loot.github.io

loot/loot.github.io

Fork 0

mirror of https://github.com/loot/loot.github.io.git synced 2026-07-27 14:13:30 -07:00

Commit Graph

Author	SHA1	Message	Date
Oliver Hamlet	73a5075daf	Update Octokit to fix ReDoS vulnerabilities	2026-01-11 17:52:19 +00:00
Oliver Hamlet	608864cc7d	Vendor the JavaScript library dependencies Use NPM to manage their versions: manually vendoring the libraries isn't feasible for Octokit, as its libraries aren't provided as single-file imports, and have nested dependencies of their own. Since NPM is needed to resolve that, use it for the other dependencies too. Hugo's built-in bundling and minification support is used, though it means that the dependencies are duplicated within the scripts imported on different pages. I think that could be avoided by introducing a middle layer of JS assets that bundle the dependencies but aren't bundled themselves.	2026-01-11 17:52:18 +00:00

Author

SHA1

Message

Date

Oliver Hamlet

73a5075daf

Update Octokit to fix ReDoS vulnerabilities

2026-01-11 17:52:19 +00:00

Oliver Hamlet

608864cc7d

Vendor the JavaScript library dependencies

Use NPM to manage their versions: manually vendoring the libraries isn't feasible for Octokit, as its libraries aren't provided as single-file imports, and have nested dependencies of their own. Since NPM is needed to resolve that, use it for the other dependencies too.

Hugo's built-in bundling and minification support is used, though it means that the dependencies are duplicated within the scripts imported on different pages. I think that could be avoided by introducing a middle layer of JS assets that bundle the dependencies but aren't bundled themselves.

2026-01-11 17:52:18 +00:00