We have ABP's audit-logging package which is dependent on lodash as seen below: @volo/audit-logging@10.1.0 (direct dependency) in package.json:90 @volo/abp.aspnetcore.mvc.ui.theme.commercial@10.1.0 in yarn.lock:5502 @abp/aspnetcore.mvc.ui.theme.shared@10.1.0 in yarn.lock:5 @abp/lodash@10.1.0 in yarn.lock:125 lodash@4.17.23 in yarn.lock:9506
lodash 4.17.23 has 2 known security vulnerabilities, both patched in >=4.18.0:
Severity Issue Advisory
High Code Injection via _.template imports key names npmjs.com/advisories/1115806
Moderate Prototype Pollution via array path bypass in _.unset and _.omit npmjs.com/advisories/1115810
When will ABP ship with a version of Lodash that has those vulnerabilities patched?
Thank you for the information. I'll go with your suggestion for now.
I just updated to the latest ABP CLI version:
dotnet tool update -g Volo.Abp.Cli --version 6.0.0-rc.5
Tool 'volo.abp.cli' was successfully updated from version '6.0.0-rc.4' to version '6.0.0-rc.5'.
Logged into my commercial license and ran the command:
abp get-source Volo.Abp.LeptonXTheme.Pro
Got the following error:
[10:11:14 INF] ABP CLI (https://abp.io) [10:11:14 INF] Version 6.0.0-rc.5 (Prerelease) [10:11:15 INF] Output folder: C:\Users\ZhengLai\source\repos\leptonX [10:11:15 INF] Downloading source code of Volo.Abp.LeptonXTheme.Pro [10:11:15 INF] Version: Latest [10:11:15 INF] Output folder: C:\Users\ZhengLai\source\repos\leptonX Error occured while getting the latest version from https://abp.io/api/download/module/get-version/ : Remote server returns '403-Forbidden'. Message: volosoft/lepton repository has no release yet! [10:11:17 WRN] The remote service is currently unavailable, please specify the version. [10:11:17 WRN] [10:11:17 WRN] Find the following template in your cache directory: [10:11:17 WRN] Template Name Version [10:11:17 WRN] app 4.4.3 [10:11:17 WRN] app pro-4.4.4 [10:11:17 WRN] app pro-5.1.2 [10:11:17 WRN] app pro-5.2.1 [10:11:17 WRN] [10:11:17 WRN] Use command: abp new Acme.BookStore -v version
I've logged in with enterprise license but I currently cannot download the LeptonX theme source code with any of the following commands as per the docs: abp get-source Volo.Abp.LeptonXTheme.Pro abp get-source Volo.Abp.LeptonXTheme abp get-source Volo.LeptonXTheme.Pro abp get-source Volo.LeptonTheme
abp get-source Volo.Abp.LeptonXTheme.Pro specified in the docs has been giving me the following error for a few days now:
[15:45:45 INF] Downloading source code of Volo.Abp.LeptonXTheme.Pro
[15:45:45 INF] Version: Latest
[15:45:45 INF] Output folder: C:\Users...\source\repos\leptonX
Error occured while getting the latest version from https://abp.io/api/download/module/get-version/ : Remote server returns '403-Forbidden'. Message: volosoft/lepton repository has no release yet!
[15:45:46 WRN] The remote service is currently unavailable, please specify the version.
I tried specifying the version number as follows as well but it says that the module was not found:
abp get-source Volo.Abp.LeptonXTheme.Pro --version 1.0.0-rc.4
I tried specifying all older version but it says that the version was not found.
The only thing that worked was downloading the Lepton theme with version specified as follows:
abp get-source Volo.LeptonTheme --version 5.1.1
But I need the LeptonX source code.
Hi, do you have examples of other organizations that are currently using LeptonX theme on their live website? My project's stakeholders want some reassurance before making the decision to upgrade from Lepton theme to LeptonX theme.
For LeptonX Theme for Angular UI, is it possible to have the main header toolbar at the top while keeping the main menu in the left sidebar (to mimic the old Lepton Theme layout)? I'm expecting this configuration to be straight forward as users upgrading from Lepton to LeptonX theme should be able to keep the same desktop layout for navigation.
The LeptonX documentation for Angular UI does not have any details on this configuration and I currently cannot get the source code with abp get-source Volo.Abp.LeptonXTheme.Pro due to the following error:
Error occured while getting the latest version from https://abp.io/api/download/module/get-version/ : Remote server returns '403-Forbidden'. Message: volosoft/lepton repository has no release yet!
Thank you for all the information! I have a better understanding now and I've decided to go forward with using Vue 3 (without build tools) with ABP MVC UI.
Hi,
I examined the Forms module but I couldn't find any dependencies for build tools, are you able to confirm if you are not using any build tools for bundling or compiling the Vue code (.js component files)? https://v2.vuejs.org/v2/guide/deployment.html#Without-Build-Tools
Also, since Vue 3 is backwards compatible with Vue 2, do you think I can replace the @abp/vue standard package (which uses Vue 2) with the Vue 3 official package (since I want to use Vue 3 in my application), and still have the ABP Forms module still working?
If not, what's the likelihood of the Forms module upgrading to Vue 3 within the next 2 years?
For the latest version of ABP:
I see that the commercial Forms module uses Vue 2.6, so I was wondering if ABP Framework with MVC supports all of Vue's features and plugins, and even Vue 3, out-of-the-box? Does this require additional configuration? If so, what is the bundler that ABP Framework with MVC is using and how do we configure it to use all Vue features or Vue 3 along with other third party libraries?
Regards, Zheng
The docs show localization examples using json files, however, Telerik UI for Blazor provides localization in resx files. Is it recommended to manually convert these resx files to json to be used in ABP or can we also use resx files for localization in ABP?
