@unitybase/adminui-vue #

Added #

7.0.63 2026-07-29 #
  • UNavbarUserButton: added settingsPrepend and settingsAppend slots to allow customizing the dropdown menu
  • UTableEntity: FilterSelector and Sort components — added default slots for customizing the filter and sort trigger buttons
7.0.62 2026-07-13 #
  • UDialog: added support for programmatically rendering custom component inside dialogs. this.$dialog({ component: require('./comp.vue').default })
7.0.61 2026-07-01 #
  • webDav.getURISync method to synchronously build a WebDAV URI for a document using the current session token when needed
  • UFile: new renderer and input slots to allow customizing view and loading states
  • UFileMultiple: new renderer slot to allow customizing the default file renderer for each file in the list for carousel and carouselWithPreview viewMode

Fixed #

7.0.63 2026-07-29 #
  • fixed bug when clicking on a record with expired history date — server couldn't find the data. Now properly bypasses the recordhistory filter in copyExisting action
  • ub-auth-core: fixed logo blink on auth page
7.0.62 2026-07-13 #
  • moment-plugin: fix SUPPORTED_MOMENT_LOCALES returning empty array [] in production build.
  • UCodeMirror: fixed styles for .ub-code-mirror — added width: 100% to ensure the component stretches to fill its container
  • UPdfViewerExt: when allowPrint is false, block Ctrl/Cmd+P (and other window.print paths) in addition to hiding the Print toolbar button — override PDFViewerApplication.supportsPrinting and wrap window.print inside the iframe
7.0.61 2026-07-01 #
  • SECURITY extended PDF viewer: use origin for postMessage and check event origin on got message

@unitybase/blob-stores #

Fixed #

5.24.47 2026-07-01 #
  • SECURITY fixed Arbitrary Code Injection by updating lodash@4.17.21 -> 4.18.1

@unitybase/cdn #

Changed #

5.24.94 2026-07-13 #
  • cdn_currency: removed default width for intCode and code3 columns

Fixed #

5.24.94 2026-07-13 #
  • cdn_currency: code3 attribute marked as isUnique: true
  • cdn_currency: fixed HTTP 500 on copy — description field is now always removed from execParams to prevent duplicate column in generated SQL

@unitybase/cs-shared #

Fixed #

5.24.21 2026-07-29 #
  • use globalThis whenever possible to store _defaultLang - this fix vite build
5.24.20 2026-07-01 #
  • SECURITY fixed Arbitrary Code Injection by updating lodash@4.17.21 -> 4.18.1
  • SECURITY prevent potential path traverse attack in MDB BLOB store

@unitybase/openid-connect #

Removed #

5.25.8 2026-07-29 #
  • resolveExternalURL origin-resolution logic moved to @unitybase/ub package as App.getCurrentExternalURL()

Fixed #

5.25.7 2026-07-01 #
  • SECURITY fixed Cross-site Scripting in cookie module: upgraded cookie@0.5 -> cookie@0.7.2

@unitybase/org #

Changed #

5.24.101 2026-07-29 #
  • audit mixin for org_employeeonstaff_pending entity is disabled now

Fixed #

5.24.101 2026-07-29 #
  • fixed updateStaffUnitCaptions scheduler error Update impossible. Record in 'org_staffunit' with ID=XXXXX not found in case staff unit is removed
5.24.100 2026-07-13 #
  • org_employeeOnStaff: fixed For attribute 'updateDate' of type 'Date' value must not contains seconds while planning pending updates

@unitybase/pdf #

Fixed #

5.3.10 2026-07-01 #
  • SECURITY prevent XML Injection by upgrading @xmldom/xmldom@0.8.10 -> @xmldom/xmldom@0.8.13

@unitybase/ub-pub #

Added #

5.24.49 2026-07-01 #
  • UBConnection.getCurrentSession() method to synchronously return the current UBSession, or undefined when the user is not authorized

Fixed #

5.24.49 2026-07-01 #
  • LocalRepository.selectAsArray: now resolves with the correct total when the requested attribute list differs from the source field order (previously undefined, which blanked the pagination total result)

@unitybase/ub #

Added #

5.25.87 2026-07-29 #
  • App.getCurrentExternalURL(): resolves the actual external URL (origin) of the application for the current request/session. Unlike the static App.externalURL, it is context-aware - in a URI-based multitenant deployment it returns the origin of the current tenant

@unitybase/uba #

Fixed #

5.24.78 2026-07-29 #
  • uba_user.getCertificate now throws client-side error in case uba_usercertificate not contain user certificate

@unitybase/ubcli #

Added #

5.25.102 2026-07-29 #
  • DDL generator now can create Float attribute with specified scale, if scale is specified in customSettings.scale

@unitybase/ubq #

Fixed #

5.24.86 2026-07-01 #
  • SECURITY use new Function pattern instead of eval for evaluating of scheduler condition

@unitybase/ubs #

Added #

5.24.93 2026-07-13 #
  • ubs_message_edit-fm: "Copy" action for ubs_message list now creates a new message pre-filled with data
5.24.92 2026-07-01 #
  • ubs_message-fm: added props isDetail (toggles master-detail layout), messageIcons (custom map of message type → icon CSS class) and showOnlyUnread (filters list to unread messages only)

Changed #

5.24.94 2026-07-29 #
  • Refactored notification system based on ubs_message. Now recipients of messages are based on aclRLS permissions and ubs_message_recipient indicates read status only.
    • added new attribute ubs_message.showInPopup - if set to true, message will be shown in popup window on user login (if message is unread and not expired)
    • message recipients are based on aclRLS mixin, so message can be sent to organization units and/or subject groups (instead of only to users)
    • removed ubs_message_edit entity and WS-Notifications
    • rewritten ubs_message-edit form, added ability to send message via aclRLS instead of only to users
    • ubs_message_recipient entity has information about message read status and read date
    • BREAKING CHANGE
      • ubs_message_recipient.accept renamed to ubs_message_recipient.acceptMessages - now accepts messageID parameter instead of recipientID
      • ubs_message_recipient.acceptAll renamed to ubs_message_recipient.acceptAllMessages

Fixed #

5.24.94 2026-07-29 #
  • fixed uk localization for ubm_enum.UBS_MESSAGE_TYPE.warning.name: Попереждення -> Попередження

@unitybase/udisk #

Fixed #

5.24.69 2026-07-01 #
  • SECURITY fixed Arbitrary Code Injection by updating lodash@4.17.21 -> 4.18.1