ewilliams28/releases
1
0
Fork 0
mirror of https://github.com/open-policy-agent/opa.git synced 2026-08-12 19:32:48 -06:00
Code Issues Packages Projects Releases Wiki Activity
6,675 Commits 45 Branches 221 Tags
main
Commit Graph

86 Commits

Author SHA1 Message Date
dependabot[bot] 0fdcd5bfb3 build(deps): bump mermaid from 11.15.0 to 11.16.1 in /docs (#8983) 
Bumps [mermaid](https://github.com/mermaid-js/mermaid) from 11.15.0 to
11.16.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mermaid-js/mermaid/releases">mermaid's
releases</a>.</em></p>
<blockquote>
<h2>mermaid@11.16.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/12d472c9ed43f94814b110da8d7a9ae6dd5266ed"><code>12d472c</code></a>
Thanks <a
href="https://github.com/aloisklink"><code>@​aloisklink</code></a>! -
fix: handle CSS sibling combinators in compileCSS</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/2cd6dcf735533b323507e3e889ffdea870540b43"><code>2cd6dcf</code></a>
Thanks <a
href="https://github.com/aloisklink"><code>@​aloisklink</code></a>! -
fix: increase protections against prototype pollution</p>
<p>User-controlled input already has protections against prototype
pollution.</p>
<p>Fixes: GHSA-c4c3-pg64-4m4v</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/99af3fc35ef0a9a9c8c6314521344d67523ddccf"><code>99af3fc</code></a>
Thanks <a
href="https://github.com/aloisklink"><code>@​aloisklink</code></a>! -
fix(architecture): use <code>Map</code>s and <code>Set</code>s to store
groups/services</p>
<p>Services are now rendered in the order they are defined and more
service IDs
are now supported.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/2cd6dcf735533b323507e3e889ffdea870540b43"><code>2cd6dcf</code></a>
Thanks <a
href="https://github.com/aloisklink"><code>@​aloisklink</code></a>! -
deprecate: Deprecate the <code>mermaidAPI.setConfig()</code>
function</p>
<p>Calling this function has no observable effect, as the next time a
<code>render()</code> or <code>parse()</code> is called, the
<code>currentConfig</code> is cleared.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/630aa7e5dd417e1f56bff2a1ce8df2c5ad08d289"><code>630aa7e</code></a>
Thanks <a
href="https://github.com/aloisklink"><code>@​aloisklink</code></a>! -
fix(xychart): support zero-width x-axis ranges</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e"><code>59b22fa</code></a>
Thanks <a
href="https://github.com/aloisklink"><code>@​aloisklink</code></a>! -
fix(radar): limit number of ticks to 32</p>
<p>Setting a ticks value higher than this would only show 32 ticks.</p>
</li>
</ul>
<h2>mermaid@11.16.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/7535">#7535</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/ea1c48f53fce5d025388d386c90da8743ee25b13"><code>ea1c48f</code></a>
Thanks <a
href="https://github.com/ragelink"><code>@​ragelink</code></a>! -
feat(cynefin): Adds the Cynefin framework as a new diagram type (beta)
to Mermaid (available as <code>cynefin-beta</code>). The Cynefin
framework, created by Dave Snowden, is a decision-making framework that
categorizes problems into five complexity domains, widely used in agile,
incident management, strategy, and organizational design.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/7721">#7721</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/f45cc2cc5683b90990e374a463b7bcad0fd68a38"><code>f45cc2c</code></a>
Thanks <a
href="https://github.com/notionparallax"><code>@​notionparallax</code></a>!
- feat(treeView): add box-drawing character input support for treeView
diagrams</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/7550">#7550</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/f1f4d45ee0513b64a2bd280087d31656f9d2c786"><code>f1f4d45</code></a>
Thanks <a
href="https://github.com/DominicBurkart"><code>@​DominicBurkart</code></a>!
- feat(xychart): add per-point text labels for xychart line plots</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/7527">#7527</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/b4d0442dd1628acb3f71681519e7f47fc8bacf55"><code>b4d0442</code></a>
Thanks <a
href="https://github.com/notionparallax"><code>@​notionparallax</code></a>!
- feat(treeView): Extends the existing treeView-beta diagram with
features useful for representing file/directory structures.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/7793">#7793</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/a6f097d580d459dfc3ade3e21030037341f79940"><code>a6f097d</code></a>
Thanks <a href="https://github.com/SSDWGG"><code>@​SSDWGG</code></a>! -
feat(er): support optional ER attribute types with a <code>?</code>
suffix</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/7772">#7772</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/37f2e36fa017698b66093ac5518396523a7a3241"><code>37f2e36</code></a>
Thanks <a
href="https://github.com/devareddy05"><code>@​devareddy05</code></a>! -
feat(gantt): support multiple <code>excludes</code> /
<code>includes</code> lines so long exclusion lists can be split into
commented groups (<a
href="https://redirect.github.com/mermaid-js/mermaid/issues/6270">#6270</a>)</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/7708">#7708</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/4e63e9d338b6476df283afd4a002072945bc4563"><code>4e63e9d</code></a>
Thanks <a href="https://github.com/txmxthy"><code>@​txmxthy</code></a>!
- feat(architecture): add <code>align row|column {ids…}</code> directive
to architecture-beta diagrams so authors can declare horizontal or
vertical alignment of services explicitly.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/7760">#7760</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/05223bee47a424be3ba7805e753b96861d342765"><code>05223be</code></a>
Thanks <a
href="https://github.com/ngdaniels"><code>@​ngdaniels</code></a>! -
feat(pie): Enhance Pie Chart - Enable donut chart, Set legend position,
and highlight slice</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/7251">#7251</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/216e4e9a61afceae885b00854f79e17373ccad31"><code>216e4e9</code></a>
Thanks <a href="https://github.com/ydah"><code>@​ydah</code></a>! -
feat(railroad): Add support for Railroad Diagrams (Syntax Diagrams) with
four input syntaxes: IR (railroad-beta), EBNF (railroad-ebnf-beta), ABNF
(railroad-abnf-beta), and PEG (railroad-peg-beta).</p>
</li>
<li>
<p><a
href="https://redirect.github.com/mermaid-js/mermaid/pull/7774">#7774</a>
<a
href="https://github.com/mermaid-js/mermaid/commit/e5c75e6b797f84f8f652d8771eb1ce6161dd8f89"><code>e5c75e6</code></a>
Thanks <a
href="https://github.com/ngdaniels"><code>@​ngdaniels</code></a>! -
feat(xychart): enable rotate label on X-axis</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/mermaid-js/mermaid/commit/7ecca0cd7f1658ef74f4e7e91f925724ef403bbf"><code>7ecca0c</code></a>
Version Packages (<a
href="https://redirect.github.com/mermaid-js/mermaid/issues/8023">#8023</a>)</li>
<li><a
href="https://github.com/mermaid-js/mermaid/commit/95b1b9cdba40e7954aee7d8a265577fd3839710c"><code>95b1b9c</code></a>
docs: change <code>mermaidAPI.setConfig()</code> changeset (<a
href="https://redirect.github.com/mermaid-js/mermaid/issues/8024">#8024</a>)</li>
<li><a
href="https://github.com/mermaid-js/mermaid/commit/acc69f172b5ad5405ca8de8f4f79a80505092b3f"><code>acc69f1</code></a>
Merge pull request <a
href="https://redirect.github.com/mermaid-js/mermaid/issues/8022">#8022</a>
from mermaid-js/release/11.16.1</li>
<li><a
href="https://github.com/mermaid-js/mermaid/commit/eba72879e94755433403e571d724ca7a448800af"><code>eba7287</code></a>
docs: point changesets to correct commit hashes</li>
<li><a
href="https://github.com/mermaid-js/mermaid/commit/12d472c9ed43f94814b110da8d7a9ae6dd5266ed"><code>12d472c</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/mermaid-js/mermaid/commit/2cd6dcf735533b323507e3e889ffdea870540b43"><code>2cd6dcf</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/mermaid-js/mermaid/commit/630aa7e5dd417e1f56bff2a1ce8df2c5ad08d289"><code>630aa7e</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e"><code>59b22fa</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/mermaid-js/mermaid/commit/99af3fc35ef0a9a9c8c6314521344d67523ddccf"><code>99af3fc</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/mermaid-js/mermaid/commit/2337f7ecd629c8e777684a2edff341976230ad67"><code>2337f7e</code></a>
Merge branch 'test/improve-example.html' into release/11.16.1</li>
<li>Additional commits viewable in <a
href="https://github.com/mermaid-js/mermaid/compare/mermaid@11.15.0...mermaid@11.16.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mermaid&package-manager=npm_and_yarn&previous-version=11.15.0&new-version=11.16.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-10 10:59:15 +02:00
dependabot[bot] b56b99e908 build(deps): bump dompurify from 3.4.12 to 3.4.13 in /docs (#8990) 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.12 to
3.4.13.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cure53/DOMPurify/releases">dompurify's
releases</a>.</em></p>
<blockquote>
<h2>DOMPurify 3.4.13</h2>
<ul>
<li>Fixed an issue with hook removal during <code>IN_PLACE</code>
sanitization, thanks <a
href="https://github.com/koyokr"><code>@​koyokr</code></a></li>
<li>Fixed an issue with hooks potentially bypassing the clone guard,
thanks <a
href="https://github.com/AkshayjainG"><code>@​AkshayjainG</code></a></li>
<li>Fixed an issue with DOM clobbering via <code>ownerDocument</code>
during <code>IN_PLACE</code>, thanks <a
href="https://github.com/AkshayjainG"><code>@​AkshayjainG</code></a></li>
<li>Bumped several dependencies where possible</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cure53/DOMPurify/commit/3067f774676975de12306effd6db6ad7a9a8c17f"><code>3067f77</code></a>
release: 3.4.13 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1562">#1562</a>)</li>
<li>See full diff in <a
href="https://github.com/cure53/DOMPurify/compare/3.4.12...3.4.13">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dompurify&package-manager=npm_and_yarn&previous-version=3.4.12&new-version=3.4.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-10 10:58:33 +02:00
dependabot[bot] aeb937c8c7 build(deps): bump fast-uri from 3.1.4 to 3.1.5 in /docs (#8971) 
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.4 to
3.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastify/fast-uri/releases">fast-uri's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.5</h2>
<h2>⚠️ Security Warning</h2>
<p>Fix for <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7">https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7</a></p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fastify/fast-uri/commit/5e179cbb4636d5f773ed21126e5bd3068e87e94e"><code>5e179cb</code></a>
Bumped v3.1.5</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/2cad02d6ed428a720499bb7a3c3d6c3d41f10f5a"><code>2cad02d</code></a>
Merge commit from fork</li>
<li>See full diff in <a
href="https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fast-uri&package-manager=npm_and_yarn&previous-version=3.1.4&new-version=3.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-03 17:07:19 -05:00
dependabot[bot] 52d1aad7e2 build(deps): bump brace-expansion in /docs (#8969) 
Bumps and
[brace-expansion](https://github.com/juliangruber/brace-expansion).
These dependencies needed to be updated together.
Updates `brace-expansion` from 1.1.13 to 1.1.18
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/juliangruber/brace-expansion/releases">brace-expansion's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.15</h2>
<ul>
<li>Backport v5.0.6 change to v1 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>)
0b09384</li>
</ul>
<hr />
<p><a
href="https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15">https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b"><code>758fcd6</code></a>
1.1.18</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e"><code>27fbeed</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf"><code>5c57cc2</code></a>
1.1.17</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57"><code>d757f1d</code></a>
npm ignore <code>.claude</code></li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"><code>cb4b9e4</code></a>
fix: backport GHSA-mh99-v99m-4gvg (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/129">#129</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/447763a91a613cfa67ac73096cbc1de9a2304f97"><code>447763a</code></a>
1.1.16</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95"><code>d74e630</code></a>
fix: v1 backport for CVE-2026-13149 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/122">#122</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/2203f4f4895eba16c4d408b4219ce1b8e5f6ff24"><code>2203f4f</code></a>
1.1.15</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/0b0938410732370559704230724ca4a44d1b29fd"><code>0b09384</code></a>
Backport v5.0.6 change to v1 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/10c05fcf3699b1a29ef5e611c011af3d3c97e6e3"><code>10c05fc</code></a>
1.1.14</li>
<li>Additional commits viewable in <a
href="https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.18">compare
view</a></li>
</ul>
</details>
<br />

Updates `brace-expansion` from 5.0.6 to 5.0.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/juliangruber/brace-expansion/releases">brace-expansion's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.15</h2>
<ul>
<li>Backport v5.0.6 change to v1 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>)
0b09384</li>
</ul>
<hr />
<p><a
href="https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15">https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b"><code>758fcd6</code></a>
1.1.18</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e"><code>27fbeed</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf"><code>5c57cc2</code></a>
1.1.17</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57"><code>d757f1d</code></a>
npm ignore <code>.claude</code></li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"><code>cb4b9e4</code></a>
fix: backport GHSA-mh99-v99m-4gvg (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/129">#129</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/447763a91a613cfa67ac73096cbc1de9a2304f97"><code>447763a</code></a>
1.1.16</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95"><code>d74e630</code></a>
fix: v1 backport for CVE-2026-13149 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/122">#122</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/2203f4f4895eba16c4d408b4219ce1b8e5f6ff24"><code>2203f4f</code></a>
1.1.15</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/0b0938410732370559704230724ca4a44d1b29fd"><code>0b09384</code></a>
Backport v5.0.6 change to v1 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/10c05fcf3699b1a29ef5e611c011af3d3c97e6e3"><code>10c05fc</code></a>
1.1.14</li>
<li>Additional commits viewable in <a
href="https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.18">compare
view</a></li>
</ul>
</details>
<br />

Updates `brace-expansion` from 5.0.5 to 5.0.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/juliangruber/brace-expansion/releases">brace-expansion's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.15</h2>
<ul>
<li>Backport v5.0.6 change to v1 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>)
0b09384</li>
</ul>
<hr />
<p><a
href="https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15">https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b"><code>758fcd6</code></a>
1.1.18</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e"><code>27fbeed</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf"><code>5c57cc2</code></a>
1.1.17</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57"><code>d757f1d</code></a>
npm ignore <code>.claude</code></li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"><code>cb4b9e4</code></a>
fix: backport GHSA-mh99-v99m-4gvg (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/129">#129</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/447763a91a613cfa67ac73096cbc1de9a2304f97"><code>447763a</code></a>
1.1.16</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95"><code>d74e630</code></a>
fix: v1 backport for CVE-2026-13149 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/122">#122</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/2203f4f4895eba16c4d408b4219ce1b8e5f6ff24"><code>2203f4f</code></a>
1.1.15</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/0b0938410732370559704230724ca4a44d1b29fd"><code>0b09384</code></a>
Backport v5.0.6 change to v1 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/10c05fcf3699b1a29ef5e611c011af3d3c97e6e3"><code>10c05fc</code></a>
1.1.14</li>
<li>Additional commits viewable in <a
href="https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.18">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-03 15:28:21 -05:00
dependabot[bot] 823b39aa10 build(deps): bump the website group in /docs with 9 updates (#8966) 
Bumps the website group in /docs with 9 updates:

| Package | From | To |
| --- | --- | --- |
|
[@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus)
| `3.10.1` | `3.10.2` |
|
[@docusaurus/plugin-content-docs](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs)
| `3.10.1` | `3.10.2` |
|
[@docusaurus/plugin-google-gtag](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag)
| `3.10.1` | `3.10.2` |
|
[@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic)
| `3.10.1` | `3.10.2` |
|
[@docusaurus/theme-mermaid](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid)
| `3.10.1` | `3.10.2` |
|
[@floating-ui/react](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react)
| `0.27.19` | `0.27.20` |
| [eslint](https://github.com/eslint/eslint) | `10.5.0` | `10.8.0` |
| [recharts](https://github.com/recharts/recharts) | `3.9.0` | `3.10.0`
|
|
[baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping)
| `2.10.38` | `2.11.9` |

Updates `@docusaurus/core` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/core's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@​docusaurus/core's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a>
v3.10.2</li>
<li><a
href="https://github.com/facebook/docusaurus/commit/2f5389d1fa4c1801d7bfe6ec13e9317cec449935"><code>2f5389d</code></a>
chore: cherry-pick commits for v3.10.2 patch release (<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12265">#12265</a>)</li>
<li>See full diff in <a
href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus">compare
view</a></li>
</ul>
</details>
<br />

Updates `@docusaurus/plugin-content-docs` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/plugin-content-docs's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@​docusaurus/plugin-content-docs's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a>
v3.10.2</li>
<li>See full diff in <a
href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-plugin-content-docs">compare
view</a></li>
</ul>
</details>
<br />

Updates `@docusaurus/plugin-google-gtag` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/plugin-google-gtag's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@​docusaurus/plugin-google-gtag's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a>
v3.10.2</li>
<li><a
href="https://github.com/facebook/docusaurus/commit/2f5389d1fa4c1801d7bfe6ec13e9317cec449935"><code>2f5389d</code></a>
chore: cherry-pick commits for v3.10.2 patch release (<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12265">#12265</a>)</li>
<li>See full diff in <a
href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-plugin-google-gtag">compare
view</a></li>
</ul>
</details>
<br />

Updates `@docusaurus/preset-classic` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/preset-classic's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@​docusaurus/preset-classic's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a>
v3.10.2</li>
<li>See full diff in <a
href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-preset-classic">compare
view</a></li>
</ul>
</details>
<br />

Updates `@docusaurus/theme-mermaid` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/theme-mermaid's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@​docusaurus/theme-mermaid's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a>
v3.10.2</li>
<li>See full diff in <a
href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-theme-mermaid">compare
view</a></li>
</ul>
</details>
<br />

Updates `@floating-ui/react` from 0.27.19 to 0.27.20
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/floating-ui/floating-ui/releases">@​floating-ui/react's
releases</a>.</em></p>
<blockquote>
<h2><code>@​floating-ui/react</code><a
href="https://github.com/0"><code>@​0</code></a>.27.20</h2>
<h3>Patch Changes</h3>
<ul>
<li>fix: remove redundant passive options from scroll listeners</li>
<li>fix: support explicit <code>undefined</code> for optional properties
with <code>exactOptionalPropertyTypes</code></li>
<li>Update dependencies: <code>@floating-ui/react-dom@2.1.9</code>,
<code>@floating-ui/utils@0.2.12</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/floating-ui/floating-ui/blob/master/packages/react/CHANGELOG.md">@​floating-ui/react's
changelog</a>.</em></p>
<blockquote>
<h2>0.27.20</h2>
<h3>Patch Changes</h3>
<ul>
<li>fix: remove redundant passive options from scroll listeners</li>
<li>fix: support explicit <code>undefined</code> for optional properties
with <code>exactOptionalPropertyTypes</code></li>
<li>Update dependencies: <code>@floating-ui/react-dom@2.1.9</code>,
<code>@floating-ui/utils@0.2.12</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/floating-ui/floating-ui/commit/12d94738472e922e1b3fa31b02b2b61b9ed77e6a"><code>12d9473</code></a>
chore: version packages (<a
href="https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react/issues/3480">#3480</a>)</li>
<li><a
href="https://github.com/floating-ui/floating-ui/commit/9887c9679906900ffac4ee632deaa8bc959f71d2"><code>9887c96</code></a>
fix(types): restore bivariant parameters for optional callbacks</li>
<li><a
href="https://github.com/floating-ui/floating-ui/commit/73c1f762a2670a3eb1e99935df59c81ef241b90a"><code>73c1f76</code></a>
fix(types): support <code>exactOptionalPropertyTypes</code> (<a
href="https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react/issues/3456">#3456</a>)</li>
<li><a
href="https://github.com/floating-ui/floating-ui/commit/8999976822c9193eab5eb625ae16cc4381e9e7b0"><code>8999976</code></a>
chore: upgrade vulnerable direct dependencies (<a
href="https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react/issues/3484">#3484</a>)</li>
<li><a
href="https://github.com/floating-ui/floating-ui/commit/fa63ca665910d90d664da6c7e3f6d8e0061925e9"><code>fa63ca6</code></a>
chore: remove unnecessary passive flag from scroll events (<a
href="https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react/issues/3470">#3470</a>)</li>
<li><a
href="https://github.com/floating-ui/floating-ui/commit/fabb80ba5e5cd76bcde288fd725ac2e1942ba613"><code>fabb80b</code></a>
breaking(vue): drop <code>vue-demi</code> and require Vue &gt;=3.3.0 (<a
href="https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react/issues/3452">#3452</a>)</li>
<li>See full diff in <a
href="https://github.com/floating-ui/floating-ui/commits/@floating-ui/react@0.27.20/packages/react">compare
view</a></li>
</ul>
</details>
<br />

Updates `eslint` from 10.5.0 to 10.8.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.8.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/2fee9bb7416116cbed4d8c8100b1ae713b6356a1"><code>2fee9bb</code></a>
feat: export <code>ConfigObject</code> from <code>eslint/config</code>
(<a
href="https://redirect.github.com/eslint/eslint/issues/21082">#21082</a>)
(sethamus)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/6b8d2f7589b8a7c8b91b8ca2a2ef6d46178760d8"><code>6b8d2f7</code></a>
fix: escape reserved characters in rule id in <code>html</code>
formatter (<a
href="https://redirect.github.com/eslint/eslint/issues/21129">#21129</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/90910715011211a20d011d807d398a7005127f35"><code>9091071</code></a>
fix: prevent <code>no-unreachable-loop</code> crash when all loop types
are ignored (<a
href="https://redirect.github.com/eslint/eslint/issues/21116">#21116</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e23fafe8d4b15355adef6cdebef414c3a2019454"><code>e23fafe</code></a>
fix: prefer-object-spread add semicolon when adding parenthesis (<a
href="https://redirect.github.com/eslint/eslint/issues/21081">#21081</a>)
(synthex-byte)</li>
<li><a
href="https://github.com/eslint/eslint/commit/20b5ad052360a443786a202e94624a3f81846511"><code>20b5ad0</code></a>
fix: quadratic-time regex in <code>prefer-template</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21096">#21096</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8b6f6c0b33411f34485512456d94f221daf7321f"><code>8b6f6c0</code></a>
fix: apply ignore configs to computed methods in class-methods-use-this
(<a
href="https://redirect.github.com/eslint/eslint/issues/21094">#21094</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b2c608c014a396800a24a89343265d0616bee2d8"><code>b2c608c</code></a>
fix: NewExpression with parenthesized callee in
<code>preserve-caught-error</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21083">#21083</a>)
(Francesco Trotta)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/6ddf8587e5cfeeb7328332601bb76d98b8a198ea"><code>6ddf858</code></a>
docs: fix broken Specify Parser Options anchor link (<a
href="https://redirect.github.com/eslint/eslint/issues/21106">#21106</a>)
(Minsu)</li>
<li><a
href="https://github.com/eslint/eslint/commit/784dfbe98f0222426fd200153a5ce2e5624151f0"><code>784dfbe</code></a>
docs: Clarify <code>no-eq-null</code> description (<a
href="https://redirect.github.com/eslint/eslint/issues/21120">#21120</a>)
(Park Harin)</li>
<li><a
href="https://github.com/eslint/eslint/commit/7ec733a3ba5acb053a73ac656030a3879aa48fda"><code>7ec733a</code></a>
docs: Fix typos and grammar in glossary (<a
href="https://redirect.github.com/eslint/eslint/issues/21095">#21095</a>)
(Marry (Subin Yang))</li>
<li><a
href="https://github.com/eslint/eslint/commit/92bb13f13065db72d62454b9830d3ae52db15c76"><code>92bb13f</code></a>
docs: replace quake link (<a
href="https://redirect.github.com/eslint/eslint/issues/21108">#21108</a>)
(Jung Hyeon Jun)</li>
<li><a
href="https://github.com/eslint/eslint/commit/68eb4a57572409dbdcfeb3bc5c92ddbba46bc770"><code>68eb4a5</code></a>
docs: fix broken Specify Globals anchor links in rule pages (<a
href="https://redirect.github.com/eslint/eslint/issues/21103">#21103</a>)
(Minsu)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d28f697e0d32d7446c825fd89c362db028450134"><code>d28f697</code></a>
docs: replace Code Climate CLI links with Qlty CLI links (<a
href="https://redirect.github.com/eslint/eslint/issues/21099">#21099</a>)
(Jung Hyeon Jun)</li>
<li><a
href="https://github.com/eslint/eslint/commit/eccc68d42564e46bc9020d19ec52d2988f3b7bfa"><code>eccc68d</code></a>
docs: correct --suppressions-location option description (<a
href="https://redirect.github.com/eslint/eslint/issues/21093">#21093</a>)
(Ga eun Lee)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c5963f74bfa82a5b7ccc0607dcdcc695b8c97a31"><code>c5963f7</code></a>
docs: Update README (GitHub Actions Bot)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/4fbf46d140120ae838db08cbe49544c985956490"><code>4fbf46d</code></a>
test: pin <code>webpack</code> version to 5.108.4 (<a
href="https://redirect.github.com/eslint/eslint/issues/21137">#21137</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/2d063e224e9bb0ccb0a28c120f7e380a8d62f320"><code>2d063e2</code></a>
chore: update HTTP URLs to HTTPS in JSDoc and comments (<a
href="https://redirect.github.com/eslint/eslint/issues/21101">#21101</a>)
(Bo Hyun Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/eccbe7bc9257a6c99880468e452c8dfafbf47f74"><code>eccbe7b</code></a>
test: add error locations to <code>no-class-assign</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21123">#21123</a>)
(devoil)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e7d1e4373bf626f8da76d62ce024c28928bc99bc"><code>e7d1e43</code></a>
ci: bump actions/setup-go from 6 to 7 (<a
href="https://redirect.github.com/eslint/eslint/issues/21118">#21118</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/e9d66d0cde1a7752c29dee53ab7b62632835a87a"><code>e9d66d0</code></a>
ci: bump actions/setup-node from 6 to 7 (<a
href="https://redirect.github.com/eslint/eslint/issues/21119">#21119</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/ee225b60c26f0cc5f4d71641888a5bd2ec5626d6"><code>ee225b6</code></a>
test: Add error location details to <code>no-eq-null</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/21117">#21117</a>)
(Park Harin)</li>
<li><a
href="https://github.com/eslint/eslint/commit/044a627fa3e28ee1410d515acc5378eb4b49f8ba"><code>044a627</code></a>
chore: update minimatch to ^10.2.5 (<a
href="https://redirect.github.com/eslint/eslint/issues/21107">#21107</a>)
(김채영)</li>
<li><a
href="https://github.com/eslint/eslint/commit/fb09aa8ff09730d3ccf68859e065f99666b52466"><code>fb09aa8</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21115">#21115</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/5abd878740fe417fd8a910cac3741f2a0317b365"><code>5abd878</code></a>
test: add error locations to <code>no-proto</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21114">#21114</a>)
(Gihyeon Jeong / 정기현)</li>
<li><a
href="https://github.com/eslint/eslint/commit/9715887ec94a5ff936447d7b680d039fbe2f0541"><code>9715887</code></a>
test: Add error location details to <code>no-div-regex</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21110">#21110</a>)
(Park Harin)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a746ec6ea4a2249b1eb3f512264da5f4d5f7c886"><code>a746ec6</code></a>
test: add error locations to <code>no-new-wrappers</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21109">#21109</a>)
(Gihyeon Jeong / 정기현)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8dde64570e240f3ef8af873d59a752db6d8519aa"><code>8dde645</code></a>
test: add error locations to <code>no-ex-assign</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21102">#21102</a>)
(devoil)</li>
<li><a href="ht...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-03 09:53:00 -05:00
dependabot[bot] f1e2ac07e4 build(deps): bump postcss from 8.5.15 to 8.5.23 in /docs 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.15 to 8.5.23.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.5.15...8.5.23)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-28 11:19:10 +02:00
dependabot[bot] d9c7856eae build(deps): bump js-yaml from 5.2.1 to 5.2.2 in /docs 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.1 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.1...5.2.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-28 11:06:38 +02:00
dependabot[bot] 564a187c1f build(deps): bump fast-uri from 3.1.2 to 3.1.4 in /docs (#8930) 
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to
3.1.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastify/fast-uri/releases">fast-uri's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.4</h2>
<h2>⚠️ Security Release</h2>
<p>Fix for <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx">https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx</a></p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4">https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4</a></p>
<h2>v3.1.3</h2>
<h2>⚠️ Security Release</h2>
<ul>
<li>Fixes: <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6">https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3">https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fastify/fast-uri/commit/6aeece669e4166b2446a89f17c07a3b15dfb7ed4"><code>6aeece6</code></a>
Bumped v3.1.4</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/2d50fbabc80e4d0884fe0f6a98fe118ce6faa353"><code>2d50fba</code></a>
fix: reject literal backslash in URI authority</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/0549fe35b0d482233f3be2816439f3ec803603fa"><code>0549fe3</code></a>
Bumped v3.1.3</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/2a6d357a18a68e6d812824379fd3388a1ae50d05"><code>2a6d357</code></a>
Merge commit from fork</li>
<li>See full diff in <a
href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fast-uri&package-manager=npm_and_yarn&previous-version=3.1.2&new-version=3.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 16:20:04 -05:00
dependabot[bot] 16b238da79 build(deps): bump dompurify from 3.4.11 to 3.4.12 in /docs (#8929) 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.11 to
3.4.12.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cure53/DOMPurify/releases">dompurify's
releases</a>.</em></p>
<blockquote>
<h2>DOMPurify 3.4.12</h2>
<ul>
<li>Fixed an issue where a hook would not get called for custom
elements, thanks <a
href="https://github.com/Rikuxx0"><code>@​Rikuxx0</code></a></li>
<li>Hardened the handling of hooks removing elements, <a
href="https://github.com/mkrause-bee360"><code>@​mkrause-bee360</code></a></li>
<li>Added support for a few new SVG attributes, thanks <a
href="https://github.com/cbn-falias"><code>@​cbn-falias</code></a> &amp;
<a
href="https://github.com/Develop-KIM"><code>@​Develop-KIM</code></a></li>
<li>Hardened the handling of declarative partial updates</li>
<li>Updated the documentation is several spots, README, wiki, etc.</li>
<li>Bumped several dependencies where possible</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cure53/DOMPurify/commit/a9ca1e537422319a557a9a2aa61f003b23b4a197"><code>a9ca1e5</code></a>
release: 3.4.12 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1537">#1537</a>)</li>
<li>See full diff in <a
href="https://github.com/cure53/DOMPurify/compare/3.4.11...3.4.12">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dompurify&package-manager=npm_and_yarn&previous-version=3.4.11&new-version=3.4.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 16:19:50 -05:00
dependabot[bot] 522a91ed63 build(deps): bump svgo from 3.3.3 to 3.3.4 in /docs (#8928) 
Bumps [svgo](https://github.com/svg/svgo) from 3.3.3 to 3.3.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/svg/svgo/releases">svgo's
releases</a>.</em></p>
<blockquote>
<h2>v3.3.4</h2>
<h2>What's Changed</h2>
<h3>Security</h3>
<ul>
<li><a
href="https://svgo.dev/docs/plugins/removeScripts/">removeScriptElement</a>,
remove JavaScript URIs case-insensitively and make
<code>&lt;script&gt;</code> handling namespace aware. By <a
href="https://github.com/SethFalco"><code>@​SethFalco</code></a></li>
</ul>
<h2>Support</h2>
<p>SVGO v3 is not officially supported, please consider upgrading to
SVGO v4 instead. We've backported this fix as there are security
implications, but there is no commitment to do this for more complex
changes in future.</p>
<p>Consider reading our <a
href="https://svgo.dev/docs/migrations/migration-from-v3-to-v4/">Migration
Guide from v3 to v4</a> which should ease the process.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/svg/svgo/commit/72a23886b4698b27624b936f3a15a80afd36d75f"><code>72a2388</code></a>
Merge commit from fork</li>
<li>See full diff in <a
href="https://github.com/svg/svgo/compare/v3.3.3...v3.3.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=svgo&package-manager=npm_and_yarn&previous-version=3.3.3&new-version=3.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 16:19:31 -05:00
dependabot[bot] 1a5a35eb13 build(deps): bump markdown-it and markdownlint-cli2 in /docs (#8923) 
Bumps [markdown-it](https://github.com/markdown-it/markdown-it) to
14.3.0 and updates ancestor dependency
[markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2).
These dependencies need to be updated together.

Updates `markdown-it` from 14.1.1 to 14.3.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md">markdown-it's
changelog</a>.</em></p>
<blockquote>
<h2>[14.3.0] - 2026-07-02</h2>
<h3>Changed</h3>
<ul>
<li>Reworked build pipeline &amp; tools.</li>
<li>Added source maps.</li>
<li>Bumped <code>linkify-it</code> to 5.0.2.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve backslash-space hard line breaks, matching CommonMark 6.7,
<a
href="https://redirect.github.com/markdown-it/markdown-it/issues/1185">#1185</a>.</li>
</ul>
<h2>[14.2.0] - 2026-05-24</h2>
<h3>Added</h3>
<ul>
<li><code>isPunctCharCode</code> to utilities.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Don't end HTML comment blocks on a blank line, <a
href="https://redirect.github.com/markdown-it/markdown-it/issues/1155">#1155</a>.</li>
<li>Properly recognize astral chars (surrogates) in delimiter scans for
emphasis-like markers, <a
href="https://redirect.github.com/markdown-it/markdown-it/issues/1072">#1072</a>.
Big thanks to <a
href="https://github.com/tats-u"><code>@​tats-u</code></a> for his
global efforts
with improving CJK support.</li>
<li>Preserve unicode whitespaces when trimm headings/paragraphs, <a
href="https://redirect.github.com/markdown-it/markdown-it/issues/1074">#1074</a>.</li>
<li>More strict entities decode to avoid false positives <code>;</code>,
<a
href="https://redirect.github.com/markdown-it/markdown-it/issues/1096">#1096</a>.</li>
<li>Restore block parser state on fail in <code>lheading</code> rule, <a
href="https://redirect.github.com/markdown-it/markdown-it/issues/1131">#1131</a>.</li>
</ul>
<h3>Security</h3>
<ul>
<li>Fixed poor smartquotes perfomance on &gt; 70k quotes in single
block</li>
<li>Bumped linkify-it to 5.0.1 with fixed potential perfomance
issues.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/ff0ee084fc6b0d10fac049fa562bc2925b5cc723"><code>ff0ee08</code></a>
14.3.0 released</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/52e2749ab25aaf841bf74b50560929aa93b8e14d"><code>52e2749</code></a>
Bump linkify-it / vite deps</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/56c2404e6d3e78632ce7b37a95f289fc04330c76"><code>56c2404</code></a>
fix: keep backslash-space hard line break (CommonMark 6.7) (<a
href="https://redirect.github.com/markdown-it/markdown-it/issues/1185">#1185</a>)</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/0fbb18b23145158a39255f7476c781dbce320a16"><code>0fbb18b</code></a>
Bump vite from 8.0.14 to 8.0.16 (<a
href="https://redirect.github.com/markdown-it/markdown-it/issues/1181">#1181</a>)</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/83450e2bc3836ad9f68f652e5685031e9dce4897"><code>83450e2</code></a>
Rework benchmark deps and bump versions</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/57a68632ce317593fe316b7131105b131691b90b"><code>57a6863</code></a>
benchmark =&gt; tinybench</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/7608db19a5b14f84b47b34cced43c574b1abfd0c"><code>7608db1</code></a>
Update CI config</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/9d8eb42a72e0e576125733acc7ae6154e8f6cb5a"><code>9d8eb42</code></a>
Added package-lock and updated versions to latest possible</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/0aee70db5e8284c84201d39d64c2b14228fd280a"><code>0aee70d</code></a>
lint: enable <code>@​stylistic/no-multi-spaces</code> rule</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/88789854dc44db99b7736fd4349487dfda0d4067"><code>8878985</code></a>
lint =&gt; neostandard</li>
<li>Additional commits viewable in <a
href="https://github.com/markdown-it/markdown-it/compare/14.1.1...14.3.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `markdownlint-cli2` from 0.22.1 to 0.23.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md">markdownlint-cli2's
changelog</a>.</em></p>
<blockquote>
<h2>0.23.1</h2>
<ul>
<li>Show attempted fix counts after fixing</li>
<li>Update dependencies (including <code>markdownlint</code>)</li>
</ul>
<h2>0.23.0</h2>
<ul>
<li>Add <code>overrides</code> configuration option</li>
<li>Improve options/configuration file handling</li>
<li>Update dependencies (including <code>markdownlint</code>)</li>
<li>Remove support for end-of-life Node 20</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/DavidAnson/markdownlint-cli2/commit/06f92c99e930c11230426b5edd775021d25e08a8"><code>06f92c9</code></a>
Update to version 0.23.1.</li>
<li><a
href="https://github.com/DavidAnson/markdownlint-cli2/commit/a77352640f8667a658349c68d14db1368c6b22ba"><code>a773526</code></a>
Freshen list of external custom rules included with the
markdownlint-cli2-rul...</li>
<li><a
href="https://github.com/DavidAnson/markdownlint-cli2/commit/437b0caae2b2f39d061309567f99f9c23eb1f1e5"><code>437b0ca</code></a>
Bump eslint-plugin-jsdoc from 63.0.11 to 63.0.12</li>
<li><a
href="https://github.com/DavidAnson/markdownlint-cli2/commit/5463e0fa275b9105ed02dbae9ea6848d062d1c1e"><code>5463e0f</code></a>
Bump eslint-plugin-unicorn from 70.0.0 to 71.0.0</li>
<li><a
href="https://github.com/DavidAnson/markdownlint-cli2/commit/b04ac138a26acc3f65a5e5482825cc938885b7b9"><code>b04ac13</code></a>
Bump globby from 16.2.0 to 16.2.1</li>
<li><a
href="https://github.com/DavidAnson/markdownlint-cli2/commit/1e63f97b080fc2aac9a426379e96e82542cf78a8"><code>1e63f97</code></a>
Revert commit afb7d9898724f0d96279116bbb6f0d1026fff8df &quot;Pin CI
workflow's pnp...</li>
<li><a
href="https://github.com/DavidAnson/markdownlint-cli2/commit/040594ba722e8d319c2e172bf9771d1ba8474d51"><code>040594b</code></a>
Update dependency: markdownlint to 0.41.1.</li>
<li><a
href="https://github.com/DavidAnson/markdownlint-cli2/commit/4d97fa85a1eff2af23011c7f4838738332847f64"><code>4d97fa8</code></a>
Address new ESLint warnings from previous commit.</li>
<li><a
href="https://github.com/DavidAnson/markdownlint-cli2/commit/50cb033a960853cde873c8895849cae94e9f0db7"><code>50cb033</code></a>
Bump eslint-node-test from 0.1.0 to 0.2.0</li>
<li><a
href="https://github.com/DavidAnson/markdownlint-cli2/commit/a53bf04386f8980a027bbb2ed198a5361dbe2b55"><code>a53bf04</code></a>
Bump eslint-plugin-jsdoc from 63.0.10 to 63.0.11</li>
<li>Additional commits viewable in <a
href="https://github.com/DavidAnson/markdownlint-cli2/compare/v0.22.1...v0.23.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 15:50:21 -05:00
dependabot[bot] 5266415db0 build(deps): bump webpack-dev-server from 5.2.5 to 5.2.6 in /docs (#8922) 
Bumps
[webpack-dev-server](https://github.com/webpack/webpack-dev-server) from
5.2.5 to 5.2.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/releases">webpack-dev-server's
releases</a>.</em></p>
<blockquote>
<h2>v5.2.6</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: allow <code>undefined</code> as the <code>Server</code>
constructor <code>options</code> argument again (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5695">#5695</a>)</p>
<p>Restores accepting <code>undefined</code> (defaulting it to
<code>{}</code>) for the <code>options</code>
argument, so passing a webpack config's optional <code>devServer</code>
field type-checks and works as before.</p>
</li>
<li>
<p>Protect the built-in state-changing routes
(<code>/webpack-dev-server/invalidate</code> and
<code>/webpack-dev-server/open-editor</code>) against cross-site request
forgery. Requests are now checked with <code>Sec-Fetch-Site</code>
(falling back to an <code>Origin</code>/<code>Host</code> comparison
when it is absent), so a cross-site page can no longer trigger a rebuild
or open a file in the editor. Same-origin requests, user-initiated
navigations, and non-browser clients (e.g. curl) are unaffected. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5698">#5698</a>)</p>
</li>
<li>
<p>Handle malformed <code>Host</code> and <code>Origin</code> header
values gracefully when validating requests. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5699">#5699</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/blob/v5.2.6/CHANGELOG.md">webpack-dev-server's
changelog</a>.</em></p>
<blockquote>
<h2>5.2.6</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: allow <code>undefined</code> as the <code>Server</code>
constructor <code>options</code> argument again (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5695">#5695</a>)</p>
<p>Restores accepting <code>undefined</code> (defaulting it to
<code>{}</code>) for the <code>options</code>
argument, so passing a webpack config's optional <code>devServer</code>
field type-checks and works as before.</p>
</li>
<li>
<p>Protect the built-in state-changing routes
(<code>/webpack-dev-server/invalidate</code> and
<code>/webpack-dev-server/open-editor</code>) against cross-site request
forgery. Requests are now checked with <code>Sec-Fetch-Site</code>
(falling back to an <code>Origin</code>/<code>Host</code> comparison
when it is absent), so a cross-site page can no longer trigger a rebuild
or open a file in the editor. Same-origin requests, user-initiated
navigations, and non-browser clients (e.g. curl) are unaffected. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5698">#5698</a>)</p>
</li>
<li>
<p>Handle malformed <code>Host</code> and <code>Origin</code> header
values gracefully when validating requests. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5699">#5699</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/8a37b0ed89d07ca81532188fe19f080a2ee51475"><code>8a37b0e</code></a>
chore(release): new release (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5697">#5697</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/f21ed0f44aceb6132abb591ee8b60d770b6e489f"><code>f21ed0f</code></a>
fix: handle malformed Host and Origin headers (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5699">#5699</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/80cd9eea54975fe632a518d8bd902a260f374e7c"><code>80cd9ee</code></a>
fix: reject cross-site requests to open-editor and invalidate endpoints
(<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5698">#5698</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/308e853808fc8f5d0722276e1a87aa73c91859a5"><code>308e853</code></a>
fix: handle undefined options in Server constructor (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5695">#5695</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/8b2b9151f41e0d6157c8bd051cf5f16bce5dba17"><code>8b2b915</code></a>
chore: update branch references from v4 to v5 in workflow
configuration</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/870ed2258dda612c8feeaf8d971afd08233696ad"><code>870ed22</code></a>
chore: add v5 branch to release workflow triggers</li>
<li>See full diff in <a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.5...v5.2.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack-dev-server&package-manager=npm_and_yarn&previous-version=5.2.5&new-version=5.2.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 11:26:13 -05:00
dependabot[bot] 33fc04b53a build(deps): bump body-parser from 1.20.4 to 1.20.6 in /docs (#8920) 
Bumps [body-parser](https://github.com/expressjs/body-parser) from
1.20.4 to 1.20.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/body-parser/releases">body-parser's
releases</a>.</em></p>
<blockquote>
<h2>1.20.6</h2>
<h2>Important: Security</h2>
<ul>
<li>Security fix for <a
href="https://www.cve.org/CVERecord?id=CVE-2025-13466">CVE-2026-12590</a>
(<a
href="https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6">GHSA-v422-hmwv-36x6</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix: improve limit option validation by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/741">expressjs/body-parser#741</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6">https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6</a></p>
<h2>v1.20.5</h2>
<h2>What's Changed</h2>
<p>The reason for this release is a fix to the extended urlencoded
parser returning objects instead of arrays for large array inputs (&gt;
100) on qs@6.14.2+. (<a
href="https://redirect.github.com/expressjs/body-parser/pull/716">expressjs/body-parser#716</a>)</p>
<ul>
<li>refactor(json): simplify strict mode error string construction by <a
href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/body-parser/pull/692">expressjs/body-parser#692</a></li>
<li>fix: correct off-by-one error in parameterCount by <a
href="https://github.com/abhu85"><code>@​abhu85</code></a> in <a
href="https://redirect.github.com/expressjs/body-parser/pull/716">expressjs/body-parser#716</a></li>
<li>deps(qs): bump qs to 6.15.1 by <a
href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/body-parser/pull/722">expressjs/body-parser#722</a></li>
<li>Release: 1.20.5 by <a
href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/body-parser/pull/721">expressjs/body-parser#721</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/abhu85"><code>@​abhu85</code></a> made
their first contribution in <a
href="https://redirect.github.com/expressjs/body-parser/pull/716">expressjs/body-parser#716</a></li>
</ul>
<p>Special thanks to triager <a
href="https://github.com/krzysdz"><code>@​krzysdz</code></a> for keeping
this on our radar and effectively triaging the specific issue!</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5">https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/body-parser/blob/master/HISTORY.md">body-parser's
changelog</a>.</em></p>
<blockquote>
<h1>1.20.6 / 2026-07-09</h1>
<ul>
<li>Security fix for <a
href="https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6">GHSA-v422-hmwv-36x6</a></li>
<li>fix: improve <code>limit</code> option validation (<a
href="https://redirect.github.com/expressjs/body-parser/issues/698">#698</a>)
<ul>
<li>Invalid <code>limit</code> values (e.g. unparseable strings or
<code>NaN</code>) now throw instead of being silently ignored, which
previously disabled size limit enforcement</li>
<li><code>null</code> and <code>undefined</code> fall back to the
default 100kb limit</li>
</ul>
</li>
</ul>
<h1>1.20.5 / 2026-04-24</h1>
<ul>
<li>refactor(json): simplify strict mode error string construction</li>
<li>fix: extended urlencoded parsing of arrays with &gt;100 elements (<a
href="https://redirect.github.com/expressjs/body-parser/issues/716">#716</a>)</li>
<li>deps: qs@~6.15.1</li>
<li></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43"><code>5cc4fb8</code></a>
1.20.6 (<a
href="https://redirect.github.com/expressjs/body-parser/issues/746">#746</a>)</li>
<li><a
href="https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac"><code>3492672</code></a>
fix: improve limit option validation (<a
href="https://redirect.github.com/expressjs/body-parser/issues/741">#741</a>)</li>
<li><a
href="https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575"><code>0defdbe</code></a>
release(patch): 1.20.5</li>
<li><a
href="https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f"><code>cd0e7a0</code></a>
deps(qs): bump qs to 6.15.1</li>
<li><a
href="https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51"><code>6f24d7e</code></a>
fix: correct off-by-one error in parameterCount (<a
href="https://redirect.github.com/expressjs/body-parser/issues/716">#716</a>)</li>
<li><a
href="https://github.com/expressjs/body-parser/commit/b849bd533d8b4abf5576a3e301f28d9befa05ddd"><code>b849bd5</code></a>
deps: qs@~6.14.1 (<a
href="https://redirect.github.com/expressjs/body-parser/issues/690">#690</a>)</li>
<li><a
href="https://github.com/expressjs/body-parser/commit/2c55e2f712f320a8e8d0f9fcb1d06526d0e401c9"><code>2c55e2f</code></a>
refactor(json): simplify strict mode error string construction (<a
href="https://redirect.github.com/expressjs/body-parser/issues/692">#692</a>)</li>
<li>See full diff in <a
href="https://github.com/expressjs/body-parser/compare/1.20.4...1.20.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=body-parser&package-manager=npm_and_yarn&previous-version=1.20.4&new-version=1.20.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 11:15:54 -05:00
dependabot[bot] bf3769c64f build(deps): bump shell-quote from 1.8.4 to 1.10.0 in /docs (#8921) 
Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.4 to
1.10.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md">shell-quote's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0">v1.10.0</a>
- 2026-07-10</h2>
<h3>Merged</h3>
<ul>
<li>[New] <code>parse</code>: add opt-in <code>splitUnquoted</code>
option for shell field-splitting of unquoted expansions <a
href="https://redirect.github.com/ljharb/shell-quote/pull/1"><code>[#1](https://github.com/ljharb/shell-quote/issues/1)</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>[Fix] <code>parse</code>: match nested <code>${...}</code> braces so
nested parameter expansion is consumed as one substitution <a
href="https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c"><code>c0842c8</code></a></li>
<li>[Tests] <code>parse</code>: pin single-quote literalness and
unmatched-quote handling <a
href="https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62"><code>a0d03e3</code></a></li>
<li>[readme] remove the space in js code fences so evalmd evaluates them
<a
href="https://github.com/ljharb/shell-quote/commit/2116fa36aeea77fe8d561b0db46b1f9b26b8cf1b"><code>2116fa3</code></a></li>
<li>[Tests] <code>quote</code>: pin conservative escaping of
<code>=</code>, <code>@</code>, <code>^</code>, <code>,</code>,
<code>:</code>, <code>!</code> (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e"><code>1c36f3f</code></a></li>
<li>[readme] document that <code>quote</code> outputs POSIX quoting, not
<code>cmd.exe</code>/PowerShell <a
href="https://github.com/ljharb/shell-quote/commit/100e96e0ffadcca97d63dda15651c70b9f83507c"><code>100e96e</code></a></li>
<li>[readme] document <code>parse</code>'s supported parameter-expansion
subset <a
href="https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb"><code>e1c75cd</code></a></li>
<li>[Fix] <code>parse</code>: a backslash inside single quotes must not
escape the closing quote <a
href="https://github.com/ljharb/shell-quote/commit/5d460a332b54b83153297fe7d1964330b28fa491"><code>5d460a3</code></a></li>
<li>[readme] fix stale example outputs <a
href="https://github.com/ljharb/shell-quote/commit/2de86f5d44f44d3ac9df36413d8a05f3534cdec6"><code>2de86f5</code></a></li>
<li>[Tests] <code>quote</code>: pin that a backslash with whitespace is
not doubled in single quotes (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/14">#14</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71"><code>190e236</code></a></li>
<li>[readme] <code>quote</code>: use output verbatim; do not re-quote it
(<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5"><code>1b36468</code></a></li>
<li>[Refactor] <code>parse</code>: fix swapped
<code>SINGLE_QUOTE</code>/<code>DOUBLE_QUOTE</code> variable names <a
href="https://github.com/ljharb/shell-quote/commit/801af5c935b27d6dcda63b3975d5e92a7b6f887f"><code>801af5c</code></a></li>
<li>[types] fix an error TS v6 ignores but v7 fails on <a
href="https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba"><code>59bbf8b</code></a></li>
<li>[Dev Deps] update <code>@arethetypeswrong/cli</code>,
<code>evalmd</code> <a
href="https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc"><code>a04d475</code></a></li>
<li>[Dev Deps] update <code>@arethetypeswrong/ci</code>,
<code>eslint</code> <a
href="https://github.com/ljharb/shell-quote/commit/d390f9a92b97a04b1f799298634e90dc581021e6"><code>d390f9a</code></a></li>
<li>[Tests] <code>quote</code>: the tilde test escapes every
<code>~</code>, not just a leading one (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/9">#9</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c"><code>617d119</code></a></li>
</ul>
<h2><a
href="https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.9.0">v1.9.0</a>
- 2026-06-24</h2>
<h3>Commits</h3>
<ul>
<li>[New] add types <a
href="https://github.com/ljharb/shell-quote/commit/dca6e21a02df4cc1a83ed1b5baa4d82df134170a"><code>dca6e21</code></a></li>
<li>[Dev Deps] update <code>eslint</code> <a
href="https://github.com/ljharb/shell-quote/commit/9aa9e8f60991f8c4053a29e476795d891ff851ad"><code>9aa9e8f</code></a></li>
<li>[Fix] <code>parse</code>: finalize tokens in linear time
(GHSA-395f-4hp3-45gv) <a
href="https://github.com/ljharb/shell-quote/commit/7ff5488599d01c323514f02f5efb74088dd134ec"><code>7ff5488</code></a></li>
<li>[actions] update workflows <a
href="https://github.com/ljharb/shell-quote/commit/75e849741ffaf2d3aa53ae0e18ef6bf9929ef478"><code>75e8497</code></a></li>
<li>[actions] Windows + node 4/6/7: pin eslint to 9 before install,
since npm 2/3 cannot stage eslint 10<code>@types/esrecurse</code> <a
href="https://github.com/ljharb/shell-quote/commit/3fb739de44b81c69431947d54fbfc18998dd6d72"><code>3fb739d</code></a></li>
<li>[actions] retry <code>npm install</code> on Windows to survive npm
2/3 staging-rename flake <a
href="https://github.com/ljharb/shell-quote/commit/abe0163293c82963fa8a16cfaa87181846d5aced"><code>abe0163</code></a></li>
<li>[actions] Windows + node 5/7: install deps with a modern node <a
href="https://github.com/ljharb/shell-quote/commit/b4bafa2e7e58d53d9839b1c24976f61e54b43326"><code>b4bafa2</code></a></li>
<li>[Fix] <code>quote</code>: escape leading <code>~</code> to prevent
shell tilde-expansion <a
href="https://github.com/ljharb/shell-quote/commit/7a76c1a12d8461c2234a1c655b943cee84cbff91"><code>7a76c1a</code></a></li>
<li>[Dev Deps] update <code>auto-changelog</code>, <code>tape</code> <a
href="https://github.com/ljharb/shell-quote/commit/7184b4458b65c17b931e126d8cb5f586c6717dc8"><code>7184b44</code></a></li>
<li>[Dev Deps] apparently <code>jackspeak</code> is no longer in the
graph <a
href="https://github.com/ljharb/shell-quote/commit/9ba368a4057b9f498b0fef23b5b15543ef81b98c"><code>9ba368a</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ljharb/shell-quote/commit/64988d9a0e73a2ae710488952e3614958ef289d4"><code>64988d9</code></a>
v1.10.0</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c"><code>617d119</code></a>
[Tests] <code>quote</code>: the tilde test escapes every <code>~</code>,
not just a leading one (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/9">#9</a>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba"><code>59bbf8b</code></a>
[types] fix an error TS v6 ignores but v7 fails on</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71"><code>190e236</code></a>
[Tests] <code>quote</code>: pin that a backslash with whitespace is not
doubled in singl...</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc"><code>a04d475</code></a>
[Dev Deps] update <code>@arethetypeswrong/cli</code>,
<code>evalmd</code></li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/b9545b39f4de17aa169410823c98acf58387e474"><code>b9545b3</code></a>
[New] <code>parse</code>: add opt-in <code>splitUnquoted</code> option
for shell field-splitting of...</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5"><code>1b36468</code></a>
[readme] <code>quote</code>: use output verbatim; do not re-quote it (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e"><code>1c36f3f</code></a>
[Tests] <code>quote</code>: pin conservative escaping of <code>=</code>,
<code>@</code>, <code>^</code>, <code>,</code>, <code>:</code>,
<code>!</code> (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb"><code>e1c75cd</code></a>
[readme] document <code>parse</code>'s supported parameter-expansion
subset</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c"><code>c0842c8</code></a>
[Fix] <code>parse</code>: match nested <code>${...}</code> braces so
nested parameter expansion is ...</li>
<li>Additional commits viewable in <a
href="https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.10.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote&package-manager=npm_and_yarn&previous-version=1.8.4&new-version=1.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 11:13:08 -05:00
dependabot[bot] 8c750eb490 build(deps): bump js-yaml from 5.1.0 to 5.2.1 in /docs (#8914) 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.1.0 to 5.2.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md">js-yaml's
changelog</a>.</em></p>
<blockquote>
<h2>[5.2.1] - 2026-07-02</h2>
<h3>Fixed</h3>
<ul>
<li>Add <code>Map</code> support to !!omap (should work when
<code>realMapTag</code> used)</li>
</ul>
<h3>Security</h3>
<ul>
<li>Remove quadratic complexity from !!omap <code>addItem</code>.
Regression from v5
(usually not critical, because YAML11_SCHEMA is not default
anymore).</li>
</ul>
<h2>4.3.0, 3.15.0 - 2026-06-27</h2>
<h3>Security</h3>
<ul>
<li>Backported <code>maxTotalMergeKeys</code> option.</li>
</ul>
<h2>[5.2.0] - 2026-06-26</h2>
<h3>Added</h3>
<ul>
<li>Added <code>maxTotalMergeKeys</code> (10000) loader option to limit
the total number of
keys processed by YAML merge (<code>&lt;&lt;</code>) across one
<code>load()</code> / <code>loadAll()</code> call.</li>
<li>Added <code>maxAliases</code> (-1) loader option to limit the number
of YAML aliases per
document.</li>
</ul>
<h3>Removed</h3>
<ul>
<li><code>maxMergeSeqLength</code> replaced with
<code>maxTotalMergeKeys</code> for limiting YAML merge
processing.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Round-trip of integers with exponential form (&gt;=
<code>1e21</code>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodeca/js-yaml/commit/ac16b42c46c11c5c7f66062bfc78b168b5f07ecd"><code>ac16b42</code></a>
5.2.1 released</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/4a864e55eec5044da67ca95a13f48c73e9ae8c0d"><code>4a864e5</code></a>
Deps bump</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/39f3211a2f01b3c6982710cf21434ab7060acefe"><code>39f3211</code></a>
!!omap: add <code>Map</code> support and remove quadratic
complexity</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/ff17f1e5bbd1d0dcfb9567ff4526f7206a666f7b"><code>ff17f1e</code></a>
Changelog update</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/8ed15f1cf6a0f1818ea4c0cd5d3973e87af2158f"><code>8ed15f1</code></a>
deps bump</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/1a562dc14cac81354643e45936cde968b6da324c"><code>1a562dc</code></a>
Fix changelog link</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/c28ed5ec1aa66a37b8202e17d0caa122922a1b00"><code>c28ed5e</code></a>
5.2.0 released</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/125cd5ab9f1355d4edaf6d95bf3a7099dc333d35"><code>125cd5a</code></a>
Add <code>maxAliases</code> option</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/3105455b81dee69e0fd36e09ac0b2ccfdb54adc1"><code>3105455</code></a>
Replace <code>maxMergeSeqLength</code>option with
<code>maxTotalMergeKeys</code> (more robust)</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/39d00d65eb6b88362a5c806cea57541e687aaccb"><code>39d00d6</code></a>
numbers: Drop boxed numbers support, simplify .identify() checks,
clarify rou...</li>
<li>Additional commits viewable in <a
href="https://github.com/nodeca/js-yaml/compare/5.1.0...5.2.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=js-yaml&package-manager=npm_and_yarn&previous-version=5.1.0&new-version=5.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 10:14:52 -05:00
dependabot[bot] cf938e0ba8 build(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /docs (#8899) 
Bumps [websocket-driver](https://github.com/faye/websocket-driver-node)
from 0.7.4 to 0.7.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md">websocket-driver's
changelog</a>.</em></p>
<blockquote>
<h3>0.7.5 / 2026-06-04</h3>
<ul>
<li>Close a draft-75/76 connection if a length header grows to exceed
the
configured max length</li>
<li>Fail the connection if a message is larger than the configured max
length
after extension processing</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/5d6a9aaf5f019007d917bd9ddc7eeb775c86cc1f"><code>5d6a9aa</code></a>
Bump version to 0.7.5</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/c55679a5b18251dd0a55d18a0cc6a4fd8822b92f"><code>c55679a</code></a>
Fail the connection if a message is larger than the configured max
length aft...</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/5b197ca874dab58e96cacad8a3c256797d804680"><code>5b197ca</code></a>
Close a draft-75/76 connection if a length header grows to exceed the
configu...</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/fc93a48f879d0fd4a77c687a4a19c4328613df65"><code>fc93a48</code></a>
Test on Node v22, v24, and v26</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/2e82d3464d294bdd11202657208636e667212335"><code>2e82d34</code></a>
Test on recent versions of Node</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/e4962db9940ad1a8cf6fe8328d3b81c3f8c37479"><code>e4962db</code></a>
Switch from Travis CI to GitHub Actions</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/3f2f9b70a8ae999b4657d26316a5d45b7caea679"><code>3f2f9b7</code></a>
Travis update: cache npm modules, remove sudo, run on Node 15</li>
<li>See full diff in <a
href="https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=websocket-driver&package-manager=npm_and_yarn&previous-version=0.7.4&new-version=0.7.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 19:36:12 -05:00
dependabot[bot] e72114bbbf build(deps): bump the website group in /docs with 4 updates (#8839) 
Bumps the website group in /docs with 4 updates:
[eslint](https://github.com/eslint/eslint),
[js-yaml](https://github.com/nodeca/js-yaml),
[recharts](https://github.com/recharts/recharts) and
[baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping).

Updates `eslint` from 10.4.1 to 10.5.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.5.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/5ca8c5278edea1fd84d3ba83d8ea3f52fb3831ad"><code>5ca8c52</code></a>
feat: correct stack tracking in max-nested-callbacks (<a
href="https://redirect.github.com/eslint/eslint/issues/20973">#20973</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b5657837604fa5e8cf1278074782025cadd34b6c"><code>b565783</code></a>
feat: report no-with violations at the with keyword (<a
href="https://redirect.github.com/eslint/eslint/issues/20971">#20971</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/2ce032fbc72a1a80c024c084a4f382fb6dece684"><code>2ce032f</code></a>
feat: report max-lines-per-function violations at function head (<a
href="https://redirect.github.com/eslint/eslint/issues/20966">#20966</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/732cb3e09d5b8b809b5f461d118a5d9fdcd6427f"><code>732cb3e</code></a>
feat: report max-nested-callbacks violations at function head (<a
href="https://redirect.github.com/eslint/eslint/issues/20967">#20967</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f9c138a0ba7d8e37aed39aef4a3ff1cae8c669f7"><code>f9c138a</code></a>
feat: report max-depth violations on keywords (<a
href="https://redirect.github.com/eslint/eslint/issues/20943">#20943</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/bdb496cc0d54b6d0a023aef9abd5f040ccff2101"><code>bdb496c</code></a>
feat: correct max-depth handling for else-if chains (<a
href="https://redirect.github.com/eslint/eslint/issues/20944">#20944</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c29687354a7f96093f57f7d73eecb866ad5e2953"><code>c296873</code></a>
feat: update error loc in <code>max-statements</code> to function header
(<a
href="https://redirect.github.com/eslint/eslint/issues/20907">#20907</a>)
(Taejin Kim)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/8ae1b5b856dc031cd6c701d89a4df7da4772cd56"><code>8ae1b5b</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/ca7eb90127dcad917188bb1342623f02a272e781"><code>ca7eb90</code></a>
docs: update Node.js prerequisites to include ICU support (<a
href="https://redirect.github.com/eslint/eslint/issues/20962">#20962</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f99b47a6799be25321552402a49303bb06a43fe4"><code>f99b47a</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/acf03d4eed31d259c7dc62af5b9640629784f7cc"><code>acf03d4</code></a>
docs: clarify precedence of parserOptions over languageOptions (<a
href="https://redirect.github.com/eslint/eslint/issues/20926">#20926</a>)
(sethamus)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/b18bf58c5ac748415ffffdff2d96980fbd6a57e8"><code>b18bf58</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20959">#20959</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c2d1444df77cb42e5a0b89ab70496879d180a54d"><code>c2d1444</code></a>
refactor: replace areAllSegmentsUnreachable with !isAnySegmentReachable
(<a
href="https://redirect.github.com/eslint/eslint/issues/20951">#20951</a>)
(Taejin Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/243b8c56014bbbe63771185b0731d8dd4d1316e9"><code>243b8c5</code></a>
chore: enhance config-rule to support oneOf, anyOf, and nested schemas
(<a
href="https://redirect.github.com/eslint/eslint/issues/20788">#20788</a>)
(kuldeep kumar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/217b2a91f46137c5ffd693965e71306c4c15ea6b"><code>217b2a9</code></a>
test: add unit tests for ParserService (<a
href="https://redirect.github.com/eslint/eslint/issues/20949">#20949</a>)
(Taejin Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/72003e781d76bd4ee0d98a6601730d0b829070f9"><code>72003e7</code></a>
test: add location information to error messages in
<code>max-statements</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20945">#20945</a>)
(lumir)</li>
<li><a
href="https://github.com/eslint/eslint/commit/7797c266977b0bc4971aa79721813d480de72cd1"><code>7797c26</code></a>
refactor: deduplicate isAnySegmentReachable across rules (<a
href="https://redirect.github.com/eslint/eslint/issues/20890">#20890</a>)
(Taejin Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/67c46fa6e4f34e88cc6bc82f8a0dcc917c65d257"><code>67c46fa</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20938">#20938</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/95d8c7a99f991abd8ab618d0ee2cbd4f58effc29"><code>95d8c7a</code></a>
chore: update dependency <code>@​eslint/json</code> to v2 (<a
href="https://redirect.github.com/eslint/eslint/issues/20934">#20934</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/cf9e496205142cd4971b9f98aed85866d1010b9c"><code>cf9e496</code></a>
chore: update <code>@​arethetypeswrong/cli</code> to 0.18.3 (<a
href="https://redirect.github.com/eslint/eslint/issues/20933">#20933</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/fb6d3960cacc51fc12383fa5ded2382adbf90c1c"><code>fb6d396</code></a>
test: run type tests with TypeScript 7 (<a
href="https://redirect.github.com/eslint/eslint/issues/20868">#20868</a>)
(sethamus)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/de3b672a267e32607db04176ce4775664acb3145"><code>de3b672</code></a>
10.5.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/362a5185134290db696d39f97c9da609ded54040"><code>362a518</code></a>
Build: changelog update for 10.5.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/5ca8c5278edea1fd84d3ba83d8ea3f52fb3831ad"><code>5ca8c52</code></a>
feat: correct stack tracking in max-nested-callbacks (<a
href="https://redirect.github.com/eslint/eslint/issues/20973">#20973</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b5657837604fa5e8cf1278074782025cadd34b6c"><code>b565783</code></a>
feat: report no-with violations at the with keyword (<a
href="https://redirect.github.com/eslint/eslint/issues/20971">#20971</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/2ce032fbc72a1a80c024c084a4f382fb6dece684"><code>2ce032f</code></a>
feat: report max-lines-per-function violations at function head (<a
href="https://redirect.github.com/eslint/eslint/issues/20966">#20966</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/732cb3e09d5b8b809b5f461d118a5d9fdcd6427f"><code>732cb3e</code></a>
feat: report max-nested-callbacks violations at function head (<a
href="https://redirect.github.com/eslint/eslint/issues/20967">#20967</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f9c138a0ba7d8e37aed39aef4a3ff1cae8c669f7"><code>f9c138a</code></a>
feat: report max-depth violations on keywords (<a
href="https://redirect.github.com/eslint/eslint/issues/20943">#20943</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8ae1b5b856dc031cd6c701d89a4df7da4772cd56"><code>8ae1b5b</code></a>
docs: Update README</li>
<li><a
href="https://github.com/eslint/eslint/commit/ca7eb90127dcad917188bb1342623f02a272e781"><code>ca7eb90</code></a>
docs: update Node.js prerequisites to include ICU support (<a
href="https://redirect.github.com/eslint/eslint/issues/20962">#20962</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b18bf58c5ac748415ffffdff2d96980fbd6a57e8"><code>b18bf58</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20959">#20959</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.4.1...v10.5.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `js-yaml` from 4.2.0 to 5.1.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md">js-yaml's
changelog</a>.</em></p>
<blockquote>
<h2>[5.1.0] - 2026-06-23</h2>
<h3>Added</h3>
<ul>
<li>Collection tags can finalize an incrementally populated carrier into
a
different result value.</li>
</ul>
<h3>Changed</h3>
<ul>
<li>[breaking] <code>quoteStyle</code> now selects the preferred quote
style; use the
restored <code>forceQuotes</code> option to force quoting non-key
strings.</li>
</ul>
<h2>[5.0.0] - 2026-06-20</h2>
<h3>Added</h3>
<ul>
<li>Added named exports for schemas, tags, parser events and AST
utilities.</li>
<li>Reworked <code>JSON_SCHEMA</code> and <code>CORE_SCHEMA</code> with
spec-compliant scalar resolution
rules, and added <code>YAML11_SCHEMA</code>.</li>
<li>Added <code>realMapTag</code> for lossless mappings with non-string
and complex keys.
Object-based mappings now reject complex keys instead of stringifying
them.</li>
<li>Added <code>dump()</code> <code>transform</code> option for changing
the generated AST before
rendering.</li>
<li>Added <code>dump()</code> options <code>seqInlineFirst</code>,
<code>flowBracketPadding</code>,
<code>flowSkipCommaSpace</code>, <code>flowSkipColonSpace</code>,
<code>quoteFlowKeys</code>, <code>quoteStyle</code> and
<code>tagBeforeAnchor</code>.</li>
<li>Added formal data layers (events and AST) for modular data
pipelines.
<ul>
<li>Added low-level parser (to events), presenter and visitor APIs.</li>
</ul>
</li>
<li>Added the <a href="https://github.com/yaml/yaml-test-suite">YAML
Test Suite</a> to the
test set.</li>
</ul>
<h3>Changed</h3>
<ul>
<li>See the <a
href="https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md">migration
guide</a> for upgrade notes.</li>
<li>Rewritten in TypeScript and reorganized the public API around flat
named
exports.</li>
<li>Reduced the set of exported schemas:
<ul>
<li>YAML 1.2 schemas: <code>CORE_SCHEMA</code> (loader default),
<code>JSON_SCHEMA</code>,
<code>FAILSAFE_SCHEMA</code>.</li>
<li><code>YAML11_SCHEMA</code>, a combination of all YAML 1.1 tags (YAML
1.1 does not
specify a schema, only &quot;types&quot;).</li>
</ul>
</li>
<li><code>load</code>/<code>dump</code> default behaviour is now
specified exactly via schemas:
<ul>
<li><code>load</code> uses <code>CORE_SCHEMA</code>, without
<code>!!merge</code> by default.</li>
<li><code>dump</code> uses <code>YAML11_SCHEMA</code> +
<code>CORE_SCHEMA</code> for the quoting check, to
guarantee backward compatibility by default.</li>
</ul>
</li>
<li><code>!!set</code> is now loaded as a JavaScript
<code>Set</code>.</li>
<li>Replaced the <code>Type</code> API with a tags API. Similar, but
more precise and
simpler. See examples for details. Tags can be defined via
<code>defineScalarTag()</code>, <code>defineSequenceTag()</code> and
<code>defineMappingTag()</code>, or as a
spread + override of an existing tag.</li>
<li>Renamed <code>Schema.extend()</code> to
<code>Schema.withTags()</code>.</li>
<li>Expanded YAML 1.2 conformance and improved handling of directives,
document
markers, block keys, multiline scalars, tag syntax and other
things.</li>
<li><code>load()</code> now throws on empty input instead of returning
<code>undefined</code>.</li>
<li>Moved browser builds to the <code>js-yaml/browser</code>
export.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodeca/js-yaml/commit/f1e45cd201de162cc388a5175717eddf0743d367"><code>f1e45cd</code></a>
5.1.0 released</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/53b22be4fe05ea668b2420b142b424d360f6e2cf"><code>53b22be</code></a>
Fix constructor coverage</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/a1eaa2bce1ce5738d46a918b1f3a228b9fa0bdbd"><code>a1eaa2b</code></a>
Fix quote style options and restore forceQuotes</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/0532e7d23fff763f07ce166bef0f3b0906f26597"><code>0532e7d</code></a>
Add finalizers for immutable collection tags</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/9f00b91cdc293f3dfcd017d29dbc413ee98a5c70"><code>9f00b91</code></a>
tests: drop the rest of issues tests, move a small fraction of useful
checks ...</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/6be5d46c88f4caed3103e83075c2eb4aab8770fd"><code>6be5d46</code></a>
tests: drop not actual or duplicating issue tests (covered in other
places)</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/a7c9766f0d79e6506e119dbe91b43deb2d5f8879"><code>a7c9766</code></a>
Fix !!pairs coverage</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/75148bc4f5eb69b3d338e1c355d8bb2dba5bdf34"><code>75148bc</code></a>
5.0.0 released</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/704b25d29229c52e66b824bfc1908d8f3ba3a45e"><code>704b25d</code></a>
Quote document markers followed by whitespace</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/42dea284430b1077f95a326f14db422b19bedecc"><code>42dea28</code></a>
Support complex !!pairs keys with realMapTag</li>
<li>Additional commits viewable in <a
href="https://github.com/nodeca/js-yaml/compare/4.2.0...5.1.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `recharts` from 3.8.1 to 3.9.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/recharts/recharts/releases">recharts's
releases</a>.</em></p>
<blockquote>
<h2>v3.9.0</h2>
<h2>What's Changed</h2>
<h3>Animations</h3>
<p>3.9 comes with new animations! There are several bug fixes and what's
best, all animations are now fully customizable.</p>
<p>See the animations guide on <a
href="https://recharts.github.io/en-US/guide/animations/">https://recharts.github.io/en-US/guide/animations/</a></p>
<ul>
<li>Animation guide by <a
href="https://github.com/PavelVanecek"><code>@​PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7179">recharts/recharts#7179</a></li>
<li>Animation tests by <a
href="https://github.com/PavelVanecek"><code>@​PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7255">recharts/recharts#7255</a></li>
<li>New animation props by <a
href="https://github.com/PavelVanecek"><code>@​PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7215">recharts/recharts#7215</a></li>
<li>test: cover legacy animation length changes by <a
href="https://github.com/PavelVanecek"><code>@​PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7283">recharts/recharts#7283</a></li>
<li>test: add sparse animation path tests for Line component by <a
href="https://github.com/PavelVanecek"><code>@​PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7295">recharts/recharts#7295</a></li>
<li>Export and document interpolate function by <a
href="https://github.com/PavelVanecek"><code>@​PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7293">recharts/recharts#7293</a></li>
<li>test: enhance line animation tests for ComposedChart and responsive
by <a
href="https://github.com/PavelVanecek"><code>@​PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7289">recharts/recharts#7289</a></li>
<li>Manual animations on website by <a
href="https://github.com/PavelVanecek"><code>@​PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7483">recharts/recharts#7483</a></li>
<li>Add new example where chart animates by scroll by <a
href="https://github.com/PavelVanecek"><code>@​PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7484">recharts/recharts#7484</a></li>
<li>fix: preserve single-value line dash gaps during animation by <a
href="https://github.com/puneetdixit200"><code>@​puneetdixit200</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7405">recharts/recharts#7405</a></li>
<li>Add animate-by-scroll example and update docs by <a
href="https://github.com/PavelVanecek"><code>@​PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7487">recharts/recharts#7487</a></li>
<li>Add custom fillOpacity on hover website example by <a
href="https://github.com/PavelVanecek"><code>@​PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7489">recharts/recharts#7489</a></li>
<li>honorable mention to <a
href="https://github.com/robjampar"><code>@​robjampar</code></a> for PR
<a
href="https://redirect.github.com/recharts/recharts/pull/6973">recharts/recharts#6973</a>
which ended up declined but it introduced the starting idea for the new
animation props</li>
</ul>
<h3>New features other than animations</h3>
<ul>
<li>Expose and document chart layout hooks and layout types in public
API by <a href="https://github.com/Copilot"><code>@​Copilot</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7265">recharts/recharts#7265</a></li>
<li>feat: allow HTML attributes passthrough on ResponsiveContainer by <a
href="https://github.com/techcodie"><code>@​techcodie</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7168">recharts/recharts#7168</a></li>
<li>feat: add nodeInset and nodeGap properties to Treemap for better la…
by <a href="https://github.com/MaximSrour"><code>@​MaximSrour</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7044">recharts/recharts#7044</a></li>
<li>feat(PieChart): add dataKey to Legend payload by <a
href="https://github.com/Harikrushn9118"><code>@​Harikrushn9118</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7137">recharts/recharts#7137</a></li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li>fix: preserve valid falsy custom names (0, &quot;&quot;) in tooltips
by <a href="https://github.com/vamsi2246"><code>@​vamsi2246</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7175">recharts/recharts#7175</a></li>
<li>fix(ResponsiveContainer): Fix erroneous console warning on init by
<a href="https://github.com/andypoorman"><code>@​andypoorman</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7174">recharts/recharts#7174</a></li>
<li>fix(DataUtils): improve isPercent validation to exclude invalid
formats by <a
href="https://github.com/vamsi2246"><code>@​vamsi2246</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7178">recharts/recharts#7178</a></li>
<li>fix(BarChart): render stacked bars when all values are 0 (<a
href="https://redirect.github.com/recharts/recharts/issues/6235">#6235</a>)
by <a
href="https://github.com/andypoorman"><code>@​andypoorman</code></a> in
<a
href="https://redirect.github.com/recharts/recharts/pull/7199">recharts/recharts#7199</a></li>
<li>fix(Sankey): prevent NaN node positions when link values sum to zero
by <a href="https://github.com/Mridul012"><code>@​Mridul012</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7185">recharts/recharts#7185</a></li>
<li>fix(Funnel): prevent NaN coordinate layout crash when all values are
zero by <a
href="https://github.com/Mridul012"><code>@​Mridul012</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7184">recharts/recharts#7184</a></li>
<li>fixes an issue where XAxis and YAxis padding were ignored by the
clipping mask when allowDataOverflow={true} was used alongside a
restricted domain by <a
href="https://github.com/emiedonmokumo"><code>@​emiedonmokumo</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7232">recharts/recharts#7232</a></li>
<li>fix: use originalDataIndex for tooltip dispatch in Bar by <a
href="https://github.com/mayrang"><code>@​mayrang</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7273">recharts/recharts#7273</a></li>
<li>fix: resolve TypeScript 6 deprecation errors in tsconfig files by <a
href="https://github.com/shreedharbhat98"><code>@​shreedharbhat98</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7285">recharts/recharts#7285</a></li>
<li>fix(bar): use Math.round instead of bitwise truncation for bar
positioning by <a
href="https://github.com/EduardF1"><code>@​EduardF1</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7297">recharts/recharts#7297</a></li>
<li>fix(types): propagate Tooltip types in chart helper contexts by <a
href="https://github.com/mixelburg"><code>@​mixelburg</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7125">recharts/recharts#7125</a></li>
<li>fix(Legend): prevent overlap with chart on container resize by <a
href="https://github.com/maroKanatani"><code>@​maroKanatani</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7201">recharts/recharts#7201</a></li>
<li>test(YAxis): failing repro for <a
href="https://redirect.github.com/recharts/recharts/issues/7362">#7362</a>
— function domain doesn't render ticks on empty/all-null data by <a
href="https://github.com/nlenepveu"><code>@​nlenepveu</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7384">recharts/recharts#7384</a></li>
</ul>
<h3>Tree-shaking</h3>
<p>We now have focused tree-shaking tests that allow us to observe
exactly which components end up in the final bundle and why. I have also
removed some unnecessary loops and you should see the final bundle size
decrease somewhat as a result.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/recharts/recharts/commit/8c1cce725956a036949471eba392ac0cc20189a8"><code>8c1cce7</code></a>
v3.9.0 (<a
href="https://redirect.github.com/recharts/recharts/issues/7490">#7490</a>)</li>
<li><a
href="https://github.com/recharts/recharts/commit/e5fe9bb2fba18dc96c64b10fd4a7c4a4bdc86d1f"><code>e5fe9bb</code></a>
Add custom fillOpacity on hover website example (<a
href="https://redirect.github.com/recharts/recharts/issues/7489">#7489</a>)</li>
<li><a
href="https://github.com/recharts/recharts/commit/ad1590f256d6e7484890326282935576824cdce6"><code>ad1590f</code></a>
Add test for Pie and Legend animation (<a
href="https://redirect.github.com/recharts/recharts/issues/7488">#7488</a>)</li>
<li><a
href="https://github.com/recharts/recharts/commit/337edbd371ace0551068cbd9591b9ef18fee0ae3"><code>337edbd</code></a>
Add animate-by-scroll example and update docs (<a
href="https://redirect.github.com/recharts/recharts/issues/7487">#7487</a>)</li>
<li><a
href="https://github.com/recharts/recharts/commit/0063aa486281e28ebbceeeda0102ba9c1dc1b6ff"><code>0063aa4</code></a>
fix: preserve single-value line dash gaps during animation (<a
href="https://redirect.github.com/recharts/recharts/issues/7405">#7405</a>)</li>
<li><a
href="https://github.com/recharts/recharts/commit/6dbe130b8908cc09f6096d0b78d117b93b8335f4"><code>6dbe130</code></a>
Add new example where chart animates by scroll (<a
href="https://redirect.github.com/recharts/recharts/issues/7484">#7484</a>)</li>
<li><a
href="https://github.com/recharts/recharts/commit/a2c4171608f2608e9025204c6c3fdb3b459c5c87"><code>a2c4171</code></a>
Manual animations on website (<a
href="https://redirect.github.com/recharts/recharts/issues/7483">#7483</a>)</li>
<li><a
href="https://github.com/recharts/recharts/commit/c88f5f36f38be0c3d0cab6dad5e7f8f167b7f1bb"><code>c88f5f3</code></a>
Simplify and export some of the new animation props (<a
href="https://redirect.github.com/recharts/recharts/issues/7481">#7481</a>)</li>
<li><a
href="https://github.com/recharts/recharts/commit/410cf5cf063f521ad9b84ed21143c39cc113d8cb"><code>410cf5c</code></a>
Renaming some of the animation props (<a
href="https://redirect.github.com/recharts/recharts/issues/7477">#7477</a>)</li>
<li><a
href="https://github.com/recharts/recharts/commit/a1b89c6c798c3e6294a166f2a199baf3f991f128"><code>a1b89c6</code></a>
chore(deps-dev): bump undici from 6.26.0 to 6.27.0 (<a
href="https://redirect.github.com/recharts/recharts/issues/7475">#7475</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/recharts/recharts/compare/v3.8.1...v3.9.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `baseline-browser-mapping` from 2.10.33 to 2.10.38
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/web-platform-dx/baseline-browser-mapping/releases">baseline-browser-mapping's
releases</a>.</em></p>
<blockquote>
<h2>v2.9.3 - remove <code>process.loadEnvFile()</code></h2>
<h2>What's Changed</h2>
<ul>
<li>Remove process.loadEnfFile() from main script by <a
href="https://github.com/tonypconway"><code>@​tonypconway</code></a> in
<a
href="https://redirect.github.com/web-platform-dx/baseline-browser-mapping/pull/112">web-platform-dx/baseline-browser-mapping#112</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.2...v2.9.3">https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.2...v2.9.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/37f3dae1c0142f522858bc0f40084af1879fd46c"><code>37f3dae</code></a>
Patch to 2.10.38 because browser or feature data changed</li>
<li><a
href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/c5c28415598c49f679b1a77794a286ed9e00c315"><code>c5c2841</code></a>
Browser or feature data changed</li>
<li><a
href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/14903f7eeaacd05bd2353f411d55aa8a72370a62"><code>14903f7</code></a>
Updating static site</li>
<li><a
href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/2cfe7fc23acc6fe68d99f55d1dfa58370938ec0a"><code>2cfe7fc</code></a>
Patch to 2.10.37 because browser or feature data changed</li>
<li><a
href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/48e5a7c4a4013a11b08c73cac230c11b2b557130"><code>48e5a7c</code></a>
Browser or feature data changed</li>
<li><a
href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/ba5507374281bf5d9b3697b392b5a2173bcc5c8b"><code>ba55073</code></a>
Updating static site</li>
<li><a
href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/df118b243455c9c65b2a212eeb5efff1a9a5d18e"><code>df118b2</code></a>
Patch to 2.10.36 because browser or feature data changed</li>
<li><a
href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/c2663f17c73951bb3f586eb38f787018308ba446"><code>c2663f1</code></a>
Browser or feature data changed</li>
<li><a
href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/221a2665ab34e99061ebae5c8232016a49c34677"><code>221a266</code></a>
Updating static site</li>
<li><a
href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/d358b780b9446896a4bc0b2032cd35fbf73239c8"><code>d358b78</code></a>
Patch to 2.10.35 because browser or feature data changed</li>
<li>Additional commits viewable in <a
href="https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.33...v2.10.38">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-06 13:22:19 -05:00
dependabot[bot] 1783ac26de build(deps): bump linkify-it from 5.0.0 to 5.0.1 in /docs 
Bumps [linkify-it](https://github.com/markdown-it/linkify-it) from 5.0.0 to 5.0.1.
- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md)
- [Commits](https://github.com/markdown-it/linkify-it/compare/5.0.0...5.0.1)

---
updated-dependencies:
- dependency-name: linkify-it
  dependency-version: 5.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-01 08:30:03 +02:00
dependabot[bot] 57742e84a9 build(deps): bump webpack-dev-server from 5.2.4 to 5.2.5 in /docs (#8807) 
Bumps
[webpack-dev-server](https://github.com/webpack/webpack-dev-server) from
5.2.4 to 5.2.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/releases">webpack-dev-server's
releases</a>.</em></p>
<blockquote>
<h2>v5.2.5</h2>
<h3>Patch Changes</h3>
<ul>
<li>Skip the HMR WebSocket path when forwarding upgrade requests to
user-defined proxies, so custom proxy WebSocket upgrades are no longer
intercepted by the dev server. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5680">#5680</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md">webpack-dev-server's
changelog</a>.</em></p>
<blockquote>
<h2>5.2.5</h2>
<h3>Patch Changes</h3>
<ul>
<li>Skip the HMR WebSocket path when forwarding upgrade requests to
user-defined proxies, so custom proxy WebSocket upgrades are no longer
intercepted by the dev server. (by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/webpack/webpack-dev-server/pull/5680">#5680</a>)</li>
</ul>
<p>All notable changes to this project will be documented in this file.
See <a
href="https://github.com/conventional-changelog/standard-version">standard-version</a>
for commit guidelines.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/c3ee325819f64ceb77f85dcf727b6b5ede85cbc4"><code>c3ee325</code></a>
chore(release): new release (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5682">#5682</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/60173be90873b187b41fc2009a4de253732988a1"><code>60173be</code></a>
feat: add changeset validation and release workflow (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5680">#5680</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/948d5e6089bebcd801dac2cbe3ed4f80b64f117a"><code>948d5e6</code></a>
fix(proxy): match the HMR upgrade path exactly like the ws server (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5678">#5678</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/93e8996124332a6c94c4d3e0f8e5f2cf95321c67"><code>93e8996</code></a>
fix: skip HMR websocket path when forwarding upgrades to user-defined
proxies...</li>
<li>See full diff in <a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.4...v5.2.5">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for webpack-dev-server since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack-dev-server&package-manager=npm_and_yarn&previous-version=5.2.4&new-version=5.2.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-22 10:08:13 -05:00
dependabot[bot] 1a68282b0c build(deps): bump dompurify from 3.4.10 to 3.4.11 in /docs (#8803) 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.10 to
3.4.11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cure53/DOMPurify/releases">dompurify's
releases</a>.</em></p>
<blockquote>
<h2>DOMPurify 3.4.11</h2>
<ul>
<li>Fixed an issue with a leaky config for hooks via
<code>setConfig</code>, thanks <a
href="https://github.com/trace37labs"><code>@​trace37labs</code></a></li>
<li>Bumped vulnerable development dependencies to arrive at plain 0 with
<code>npm audit</code></li>
<li>Updated the <code>osv-scanner</code> suppression list as no
vulnerable dependencies are left for now</li>
<li>Updated up the linting tool-chain and removed now-redundant lint
directives</li>
<li>Updated the documentation is several spots, README, wiki, etc.</li>
<li>Bumped several dependencies where possible</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cure53/DOMPurify/commit/0cae5187403132f96a6d357649e4b15633fc210a"><code>0cae518</code></a>
release: 3.4.11 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1494">#1494</a>)</li>
<li>See full diff in <a
href="https://github.com/cure53/DOMPurify/compare/3.4.10...3.4.11">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dompurify&package-manager=npm_and_yarn&previous-version=3.4.10&new-version=3.4.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-22 09:55:25 -05:00
dependabot[bot] 369db1718b build(deps): bump dompurify from 3.4.0 to 3.4.10 in /docs (#8789) 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.0 to
3.4.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cure53/DOMPurify/releases">dompurify's
releases</a>.</em></p>
<blockquote>
<h2>DOMPurify 3.4.10</h2>
<ul>
<li>Refactored codebase for clarity: extracted the public type
declarations into <code>types.ts</code></li>
<li>Decomposed the three largest sanitizer functions into focused
helpers</li>
<li>Removed duplicated defaults and dead branches, consolidated
<code>SAFE_FOR_TEMPLATES</code> scrubbing into single shared path</li>
<li>Improved per-node performance by hoisting the mXSS probe regexes and
testing <code>textContent</code> before <code>innerHTML</code></li>
<li>Added a deterministic micro-benchmark harness (<code>npm run
bench</code>) with a <code>--compare</code> mode</li>
<li>Reduced CI cost by running the full three-engine browser suite once
per PR</li>
<li>Refreshed the <code>demos/</code> folder so every demo runs again,
and added a SVG-via-<code>&lt;img&gt;</code> demo</li>
<li>Documented the bench and <code>test:happydom</code> scripts in the
README</li>
<li>Completed the Attack Classes &amp; Bypass History wiki page</li>
<li>Bumped several dependencies where possible</li>
</ul>
<h2>DOMPurify 3.4.9</h2>
<ul>
<li>Further improved the handling of Trusted Types config options,
thanks <a
href="https://github.com/offset"><code>@​offset</code></a></li>
<li>Further improved the handling of <code>IN_PLACE</code> sanitization,
thanks <a
href="https://github.com/mozfreddyb"><code>@​mozfreddyb</code></a></li>
<li>Added more test coverage for <code>IN_PLACE</code> and Trusted Types
related usage</li>
<li>Bumped several dependencies where possible</li>
<li>Updated README and wiki with more accurate documentation &amp;
attack samples</li>
</ul>
<h2>DOMPurify 3.4.8</h2>
<ul>
<li>Cleaned up the repository root, renamed some and removed unneeded
files</li>
<li>Fixed an issue with handling of Trusted Types policies, thanks <a
href="https://github.com/fulstadev"><code>@​fulstadev</code></a></li>
<li>Fixed the node iterator for better template scrubbing, thanks <a
href="https://github.com/IamLeandrooooo"><code>@​IamLeandrooooo</code></a></li>
<li>Included formerly missing LICENSE-MPL in published npm package,
thanks <a
href="https://github.com/asamuzaK"><code>@​asamuzaK</code></a></li>
<li>Bumped several dependencies where possible</li>
</ul>
<h2>DOMPurify 3.4.7</h2>
<ul>
<li>Hardened the handling of Shadow Roots when using
<code>IN_PLACE</code>, thanks <a
href="https://github.com/GameZoneHacker"><code>@​GameZoneHacker</code></a></li>
<li>Removed a problem leading to permanent hook pollution, thanks <a
href="https://github.com/offset"><code>@​offset</code></a></li>
<li>Refactored the test suite and expanded test coverage
significantly</li>
</ul>
<h2>DOMPurify 3.4.6</h2>
<ul>
<li>Fixed several issues with DOM Clobbering in <code>IN_PLACE</code>
mode, thanks <a
href="https://github.com/offset"><code>@​offset</code></a> &amp; <a
href="https://github.com/Bankde"><code>@​Bankde</code></a></li>
<li>Hardened the checks for cross-realm <code>IN_PLACE</code> and Shadow
DOM sanitization, thanks <a
href="https://github.com/offset"><code>@​offset</code></a> &amp; <a
href="https://github.com/Bankde"><code>@​Bankde</code></a></li>
<li>Added more test coverage for <code>IN_PLACE</code> and general DOM
Clobbering attacks</li>
<li>Bumped several dependencies where possible</li>
</ul>
<h2>DOMPurify 3.4.5</h2>
<ul>
<li>Fixed a bypass caused by the new HTML element
<code>selectedcontent</code> added in 3.4.4, thanks <a
href="https://github.com/KabirAcharya"><code>@​KabirAcharya</code></a></li>
</ul>
<p><strong>Note that this is a security release for an issue introduced
in 3.4.4 and should be upgraded to immediately.</strong></p>
<h2>DOMPurify 3.4.4</h2>
<ul>
<li>Added the <code>selectedcontent</code> element to default
allow-list, thanks <a
href="https://github.com/lukewarlow"><code>@​lukewarlow</code></a></li>
<li>Added the <code>command</code> and <code>commandfor</code>
attributes to default allowed-list, thanks <a
href="https://github.com/lukewarlow"><code>@​lukewarlow</code></a></li>
<li>Added better template scrubbing for <code>IN_PLACE</code>
operations, thanks <a
href="https://github.com/DEMON1A"><code>@​DEMON1A</code></a></li>
<li>Added stronger checks for cross-realm windows, thanks <a
href="https://github.com/DEMON1A"><code>@​DEMON1A</code></a> &amp; <a
href="https://github.com/fg0x0"><code>@​fg0x0</code></a></li>
<li>Updated demo website and made sure it uses the latest from main</li>
<li>Updated existing workflows, fuzzer, dependabot, etc., added more
tests</li>
<li>Bumped several dependencies where possible</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cure53/DOMPurify/commit/6ee5716f8336989753611beeca364957c0eb0c3e"><code>6ee5716</code></a>
release: 3.4.10 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1478">#1478</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/52102472d46035857c52df19e44285f8a1e102fc"><code>5210247</code></a>
release: 3.4.9 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1459">#1459</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/bcdd8285412dc9c4c149652aed2d712e790d6ccf"><code>bcdd828</code></a>
release: 3.4.8 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1439">#1439</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff"><code>ca30f07</code></a>
release: 3.4.7 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1414">#1414</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/bb7739e5bccec7e1ab3dae3f3e42d02db3acaaae"><code>bb7739e</code></a>
release: 3.4.6 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1394">#1394</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/011b0c78f2a0f57ee54f5fcccb697a46ca6e63ea"><code>011b0c7</code></a>
release: 3.4.5 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1382">#1382</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/5817ad969c15e67dfcd6cb37248d6e9c1553e7c3"><code>5817ad9</code></a>
release: 3.4.4 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1374">#1374</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/520edb0371a9638f9b51f1798051299a250c686b"><code>520edb0</code></a>
release: 3.4.3 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1352">#1352</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/6f67fd396a7b8c64294343999fe607ca1f5299c0"><code>6f67fd3</code></a>
Sync/3.4.2 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1322">#1322</a>)</li>
<li><a
href="https://github.com/cure53/DOMPurify/commit/5b0cdbbf52331e854c0a2de875b1a3790ecec2b8"><code>5b0cdbb</code></a>
chore: merge main into 3.x for 3.4.1 release (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1301">#1301</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cure53/DOMPurify/compare/3.4.0...3.4.10">compare
view</a></li>
</ul>
</details>
<details>
<summary>Install script changes</summary>
<p>This version adds <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dompurify&package-manager=npm_and_yarn&previous-version=3.4.0&new-version=3.4.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-16 16:33:31 -05:00
dependabot[bot] ed23e2b0b2 build(deps): bump ws in /docs (#8788) 
Bumps and [ws](https://github.com/websockets/ws). These dependencies
needed to be updated together.
Updates `ws` from 7.5.10 to 7.5.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/websockets/ws/releases">ws's
releases</a>.</em></p>
<blockquote>
<h2>7.5.11</h2>
<h1>Bug fixes</h1>
<ul>
<li>Backported 2b2abd45 to the 7.x release line (e14c4586).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"><code>fd36cd8</code></a>
[dist] 7.5.11</li>
<li><a
href="https://github.com/websockets/ws/commit/e14c45861deca0cef60dec0f9109b694abebdf52"><code>e14c458</code></a>
[security] Limit retained message parts</li>
<li>See full diff in <a
href="https://github.com/websockets/ws/compare/7.5.10...7.5.11">compare
view</a></li>
</ul>
</details>
<br />

Updates `ws` from 8.18.3 to 8.21.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/websockets/ws/releases">ws's
releases</a>.</em></p>
<blockquote>
<h2>7.5.11</h2>
<h1>Bug fixes</h1>
<ul>
<li>Backported 2b2abd45 to the 7.x release line (e14c4586).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"><code>fd36cd8</code></a>
[dist] 7.5.11</li>
<li><a
href="https://github.com/websockets/ws/commit/e14c45861deca0cef60dec0f9109b694abebdf52"><code>e14c458</code></a>
[security] Limit retained message parts</li>
<li>See full diff in <a
href="https://github.com/websockets/ws/compare/7.5.10...7.5.11">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-16 16:13:21 -05:00
dependabot[bot] 186d4868cf build(deps): bump launch-editor from 2.11.1 to 2.14.1 in /docs (#8790) 
Bumps [launch-editor](https://github.com/vitejs/launch-editor) from
2.11.1 to 2.14.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/launch-editor/commit/3f97c648307a70e7c930ba63f040e6ba8e72bc16"><code>3f97c64</code></a>
v2.14.1</li>
<li><a
href="https://github.com/vitejs/launch-editor/commit/0cc9550e05c35224a1f61914b9731723f78c06a7"><code>0cc9550</code></a>
fix: reject UNC paths (<a
href="https://redirect.github.com/vitejs/launch-editor/issues/138">#138</a>)</li>
<li><a
href="https://github.com/vitejs/launch-editor/commit/afd1ab907769adbb0fb76b564551f3cd24822ea6"><code>afd1ab9</code></a>
ci: run tests on mac and windows (<a
href="https://redirect.github.com/vitejs/launch-editor/issues/136">#136</a>)</li>
<li><a
href="https://github.com/vitejs/launch-editor/commit/0bfa328e4d2a70d3accd86645efde43a5a8fd931"><code>0bfa328</code></a>
test: add some tests for launch-editor package (<a
href="https://redirect.github.com/vitejs/launch-editor/issues/135">#135</a>)</li>
<li><a
href="https://github.com/vitejs/launch-editor/commit/1b006ae00061e83628c884770df4869bac481ed3"><code>1b006ae</code></a>
chore: add README (<a
href="https://redirect.github.com/vitejs/launch-editor/issues/134">#134</a>)</li>
<li><a
href="https://github.com/vitejs/launch-editor/commit/383ef26fceaaab75e4f122bf833a8d457e187272"><code>383ef26</code></a>
v2.14.0</li>
<li><a
href="https://github.com/vitejs/launch-editor/commit/6277209316b28bd76b057a97fcdfa42da5adc181"><code>6277209</code></a>
ci: harden publish settings</li>
<li><a
href="https://github.com/vitejs/launch-editor/commit/520b2f787af1bbe3d2333d952547fc90f2c01bb3"><code>520b2f7</code></a>
fix(deps): update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/launch-editor/issues/129">#129</a>)</li>
<li><a
href="https://github.com/vitejs/launch-editor/commit/475ac662aeaa40eebe319f76acf7bd7ff2aba5d5"><code>475ac66</code></a>
chore(deps): update dependency lint-staged to v17 (<a
href="https://redirect.github.com/vitejs/launch-editor/issues/130">#130</a>)</li>
<li><a
href="https://github.com/vitejs/launch-editor/commit/247bf1dfe2c75efb50f507d33c2c5a3cbf4e20d0"><code>247bf1d</code></a>
chore(deps): update dependency yorkie to v2 (<a
href="https://redirect.github.com/vitejs/launch-editor/issues/131">#131</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/launch-editor/compare/v2.11.1...v2.14.1">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for launch-editor since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=launch-editor&package-manager=npm_and_yarn&previous-version=2.11.1&new-version=2.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-16 15:51:53 -05:00
Charlie Egan ffd7d46ee4 website: Various updates to node and website deps (#8768) 
Replaces https://github.com/open-policy-agent/opa/pull/8762

Original dependabot updates:

Bumps the website group in /docs with 9 updates:

| Package | From | To |
| --- | --- | --- |
|
[@floating-ui/react](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react)
| `0.27.18` | `0.27.19` |
|
[@iconify/react](https://github.com/iconify/iconify/tree/HEAD/components/react)
| `6.0.0` | `6.0.2` |
| [@mermaid-js/layout-elk](https://github.com/mermaid-js/mermaid) |
`0.1.9` | `0.2.1` |
| [eslint](https://github.com/eslint/eslint) | `9.39.2` | `10.4.1` |
| [glob](https://github.com/isaacs/node-glob) | `11.1.0` | `13.0.6` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) |
`0.21.0` | `0.22.1` |
| [recharts](https://github.com/recharts/recharts) | `3.7.0` | `3.8.1` |
|
[baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping)
| `2.10.20` | `2.10.33` |


I have also made some updates to use node 24.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Charlie Egan <charlie_egan@apple.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-11 13:23:17 +00:00
Charlie Egan 85e2477c85 website: Update docusaurus (#8756) 
Also add dependabot for website deps.

---------

Signed-off-by: Charlie Egan <charlie_egan@apple.com>
 2026-06-10 10:13:01 +01:00
dependabot[bot] a8f8cea073 build(deps): bump shell-quote from 1.8.3 to 1.8.4 in /docs (#8753) 
Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.3 to
1.8.4.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md">shell-quote's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/ljharb/shell-quote/compare/v1.8.3...v1.8.4">v1.8.4</a>
- 2026-05-22</h2>
<h3>Commits</h3>
<ul>
<li>[Fix] <code>quote</code>: validate object-token shapes <a
href="https://github.com/ljharb/shell-quote/commit/4378a6e613db5948168684864e49b42b83134d2d"><code>4378a6e</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code>,
<code>auto-changelog</code>, <code>eslint</code>, <code>npmignore</code>
<a
href="https://github.com/ljharb/shell-quote/commit/22ebec04349065a45ad8afc8cc8d53c4624634a6"><code>22ebec0</code></a></li>
<li>[Tests] increase coverage <a
href="https://github.com/ljharb/shell-quote/commit/9f3caa31900cc6ee64858b31134144c648ce206d"><code>9f3caa3</code></a></li>
<li>[readme] replace runkit CI badge with shields.io check-runs badge <a
href="https://github.com/ljharb/shell-quote/commit/3344a047dd1e95f71c4ca27522cbfd05c56277e0"><code>3344a04</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code> <a
href="https://github.com/ljharb/shell-quote/commit/699c5113d135f4d4591574bebf173334ffa453d4"><code>699c511</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ljharb/shell-quote/commit/ff166e2b63eb5f932bd131a8886a99e9afdf45ae"><code>ff166e2</code></a>
v1.8.4</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/4378a6e613db5948168684864e49b42b83134d2d"><code>4378a6e</code></a>
[Fix] <code>quote</code>: validate object-token shapes</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/22ebec04349065a45ad8afc8cc8d53c4624634a6"><code>22ebec0</code></a>
[Dev Deps] update <code>@ljharb/eslint-config</code>,
<code>auto-changelog</code>, <code>eslint</code>, `npmig...</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/9f3caa31900cc6ee64858b31134144c648ce206d"><code>9f3caa3</code></a>
[Tests] increase coverage</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/3344a047dd1e95f71c4ca27522cbfd05c56277e0"><code>3344a04</code></a>
[readme] replace runkit CI badge with shields.io check-runs badge</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/699c5113d135f4d4591574bebf173334ffa453d4"><code>699c511</code></a>
[Dev Deps] update <code>@ljharb/eslint-config</code></li>
<li>See full diff in <a
href="https://github.com/ljharb/shell-quote/compare/v1.8.3...v1.8.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote&package-manager=npm_and_yarn&previous-version=1.8.3&new-version=1.8.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 10:03:56 -05:00
Charlie Egan 75202c334c docs: PoC for kapa.ai (#8699) 
https://contribute.cncf.io/blog/2026/04/09/reducing-support-tax-cncf-kapa-ai/

Changes to follow shortly, PR open for domain allow listing.

Fixes https://github.com/open-policy-agent/opa/issues/8125

---------

Signed-off-by: Charlie Egan <charlie_egan@apple.com>
 2026-06-08 12:06:56 +02:00
dependabot[bot] 763aaaab5f build(deps): bump qs from 6.14.1 to 6.14.2 in /docs (#8694) 
Bumps [qs](https://github.com/ljharb/qs) from 6.14.1 to 6.14.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ljharb/qs/blob/main/CHANGELOG.md">qs's
changelog</a>.</em></p>
<blockquote>
<h2><strong>6.14.2</strong></h2>
<ul>
<li>[Fix] <code>parse</code>: mark overflow objects for indexed notation
exceeding <code>arrayLimit</code> (<a
href="https://redirect.github.com/ljharb/qs/issues/546">#546</a>)</li>
<li>[Fix] <code>arrayLimit</code> means max count, not max index, in
<code>combine</code>/<code>merge</code>/<code>parseArrayValue</code></li>
<li>[Fix] <code>parse</code>: throw on <code>arrayLimit</code> exceeded
with indexed notation when <code>throwOnLimitExceeded</code> is true (<a
href="https://redirect.github.com/ljharb/qs/issues/529">#529</a>)</li>
<li>[Fix] <code>parse</code>: enforce <code>arrayLimit</code> on
<code>comma</code>-parsed values</li>
<li>[Fix] <code>parse</code>: fix error message to reflect arrayLimit as
max index; remove extraneous comments (<a
href="https://redirect.github.com/ljharb/qs/issues/545">#545</a>)</li>
<li>[Robustness] avoid <code>.push</code>, use <code>void</code></li>
<li>[readme] document that <code>addQueryPrefix</code> does not add
<code>?</code> to empty output (<a
href="https://redirect.github.com/ljharb/qs/issues/418">#418</a>)</li>
<li>[readme] clarify <code>parseArrays</code> and
<code>arrayLimit</code> documentation (<a
href="https://redirect.github.com/ljharb/qs/issues/543">#543</a>)</li>
<li>[readme] replace runkit CI badge with shields.io check-runs
badge</li>
<li>[meta] fix changelog typo (<code>arrayLength</code> →
<code>arrayLimit</code>)</li>
<li>[actions] fix rebase workflow permissions</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ljharb/qs/commit/bdcf0c7f82387c18ac8fabfccd2f440645cef47b"><code>bdcf0c7</code></a>
v6.14.2</li>
<li><a
href="https://github.com/ljharb/qs/commit/294db90c812ddbe7d7a35d5687c505fd21a2d6a2"><code>294db90</code></a>
[readme] document that <code>addQueryPrefix</code> does not add
<code>?</code> to empty output</li>
<li><a
href="https://github.com/ljharb/qs/commit/5c308e5516c270a78caa6f278465914090f91ec6"><code>5c308e5</code></a>
[readme] clarify <code>parseArrays</code> and <code>arrayLimit</code>
documentation</li>
<li><a
href="https://github.com/ljharb/qs/commit/6addf8cf738d529c54d91f6f3ffb6c1be91bbfdc"><code>6addf8c</code></a>
[Fix] <code>parse</code>: mark overflow objects for indexed notation
exceeding <code>arrayLimit</code></li>
<li><a
href="https://github.com/ljharb/qs/commit/cfc108f662326d6ab540f3545ef0b832baf83cdf"><code>cfc108f</code></a>
[Fix] <code>arrayLimit</code> means max count, not max index, in
<code>combine</code>/<code>merge</code>/`pars...</li>
<li><a
href="https://github.com/ljharb/qs/commit/febb64442a80e49200211fa38d3c96b58024ac77"><code>febb644</code></a>
[Fix] <code>parse</code>: throw on <code>arrayLimit</code> exceeded with
indexed notation when `thr...</li>
<li><a
href="https://github.com/ljharb/qs/commit/f6a7abff1f13d644db9b05fe4f2c98ada6bf8482"><code>f6a7abf</code></a>
[Fix] <code>parse</code>: enforce <code>arrayLimit</code> on
<code>comma</code>-parsed values</li>
<li><a
href="https://github.com/ljharb/qs/commit/fbc5206c25b4d1851cea683f02c10756c521d15a"><code>fbc5206</code></a>
[Fix] <code>parse</code>: fix error message to reflect arrayLimit as max
index; remove e...</li>
<li><a
href="https://github.com/ljharb/qs/commit/1b9a8b4e78c6aff4c22fa559107227f02fd0216a"><code>1b9a8b4</code></a>
[actions] fix rebase workflow permissions</li>
<li><a
href="https://github.com/ljharb/qs/commit/2a35775614e0fb46ac8a3060201a32a7c23a7fda"><code>2a35775</code></a>
[meta] fix changelog typo (<code>arrayLength</code> →
<code>arrayLimit</code>)</li>
<li>Additional commits viewable in <a
href="https://github.com/ljharb/qs/compare/v6.14.1...v6.14.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=qs&package-manager=npm_and_yarn&previous-version=6.14.1&new-version=6.14.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-25 13:58:44 +02:00
dependabot[bot] 37de95f5fc build(deps): bump webpack-dev-server from 5.2.2 to 5.2.4 in /docs (#8670) 
Bumps
[webpack-dev-server](https://github.com/webpack/webpack-dev-server) from
5.2.2 to 5.2.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/releases">webpack-dev-server's
releases</a>.</em></p>
<blockquote>
<h2>v5.2.4</h2>
<h3><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.3...v5.2.4">5.2.4</a>
(2026-05-11)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>set Cross-Origin-Resource-Policy header to prevent source code theft
over HTTP</li>
</ul>
<h2>v5.2.3</h2>
<h3><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.2...v5.2.3">5.2.3</a>
(2026-01-12)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>add <code>cause</code> for <code>errorObject</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5518">#5518</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/37b033da2c48335178495a1987c469a26ef3de60">37b033d</a>)</li>
<li>compatibility with event target and universal target and lazy
compilation (<a
href="https://github.com/webpack/webpack-dev-server/commit/574026c44b9c51f0bbd2f5a2836c54607289a071">574026c</a>)</li>
<li><strong>overlay:</strong> add ESC key to dismiss overlay (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5598">#5598</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/f91baa8831e061e2998849966b8002b40b83fb07">f91baa8</a>)</li>
<li>progress indicator styles (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5557">#5557</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/41a53a1accdb0a90785d82cbe8a079794eeed3c8">41a53a1</a>)</li>
<li>upgrade selfsigned to v5</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md">webpack-dev-server's
changelog</a>.</em></p>
<blockquote>
<h3><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.3...v5.2.4">5.2.4</a>
(2026-05-11)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>set Cross-Origin-Resource-Policy header to prevent source code theft
over HTTP</li>
</ul>
<h3><a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.2...v5.2.3">5.2.3</a>
(2026-01-12)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>add <code>cause</code> for <code>errorObject</code> (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5518">#5518</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/37b033da2c48335178495a1987c469a26ef3de60">37b033d</a>)</li>
<li>compatibility with event target and universal target and lazy
compilation (<a
href="https://github.com/webpack/webpack-dev-server/commit/574026c44b9c51f0bbd2f5a2836c54607289a071">574026c</a>)</li>
<li><strong>overlay:</strong> add ESC key to dismiss overlay (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5598">#5598</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/f91baa8831e061e2998849966b8002b40b83fb07">f91baa8</a>)</li>
<li>progress indicator styles (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5557">#5557</a>)
(<a
href="https://github.com/webpack/webpack-dev-server/commit/41a53a1accdb0a90785d82cbe8a079794eeed3c8">41a53a1</a>)</li>
<li>upgrade selfsigned to v5</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/fd401308f1cc026262880e2dab810004d6444282"><code>fd40130</code></a>
chore(release): 5.2.4</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/ece4f3617bea31fb6d3833f69a32b6c289959a49"><code>ece4f36</code></a>
chore: update deps (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5661">#5661</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/a2161442a314a06a97e25d1404d08410cb4e9c51"><code>a216144</code></a>
ci: fix test (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5658">#5658</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/df073c53a8cefb54210b43813fa6ee60364a554e"><code>df073c5</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/b550a702bd4246d1724513b70de0bfbe6604672f"><code>b550a70</code></a>
chore(release): 5.2.3</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/9704dc52e3f696ae1446428c25882745e9b65cbb"><code>9704dc5</code></a>
chore: upgrade selfsigned to v5 and remove node-forge dependency (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5618">#5618</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/92bf644784741e8ea5adaa4a1dc26f4d462f223d"><code>92bf644</code></a>
chore: bump express to update qs (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5621">#5621</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/792b2f0bd13a3b93abf701fe3a5cf41ee16722f4"><code>792b2f0</code></a>
chore(deps-dev): bump the dependencies group with 4 updates (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5606">#5606</a>)</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/6d587cab3e023675de2feedf81bcdfcec7d5b774"><code>6d587ca</code></a>
chore(deps): bump the dependencies group across 1 directory with 27
updates (...</li>
<li><a
href="https://github.com/webpack/webpack-dev-server/commit/f91baa8831e061e2998849966b8002b40b83fb07"><code>f91baa8</code></a>
fix(overlay): add ESC key to dismiss overlay (<a
href="https://redirect.github.com/webpack/webpack-dev-server/issues/5598">#5598</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/webpack/webpack-dev-server/compare/v5.2.2...v5.2.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack-dev-server&package-manager=npm_and_yarn&previous-version=5.2.2&new-version=5.2.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/open-policy-agent/opa/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-18 13:45:31 -05:00
dependabot[bot] 6932abaae6 build(deps): bump mermaid from 11.14.0 to 11.15.0 in /docs 
Bumps [mermaid](https://github.com/mermaid-js/mermaid) from 11.14.0 to 11.15.0.
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.14.0...mermaid@11.15.0)

---
updated-dependencies:
- dependency-name: mermaid
  dependency-version: 11.15.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-12 08:01:59 +02:00
dependabot[bot] ce03cd8d23 build(deps): bump @babel/plugin-transform-modules-systemjs in /docs 
Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.25.9 to 7.29.4.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-modules-systemjs"
  dependency-version: 7.29.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-11 08:59:03 +02:00
dependabot[bot] 875060316b build(deps): bump fast-uri from 3.0.6 to 3.1.2 in /docs 
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.0.6 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.0.6...v3.1.2)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-09 08:31:25 +02:00
dependabot[bot] 1440243911 build(deps): bump lodash-es and mermaid in /docs 
Bumps [lodash-es](https://github.com/lodash/lodash) and [mermaid](https://github.com/mermaid-js/mermaid). These dependencies needed to be updated together.

Updates `lodash-es` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.18.1)

Updates `mermaid` from 11.10.1 to 11.14.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.10.1...mermaid@11.14.0)

---
updated-dependencies:
- dependency-name: lodash-es
  dependency-version: 4.18.1
  dependency-type: indirect
- dependency-name: mermaid
  dependency-version: 11.14.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-04 10:21:33 +02:00
Charlie Egan 5e2142efc0 Add copy-as-markdown button to doc pages (#8540) 
Allow users to copy entire page content as markdown for pasting into LLMs.

Follows https://github.com/open-policy-agent/opa/pull/8535

Upgrades Docusaurus to 3.10.0 too, adds turndown for HTML-to-markdown
conversion.

Signed-off-by: Charlie Egan <charlie_egan@apple.com>
 2026-04-22 16:37:07 +00:00
Charlie Egan f8c50574d8 Add generated output.jsons for docs examples (#8535) 
This allows us to show the results of example evaluation before the user
clicks evaluate, but also for chatbots to see the output when viewing
without interaction.

Signed-off-by: Charlie Egan <charlie_egan@apple.com>
 2026-04-21 13:01:02 +00:00
dependabot[bot] cc44823d58 build(deps): bump dompurify from 3.3.2 to 3.4.0 in /docs 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.2 to 3.4.0.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.2...3.4.0)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-16 11:26:08 +02:00
dependabot[bot] 6a79368e86 build(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /docs (#8513) 
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.11 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.11...v1.16.0)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-14 08:48:25 -05:00
dependabot[bot] bb1293a544 build(deps): bump lodash from 4.17.23 to 4.18.1 in /docs (#8494) 
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-07 10:06:09 -05:00
dependabot[bot] dc09c4841a build(deps): bump ajv from 6.12.6 to 6.14.0 in /docs (#8467) 
Bumps [ajv](https://github.com/ajv-validator/ajv) from 6.12.6 to 6.14.0.
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](https://github.com/ajv-validator/ajv/compare/v6.12.6...v6.14.0)

---
updated-dependencies:
- dependency-name: ajv
  dependency-version: 6.14.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-01 09:26:51 +02:00
dependabot[bot] 273cf3db04 build(deps): bump minimatch and serve-handler in /docs (#8466) 
Bumps [minimatch](https://github.com/isaacs/minimatch) and [serve-handler](https://github.com/vercel/serve-handler). These dependencies needed to be updated together.

Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5)

Updates `minimatch` from 10.1.1 to 10.2.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5)

Updates `serve-handler` from 6.1.6 to 6.1.7
- [Release notes](https://github.com/vercel/serve-handler/releases)
- [Commits](https://github.com/vercel/serve-handler/compare/6.1.6...6.1.7)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 10.2.5
  dependency-type: indirect
- dependency-name: serve-handler
  dependency-version: 6.1.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-01 09:16:34 +02:00
dependabot[bot] 878cbc79d3 build(deps): bump brace-expansion from 1.1.12 to 1.1.13 in /docs 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.13.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.13)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-30 14:33:38 +02:00
dependabot[bot] 1826405ec9 build(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /docs 
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) from 0.1.12 to 0.1.13.
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/v.0.1.13/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.12...v.0.1.13)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-version: 0.1.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-30 13:56:14 +02:00
dependabot[bot] 8fc443bd7f build(deps): bump node-forge from 1.3.2 to 1.4.0 in /docs (#8448) 
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.2 to 1.4.0.
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.2...v1.4.0)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-version: 1.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-27 08:36:03 +01:00
dependabot[bot] 8954525d93 build(deps): bump picomatch from 2.3.1 to 2.3.2 in /docs (#8443) 
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-26 13:53:17 +01:00
Charlie Egan 01814e9f25 docs: Update KubeCon event listing (#8439) 
* docs: Update KubeCon event listing

Add other talks mentioning OPA in description.

Signed-off-by: Charlie Egan <charlie_egan@apple.com>

* docs: lintfix

Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com>

---------

Signed-off-by: Charlie Egan <charlie_egan@apple.com>
Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com>
Co-authored-by: Stephan Renatus <stephan.renatus@gmail.com>
 2026-03-23 10:12:50 +01:00
dependabot[bot] 908ac78877 build(deps): bump flatted from 3.4.1 to 3.4.2 in /docs 
Bumps [flatted](https://github.com/WebReflection/flatted) from 3.4.1 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.4.1...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-23 08:29:16 +01:00
dependabot[bot] 5e57a2758b build(deps): bump flatted from 3.3.3 to 3.4.1 in /docs 
Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.1.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.1)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-16 09:39:28 +01:00
dependabot[bot] 97698523dd build(deps): bump undici from 6.23.0 to 6.24.1 in /docs 
Bumps [undici](https://github.com/nodejs/undici) from 6.23.0 to 6.24.1.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.23.0...v6.24.1)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.24.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-16 09:39:13 +01:00
dependabot[bot] d20d6436ee build(deps): bump dompurify from 3.2.6 to 3.3.2 in /docs (#8408) 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.2.6 to 3.3.2.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.2.6...3.3.2)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sebastian Spaink <sebastianspaink@gmail.com>
 2026-03-06 21:29:15 +00:00
dependabot[bot] 935d92ef92 build(deps): bump svgo from 3.3.2 to 3.3.3 in /docs 
Bumps [svgo](https://github.com/svg/svgo) from 3.3.2 to 3.3.3.
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](https://github.com/svg/svgo/compare/v3.3.2...v3.3.3)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 3.3.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-05 13:33:18 +01:00