vaadin/flow 25.1.4

Vaadin Flow 25.1.4

on GitHub

Changes since 25.1.3

All changes

New features

• Add support for accepting hidden fields in Binder (#24139) (CP: 25.1)
  Commit · Pull request

  This PR cherry-picks changes from the original PR #24139 to branch 25.1. --- #### Original PR description > Adds setAcceptHiddenFields(boolean) to Binder. setAcceptHiddenFields(true) makes Binder apply bindings for hidden fields by default in same way as with pre-Vaadin 25. > > PartOf: #24109 >

• Improve license error for unoptimized bundle (#24145) (CP: 25.1)
  Commit · Pull request

  This PR cherry-picks changes from the original PR #24145 to branch 25.1. --- #### Original PR description > When optimizeBundle is disabled the bytecode scanner is skipped and every commercial component on the classpath is treated as used, so the existing license error wrongly states "Your application contains the following commercial components" even when the application does not reference any of them. This is common for projects that pull the com.vaadin:vaadin umbrella artifact directly or transitively. > > Detect the disabled optimizeBundle case in > BuildFrontendUtil.validateLicenses and throw a LicenseException whose message explains the classpath-level detection and gives concrete workarounds: re-enable optimizeBundle, replace com.vaadin:vaadin with com.vaadin:vaadin-core when declared as a direct dependency, or identify and exclude the transitive pull via mvn dependency:tree / ./gradlew dependencyInsight. A new validateLicenses(PluginAdapterBuild, ...) overload reads the flag; the PluginAdapterBase overload is deprecated and delegates to it. > > Fixes #24051 >

Fixes

• Rewrite relative url() paths when inlining @Stylesheet imports in production bundle (#24165) (CP: 25.1)
  Commit · Pull request

  This PR cherry-picks changes from the original PR #24165 to branch 25.1. --- #### Original PR description > When a CSS file referenced by @Stylesheet contains @import statements that pull in other CSS files with relative url(...) references, the production build inlined the imports but left the urls untouched. After inlining, the browser resolves those urls relative to the entry file, breaking image paths. > > Add a new build-time entry point that rewrites url(...) references so each one is expressed relative to the entry CSS file's folder. Absolute urls, protocol urls (http, https, data, ftp, file) and urls whose resolved target falls outside the entry's base folder (e.g. npm package siblings) are left untouched. > > Fixes #24164 >

• Expose vaadin.eagerServerLoad in Spring properties metadata (#24168) (CP: 25.1)
  Commit · Pull request

  This PR cherry-picks changes from the original PR #24168 to branch 25.1. --- #### Original PR description > Add eagerServerLoad to VaadinConfigurationProperties so Spring Boot can generate configuration metadata and IDE autocomplete for the documented vaadin.eagerServerLoad property. > > Made-with: Cursor > > > > ## Description > > Please list all relevant dependencies in this section and provide summary of the change, motivation and context. > > Fixes # (issue) > > ## Type of change > > - [ ] Bugfix > - [x] Feature > > ## Checklist > > - [x] I have read the contribution guide: https://vaadin.com/docs/latest/guide/contributing/overview/ > - [x] I have added a description following the guideline. > - [x] The issue is created in the corresponding repository and I have referenced it. > - [x] I have added tests to ensure my change is effective and works as intended. > - [x] New and existing tests are passing locally with my change. > - [x] I have performed self-review and corrected misspellings. > > #### Additional for Feature type of change > > - [ ] Enhancement / new feature was discussed in a corresponding GitHub issue and Acceptance Criteria were created. >

• Sanitize percent characters in resource URLs (#24031) (CP: 25.1)
  Commit · Pull request

  This PR cherry-picks changes from the original PR #24031 to branch 25.1. --- #### Original PR description > Jetty 12 rejects URLs containing %25 (percent-encoded percent) as ambiguous URI path encoding, causing downloads to fail with HTTP 400 when filenames contain "%" characters. > > Add UrlUtil.sanitizeForUrl() that replaces "%" with "_" in the URL path segment. The actual download filename from Content-Disposition is unaffected since each resource has a unique ID for lookup. > > Fixes #22677 >

• Fix potential deadlock in AtmospherePushConnection disconnect (#24133) (CP: 25.1)
  Commit · Pull request

  This PR cherry-picks changes from the original PR #24133 to branch 25.1. --- #### Original PR description > Fixes #24129