diff --git a/.bundlewatch.config.json b/.bundlewatch.config.json index d425cf314d8..0248c54b04d 100644 --- a/.bundlewatch.config.json +++ b/.bundlewatch.config.json @@ -2,7 +2,7 @@ "files": [ { "path": "./dist/bootstrap-vue-icons.js", - "maxSize": "110 kB" + "maxSize": "115 kB" }, { "path": "./dist/bootstrap-vue-icons.min.js", diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 123014908be..bd3fac2db9c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,6 +1,36 @@ version: 2 updates: - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: weekly + day: tuesday + time: "12:00" + timezone: Europe/Berlin + reviewers: + - jackmu95 + labels: + - "Type: CI" + - "Type: Dependencies" + + - package-ecosystem: npm directory: "/" schedule: interval: "daily" + time: "12:00" + timezone: Europe/Berlin + ignore: + - dependency-name: "bootstrap" + versions: [">=5.0.0"] + - dependency-name: "highlight.js" + versions: [">=10.0.0"] + - dependency-name: "prettier" + versions: [">1.14.3"] + - dependency-name: "@vue/test-utils" + versions: [">=2.0.0"] + reviewers: + - jackmu95 + labels: + - "Type: Dependencies" + versioning-strategy: increase + rebase-strategy: disabled diff --git a/.github/renovate.json b/.github/renovate.json deleted file mode 100644 index 3d3145edeaa..00000000000 --- a/.github/renovate.json +++ /dev/null @@ -1,22 +0,0 @@ -{ - "extends": ["@nuxtjs"], - "labels": ["Type: Dependencies"], - "packageRules": [ - { - "packageNames": ["bootstrap"], - "allowedVersions": "<5.0.0" - }, - { - "packageNames": ["highlight.js"], - "allowedVersions": "<10.0.0" - }, - { - "packageNames": ["prettier"], - "allowedVersions": "<=1.14.3" - }, - { - "packageNames": ["@vue/test-utils"], - "allowedVersions": "<2.0.0" - } - ] -} diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index f54718c260d..fc6b5425aef 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -17,7 +17,7 @@ jobs: strategy: matrix: os: [ubuntu-latest] - node: [10, 12] + node: [10, 12, 14] steps: - name: Clone repository @@ -50,6 +50,6 @@ jobs: - name: BundleWatch run: yarn run bundlewatch - if: matrix.node == '12' + if: matrix.node == '14' env: BUNDLEWATCH_GITHUB_TOKEN: "${{ secrets.BUNDLEWATCH_GITHUB_TOKEN }}" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 00000000000..5e14f515e7f --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,58 @@ +name: "CodeQL" + +on: + push: + pull_request: + schedule: + - cron: "0 2 * * 5" + +jobs: + analyze: + name: Analyze + runs-on: ubuntu-latest + + strategy: + fail-fast: false + matrix: + language: ["javascript"] + + steps: + - name: Checkout repository + uses: actions/checkout@v2 + with: + # We must fetch at least the immediate parents so that if this is + # a pull request then we can checkout the head + fetch-depth: 2 + + # If this run was triggered by a pull request event, then checkout + # the head of the pull request instead of the merge commit + - run: git checkout HEAD^2 + if: ${{ github.event_name == 'pull_request' }} + + # Initializes the CodeQL tools for scanning. + - name: Initialize CodeQL + uses: github/codeql-action/init@v1 + with: + languages: ${{ matrix.language }} + # If you wish to specify custom queries, you can do so here or in a config file + # By default, queries listed here will override any specified in a config file + # Prefix the list here with "+" to use these queries and those in the config file + # queries: ./path/to/local/query, your-org/your-repo/queries@main + + # Autobuild attempts to build any compiled languages (C/C++, C#, or Java) + # If this step fails, then you should remove it and run the build manually (see below) + - name: Autobuild + uses: github/codeql-action/autobuild@v1 + + # â„šī¸ Command-line programs to run using the OS shell. + # 📚 https://git.io/JvXDl + + # âœī¸ If the Autobuild fails above, remove it and uncomment the following three lines and + # modify them (or add more) to build your code if your project uses a compiled language + + #- run: | + # make bootstrap + # make release + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v1 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 779c9495a3c..eb24fe4f135 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -17,7 +17,7 @@ jobs: strategy: matrix: os: [ubuntu-latest] - node: [12] + node: [14] steps: - name: Clone repository @@ -54,7 +54,7 @@ jobs: strategy: matrix: os: [ubuntu-latest] - node: [12] + node: [14] steps: - name: Clone repository @@ -91,7 +91,7 @@ jobs: strategy: matrix: os: [ubuntu-latest] - node: [10, 12] + node: [10, 12, 14] steps: - name: Clone repository @@ -124,7 +124,7 @@ jobs: - name: CodeCov uses: codecov/codecov-action@v1 - if: matrix.node == '12' + if: matrix.node == '14' with: token: ${{ secrets.CODECOV_TOKEN }} flags: unittests diff --git a/CHANGELOG.md b/CHANGELOG.md index 4153c8a7b8d..c3c85201683 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,48 @@ All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines. + + +## [v2.19.0](https://github.com/bootstrap-vue/bootstrap-vue/compare/v2.18.1...v2.19.0) + +Released: 2020-11-08 + +### Features v2.19.0 + +- **b-media:** improve aside right handling + ([#5965](https://github.com/bootstrap-vue/bootstrap-vue/issues/5965)) + ([49a3f00](https://github.com/bootstrap-vue/bootstrap-vue/commit/49a3f00420bf9958deda3a6be0ccb76cc3ea06ba)) +- **config:** improved defaults handling (closes + [#4507](https://github.com/bootstrap-vue/bootstrap-vue/issues/4507), + [#5138](https://github.com/bootstrap-vue/bootstrap-vue/issues/5138), + [#5291](https://github.com/bootstrap-vue/bootstrap-vue/issues/5291), + [#5459](https://github.com/bootstrap-vue/bootstrap-vue/issues/5459), + [#5958](https://github.com/bootstrap-vue/bootstrap-vue/issues/5958)) + ([#5981](https://github.com/bootstrap-vue/bootstrap-vue/issues/5981)) + ([7ea0cc4](https://github.com/bootstrap-vue/bootstrap-vue/commit/7ea0cc4a16d27b179eca47d351eaa9fe6fdfd56e)) + +### Bug Fixes v2.19.0 + +- **b-avatar:** badge `z-index` handling + ([#5975](https://github.com/bootstrap-vue/bootstrap-vue/issues/5975)) + ([ecb33bd](https://github.com/bootstrap-vue/bootstrap-vue/commit/ecb33bdb510832096bc5a5196a11c97388bf6411)) +- **b-avatar:** prevent avatar from being squished + ([#5963](https://github.com/bootstrap-vue/bootstrap-vue/issues/5963)) + ([b3946ed](https://github.com/bootstrap-vue/bootstrap-vue/commit/b3946ed7a7b327fb7c66b44caaf122460fc24005)), + closes [#5962](https://github.com/bootstrap-vue/bootstrap-vue/issues/5962) +- **b-dropdown:** click handling on close (closes + [#5982](https://github.com/bootstrap-vue/bootstrap-vue/issues/5982)) + ([#6009](https://github.com/bootstrap-vue/bootstrap-vue/issues/6009)) + ([cf7a1cb](https://github.com/bootstrap-vue/bootstrap-vue/commit/cf7a1cb017e2263939a64e300abbbbac35c121d4)) +- **b-form-checkbox/b-form-radio:** `change` event timing + ([#6008](https://github.com/bootstrap-vue/bootstrap-vue/issues/6008)) + ([37ec7e9](https://github.com/bootstrap-vue/bootstrap-vue/commit/37ec7e9991b66af51ff81420da8eb88928615f9d)) +- **b-form-group:** accessibility when `label-for` prop not set + ([#6006](https://github.com/bootstrap-vue/bootstrap-vue/issues/6006)) + ([16f777b](https://github.com/bootstrap-vue/bootstrap-vue/commit/16f777b14bdcf9ebb6fae0325d355c7f5272bd98)) + + + ## [v2.18.1](https://github.com/bootstrap-vue/bootstrap-vue/compare/v2.18.0...v2.18.1) Released: 2020-10-21 @@ -22,6 +64,8 @@ Released: 2020-10-21 ([#5934](https://github.com/bootstrap-vue/bootstrap-vue/issues/5934)) ([8a367b6](https://github.com/bootstrap-vue/bootstrap-vue/commit/8a367b6296b0aa9700f67633fd60fb351e2f7373)) + + ## [v2.18.0](https://github.com/bootstrap-vue/bootstrap-vue/compare/v2.17.3...v2.18.0) Released: 2020-10-19 diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000000..0418354d1aa --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,20 @@ +# Security Policy + +## Supported Versions + +| Version | Supported | +| ------- | ------------------ | +| 2.x | :white_check_mark: | +| 1.x | :x: | +| < 1.0 | :x: | + +## Reporting a Vulnerability + +The BootstrapVue team takes security issues very seriously. We appreciate your efforts to +responsibly disclose your findings, and will make every effort to acknowledge your contributions. + +To report a security issue, email +[bootstrapvue.js@gmail.com](mailto:security@bootstrapvue.js@gmail.com) and include the word +"SECURITY" in the subject line. + +We'll endeavor to respond quickly, and will keep you updated throughout the process. diff --git a/docs/components/componentdoc.vue b/docs/components/componentdoc.vue index 86aa86150b2..0d25b5671f9 100644 --- a/docs/components/componentdoc.vue +++ b/docs/components/componentdoc.vue @@ -85,6 +85,11 @@ Properties + +

+ All property default values are globally configurable. +

+ {{ value }}
Required - Settings v{{ item.version }}+ v-model Use with caution @@ -298,8 +302,7 @@