Request for jQuery UI v1.14.1 Support in wiquery-jquery-ui (Wicket 9)

[Saad01298]

Dear WicketStuff WiQuery Team,

I hope this message finds you well.

We at our company currently using the following dependency in our application: org.wicketstuff.wiquery:wiquery-jquery-ui:9.0.0
And this version includes an inbuilt jquery-ui.js file (v1.13.0), which according to Snyk’s published advisory (https://security.snyk.io/vuln/SNYK-JS-JQUERYUI-2946728), contains a known vulnerability.

In this regard, we would like to check whether the WiQuery team can provide latest jquery-ui.js (v1.14.1) that is compatible with Apache Wicket 9.

We are currently in the process of upgrading from Wicket 9 to Wicket 10. However, due to the Jakarta migration and related adjustments, the upgrade timeline has been extended. Meanwhile, addressing this security vulnerability has become urgent for us.

We would greatly appreciate your guidance on the following:

1. Can WicketStuff WiQuery Team provide a wiquery code, compatible with Wicket 9, and has jQuery UI v1.14.1
2. If not officially planned, whether there is a recommended approach to safely override or integrate a newer jQuery UI version while maintaining compatibility with WiQuery 9.

Thank you in advance for your support and guidance. We look forward to your response.

Regards
Saad Ali
mdsaadali01298@gmail.com

[martin-g]

Dear @Saad01298 !

Do you want to help us/yourself ?
You could make it faster by sending a Pull Request!

The JQuery UI resources are at https://github.com/wicketstuff/wiquery/tree/master/wiquery-jquery-ui/src/main/resources/org/wicketstuff/wiquery/ui/*.js
Then you could test with the demo application and your application.

If everything is OK then I could help with the release!

[Saad01298]

Hi Martin

I forked and tested the change on Wicket-9 branch (i.e. v9.1.0). and Demo is working fine!

But have one issue
pom.xml file on Wicket-9 branch: https://github.com/wicketstuff/wiquery/blob/wicket-9/pom.xml
shows 9.1.0-SNAPSHOT i.e. my fork and change would be for v9.1.0

While on maven central (https://mvnrepository.com/artifact/org.wicketstuff.wiquery/wiquery-jquery-ui) and in our build.gradle dependency we are not able to get 9.1.0
i.e. we are still using 9.0.0

Can you suggest how to get 9.1.0 and test our application on it?

[martin-g]

This is how versioning works - the in-development version is x.y.z-SNAPSHOT. When releasing it the -SNAPSHOT part is removed and x.y.z is deployed in the software repository. Then the version is bumped, e.g. to 9.2.0-SNAPSHOT, and the next development cycle begins.

The easiest way for you is to mvn install WiQuery locally and tell your gradle config to use mavenLocal and change the version of the WiQuery dependency to 9.1.0-SNAPSHOT. Then build your application locally and test it.

[Saad01298]

Hi Martin,

We have completed our changes, which include updating the jquery-ui.js and jquery-ui.css files to version 1.14.1, and modifying DatePickerLanguageResourceReferenceTestCase.java in line with the changes made by the wicketstuff-wiquery team in the wicket-10 branch.

We have tested these changes on the wiquery-demo as well as on our application, and everything is working as expected.

We have created a pull request (#157) that needs to be merged into the wicket-9 branch of the repository.

Could you please review the changes and help us proceed with the release?

Regards,
Saad Ali