Skip to content

Dependency Updates#772

Open
0pcom wants to merge 43 commits intoskycoin:developfrom
0pcom:clean-branch
Open

Dependency Updates#772
0pcom wants to merge 43 commits intoskycoin:developfrom
0pcom:clean-branch

Conversation

@0pcom
Copy link

@0pcom 0pcom commented Oct 21, 2025

image image image image

dependabot bot and others added 30 commits June 6, 2020 11:43
Bumps [node-sass](https://github.com/sass/node-sass) from 4.12.0 to 4.14.1.
- [Release notes](https://github.com/sass/node-sass/releases)
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md)
- [Commits](sass/node-sass@v4.12.0...v4.14.1)

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7.
- [Release notes](https://github.com/isaacs/ini/releases)
- [Commits](npm/ini@v1.3.5...v1.3.7)

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [elliptic](https://github.com/indutny/elliptic) from 6.4.1 to 6.5.4.
- [Release notes](https://github.com/indutny/elliptic/releases)
- [Commits](indutny/elliptic@v6.4.1...v6.5.4)

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [y18n](https://github.com/yargs/y18n) from 3.2.1 to 3.2.2.
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases)
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

---
updated-dependencies:
- dependency-name: path-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) from 5.2.11 to 11.0.5.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/11.0.5/packages/core)

---
updated-dependencies:
- dependency-name: "@angular/core"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [moment](https://github.com/moment/moment) from 2.24.0 to 2.29.4.
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.24.0...2.29.4)

---
updated-dependencies:
- dependency-name: moment
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [jszip](https://github.com/Stuk/jszip) from 3.2.1 to 3.10.1.
- [Release notes](https://github.com/Stuk/jszip/releases)
- [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md)
- [Commits](Stuk/jszip@v3.2.1...v3.10.1)

---
updated-dependencies:
- dependency-name: jszip
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2.
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2)

---
updated-dependencies:
- dependency-name: decode-uri-component
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [express](https://github.com/expressjs/express) from 4.16.4 to 4.18.2.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.16.4...4.18.2)

---
updated-dependencies:
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…-uri-component-0.2.2' into dependency-updates
…ket-extensions-0.1.4' into dependency-updates
- Merged 13 dependabot PRs (Angular 11, security fixes)
- Replaced node-sass with dart-sass (no Python dependency)
- Updated TypeScript 2.4 to 4.0
- Updated RxJS 5.5 to 6.6 (with compat layer)
- Upgraded all Angular packages to 11.0.5
- Created angular.json (Angular 11 config format)
- Added NODE_OPTIONS=--openssl-legacy-provider for Node 24 compat
- Reduced vulnerabilities from 123 to 105

Known issue: Regex stack overflow during build (needs code fixes)
- Fixed all @angular/material imports to use specific paths
- Updated @angular/http to @angular/common/http
- Fixed DOCUMENT import from @angular/common
- Added Node.js polyfills (stream, crypto, buffer) for webpack
- Configured custom webpack with @angular-builders
- All TypeScript compilation errors resolved

Build output: 2.2MB main bundle, compiles in ~38s
Moses Narrow added 9 commits October 21, 2025 14:40
- Created self-contained binary with embedded dist folder
- Implemented Cobra CLI with serve, version commands
- Added host/port configuration flags
- Binary size: 20MB (includes all web assets)
- No external dependencies required at runtime

Usage:
  ./skycoin-web                    # Start server on :8001
  ./skycoin-web --port 8080        # Custom port
  ./skycoin-web version            # Show version
- Added --node-url flag (default: https://node.skycoin.com)
- Created /api/config endpoint to serve runtime configuration
- Updated frontend coins to fetch node URL from API
- Fixed hardcoded node.skycoin.net → node.skycoin.com
- Frontend now fetches config on startup for production builds

Usage:
  ./skycoin-web --node-url https://my-node.example.com
Server now proxies all /api/* requests to the configured node instead
of having the client connect directly. This is the correct architecture:

- Avoids CORS issues
- Single point of configuration (server-side only)
- More secure - node URL not exposed to client
- Allows future middleware (auth, rate limiting, etc.)

Changes:
- Server proxies all /api/v1/* and /api/v2/* to node
- Frontend uses relative URLs (/api/...) instead of absolute
- Removed /api/config endpoint (no longer needed)
- Simplified coin classes (no fetch logic)

Tested with: curl http://localhost:9999/api/v1/health
Returns valid response from configured node
Converted all old RxJS v5 style imports to v6:
- Observable, BehaviorSubject, ReplaySubject, Subject from rxjs
- ISubscription → Subscription
- Removed rxjs/{Observable,BehaviorSubject,etc} path imports

Fixes "ReplaySubject is not a constructor" error in production builds.
The old import style with rxjs-compat was not working correctly in
minified production bundles.
- Upgraded @ngx-translate/core 9 -> 13 for RxJS 6 compatibility
- Fixed component lifecycle: moved @ViewChild access from ngOnInit to ngAfterViewInit
- Replaced System.import() with native import() for WASM/JSON loading
- Updated TypeScript config: added resolveJsonModule, changed module to esnext
- Fixed CORS proxy: set headers before WriteHeader, added OPTIONS handler
- Fixed CSRF: strip browser Referer/Origin, set node URL headers
- Added request/response logging to proxy
- Updated wasm_exec.js to Go 1.25 version
- Added global polyfill for Go WASM compatibility
- Updated skycoin-lite.wasm binary (4.7MB, compiled with modern Go)
- Set correct Content-Type for WASM files
- Used streaming WebAssembly.instantiateStreaming for better memory efficiency

Fixes "Out of memory" WASM error and all console errors.
Wallet now fully loads and initializes successfully.
@CLAassistant
Copy link

CLAassistant commented Oct 21, 2025

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
0 out of 2 committers have signed the CLA.

❌ Moses Narrow
❌ dependabot[bot]


Moses Narrow seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You have signed the CLA already but the status is still pending? Let us recheck it.

Moses Narrow added 4 commits October 21, 2025 16:45
- Replaced large WASM files in src/assets/scripts/ with tiny placeholders
- Added Gin framework for HTTP routing
- Serve WASM and wasm_exec.js from embedded skycoin-lite package at runtime
- Keeps Angular build fast by not bundling 1.6MB WASM file
- Updated proxy to use Gin handlers while maintaining CORS bypass
- Added local replace directive for skycoin-lite development
@0pcom
Copy link
Author

0pcom commented Nov 1, 2025

NOTE: this PR relies on skycoin/skycoin-lite#35 which must be merged first

NOTE: the skycoin-web and skycoin-lite source code (the changes on this PR) have been added to the cobra-cli branch of github.com/skycoin/skycoin

Merging this PR is only necessary if the source code for these repos should not be included in github.com/skycoin/skycoin

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants