vaadin/flow 24.3.9

Vaadin Flow 24.3.9

on GitHub

Changes since 24.3.8

All changes

Fixes

• Set correct debug status blip color
  Commit · Pull request

• Support OpenLiberty and Wildfly URL when listing translation files (#19167)
  Commit · Pull request · Issue

  OpenLiberty provides URL with a 'wsjar' protocol; Wildfly offers JBoss VFS URLs.

• Show java livereload status with shared ws
  Commit · Pull request

• Unwrap router target class in getRouteTarget (#19151)
  Commit · Pull request · Issue

  AbstractNavigationStateRenderer.getRouteTarget filters the active router targets chain comparing collection items class with the route target type. The filter may fail if routes instances are proxy objects created by frameworks like spring, since the class will not match the required one. This cahnge ensures that synthetic and proxy classes are discarded, allowing for more accurate comparison when filtering objects based on their real application class.

• Upgrade vulnerable dependency (#19149)
  Commit · Pull request

• I18n default translation from thread (#19136)
  Commit · Pull request · Issue

  when executing from thread.

• Postpone creation of WebIconsRequestMatcher (#19102)
  Commit · Pull request · Issue

  During a hot reload, there may be requests incoming before VaadinService completes its intialization. In this situation a NPE is thrown when trying to create WebIconsRequestMatcher. This change postpones the instantiation until VaadinService is available.

• Detect Flow PUSH requests as internal framework requests (#19085)
  Commit · Pull request · Issue

  HandlerHelper is currently not considering Flow PUSH requests (/VAADIN/push) as internal, preventing VaadinWebSecurity to ignore CSRF checks. The issues happen only for ping requests; the connection request is not affected because it is a GET request.

• Do not deactivate expanded item keys (#19006) (#19047)
  Commit · Pull request

• Reorder unhandled imports in CSS bundler (#19021)
  Commit · Pull request

  Currently, CssBundler just replaces @imports with inlined file contents and returns the result. That can be problematic if an unprocessed import, for example to an external URL, comes after an inlined import. Now the unprocessed import comes after a regular CSS rule, which is invalid and ignored by the browser.

• Restore hasBeenAttached on resync (#19023) (#19068)
  Commit · Pull request · Issue