Joren/qbz
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,535 Commits 1 Branch 0 Tags
79a86278f25e4c6b821a167885b5f1419ce6b906
Commit Graph
72 Commits
Author SHA1 Message Date
vicrodh 2802527912 chore(deps): update jsdom 29.0.2, notify-rust 4.14.0 
Also closed PR #298 (md-5 0.11) — breaking API change across 9
call sites for zero functionality gain.

cc
 2026-04-09 08:38:19 -06:00
Victor RH c1cb47779d Merge pull request #297 from vicrodh/dependabot/npm_and_yarn/pre-release/tauri-apps/plugin-dialog-2.7.0 2026-04-09 08:20:10 -06:00
Victor RH 5c21e7b0d5 Merge pull request #296 from vicrodh/dependabot/npm_and_yarn/pre-release/vite-8.0.8 2026-04-09 08:20:06 -06:00
Victor RH 8af186797e Merge pull request #294 from vicrodh/dependabot/npm_and_yarn/pre-release/sveltejs/kit-2.57.0 2026-04-09 08:19:58 -06:00
dependabot[bot] 80886b8948 chore(deps): bump @tauri-apps/plugin-dialog from 2.6.0 to 2.7.0 
Bumps [@tauri-apps/plugin-dialog](https://github.com/tauri-apps/plugins-workspace) from 2.6.0 to 2.7.0.
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](https://github.com/tauri-apps/plugins-workspace/compare/log-v2.6.0...log-v2.7.0)

---
updated-dependencies:
- dependency-name: "@tauri-apps/plugin-dialog"
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-09 05:37:12 +00:00
dependabot[bot] 6d40aacfa6 chore(deps-dev): bump vite from 8.0.5 to 8.0.8 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.5 to 8.0.8.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.8/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-09 05:37:03 +00:00
dependabot[bot] e2a4e8307c chore(deps-dev): bump @sveltejs/kit from 2.55.0 to 2.57.0 
Bumps [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) from 2.55.0 to 2.57.0.
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.57.0/packages/kit)

---
updated-dependencies:
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.57.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-09 05:36:54 +00:00
dependabot[bot] 2817ed6fba chore(deps-dev): bump svelte from 5.55.1 to 5.55.2 
Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 5.55.1 to 5.55.2.
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.55.2/packages/svelte)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.55.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-09 05:36:38 +00:00
vicrodh d1278e12ad chore: bump version to 1.2.4 - Hardening playback 
cc
 2026-04-07 09:48:04 -06:00
vicrodh 38ffd8d82f chore: bump version to 1.2.3 - Hardening playback 
cc
 2026-04-06 17:28:06 -06:00
vicrodh a7da06341f chore(deps-dev): bump svelte 5.55.0 -> 5.55.1 
Closes #253

cc
 2026-04-06 15:16:57 -06:00
vicrodh 3eab5b72ac chore(deps-dev): bump jsdom 27.4.0 -> 29.0.1 
Closes #254

cc
 2026-04-06 15:16:46 -06:00
vicrodh a98d3d953a chore(deps): bump vite 8.0.3 -> 8.0.5 (security) 
Fixes 3 dev server vulnerabilities:
- Path traversal in optimized deps .map handling
- Arbitrary file read via WebSocket
- server.fs.deny bypass with queries

Closes #274

cc
 2026-04-06 15:14:10 -06:00
vicrodh 96967e8112 chore: regenerate lockfiles for tauri-plugin-os dependency 
PR #265 added @tauri-apps/plugin-os (npm) and tauri-plugin-os (cargo)
but did not commit the updated lockfiles.

cc
 2026-04-05 21:23:41 -06:00
Afonso Jorge Ramos 65792b3a9c fix: sync package-lock.json with package.json 2026-04-06 01:35:19 +02:00
vicrodh 223dbf553e fix(security): override esbuild to 0.25.x (CVE in <= 0.24.2) 
svelte-i18n pins esbuild ^0.19.2 which is vulnerable. Override to
0.25.x resolves dependabot alert #2. Build verified.

cc
 2026-04-04 21:18:33 -06:00
vicrodh ee019851ef chore: bump version to 1.2.2 
cc
 2026-04-04 11:15:15 -06:00
dependabot[bot] 8b220bf3f8 chore(deps-dev): bump svelte-check from 4.4.5 to 4.4.6 
Bumps [svelte-check](https://github.com/sveltejs/language-tools) from 4.4.5 to 4.4.6.
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.4.5...svelte-check@4.4.6)

---
updated-dependencies:
- dependency-name: svelte-check
  dependency-version: 4.4.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-02 07:10:50 +00:00
Afonso Jorge Ramos 071865e79b fix: replace removed Github icon with simple-icons 
lucide-svelte 1.0 dropped brand icons, breaking the Github import in
AboutModal. Use @icons-pack/svelte-simple-icons (SiGithub) instead.
 2026-04-01 02:32:27 +02:00
victorrhgap 4e526b1ae5 chore(deps): upgrade vite 6->8, vite-plugin-svelte 5->7, kit 2.55 
- vite 8.0.3: Rolldown replaces Rollup+esbuild as build engine
- @sveltejs/vite-plugin-svelte 7.0.0: requires vite 8, inspector integrated
- @sveltejs/kit 2.55.0: vite 8 compatibility
- vitest 4.1.2: stable vite 8 peer dep
- Remove esbuild override (no longer needed with Rolldown)

Build, tests (92/92), and svelte-check all pass.

cc
 2026-03-31 10:30:05 -06:00
Victor RH 0ce54c3f10 Merge pull request #222 from vicrodh/dependabot/npm_and_yarn/pre-release/lucide-svelte-1.0.1 
chore(deps): bump lucide-svelte from 0.562.0 to 1.0.1
 2026-03-30 13:47:23 -06:00
Victor RH 7db3ecfae9 Merge pull request #221 from vicrodh/dependabot/npm_and_yarn/pre-release/svelte-5.55.0 
chore(deps-dev): bump svelte from 5.54.0 to 5.55.0
 2026-03-30 13:31:08 -06:00
dependabot[bot] 1557799856 chore(deps): bump lucide-svelte from 0.562.0 to 1.0.1 
Bumps [lucide-svelte](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-svelte) from 0.562.0 to 1.0.1.
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.0.1/packages/lucide-svelte)

---
updated-dependencies:
- dependency-name: lucide-svelte
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 05:35:54 +00:00
dependabot[bot] ce980f2c7b chore(deps-dev): bump svelte from 5.54.0 to 5.55.0 
Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 5.54.0 to 5.55.0.
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.55.0/packages/svelte)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.55.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 05:35:47 +00:00
dependabot[bot] d89088e8fe chore(deps-dev): bump picomatch from 4.0.3 to 4.0.4 
Bumps [picomatch](https://github.com/micromatch/picomatch) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 03:05:40 +00:00
victorrhgap 7c96720dca chore: bump version to 1.2.1 
Update all version endpoints, regenerate lockfiles,
add metainfo release entry and release docs.

cc
 2026-03-25 19:47:08 -06:00
vicrodh 0287a1feb8 fix: revert vite-plugin-svelte 7.0.0 -> 5.1.1 (requires vite 8) 
Dependabot PR #189 bumped to 7.0.0 which requires vite ^8.0.0 but
we're on vite 6.4.1. Revert to 5.1.1 which is compatible.

cc
 2026-03-19 18:17:01 -06:00
dependabot[bot] 85d9f62934 chore(deps-dev): bump svelte-check from 4.3.5 to 4.4.5 
Bumps [svelte-check](https://github.com/sveltejs/language-tools) from 4.3.5 to 4.4.5.
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.3.5...svelte-check@4.4.5)

---
updated-dependencies:
- dependency-name: svelte-check
  dependency-version: 4.4.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:21:55 +00:00
Victor RH 2c06d1163b Merge pull request #189 from vicrodh/dependabot/npm_and_yarn/pre-release/sveltejs/vite-plugin-svelte-7.0.0 
chore(deps-dev): bump @sveltejs/vite-plugin-svelte from 5.1.1 to 7.0.0
 2026-03-19 17:21:08 -06:00
Victor RH 5ec74a5beb Merge pull request #184 from vicrodh/dependabot/npm_and_yarn/pre-release/typescript-5.9.3 
chore(deps-dev): bump typescript from 5.6.3 to 5.9.3
 2026-03-19 17:20:56 -06:00
Victor RH 38fab9f7c9 Merge pull request #187 from vicrodh/dependabot/npm_and_yarn/pre-release/vitest-4.1.0 
chore(deps-dev): bump vitest from 4.0.17 to 4.1.0
 2026-03-19 17:20:54 -06:00
dependabot[bot] e6c5096fa2 chore(deps-dev): bump @sveltejs/vite-plugin-svelte from 5.1.1 to 7.0.0 
Bumps [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) from 5.1.1 to 7.0.0.
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.0.0/packages/vite-plugin-svelte)

---
updated-dependencies:
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:15:35 +00:00
dependabot[bot] 23279f2fe6 chore(deps-dev): bump vitest from 4.0.17 to 4.1.0 
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.0.17 to 4.1.0.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:15:27 +00:00
dependabot[bot] 4a19b05a19 chore(deps-dev): bump svelte from 5.53.6 to 5.54.0 
Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 5.53.6 to 5.54.0.
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.54.0/packages/svelte)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.54.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:15:10 +00:00
dependabot[bot] 3f6c590a04 chore(deps-dev): bump typescript from 5.6.3 to 5.9.3 
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.6.3 to 5.9.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.6.3...v5.9.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 5.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-19 23:15:01 +00:00
vicrodh af23efb3c1 chore: bump version to 1.2.0 
Updated:
- src-tauri/Cargo.toml
- src-tauri/tauri.conf.json
- package.json + package-lock.json
- snapcraft.yaml (root + packaging/)
- flake.nix
- Cargo.lock
- metainfo.xml (new release entry)
- README: Snap MPRIS limitation note with forum link

cc
 2026-03-19 17:12:31 -06:00
vicrodh 388fc45116 chore: fix dependabot alerts — update devalue 5.6.4, sveltekit 2.53.3 
- devalue 5.6.3 -> 5.6.4: fixes prototype pollution in parse/unflatten
  (GHSA #23, #24)
- @sveltejs/kit -> 2.53.3: fixes deserialization DoS in form actions

cc
 2026-03-19 14:05:35 -06:00
dependabot[bot] d62f19351c chore(deps): bump devalue from 5.6.3 to 5.6.4 
Bumps [devalue](https://github.com/sveltejs/devalue) from 5.6.3 to 5.6.4.
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/devalue/compare/v5.6.3...v5.6.4)

---
updated-dependencies:
- dependency-name: devalue
  dependency-version: 5.6.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-12 15:31:10 +00:00
vicrodh a4a6722110 chore: bump version to 1.1.20 2026-03-11 12:53:13 -06:00
vicrodh 05f1a5ec13 chore: bump version to 1.1.19 
- Cargo.toml, tauri.conf.json, package.json, snapcraft.yaml
- Regenerate Cargo.lock and package-lock.json
- Add metainfo release entry for 1.1.19
 2026-03-09 00:35:42 -06:00
vicrodh 26f20ceb3f fix: resolve tauri version mismatch and track Cargo.lock 
- Update @tauri-apps/api from 2.9.1 to 2.10.1 (matches Rust crate 2.10.x)
- Update @tauri-apps/cli from 2.9.6 to 2.10.1
- Remove Cargo.lock from .gitignore (binary projects should track it)
- Fixes build errors for distro packagers (NixOS, etc.)

Closes #151
 2026-03-09 00:23:49 -06:00
vicrodh b49d0b3e3b chore(release): bump version to 1.1.19-rc-1 
cx
 2026-03-01 18:59:24 -06:00
vicrodh 6c8354f825 feat: add booklet download button, remove pdfjs-dist dependency 
- Add save/download button to booklet toolbar with native file dialog
- Add v2_booklet_save command to copy PDF to user-chosen location
- Remove pdfjs-dist npm package (replaced by MuPDF backend)
- Delete static/pdfjs/ files (~1.9MB: worker, WASM decoders, fallbacks)
- Add bookletDownload i18n keys to all 4 locales
 2026-02-28 07:48:03 -06:00
vicrodh 025aba7c1a feat: add BookletViewer component with pdfjs-dist 
Modal PDF viewer for album booklets with page navigation,
zoom controls, and keyboard shortcuts. Uses pdfjs-dist to
render PDF pages from URL in canvas.
 2026-02-28 07:48:03 -06:00
dependabot[bot] f63d8d7a0a chore(deps-dev): bump svelte from 5.53.0 to 5.53.6 
Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 5.53.0 to 5.53.6.
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.53.6/packages/svelte)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.53.6
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-28 04:35:44 +00:00
dependabot[bot] ab2a70bccf chore(deps-dev): bump rollup from 4.55.2 to 4.59.0 
Bumps [rollup](https://github.com/rollup/rollup) from 4.55.2 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.55.2...v4.59.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-26 09:43:18 +00:00
vicrodh 321a165285 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/sveltejs/kit-2.52.2' into pre-release 
# Conflicts:
#	package-lock.json
 2026-02-20 14:34:45 -06:00
dependabot[bot] fd883f58c3 chore(deps-dev): bump @sveltejs/kit from 2.50.0 to 2.52.2 
Bumps [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) from 2.50.0 to 2.52.2.
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.52.2/packages/kit)

---
updated-dependencies:
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.52.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-20 16:43:19 +00:00
vicrodh 908716a230 merge: dependabot svelte 5.53.0 update 
Resolve package-lock.json conflict by regenerating lockfile.
 2026-02-20 10:33:21 -06:00
dependabot[bot] aeda5e0838 chore(deps-dev): bump svelte from 5.47.1 to 5.53.0 
Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 5.47.1 to 5.53.0.
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.53.0/packages/svelte)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.53.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-20 10:44:59 +00:00