From fc8f5a39d7af5c9714414d67cd38fa6fd6e32825 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 7 Aug 2026 05:40:35 +0000 Subject: [PATCH 1/3] chore(deps): bump @zxcvbn-ts/core in /EssentialCSharp.Web Bumps [@zxcvbn-ts/core](https://github.com/zxcvbn-ts/zxcvbn) from 3.0.4 to 4.1.2. - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/core@3.0.4...@zxcvbn-ts/core@4.1.2) --- updated-dependencies: - dependency-name: "@zxcvbn-ts/core" dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- EssentialCSharp.Web/package-lock.json | 9 +++++---- EssentialCSharp.Web/package.json | 2 +- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/EssentialCSharp.Web/package-lock.json b/EssentialCSharp.Web/package-lock.json index 7da3bd20..e11f42cb 100644 --- a/EssentialCSharp.Web/package-lock.json +++ b/EssentialCSharp.Web/package-lock.json @@ -7,7 +7,7 @@ "name": "essentialcsharp-web-frontend", "dependencies": { "@mdi/font": "7.4.47", - "@zxcvbn-ts/core": "^3.0.4", + "@zxcvbn-ts/core": "^4.1.2", "@zxcvbn-ts/language-common": "^4.1.2", "@zxcvbn-ts/language-en": "^3.0.2", "dompurify": "3.4.10", @@ -544,9 +544,10 @@ "license": "MIT" }, "node_modules/@zxcvbn-ts/core": { - "version": "3.0.4", - "resolved": "https://registry.npmjs.org/@zxcvbn-ts/core/-/core-3.0.4.tgz", - "integrity": "sha512-aQeiT0F09FuJaAqNrxynlAwZ2mW/1MdXakKWNmGM1Qp/VaY6CnB/GfnMS2T8gB2231Esp1/maCWd8vTG4OuShw==", + "version": "4.1.2", + "resolved": "https://registry.npmjs.org/@zxcvbn-ts/core/-/core-4.1.2.tgz", + "integrity": "sha512-RQmxWB3AMI+HGQErQdUv6Aq32aQhp6xOxrfgCP0+T9MsLZoP3xtLHuT8O8VojsUxdmQVZfJlYkYb1A0wOwIS+Q==", + "license": "MIT", "dependencies": { "fastest-levenshtein": "1.0.16" } diff --git a/EssentialCSharp.Web/package.json b/EssentialCSharp.Web/package.json index 6afbb6bb..3816ed8a 100644 --- a/EssentialCSharp.Web/package.json +++ b/EssentialCSharp.Web/package.json @@ -11,7 +11,7 @@ }, "dependencies": { "@mdi/font": "7.4.47", - "@zxcvbn-ts/core": "^3.0.4", + "@zxcvbn-ts/core": "^4.1.2", "@zxcvbn-ts/language-common": "^4.1.2", "@zxcvbn-ts/language-en": "^3.0.2", "dompurify": "3.4.10", From 4ce18d2c018798b4fc99e28c27a48b7f5456c13f Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 7 Aug 2026 06:07:32 +0000 Subject: [PATCH 2/3] fix: update password strength meter for zxcvbn-ts 4 Co-authored-by: BenjaminMichaelis <22186029+BenjaminMichaelis@users.noreply.github.com> --- EssentialCSharp.Web/wwwroot/js/password-strength.js | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/EssentialCSharp.Web/wwwroot/js/password-strength.js b/EssentialCSharp.Web/wwwroot/js/password-strength.js index 4a578271..15181915 100644 --- a/EssentialCSharp.Web/wwwroot/js/password-strength.js +++ b/EssentialCSharp.Web/wwwroot/js/password-strength.js @@ -9,7 +9,7 @@ * data-min-length — Minimum password length enforced server-side (from PasswordRequirementOptions) */ -import { zxcvbn, zxcvbnOptions } from '@zxcvbn-ts/core'; +import { ZxcvbnFactory } from '@zxcvbn-ts/core'; const SCORE_CONFIG = [ { label: 'Very weak', barClass: 'bg-danger', width: 20 }, @@ -21,6 +21,7 @@ const SCORE_CONFIG = [ let zxcvbnReady = false; let zxcvbnLoadPromise = null; +let zxcvbn = null; async function ensureZxcvbn() { if (zxcvbnReady) return; @@ -32,7 +33,7 @@ async function ensureZxcvbn() { } try { const [zxcvbnCommon, zxcvbnEn] = await zxcvbnLoadPromise; - zxcvbnOptions.setOptions({ + zxcvbn = new ZxcvbnFactory({ translations: zxcvbnEn.translations, graphs: zxcvbnCommon.adjacencyGraphs, dictionary: { ...zxcvbnCommon.dictionary, ...zxcvbnEn.dictionary }, @@ -281,7 +282,7 @@ function initMeter(container) { // Guard against stale result if the user kept typing during the initial load if (password !== passwordInput.value) return; const userInputs = getUserInputValues(userInputFieldIds); - const result = zxcvbn(password, userInputs); + const result = zxcvbn.check(password, userInputs); // Render zxcvbn result immediately; HIBP check runs asynchronously below. if (hibpWarningActive) { From 490ac1345c18119b3f09d12a7ba655ef6d415864 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 7 Aug 2026 06:08:41 +0000 Subject: [PATCH 3/3] fix: align zxcvbn language package major version Co-authored-by: BenjaminMichaelis <22186029+BenjaminMichaelis@users.noreply.github.com> --- EssentialCSharp.Web/package-lock.json | 12 ++++++++---- EssentialCSharp.Web/package.json | 2 +- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/EssentialCSharp.Web/package-lock.json b/EssentialCSharp.Web/package-lock.json index e11f42cb..bdbd3cca 100644 --- a/EssentialCSharp.Web/package-lock.json +++ b/EssentialCSharp.Web/package-lock.json @@ -9,7 +9,7 @@ "@mdi/font": "7.4.47", "@zxcvbn-ts/core": "^4.1.2", "@zxcvbn-ts/language-common": "^4.1.2", - "@zxcvbn-ts/language-en": "^3.0.2", + "@zxcvbn-ts/language-en": "^4.1.1", "dompurify": "3.4.10", "jquery": "4.0.0", "marked": "18.0.5", @@ -568,9 +568,13 @@ } }, "node_modules/@zxcvbn-ts/language-en": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/@zxcvbn-ts/language-en/-/language-en-3.0.2.tgz", - "integrity": "sha512-Zp+zL+I6Un2Bj0tRXNs6VUBq3Djt+hwTwUz4dkt2qgsQz47U0/XthZ4ULrT/RxjwJRl5LwiaKOOZeOtmixHnjg==" + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/@zxcvbn-ts/language-en/-/language-en-4.1.1.tgz", + "integrity": "sha512-6UdzuBd3Uex8TKubohcn+uXRVAH34Zjs2eCfT4hQVo9zeTy7AkQRQfdV4OnHR5hQfW/XBrK/AGTZk7VBWh7wwQ==", + "license": "MIT", + "dependencies": { + "@zxcvbn-ts/dictionary-compression": "^3.0.1" + } }, "node_modules/csstype": { "version": "3.2.3", diff --git a/EssentialCSharp.Web/package.json b/EssentialCSharp.Web/package.json index 3816ed8a..b7db1e34 100644 --- a/EssentialCSharp.Web/package.json +++ b/EssentialCSharp.Web/package.json @@ -13,7 +13,7 @@ "@mdi/font": "7.4.47", "@zxcvbn-ts/core": "^4.1.2", "@zxcvbn-ts/language-common": "^4.1.2", - "@zxcvbn-ts/language-en": "^3.0.2", + "@zxcvbn-ts/language-en": "^4.1.1", "dompurify": "3.4.10", "jquery": "4.0.0", "marked": "18.0.5",