@quasar/app-vite-v3.3.1
- fix(app-vite): SSR/SSG dev server corrupted rendered HTML containing "$" patterns
Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:
quasar-v2.23.5
- fix(QTime): default value to match docs
- fix(QRange): handle "null" as model value
- fix(QDate): events rendered no marker unless event-color was also set
- fix(QDate): undefined model rejected by the validator
- fix(useField): the control slot's field key never existed
- fix(QFile): file/selected slot scopes "ref" value
- fix(QEditor): a toolbar dropdown crashed the render on an unknown option token
- fix(QTree): setTicked() did nothing unless ticked was v-model bound
- fix(morph): cancel() crashed when reversing a non-tween morph
- fix(uploader-core): remove dead branch
- fix(morph): spacers pointed at missing keyframes
- fix(QUploader): factory() leaked the upload thread
- fix(useValidate): a misspelled pattern rule silently passed validation
- fix(QUploader): no "failed" event when the URL was missing
- fix(QTable): scrollTo() was a no-op without virtual-scroll-sticky-size-start
- fix(QTable): non-virtual scrollTo() threw on a non-numeric index
- fix(QCheckbox;QToggle;QRadio): [regression] label wrapped components do not work as expected anymore #18499
- fix(TouchPan;TouchSwipe): stop shielding the page from pointer events after the mouse gesture ended #18496
- Validation: a misspelled string rule now fails instead of silently passing (b67ea7785, 843a8c7f2)
Affects all components using rules (QInput, QSelect, QField, QFile, QDate, QTime, ...). Previously, a string rule that doesn't match any embedded validation pattern (e.g. rules: [ 'emial' ] instead of 'email') was silently skipped — the field validated as if the rule wasn't there. Such a rule now logs a console.error and fails validation (like any message-less rule, with no error message displayed).
Action needed: if a field in your app suddenly refuses to validate and the console shows Unknown validation pattern rule: "...", fix the rule name. The old behavior was accepting any input through the typo.
- QDate: event markers now render without event-color (9101b1636)
Previously, setting events without also setting event-color rendered no marker at all. Markers now render with the default styling (the secondary brand color), as documented. If you had events set and were (unknowingly) relying on the markers being invisible, days matching events will now show a marker.
- QDate / QTime: model-value now defaults to null (e75b65e70, db1df0569)
Passing an explicitly undefined model (e.g. v-model="myDate" before myDate is initialized) no longer triggers a Vue prop-validation warning — it now resolves to null ("no value selected"), matching the documented String | null | undefined type and the pattern QSlider already uses. Omitting the prop entirely still warns as a required prop. No action needed unless you were watching for that console warning.
- QUploader: @failed now fires when the upload URL is missing or invalid (7a4573418)
Previously, an invalid/unset url only logged a console error and marked the files as failed — the @failed event never fired, so programmatic error handling couldn't react. The event now fires with the documented { files, xhr } payload (an XHR that was never sent, so xhr.status is 0). If you have a @failed listener, it will now also receive this case.
- QTree: setTicked() now works without v-model:ticked too (edfb46ac6)
The public setTicked() method (and tickboxes in uncontrolled usage) previously did nothing unless ticked was bound with v-model. It now updates the internal state, mirroring how setExpanded() already behaved. Controlled usage (with v-model:ticked) is unchanged.
Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:
v7.22.0
Please refer to CHANGELOG.md for details.
v5.15.0
refresh(data)no longer appliesdata.theme. Theme handling is fully decoupled fromrefresh; callchangeTheme(theme)explicitly when you need to switch themes (e.g.mind.changeTheme(data.theme)before/aftermind.refresh(data)).moveUpNodeandmoveDownNodeno longer emitmoveUpNodeandmoveDownNodeoperation events. They now reuse the existingmoveNodeflow and firemoveNodeBefore,moveNodeAfter, ormoveNodeIninstead. Update any listeners accordingly.
- Add down layout support via
direction: 3 - Add
genMembersbuild script for generating class member declarations from TypeScript compiler output
- Prevent undo/redo when the map is not editable
- Fix ctrl+k chord accidentally triggering refresh
- Return move success status to control wheel event propagation
- Clamp node movement within container center boundaries
- Preserve line breaks when removing div on blur
- Ensure correct sorting of range indices in summaries
- Avoid mutating summaries during render
- Set direction for new parent node in
insertParent - Remove residual DOM after
moveNodeIn - Handle root topic positioning without
me-mainancestor in arrow rendering - Correct alignment centering for downward layout
- Align padding and adjust subline drawing for first-level nodes
- Fix DOWN direction
addChildon root - Suppress context menu after right button panning
- Prevent errors when node has no children in keypress handler
- Make arrow control point drag work with operation history
- Fire events before selecting nodes to support undo operations
- Include
reshapeArrowin arrow operation types for undo/redo - Sync selection state on
unselectNodesto avoid stale history
- Refactor MindElixir to use class-based implementation
- Replace codegen with direct TypeScript compiler API usage for generating type declarations
- Optimize
unionTopicsfiltering logic - Unify
moveUpNodeandmoveDownNodelogic withgetMoveTargethelper - Improve calculation of anchor point on node border
- Remove stroke-linecap style support from arrow component
- Replace ESLint and Prettier with Biome for linting and formatting
- Replace less with lightningcss and update config
- Bump TypeScript to 7.x
Full Changelog: https://github.com/SSShooter/mind-elixir-core/compare/v5.14.0...v5.15.0
v8.24.0
8.24.0 (2026-08-03)
- focus the play toggle instead of the tech element on Edge to avoid a black frame with hardware-accelerated protected playback (#9217) (f337747)
- lang: add missing Japanese (ja) translation for "Playing in Picture-in-Picture" (#9209) (adc132a)
- lang: Update nn (Norwegian Nynorsk) translations (#9208) (60accc0)
v4.12.34
This release includes fixes for the following security issues:
Affects: hono/jsx (server-side rendering). Fixes memo() reusing a retained render result across requests when props compare equal, where a component reading request-scoped values from ambient context — useContext(), useRequestContext(), or getContext() — could serve HTML rendered for another user's request, disclosing account data or request-scoped secrets such as CSRF tokens. GHSA-f23p-vx2j-j53r
Affects: hono/cors. Fixes a whitespace-tolerant regular expression with quadratic backtracking used to parse the Access-Control-Request-Headers preflight header when allowHeaders is not configured (the default), where a single preflight request carrying a long whitespace run could consume seconds of CPU and stall request processing. GHSA-8j4g-w8fx-2239
Affects: hono/language. Fixes quadratic string processing in language-tag normalization, where a crafted language tag with a large number of hyphen-separated subtags — supplied via a query parameter, cookie, or Accept-Language header — could cause excessive CPU consumption and block the event loop. GHSA-54fx-42gc-7vw4
Affects: hono/proxy. Fixes proxy() forwarding response headers that the origin's Connection header designates as connection-scoped, where headers intended only for the immediate peer — per RFC 9110 Section 7.6.1 — could be exposed to clients, disclosing connection-scoped or internal metadata. GHSA-79qm-7rj5-m7r9
Users who use hono/jsx for server-side rendering, hono/cors, hono/language, or hono/proxy are strongly encouraged to upgrade to this version.
v52.19.0
- Wrong import - by @e-kucheriavyi in https://github.com/slidevjs/slidev/issues/2692 (5b352)
- client:
- Hide goto dialog fully when closed - by @limeburst in https://github.com/slidevjs/slidev/issues/2695 (e0422)
- Guard useNav against a missing injection context - by @renechoi in https://github.com/slidevjs/slidev/issues/2694 (edb23)
- Support per-slide codeCopy and magicMoveCopy frontmatter overrides - by @amir-rezaei, ferkans-amir and @antfubot in https://github.com/slidevjs/slidev/issues/2686 (f7e77)