vaadin/flow 25.0.13

Vaadin Flow 25.0.13

on GitHub

Changes since 25.0.12

All changes

New features

• Expose application properties via Options for TypeScriptBootstrapModifier consumers (#24073) (CP: 25.0)
  Commit · Pull request · Issue

  TypeScriptBootstrapModifier implementations (e.g., Copilot) need access to application properties to conditionally modify bootstrap TypeScript. Currently, the Copilot script is injected in dev mode regardless of whether Copilot is enabled in the project configuration. Add withApplicationConfiguration to Options and property accessor methods (getApplicationStringProperty, getApplicationBooleanProperty) that return Optional.empty() when configuration is unavailable (build time). Wire ApplicationConfiguration from DevModeInitializer.

Fixes

• Load Image/IFrame sources when disabled (CP: 25.0)
  Commit · Pull request · Issue

  When an Image or IFrame backed by a DownloadHandler lives inside a disabled component, the browser receives a 403 and the resource never loads. Image.setSrc(DownloadHandler) and IFrame.setSrc(DownloadHandler) now allow the resource to be served regardless of the owner's enabled state, since these sources are fetched passively as part of rendering rather than as a user action.

• Package json hash difference between linux and windows (#24321)
  Commit · Pull request · Issue

  Windows and Linux generated a different hash for the package json content as jackson default indenter used system line separator.

• NPE when web push subscription is expired (#24310) (CP: 25.0)
  Commit · Pull request

  When the push service reports a subscription as expired, WebPush.sendNotification threw NullPointerException instead of the intended WebPushException.
  Remove a leftover reference to an unassigned HttpResponse local variable that was no longer populated after the migration to com.interaso.webpush.
  Fixes #24306

• Install pnpm deps in hoisted mode + declare @babel/types (#24288) (CP: 25.0)
  Commit · Pull request

  Sswitches pnpm install to hoisted (flat npm-style) layout so transitive npm deps (@babel/types, @lit/reactive-element, cookie, set-cookie-parser, @preact/signals-react/runtime) are always reachable from project root, eliminating the vite-basics IT hang and similar symptoms.

• Wrong existence check in getStaticResource (CP: 25.0)
  Commit · Pull request

  This PR cherry-picks changes from the original PR #24283 to branch 25.0

• Handle Unicode classpath resource paths (#24220)(CP:25.0)
  Commit · Pull request

  Cherry pick of #24220 to 25.0