ifcurl/forgejo/custom/public/assets
Bruno Postle fce198580a viewer: upgrade three/web-ifc/@thatopen to latest — partial CVE fix
three 0.177→0.184, web-ifc 0.0.75→0.0.77, @thatopen/components
3.3.1→3.4.2, @thatopen/fragments 3.3.1→3.4.3, + new camera-controls
3.1.2 peer dep. Reduces fast-xml-parser findings from 2 critical to
1 high + 1 low; remaining issues are upstream in @thatopen >= 3.3.3
with no fix released yet.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:59:02 +01:00
..
fragments-worker.js viewer: upgrade three/web-ifc/@thatopen to latest — partial CVE fix 2026-04-25 18:59:02 +01:00
viewer-deps.js viewer: upgrade three/web-ifc/@thatopen to latest — partial CVE fix 2026-04-25 18:59:02 +01:00
viewer-url.js Private repo previews, BCF import, SERVICE_TOKEN support 2026-04-24 14:20:17 +01:00
viewer.html viewer: bundle JS deps locally — removes all CDN dependencies 2026-04-25 18:24:50 +01:00
web-ifc-mt.wasm viewer: upgrade three/web-ifc/@thatopen to latest — partial CVE fix 2026-04-25 18:59:02 +01:00
web-ifc.wasm viewer: upgrade three/web-ifc/@thatopen to latest — partial CVE fix 2026-04-25 18:59:02 +01:00