actually needed for any of these two modules.
|
|
|
|
--- element-desktop-1.11.85/scripts/hak/fetch.ts 2024-11-12 13:39:42.758502395 +0100
|
|
+++ element-desktop-1.11.85/scripts/hak/fetch.ts 2024-11-12 13:41:05.048799436 +0100
|
|
@@ -27,27 +27,6 @@
|
|
console.log("Fetching " + moduleInfo.name + "@" + moduleInfo.version);
|
|
|
|
const packumentCache = new Map();
|
|
- await pacote.extract(`${moduleInfo.name}@${moduleInfo.version}`, moduleInfo.moduleBuildDir, {
|
|
- packumentCache,
|
|
- });
|
|
-
|
|
- console.log("Running yarn install in " + moduleInfo.moduleBuildDir);
|
|
- await new Promise<void>((resolve, reject) => {
|
|
- const proc = childProcess.spawn(hakEnv.isWin() ? "yarn.cmd" : "yarn", ["install", "--ignore-scripts"], {
|
|
- stdio: "inherit",
|
|
- cwd: moduleInfo.moduleBuildDir,
|
|
- // We need shell mode on Windows to be able to launch `.cmd` executables
|
|
- // See https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2
|
|
- shell: hakEnv.isWin(),
|
|
- });
|
|
- proc.on("exit", (code) => {
|
|
- if (code) {
|
|
- reject(code);
|
|
- } else {
|
|
- resolve();
|
|
- }
|
|
- });
|
|
- });
|
|
|
|
// also extract another copy to the output directory at this point
|
|
// nb. we do not yarn install in the output copy: we could install in
|