:large_orange_diamond: A fantastic mobile ui lib implement by Vue

DiDi

Last update: Jan 2, 2023

Overview

cube-ui

A fantastic mobile ui lib implement by Vue.

Communication

New cube-ui project ?

Recommend use the CLI tools base on vue-cli to init the config and base code:

$ vue init cube-ui/cube-template projectname

Install

npm install cube-ui --save

Usage

import Vue from 'vue'
import Cube from 'cube-ui'

Vue.use(Cube)

Use modularized cube-ui

import Vue from 'vue'
import {
  /* eslint-disable no-unused-vars */
  Style,
  Button,
  ActionSheet
} from 'cube-ui'

Vue.use(Button)
Vue.use(ActionSheet)

For more information, please refer to Quick Start

Development

git clone [email protected]:didi/cube-ui.git
cd cube-ui
npm install
npm run dev
# or run document development
npm run doc-dev

Changelog

Detailed changes for each release are documented in the release notes.

DiDi Open Sources

Mpx: An enhanced miniprogram framework with data reactivity and deep optimizition.
Chameleon/kəˈmiːlɪən/: Unify all platforms(Web/Weex/Mini program) with MVVM. Focus on Write Once Run AnyWhere.
mand-mobile: A mobile UI toolkit, based on Vue.js 2, designed for financial scenarios.
DoraemonKit/'dɔ:ra:'emɔn/: A full-featured App (iOS & Android) development assistant. You deserve it.
Booster: An easy-to-use, lightweight, powerful and extensible quality optimization toolkit designed specially for mobile applications.
More repos

Comments

DatePicker 组件在个别手机上出现年月日无法滚动的问题

Version

1.12.24

Reproduction link

http://none

Steps to reproduce

这个问题是客户反馈的，其实我们也没有重现出来。

但客户的明确指出：底部弹窗的日期效果，上下滑的时候，滚不动数字；

品牌：polytron，安卓：7.0， chrome version： 75.0.03770.67

What is expected?

能正常使用日期组件

What is actually happening?

不能正常滑动日期组件的数字

Dependencies Version

vue: 2.6.9 better-scroll: 1.13.0

opened by liubin595338764 25
Feat Sticky, ScrollNavBar and ScrollNav
Please make sure these boxes are checked before submitting your PR, thank you!

[x] Make sure you follow DiDi's contributing guide.

[x] Make sure you are merging your commits to dev branch.

[x] Add some descriptions and refer relative issues for you PR.

#225 #217
opened by dolymood 16
scroll组件下拉刷新时，在刷新动作未完成时继续下拉，下拉动画会出现异常，不能回弹回去。

Version

1.12.27

Reproduction link

https://didi.github.io/cube-ui/#/zh-CN/docs/scroll

Steps to reproduce

1，scroll下拉刷新，下拉刷新动作未回弹回去时继续下拉动作，下拉动画异常，不能回弹回去，也不能再次执行下拉动作了。备注：本地调试没有这个问题。打包之后发布到线上就会有这个问题。

What is expected?

下拉刷新未回弹回去时继续下拉可以继续执行刷新操作且可以正常回弹回去

What is actually happening?

下拉刷新未回弹回去时继续下拉，下拉动画异常，且后续往下拉不能执行刷新操作，下拉失效

Dependencies Version

vue: 2.6.9 better-scroll: 1.15.0

官网提供的例子也可以重现这个问题

opened by MeetYouZi 14
Scroll 组件嵌套，外层纵向滚动内层横向滚动目前表现有点奇怪
Version

1.11.0

Reproduction link

暂无

Steps to reproduce

1、外层纵向滚动内层横向滚动 nestMode="native" 2、外层纵向滚动内层横向滚动 nestMode="free"

What is expected?

1、滚动内层Scroll 能正确滚动纵向整个页面 2、内层横向滚动时不触发click事件

What is actually happening?

1、nestMode 为 native 时，内层只能横向滚动，不能带动整个页面纵向滚动，感觉这样是不合理的 2、free时，内层在滚动边界时能正常带动外层纵向滚动，不在边界时就无效 3、内层滚动都会触发click事件

Dependencies Version

vue: 2.5.17 better-scroll: 1.13.0

<cube-scroll> <cube-scroll direction="horizontal"></cube-scroll> </cube-scroll>
opened by GodStream 12
[New Feature] 如何在js文件中调用Toast？

What problem does this feature solve?

我在项目中使用Vue.$createToast()报错，请问应该如何调用，import {Toast} from 'cube-ui' Toast这样调用也不对，报Toast不是一个方法，想知道正确的调用方式

What does the proposed API look like?

import {Toast} from 'cube-ui'，然后Toast()可以直接调用

opened by WormGirl 11
[New Feature] 请给有遮罩的组件的body添加overflow:hidden

What problem does this feature solve?

popup、picker等组件在弹出以后，遮罩层底下的内容区域依然可以滚动。建议在组件弹出时，给body 添加overflow:hidden 的属性，关闭时移除。

What does the proposed API look like?
enhancement

opened by qinzitong 10
【建议Scoller组件参数修改】建议Socller组件中，对于bscoller的参数统一一个bsOption来配置bscoller插件的配置，增强组件配置的灵活型。

【当前问题】bscoller有许多配置可用，当前配置被拆分开来一个一个填使得组件十分不灵活，一大部分不能配置例如bounce等。就算把bscoller参数全部配上去，在使用组件的时候需要配置一大堆属性。【建议修改】建议把bscoller插件的配置统一到bsOption，文档指引到bscoller的配置文档，这样组件使用会不会更方便呢？
enhancement

opened by huangzhenxian 9
Swipe组件的cube-swipe-btn高度为零，将官方demo完全copy下来还是没法解决问题

Version

1.12.28

Reproduction link

https://github.com/HARDCOREAJ/git-demo-1/blob/master/%E5%BE%AE%E4%BF%A1%E5%9B%BE%E7%89%87_20190812174919.png

Steps to reproduce

在我的项目里，使用的是scss；没有发现其他组件有样式问题，只有Swipe组件出现了滑动按钮高度为零的情况

What is expected?

按钮高度不为零

What is actually happening?

按钮高度为零

Dependencies Version

vue: 2.6.9 better-scroll: 1.15.0

import Cube from 'cube-ui'；在main.js里面我是直接全局引入cube-ui； vue.config.js里面配置是： pluginOptions: { 'cube-ui': { postCompile: true, theme: true } }

opened by HARDCOREAJ 8
IE11下出现 SCRIPT1010: 缺少标识符

Version

1.12.13

Reproduction link

http://212.64.25.100:9102

Steps to reproduce

将cube-ui 引入项目 , 打开首页不显示, 控制台报错. 去掉就好了.已经babel .

What is expected?

IE11下显示出页面

What is actually happening?

IE11下没有显示页面

Dependencies Version

vue: 2.6.9 better-scroll: 1.15.0

opened by ghost 8
datapicker组件设置的最小时间时出现BUG

datapicker组件设置的最小时间时出现了一个BUG 当我设置min: new Date(1930, 0, 1) 的时候，把选项拉到最小值那年没问题，但当我设置min: new Date(1930, 0, 30)的时候，把选项拉到1930的时候报错了

VM1374 vue.esm.js:611 [Vue warn]: Error in event handler for "change": "TypeError: Cannot read property 'children' of undefined"

found in

---> at node_modules/cube-ui/src/components/picker/picker.vue at node_modules/cube-ui/src/components/cascade-picker/cascade-picker.vue at node_modules/cube-ui/src/components/date-picker/date-picker.vue at src/view/create/base.vue at src/App.vue warn @ VM1374 vue.esm.js:611 logError @ VM1374 vue.esm.js:1836 globalHandleError @ VM1374 vue.esm.js:1831 handleError @ VM1374 vue.esm.js:1820 Vue.$emit @ VM1374 vue.esm.js:2662 (anonymous) @ picker.vue?67c2:245 BScroll.trigger @ bscroll.esm.js?1906:131 BScroll.scrollTo @ bscroll.esm.js?1906:1555 BScroll.resetPosition @ bscroll.esm.js?1906:1634 BScroll.refresh @ bscroll.esm.js?1906:885 _createWheel @ picker.vue?67c2:248 (anonymous) @ picker.vue?67c2:215 (anonymous) @ VM1374 vue.esm.js:1937 flushCallbacks @ VM1374 vue.esm.js:1856 Promise.then (async) microTimerFunc @ VM1374 vue.esm.js:1904 nextTick @ VM1374 vue.esm.js:1950 queueWatcher @ VM1374 vue.esm.js:3200 update @ VM1374 vue.esm.js:3342 notify @ VM1374 vue.esm.js:722 mutator @ VM1374 vue.esm.js:874 _pickerChange @ cascade-picker.vue?0290:68 invoker @ VM1374 vue.esm.js:2140 Vue.$emit @ VM1374 vue.esm.js:2660 (anonymous) @ picker.vue?67c2:245 BScroll.trigger @ bscroll.esm.js?1906:131 BScroll._transitionEnd @ bscroll.esm.js?1906:1422 BScroll.handleEvent @ bscroll.esm.js?1906:795 VM1374 vue.esm.js:1840 TypeError: Cannot read property 'children' of undefined at VueComponent._updatePickerData (eval at ./node_modules/babel-loader/lib/index.js?{"plugins":[["babel-plugin-transform-modules",{"cube-ui":{"transform":"cube-ui/src/modules/${member}","kebabCase":true}}]]}!./node_modules/vue-loader/lib/selector.js?type=script&index=0!./node_modules/cube-ui/src/components/cascade-picker/cascade-picker.vue (app.js:1054), :103:64) at VueComponent._pickerChange (eval at ./node_modules/babel-loader/lib/index.js?{"plugins":[["babel-plugin-transform-modules",{"cube-ui":{"transform":"cube-ui/src/modules/${member}","kebabCase":true}}]]}!./node_modules/vue-loader/lib/selector.js?type=script&index=0!./node_modules/cube-ui/src/components/cascade-picker/cascade-picker.vue (app.js:1054), :77:77) at VueComponent.invoker (VM1374 vue.esm.js:2140) at VueComponent.Vue.$emit (VM1374 vue.esm.js:2660) at BScroll.eval (eval at ./node_modules/babel-loader/lib/index.js?{"plugins":[["babel-plugin-transform-modules",{"cube-ui":{"transform":"cube-ui/src/modules/${member}","kebabCase":true}}]]}!./node_modules/vue-loader/lib/selector.js?type=script&index=0!./node_modules/cube-ui/src/components/picker/picker.vue (app.js:1190), :267:18) at BScroll.trigger (bscroll.esm.js?1906:131) at BScroll.scrollTo (bscroll.esm.js?1906:1555) at BScroll.resetPosition (bscroll.esm.js?1906:1634) at BScroll.refresh (bscroll.esm.js?1906:885) at VueComponent._createWheel (eval at ./node_modules/babel-loader/lib/index.js?{"plugins":[["babel-plugin-transform-modules",{"cube-ui":{"transform":"cube-ui/src/modules/${member}","kebabCase":true}}]]}!./node_modules/vue-loader/lib/selector.js?type=script&index=0!./node_modules/cube-ui/src/components/picker/picker.vue (app.js:1190), :270:24)

opened by wo5516820 8
[New Feature] 希望能提供[email protected]搭建的项目使用方式

What problem does this feature solve?

目前项目是用的[email protected]搭建的，看文档的描述，初期配置比较繁琐，希望能提供统一的vue-cli @3.0使用方式，这样将来大家整体都转到3.0时会节省不少时间。

按照 #165 的方式是有问题的，webpack-transform-modules-plugin会于vue-cli内部产生冲突，导致相关配置无法生效，最终按需加载是无法成功的，只能全部引入。

What does the proposed API look like?

...
enhancement question optimize

opened by GodStream 8
feature: support Vue3
Please make sure these boxes are checked before submitting your PR, thank you!

[ ] Make sure you follow DiDi's contributing guide.

[ ] Make sure you are merging your commits to dev branch.

[ ] Add some descriptions and refer relative issues for you PR.
opened by zouhangwithsweet 0
build(deps): bump minimatch from 3.0.4 to 3.1.2
Bumps minimatch from 3.0.4 to 3.1.2.

Commits

699c459 3.1.2

2f2b5ff fix: trim pattern

25d7c0d 3.1.1

55dda29 fix: treat nocase:true as always having magic

5e1fb8d 3.1.0

f8145c5 Add 'allowWindowsEscape' option

570e8b1 add publishConfig for v3 publishes

5b7cd33 3.0.6

20b4b56 [fix] revert all breaking syntax changes

2ff0388 document, expose, and test 'partial:true' option

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
build(deps-dev): bump express from 4.16.3 to 4.17.3
Bumps express from 4.16.3 to 4.17.3.

Release notes

Sourced from express's releases.

4.17.3

deps: accepts@~1.3.8

deps: mime-types@~2.1.34

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix handling of __proto__ keys

pref: remove unnecessary regexp for trust proxy

4.17.2

Fix handling of undefined in res.jsonp

Fix handling of undefined when "json escape" is enabled

Fix incorrect middleware execution with unanchored RegExps

Fix res.jsonp(obj, status) deprecation message

Fix typo in res.is JSDoc

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: type-is@~1.6.18

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix maxAge option to reject invalid values

deps: proxy-addr@~2.0.7

Use req.socket over deprecated req.connection

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

pref: ignore empty http tokens

deps: [email protected]

deps: [email protected]

deps: [email protected]

4.17.1

Revert "Improve error message for null/undefined to res.status"

4.17.0

Add express.raw to parse bodies into Buffer

Add express.text to parse bodies into string

... (truncated)

Changelog

Sourced from express's changelog.

4.17.3 / 2022-02-16

deps: accepts@~1.3.8

deps: mime-types@~2.1.34

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix handling of __proto__ keys

pref: remove unnecessary regexp for trust proxy

4.17.2 / 2021-12-16

Fix handling of undefined in res.jsonp

Fix handling of undefined when "json escape" is enabled

Fix incorrect middleware execution with unanchored RegExps

Fix res.jsonp(obj, status) deprecation message

Fix typo in res.is JSDoc

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: type-is@~1.6.18

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix maxAge option to reject invalid values

deps: proxy-addr@~2.0.7

Use req.socket over deprecated req.connection

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

pref: ignore empty http tokens

deps: [email protected]

deps: [email protected]

deps: [email protected]

4.17.1 / 2019-05-25

... (truncated)

Commits

3d7fce5 4.17.3

f906371 build: update example dependencies

6381bc6 deps: [email protected]

a007863 deps: [email protected]

e98f584 Revert "build: use [email protected] for Node.js < 4"

a659137 tests: use strict mode

a39e409 tests: prevent leaking changes to NODE_ENV

82de4de examples: fix path traversal in downloads example

12310c5 build: use nyc for test coverage

884657d examples: remove bitwise syntax for includes check

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
build(deps): bump qs from 6.5.2 to 6.5.3
Bumps qs from 6.5.2 to 6.5.3.

Changelog

Sourced from qs's changelog.

6.5.3

[Fix] parse: ignore __proto__ keys (#428)

[Fix] utils.merge`: avoid a crash with a null target and a truthy non-array source

[Fix] correctly parse nested arrays

[Fix] stringify: fix a crash with strictNullHandling and a custom filter/serializeDate (#279)

[Fix] utils: merge: fix crash when source is a truthy primitive & no options are provided

[Fix] when parseArrays is false, properly handle keys ending in []

[Fix] fix for an impossible situation: when the formatter is called with a non-string value

[Fix] utils.merge: avoid a crash with a null target and an array source

[Refactor] utils: reduce observable [[Get]]s

[Refactor] use cached Array.isArray

[Refactor] stringify: Avoid arr = arr.concat(...), push to the existing instance (#269)

[Refactor] parse: only need to reassign the var once

[Robustness] stringify: avoid relying on a global undefined (#427)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] Clean up license text so it’s properly detected as BSD-3-Clause

[Docs] Clarify the need for "arrayLimit" option

[meta] fix README.md (#399)

[meta] add FUNDING.yml

[actions] backport actions from main

[Tests] always use String(x) over x.toString()

[Tests] remove nonexistent tape option

[Dev Deps] backport from main

Commits

298bfa5 v6.5.3

ed0f5dc [Fix] parse: ignore __proto__ keys (#428)

691e739 [Robustness] stringify: avoid relying on a global undefined (#427)

1072d57 [readme] remove travis badge; add github actions/codecov badges; update URLs

12ac1c4 [meta] fix README.md (#399)

0338716 [actions] backport actions from main

5639c20 Clean up license text so it’s properly detected as BSD-3-Clause

51b8a0b add FUNDING.yml

45f6759 [Fix] fix for an impossible situation: when the formatter is called with a no...

f814a7f [Dev Deps] backport from main

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
build(deps): bump decode-uri-component from 0.2.0 to 0.2.2
Bumps decode-uri-component from 0.2.0 to 0.2.2.

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1

Commits

a0eea46 0.2.2

980e0bf Prevent overwriting previously decoded tokens

3c8a373 0.2.1

76abc93 Switch to GitHub workflows

746ca5d Fix issue where decode throws - fixes #6

486d7e2 Update license (#1)

a650457 Tidelift tasks

66e1c28 Meta tweaks

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
build(deps): bump engine.io and socket.io
Bumps engine.io and socket.io. These dependencies needed to be updated together. Updates engine.io from 6.1.3 to 6.2.1

Release notes

Sourced from engine.io's releases.

6.2.1

:warning: This release contains an important security fix :warning:

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

Error: read ECONNRESET at TCP.onStreamRead (internal/stream_base_commons.js:209:20) Emitted 'error' event on Socket instance at: at emitErrorNT (internal/streams/destroy.js:106:8) at emitErrorCloseNT (internal/streams/destroy.js:74:3) at processTicksAndRejections (internal/process/task_queues.js:80:21) { errno: -104, code: 'ECONNRESET', syscall: 'read' }

Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (#658) (425e833)

6.2.0

Features

add the "maxPayload" field in the handshake details (088dcb4)

So that clients in HTTP long-polling can decide how many packets they have to send to stay under the maxHttpBufferSize value.

This is a backward compatible change which should not mandate a new major revision of the protocol (we stay in v4), as we only add a field in the JSON-encoded handshake data:

0{"sid":"lv_VI97HAXpY6yYWAAAC","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":5000,"maxPayload":1000000}

Links

Diff: https://github.com/socketio/engine.io/compare/6.1.3...6.2.0

Client release: 6.2.0

ws version: ~8.2.3

Changelog

Sourced from engine.io's changelog.

6.2.1 (2022-11-20)

:warning: This release contains an important security fix :warning:

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

Error: read ECONNRESET at TCP.onStreamRead (internal/stream_base_commons.js:209:20) Emitted 'error' event on Socket instance at: at emitErrorNT (internal/streams/destroy.js:106:8) at emitErrorCloseNT (internal/streams/destroy.js:74:3) at processTicksAndRejections (internal/process/task_queues.js:80:21) { errno: -104, code: 'ECONNRESET', syscall: 'read' }

Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (#658) (425e833)

3.6.0 (2022-06-06)

Bug Fixes

add extension in the package.json main entry (#608) (3ad0567)

do not reset the ping timer after upgrade (1f5d469), closes socketio/socket.io-client-swift#1309

Features

decrease the default value of maxHttpBufferSize (58e274c)

This change reduces the default value from 100 mb to a more sane 1 mb.

This helps protect the server against denial of service attacks by malicious clients sending huge amounts of data.

See also: https://github.com/advisories/GHSA-j4f2-536g-r55m

increase the default value of pingTimeout (f55a79a)

... (truncated)

Commits

24b847b chore(release): 6.2.1

425e833 fix: catch errors when destroying invalid upgrades (#658)

99adb00 chore(deps): bump xmlhttprequest-ssl and engine.io-client in /examples/latenc...

d196f6a chore(deps): bump minimatch from 3.0.4 to 3.1.2 (#660)

7c1270f chore(deps): bump nanoid from 3.1.25 to 3.3.1 (#659)

535a01d ci: add Node.js 18 in the test matrix

1b71a6f docs: remove "Vanilla JS" highlight from README (#656)

917d1d2 refactor: replace deprecated String.prototype.substr() (#646)

020801a chore: add changelog for version 3.6.0

ed1d6f9 test: make test script work on Windows (#643)

Additional commits viewable in compare view

Updates socket.io from 4.4.1 to 4.5.3

Release notes

Sourced from socket.io's releases.

4.5.3

Bug Fixes

typings: accept an HTTP2 server in the constructor (d3d0a2d)

typings: apply types to "io.timeout(...).emit()" calls (e357daf)

Links:

Diff: https://github.com/socketio/socket.io/compare/4.5.2...4.5.3

Client release: 4.5.3

engine.io version: ~6.2.0

ws version: ~8.2.3

4.5.2

Bug Fixes

prevent the socket from joining a room after disconnection (18f3fda)

uws: prevent the server from crashing after upgrade (ba497ee)

Links:

Diff: https://github.com/socketio/socket.io/compare/4.5.1...4.5.2

Client release: 4.5.2

engine.io version: ~6.2.0

ws version: ~8.2.3

4.5.1

Bug Fixes

forward the local flag to the adapter when using fetchSockets() (30430f0)

typings: add HTTPS server to accepted types (#4351) (9b43c91)

Links:

Diff: https://github.com/socketio/socket.io/compare/4.5.0...4.5.1

Client release: 4.5.1

engine.io version: ~6.2.0

ws version: ~8.2.3

4.5.0

Bug Fixes

typings: ensure compatibility with TypeScript 3.x (#4259) (02c87a8)

Features

add support for catch-all listeners for outgoing packets (531104d)

This is similar to onAny(), but for outgoing packets.

... (truncated)

Changelog

Sourced from socket.io's changelog.

4.5.3 (2022-10-15)

Bug Fixes

typings: accept an HTTP2 server in the constructor (d3d0a2d)

typings: apply types to "io.timeout(...).emit()" calls (e357daf)

4.5.2 (2022-09-02)

Bug Fixes

prevent the socket from joining a room after disconnection (18f3fda)

uws: prevent the server from crashing after upgrade (ba497ee)

2.5.0 (2022-06-26)

Bug Fixes

fix race condition in dynamic namespaces (05e1278)

ignore packet received after disconnection (22d4bdf)

only set 'connected' to true after middleware execution (226cc16)

prevent the socket from joining a room after disconnection (f223178)

4.5.1 (2022-05-17)

Bug Fixes

forward the local flag to the adapter when using fetchSockets() (30430f0)

typings: add HTTPS server to accepted types (#4351) (9b43c91)

4.5.0 (2022-04-23)

Bug Fixes

typings: ensure compatibility with TypeScript 3.x (#4259) (02c87a8)

... (truncated)

Commits

945c84b chore(release): 4.5.3

d3d0a2d fix(typings): accept an HTTP2 server in the constructor

19b225b docs(examples): update dependencies of the basic CRUD example

8fae95d docs: add jsdoc for each public method

e6f6b90 docs: add deprecation notice for the allSockets() method

596eb88 ci: upgrade to actions/checkout@3 and actions/setup-node@3

e357daf fix(typings): apply types to "io.timeout(...).emit()" calls

10fa4a2 refactor: add list of possible disconnection reasons

8be95b3 chore(release): 4.5.2

ba497ee fix(uws): prevent the server from crashing after upgrade

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0

Releases(v1.12.38)

v1.12.38(Apr 29, 2020)
Fixes

Scroll, IndexList, ScrollNavBar, ScrollNav: fix scrolling bounce bug when iOS sys version >= 13.4. As https://github.com/ustbhuangyi/better-scroll/issues/978 .

Source code(tar.gz)
Source code(zip)
v1.12.37(Apr 28, 2020)

Use 1.12.38
Source code(tar.gz)
Source code(zip)
v1.12.36(Feb 17, 2020)
优化

Form: field & group 配置新增 key 字段

Form: 新增 submitAlwaysValidate Prop 控制提交时是否校验所有字段

Improvements

Form: add new key config prop in field & group config

Form: new submitAlwaysValidate Prop to control wether always validate all fields when submit

Source code(tar.gz)
Source code(zip)
v1.12.34(Dec 4, 2019)
修复

Radio: 修复默认插槽模式下，v-model获取不到值问题

Input: 增加 pattern Prop

SegmentPicker: 修复隐藏没有动画问题

TimePicker: 修复再次打开时选择项重置问题

createAPI: 修复特殊情况下销毁时报错

Fixes

Radio: fix v-model can not get value in default slot mode

Input: add pattern Prop

SegmentPicker: fix no transition when hide

TimePicker: fix selected item changed when reopen in some cases

createAPI: fix destroy error in some cases

Source code(tar.gz)
Source code(zip)
v1.12.32(Oct 18, 2019)
修复

Form: 修复只能第一次滚动到 invalid 字段问题

Fixes

Form: fix only first submit could scroll into first invalid field

Source code(tar.gz)
Source code(zip)
v1.12.31(Sep 16, 2019)
修复

SegmentPicker: 修复不能隐藏bug #597

Fixes

SegmentPicker: fix can not hide bug #597

Source code(tar.gz)
Source code(zip)
v1.12.30(Aug 29, 2019)
修复

Form: 添加 Field 项时应该更新状态值

优化

Form: 在 submit 事件中新增第三个参数（只有field组成的model值）

Fixes

Form: should update state value when add form field

Improvements

Form: new param(only model value with fields) insubmit event

Source code(tar.gz)
Source code(zip)
v1.12.29(Aug 19, 2019)
修复

Scroll: 下拉动画异常无法恢复位置 #559

Input: 在ff上宽度异常 #567

Fixes

Scroll: PullDownRefresh can not reset position in some cases #559

Input: min-width should be 0 in ff #567

Source code(tar.gz)
Source code(zip)
v1.12.28(Aug 7, 2019)
优化

CheckboxGroup: 新增 colNum 控制展示列数

Radio: 新增 colNum 控制展示列数

Improvements

CheckboxGroup: new prop colNum to control column number

Radio: new prop colNum to control column number

Source code(tar.gz)
Source code(zip)
v1.12.27(Jul 12, 2019)
优化

ScrollNav: 新增 scrollTo API

ScrollNavBar: txts 新增和 labels 同步逻辑

Improvements

ScrollNav: new scrollTo API

ScrollNavBar: update labels should update txts too

Source code(tar.gz)
Source code(zip)
v1.12.26(Jul 4, 2019)
修复

Validator: 修复异步校验结果无效bug

Form: 修复两次校验bug

Slide: 特殊情况下动态修改不能滚动bug https://github.com/didi/cube-ui/issues/539

DatePicker: 默认 min 和 max 值为正确的月份

IndexList: 特殊情况下报错

Fixes

Validator: fix async validate error

Form: fix twice validate

Slide: fix cannot scroll in some special cases https://github.com/didi/cube-ui/issues/539

DatePicker: fix min and max should be right month

IndexList: fix cannot get scroll instance in some cases

Source code(tar.gz)
Source code(zip)
v1.12.25(Jun 28, 2019)
特性

IndexList：支持 title 插槽

Textarea: 支持 change 事件

Improvements

IndexList：new title slot

Textarea: new change event

Source code(tar.gz)
Source code(zip)
v1.12.24(Jun 11, 2019)
修复

ScrollNav: 修复在 Vue2.6 版本中滚动到底部的bug. https://github.com/didi/cube-ui/issues/500

Fixes

ScrollNav: fix scroll error in Vue2.6 projects. https://github.com/didi/cube-ui/issues/500

Source code(tar.gz)
Source code(zip)
v1.12.23(Jun 10, 2019)
特性

Locale：模块新暴露出来 .localeMixin 用于支持应用使用 $t

Improvements

Locale：add new exported .localeMixin on this module to support $t in application

Source code(tar.gz)
Source code(zip)
v1.12.22(Jun 5, 2019)
修复

IndexList: forceUpdate 会重新计算位置

Fixes

IndexList: forceUpdate should recalculate height

Source code(tar.gz)
Source code(zip)
v1.12.21(Jun 4, 2019)
优化

Scroll: 支持 pullUp 的visible 配置

修复

Form: button 不支持事件

Improvements

Scroll: support pullUp visible config

Fixes

Form: fixed button do not support events

Source code(tar.gz)
Source code(zip)
v1.12.19(May 7, 2019)
优化

Checker: 支持 option.disabled 控制选项是否禁用

Improvements

Checker: use option.disabled to control the state of checker item

Source code(tar.gz)
Source code(zip)
v1.12.15(Apr 11, 2019)
修复

Scroll: 修复嵌套使用时可能无法滚动

Fixes

Scroll: fix sometimes can't scroll in nest mode

Source code(tar.gz)
Source code(zip)
v1.12.14(Mar 25, 2019)
优化

DatePicker: 支持 columnOrder 可以控制列的顺序

Improvements

DatePicker: use columnOrder to the columns order

Source code(tar.gz)
Source code(zip)
v1.12.13(Mar 11, 2019)
优化

RecycleList：新增 reset API

修复

Slide: 修复横向嵌套时获取宽度不对

ScrollNavBar: 去掉由 inline-block 引起的间隙

Form: 当submit时应该同步validator的值

Improvements

RecycleList: new reset API to reset list

Fixes

Slide: fixed nested scroll width error

ScrollNavBar: fixed the gap caused by inline-block

Form: should sync validator value when subitting

Source code(tar.gz)
Source code(zip)
v1.12.11(Feb 15, 2019)
修复

RecycleList: 没数据时持续触发fetch问题

RecycleList: 并发数据顺序问题

Sticky: Sticky.Ele 没有指向 StickyElement 问题

优化

Radio：RadioGroup 支持 v-model

Fixes

RecycleList: should not trigger onFetch when no more data

RecycleList: data list should be ordered when concurrent requests

Improvements

Radio：RadioGroup supported v-model

Source code(tar.gz)
Source code(zip)
v1.12.10(Jan 31, 2019)
修复

RecycleList: SSR 报错

优化

Input, Textarea: 新增 focus 和 blur API

Fixes

RecycleList: SSR error

Improvements

Input, Textarea: add focus and blur API

Source code(tar.gz)
Source code(zip)
v1.12.9(Jan 22, 2019)
Fixes

Slide: fix goto Page index param when direction is 'vertical'

Source code(tar.gz)
Source code(zip)
v1.12.8(Jan 7, 2019)
Fixes

ImagePreview: 修复在 iOS 上不放大后图片不清晰 bug

Fixes

ImagePreview: fix image will be blurred on iOS

Source code(tar.gz)
Source code(zip)
v1.12.6(Dec 5, 2018)
新增

TimePicker: 支持通过min和max 属性来设置最小、最大可选时间

New Features

TimePicker: Support setting min and max optional time by property min and max.

Source code(tar.gz)
Source code(zip)
v1.12.5(Nov 20, 2018)
优化

Form: 新增 checker 类型

TabBar：新增 value Prop 作为唯一标示选中 key 值，默认等于 label 的值

Locale: 支持不 use 也可以获取 Vue 且自动 install

Improvements

Form: add new type checker

TabBar：add new Prop value as the unique key value, default value is the label prop value

Locale: support auto install, do not depend on use

Source code(tar.gz)
Source code(zip)
v1.12.4(Nov 15, 2018)
Fixes

RecycleList: 修复在 iOS 上不能滚动的 bug

Fixes

RecycleList: fix can not scroll on iOS

Source code(tar.gz)
Source code(zip)
v1.12.3(Nov 13, 2018)
Fixes

Swipe: 修复最后一项 remove 后 activeIndex 不更新问题

Fixes

Swipe: fixed activeIndex should update when removed items

Source code(tar.gz)
Source code(zip)
v1.12.2(Nov 8, 2018)
优化

Form: submit 方法增加参数 skipValidate 用于跳过校验

Improvements

Form: submit method add param skipValidate to control skip validating when submit

Source code(tar.gz)
Source code(zip)
v1.12.1(Nov 7, 2018)
新增

RecycleList: 可回收列表组件

优化

Scroll: 支持双层嵌套滚动 - 默认模式修改为 none

Textarea: 支持 autoExpand 默认展开模式 #348

Input, Textarea: placeholder 颜色优先级从 important 降为普通

New Features

RecycleList: Recycle list component

Improvements

Scroll: support nested scroll - default mode set to none

Textarea: support autoExpand to enable initial expanded #348

Input, Textarea: placeholder color specificity(from important to normal)

Source code(tar.gz)
Source code(zip)