ed9d2c1b1f
build(deps): patch security vulnerabilities in composer and npm deps
...
PHP (composer.lock):
- guzzlehttp/guzzle 7.10.0 -> 7.13.1 (CVE-2026-55767, CVE-2026-55568)
- guzzlehttp/psr7 2.9.0 -> 2.12.3 (CVE-2026-55766, CVE-2026-49214, CVE-2026-48998)
- symfony/cache 5.4.46 -> 5.4.53 (CVE-2026-45073 SQL injection)
frontend/admin: npm audit fix (axios, shell-quote, form-data, js-yaml,
esbuild, vite) -> 0 vulnerabilities
frontend/spa: npm audit fix + vitest/@vitest/ui -> 4.1.9 (flatted) ->
0 vulnerabilities
Verified: 299 PHPUnit tests pass, 53 SPA vitest pass, both frontends build.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-30 13:18:15 +03:00
c24e30f14c
fix(spa): visual fixes for SPA ( #106 )
...
* fix(spa): prevent more-link button from wrapping in block header
Long block titles squeezed the "Смотреть всё" link in BaseBlock,
causing its text to wrap onto two lines. Allow the title column to
shrink and keep the link in a single line.
* fix(spa): enable typography styles for product description
Add @tailwindcss/typography plugin so the `prose` classes used in the
product description actually apply: paragraph spacing, headings, hr,
links and tables. Also make wide tables inside `.prose` horizontally
scrollable instead of overflowing the viewport.
* fix(spa): open description links via Telegram WebApp API
Links inside the v-html product description used to navigate the
Mini App's WebView away from the app on Telegram mobile. Intercept
clicks on anchors in the description and route them through
Telegram.WebApp.openTelegramLink for t.me/tg:// targets and
Telegram.WebApp.openLink for everything else, falling back to
window.open when running outside Telegram.
* fix(spa): refine categories list layout
Tighten category item typography (text-base, leading-snug) and slightly
enlarge the icon for a better balance with long titles. Drop the
duplicate "Назад к ..." link and replace the parent-category CTA with
a daisyUI soft block button "Показать все товары категории" so the
primary action is visually distinct from the list.
2026-05-25 10:13:42 +03:00
dependabot[bot]
41b17925df
build(deps): bump the npm_and_yarn group across 2 directories with 6 updates
...
Bumps the npm_and_yarn group with 4 updates in the /frontend/admin directory: [axios](https://github.com/axios/axios ), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ), [follow-redirects](https://github.com/follow-redirects/follow-redirects ) and [postcss](https://github.com/postcss/postcss ).
Bumps the npm_and_yarn group with 4 updates in the /frontend/spa directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ), [postcss](https://github.com/postcss/postcss ), [js-cookie](https://github.com/js-cookie/js-cookie ) and [ws](https://github.com/websockets/ws ).
Updates `axios` from 1.13.6 to 1.15.2
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.13.6...v1.15.2 )
Updates `vite` from 7.3.1 to 7.3.3
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.3/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v7.3.3/packages/vite )
Updates `follow-redirects` from 1.15.11 to 1.16.0
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases )
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.11...v1.16.0 )
Updates `postcss` from 8.5.8 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.8...8.5.15 )
Updates `vite` from 7.3.1 to 7.3.3
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.3/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v7.3.3/packages/vite )
Updates `postcss` from 8.5.8 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.8...8.5.15 )
Updates `js-cookie` from 3.0.5 to 3.0.7
- [Release notes](https://github.com/js-cookie/js-cookie/releases )
- [Commits](https://github.com/js-cookie/js-cookie/compare/v3.0.5...v3.0.7 )
Updates `ws` from 8.19.0 to 8.21.0
- [Release notes](https://github.com/websockets/ws/releases )
- [Commits](https://github.com/websockets/ws/compare/8.19.0...8.21.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.15.2
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: vite
dependency-version: 7.3.3
dependency-type: direct:development
dependency-group: npm_and_yarn
- dependency-name: follow-redirects
dependency-version: 1.16.0
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: postcss
dependency-version: 8.5.15
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: vite
dependency-version: 7.3.3
dependency-type: direct:development
dependency-group: npm_and_yarn
- dependency-name: postcss
dependency-version: 8.5.15
dependency-type: direct:development
dependency-group: npm_and_yarn
- dependency-name: js-cookie
dependency-version: 3.0.7
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: ws
dependency-version: 8.21.0
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-25 08:01:29 +03:00
dependabot[bot]
37fe0cabda
build(deps): bump swiper
...
Bumps the npm_and_yarn group with 1 update in the /frontend/spa directory: [swiper](https://github.com/nolimits4web/Swiper ).
Updates `swiper` from 12.0.3 to 12.1.2
- [Release notes](https://github.com/nolimits4web/Swiper/releases )
- [Changelog](https://github.com/nolimits4web/swiper/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nolimits4web/Swiper/compare/v12.0.3...v12.1.2 )
---
updated-dependencies:
- dependency-name: swiper
dependency-version: 12.1.2
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-22 13:34:35 +03:00
08f0e24859
feat: remove unused js libs
2025-12-21 18:26:55 +03:00
38668fb4a7
feat: image processing improve
2025-12-06 12:59:55 +03:00
6a59dcc0c9
feat: add FormKit framework support and update dependencies
...
- Add `telecart_forms` table migration and default checkout form seeder
- Implement `FormsHandler` to fetch form schemas
- Update `OrderCreateService` to handle custom fields in order comments
- Add `update` method to QueryBuilder and Grammar
- Add `Arr::except` helper
- Update composer dependencies (Carbon, Symfony, PHPUnit, etc.)
- Improve `MigratorService` error handling
- Add unit tests for new functionality
2025-11-23 16:05:46 +03:00
3345d4eb94
tests: add frontend tests
2025-11-11 00:17:03 +03:00
5681ac592a
refactor: move spa to frontend folder
2025-10-27 12:32:38 +03:00
