- ⛓️💥 BREAKING CHANGE : removed
nodemailer-smtp-transport
replaced withnodemailer
.- The nodemailer-smtp-transport package has been removed due to a critical vulnerability, and its functionality has been consolidated under nodemailer.
- 👊 Impact : Any functions or configurations relying on nodemailer-smtp-transport must be updated to use nodemailer.
- 🎬 Action: Rewrite code to utilize nodemailer as the replacement, ensuring compatibility and security.
- Adds session timeout warning
- user can stay on page or exit form
- adds exit html
- user can stay signed in or save and exit the form if the form is a save and exit form
- adds default save-and-exit html
- updates confirmation html to a static page
- allows for customisation of session timeout warning dialog content, exit and save-and-exit page content, and exit and save-and-exit steps
- Potential breaking change: Static pages should use the
{{<layout}}...{{/layout}}
tags instead of the{{<partials-page}}...{{/partials-page}}
tags if the timeout warning should not be displayed.
- Fixes accessibility issues
- Sandbox area for testing hof changes
- Updates patch and minor dependency versions
- Replaces deprecated request module with axios
- refactors the hof model and apis to use axios instead of request
- Updates patch and minor dependency versions
- Add hint property to checkboxes to align with govuk design guidelines
- Update version of govuk-frontend to 3.15
- this adds the new crown for the King
- this supports a lot of changes from the govuk design system
- Adds support for Google tag manager
- Fixes accessibility issues
- Sandbox area for testing hof changes
- Updates patch and minor versions including
- libphonenumber to 1.9.44
- nodemailer to 6.9.9
- ip to 1.1.9
- es5-ext to 0.10.63
- Update version of helmet to 3.22.0
- Update version of i18n-future to 2.0.0
- Update hof-form-wizard to 5.1.1
- Add support for configuring multiple views folders at the root level
- Update version of hof-template-mixins to 5.2.1
- Now supports hints on options for checkbox and radio groups
- Includes a breaking change to older-style 'grey-label' option groups
- Renames to
hof
! - Includes refactor of
hof-form-controller
to move error messaging to a render-time concern. - Depecrates
Controller#Error
in favour ofController#ValidationError
- Adds themes. Ships with
hof-theme-govuk
as default.
- Uses
_.merge
instead ofObject.assign
to combine default config with user-provided config.
- Fixes i18n language settings. Now offers complete multi-language support
- Adding
--shared ./node_modules/hof-template-partials/translations
to hof-transpiler is no longer necessary. This is handled automatically within bootstrap.
- Makes
views
directory on a route not throw if undefined and default directory does not exist
- Adds behaviours option to global config and app config to support defining common behaviours
- Restores
baseController
option with deprecation warning
- BREAKING -
clearSession
option on steps is removed - BREAKING -
mixin
option for fields defaults toinput-text
this means that fields that previously skipped rendering will now be rendered - BREAKING -
baseController
option removed
- Allow GA script to load js and images form any path
- CSP directives auto-amended with google url when gaTagId set
- CSP directives can be extended with
csp
config - Documentation reorganised
- Test fixtures reorganised
- Allow CSP to be disabled to enable acceptance test to run
- Major version update of hof-template-mixins
- Major version updates of hof-form-wizard and hof-controllers
- Add basic Content Security Policy (CSP) middleware
- Throw error if session.secret is not set in production
- Fixes issue causing an error to be thrown when mounting middleware.
- Add router in middleware stack for insertion of user middleware (#100)
- Potential breaking change: Prevent overwriting initialisation config with custom start config.
- Allow custom protocol, port and host to start method.
- Do not allow this configuration to override the global config
- Fix broken paths to views and translations
- Pass
appConfig
through to hof-wizard - Update to latest hof-wizard v1.1.0 so
appConfig
is passed to eachcontroller
- Make
views
use hof-template-partials as default - Remove
views
andfields
fromdefaults.js
- BREAKING CHANGE: Throw if no base
fields
or routefields
option is specified- Breaks all instances of bootstrap overriding
views
andfields
with booleanfalse
- Breaks all instances of bootstrap overriding
- Update documentation, typos
- Update tests, specifically where optional controller provided
- Use hof-middleware.deepTranslate
- Use hof-middleware.notFound
- Remove assetPath option (Breaking)
- Make async tests run and not fail on travis
- Use cookie middleware
- Hard-code local assetPath (
/public
) - Replace
assets
option withassetpath
(breaking change)
- hof-template-partials 1.0.1 for common views and translations
- Fix i18n usage
- Invoke i18n
- Wait for i18n to become ready
- Fix router's optional paths
- Set the app to trust proxy
- Update cookies settings