v0.14.1

This release fixes a security issue. Please upgrade as soon as possible.

What's Changed

• Harden dataclass utils by @wwwillchen in #1171
• Bump v0.14.1 by @wwwillchen in #1173

Full Changelog: v0.14.0...v0.14.1

v0.14.0

What's Changed

• Fix broken demo and security links in README.md by @zsais in #1144
• Fix missing type hints for @content_component by @richard-to in #1146
• Fix typo for MESOP_WEBSOCKETS_ENABLED docs by @wwwillchen in #1151
• Bump the npm_and_yarn group with 2 updates by @dependabot in #1148
• Add security policy for demos by @wwwillchen in #1156
• Bump mesop version for demo/requirements.txt by @wwwillchen in #1153
• Bump marked from 15.0.0 to 15.0.1 in the npm_and_yarn group by @dependabot in #1154
• Add Colab workaround to web components troubleshooting docs by @williamito in #1158
• Update browser for karma targets by @wwwillchen in #1164
• Named slots / Nested slots by @richard-to in #1145
• Bump angular to v19 by @wwwillchen in #1155
• Bump to v0.14.0 by @wwwillchen in #1168

New Contributors

• @zsais made their first contribution in #1144
• @williamito made their first contribution in #1158

Full Changelog: v0.13.0...v0.14.0

v0.13.0

Summary

• Unships the editor/dev tools (only affects editor/debug mode) due to low usage and inherent limitations with the tooling.
• Fixes a significant perf issue related to components rendering - see #1136 for details

What's Changed

• Skip unnecessary trace render loop in WebSockets mode by @wwwillchen in #1123
• Remove unused handler code from Runtime/Context by @wwwillchen in #1122
• Change context import to be absolute in runtime.py by @wwwillchen in #1124
• Bump aiohttp from 3.10.5 to 3.10.11 in /ai/docbot in the pip group across 1 directory by @dependabot in #1108
• Bump marked from 14.1.3 to 14.1.4 in the npm_and_yarn group by @dependabot in #1107
• [Snyk] Fix for 10 vulnerabilities by @wwwillchen in #1091
• [Snyk] Security upgrade zipp from 3.15.0 to 3.19.1 by @wwwillchen in #1084
• Fix CI deployments (loosen pip requirements & remove unnecessary pip … by @wwwillchen in #1127
• Allow blob as a valid origin for img/media by @wwwillchen in #1131
• Do not render expansion panel description if unused by @wwwillchen in #1129
• Unship devtools/editor-related code by @wwwillchen in #1135
• Fixes major memory leak in component renderer by @wwwillchen in #1136
• Restore hot reload functionality by @wwwillchen in #1138
• Bump to 0.12.10rc1 by @wwwillchen in #1139
• Restore hot reload keyboard shortcut by @wwwillchen in #1140
• 0.13.0rc1 by @wwwillchen in #1141

Full Changelog: v0.12.9...v0.13.0

v0.12.9

What's Changed

• Add Angular Material Card component by @richard-to in #1082
• Consistent type hints for Optional by @Jemeljanov in #1087
• Fix typo in card component doc by @richard-to in #1090
• Add expansion panel component. by @richard-to in #1089
• fix card_header.py docstring & remove security announcement by @wwwillchen in #1095
• Send experiment settings on initial page load by @wwwillchen in #1093
• Fix clearing query params when navigating by @wwwillchen in #1097
• Migrate print calls to logging by @wwwillchen in #1083
• Runs onload handler for browser navigations (backwards and forwards) by @wwwillchen in #1101
• Bump to v0.12.9 by @wwwillchen in #1103

New Contributors

• @Jemeljanov made their first contribution in #1087

Full Changelog: v0.12.8...v0.12.9

v0.12.8

What's Changed

• [Snyk] Security upgrade python from 3.10.14-bullseye to 3.10.15-bullseye by @wwwillchen in #1047
• [Snyk] Security upgrade python from 3.10.14-bullseye to 3.10.15-bullseye by @wwwillchen in #1046
• [Snyk] Security upgrade python from 3.10.14-bullseye to 3.10.15-bullseye by @wwwillchen in #1043
• [Snyk] Security upgrade python from 3.10.14-bullseye to 3.10.15-bullseye by @wwwillchen in #1049
• [Snyk] Security upgrade python from 3.10.14-bullseye to 3.10.15-bullseye by @wwwillchen in #1050
• Switch from socket.io to vanilla websockets & fix state updates for websockets by @wwwillchen in #1048
• Bump the pip group across 2 directories with 3 updates by @dependabot in #1052
• Bump the npm_and_yarn group with 9 updates by @dependabot in #1055
• Add option expose static folder by @richard-to in #989
• Bump the pip group across 3 directories with 1 update by @dependabot in #1058
• Bump the npm_and_yarn group with 5 updates by @dependabot in #1059
• Allow custom favicons by @richard-to in #1062
• Add additional parameters for SecurityPolicy: trusted types and worker src by @wwwillchen in #1064
• Fix race condition in processing commands (navigate) by @wwwillchen in #1065
• Fix component renderer: querying web component children by @wwwillchen in #1066
• Bump to v0.12.8beta1 by @wwwillchen in #1070
• Fix bug with single select value not showing. by @richard-to in #1072
• Add content_button equivalent to uploader by @richard-to in #1074
• Disable component diffing when MESOP_WEBSOCKETS_ENABLED by @wwwillchen in #1075
• [Snyk] Security upgrade werkzeug from 2.2.3 to 3.0.6 by @wwwillchen in #1069
• Bump the npm_and_yarn group with 2 updates by @dependabot in #1063
• Move copy_current_request_context to ensure thread-safety by @wwwillchen in #1076
• Bump send from 1.0.0 to 1.1.0 in the npm_and_yarn group by @dependabot in #1077
• [Snyk] Security upgrade werkzeug from 2.2.3 to 3.0.6 by @wwwillchen in #1078
• Add env var: MESOP_APP_BASE_PATH by @wwwillchen in #1057
• Bump to 0.12.8 by @wwwillchen in #1085

Full Changelog: v0.12.7...v0.12.8

v0.12.7

What's Changed

• Add step to check security dashboard on publishing by @wwwillchen in #1022
• Turn (server) error box into a more standard dialog UI by @wwwillchen in #1025
• Fix sidenav "escape" key bug by @richard-to in #1024
• Fix bug where same file could not be reuploaded by @richard-to in #1032
• Add basic websockets support by @wwwillchen in #1027
• Fix array proto types for select.ts by @wwwillchen in #1037
• Use OS specific path separator by @kumaranvpl in #1038
• [Snyk] Security upgrade python from 3.10.14-bullseye to 3.12.7-bullseye by @wwwillchen in #1040
• Fix server error dialog UI by @wwwillchen in #1042
• Add proper concurrency support in websockets mode by @wwwillchen in #1036
• Bump to v0.12.7 by @wwwillchen in #1044

New Contributors

• @kumaranvpl made their first contribution in #1038

Full Changelog: v0.12.6...v0.12.7

v0.12.6

What's Changed

• Updates demos to work with dark mode by @richard-to in #988
• Set llmrewriter to use system theme by @richard-to in #993
• Add date picker and date range picker components. by @richard-to in #982
• Add CSS class support for box component by @richard-to in #995
• Fix broken datepicker test by @richard-to in #1001
• Add rxjs dep to date range picker by @richard-to in #999
• Update grid table example to use dark mode theming by @richard-to in #1000
• Add update page title command by @richard-to in #1004
• Add X-Accel-Buffering header to SSE responses by @richard-to in #1012
• Fix bug where multiple select values could not be initialized. by @richard-to in #1013
• Button toggle by @richard-to in #1014
• Fix typo in select component docstring (breaking mkdocs build) by @richard-to in #1017
• Set theme settings in hot reload by @wwwillchen in #1018
• Bump version to 0.12.6 by @richard-to in #1020

Full Changelog: v0.12.5...v0.12.6

v0.12.5

What's Changed

• Update me.markdown to render on frontend + copy code by @richard-to in #930
• Remove require_selection from autocomplete by @richard-to in #947
• Set default value on autocomplete by @richard-to in #949
• Add basic form examples. by @richard-to in #962
• Switch to using localhost by @wwwillchen in #968
• Support MESOP_CONCURRENT_UPDATES_ENABLED env var by @wwwillchen in #868
• Add instructions for reporting a security issue by @wwwillchen in #974
• Add security announcement to docs site by @wwwillchen in #976
• Try to resolve state sessions race condition by @richard-to in #977
• Upgrade playwright by @wwwillchen in #985
• Support pydantic BaseModel classes in state by @wwwillchen in #983
• Bump to v0.12.5 by @wwwillchen in #986

Full Changelog: v0.12.4...v0.12.5

v0.12.4

Important security notice

Please upgrade to this version and re-deploy your Mesop apps as soon as you can because this fixes a high vulnerability security issue.

What's Changed

• Add docs for mounting Mesop app by @wwwillchen in #892
• Run e2e tests in debug/editor mode (in addition to prod mode) by @wwwillchen in #893
• Fix HTML demo by adding security policy by @wwwillchen in #899
• Fix firebase auth example by @wwwillchen in #898
• Add Fancy chat example by @richard-to in #904
• Allow scroll_into_view to work for components rendered in the same tick by @wwwillchen in #902
• Add allowed iframes to fancy chat by @richard-to in #917
• Update some usages of scroll-to by @richard-to in #915
• Fix cutoff content for history prompt list / code diff viewer by @richard-to in #916
• Add is_target to Click event by @richard-to in #913
• Add some goldens for writing chat UIs by @richard-to in #919
• Add hotkey shortcuts for text areas by @richard-to in #922
• Add additional benchmarks by @wwwillchen in #924
• Add get_path_to_page_configs by @richard-to in #928
• Add Multimodal Embeddings Retail Search to showcase by @richard-to in #927
• Attempt to fix flaky test by @richard-to in #931
• Various updates to AI Editor stuff by @richard-to in #933
• Create MVP AI console by @wwwillchen in #934
• Fix web component static file serving by @wwwillchen in #942
• Bump to v0.12.4 by @wwwillchen in #943

Full Changelog: v0.12.3...v0.12.4

v0.12.3

What's Changed

• Fix typo in input.py by @wwwillchen in #830
• Migrates ai/docbot to uv to manage dependencies by @wwwillchen in #832
• install uv (instead of pip install) for deploying docbot on GitHub actions by @wwwillchen in #833
• Add more style properties by @wwwillchen in #831
• Support functools.partial for event handlers by @wwwillchen in #789
• Fix pyproject.toml so docbot can build with uv by @wwwillchen in #834
• Export create_wsgi_app so Mesop apps can be mounted to other servers by @wwwillchen in #835
• Create autocomplete for editor toolbar by @wwwillchen in #836
• Stream generate response to UI by @wwwillchen in #837
• Fix docbot deployment by @wwwillchen in #839
• Fix docbot by using pre-uv commands by @wwwillchen in #843
• Fix docbot Dockerfile by @wwwillchen in #845
• Add hotkeys and async action web component examples. by @richard-to in #846
• Remove use of 100vh from chat component by @richard-to in #841
• Adds app url for mesop app maker. by @richard-to in #842
• Editor toolbar: scope prompt to specific component by @wwwillchen in #850
• Make pip.sh faster with uv and easier to use with explicit steps by @wwwillchen in #851
• Add ~20 fine-tuning examples and switch to new ft model by @wwwillchen in #853
• Fix selected component logic in editor toolbar by @wwwillchen in #856
• Show progress bar in editor toolbar progress dialog & change dialog title by @wwwillchen in #857
• Persist prompt interactions into sessionStorage by @wwwillchen in #858
• Prevent user from sending another prompt while one is in progress by @wwwillchen in #859
• Require prompt minimum length (4 chars) by @wwwillchen in #860
• Propagate and display error messages for editor toolbar services by @wwwillchen in #861
• Fix heuristics in get_app_caller_source_code_location by @wwwillchen in #862
• Fix dark theme for code mirror by @wwwillchen in #863
• Use smaller prompt context for new ft model by @wwwillchen in #867
• Automate showcase deployment by @wwwillchen in #873
• Fix showcase deployment script by @wwwillchen in #875
• Fix deployment script for showcase by @wwwillchen in #877
• Refactor ai/ to share code between service & scripts by @wwwillchen in #874
• Show toolbar expanded by default by @wwwillchen in #880
• Fix evaluate_run.py after refactoring by @wwwillchen in #884
• Polish editor toolbar and AI service by @wwwillchen in #885
• Plumb experimental editor toolbar env var to client-side by @wwwillchen in #879
• Style API tweaks by @wwwillchen in #881
• Clean up printing for experiments by @wwwillchen in #889
• Bump to v0.12.3 and clean-up scripts & docs by @wwwillchen in #890

Full Changelog: v0.12.2...v0.12.3