Repository navigation
fix!(Video): upgrade react-player to v3 and split Video out of the main barrel #3439
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
20 commits
Select commit
Hold shift + click to select a range
68b313c
fix(deepmerge): patch prototype pollution CVE-2026-93753
dreamwasp 004a882
Revert "fix(deepmerge): patch prototype pollution CVE-2026-93753"
dreamwasp 6aae763
fix(Video): upgrade react-player to v3 to remove vulnerable deepmerge…
dreamwasp 3c31d4d
test(Video): swap vimeo fixture url in test and story
dreamwasp 5daf1e4
fix(Video): split Video out of the main barrel to protect non-Video c…
dreamwasp 37f4d7e
docs(Video, Markdown): document the Video subpath import and opt-in o…
dreamwasp a1e01ce
Merge branch 'main' into cass-gmt-react-player-v3
dreamwasp b5b49c7
version plan
dreamwasp fd06fdf
fix(Video): make @vidstack/react and react-player optional peer deps
dreamwasp 4999da4
peer deps back
dreamwasp 1f4bcbc
add back title
dreamwasp 55c00d0
more tweaks to title
dreamwasp c9c440d
remove workaround for now
dreamwasp e45a0da
shadow-root-aware
dreamwasp 70ba9ac
swap markdown videos
dreamwasp 2a7ffd6
swap stories
dreamwasp 42ed19b
Merge branch 'main' into cass-gmt-react-player-v3
dreamwasp 5752f65
fix nan
dreamwasp f1e186b
Merge branch 'cass-gmt-react-player-v3' of github.com:Codecademy/gamu…
dreamwasp beaeb2c
add video notw
dreamwasp File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| --- | ||
| gamut: major | ||
| --- | ||
|
|
||
| Move Video out of barrel and update | ||
|
|
||
| - `Video` is now imported from `@codecademy/gamut/Video` instead of `@codecademy/gamut`. | ||
| - `@vidstack/react` and `react-player` are now peer dependencies. If you use `Video` (or the Markdown `Iframe`/`MarkdownVideo` overrides), install them: `yarn add @vidstack/react@~1.12.12 react-player@^3.4.0`. Gamut supports `@vidstack/react` 1.12.x only; note that its npm `latest` tag still points to 0.6.x. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,5 @@ | ||
| { | ||
| "main": "../dist/Video/index.js", | ||
| "module": "../dist/Video/index.js", | ||
| "types": "../dist/Video/index.d.ts" | ||
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -132,6 +132,5 @@ exports[`Gamut Exported Keys 1`] = ` | |
| "useIsMounted", | ||
| "useLocalQuery", | ||
| "useSubmitState", | ||
| "Video", | ||
| ] | ||
| `; | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I remember seeing this on the first review and thinking it'd be nice to use an object for the arg instead for these overrides - but also that the other functions use multiple args.
Any plans to update the other overrides? Or is it like too much work or maybe we'll move off of markdown?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we can do it in the new repo