• fix(app-vite): SSR/SSG dev server corrupted rendered HTML containing "$" patterns

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

• Becoming a sponsor on Github
• One-off donation via PayPal

• fix(QTime): default value to match docs
• fix(QRange): handle "null" as model value
• fix(QDate): events rendered no marker unless event-color was also set
• fix(QDate): undefined model rejected by the validator
• fix(useField): the control slot's field key never existed
• fix(QFile): file/selected slot scopes "ref" value
• fix(QEditor): a toolbar dropdown crashed the render on an unknown option token
• fix(QTree): setTicked() did nothing unless ticked was v-model bound
• fix(morph): cancel() crashed when reversing a non-tween morph
• fix(uploader-core): remove dead branch
• fix(morph): spacers pointed at missing keyframes
• fix(QUploader): factory() leaked the upload thread
• fix(useValidate): a misspelled pattern rule silently passed validation
• fix(QUploader): no "failed" event when the URL was missing
• fix(QTable): scrollTo() was a no-op without virtual-scroll-sticky-size-start
• fix(QTable): non-virtual scrollTo() threw on a non-numeric index
• fix(QCheckbox;QToggle;QRadio): [regression] label wrapped components do not work as expected anymore #18499
• fix(TouchPan;TouchSwipe): stop shielding the page from pointer events after the mouse gesture ended #18496

• Validation: a misspelled string rule now fails instead of silently passing (b67ea7785, 843a8c7f2)

Affects all components using rules (QInput, QSelect, QField, QFile, QDate, QTime, ...). Previously, a string rule that doesn't match any embedded validation pattern (e.g. rules: [ 'emial' ] instead of 'email') was silently skipped — the field validated as if the rule wasn't there. Such a rule now logs a console.error and fails validation (like any message-less rule, with no error message displayed).

Action needed: if a field in your app suddenly refuses to validate and the console shows Unknown validation pattern rule: "...", fix the rule name. The old behavior was accepting any input through the typo.

• QDate: event markers now render without event-color (9101b1636)

Previously, setting events without also setting event-color rendered no marker at all. Markers now render with the default styling (the secondary brand color), as documented. If you had events set and were (unknowingly) relying on the markers being invisible, days matching events will now show a marker.

• QDate / QTime: model-value now defaults to null (e75b65e70, db1df0569)

Passing an explicitly undefined model (e.g. v-model="myDate" before myDate is initialized) no longer triggers a Vue prop-validation warning — it now resolves to null ("no value selected"), matching the documented String | null | undefined type and the pattern QSlider already uses. Omitting the prop entirely still warns as a required prop. No action needed unless you were watching for that console warning.

• QUploader: @failed now fires when the upload URL is missing or invalid (7a4573418)

Previously, an invalid/unset url only logged a console error and marked the files as failed — the @failed event never fired, so programmatic error handling couldn't react. The event now fires with the documented { files, xhr } payload (an XHR that was never sent, so xhr.status is 0). If you have a @failed listener, it will now also receive this case.

• QTree: setTicked() now works without v-model:ticked too (edfb46ac6)

The public setTicked() method (and tickboxes in uncontrolled usage) previously did nothing unless ticked was bound with v-model. It now updates the internal state, mirroring how setExpanded() already behaved. Controlled usage (with v-model:ticked) is unchanged.

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

• Becoming a sponsor on Github
• One-off donation via PayPal

Please refer to CHANGELOG.md for details.

• refresh(data) no longer applies data.theme. Theme handling is fully decoupled from refresh; call changeTheme(theme) explicitly when you need to switch themes (e.g. mind.changeTheme(data.theme) before/after mind.refresh(data)).
• moveUpNode and moveDownNode no longer emit moveUpNode and moveDownNode operation events. They now reuse the existing moveNode flow and fire moveNodeBefore, moveNodeAfter, or moveNodeIn instead. Update any listeners accordingly.

• Add down layout support via direction: 3
• Add genMembers build script for generating class member declarations from TypeScript compiler output

• Prevent undo/redo when the map is not editable
• Fix ctrl+k chord accidentally triggering refresh
• Return move success status to control wheel event propagation
• Clamp node movement within container center boundaries
• Preserve line breaks when removing div on blur
• Ensure correct sorting of range indices in summaries
• Avoid mutating summaries during render
• Set direction for new parent node in insertParent
• Remove residual DOM after moveNodeIn
• Handle root topic positioning without me-main ancestor in arrow rendering
• Correct alignment centering for downward layout
• Align padding and adjust subline drawing for first-level nodes
• Fix DOWN direction addChild on root
• Suppress context menu after right button panning
• Prevent errors when node has no children in keypress handler
• Make arrow control point drag work with operation history
• Fire events before selecting nodes to support undo operations
• Include reshapeArrow in arrow operation types for undo/redo
• Sync selection state on unselectNodes to avoid stale history

• Refactor MindElixir to use class-based implementation
• Replace codegen with direct TypeScript compiler API usage for generating type declarations
• Optimize unionTopics filtering logic
• Unify moveUpNode and moveDownNode logic with getMoveTarget helper
• Improve calculation of anchor point on node border
• Remove stroke-linecap style support from arrow component

• Replace ESLint and Prettier with Biome for linting and formatting
• Replace less with lightningcss and update config
• Bump TypeScript to 7.x

Full Changelog: https://github.com/SSShooter/mind-elixir-core/compare/v5.14.0...v5.15.0

• poster: add support for marking player as maincontent (#9173) (bf013ba)

• focus the play toggle instead of the tech element on Edge to avoid a black frame with hardware-accelerated protected playback (#9217) (f337747)
• lang: add missing Japanese (ja) translation for "Playing in Picture-in-Picture" (#9209) (adc132a)
• lang: Update nn (Norwegian Nynorsk) translations (#9208) (60accc0)

• point Quick Start zencdn links at hosted 8.23.6 (#9215) (16fdbab)
• types: document Player.error(null) for clearing MediaError (#9174) (1ce2b21)

netlify preview for this version

This release includes fixes for the following security issues:

Affects: hono/jsx (server-side rendering). Fixes memo() reusing a retained render result across requests when props compare equal, where a component reading request-scoped values from ambient context — useContext(), useRequestContext(), or getContext() — could serve HTML rendered for another user's request, disclosing account data or request-scoped secrets such as CSRF tokens. GHSA-f23p-vx2j-j53r

Affects: hono/cors. Fixes a whitespace-tolerant regular expression with quadratic backtracking used to parse the Access-Control-Request-Headers preflight header when allowHeaders is not configured (the default), where a single preflight request carrying a long whitespace run could consume seconds of CPU and stall request processing. GHSA-8j4g-w8fx-2239

Affects: hono/language. Fixes quadratic string processing in language-tag normalization, where a crafted language tag with a large number of hyphen-separated subtags — supplied via a query parameter, cookie, or Accept-Language header — could cause excessive CPU consumption and block the event loop. GHSA-54fx-42gc-7vw4

Affects: hono/proxy. Fixes proxy() forwarding response headers that the origin's Connection header designates as connection-scoped, where headers intended only for the immediate peer — per RFC 9110 Section 7.6.1 — could be exposed to clients, disclosing connection-scoped or internal metadata. GHSA-79qm-7rj5-m7r9

Users who use hono/jsx for server-side rendering, hono/cors, hono/language, or hono/proxy are strongly encouraged to upgrade to this version.

• Wrong import  -  by @e-kucheriavyi in https://github.com/slidevjs/slidev/issues/2692 (5b352)
• client:
  • Hide goto dialog fully when closed  -  by @limeburst in https://github.com/slidevjs/slidev/issues/2695 (e0422)
  • Guard useNav against a missing injection context  -  by @renechoi in https://github.com/slidevjs/slidev/issues/2694 (edb23)
  • Support per-slide codeCopy and magicMoveCopy frontmatter overrides  -  by @amir-rezaei, ferkans-amir and @antfubot in https://github.com/slidevjs/slidev/issues/2686 (f7e77)

• Enable Turbopack build filesystem cache by default: #96493

Huge thanks to @timneutkens for helping!

更新日志

更新日志