mirror of
https://github.com/opengeos/GeoLibre.git
synced 2026-11-04 10:43:36 +00:00
Regenerate the lockfile with npm 12 and move the stale pins (#3324)
The lock was rebuilt with npm 11, which scrambled the peer flags, ignored the a5-js override (a nested 0.10.1 under geo-layers) and left two copies of the style spec. Rebuild it from main's lock with npm 12 so every package has one copy and the peer flags match main. npm 12 resolved the newest versions in range, so move the CDN pins to pglite 0.5.15, pglite-postgis 0.2.15 and mapbox-gl 3.34.2. Also move the maplibre-gl override to ^6.16.0 and note that zarr-cesium 0.4.4 still does not forward colorScale.
This commit is contained in:
Qiusheng Wu authored and 
GitHub committed
1 parent
53345f73b7
commit
c8d064a1ef
6 files changed
+368
-458
No files matched your search
@@ -21,7 +21,7 @@
|
||||
}
|
||||
],
|
||||
"security": {
|
||||
"csp": "default-src 'self'; connect-src 'self' ipc: http://ipc.localhost asset: data: blob: https: http: http://asset.localhost wss://collab.geolibre.app wss://stream.aisstream.io ws://127.0.0.1:* ws://localhost:*; img-src 'self' asset: data: blob: https: http://asset.localhost; media-src 'self' blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data: https://js.arcgis.com/; script-src 'self' blob: 'unsafe-eval' 'wasm-unsafe-eval' https://cdn.jsdelivr.net/pyodide/v0.27.7/full/ https://cdn.jsdelivr.net/npm/@electric-sql/pglite@0.5.13/ https://cdn.jsdelivr.net/npm/@electric-sql/pglite-postgis@0.2.13/ https://cdn.jsdelivr.net/npm/onnxruntime-web@1.31.1/dist/ https://cdn.jsdelivr.net/npm/@duckdb/duckdb-wasm@1.33.1-dev57.0/dist/ https://cdn.jsdelivr.net/npm/@duckdb/duckdb-wasm@1.31.0/ https://cdn.jsdelivr.net/npm/apache-arrow@17.0.0/ https://cdn.jsdelivr.net/npm/tslib@2.6.3/ https://cdn.jsdelivr.net/npm/flatbuffers@24.3.25/ https://cdn.jsdelivr.net/npm/sql.js@1.13.0/dist/ https://cdn.jsdelivr.net/npm/geojson-vt@4.0.2/ https://cdn.jsdelivr.net/npm/vt-pbf@3.1.3/ https://cdn.jsdelivr.net/npm/pbf@3.2.1/ https://cdn.jsdelivr.net/npm/ieee754@1.1.13/ https://cdn.jsdelivr.net/npm/@mapbox/point-geometry@0.1.0/ https://cdn.jsdelivr.net/npm/@mapbox/vector-tile@1.3.1/ https://js.arcgis.com/ https://accounts.google.com https://api.mapbox.com/mapbox-gl-js/; child-src 'self' http://127.0.0.1:* http://localhost:* https://accounts.google.com https://www.google.com; frame-src 'self' http://127.0.0.1:* http://localhost:* https://accounts.google.com https://www.google.com; worker-src blob: 'self'",
|
||||
"csp": "default-src 'self'; connect-src 'self' ipc: http://ipc.localhost asset: data: blob: https: http: http://asset.localhost wss://collab.geolibre.app wss://stream.aisstream.io ws://127.0.0.1:* ws://localhost:*; img-src 'self' asset: data: blob: https: http://asset.localhost; media-src 'self' blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data: https://js.arcgis.com/; script-src 'self' blob: 'unsafe-eval' 'wasm-unsafe-eval' https://cdn.jsdelivr.net/pyodide/v0.27.7/full/ https://cdn.jsdelivr.net/npm/@electric-sql/pglite@0.5.15/ https://cdn.jsdelivr.net/npm/@electric-sql/pglite-postgis@0.2.15/ https://cdn.jsdelivr.net/npm/onnxruntime-web@1.31.1/dist/ https://cdn.jsdelivr.net/npm/@duckdb/duckdb-wasm@1.33.1-dev57.0/dist/ https://cdn.jsdelivr.net/npm/@duckdb/duckdb-wasm@1.31.0/ https://cdn.jsdelivr.net/npm/apache-arrow@17.0.0/ https://cdn.jsdelivr.net/npm/tslib@2.6.3/ https://cdn.jsdelivr.net/npm/flatbuffers@24.3.25/ https://cdn.jsdelivr.net/npm/sql.js@1.13.0/dist/ https://cdn.jsdelivr.net/npm/geojson-vt@4.0.2/ https://cdn.jsdelivr.net/npm/vt-pbf@3.1.3/ https://cdn.jsdelivr.net/npm/pbf@3.2.1/ https://cdn.jsdelivr.net/npm/ieee754@1.1.13/ https://cdn.jsdelivr.net/npm/@mapbox/point-geometry@0.1.0/ https://cdn.jsdelivr.net/npm/@mapbox/vector-tile@1.3.1/ https://js.arcgis.com/ https://accounts.google.com https://api.mapbox.com/mapbox-gl-js/; child-src 'self' http://127.0.0.1:* http://localhost:* https://accounts.google.com https://www.google.com; frame-src 'self' http://127.0.0.1:* http://localhost:* https://accounts.google.com https://www.google.com; worker-src blob: 'self'",
|
||||
"dangerousDisableAssetCspModification": ["style-src"],
|
||||
"assetProtocol": {
|
||||
"enable": true,
|
||||
|
||||
+1
-1
@@ -196,7 +196,7 @@ server {
|
||||
# launched JupyterLab server in the Notebook panel. That is desktop-only
|
||||
# and intentionally NOT mirrored here: the web build embeds the
|
||||
# same-origin self-hosted JupyterLite site, already covered by 'self'.
|
||||
add_header Content-Security-Policy "default-src 'self'; connect-src 'self' https: data: blob: http://127.0.0.1:* http://localhost:* wss://collab.geolibre.app wss://stream.aisstream.io__GEOLIBRE_COLLAB_CONNECT_SRC__ ws://127.0.0.1:* ws://localhost:*; img-src 'self' data: blob: https:; media-src 'self' blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data: https://js.arcgis.com/; script-src 'self' blob: 'unsafe-eval' 'wasm-unsafe-eval' https://cdn.jsdelivr.net/pyodide/v0.27.7/full/ https://cdn.jsdelivr.net/npm/@electric-sql/pglite@0.5.13/ https://cdn.jsdelivr.net/npm/@electric-sql/pglite-postgis@0.2.13/ https://cdn.jsdelivr.net/npm/onnxruntime-web@1.31.1/dist/ https://cdn.jsdelivr.net/npm/@duckdb/duckdb-wasm@1.33.1-dev57.0/dist/ https://cdn.jsdelivr.net/npm/@duckdb/duckdb-wasm@1.31.0/ https://cdn.jsdelivr.net/npm/apache-arrow@17.0.0/ https://cdn.jsdelivr.net/npm/tslib@2.6.3/ https://cdn.jsdelivr.net/npm/flatbuffers@24.3.25/ https://cdn.jsdelivr.net/npm/sql.js@1.13.0/dist/ https://cdn.jsdelivr.net/npm/geojson-vt@4.0.2/ https://cdn.jsdelivr.net/npm/vt-pbf@3.1.3/ https://cdn.jsdelivr.net/npm/pbf@3.2.1/ https://cdn.jsdelivr.net/npm/ieee754@1.1.13/ https://cdn.jsdelivr.net/npm/@mapbox/point-geometry@0.1.0/ https://cdn.jsdelivr.net/npm/@mapbox/vector-tile@1.3.1/ https://js.arcgis.com/ https://accounts.google.com__GEOLIBRE_CLERK_SCRIPT_SRC__ https://api.mapbox.com/mapbox-gl-js/; child-src 'self' https://accounts.google.com https://www.google.com; frame-src 'self' https://accounts.google.com https://www.google.com__GEOLIBRE_CLERK_FRAME_SRC____GEOLIBRE_AUTH0_FRAME_SRC__; worker-src blob: 'self'" always;
|
||||
add_header Content-Security-Policy "default-src 'self'; connect-src 'self' https: data: blob: http://127.0.0.1:* http://localhost:* wss://collab.geolibre.app wss://stream.aisstream.io__GEOLIBRE_COLLAB_CONNECT_SRC__ ws://127.0.0.1:* ws://localhost:*; img-src 'self' data: blob: https:; media-src 'self' blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data: https://js.arcgis.com/; script-src 'self' blob: 'unsafe-eval' 'wasm-unsafe-eval' https://cdn.jsdelivr.net/pyodide/v0.27.7/full/ https://cdn.jsdelivr.net/npm/@electric-sql/pglite@0.5.15/ https://cdn.jsdelivr.net/npm/@electric-sql/pglite-postgis@0.2.15/ https://cdn.jsdelivr.net/npm/onnxruntime-web@1.31.1/dist/ https://cdn.jsdelivr.net/npm/@duckdb/duckdb-wasm@1.33.1-dev57.0/dist/ https://cdn.jsdelivr.net/npm/@duckdb/duckdb-wasm@1.31.0/ https://cdn.jsdelivr.net/npm/apache-arrow@17.0.0/ https://cdn.jsdelivr.net/npm/tslib@2.6.3/ https://cdn.jsdelivr.net/npm/flatbuffers@24.3.25/ https://cdn.jsdelivr.net/npm/sql.js@1.13.0/dist/ https://cdn.jsdelivr.net/npm/geojson-vt@4.0.2/ https://cdn.jsdelivr.net/npm/vt-pbf@3.1.3/ https://cdn.jsdelivr.net/npm/pbf@3.2.1/ https://cdn.jsdelivr.net/npm/ieee754@1.1.13/ https://cdn.jsdelivr.net/npm/@mapbox/point-geometry@0.1.0/ https://cdn.jsdelivr.net/npm/@mapbox/vector-tile@1.3.1/ https://js.arcgis.com/ https://accounts.google.com__GEOLIBRE_CLERK_SCRIPT_SRC__ https://api.mapbox.com/mapbox-gl-js/; child-src 'self' https://accounts.google.com https://www.google.com; frame-src 'self' https://accounts.google.com https://www.google.com__GEOLIBRE_CLERK_FRAME_SRC____GEOLIBRE_AUTH0_FRAME_SRC__; worker-src blob: 'self'" always;
|
||||
}
|
||||
|
||||
# The service worker has a stable filename, so it must always revalidate;
|
||||
|
||||
+1
-1
@@ -542,7 +542,7 @@ bump, check whether the Zarr control now forwards `minzoom` so the write can go.
|
||||
relies on two things zarr-cesium does not export as API:
|
||||
|
||||
- `ZarrLayerProvider` only honours named matplotlib colormaps (its documented
|
||||
`colorScale` option is not forwarded in 0.3.3), so GeoLibre writes the layer's
|
||||
`colorScale` option is still not forwarded in 0.4.4), so GeoLibre writes the layer's
|
||||
ramp to the provider's private `source.colorScale.colors` and calls
|
||||
`source.updateColormapTexture()`. If those move, the globe draws the default
|
||||
ramp and logs one warning.
|
||||
|
||||
Generated
+362
-452
File diff suppressed because it is too large.
Load diff
+1
-1
@@ -90,7 +90,7 @@
|
||||
},
|
||||
"fast-uri": "^3.1.7",
|
||||
"filelist": "^2.0.2",
|
||||
"maplibre-gl": "^6.15.0",
|
||||
"maplibre-gl": "^6.16.0",
|
||||
"miniflare": {
|
||||
"undici": "^7.29.0"
|
||||
},
|
||||
|
||||
@@ -8,12 +8,12 @@ import type * as mapboxgl from "mapbox-gl";
|
||||
* `tests/mapbox-gl-loader.test.ts` ties these constants to the installed
|
||||
* package, so a bump fails until they are updated (docs/maintenance.md).
|
||||
*/
|
||||
export const MAPBOX_GL_VERSION = "3.34.1";
|
||||
export const MAPBOX_GL_VERSION = "3.34.2";
|
||||
const MAPBOX_GL_CDN_BASE = `https://api.mapbox.com/mapbox-gl-js/v${MAPBOX_GL_VERSION}`;
|
||||
export const MAPBOX_GL_SCRIPT_URL = `${MAPBOX_GL_CDN_BASE}/mapbox-gl.js`;
|
||||
export const MAPBOX_GL_STYLE_URL = `${MAPBOX_GL_CDN_BASE}/mapbox-gl.css`;
|
||||
export const MAPBOX_GL_SCRIPT_INTEGRITY =
|
||||
"sha384-bRGpP2/mvLNdh4nRXgIf97xnGmUJRpB58iFa5NaGLEFu8v+0T/Bc0c+iX+AvMgVP";
|
||||
"sha384-RN6DqMUx296OGO3pOwok6hO3u3CQQzI1OXC8hpTzFSpnsG73oYJYy3fTrs3gmav5";
|
||||
export const MAPBOX_GL_STYLE_INTEGRITY =
|
||||
"sha384-QWCpuitI3tz8lJHSbcFQpEAx5BkQcYir4RLGZBb8zOIH0es6XDO8Kv6Gat+wOJRN";
|
||||
|
||||
|
||||
Reference in new issue
Block a user