Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 7, 2025

Removes pdfmake. It's no longer used after updating ancestor dependency admin-lte. These dependencies need to be updated together.

Removes pdfmake

Updates admin-lte from 3.2.0 to 4.0.0-rc3

Release notes

Sourced from admin-lte's releases.

AdminLTE v4.0.0-rc1 - Major Modernization Release

This release represents a complete modernization of the AdminLTE codebase, bringing it up to current standards with the latest tooling, dependencies, and best practices.

Key Highlights

  • Zero Security Vulnerabilities - All dependencies updated and vulnerabilities resolved
  • Modern Tooling - ESLint v9, Astro 5.x, latest Stylelint and build tools
  • Better Developer Experience - New npm start command, improved scripts, cleaner builds
  • Latest Dependencies - Bootstrap 5.3.7, Node.js ES modules, 50+ package updates
  • Code Quality - Zero linting errors, removed technical debt, standardized formatting
  • Future-Ready - Modern configuration patterns, optimal bundle sizes, enhanced maintainability

Quick Start

# Install dependencies
npm install
Start development server
npm start
Build for production
npm run production

Major Changes

Infrastructure & Tooling

  • Upgraded to ES Modules with "type": "module" in package.json
  • Complete ESLint v9 migration with modern flat configuration format
  • Enhanced Astro configuration with static site generation
  • Optimized build scripts and developer experience

Dependencies Updated

  • astro: 4.15.12 → 5.10.0
  • eslint: 8.57.1 → 9.29.0
  • bootstrap: 5.3.3 → 5.3.7
  • sass: 1.78.0 → 1.89.2
  • typescript: 5.6.2 → 5.8.3
  • Plus 50+ other packages updated to latest versions

Security & Quality

  • Resolved all npm security vulnerabilities (0 remaining)
  • Updated browserslist database for modern browser compatibility
  • Fixed all SASS deprecation warnings
  • Zero linting errors across all file types

Migration Guide

... (truncated)

Changelog

Sourced from admin-lte's changelog.

[4.0.0-rc3] - 2025-06-24

Production Deployment & Cross-Platform Compatibility

This release resolves critical production deployment issues and ensures consistent behavior between development and production environments across different deployment scenarios.

🚀 Production Deployment Fixes

Path Resolution System

  • Smart Path Resolution: Implemented intelligent relative path calculation for all assets
    • CSS/JS paths automatically adjust based on page depth (e.g., ./css/ for root, ../css/ for sub-pages)
    • Image paths dynamically corrected at runtime for any deployment structure
    • Works seamlessly for root deployment, sub-folder deployment, and CDN hosting

RTL CSS Processing Fix

  • PostCSS Configuration: Fixed rtlcss plugin interference with LTR builds
    • rtlcss now only runs during RTL-specific builds (NODE_ENV=RTL)
    • Prevents automatic left/right property flipping in standard production builds
    • Maintains separate .rtl.css files for right-to-left language support

Image Loading Resolution

  • Runtime Image Path Fix: Added intelligent image path correction script
    • Detects deployment context from working CSS/JS paths
    • Automatically converts absolute image paths (/assets/img/...) to relative paths
    • Ensures images load correctly regardless of deployment sub-folder structure

🎨 UI/Navigation Improvements

Sidebar Navigation Fixed

  • Badge & Arrow Positioning: Resolved sidebar layout issues
    • Fixed nav badges overlapping text elements
    • Restored chevron arrow indicators for expandable menu items
    • Corrected spacing and visual hierarchy in sidebar navigation
    • Added sidebar-open class to all layouts for consistent styling

Cross-Device Consistency

  • Full-Width Navigation Links: Enhanced clickable areas
    • Set .sidebar-menu .nav-link { width: 100%; } for better UX
    • Ensures badges and arrows align properly at the far right edge
    • Maintains proper spacing across all screen sizes and devices

📦 CDN & Dependencies

Updated to Latest Stable Versions

  • Bootstrap: v5.3.3 → v5.3.7 (latest stable)
  • Bootstrap Icons: v1.11.3 → v1.13.1 (latest with new icons)
  • OverlayScrollbars: v2.10.1 → v2.11.0 (performance improvements)
  • PopperJS: v2.11.8 (confirmed latest - no change needed)

Integrity Attribute Removal

... (truncated)

Commits
  • 2151077 Include dist/ folder in repository for v4.0.0-rc3
  • 3885daa Release v4.0.0-rc3: Production deployment fixes and cross-platform compatibility
  • e634d5e Merge pull request #5859 from dfsmania/parse-data-attr-on-treeview
  • 63aabd6 Major accessibility and es2022 updates
  • 5308195 Clean up documentation: correct date and remove excessive emojis
  • c74fe4e 📅 Fix release date in CHANGELOG.md
  • 7d4c893 🚀 Release v4.0.0-rc1: Complete Modernization
  • 7b77a56 [ts/treeview]: Add logic to parse data attributes on treeview plugin
  • 1a52342 chore(deps): bump vite from 6.0.9 to 6.3.4 (#5851)
  • a1b9514 chore(deps-dev): bump typescript from 5.7.2 to 5.8.3 (#5852)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by silkalns, a new releaser for admin-lte since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [pdfmake](https://github.com/bpampuch/pdfmake). It's no longer used after updating ancestor dependency [admin-lte](https://github.com/ColorlibHQ/AdminLTE). These dependencies need to be updated together.


Removes `pdfmake`

Updates `admin-lte` from 3.2.0 to 4.0.0-rc3
- [Release notes](https://github.com/ColorlibHQ/AdminLTE/releases)
- [Changelog](https://github.com/ColorlibHQ/AdminLTE/blob/master/CHANGELOG.md)
- [Commits](ColorlibHQ/AdminLTE@v3.2.0...v4.0.0-rc3)

---
updated-dependencies:
- dependency-name: pdfmake
  dependency-version: 
  dependency-type: indirect
- dependency-name: admin-lte
  dependency-version: 4.0.0-rc3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript requires change to JavaScript files labels Oct 7, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 7, 2025 22:30
@dependabot dependabot bot added javascript requires change to JavaScript files dependencies Pull requests that update a dependency file labels Oct 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript requires change to JavaScript files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants