@unitybase/adminui-vue #

Added #

7.0.62 2026-07-13 #
  • UDialog: added support for programmatically rendering custom component inside dialogs. this.$dialog({ component: require('./comp.vue').default })
7.0.61 2026-07-01 #
  • webDav.getURISync method to synchronously build a WebDAV URI for a document using the current session token when needed
  • UFile: new renderer and input slots to allow customizing view and loading states
  • UFileMultiple: new renderer slot to allow customizing the default file renderer for each file in the list for carousel and carouselWithPreview viewMode

Fixed #

7.0.62 2026-07-13 #
  • moment-plugin: fix SUPPORTED_MOMENT_LOCALES returning empty array [] in production build.
  • UCodeMirror: fixed styles for .ub-code-mirror — added width: 100% to ensure the component stretches to fill its container
  • UPdfViewerExt: when allowPrint is false, block Ctrl/Cmd+P (and other window.print paths) in addition to hiding the Print toolbar button — override PDFViewerApplication.supportsPrinting and wrap window.print inside the iframe
7.0.61 2026-07-01 #
  • SECURITY extended PDF viewer: use origin for postMessage and check event origin on got message

@unitybase/blob-stores #

Fixed #

5.24.47 2026-07-01 #
  • SECURITY fixed Arbitrary Code Injection by updating lodash@4.17.21 -> 4.18.1

@unitybase/cdn #

Changed #

5.24.94 2026-07-13 #
  • cdn_currency: removed default width for intCode and code3 columns

Fixed #

5.24.94 2026-07-13 #
  • cdn_currency: code3 attribute marked as isUnique: true
  • cdn_currency: fixed HTTP 500 on copy — description field is now always removed from execParams to prevent duplicate column in generated SQL

@unitybase/cs-shared #

Fixed #

5.24.20 2026-07-01 #
  • SECURITY fixed Arbitrary Code Injection by updating lodash@4.17.21 -> 4.18.1
  • SECURITY prevent potential path traverse attack in MDB BLOB store

@unitybase/openid-connect #

Fixed #

5.25.7 2026-07-01 #
  • SECURITY fixed Cross-site Scripting in cookie module: upgraded cookie@0.5 -> cookie@0.7.2

@unitybase/org #

Fixed #

5.24.100 2026-07-13 #
  • org_employeeOnStaff: fixed For attribute 'updateDate' of type 'Date' value must not contains seconds while planning pending updates

@unitybase/pdf #

Fixed #

5.3.10 2026-07-01 #
  • SECURITY prevent XML Injection by upgrading @xmldom/xmldom@0.8.10 -> @xmldom/xmldom@0.8.13

@unitybase/ub-pub #

Added #

5.24.49 2026-07-01 #
  • UBConnection.getCurrentSession() method to synchronously return the current UBSession, or undefined when the user is not authorized

Fixed #

5.24.49 2026-07-01 #
  • LocalRepository.selectAsArray: now resolves with the correct total when the requested attribute list differs from the source field order (previously undefined, which blanked the pagination total result)

@unitybase/ubq #

Fixed #

5.24.86 2026-07-01 #
  • SECURITY use new Function pattern instead of eval for evaluating of scheduler condition

@unitybase/ubs #

Added #

5.24.93 2026-07-13 #
  • ubs_message_edit-fm: "Copy" action for ubs_message list now creates a new message pre-filled with data
5.24.92 2026-07-01 #
  • ubs_message-fm: added props isDetail (toggles master-detail layout), messageIcons (custom map of message type → icon CSS class) and showOnlyUnread (filters list to unread messages only)

@unitybase/udisk #

Fixed #

5.24.69 2026-07-01 #
  • SECURITY fixed Arbitrary Code Injection by updating lodash@4.17.21 -> 4.18.1