Skip to content

Conversation

BG-Software-BG
Copy link
Member

Fixes #2414

Copy link

changeset-bot bot commented May 29, 2025

🦋 Changeset detected

Latest commit: de246e9

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@tabler/docs Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Copy link

vercel bot commented May 29, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated (UTC)
tabler ✅ Ready (Inspect) Visit Preview May 29, 2025 3:33pm
tabler-docs ✅ Ready (Inspect) Visit Preview May 29, 2025 3:33pm

@BG-Software-BG BG-Software-BG merged commit 70a41e4 into dev May 29, 2025
4 checks passed
@BG-Software-BG BG-Software-BG deleted the 2414-tabler-docs-link-to-litepickercom-which-now-redirects-to-an-unrelated-gambling-site branch May 29, 2025 15:42
@kevinpapst
Copy link
Collaborator

Hey @BG-Software-BG - I appreciate your effort in making Tabler even better, but I'd like to raise a two points ... and I hope that doesn't come across the wrong way.

Regarding the main change:
I would give the projects that Tabler is based on (or uses) credits including a link, which is still one of the core principles of the free web.

My bigger concern:
The change to the lock file. There is actually a workflow to prevent these kinds of changes, but it seems that it wasn't updated to reflect the latest filename changes.

I know that you are a long term user and contributor of Tabler, but

  • this particular change has nothing to do with the PR, and
  • Lock files are something that should be changed only through the core maintainer to maintain security and trust.

I’m always happy to help with reviews! If you’d like, feel free to add me as a reviewer for future PRs.

@BG-Software-BG
Copy link
Member Author

Hi @kevinpapst

Firstly, I didn't remove those libraries. There is a new docs page for them: https://docs.tabler.io/ui/getting-started/references, which I've linked on the download page to avoid duplication and to only rely on the one source file - open-source.json'. What;'s more, the list in the download.md` was outdated.

Secondly, you might be right that the pnpm-lock.yaml shouldn't have been modified in this PR. However, we've decided, to commit all the changes made in this file.

@kevinpapst
Copy link
Collaborator

There is a new docs page for them: https://docs.tabler.io/ui/getting-started/references,

Cool, I didn't know that one. Thanks for sharing!

However, we've decided, to commit all the changes made in this file.

I am actually very cautious when it comes to changes in lock files (Supply Chain Attacks are a real risk), that's why I proposed the CI action to prevent such changes in the first place. And "we" means @codecalm and you? 👍
I actually never noticed that you were part of the Tabler team, sorry!

@BG-Software-BG
Copy link
Member Author

And "we" means @codecalm and you? 👍

Yes, exactly.

I actually never noticed that you were part of the Tabler team, sorry!

No problem 🙂

@ethancrawford
Copy link
Collaborator

@BG-Software-BG - apologies for the confusion, but in this change you add the following comment:

For the most recent list of supported packages you can also check the `peerDependencies` section in our [package.json](https://github.com/tabler/tabler/blob/dev/package.json)

However, the package.json file currently has no such peerDependencies section.
Do you mean this section from core/package.json instead?

tabler/core/package.json

Lines 151 to 174 in db6200a

"devDependencies": {
"@hotwired/turbo": "^8.0.13",
"@melloware/coloris": "^0.24.2",
"apexcharts": "3.54.1",
"autosize": "^6.0.1",
"choices.js": "^11.1.0",
"clipboard": "^2.0.11",
"countup.js": "^2.8.2",
"dropzone": "^6.0.0-beta.2",
"flatpickr": "^4.6.13",
"fslightbox": "^3.6.0",
"fullcalendar": "^6.1.17",
"hugerte": "^1.0.9",
"imask": "^7.6.1",
"jsvectormap": "^1.6.0",
"list.js": "^2.3.1",
"litepicker": "^2.0.12",
"nouislider": "^15.8.1",
"plyr": "^3.7.8",
"signature_pad": "^5.0.7",
"star-rating.js": "^4.3.1",
"tom-select": "^2.4.3",
"typed.js": "^2.1.0"
},

@BG-Software-BG
Copy link
Member Author

@ethancrawford - actually I've changed this note about the peerDependencies, not added.

Previously there was:

For the complete list of supported packages you can check the peerDependencies section in our [package.json](https://github.com/tabler/tabler/blob/dev/package.json)

I didn't check correctness of this sentence, just modified it. It should definitely be changed to avoid confusion. I think that the correct source is the https://github.com/tabler/tabler/blob/dev/core/libs.json file.

@ethancrawford
Copy link
Collaborator

actually I've changed this note about the peerDependencies, not added.

Ah yes, sorry, totally missed that 😅

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Tabler docs link to litepicker.com which now redirects to an unrelated gambling site

3 participants