Skip to content

Update jQuery dependencies - #88

Open
swahtz wants to merge 1 commit into
AcademySoftwareFoundation:masterfrom
swahtz:fix/jquery-dependabot-alerts
Open

Update jQuery dependencies#88
swahtz wants to merge 1 commit into
AcademySoftwareFoundation:masterfrom
swahtz:fix/jquery-dependabot-alerts

Conversation

@swahtz

@swahtz swahtz commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

This updates the website from vulnerable jQuery 1.4.3 and 1.7.1 copies to jQuery 3.7.1, resolving the nine open Dependabot alerts associated with the two vendored jQuery files.

Changes

  • Added a verified local copy of jQuery 3.7.1 and updated the Home, About, Documentation, Download, Forum, and License pages to use it.
  • Removed the vulnerable jquery-1.4.3.min.js and camera/jquery.min.js files.
  • Removed the duplicate jQuery include and obsolete customized jQuery Mobile dependency from the Camera slideshow.
  • Updated the Camera slideshow to replace removed jQuery APIs such as .live() and $.browser with jQuery 3-compatible behavior.
  • Updated the About page and FancyBox integration to remove obsolete browser detection and other legacy jQuery assumptions.
  • Updated the legacy mousewheel integration to use jQuery's current event dispatch API.
  • Updated jQuery UI from 1.9.2 to 1.14.2 for compatibility with jQuery 3.7.1.
  • Removed obsolete minified copies that are no longer referenced by the website.

Testing

  • Served the website locally over HTTP and verified that all six main site sections load jQuery 3.7.1.
  • Verified that the Home page slideshow initializes and completes a transition without runtime errors.
  • Verified that the About page details controls, FancyBox image viewer, and mousewheel handling work without runtime errors.
  • Verified that the Download page loads jQuery UI 1.14.2 and that a dialog can be opened and closed.
  • Verified that all local script references resolve successfully.

Signed-off-by: Jonathan Swartz <jonathan@jswartz.info>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant