Our dependency graph is crazy. In order to reduce our dependencies to make security reviews easier, we should use Vite and Rollup instead.
Description
Details
Related Objects
- Mentioned In
- T288551: Investigate replacing vue-cli with vite and webpack with rollup for Toolhub
T273020: Security Readiness Review For Toolhub
T288466: [QS-GUI] Port Wikidata Query UI to a modern build system
T235498: Share Storybook Config
T264822: (MS 7) Security Readiness Review For Wikidata Query Builder
T279108: Introduce a Front-end Build Step for MediaWiki Skins and Extensions - Mentioned Here
- T272879: Migrate WVUI library to Rollup or Vite
Event Timeline
This might be useful: https://wildermuth.com/2021/01/10/Vite-for-Existing-Vue-CLI-Projects
Setting to medium for now. While it certainly would be nice to have, it won't change much for the current hike anymore. However, the learning from seeing if it can be made to work with vue2 could be useful for future projects.
The priority would be raised if the sec-team has a problem with the large amount of dependencies that comes with vue-cli (+webpack).
We may need https://github.com/underfin/vite-plugin-vue2 and also maybe see https://github.com/vitejs/vite/issues/305 for background discussions.
As I understand it, the wmf teams are using vite and vue2, right? We should have a look at their setup.
Change 703870 had a related patch set uploaded (by Ladsgroup; author: Ladsgroup):
[wikidata/query-builder@master] [Very WIP] Migrate to vite
Change 705353 had a related patch set uploaded (by Bereket teshome; author: Bereket teshome):
[wikidata/query-builder@master] Migration of vue-cli/webpack to vite/rollup
Change 703870 abandoned by Ladsgroup:
[wikidata/query-builder@master] [Very WIP] Migrate to vite
Reason:
In favor of I6bd9d9f5ad59945
Change 705353 merged by jenkins-bot:
[wikidata/query-builder@master] Migration of vue-cli/webpack to vite/rollup
Change 708651 had a related patch set uploaded (by Ladsgroup; author: Ladsgroup):
[wikidata/query-builder@master] Update toolforge cron to use the build repo
Change 708651 merged by jenkins-bot:
[wikidata/query-builder@master] Update toolforge cron to use the build repo