releases

mirror of https://github.com/open-policy-agent/opa.git synced 2026-08-12 19:32:48 -06:00

Author	SHA1	Message	Date
Dean Chen	ac4a791117	docs: add split and lower built-in examples (#8992 ) Another small pass on #3786. Adds playground examples for: - `split` — pull a team segment out of a path - `lower` — normalize mixed-case roles before an allowlist check Same layout as the other string examples. Eval'd with opa 1.19 against the sample input/data. --------- Signed-off-by: Dean Chen <51218137+locker95@users.noreply.github.com> Signed-off-by: Dean Chen <862469039@qq.com>	2026-08-10 12:05:30 +01:00
dependabot[bot]	0fdcd5bfb3	build(deps): bump mermaid from 11.15.0 to 11.16.1 in /docs (#8983 ) Bumps [mermaid](https://github.com/mermaid-js/mermaid) from 11.15.0 to 11.16.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mermaid-js/mermaid/releases">mermaid's releases</a>.</em></p> <blockquote> <h2>mermaid@11.16.1</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a> <a href="https://github.com/mermaid-js/mermaid/commit/12d472c9ed43f94814b110da8d7a9ae6dd5266ed"><code>12d472c</code></a> Thanks <a href="https://github.com/aloisklink"><code>@aloisklink</code></a>! - fix: handle CSS sibling combinators in compileCSS</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a> <a href="https://github.com/mermaid-js/mermaid/commit/2cd6dcf735533b323507e3e889ffdea870540b43"><code>2cd6dcf</code></a> Thanks <a href="https://github.com/aloisklink"><code>@aloisklink</code></a>! - fix: increase protections against prototype pollution</p> <p>User-controlled input already has protections against prototype pollution.</p> <p>Fixes: GHSA-c4c3-pg64-4m4v</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a> <a href="https://github.com/mermaid-js/mermaid/commit/99af3fc35ef0a9a9c8c6314521344d67523ddccf"><code>99af3fc</code></a> Thanks <a href="https://github.com/aloisklink"><code>@aloisklink</code></a>! - fix(architecture): use <code>Map</code>s and <code>Set</code>s to store groups/services</p> <p>Services are now rendered in the order they are defined and more service IDs are now supported.</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a> <a href="https://github.com/mermaid-js/mermaid/commit/2cd6dcf735533b323507e3e889ffdea870540b43"><code>2cd6dcf</code></a> Thanks <a href="https://github.com/aloisklink"><code>@aloisklink</code></a>! - deprecate: Deprecate the <code>mermaidAPI.setConfig()</code> function</p> <p>Calling this function has no observable effect, as the next time a <code>render()</code> or <code>parse()</code> is called, the <code>currentConfig</code> is cleared.</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a> <a href="https://github.com/mermaid-js/mermaid/commit/630aa7e5dd417e1f56bff2a1ce8df2c5ad08d289"><code>630aa7e</code></a> Thanks <a href="https://github.com/aloisklink"><code>@aloisklink</code></a>! - fix(xychart): support zero-width x-axis ranges</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/8022">#8022</a> <a href="https://github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e"><code>59b22fa</code></a> Thanks <a href="https://github.com/aloisklink"><code>@aloisklink</code></a>! - fix(radar): limit number of ticks to 32</p> <p>Setting a ticks value higher than this would only show 32 ticks.</p> </li> </ul> <h2>mermaid@11.16.0</h2> <h3>Minor Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/7535">#7535</a> <a href="https://github.com/mermaid-js/mermaid/commit/ea1c48f53fce5d025388d386c90da8743ee25b13"><code>ea1c48f</code></a> Thanks <a href="https://github.com/ragelink"><code>@ragelink</code></a>! - feat(cynefin): Adds the Cynefin framework as a new diagram type (beta) to Mermaid (available as <code>cynefin-beta</code>). The Cynefin framework, created by Dave Snowden, is a decision-making framework that categorizes problems into five complexity domains, widely used in agile, incident management, strategy, and organizational design.</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/7721">#7721</a> <a href="https://github.com/mermaid-js/mermaid/commit/f45cc2cc5683b90990e374a463b7bcad0fd68a38"><code>f45cc2c</code></a> Thanks <a href="https://github.com/notionparallax"><code>@notionparallax</code></a>! - feat(treeView): add box-drawing character input support for treeView diagrams</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/7550">#7550</a> <a href="https://github.com/mermaid-js/mermaid/commit/f1f4d45ee0513b64a2bd280087d31656f9d2c786"><code>f1f4d45</code></a> Thanks <a href="https://github.com/DominicBurkart"><code>@DominicBurkart</code></a>! - feat(xychart): add per-point text labels for xychart line plots</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/7527">#7527</a> <a href="https://github.com/mermaid-js/mermaid/commit/b4d0442dd1628acb3f71681519e7f47fc8bacf55"><code>b4d0442</code></a> Thanks <a href="https://github.com/notionparallax"><code>@notionparallax</code></a>! - feat(treeView): Extends the existing treeView-beta diagram with features useful for representing file/directory structures.</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/7793">#7793</a> <a href="https://github.com/mermaid-js/mermaid/commit/a6f097d580d459dfc3ade3e21030037341f79940"><code>a6f097d</code></a> Thanks <a href="https://github.com/SSDWGG"><code>@SSDWGG</code></a>! - feat(er): support optional ER attribute types with a <code>?</code> suffix</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/7772">#7772</a> <a href="https://github.com/mermaid-js/mermaid/commit/37f2e36fa017698b66093ac5518396523a7a3241"><code>37f2e36</code></a> Thanks <a href="https://github.com/devareddy05"><code>@devareddy05</code></a>! - feat(gantt): support multiple <code>excludes</code> / <code>includes</code> lines so long exclusion lists can be split into commented groups (<a href="https://redirect.github.com/mermaid-js/mermaid/issues/6270">#6270</a>)</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/7708">#7708</a> <a href="https://github.com/mermaid-js/mermaid/commit/4e63e9d338b6476df283afd4a002072945bc4563"><code>4e63e9d</code></a> Thanks <a href="https://github.com/txmxthy"><code>@txmxthy</code></a>! - feat(architecture): add <code>align row\|column {ids…}</code> directive to architecture-beta diagrams so authors can declare horizontal or vertical alignment of services explicitly.</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/7760">#7760</a> <a href="https://github.com/mermaid-js/mermaid/commit/05223bee47a424be3ba7805e753b96861d342765"><code>05223be</code></a> Thanks <a href="https://github.com/ngdaniels"><code>@ngdaniels</code></a>! - feat(pie): Enhance Pie Chart - Enable donut chart, Set legend position, and highlight slice</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/7251">#7251</a> <a href="https://github.com/mermaid-js/mermaid/commit/216e4e9a61afceae885b00854f79e17373ccad31"><code>216e4e9</code></a> Thanks <a href="https://github.com/ydah"><code>@ydah</code></a>! - feat(railroad): Add support for Railroad Diagrams (Syntax Diagrams) with four input syntaxes: IR (railroad-beta), EBNF (railroad-ebnf-beta), ABNF (railroad-abnf-beta), and PEG (railroad-peg-beta).</p> </li> <li> <p><a href="https://redirect.github.com/mermaid-js/mermaid/pull/7774">#7774</a> <a href="https://github.com/mermaid-js/mermaid/commit/e5c75e6b797f84f8f652d8771eb1ce6161dd8f89"><code>e5c75e6</code></a> Thanks <a href="https://github.com/ngdaniels"><code>@ngdaniels</code></a>! - feat(xychart): enable rotate label on X-axis</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mermaid-js/mermaid/commit/7ecca0cd7f1658ef74f4e7e91f925724ef403bbf"><code>7ecca0c</code></a> Version Packages (<a href="https://redirect.github.com/mermaid-js/mermaid/issues/8023">#8023</a>)</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/95b1b9cdba40e7954aee7d8a265577fd3839710c"><code>95b1b9c</code></a> docs: change <code>mermaidAPI.setConfig()</code> changeset (<a href="https://redirect.github.com/mermaid-js/mermaid/issues/8024">#8024</a>)</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/acc69f172b5ad5405ca8de8f4f79a80505092b3f"><code>acc69f1</code></a> Merge pull request <a href="https://redirect.github.com/mermaid-js/mermaid/issues/8022">#8022</a> from mermaid-js/release/11.16.1</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/eba72879e94755433403e571d724ca7a448800af"><code>eba7287</code></a> docs: point changesets to correct commit hashes</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/12d472c9ed43f94814b110da8d7a9ae6dd5266ed"><code>12d472c</code></a> Merge commit from fork</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/2cd6dcf735533b323507e3e889ffdea870540b43"><code>2cd6dcf</code></a> Merge commit from fork</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/630aa7e5dd417e1f56bff2a1ce8df2c5ad08d289"><code>630aa7e</code></a> Merge commit from fork</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e"><code>59b22fa</code></a> Merge commit from fork</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/99af3fc35ef0a9a9c8c6314521344d67523ddccf"><code>99af3fc</code></a> Merge commit from fork</li> <li><a href="https://github.com/mermaid-js/mermaid/commit/2337f7ecd629c8e777684a2edff341976230ad67"><code>2337f7e</code></a> Merge branch 'test/improve-example.html' into release/11.16.1</li> <li>Additional commits viewable in <a href="https://github.com/mermaid-js/mermaid/compare/mermaid@11.15.0...mermaid@11.16.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mermaid&package-manager=npm_and_yarn&previous-version=11.15.0&new-version=11.16.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-08-10 10:59:15 +02:00
dependabot[bot]	b56b99e908	build(deps): bump dompurify from 3.4.12 to 3.4.13 in /docs (#8990 ) Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.12 to 3.4.13. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cure53/DOMPurify/releases">dompurify's releases</a>.</em></p> <blockquote> <h2>DOMPurify 3.4.13</h2> <ul> <li>Fixed an issue with hook removal during <code>IN_PLACE</code> sanitization, thanks <a href="https://github.com/koyokr"><code>@koyokr</code></a></li> <li>Fixed an issue with hooks potentially bypassing the clone guard, thanks <a href="https://github.com/AkshayjainG"><code>@AkshayjainG</code></a></li> <li>Fixed an issue with DOM clobbering via <code>ownerDocument</code> during <code>IN_PLACE</code>, thanks <a href="https://github.com/AkshayjainG"><code>@AkshayjainG</code></a></li> <li>Bumped several dependencies where possible</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cure53/DOMPurify/commit/3067f774676975de12306effd6db6ad7a9a8c17f"><code>3067f77</code></a> release: 3.4.13 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1562">#1562</a>)</li> <li>See full diff in <a href="https://github.com/cure53/DOMPurify/compare/3.4.12...3.4.13">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dompurify&package-manager=npm_and_yarn&previous-version=3.4.12&new-version=3.4.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-08-10 10:58:33 +02:00
Dean Chen	af3678f6cf	docs(policy-reference): add examples for common built-ins (#8913 ) ## Description Incremental pass on #3786: add `PlaygroundExample` blocks for a handful of frequently used built-ins that had no examples yet. \| Built-in \| Example \| \|---\|---\| \| `units.parse` \| Compare container memory limits expressed with different unit suffixes \| \| `object.get` \| Read an optional label with a default (`env` → `dev`) \| \| `startswith` \| Restrict HTTP paths to `/api/v1/` \| \| `sprintf` \| Build a deny message with user/role/action/resource \| \| `intersection` \| Check required OAuth-style scopes are present \| \| `array.concat` \| Merge a base registry allowlist with tenant extras \| Each example follows the existing layout under `docs/docs/policy-reference/_examples/` (`policy.rego`, `input.json`, `intro.md`, `output.json`, …). Outputs were generated with `opa eval` (same approach as `docs/bin/eval-examples.sh`). `units.parse` was suggested in the issue thread as a good starting point. ## Checklist - [x] I have read the [contribution guidelines](https://www.openpolicyagent.org/docs/latest/contributing/). - [x] I have added/updated tests for my change (docs-only; examples evaluate cleanly with `opa eval`). - [x] All new/updated docs follow the existing style of nearby examples (`count`, `sum`, `contains`, …). Closes nothing by itself — this is partial progress on #3786. --------- Signed-off-by: Dean Chen <51218137+locker95@users.noreply.github.com> Signed-off-by: Dean Chen <862469039@qq.com>	2026-08-05 21:15:22 -05:00
Roshan Singh	346f288c32	docs: Clarify glob.match indexing requirements (#8935 ) ### Why the changes in this PR are needed? The rule indexing docs say the indexer recognizes the normal `` operator, but two further conditions gate indexing and neither is documented: the `` must form a complete delimiter-separated segment, and a `null` delimiter is never indexed. Policies that follow the documented rule can silently miss the index fast path. Fixes #8209 ### What are the changes in this PR? Docs only. Three sentences and three rows added to the "Glob statements" section of `docs/docs/policy-performance.md`. The other table rows are unchanged apart from pipe realignment, which markdownlint requires because the new row is wider than the column. ### Notes to assist PR review: Behavior confirmed against `globPatternToArray`, `globDelimiterToString`, and `splitStringEscaped` in `v1/ast/index.go`. ### Further comments: None. --------- Signed-off-by: Roshan <rosh.s568@gmail.com>	2026-08-05 14:35:18 +01:00
dependabot[bot]	aeb937c8c7	build(deps): bump fast-uri from 3.1.4 to 3.1.5 in /docs (#8971 ) Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.4 to 3.1.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fastify/fast-uri/releases">fast-uri's releases</a>.</em></p> <blockquote> <h2>v3.1.5</h2> <h2>⚠️ Security Warning</h2> <p>Fix for <a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7">https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7</a></p> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fastify/fast-uri/commit/5e179cbb4636d5f773ed21126e5bd3068e87e94e"><code>5e179cb</code></a> Bumped v3.1.5</li> <li><a href="https://github.com/fastify/fast-uri/commit/2cad02d6ed428a720499bb7a3c3d6c3d41f10f5a"><code>2cad02d</code></a> Merge commit from fork</li> <li>See full diff in <a href="https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fast-uri&package-manager=npm_and_yarn&previous-version=3.1.4&new-version=3.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-08-03 17:07:19 -05:00
dependabot[bot]	52d1aad7e2	build(deps): bump brace-expansion in /docs (#8969 ) Bumps and [brace-expansion](https://github.com/juliangruber/brace-expansion). These dependencies needed to be updated together. Updates `brace-expansion` from 1.1.13 to 1.1.18 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/juliangruber/brace-expansion/releases">brace-expansion's releases</a>.</em></p> <blockquote> <h2>v1.1.15</h2> <ul> <li>Backport v5.0.6 change to v1 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>) 0b09384</li> </ul> <hr /> <p><a href="https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15">https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b"><code>758fcd6</code></a> 1.1.18</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e"><code>27fbeed</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf"><code>5c57cc2</code></a> 1.1.17</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57"><code>d757f1d</code></a> npm ignore <code>.claude</code></li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"><code>cb4b9e4</code></a> fix: backport GHSA-mh99-v99m-4gvg (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/129">#129</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/447763a91a613cfa67ac73096cbc1de9a2304f97"><code>447763a</code></a> 1.1.16</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95"><code>d74e630</code></a> fix: v1 backport for CVE-2026-13149 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/122">#122</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/2203f4f4895eba16c4d408b4219ce1b8e5f6ff24"><code>2203f4f</code></a> 1.1.15</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/0b0938410732370559704230724ca4a44d1b29fd"><code>0b09384</code></a> Backport v5.0.6 change to v1 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/10c05fcf3699b1a29ef5e611c011af3d3c97e6e3"><code>10c05fc</code></a> 1.1.14</li> <li>Additional commits viewable in <a href="https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.18">compare view</a></li> </ul> </details> <br /> Updates `brace-expansion` from 5.0.6 to 5.0.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/juliangruber/brace-expansion/releases">brace-expansion's releases</a>.</em></p> <blockquote> <h2>v1.1.15</h2> <ul> <li>Backport v5.0.6 change to v1 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>) 0b09384</li> </ul> <hr /> <p><a href="https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15">https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b"><code>758fcd6</code></a> 1.1.18</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e"><code>27fbeed</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf"><code>5c57cc2</code></a> 1.1.17</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57"><code>d757f1d</code></a> npm ignore <code>.claude</code></li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"><code>cb4b9e4</code></a> fix: backport GHSA-mh99-v99m-4gvg (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/129">#129</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/447763a91a613cfa67ac73096cbc1de9a2304f97"><code>447763a</code></a> 1.1.16</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95"><code>d74e630</code></a> fix: v1 backport for CVE-2026-13149 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/122">#122</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/2203f4f4895eba16c4d408b4219ce1b8e5f6ff24"><code>2203f4f</code></a> 1.1.15</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/0b0938410732370559704230724ca4a44d1b29fd"><code>0b09384</code></a> Backport v5.0.6 change to v1 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/10c05fcf3699b1a29ef5e611c011af3d3c97e6e3"><code>10c05fc</code></a> 1.1.14</li> <li>Additional commits viewable in <a href="https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.18">compare view</a></li> </ul> </details> <br /> Updates `brace-expansion` from 5.0.5 to 5.0.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/juliangruber/brace-expansion/releases">brace-expansion's releases</a>.</em></p> <blockquote> <h2>v1.1.15</h2> <ul> <li>Backport v5.0.6 change to v1 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>) 0b09384</li> </ul> <hr /> <p><a href="https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15">https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/juliangruber/brace-expansion/commit/758fcd6d188a95c2342818519c77b8c06794552b"><code>758fcd6</code></a> 1.1.18</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/27fbeed22b4fdf2c5f732f66bcf84d43f4a26c6e"><code>27fbeed</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/5c57cc2519dfb067e188b7cb0733fffbd02946bf"><code>5c57cc2</code></a> 1.1.17</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/d757f1dde7808bcbcd7a4628ab913e5185ed3d57"><code>d757f1d</code></a> npm ignore <code>.claude</code></li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"><code>cb4b9e4</code></a> fix: backport GHSA-mh99-v99m-4gvg (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/129">#129</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/447763a91a613cfa67ac73096cbc1de9a2304f97"><code>447763a</code></a> 1.1.16</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95"><code>d74e630</code></a> fix: v1 backport for CVE-2026-13149 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/122">#122</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/2203f4f4895eba16c4d408b4219ce1b8e5f6ff24"><code>2203f4f</code></a> 1.1.15</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/0b0938410732370559704230724ca4a44d1b29fd"><code>0b09384</code></a> Backport v5.0.6 change to v1 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/10c05fcf3699b1a29ef5e611c011af3d3c97e6e3"><code>10c05fc</code></a> 1.1.14</li> <li>Additional commits viewable in <a href="https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.18">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-08-03 15:28:21 -05:00
dependabot[bot]	823b39aa10	build(deps): bump the website group in /docs with 9 updates (#8966 ) Bumps the website group in /docs with 9 updates: \| Package \| From \| To \| \| --- \| --- \| --- \| \| [@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus) \| `3.10.1` \| `3.10.2` \| \| [@docusaurus/plugin-content-docs](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs) \| `3.10.1` \| `3.10.2` \| \| [@docusaurus/plugin-google-gtag](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag) \| `3.10.1` \| `3.10.2` \| \| [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic) \| `3.10.1` \| `3.10.2` \| \| [@docusaurus/theme-mermaid](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid) \| `3.10.1` \| `3.10.2` \| \| [@floating-ui/react](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react) \| `0.27.19` \| `0.27.20` \| \| [eslint](https://github.com/eslint/eslint) \| `10.5.0` \| `10.8.0` \| \| [recharts](https://github.com/recharts/recharts) \| `3.9.0` \| `3.10.0` \| \| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) \| `2.10.38` \| `2.11.9` \| Updates `@docusaurus/core` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/core's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@docusaurus/core's changelog</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a> v3.10.2</li> <li><a href="https://github.com/facebook/docusaurus/commit/2f5389d1fa4c1801d7bfe6ec13e9317cec449935"><code>2f5389d</code></a> chore: cherry-pick commits for v3.10.2 patch release (<a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12265">#12265</a>)</li> <li>See full diff in <a href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus">compare view</a></li> </ul> </details> <br /> Updates `@docusaurus/plugin-content-docs` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/plugin-content-docs's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@docusaurus/plugin-content-docs's changelog</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-content-docs/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a> v3.10.2</li> <li>See full diff in <a href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-plugin-content-docs">compare view</a></li> </ul> </details> <br /> Updates `@docusaurus/plugin-google-gtag` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/plugin-google-gtag's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@docusaurus/plugin-google-gtag's changelog</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a> v3.10.2</li> <li><a href="https://github.com/facebook/docusaurus/commit/2f5389d1fa4c1801d7bfe6ec13e9317cec449935"><code>2f5389d</code></a> chore: cherry-pick commits for v3.10.2 patch release (<a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag/issues/12265">#12265</a>)</li> <li>See full diff in <a href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-plugin-google-gtag">compare view</a></li> </ul> </details> <br /> Updates `@docusaurus/preset-classic` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/preset-classic's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@docusaurus/preset-classic's changelog</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a> v3.10.2</li> <li>See full diff in <a href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-preset-classic">compare view</a></li> </ul> </details> <br /> Updates `@docusaurus/theme-mermaid` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/theme-mermaid's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@docusaurus/theme-mermaid's changelog</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-theme-mermaid/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a> v3.10.2</li> <li>See full diff in <a href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-theme-mermaid">compare view</a></li> </ul> </details> <br /> Updates `@floating-ui/react` from 0.27.19 to 0.27.20 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/floating-ui/floating-ui/releases">@floating-ui/react's releases</a>.</em></p> <blockquote> <h2><code>@floating-ui/react</code><a href="https://github.com/0"><code>@0</code></a>.27.20</h2> <h3>Patch Changes</h3> <ul> <li>fix: remove redundant passive options from scroll listeners</li> <li>fix: support explicit <code>undefined</code> for optional properties with <code>exactOptionalPropertyTypes</code></li> <li>Update dependencies: <code>@floating-ui/react-dom@2.1.9</code>, <code>@floating-ui/utils@0.2.12</code></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/floating-ui/floating-ui/blob/master/packages/react/CHANGELOG.md">@floating-ui/react's changelog</a>.</em></p> <blockquote> <h2>0.27.20</h2> <h3>Patch Changes</h3> <ul> <li>fix: remove redundant passive options from scroll listeners</li> <li>fix: support explicit <code>undefined</code> for optional properties with <code>exactOptionalPropertyTypes</code></li> <li>Update dependencies: <code>@floating-ui/react-dom@2.1.9</code>, <code>@floating-ui/utils@0.2.12</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/floating-ui/floating-ui/commit/12d94738472e922e1b3fa31b02b2b61b9ed77e6a"><code>12d9473</code></a> chore: version packages (<a href="https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react/issues/3480">#3480</a>)</li> <li><a href="https://github.com/floating-ui/floating-ui/commit/9887c9679906900ffac4ee632deaa8bc959f71d2"><code>9887c96</code></a> fix(types): restore bivariant parameters for optional callbacks</li> <li><a href="https://github.com/floating-ui/floating-ui/commit/73c1f762a2670a3eb1e99935df59c81ef241b90a"><code>73c1f76</code></a> fix(types): support <code>exactOptionalPropertyTypes</code> (<a href="https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react/issues/3456">#3456</a>)</li> <li><a href="https://github.com/floating-ui/floating-ui/commit/8999976822c9193eab5eb625ae16cc4381e9e7b0"><code>8999976</code></a> chore: upgrade vulnerable direct dependencies (<a href="https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react/issues/3484">#3484</a>)</li> <li><a href="https://github.com/floating-ui/floating-ui/commit/fa63ca665910d90d664da6c7e3f6d8e0061925e9"><code>fa63ca6</code></a> chore: remove unnecessary passive flag from scroll events (<a href="https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react/issues/3470">#3470</a>)</li> <li><a href="https://github.com/floating-ui/floating-ui/commit/fabb80ba5e5cd76bcde288fd725ac2e1942ba613"><code>fabb80b</code></a> breaking(vue): drop <code>vue-demi</code> and require Vue >=3.3.0 (<a href="https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react/issues/3452">#3452</a>)</li> <li>See full diff in <a href="https://github.com/floating-ui/floating-ui/commits/@floating-ui/react@0.27.20/packages/react">compare view</a></li> </ul> </details> <br /> Updates `eslint` from 10.5.0 to 10.8.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p> <blockquote> <h2>v10.8.0</h2> <h2>Features</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/2fee9bb7416116cbed4d8c8100b1ae713b6356a1"><code>2fee9bb</code></a> feat: export <code>ConfigObject</code> from <code>eslint/config</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21082">#21082</a>) (sethamus)</li> </ul> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/6b8d2f7589b8a7c8b91b8ca2a2ef6d46178760d8"><code>6b8d2f7</code></a> fix: escape reserved characters in rule id in <code>html</code> formatter (<a href="https://redirect.github.com/eslint/eslint/issues/21129">#21129</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/90910715011211a20d011d807d398a7005127f35"><code>9091071</code></a> fix: prevent <code>no-unreachable-loop</code> crash when all loop types are ignored (<a href="https://redirect.github.com/eslint/eslint/issues/21116">#21116</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/e23fafe8d4b15355adef6cdebef414c3a2019454"><code>e23fafe</code></a> fix: prefer-object-spread add semicolon when adding parenthesis (<a href="https://redirect.github.com/eslint/eslint/issues/21081">#21081</a>) (synthex-byte)</li> <li><a href="https://github.com/eslint/eslint/commit/20b5ad052360a443786a202e94624a3f81846511"><code>20b5ad0</code></a> fix: quadratic-time regex in <code>prefer-template</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21096">#21096</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/8b6f6c0b33411f34485512456d94f221daf7321f"><code>8b6f6c0</code></a> fix: apply ignore configs to computed methods in class-methods-use-this (<a href="https://redirect.github.com/eslint/eslint/issues/21094">#21094</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/b2c608c014a396800a24a89343265d0616bee2d8"><code>b2c608c</code></a> fix: NewExpression with parenthesized callee in <code>preserve-caught-error</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21083">#21083</a>) (Francesco Trotta)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/6ddf8587e5cfeeb7328332601bb76d98b8a198ea"><code>6ddf858</code></a> docs: fix broken Specify Parser Options anchor link (<a href="https://redirect.github.com/eslint/eslint/issues/21106">#21106</a>) (Minsu)</li> <li><a href="https://github.com/eslint/eslint/commit/784dfbe98f0222426fd200153a5ce2e5624151f0"><code>784dfbe</code></a> docs: Clarify <code>no-eq-null</code> description (<a href="https://redirect.github.com/eslint/eslint/issues/21120">#21120</a>) (Park Harin)</li> <li><a href="https://github.com/eslint/eslint/commit/7ec733a3ba5acb053a73ac656030a3879aa48fda"><code>7ec733a</code></a> docs: Fix typos and grammar in glossary (<a href="https://redirect.github.com/eslint/eslint/issues/21095">#21095</a>) (Marry (Subin Yang))</li> <li><a href="https://github.com/eslint/eslint/commit/92bb13f13065db72d62454b9830d3ae52db15c76"><code>92bb13f</code></a> docs: replace quake link (<a href="https://redirect.github.com/eslint/eslint/issues/21108">#21108</a>) (Jung Hyeon Jun)</li> <li><a href="https://github.com/eslint/eslint/commit/68eb4a57572409dbdcfeb3bc5c92ddbba46bc770"><code>68eb4a5</code></a> docs: fix broken Specify Globals anchor links in rule pages (<a href="https://redirect.github.com/eslint/eslint/issues/21103">#21103</a>) (Minsu)</li> <li><a href="https://github.com/eslint/eslint/commit/d28f697e0d32d7446c825fd89c362db028450134"><code>d28f697</code></a> docs: replace Code Climate CLI links with Qlty CLI links (<a href="https://redirect.github.com/eslint/eslint/issues/21099">#21099</a>) (Jung Hyeon Jun)</li> <li><a href="https://github.com/eslint/eslint/commit/eccc68d42564e46bc9020d19ec52d2988f3b7bfa"><code>eccc68d</code></a> docs: correct --suppressions-location option description (<a href="https://redirect.github.com/eslint/eslint/issues/21093">#21093</a>) (Ga eun Lee)</li> <li><a href="https://github.com/eslint/eslint/commit/c5963f74bfa82a5b7ccc0607dcdcc695b8c97a31"><code>c5963f7</code></a> docs: Update README (GitHub Actions Bot)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/4fbf46d140120ae838db08cbe49544c985956490"><code>4fbf46d</code></a> test: pin <code>webpack</code> version to 5.108.4 (<a href="https://redirect.github.com/eslint/eslint/issues/21137">#21137</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/2d063e224e9bb0ccb0a28c120f7e380a8d62f320"><code>2d063e2</code></a> chore: update HTTP URLs to HTTPS in JSDoc and comments (<a href="https://redirect.github.com/eslint/eslint/issues/21101">#21101</a>) (Bo Hyun Kim)</li> <li><a href="https://github.com/eslint/eslint/commit/eccbe7bc9257a6c99880468e452c8dfafbf47f74"><code>eccbe7b</code></a> test: add error locations to <code>no-class-assign</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21123">#21123</a>) (devoil)</li> <li><a href="https://github.com/eslint/eslint/commit/e7d1e4373bf626f8da76d62ce024c28928bc99bc"><code>e7d1e43</code></a> ci: bump actions/setup-go from 6 to 7 (<a href="https://redirect.github.com/eslint/eslint/issues/21118">#21118</a>) (dependabot[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/e9d66d0cde1a7752c29dee53ab7b62632835a87a"><code>e9d66d0</code></a> ci: bump actions/setup-node from 6 to 7 (<a href="https://redirect.github.com/eslint/eslint/issues/21119">#21119</a>) (dependabot[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/ee225b60c26f0cc5f4d71641888a5bd2ec5626d6"><code>ee225b6</code></a> test: Add error location details to <code>no-eq-null</code> rule (<a href="https://redirect.github.com/eslint/eslint/issues/21117">#21117</a>) (Park Harin)</li> <li><a href="https://github.com/eslint/eslint/commit/044a627fa3e28ee1410d515acc5378eb4b49f8ba"><code>044a627</code></a> chore: update minimatch to ^10.2.5 (<a href="https://redirect.github.com/eslint/eslint/issues/21107">#21107</a>) (김채영)</li> <li><a href="https://github.com/eslint/eslint/commit/fb09aa8ff09730d3ccf68859e065f99666b52466"><code>fb09aa8</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21115">#21115</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/5abd878740fe417fd8a910cac3741f2a0317b365"><code>5abd878</code></a> test: add error locations to <code>no-proto</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21114">#21114</a>) (Gihyeon Jeong / 정기현)</li> <li><a href="https://github.com/eslint/eslint/commit/9715887ec94a5ff936447d7b680d039fbe2f0541"><code>9715887</code></a> test: Add error location details to <code>no-div-regex</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21110">#21110</a>) (Park Harin)</li> <li><a href="https://github.com/eslint/eslint/commit/a746ec6ea4a2249b1eb3f512264da5f4d5f7c886"><code>a746ec6</code></a> test: add error locations to <code>no-new-wrappers</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21109">#21109</a>) (Gihyeon Jeong / 정기현)</li> <li><a href="https://github.com/eslint/eslint/commit/8dde64570e240f3ef8af873d59a752db6d8519aa"><code>8dde645</code></a> test: add error locations to <code>no-ex-assign</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21102">#21102</a>) (devoil)</li> <li><a href="ht... _Description has been truncated_ Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-08-03 09:53:00 -05:00
Yilia Lin	22b149a05f	docs/website: Refresh Apache APISIX ecosystem resources (#8957 ) The Apache APISIX ecosystem entry does not currently point readers to the maintained `opa` plugin documentation and includes a duplicate Medium cross-post. This update makes the official plugin documentation the primary integration reference, adds a related ASF talk and an authorization-focused APISIX article, and removes the duplicate link. Keeping these resources current will help OPA users find the request and decision contract, configuration, and runnable examples from the ecosystem page. Validation completed: - `make fmt-check` - `make markdownlint-check` - `make lint-check` - `make build` Signed-off-by: Yilia Lin <yilialinn@163.com>	2026-08-03 11:30:42 +01:00
dependabot[bot]	f1e2ac07e4	build(deps): bump postcss from 8.5.15 to 8.5.23 in /docs Bumps [postcss](https://github.com/postcss/postcss) from 8.5.15 to 8.5.23. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/compare/8.5.15...8.5.23) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-07-28 11:19:10 +02:00
dependabot[bot]	d9c7856eae	build(deps): bump js-yaml from 5.2.1 to 5.2.2 in /docs Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.1 to 5.2.2. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/5.2.1...5.2.2) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.2.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-07-28 11:06:38 +02:00
KBS	8186bd17e0	docs: document the compile metadata annotation (#8905 ) Documents the `compile` metadata annotation, which was added without documentation. Adds: - a `compile` row to the metadata annotations reference table (alongside `entrypoint` / `custom`). - a "Metadata `compile`" section documenting the `unknowns` and `mask_rule` fields, the annotation scope chain, precedence versus the Compile API request, and a rego example. Closes #8824. Signed-off-by: youdie006 <youdie006@users.noreply.github.com> Co-authored-by: youdie006 <youdie006@users.noreply.github.com>	2026-07-27 13:50:45 +02:00
Johan Fylling	95111ca330	docs: Add recommendations to follow Envoy's best practices (#8944 ) with explicit recommendations to enable `normalize_path`, `merge_slashes`, and `path_with_escaped_slashes_action`. Signed-off-by: Johan Fylling <johan.dev@fylling.se>	2026-07-24 21:37:58 +02:00
dependabot[bot]	564a187c1f	build(deps): bump fast-uri from 3.1.2 to 3.1.4 in /docs (#8930 ) Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fastify/fast-uri/releases">fast-uri's releases</a>.</em></p> <blockquote> <h2>v3.1.4</h2> <h2>⚠️ Security Release</h2> <p>Fix for <a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx">https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx</a></p> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4">https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4</a></p> <h2>v3.1.3</h2> <h2>⚠️ Security Release</h2> <ul> <li>Fixes: <a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6">https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3">https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fastify/fast-uri/commit/6aeece669e4166b2446a89f17c07a3b15dfb7ed4"><code>6aeece6</code></a> Bumped v3.1.4</li> <li><a href="https://github.com/fastify/fast-uri/commit/2d50fbabc80e4d0884fe0f6a98fe118ce6faa353"><code>2d50fba</code></a> fix: reject literal backslash in URI authority</li> <li><a href="https://github.com/fastify/fast-uri/commit/0549fe35b0d482233f3be2816439f3ec803603fa"><code>0549fe3</code></a> Bumped v3.1.3</li> <li><a href="https://github.com/fastify/fast-uri/commit/2a6d357a18a68e6d812824379fd3388a1ae50d05"><code>2a6d357</code></a> Merge commit from fork</li> <li>See full diff in <a href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fast-uri&package-manager=npm_and_yarn&previous-version=3.1.2&new-version=3.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 16:20:04 -05:00
dependabot[bot]	16b238da79	build(deps): bump dompurify from 3.4.11 to 3.4.12 in /docs (#8929 ) Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.11 to 3.4.12. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cure53/DOMPurify/releases">dompurify's releases</a>.</em></p> <blockquote> <h2>DOMPurify 3.4.12</h2> <ul> <li>Fixed an issue where a hook would not get called for custom elements, thanks <a href="https://github.com/Rikuxx0"><code>@Rikuxx0</code></a></li> <li>Hardened the handling of hooks removing elements, <a href="https://github.com/mkrause-bee360"><code>@mkrause-bee360</code></a></li> <li>Added support for a few new SVG attributes, thanks <a href="https://github.com/cbn-falias"><code>@cbn-falias</code></a> & <a href="https://github.com/Develop-KIM"><code>@Develop-KIM</code></a></li> <li>Hardened the handling of declarative partial updates</li> <li>Updated the documentation is several spots, README, wiki, etc.</li> <li>Bumped several dependencies where possible</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cure53/DOMPurify/commit/a9ca1e537422319a557a9a2aa61f003b23b4a197"><code>a9ca1e5</code></a> release: 3.4.12 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1537">#1537</a>)</li> <li>See full diff in <a href="https://github.com/cure53/DOMPurify/compare/3.4.11...3.4.12">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dompurify&package-manager=npm_and_yarn&previous-version=3.4.11&new-version=3.4.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 16:19:50 -05:00
dependabot[bot]	522a91ed63	build(deps): bump svgo from 3.3.3 to 3.3.4 in /docs (#8928 ) Bumps [svgo](https://github.com/svg/svgo) from 3.3.3 to 3.3.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/svg/svgo/releases">svgo's releases</a>.</em></p> <blockquote> <h2>v3.3.4</h2> <h2>What's Changed</h2> <h3>Security</h3> <ul> <li><a href="https://svgo.dev/docs/plugins/removeScripts/">removeScriptElement</a>, remove JavaScript URIs case-insensitively and make <code><script></code> handling namespace aware. By <a href="https://github.com/SethFalco"><code>@SethFalco</code></a></li> </ul> <h2>Support</h2> <p>SVGO v3 is not officially supported, please consider upgrading to SVGO v4 instead. We've backported this fix as there are security implications, but there is no commitment to do this for more complex changes in future.</p> <p>Consider reading our <a href="https://svgo.dev/docs/migrations/migration-from-v3-to-v4/">Migration Guide from v3 to v4</a> which should ease the process.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/svg/svgo/commit/72a23886b4698b27624b936f3a15a80afd36d75f"><code>72a2388</code></a> Merge commit from fork</li> <li>See full diff in <a href="https://github.com/svg/svgo/compare/v3.3.3...v3.3.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=svgo&package-manager=npm_and_yarn&previous-version=3.3.3&new-version=3.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 16:19:31 -05:00
dependabot[bot]	1a5a35eb13	build(deps): bump markdown-it and markdownlint-cli2 in /docs (#8923 ) Bumps [markdown-it](https://github.com/markdown-it/markdown-it) to 14.3.0 and updates ancestor dependency [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2). These dependencies need to be updated together. Updates `markdown-it` from 14.1.1 to 14.3.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md">markdown-it's changelog</a>.</em></p> <blockquote> <h2>[14.3.0] - 2026-07-02</h2> <h3>Changed</h3> <ul> <li>Reworked build pipeline & tools.</li> <li>Added source maps.</li> <li>Bumped <code>linkify-it</code> to 5.0.2.</li> </ul> <h3>Fixed</h3> <ul> <li>Preserve backslash-space hard line breaks, matching CommonMark 6.7, <a href="https://redirect.github.com/markdown-it/markdown-it/issues/1185">#1185</a>.</li> </ul> <h2>[14.2.0] - 2026-05-24</h2> <h3>Added</h3> <ul> <li><code>isPunctCharCode</code> to utilities.</li> </ul> <h3>Fixed</h3> <ul> <li>Don't end HTML comment blocks on a blank line, <a href="https://redirect.github.com/markdown-it/markdown-it/issues/1155">#1155</a>.</li> <li>Properly recognize astral chars (surrogates) in delimiter scans for emphasis-like markers, <a href="https://redirect.github.com/markdown-it/markdown-it/issues/1072">#1072</a>. Big thanks to <a href="https://github.com/tats-u"><code>@tats-u</code></a> for his global efforts with improving CJK support.</li> <li>Preserve unicode whitespaces when trimm headings/paragraphs, <a href="https://redirect.github.com/markdown-it/markdown-it/issues/1074">#1074</a>.</li> <li>More strict entities decode to avoid false positives <code>;</code>, <a href="https://redirect.github.com/markdown-it/markdown-it/issues/1096">#1096</a>.</li> <li>Restore block parser state on fail in <code>lheading</code> rule, <a href="https://redirect.github.com/markdown-it/markdown-it/issues/1131">#1131</a>.</li> </ul> <h3>Security</h3> <ul> <li>Fixed poor smartquotes perfomance on > 70k quotes in single block</li> <li>Bumped linkify-it to 5.0.1 with fixed potential perfomance issues.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/markdown-it/markdown-it/commit/ff0ee084fc6b0d10fac049fa562bc2925b5cc723"><code>ff0ee08</code></a> 14.3.0 released</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/52e2749ab25aaf841bf74b50560929aa93b8e14d"><code>52e2749</code></a> Bump linkify-it / vite deps</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/56c2404e6d3e78632ce7b37a95f289fc04330c76"><code>56c2404</code></a> fix: keep backslash-space hard line break (CommonMark 6.7) (<a href="https://redirect.github.com/markdown-it/markdown-it/issues/1185">#1185</a>)</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/0fbb18b23145158a39255f7476c781dbce320a16"><code>0fbb18b</code></a> Bump vite from 8.0.14 to 8.0.16 (<a href="https://redirect.github.com/markdown-it/markdown-it/issues/1181">#1181</a>)</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/83450e2bc3836ad9f68f652e5685031e9dce4897"><code>83450e2</code></a> Rework benchmark deps and bump versions</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/57a68632ce317593fe316b7131105b131691b90b"><code>57a6863</code></a> benchmark => tinybench</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/7608db19a5b14f84b47b34cced43c574b1abfd0c"><code>7608db1</code></a> Update CI config</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/9d8eb42a72e0e576125733acc7ae6154e8f6cb5a"><code>9d8eb42</code></a> Added package-lock and updated versions to latest possible</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/0aee70db5e8284c84201d39d64c2b14228fd280a"><code>0aee70d</code></a> lint: enable <code>@stylistic/no-multi-spaces</code> rule</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/88789854dc44db99b7736fd4349487dfda0d4067"><code>8878985</code></a> lint => neostandard</li> <li>Additional commits viewable in <a href="https://github.com/markdown-it/markdown-it/compare/14.1.1...14.3.0">compare view</a></li> </ul> </details> <br /> Updates `markdownlint-cli2` from 0.22.1 to 0.23.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md">markdownlint-cli2's changelog</a>.</em></p> <blockquote> <h2>0.23.1</h2> <ul> <li>Show attempted fix counts after fixing</li> <li>Update dependencies (including <code>markdownlint</code>)</li> </ul> <h2>0.23.0</h2> <ul> <li>Add <code>overrides</code> configuration option</li> <li>Improve options/configuration file handling</li> <li>Update dependencies (including <code>markdownlint</code>)</li> <li>Remove support for end-of-life Node 20</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/06f92c99e930c11230426b5edd775021d25e08a8"><code>06f92c9</code></a> Update to version 0.23.1.</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/a77352640f8667a658349c68d14db1368c6b22ba"><code>a773526</code></a> Freshen list of external custom rules included with the markdownlint-cli2-rul...</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/437b0caae2b2f39d061309567f99f9c23eb1f1e5"><code>437b0ca</code></a> Bump eslint-plugin-jsdoc from 63.0.11 to 63.0.12</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/5463e0fa275b9105ed02dbae9ea6848d062d1c1e"><code>5463e0f</code></a> Bump eslint-plugin-unicorn from 70.0.0 to 71.0.0</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/b04ac138a26acc3f65a5e5482825cc938885b7b9"><code>b04ac13</code></a> Bump globby from 16.2.0 to 16.2.1</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/1e63f97b080fc2aac9a426379e96e82542cf78a8"><code>1e63f97</code></a> Revert commit afb7d9898724f0d96279116bbb6f0d1026fff8df "Pin CI workflow's pnp...</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/040594ba722e8d319c2e172bf9771d1ba8474d51"><code>040594b</code></a> Update dependency: markdownlint to 0.41.1.</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/4d97fa85a1eff2af23011c7f4838738332847f64"><code>4d97fa8</code></a> Address new ESLint warnings from previous commit.</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/50cb033a960853cde873c8895849cae94e9f0db7"><code>50cb033</code></a> Bump eslint-node-test from 0.1.0 to 0.2.0</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/a53bf04386f8980a027bbb2ed198a5361dbe2b55"><code>a53bf04</code></a> Bump eslint-plugin-jsdoc from 63.0.10 to 63.0.11</li> <li>Additional commits viewable in <a href="https://github.com/DavidAnson/markdownlint-cli2/compare/v0.22.1...v0.23.1">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 15:50:21 -05:00
dependabot[bot]	5266415db0	build(deps): bump webpack-dev-server from 5.2.5 to 5.2.6 in /docs (#8922 ) Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.5 to 5.2.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases">webpack-dev-server's releases</a>.</em></p> <blockquote> <h2>v5.2.6</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: allow <code>undefined</code> as the <code>Server</code> constructor <code>options</code> argument again (by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5695">#5695</a>)</p> <p>Restores accepting <code>undefined</code> (defaulting it to <code>{}</code>) for the <code>options</code> argument, so passing a webpack config's optional <code>devServer</code> field type-checks and works as before.</p> </li> <li> <p>Protect the built-in state-changing routes (<code>/webpack-dev-server/invalidate</code> and <code>/webpack-dev-server/open-editor</code>) against cross-site request forgery. Requests are now checked with <code>Sec-Fetch-Site</code> (falling back to an <code>Origin</code>/<code>Host</code> comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5698">#5698</a>)</p> </li> <li> <p>Handle malformed <code>Host</code> and <code>Origin</code> header values gracefully when validating requests. (by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5699">#5699</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/blob/v5.2.6/CHANGELOG.md">webpack-dev-server's changelog</a>.</em></p> <blockquote> <h2>5.2.6</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: allow <code>undefined</code> as the <code>Server</code> constructor <code>options</code> argument again (by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5695">#5695</a>)</p> <p>Restores accepting <code>undefined</code> (defaulting it to <code>{}</code>) for the <code>options</code> argument, so passing a webpack config's optional <code>devServer</code> field type-checks and works as before.</p> </li> <li> <p>Protect the built-in state-changing routes (<code>/webpack-dev-server/invalidate</code> and <code>/webpack-dev-server/open-editor</code>) against cross-site request forgery. Requests are now checked with <code>Sec-Fetch-Site</code> (falling back to an <code>Origin</code>/<code>Host</code> comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5698">#5698</a>)</p> </li> <li> <p>Handle malformed <code>Host</code> and <code>Origin</code> header values gracefully when validating requests. (by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5699">#5699</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/webpack-dev-server/commit/8a37b0ed89d07ca81532188fe19f080a2ee51475"><code>8a37b0e</code></a> chore(release): new release (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5697">#5697</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/f21ed0f44aceb6132abb591ee8b60d770b6e489f"><code>f21ed0f</code></a> fix: handle malformed Host and Origin headers (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5699">#5699</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/80cd9eea54975fe632a518d8bd902a260f374e7c"><code>80cd9ee</code></a> fix: reject cross-site requests to open-editor and invalidate endpoints (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5698">#5698</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/308e853808fc8f5d0722276e1a87aa73c91859a5"><code>308e853</code></a> fix: handle undefined options in Server constructor (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5695">#5695</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/8b2b9151f41e0d6157c8bd051cf5f16bce5dba17"><code>8b2b915</code></a> chore: update branch references from v4 to v5 in workflow configuration</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/870ed2258dda612c8feeaf8d971afd08233696ad"><code>870ed22</code></a> chore: add v5 branch to release workflow triggers</li> <li>See full diff in <a href="https://github.com/webpack/webpack-dev-server/compare/v5.2.5...v5.2.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack-dev-server&package-manager=npm_and_yarn&previous-version=5.2.5&new-version=5.2.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 11:26:13 -05:00
dependabot[bot]	33fc04b53a	build(deps): bump body-parser from 1.20.4 to 1.20.6 in /docs (#8920 ) Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.4 to 1.20.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/body-parser/releases">body-parser's releases</a>.</em></p> <blockquote> <h2>1.20.6</h2> <h2>Important: Security</h2> <ul> <li>Security fix for <a href="https://www.cve.org/CVERecord?id=CVE-2025-13466">CVE-2026-12590</a> (<a href="https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6">GHSA-v422-hmwv-36x6</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>fix: improve limit option validation by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/741">expressjs/body-parser#741</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6">https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6</a></p> <h2>v1.20.5</h2> <h2>What's Changed</h2> <p>The reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (> 100) on qs@6.14.2+. (<a href="https://redirect.github.com/expressjs/body-parser/pull/716">expressjs/body-parser#716</a>)</p> <ul> <li>refactor(json): simplify strict mode error string construction by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/692">expressjs/body-parser#692</a></li> <li>fix: correct off-by-one error in parameterCount by <a href="https://github.com/abhu85"><code>@abhu85</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/716">expressjs/body-parser#716</a></li> <li>deps(qs): bump qs to 6.15.1 by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/722">expressjs/body-parser#722</a></li> <li>Release: 1.20.5 by <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/721">expressjs/body-parser#721</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/abhu85"><code>@abhu85</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/body-parser/pull/716">expressjs/body-parser#716</a></li> </ul> <p>Special thanks to triager <a href="https://github.com/krzysdz"><code>@krzysdz</code></a> for keeping this on our radar and effectively triaging the specific issue!</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5">https://github.com/expressjs/body-parser/compare/1.20.4...1.20.5</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/body-parser/blob/master/HISTORY.md">body-parser's changelog</a>.</em></p> <blockquote> <h1>1.20.6 / 2026-07-09</h1> <ul> <li>Security fix for <a href="https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6">GHSA-v422-hmwv-36x6</a></li> <li>fix: improve <code>limit</code> option validation (<a href="https://redirect.github.com/expressjs/body-parser/issues/698">#698</a>) <ul> <li>Invalid <code>limit</code> values (e.g. unparseable strings or <code>NaN</code>) now throw instead of being silently ignored, which previously disabled size limit enforcement</li> <li><code>null</code> and <code>undefined</code> fall back to the default 100kb limit</li> </ul> </li> </ul> <h1>1.20.5 / 2026-04-24</h1> <ul> <li>refactor(json): simplify strict mode error string construction</li> <li>fix: extended urlencoded parsing of arrays with >100 elements (<a href="https://redirect.github.com/expressjs/body-parser/issues/716">#716</a>)</li> <li>deps: qs@~6.15.1</li> <li></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43"><code>5cc4fb8</code></a> 1.20.6 (<a href="https://redirect.github.com/expressjs/body-parser/issues/746">#746</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac"><code>3492672</code></a> fix: improve limit option validation (<a href="https://redirect.github.com/expressjs/body-parser/issues/741">#741</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/0defdbe7f95ad0d3bc007d3a7c59c8c0ab9e6575"><code>0defdbe</code></a> release(patch): 1.20.5</li> <li><a href="https://github.com/expressjs/body-parser/commit/cd0e7a000c53e7be7262d303e57a352b6a00db7f"><code>cd0e7a0</code></a> deps(qs): bump qs to 6.15.1</li> <li><a href="https://github.com/expressjs/body-parser/commit/6f24d7e8bcd9860b136920926ce86da1a7dd1d51"><code>6f24d7e</code></a> fix: correct off-by-one error in parameterCount (<a href="https://redirect.github.com/expressjs/body-parser/issues/716">#716</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/b849bd533d8b4abf5576a3e301f28d9befa05ddd"><code>b849bd5</code></a> deps: qs@~6.14.1 (<a href="https://redirect.github.com/expressjs/body-parser/issues/690">#690</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/2c55e2f712f320a8e8d0f9fcb1d06526d0e401c9"><code>2c55e2f</code></a> refactor(json): simplify strict mode error string construction (<a href="https://redirect.github.com/expressjs/body-parser/issues/692">#692</a>)</li> <li>See full diff in <a href="https://github.com/expressjs/body-parser/compare/1.20.4...1.20.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=body-parser&package-manager=npm_and_yarn&previous-version=1.20.4&new-version=1.20.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 11:15:54 -05:00
dependabot[bot]	bf3769c64f	build(deps): bump shell-quote from 1.8.4 to 1.10.0 in /docs (#8921 ) Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.4 to 1.10.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md">shell-quote's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0">v1.10.0</a> - 2026-07-10</h2> <h3>Merged</h3> <ul> <li>[New] <code>parse</code>: add opt-in <code>splitUnquoted</code> option for shell field-splitting of unquoted expansions <a href="https://redirect.github.com/ljharb/shell-quote/pull/1"><code>[#1](https://github.com/ljharb/shell-quote/issues/1)</code></a></li> </ul> <h3>Commits</h3> <ul> <li>[Fix] <code>parse</code>: match nested <code>${...}</code> braces so nested parameter expansion is consumed as one substitution <a href="https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c"><code>c0842c8</code></a></li> <li>[Tests] <code>parse</code>: pin single-quote literalness and unmatched-quote handling <a href="https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62"><code>a0d03e3</code></a></li> <li>[readme] remove the space in js code fences so evalmd evaluates them <a href="https://github.com/ljharb/shell-quote/commit/2116fa36aeea77fe8d561b0db46b1f9b26b8cf1b"><code>2116fa3</code></a></li> <li>[Tests] <code>quote</code>: pin conservative escaping of <code>=</code>, <code>@</code>, <code>^</code>, <code>,</code>, <code>:</code>, <code>!</code> (<a href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>) <a href="https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e"><code>1c36f3f</code></a></li> <li>[readme] document that <code>quote</code> outputs POSIX quoting, not <code>cmd.exe</code>/PowerShell <a href="https://github.com/ljharb/shell-quote/commit/100e96e0ffadcca97d63dda15651c70b9f83507c"><code>100e96e</code></a></li> <li>[readme] document <code>parse</code>'s supported parameter-expansion subset <a href="https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb"><code>e1c75cd</code></a></li> <li>[Fix] <code>parse</code>: a backslash inside single quotes must not escape the closing quote <a href="https://github.com/ljharb/shell-quote/commit/5d460a332b54b83153297fe7d1964330b28fa491"><code>5d460a3</code></a></li> <li>[readme] fix stale example outputs <a href="https://github.com/ljharb/shell-quote/commit/2de86f5d44f44d3ac9df36413d8a05f3534cdec6"><code>2de86f5</code></a></li> <li>[Tests] <code>quote</code>: pin that a backslash with whitespace is not doubled in single quotes (<a href="https://redirect.github.com/ljharb/shell-quote/issues/14">#14</a>) <a href="https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71"><code>190e236</code></a></li> <li>[readme] <code>quote</code>: use output verbatim; do not re-quote it (<a href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>) <a href="https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5"><code>1b36468</code></a></li> <li>[Refactor] <code>parse</code>: fix swapped <code>SINGLE_QUOTE</code>/<code>DOUBLE_QUOTE</code> variable names <a href="https://github.com/ljharb/shell-quote/commit/801af5c935b27d6dcda63b3975d5e92a7b6f887f"><code>801af5c</code></a></li> <li>[types] fix an error TS v6 ignores but v7 fails on <a href="https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba"><code>59bbf8b</code></a></li> <li>[Dev Deps] update <code>@arethetypeswrong/cli</code>, <code>evalmd</code> <a href="https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc"><code>a04d475</code></a></li> <li>[Dev Deps] update <code>@arethetypeswrong/ci</code>, <code>eslint</code> <a href="https://github.com/ljharb/shell-quote/commit/d390f9a92b97a04b1f799298634e90dc581021e6"><code>d390f9a</code></a></li> <li>[Tests] <code>quote</code>: the tilde test escapes every <code>~</code>, not just a leading one (<a href="https://redirect.github.com/ljharb/shell-quote/issues/9">#9</a>) <a href="https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c"><code>617d119</code></a></li> </ul> <h2><a href="https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.9.0">v1.9.0</a> - 2026-06-24</h2> <h3>Commits</h3> <ul> <li>[New] add types <a href="https://github.com/ljharb/shell-quote/commit/dca6e21a02df4cc1a83ed1b5baa4d82df134170a"><code>dca6e21</code></a></li> <li>[Dev Deps] update <code>eslint</code> <a href="https://github.com/ljharb/shell-quote/commit/9aa9e8f60991f8c4053a29e476795d891ff851ad"><code>9aa9e8f</code></a></li> <li>[Fix] <code>parse</code>: finalize tokens in linear time (GHSA-395f-4hp3-45gv) <a href="https://github.com/ljharb/shell-quote/commit/7ff5488599d01c323514f02f5efb74088dd134ec"><code>7ff5488</code></a></li> <li>[actions] update workflows <a href="https://github.com/ljharb/shell-quote/commit/75e849741ffaf2d3aa53ae0e18ef6bf9929ef478"><code>75e8497</code></a></li> <li>[actions] Windows + node 4/6/7: pin eslint to 9 before install, since npm 2/3 cannot stage eslint 10<code>@types/esrecurse</code> <a href="https://github.com/ljharb/shell-quote/commit/3fb739de44b81c69431947d54fbfc18998dd6d72"><code>3fb739d</code></a></li> <li>[actions] retry <code>npm install</code> on Windows to survive npm 2/3 staging-rename flake <a href="https://github.com/ljharb/shell-quote/commit/abe0163293c82963fa8a16cfaa87181846d5aced"><code>abe0163</code></a></li> <li>[actions] Windows + node 5/7: install deps with a modern node <a href="https://github.com/ljharb/shell-quote/commit/b4bafa2e7e58d53d9839b1c24976f61e54b43326"><code>b4bafa2</code></a></li> <li>[Fix] <code>quote</code>: escape leading <code>~</code> to prevent shell tilde-expansion <a href="https://github.com/ljharb/shell-quote/commit/7a76c1a12d8461c2234a1c655b943cee84cbff91"><code>7a76c1a</code></a></li> <li>[Dev Deps] update <code>auto-changelog</code>, <code>tape</code> <a href="https://github.com/ljharb/shell-quote/commit/7184b4458b65c17b931e126d8cb5f586c6717dc8"><code>7184b44</code></a></li> <li>[Dev Deps] apparently <code>jackspeak</code> is no longer in the graph <a href="https://github.com/ljharb/shell-quote/commit/9ba368a4057b9f498b0fef23b5b15543ef81b98c"><code>9ba368a</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ljharb/shell-quote/commit/64988d9a0e73a2ae710488952e3614958ef289d4"><code>64988d9</code></a> v1.10.0</li> <li><a href="https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c"><code>617d119</code></a> [Tests] <code>quote</code>: the tilde test escapes every <code>~</code>, not just a leading one (<a href="https://redirect.github.com/ljharb/shell-quote/issues/9">#9</a>)</li> <li><a href="https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba"><code>59bbf8b</code></a> [types] fix an error TS v6 ignores but v7 fails on</li> <li><a href="https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71"><code>190e236</code></a> [Tests] <code>quote</code>: pin that a backslash with whitespace is not doubled in singl...</li> <li><a href="https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc"><code>a04d475</code></a> [Dev Deps] update <code>@arethetypeswrong/cli</code>, <code>evalmd</code></li> <li><a href="https://github.com/ljharb/shell-quote/commit/b9545b39f4de17aa169410823c98acf58387e474"><code>b9545b3</code></a> [New] <code>parse</code>: add opt-in <code>splitUnquoted</code> option for shell field-splitting of...</li> <li><a href="https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5"><code>1b36468</code></a> [readme] <code>quote</code>: use output verbatim; do not re-quote it (<a href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)</li> <li><a href="https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e"><code>1c36f3f</code></a> [Tests] <code>quote</code>: pin conservative escaping of <code>=</code>, <code>@</code>, <code>^</code>, <code>,</code>, <code>:</code>, <code>!</code> (<a href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)</li> <li><a href="https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb"><code>e1c75cd</code></a> [readme] document <code>parse</code>'s supported parameter-expansion subset</li> <li><a href="https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c"><code>c0842c8</code></a> [Fix] <code>parse</code>: match nested <code>${...}</code> braces so nested parameter expansion is ...</li> <li>Additional commits viewable in <a href="https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.10.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote&package-manager=npm_and_yarn&previous-version=1.8.4&new-version=1.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 11:13:08 -05:00
dependabot[bot]	8c750eb490	build(deps): bump js-yaml from 5.1.0 to 5.2.1 in /docs (#8914 ) Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.1.0 to 5.2.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md">js-yaml's changelog</a>.</em></p> <blockquote> <h2>[5.2.1] - 2026-07-02</h2> <h3>Fixed</h3> <ul> <li>Add <code>Map</code> support to !!omap (should work when <code>realMapTag</code> used)</li> </ul> <h3>Security</h3> <ul> <li>Remove quadratic complexity from !!omap <code>addItem</code>. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).</li> </ul> <h2>4.3.0, 3.15.0 - 2026-06-27</h2> <h3>Security</h3> <ul> <li>Backported <code>maxTotalMergeKeys</code> option.</li> </ul> <h2>[5.2.0] - 2026-06-26</h2> <h3>Added</h3> <ul> <li>Added <code>maxTotalMergeKeys</code> (10000) loader option to limit the total number of keys processed by YAML merge (<code><<</code>) across one <code>load()</code> / <code>loadAll()</code> call.</li> <li>Added <code>maxAliases</code> (-1) loader option to limit the number of YAML aliases per document.</li> </ul> <h3>Removed</h3> <ul> <li><code>maxMergeSeqLength</code> replaced with <code>maxTotalMergeKeys</code> for limiting YAML merge processing.</li> </ul> <h3>Fixed</h3> <ul> <li>Round-trip of integers with exponential form (>= <code>1e21</code>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodeca/js-yaml/commit/ac16b42c46c11c5c7f66062bfc78b168b5f07ecd"><code>ac16b42</code></a> 5.2.1 released</li> <li><a href="https://github.com/nodeca/js-yaml/commit/4a864e55eec5044da67ca95a13f48c73e9ae8c0d"><code>4a864e5</code></a> Deps bump</li> <li><a href="https://github.com/nodeca/js-yaml/commit/39f3211a2f01b3c6982710cf21434ab7060acefe"><code>39f3211</code></a> !!omap: add <code>Map</code> support and remove quadratic complexity</li> <li><a href="https://github.com/nodeca/js-yaml/commit/ff17f1e5bbd1d0dcfb9567ff4526f7206a666f7b"><code>ff17f1e</code></a> Changelog update</li> <li><a href="https://github.com/nodeca/js-yaml/commit/8ed15f1cf6a0f1818ea4c0cd5d3973e87af2158f"><code>8ed15f1</code></a> deps bump</li> <li><a href="https://github.com/nodeca/js-yaml/commit/1a562dc14cac81354643e45936cde968b6da324c"><code>1a562dc</code></a> Fix changelog link</li> <li><a href="https://github.com/nodeca/js-yaml/commit/c28ed5ec1aa66a37b8202e17d0caa122922a1b00"><code>c28ed5e</code></a> 5.2.0 released</li> <li><a href="https://github.com/nodeca/js-yaml/commit/125cd5ab9f1355d4edaf6d95bf3a7099dc333d35"><code>125cd5a</code></a> Add <code>maxAliases</code> option</li> <li><a href="https://github.com/nodeca/js-yaml/commit/3105455b81dee69e0fd36e09ac0b2ccfdb54adc1"><code>3105455</code></a> Replace <code>maxMergeSeqLength</code>option with <code>maxTotalMergeKeys</code> (more robust)</li> <li><a href="https://github.com/nodeca/js-yaml/commit/39d00d65eb6b88362a5c806cea57541e687aaccb"><code>39d00d6</code></a> numbers: Drop boxed numbers support, simplify .identify() checks, clarify rou...</li> <li>Additional commits viewable in <a href="https://github.com/nodeca/js-yaml/compare/5.1.0...5.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=js-yaml&package-manager=npm_and_yarn&previous-version=5.1.0&new-version=5.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 10:14:52 -05:00
Charlie Egan	efebe8044d	docs: Some minor bug fixes to improve reporting (#8917 ) Signed-off-by: Charlie Egan <charlie_egan@apple.com>	2026-07-21 10:49:44 +00:00
Oluwajuwon Omotayo	4cefcaff21	ecosystem: add agt-policies-africa — African data protection OPA policy pack (#8850 ) ### Why the changes in this PR are needed? The OPA Ecosystem page has no coverage of African data protection regulations or AI agent compliance in the African context. Nine African data protection laws are now in force (Nigeria NDPA 2023, Kenya DPA 2019, Ghana Act 843, Rwanda Law 058/2021, Egypt PDPL 151/2020, Mauritius DPA 2017, South Africa POPIA, Tanzania PDPA 2022, Uganda DPPA 2019), and developers building AI agents for African markets have no discoverable OPA policy reference for these jurisdictions. This entry surfaces an existing open-source resource to that audience directly on openpolicyagent.org/ecosystem. ### What are the changes in this PR? Adds a single ecosystem entry file: - `docs/src/data/ecosystem/entries/agt-policies-africa.md` The entry covers: - 9 African jurisdictions, each with a Rego policy and a full `opa test` suite (140+ tests) - Decision semantics: `deny / escalate / audit / allow` — structured for AI agent runtimes - Highlights two OPA docs features: `policy-testing` and `learning-rego` - Uses `allow_missing_image: true` (no logo file included — same pattern as `awesome-opa.md`) ### Notes to assist PR review: - No docs page, sidebar, or Go code changes — ecosystem entry only - Ecosystem entries are auto-discovered; no `sidebars.js` update required - The project is already listed in `awesome-opa` (PR #82, merged June 2026), so the URL is established ### Further comments: The project's primary audience is developers building AI agents for Nigerian and broader African fintech/financial markets, where data residency, transaction-limit enforcement, and PII protection (BVN/NIN/national IDs) are regulatory requirements. OPA is used as the policy decision engine via the REST API and Go SDK. The ecosystem entry brings this niche but growing use case into the discoverability of the OPA ecosystem page alongside other security and compliance tools. I have read the project's [AI tool use guidelines](https://www.openpolicyagent.org/docs/contrib-code#ai-guidelines). Claude Code was used to assist with formatting; all content reflects my own work and understanding of the referenced regulations. --------- Signed-off-by: oluwajuwon omotayo <ginuxtechacademy@gmail.com> Signed-off-by: Charlie Egan <charlie_egan@apple.com> Co-authored-by: Charlie Egan <charlie_egan@apple.com>	2026-07-17 09:43:16 -05:00
Charlie Egan	c7231bdd0b	docs: Update regal and blog links (#8901 ) Updates to latest regal release and makes some changes to blog.openpolicyagent.org links too. --------- Signed-off-by: Charlie Egan <charlie_egan@apple.com>	2026-07-17 09:04:19 -05:00
Charlie Egan	d9ba5b4891	website: Import blog from medium (#8898 ) This PR imports the blogs from https://medium.com/open-policy-agent into the docusaurus site. This is being done as the blog has stopped working due to the custom domain hosting feature being removed from our tier. The pages have been imported from manually downloaded webarchive files from each post to ensure we captured the assets and rendered code example too. --------- Signed-off-by: Charlie Egan <charlie_egan@apple.com>	2026-07-16 12:01:24 +01:00
dependabot[bot]	cf938e0ba8	build(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /docs (#8899 ) Bumps [websocket-driver](https://github.com/faye/websocket-driver-node) from 0.7.4 to 0.7.5. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md">websocket-driver's changelog</a>.</em></p> <blockquote> <h3>0.7.5 / 2026-06-04</h3> <ul> <li>Close a draft-75/76 connection if a length header grows to exceed the configured max length</li> <li>Fail the connection if a message is larger than the configured max length after extension processing</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/faye/websocket-driver-node/commit/5d6a9aaf5f019007d917bd9ddc7eeb775c86cc1f"><code>5d6a9aa</code></a> Bump version to 0.7.5</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/c55679a5b18251dd0a55d18a0cc6a4fd8822b92f"><code>c55679a</code></a> Fail the connection if a message is larger than the configured max length aft...</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/5b197ca874dab58e96cacad8a3c256797d804680"><code>5b197ca</code></a> Close a draft-75/76 connection if a length header grows to exceed the configu...</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/fc93a48f879d0fd4a77c687a4a19c4328613df65"><code>fc93a48</code></a> Test on Node v22, v24, and v26</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/2e82d3464d294bdd11202657208636e667212335"><code>2e82d34</code></a> Test on recent versions of Node</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/e4962db9940ad1a8cf6fe8328d3b81c3f8c37479"><code>e4962db</code></a> Switch from Travis CI to GitHub Actions</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/3f2f9b70a8ae999b4657d26316a5d45b7caea679"><code>3f2f9b7</code></a> Travis update: cache npm modules, remove sudo, run on Node 15</li> <li>See full diff in <a href="https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=websocket-driver&package-manager=npm_and_yarn&previous-version=0.7.4&new-version=0.7.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-15 19:36:12 -05:00
Sebastian Spaink	8e2f1807ac	config: validate configuration with Rego and warn on unknown options (#8891 ) Part of #2745 Like most of his ideas, @anderseknert's suggestion to use Rego to replace the `validateAndInjectDefaults` functions throughout the codebase is another winner. This PR starts the migration by replacing the top-level `validateAndInjectDefaults` in `v1/config/config.go` with an embedded policy, `validate.rego`. The policy injects the top-level defaults (`default_decision`, `default_authorization_decision`, `labels`) and reports unrecognized configuration options, so a typo such as `decision_log` instead of `decision_logs` is logged as a warning at startup rather than silently ignored. It's evaluated in `ParseConfig` using the low-level `ast`/`topdown` packages rather than the top-level `rego` package. This keeps `config` off the heavy `rego → bundle → …` dependency web (which would otherwise create import cycles as more packages' tests reach `config`), and we don't need any of the `rego` package's conveniences here — it's one module compiled once and a single query. The Rego unit tests run in CI via `build/run-rego-tests.sh` (and locally with `make rego-test`). This sets the foundation for the other plugin `validateAndInjectDefaults` functions to migrate to Rego as well; where the logic isn't too complicated it should be a fairly easy replacement. At the moment all known keys live in `validate.rego` under `_specs` to support the "warn on unrecognized options" check, but the plugin-specific entries can move closer to each plugin as it migrates. It would also be nice for `_specs` to be auto-generated somehow in the future. Supporting extension of config validation with custom policies is something I'd like to follow up with, so keeping #2745 open for now. I also think these policies could be reusable with [java-opa-sdk](https://github.com/open-policy-agent/java-opa-sdk) 👀 Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>	2026-07-15 11:16:03 -05:00
Sebastian Spaink	b4d15e0c25	ast: Fix non-deterministic type errors when shadowing a built-in (#8880 ) Fixes: #3729 A variable that shadows a built-in name (e.g. `count`) via `=` unification was left un-rewritten, so later stages could mistake it for the built-in and raise spurious type errors -- non-deterministically, due to map iteration order in Graph.Sort. Rewrite such body-bound variables to fresh locals, and make Graph.Sort deterministic by ordering nodes before the topological sort. --------- Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>	2026-07-13 14:29:20 +00:00
Nikhil Jathar	8b147a63bb	The Zed Rego extension link points at github.com/StyraInc/zed-rego (404). The repo now lives at github.com/StyraOSS/zed-rego. Signed-off-by: Nikhil Jathar <22786232+mailnike@users.noreply.github.com>	2026-07-13 08:30:58 +02:00
Charlie Egan	e8c3e104fa	docs: Add kubecon NA page (#8876 ) This page will be linked to from the kiosk at KubeCon. https://deploy-preview-8876--openpolicyagent.netlify.app/events/2026-kubecon-na Signed-off-by: Charlie Egan <charlie_egan@apple.com>	2026-07-09 13:56:05 +01:00
Charlie Egan	39fcb030e5	docs: Add Ghostunnel and NATS Plugin to Ecosystem (#8871 ) Signed-off-by: Charlie Egan <charlie_egan@apple.com>	2026-07-08 18:06:41 +01:00
SEONGHYUN HONG	deb30b103d	docs: fix decision_logs buffer_size_limit_events default in prose (#8866 ) The `decision_logs.reporting.buffer_size_limit_events` row documents its default as `10000`, but the prose in the same cell says "By default, 100 events are held". The real default is `10000` (`defaultBufferSizeLimitEvents = int64(10000)` in `v1/plugins/logs/plugin.go`), so the row was internally contradictory. This corrects the prose to match both the code and the row's own default column. Docs only. Signed-off-by: s3onghyun <s3onghyun@users.noreply.github.com>	2026-07-08 16:25:07 +00:00
Charlie Egan	7bdfe03927	runtime: Remove goautomaxprocs and automemlimit (#8869 ) The memory pressure in low resource containers this PR aimed to fix was actually caused by #8817, which was fixed in #8829. The automaxprocs/automemlimit dependencies are no longer needed as was intended in #8696. This reverts commit `88c01e659c` and updates docs to match the current behaviour. --------- Signed-off-by: Charlie Egan <charlie_egan@apple.com>	2026-07-08 14:13:57 +00:00
Charlie Egan	b0d896adec	docs: Update cheatsheet files follows https://github.com/open-policy-agent/rego-cheat-sheet/pull/13 Signed-off-by: Charlie Egan <charlie_egan@apple.com>	2026-07-08 14:32:28 +02:00
Charlie Egan	618978384d	docs: remove import rego.v1 This has not been needed in new releases for over a year. Leaving these in has a cost as it causes AI to generate rego with import rego.v1 when it's not needed. Signed-off-by: Charlie Egan <charlie_egan@apple.com>	2026-07-08 13:23:52 +02:00
Manuela Züger	e761d1711e	docs/website: Improve partial evaluation / data filtering documentation (#8625 ) ### Why the changes in this PR are needed? The issue #8316 outlines that the Partial Evaluation / Data Filtering documentation could benefit from clearer examples and explanations to better enable users to get started adopting the feature. ### What are the changes in this PR? * added a simple data filtering example to the filtering overview page to better showcase its purpose * explained the metadata annotation for unknowns and how it links to the database table and field names * added a tutorial page to provide a quick walkthrough --------- Signed-off-by: Manuela Züger <manuela.zueger@ipt.ch> Signed-off-by: Manuela Züger <79690363+mmzzuu@users.noreply.github.com> Co-authored-by: Charlie Egan <git@charlieegan3.com>	2026-07-06 15:31:42 -05:00
dependabot[bot]	e72114bbbf	build(deps): bump the website group in /docs with 4 updates (#8839 ) Bumps the website group in /docs with 4 updates: [eslint](https://github.com/eslint/eslint), [js-yaml](https://github.com/nodeca/js-yaml), [recharts](https://github.com/recharts/recharts) and [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping). Updates `eslint` from 10.4.1 to 10.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p> <blockquote> <h2>v10.5.0</h2> <h2>Features</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/5ca8c5278edea1fd84d3ba83d8ea3f52fb3831ad"><code>5ca8c52</code></a> feat: correct stack tracking in max-nested-callbacks (<a href="https://redirect.github.com/eslint/eslint/issues/20973">#20973</a>) (Pixel998)</li> <li><a href="https://github.com/eslint/eslint/commit/b5657837604fa5e8cf1278074782025cadd34b6c"><code>b565783</code></a> feat: report no-with violations at the with keyword (<a href="https://redirect.github.com/eslint/eslint/issues/20971">#20971</a>) (Pixel998)</li> <li><a href="https://github.com/eslint/eslint/commit/2ce032fbc72a1a80c024c084a4f382fb6dece684"><code>2ce032f</code></a> feat: report max-lines-per-function violations at function head (<a href="https://redirect.github.com/eslint/eslint/issues/20966">#20966</a>) (Pixel998)</li> <li><a href="https://github.com/eslint/eslint/commit/732cb3e09d5b8b809b5f461d118a5d9fdcd6427f"><code>732cb3e</code></a> feat: report max-nested-callbacks violations at function head (<a href="https://redirect.github.com/eslint/eslint/issues/20967">#20967</a>) (Pixel998)</li> <li><a href="https://github.com/eslint/eslint/commit/f9c138a0ba7d8e37aed39aef4a3ff1cae8c669f7"><code>f9c138a</code></a> feat: report max-depth violations on keywords (<a href="https://redirect.github.com/eslint/eslint/issues/20943">#20943</a>) (Pixel998)</li> <li><a href="https://github.com/eslint/eslint/commit/bdb496cc0d54b6d0a023aef9abd5f040ccff2101"><code>bdb496c</code></a> feat: correct max-depth handling for else-if chains (<a href="https://redirect.github.com/eslint/eslint/issues/20944">#20944</a>) (Pixel998)</li> <li><a href="https://github.com/eslint/eslint/commit/c29687354a7f96093f57f7d73eecb866ad5e2953"><code>c296873</code></a> feat: update error loc in <code>max-statements</code> to function header (<a href="https://redirect.github.com/eslint/eslint/issues/20907">#20907</a>) (Taejin Kim)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/8ae1b5b856dc031cd6c701d89a4df7da4772cd56"><code>8ae1b5b</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/ca7eb90127dcad917188bb1342623f02a272e781"><code>ca7eb90</code></a> docs: update Node.js prerequisites to include ICU support (<a href="https://redirect.github.com/eslint/eslint/issues/20962">#20962</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/f99b47a6799be25321552402a49303bb06a43fe4"><code>f99b47a</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/acf03d4eed31d259c7dc62af5b9640629784f7cc"><code>acf03d4</code></a> docs: clarify precedence of parserOptions over languageOptions (<a href="https://redirect.github.com/eslint/eslint/issues/20926">#20926</a>) (sethamus)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/b18bf58c5ac748415ffffdff2d96980fbd6a57e8"><code>b18bf58</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/20959">#20959</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/c2d1444df77cb42e5a0b89ab70496879d180a54d"><code>c2d1444</code></a> refactor: replace areAllSegmentsUnreachable with !isAnySegmentReachable (<a href="https://redirect.github.com/eslint/eslint/issues/20951">#20951</a>) (Taejin Kim)</li> <li><a href="https://github.com/eslint/eslint/commit/243b8c56014bbbe63771185b0731d8dd4d1316e9"><code>243b8c5</code></a> chore: enhance config-rule to support oneOf, anyOf, and nested schemas (<a href="https://redirect.github.com/eslint/eslint/issues/20788">#20788</a>) (kuldeep kumar)</li> <li><a href="https://github.com/eslint/eslint/commit/217b2a91f46137c5ffd693965e71306c4c15ea6b"><code>217b2a9</code></a> test: add unit tests for ParserService (<a href="https://redirect.github.com/eslint/eslint/issues/20949">#20949</a>) (Taejin Kim)</li> <li><a href="https://github.com/eslint/eslint/commit/72003e781d76bd4ee0d98a6601730d0b829070f9"><code>72003e7</code></a> test: add location information to error messages in <code>max-statements</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20945">#20945</a>) (lumir)</li> <li><a href="https://github.com/eslint/eslint/commit/7797c266977b0bc4971aa79721813d480de72cd1"><code>7797c26</code></a> refactor: deduplicate isAnySegmentReachable across rules (<a href="https://redirect.github.com/eslint/eslint/issues/20890">#20890</a>) (Taejin Kim)</li> <li><a href="https://github.com/eslint/eslint/commit/67c46fa6e4f34e88cc6bc82f8a0dcc917c65d257"><code>67c46fa</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/20938">#20938</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/95d8c7a99f991abd8ab618d0ee2cbd4f58effc29"><code>95d8c7a</code></a> chore: update dependency <code>@eslint/json</code> to v2 (<a href="https://redirect.github.com/eslint/eslint/issues/20934">#20934</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/cf9e496205142cd4971b9f98aed85866d1010b9c"><code>cf9e496</code></a> chore: update <code>@arethetypeswrong/cli</code> to 0.18.3 (<a href="https://redirect.github.com/eslint/eslint/issues/20933">#20933</a>) (Pixel998)</li> <li><a href="https://github.com/eslint/eslint/commit/fb6d3960cacc51fc12383fa5ded2382adbf90c1c"><code>fb6d396</code></a> test: run type tests with TypeScript 7 (<a href="https://redirect.github.com/eslint/eslint/issues/20868">#20868</a>) (sethamus)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/de3b672a267e32607db04176ce4775664acb3145"><code>de3b672</code></a> 10.5.0</li> <li><a href="https://github.com/eslint/eslint/commit/362a5185134290db696d39f97c9da609ded54040"><code>362a518</code></a> Build: changelog update for 10.5.0</li> <li><a href="https://github.com/eslint/eslint/commit/5ca8c5278edea1fd84d3ba83d8ea3f52fb3831ad"><code>5ca8c52</code></a> feat: correct stack tracking in max-nested-callbacks (<a href="https://redirect.github.com/eslint/eslint/issues/20973">#20973</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/b5657837604fa5e8cf1278074782025cadd34b6c"><code>b565783</code></a> feat: report no-with violations at the with keyword (<a href="https://redirect.github.com/eslint/eslint/issues/20971">#20971</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/2ce032fbc72a1a80c024c084a4f382fb6dece684"><code>2ce032f</code></a> feat: report max-lines-per-function violations at function head (<a href="https://redirect.github.com/eslint/eslint/issues/20966">#20966</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/732cb3e09d5b8b809b5f461d118a5d9fdcd6427f"><code>732cb3e</code></a> feat: report max-nested-callbacks violations at function head (<a href="https://redirect.github.com/eslint/eslint/issues/20967">#20967</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/f9c138a0ba7d8e37aed39aef4a3ff1cae8c669f7"><code>f9c138a</code></a> feat: report max-depth violations on keywords (<a href="https://redirect.github.com/eslint/eslint/issues/20943">#20943</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/8ae1b5b856dc031cd6c701d89a4df7da4772cd56"><code>8ae1b5b</code></a> docs: Update README</li> <li><a href="https://github.com/eslint/eslint/commit/ca7eb90127dcad917188bb1342623f02a272e781"><code>ca7eb90</code></a> docs: update Node.js prerequisites to include ICU support (<a href="https://redirect.github.com/eslint/eslint/issues/20962">#20962</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/b18bf58c5ac748415ffffdff2d96980fbd6a57e8"><code>b18bf58</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/20959">#20959</a>)</li> <li>Additional commits viewable in <a href="https://github.com/eslint/eslint/compare/v10.4.1...v10.5.0">compare view</a></li> </ul> </details> <br /> Updates `js-yaml` from 4.2.0 to 5.1.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md">js-yaml's changelog</a>.</em></p> <blockquote> <h2>[5.1.0] - 2026-06-23</h2> <h3>Added</h3> <ul> <li>Collection tags can finalize an incrementally populated carrier into a different result value.</li> </ul> <h3>Changed</h3> <ul> <li>[breaking] <code>quoteStyle</code> now selects the preferred quote style; use the restored <code>forceQuotes</code> option to force quoting non-key strings.</li> </ul> <h2>[5.0.0] - 2026-06-20</h2> <h3>Added</h3> <ul> <li>Added named exports for schemas, tags, parser events and AST utilities.</li> <li>Reworked <code>JSON_SCHEMA</code> and <code>CORE_SCHEMA</code> with spec-compliant scalar resolution rules, and added <code>YAML11_SCHEMA</code>.</li> <li>Added <code>realMapTag</code> for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.</li> <li>Added <code>dump()</code> <code>transform</code> option for changing the generated AST before rendering.</li> <li>Added <code>dump()</code> options <code>seqInlineFirst</code>, <code>flowBracketPadding</code>, <code>flowSkipCommaSpace</code>, <code>flowSkipColonSpace</code>, <code>quoteFlowKeys</code>, <code>quoteStyle</code> and <code>tagBeforeAnchor</code>.</li> <li>Added formal data layers (events and AST) for modular data pipelines. <ul> <li>Added low-level parser (to events), presenter and visitor APIs.</li> </ul> </li> <li>Added the <a href="https://github.com/yaml/yaml-test-suite">YAML Test Suite</a> to the test set.</li> </ul> <h3>Changed</h3> <ul> <li>See the <a href="https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md">migration guide</a> for upgrade notes.</li> <li>Rewritten in TypeScript and reorganized the public API around flat named exports.</li> <li>Reduced the set of exported schemas: <ul> <li>YAML 1.2 schemas: <code>CORE_SCHEMA</code> (loader default), <code>JSON_SCHEMA</code>, <code>FAILSAFE_SCHEMA</code>.</li> <li><code>YAML11_SCHEMA</code>, a combination of all YAML 1.1 tags (YAML 1.1 does not specify a schema, only "types").</li> </ul> </li> <li><code>load</code>/<code>dump</code> default behaviour is now specified exactly via schemas: <ul> <li><code>load</code> uses <code>CORE_SCHEMA</code>, without <code>!!merge</code> by default.</li> <li><code>dump</code> uses <code>YAML11_SCHEMA</code> + <code>CORE_SCHEMA</code> for the quoting check, to guarantee backward compatibility by default.</li> </ul> </li> <li><code>!!set</code> is now loaded as a JavaScript <code>Set</code>.</li> <li>Replaced the <code>Type</code> API with a tags API. Similar, but more precise and simpler. See examples for details. Tags can be defined via <code>defineScalarTag()</code>, <code>defineSequenceTag()</code> and <code>defineMappingTag()</code>, or as a spread + override of an existing tag.</li> <li>Renamed <code>Schema.extend()</code> to <code>Schema.withTags()</code>.</li> <li>Expanded YAML 1.2 conformance and improved handling of directives, document markers, block keys, multiline scalars, tag syntax and other things.</li> <li><code>load()</code> now throws on empty input instead of returning <code>undefined</code>.</li> <li>Moved browser builds to the <code>js-yaml/browser</code> export.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodeca/js-yaml/commit/f1e45cd201de162cc388a5175717eddf0743d367"><code>f1e45cd</code></a> 5.1.0 released</li> <li><a href="https://github.com/nodeca/js-yaml/commit/53b22be4fe05ea668b2420b142b424d360f6e2cf"><code>53b22be</code></a> Fix constructor coverage</li> <li><a href="https://github.com/nodeca/js-yaml/commit/a1eaa2bce1ce5738d46a918b1f3a228b9fa0bdbd"><code>a1eaa2b</code></a> Fix quote style options and restore forceQuotes</li> <li><a href="https://github.com/nodeca/js-yaml/commit/0532e7d23fff763f07ce166bef0f3b0906f26597"><code>0532e7d</code></a> Add finalizers for immutable collection tags</li> <li><a href="https://github.com/nodeca/js-yaml/commit/9f00b91cdc293f3dfcd017d29dbc413ee98a5c70"><code>9f00b91</code></a> tests: drop the rest of issues tests, move a small fraction of useful checks ...</li> <li><a href="https://github.com/nodeca/js-yaml/commit/6be5d46c88f4caed3103e83075c2eb4aab8770fd"><code>6be5d46</code></a> tests: drop not actual or duplicating issue tests (covered in other places)</li> <li><a href="https://github.com/nodeca/js-yaml/commit/a7c9766f0d79e6506e119dbe91b43deb2d5f8879"><code>a7c9766</code></a> Fix !!pairs coverage</li> <li><a href="https://github.com/nodeca/js-yaml/commit/75148bc4f5eb69b3d338e1c355d8bb2dba5bdf34"><code>75148bc</code></a> 5.0.0 released</li> <li><a href="https://github.com/nodeca/js-yaml/commit/704b25d29229c52e66b824bfc1908d8f3ba3a45e"><code>704b25d</code></a> Quote document markers followed by whitespace</li> <li><a href="https://github.com/nodeca/js-yaml/commit/42dea284430b1077f95a326f14db422b19bedecc"><code>42dea28</code></a> Support complex !!pairs keys with realMapTag</li> <li>Additional commits viewable in <a href="https://github.com/nodeca/js-yaml/compare/4.2.0...5.1.0">compare view</a></li> </ul> </details> <br /> Updates `recharts` from 3.8.1 to 3.9.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/recharts/recharts/releases">recharts's releases</a>.</em></p> <blockquote> <h2>v3.9.0</h2> <h2>What's Changed</h2> <h3>Animations</h3> <p>3.9 comes with new animations! There are several bug fixes and what's best, all animations are now fully customizable.</p> <p>See the animations guide on <a href="https://recharts.github.io/en-US/guide/animations/">https://recharts.github.io/en-US/guide/animations/</a></p> <ul> <li>Animation guide by <a href="https://github.com/PavelVanecek"><code>@PavelVanecek</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7179">recharts/recharts#7179</a></li> <li>Animation tests by <a href="https://github.com/PavelVanecek"><code>@PavelVanecek</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7255">recharts/recharts#7255</a></li> <li>New animation props by <a href="https://github.com/PavelVanecek"><code>@PavelVanecek</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7215">recharts/recharts#7215</a></li> <li>test: cover legacy animation length changes by <a href="https://github.com/PavelVanecek"><code>@PavelVanecek</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7283">recharts/recharts#7283</a></li> <li>test: add sparse animation path tests for Line component by <a href="https://github.com/PavelVanecek"><code>@PavelVanecek</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7295">recharts/recharts#7295</a></li> <li>Export and document interpolate function by <a href="https://github.com/PavelVanecek"><code>@PavelVanecek</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7293">recharts/recharts#7293</a></li> <li>test: enhance line animation tests for ComposedChart and responsive by <a href="https://github.com/PavelVanecek"><code>@PavelVanecek</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7289">recharts/recharts#7289</a></li> <li>Manual animations on website by <a href="https://github.com/PavelVanecek"><code>@PavelVanecek</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7483">recharts/recharts#7483</a></li> <li>Add new example where chart animates by scroll by <a href="https://github.com/PavelVanecek"><code>@PavelVanecek</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7484">recharts/recharts#7484</a></li> <li>fix: preserve single-value line dash gaps during animation by <a href="https://github.com/puneetdixit200"><code>@puneetdixit200</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7405">recharts/recharts#7405</a></li> <li>Add animate-by-scroll example and update docs by <a href="https://github.com/PavelVanecek"><code>@PavelVanecek</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7487">recharts/recharts#7487</a></li> <li>Add custom fillOpacity on hover website example by <a href="https://github.com/PavelVanecek"><code>@PavelVanecek</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7489">recharts/recharts#7489</a></li> <li>honorable mention to <a href="https://github.com/robjampar"><code>@robjampar</code></a> for PR <a href="https://redirect.github.com/recharts/recharts/pull/6973">recharts/recharts#6973</a> which ended up declined but it introduced the starting idea for the new animation props</li> </ul> <h3>New features other than animations</h3> <ul> <li>Expose and document chart layout hooks and layout types in public API by <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7265">recharts/recharts#7265</a></li> <li>feat: allow HTML attributes passthrough on ResponsiveContainer by <a href="https://github.com/techcodie"><code>@techcodie</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7168">recharts/recharts#7168</a></li> <li>feat: add nodeInset and nodeGap properties to Treemap for better la… by <a href="https://github.com/MaximSrour"><code>@MaximSrour</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7044">recharts/recharts#7044</a></li> <li>feat(PieChart): add dataKey to Legend payload by <a href="https://github.com/Harikrushn9118"><code>@Harikrushn9118</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7137">recharts/recharts#7137</a></li> </ul> <h3>Bugfixes</h3> <ul> <li>fix: preserve valid falsy custom names (0, "") in tooltips by <a href="https://github.com/vamsi2246"><code>@vamsi2246</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7175">recharts/recharts#7175</a></li> <li>fix(ResponsiveContainer): Fix erroneous console warning on init by <a href="https://github.com/andypoorman"><code>@andypoorman</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7174">recharts/recharts#7174</a></li> <li>fix(DataUtils): improve isPercent validation to exclude invalid formats by <a href="https://github.com/vamsi2246"><code>@vamsi2246</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7178">recharts/recharts#7178</a></li> <li>fix(BarChart): render stacked bars when all values are 0 (<a href="https://redirect.github.com/recharts/recharts/issues/6235">#6235</a>) by <a href="https://github.com/andypoorman"><code>@andypoorman</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7199">recharts/recharts#7199</a></li> <li>fix(Sankey): prevent NaN node positions when link values sum to zero by <a href="https://github.com/Mridul012"><code>@Mridul012</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7185">recharts/recharts#7185</a></li> <li>fix(Funnel): prevent NaN coordinate layout crash when all values are zero by <a href="https://github.com/Mridul012"><code>@Mridul012</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7184">recharts/recharts#7184</a></li> <li>fixes an issue where XAxis and YAxis padding were ignored by the clipping mask when allowDataOverflow={true} was used alongside a restricted domain by <a href="https://github.com/emiedonmokumo"><code>@emiedonmokumo</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7232">recharts/recharts#7232</a></li> <li>fix: use originalDataIndex for tooltip dispatch in Bar by <a href="https://github.com/mayrang"><code>@mayrang</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7273">recharts/recharts#7273</a></li> <li>fix: resolve TypeScript 6 deprecation errors in tsconfig files by <a href="https://github.com/shreedharbhat98"><code>@shreedharbhat98</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7285">recharts/recharts#7285</a></li> <li>fix(bar): use Math.round instead of bitwise truncation for bar positioning by <a href="https://github.com/EduardF1"><code>@EduardF1</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7297">recharts/recharts#7297</a></li> <li>fix(types): propagate Tooltip types in chart helper contexts by <a href="https://github.com/mixelburg"><code>@mixelburg</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7125">recharts/recharts#7125</a></li> <li>fix(Legend): prevent overlap with chart on container resize by <a href="https://github.com/maroKanatani"><code>@maroKanatani</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7201">recharts/recharts#7201</a></li> <li>test(YAxis): failing repro for <a href="https://redirect.github.com/recharts/recharts/issues/7362">#7362</a> — function domain doesn't render ticks on empty/all-null data by <a href="https://github.com/nlenepveu"><code>@nlenepveu</code></a> in <a href="https://redirect.github.com/recharts/recharts/pull/7384">recharts/recharts#7384</a></li> </ul> <h3>Tree-shaking</h3> <p>We now have focused tree-shaking tests that allow us to observe exactly which components end up in the final bundle and why. I have also removed some unnecessary loops and you should see the final bundle size decrease somewhat as a result.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/recharts/recharts/commit/8c1cce725956a036949471eba392ac0cc20189a8"><code>8c1cce7</code></a> v3.9.0 (<a href="https://redirect.github.com/recharts/recharts/issues/7490">#7490</a>)</li> <li><a href="https://github.com/recharts/recharts/commit/e5fe9bb2fba18dc96c64b10fd4a7c4a4bdc86d1f"><code>e5fe9bb</code></a> Add custom fillOpacity on hover website example (<a href="https://redirect.github.com/recharts/recharts/issues/7489">#7489</a>)</li> <li><a href="https://github.com/recharts/recharts/commit/ad1590f256d6e7484890326282935576824cdce6"><code>ad1590f</code></a> Add test for Pie and Legend animation (<a href="https://redirect.github.com/recharts/recharts/issues/7488">#7488</a>)</li> <li><a href="https://github.com/recharts/recharts/commit/337edbd371ace0551068cbd9591b9ef18fee0ae3"><code>337edbd</code></a> Add animate-by-scroll example and update docs (<a href="https://redirect.github.com/recharts/recharts/issues/7487">#7487</a>)</li> <li><a href="https://github.com/recharts/recharts/commit/0063aa486281e28ebbceeeda0102ba9c1dc1b6ff"><code>0063aa4</code></a> fix: preserve single-value line dash gaps during animation (<a href="https://redirect.github.com/recharts/recharts/issues/7405">#7405</a>)</li> <li><a href="https://github.com/recharts/recharts/commit/6dbe130b8908cc09f6096d0b78d117b93b8335f4"><code>6dbe130</code></a> Add new example where chart animates by scroll (<a href="https://redirect.github.com/recharts/recharts/issues/7484">#7484</a>)</li> <li><a href="https://github.com/recharts/recharts/commit/a2c4171608f2608e9025204c6c3fdb3b459c5c87"><code>a2c4171</code></a> Manual animations on website (<a href="https://redirect.github.com/recharts/recharts/issues/7483">#7483</a>)</li> <li><a href="https://github.com/recharts/recharts/commit/c88f5f36f38be0c3d0cab6dad5e7f8f167b7f1bb"><code>c88f5f3</code></a> Simplify and export some of the new animation props (<a href="https://redirect.github.com/recharts/recharts/issues/7481">#7481</a>)</li> <li><a href="https://github.com/recharts/recharts/commit/410cf5cf063f521ad9b84ed21143c39cc113d8cb"><code>410cf5c</code></a> Renaming some of the animation props (<a href="https://redirect.github.com/recharts/recharts/issues/7477">#7477</a>)</li> <li><a href="https://github.com/recharts/recharts/commit/a1b89c6c798c3e6294a166f2a199baf3f991f128"><code>a1b89c6</code></a> chore(deps-dev): bump undici from 6.26.0 to 6.27.0 (<a href="https://redirect.github.com/recharts/recharts/issues/7475">#7475</a>)</li> <li>Additional commits viewable in <a href="https://github.com/recharts/recharts/compare/v3.8.1...v3.9.0">compare view</a></li> </ul> </details> <br /> Updates `baseline-browser-mapping` from 2.10.33 to 2.10.38 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/web-platform-dx/baseline-browser-mapping/releases">baseline-browser-mapping's releases</a>.</em></p> <blockquote> <h2>v2.9.3 - remove <code>process.loadEnvFile()</code></h2> <h2>What's Changed</h2> <ul> <li>Remove process.loadEnfFile() from main script by <a href="https://github.com/tonypconway"><code>@tonypconway</code></a> in <a href="https://redirect.github.com/web-platform-dx/baseline-browser-mapping/pull/112">web-platform-dx/baseline-browser-mapping#112</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.2...v2.9.3">https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.2...v2.9.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/37f3dae1c0142f522858bc0f40084af1879fd46c"><code>37f3dae</code></a> Patch to 2.10.38 because browser or feature data changed</li> <li><a href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/c5c28415598c49f679b1a77794a286ed9e00c315"><code>c5c2841</code></a> Browser or feature data changed</li> <li><a href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/14903f7eeaacd05bd2353f411d55aa8a72370a62"><code>14903f7</code></a> Updating static site</li> <li><a href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/2cfe7fc23acc6fe68d99f55d1dfa58370938ec0a"><code>2cfe7fc</code></a> Patch to 2.10.37 because browser or feature data changed</li> <li><a href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/48e5a7c4a4013a11b08c73cac230c11b2b557130"><code>48e5a7c</code></a> Browser or feature data changed</li> <li><a href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/ba5507374281bf5d9b3697b392b5a2173bcc5c8b"><code>ba55073</code></a> Updating static site</li> <li><a href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/df118b243455c9c65b2a212eeb5efff1a9a5d18e"><code>df118b2</code></a> Patch to 2.10.36 because browser or feature data changed</li> <li><a href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/c2663f17c73951bb3f586eb38f787018308ba446"><code>c2663f1</code></a> Browser or feature data changed</li> <li><a href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/221a2665ab34e99061ebae5c8232016a49c34677"><code>221a266</code></a> Updating static site</li> <li><a href="https://github.com/web-platform-dx/baseline-browser-mapping/commit/d358b780b9446896a4bc0b2032cd35fbf73239c8"><code>d358b78</code></a> Patch to 2.10.35 because browser or feature data changed</li> <li>Additional commits viewable in <a href="https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.33...v2.10.38">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-06 13:22:19 -05:00
Nikhil J	81858aa542	docs: fix broken OAuth2/OIDC policy examples (#8840 ) ## What / Why The examples on the OAuth2/OIDC guide (`docs/docs/oauth-oidc.md`) fail to compile on current OPA (v1+): 1. `claims := jwt.decode(input.token)[1]` uses an undefined built-in. The correct name is `io.jwt.decode`, which the same page already uses correctly further down (`jwt_unverified := io.jwt.decode(input.token)`). 2. The `jwt_verified := jwt_unverified { ... }` and `token := t { ... }` rules are missing the `if` keyword required before a rule body in Rego v1, so they fail to parse (`'if' keyword is required before rule body`). ## Changes - `jwt.decode` -> `io.jwt.decode` - add `if` before the `jwt_verified` and `token` rule bodies These are minimal, semantics-preserving fixes so the copy-pasteable examples work on a current OPA release. Signed-off-by: Nikhil Jathar <22786232+mailnike@users.noreply.github.com>	2026-07-01 22:03:55 +02:00
John Hooks	c498b548ca	ecosystem: add Sencillo projects to ecosystem (#8818 ) ### What are the changes in this PR? Just adding a couple of my projects to the ecosystem page. Signed-off-by: John Hooks <hooksie11@gmail.com>	2026-07-01 22:02:45 +02:00
dependabot[bot]	1783ac26de	build(deps): bump linkify-it from 5.0.0 to 5.0.1 in /docs Bumps [linkify-it](https://github.com/markdown-it/linkify-it) from 5.0.0 to 5.0.1. - [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md) - [Commits](https://github.com/markdown-it/linkify-it/compare/5.0.0...5.0.1) --- updated-dependencies: - dependency-name: linkify-it dependency-version: 5.0.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-07-01 08:30:03 +02:00
Stephan Renatus	9c83b9948a	wasm: replace wasmtime-go with wazero (#8815 ) The change replaces bytecodealliance/wasmtime-go/v44 (CGo) with tetratelabs/wazero (pure Go) - CGo eliminated — wazero is pure Go, so the whole internal/wasm/sdk runtime no longer needs a C toolchain/cross-compilation story. - The "env glue module" trick (glue.go) is the right solution to wazero's constraint that a HostModuleBuilder can't export memory. - Process-wide CompilationCache (sync.OnceValue): each unique policy is compiled once per process, and discarded/re-instantiated VMs are cheap. - Simplification in vm.go — dropping the ~25 closure fields (evalOneOff, eval, heapPtrGet, …) in favor of mod.ExportedFunction(name) + a generic call/callVoid/callOrCancel - All tests pass (incl. internal/wasm/sdk/internal/wasm, internal/wasm/sdk/opa). evalCompat for ABI 1.1 is retained. ---------- ``` │ `bf2bb5261c` │ `13d2710058` │ │ sec/op │ sec/op vs base │ WASMColdStartTargets/topdown-16 112.8µ ± 1% 113.3µ ± 1% ~ (p=0.512 n=15) WASMColdStartTargets/wasm-16 10.850m ± 1% 2.906m ± 1% -73.22% (p=0.000 n=15) geomean 1.107m 573.9µ -48.14% benchmark \ host local:tags=opa_wasm vs base WASMColdStartTargets/topdown ~ WASMColdStartTargets/wasm -73.22% ``` ``` │ `bf2bb5261c` │ `13d2710058` │ │ sec/op │ sec/op vs base │ WasmRego-16 4.976µ ± 1% 3.546µ ± 3% -28.74% (p=0.000 n=15) │ `bf2bb5261c` │ `13d2710058` │ │ B/op │ B/op vs base │ WasmRego-16 2.276Ki ± 0% 13.260Ki ± 0% +482.50% (p=0.000 n=15) │ `bf2bb5261c` │ `13d2710058` │ │ allocs/op │ allocs/op vs base │ WasmRego-16 46.00 ± 0% 33.00 ± 0% -28.26% (p=0.000 n=15) benchmark \ host local:tags=opa_wasm vs base WasmRego -28.74% ``` > [!NOTE] > When running benchmarks here, be aware that the memory previously used was invisible to the benchmark machinery -- it was on the other side of the CGo divide 🙈 Fixes #7557. --------- Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com>	2026-06-26 17:40:03 +02:00
Stephan Renatus	65f485d651	docs: document rule indexer support for `in`, bare refs; modernize rego (#8823 ) This had shipped in [v1.15.0](https://github.com/open-policy-agent/opa/releases/tag/v1.15.0) (and been attempted to ship in 1.14.0), but we've forgotten about the docs 😅 Fixes #8822 Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com>	2026-06-26 15:13:09 +02:00
Charlie Egan	8b59ff6e48	docs: Updates examples to use some...in, add link to debugger (#8806 ) Based on input from user here in slack: https://openpolicyagent.slack.com/archives/C08V59T3NAF/p1781788845493869 This also makes some updates based on common topics in the new docs chat. Some/every appears to be particularly confusing and the installation instructions might be better if more prominent. --------- Signed-off-by: Charlie Egan <charlie_egan@apple.com>	2026-06-26 10:02:39 +02:00
dependabot[bot]	57742e84a9	build(deps): bump webpack-dev-server from 5.2.4 to 5.2.5 in /docs (#8807 ) Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.4 to 5.2.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/releases">webpack-dev-server's releases</a>.</em></p> <blockquote> <h2>v5.2.5</h2> <h3>Patch Changes</h3> <ul> <li>Skip the HMR WebSocket path when forwarding upgrade requests to user-defined proxies, so custom proxy WebSocket upgrades are no longer intercepted by the dev server. (by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5680">#5680</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md">webpack-dev-server's changelog</a>.</em></p> <blockquote> <h2>5.2.5</h2> <h3>Patch Changes</h3> <ul> <li>Skip the HMR WebSocket path when forwarding upgrade requests to user-defined proxies, so custom proxy WebSocket upgrades are no longer intercepted by the dev server. (by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/webpack/webpack-dev-server/pull/5680">#5680</a>)</li> </ul> <p>All notable changes to this project will be documented in this file. See <a href="https://github.com/conventional-changelog/standard-version">standard-version</a> for commit guidelines.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/webpack-dev-server/commit/c3ee325819f64ceb77f85dcf727b6b5ede85cbc4"><code>c3ee325</code></a> chore(release): new release (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5682">#5682</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/60173be90873b187b41fc2009a4de253732988a1"><code>60173be</code></a> feat: add changeset validation and release workflow (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5680">#5680</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/948d5e6089bebcd801dac2cbe3ed4f80b64f117a"><code>948d5e6</code></a> fix(proxy): match the HMR upgrade path exactly like the ws server (<a href="https://redirect.github.com/webpack/webpack-dev-server/issues/5678">#5678</a>)</li> <li><a href="https://github.com/webpack/webpack-dev-server/commit/93e8996124332a6c94c4d3e0f8e5f2cf95321c67"><code>93e8996</code></a> fix: skip HMR websocket path when forwarding upgrades to user-defined proxies...</li> <li>See full diff in <a href="https://github.com/webpack/webpack-dev-server/compare/v5.2.4...v5.2.5">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for webpack-dev-server since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack-dev-server&package-manager=npm_and_yarn&previous-version=5.2.4&new-version=5.2.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-22 10:08:13 -05:00
Sebastian Spaink	0e6fe9caa2	Add proto schemas for the IR plan and bundle manifest (#8775 ) This adds two new proto schemas: * v1/bundle/manifest.proto * v1/ir/plan.proto --------- Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>	2026-06-22 10:02:15 -05:00
dependabot[bot]	1a68282b0c	build(deps): bump dompurify from 3.4.10 to 3.4.11 in /docs (#8803 ) Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.10 to 3.4.11. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cure53/DOMPurify/releases">dompurify's releases</a>.</em></p> <blockquote> <h2>DOMPurify 3.4.11</h2> <ul> <li>Fixed an issue with a leaky config for hooks via <code>setConfig</code>, thanks <a href="https://github.com/trace37labs"><code>@trace37labs</code></a></li> <li>Bumped vulnerable development dependencies to arrive at plain 0 with <code>npm audit</code></li> <li>Updated the <code>osv-scanner</code> suppression list as no vulnerable dependencies are left for now</li> <li>Updated up the linting tool-chain and removed now-redundant lint directives</li> <li>Updated the documentation is several spots, README, wiki, etc.</li> <li>Bumped several dependencies where possible</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cure53/DOMPurify/commit/0cae5187403132f96a6d357649e4b15633fc210a"><code>0cae518</code></a> release: 3.4.11 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1494">#1494</a>)</li> <li>See full diff in <a href="https://github.com/cure53/DOMPurify/compare/3.4.10...3.4.11">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dompurify&package-manager=npm_and_yarn&previous-version=3.4.10&new-version=3.4.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-22 09:55:25 -05:00
SEONGHYUN HONG	f4121fb38f	docs: remove duplicated word in Rego style guide (#8800 ) The Rego style guide reads "will fail both in the the undefined case" — removed the duplicated "the". Signed-off-by: s3onghyun <s3onghyun.hong@gmail.com>	2026-06-18 11:41:01 -05:00
dependabot[bot]	369db1718b	build(deps): bump dompurify from 3.4.0 to 3.4.10 in /docs (#8789 ) Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.0 to 3.4.10. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cure53/DOMPurify/releases">dompurify's releases</a>.</em></p> <blockquote> <h2>DOMPurify 3.4.10</h2> <ul> <li>Refactored codebase for clarity: extracted the public type declarations into <code>types.ts</code></li> <li>Decomposed the three largest sanitizer functions into focused helpers</li> <li>Removed duplicated defaults and dead branches, consolidated <code>SAFE_FOR_TEMPLATES</code> scrubbing into single shared path</li> <li>Improved per-node performance by hoisting the mXSS probe regexes and testing <code>textContent</code> before <code>innerHTML</code></li> <li>Added a deterministic micro-benchmark harness (<code>npm run bench</code>) with a <code>--compare</code> mode</li> <li>Reduced CI cost by running the full three-engine browser suite once per PR</li> <li>Refreshed the <code>demos/</code> folder so every demo runs again, and added a SVG-via-<code><img></code> demo</li> <li>Documented the bench and <code>test:happydom</code> scripts in the README</li> <li>Completed the Attack Classes & Bypass History wiki page</li> <li>Bumped several dependencies where possible</li> </ul> <h2>DOMPurify 3.4.9</h2> <ul> <li>Further improved the handling of Trusted Types config options, thanks <a href="https://github.com/offset"><code>@offset</code></a></li> <li>Further improved the handling of <code>IN_PLACE</code> sanitization, thanks <a href="https://github.com/mozfreddyb"><code>@mozfreddyb</code></a></li> <li>Added more test coverage for <code>IN_PLACE</code> and Trusted Types related usage</li> <li>Bumped several dependencies where possible</li> <li>Updated README and wiki with more accurate documentation & attack samples</li> </ul> <h2>DOMPurify 3.4.8</h2> <ul> <li>Cleaned up the repository root, renamed some and removed unneeded files</li> <li>Fixed an issue with handling of Trusted Types policies, thanks <a href="https://github.com/fulstadev"><code>@fulstadev</code></a></li> <li>Fixed the node iterator for better template scrubbing, thanks <a href="https://github.com/IamLeandrooooo"><code>@IamLeandrooooo</code></a></li> <li>Included formerly missing LICENSE-MPL in published npm package, thanks <a href="https://github.com/asamuzaK"><code>@asamuzaK</code></a></li> <li>Bumped several dependencies where possible</li> </ul> <h2>DOMPurify 3.4.7</h2> <ul> <li>Hardened the handling of Shadow Roots when using <code>IN_PLACE</code>, thanks <a href="https://github.com/GameZoneHacker"><code>@GameZoneHacker</code></a></li> <li>Removed a problem leading to permanent hook pollution, thanks <a href="https://github.com/offset"><code>@offset</code></a></li> <li>Refactored the test suite and expanded test coverage significantly</li> </ul> <h2>DOMPurify 3.4.6</h2> <ul> <li>Fixed several issues with DOM Clobbering in <code>IN_PLACE</code> mode, thanks <a href="https://github.com/offset"><code>@offset</code></a> & <a href="https://github.com/Bankde"><code>@Bankde</code></a></li> <li>Hardened the checks for cross-realm <code>IN_PLACE</code> and Shadow DOM sanitization, thanks <a href="https://github.com/offset"><code>@offset</code></a> & <a href="https://github.com/Bankde"><code>@Bankde</code></a></li> <li>Added more test coverage for <code>IN_PLACE</code> and general DOM Clobbering attacks</li> <li>Bumped several dependencies where possible</li> </ul> <h2>DOMPurify 3.4.5</h2> <ul> <li>Fixed a bypass caused by the new HTML element <code>selectedcontent</code> added in 3.4.4, thanks <a href="https://github.com/KabirAcharya"><code>@KabirAcharya</code></a></li> </ul> <p><strong>Note that this is a security release for an issue introduced in 3.4.4 and should be upgraded to immediately.</strong></p> <h2>DOMPurify 3.4.4</h2> <ul> <li>Added the <code>selectedcontent</code> element to default allow-list, thanks <a href="https://github.com/lukewarlow"><code>@lukewarlow</code></a></li> <li>Added the <code>command</code> and <code>commandfor</code> attributes to default allowed-list, thanks <a href="https://github.com/lukewarlow"><code>@lukewarlow</code></a></li> <li>Added better template scrubbing for <code>IN_PLACE</code> operations, thanks <a href="https://github.com/DEMON1A"><code>@DEMON1A</code></a></li> <li>Added stronger checks for cross-realm windows, thanks <a href="https://github.com/DEMON1A"><code>@DEMON1A</code></a> & <a href="https://github.com/fg0x0"><code>@fg0x0</code></a></li> <li>Updated demo website and made sure it uses the latest from main</li> <li>Updated existing workflows, fuzzer, dependabot, etc., added more tests</li> <li>Bumped several dependencies where possible</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cure53/DOMPurify/commit/6ee5716f8336989753611beeca364957c0eb0c3e"><code>6ee5716</code></a> release: 3.4.10 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1478">#1478</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/52102472d46035857c52df19e44285f8a1e102fc"><code>5210247</code></a> release: 3.4.9 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1459">#1459</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/bcdd8285412dc9c4c149652aed2d712e790d6ccf"><code>bcdd828</code></a> release: 3.4.8 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1439">#1439</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/ca30f070c360df162a3e3848e80e6fd3c9e74bff"><code>ca30f07</code></a> release: 3.4.7 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1414">#1414</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/bb7739e5bccec7e1ab3dae3f3e42d02db3acaaae"><code>bb7739e</code></a> release: 3.4.6 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1394">#1394</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/011b0c78f2a0f57ee54f5fcccb697a46ca6e63ea"><code>011b0c7</code></a> release: 3.4.5 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1382">#1382</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/5817ad969c15e67dfcd6cb37248d6e9c1553e7c3"><code>5817ad9</code></a> release: 3.4.4 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1374">#1374</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/520edb0371a9638f9b51f1798051299a250c686b"><code>520edb0</code></a> release: 3.4.3 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1352">#1352</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/6f67fd396a7b8c64294343999fe607ca1f5299c0"><code>6f67fd3</code></a> Sync/3.4.2 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1322">#1322</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/5b0cdbbf52331e854c0a2de875b1a3790ecec2b8"><code>5b0cdbb</code></a> chore: merge main into 3.x for 3.4.1 release (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1301">#1301</a>)</li> <li>Additional commits viewable in <a href="https://github.com/cure53/DOMPurify/compare/3.4.0...3.4.10">compare view</a></li> </ul> </details> <details> <summary>Install script changes</summary> <p>This version adds <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dompurify&package-manager=npm_and_yarn&previous-version=3.4.0&new-version=3.4.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-16 16:33:31 -05:00
dependabot[bot]	ed23e2b0b2	build(deps): bump ws in /docs (#8788 ) Bumps and [ws](https://github.com/websockets/ws). These dependencies needed to be updated together. Updates `ws` from 7.5.10 to 7.5.11 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/websockets/ws/releases">ws's releases</a>.</em></p> <blockquote> <h2>7.5.11</h2> <h1>Bug fixes</h1> <ul> <li>Backported 2b2abd45 to the 7.x release line (e14c4586).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"><code>fd36cd8</code></a> [dist] 7.5.11</li> <li><a href="https://github.com/websockets/ws/commit/e14c45861deca0cef60dec0f9109b694abebdf52"><code>e14c458</code></a> [security] Limit retained message parts</li> <li>See full diff in <a href="https://github.com/websockets/ws/compare/7.5.10...7.5.11">compare view</a></li> </ul> </details> <br /> Updates `ws` from 8.18.3 to 8.21.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/websockets/ws/releases">ws's releases</a>.</em></p> <blockquote> <h2>7.5.11</h2> <h1>Bug fixes</h1> <ul> <li>Backported 2b2abd45 to the 7.x release line (e14c4586).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"><code>fd36cd8</code></a> [dist] 7.5.11</li> <li><a href="https://github.com/websockets/ws/commit/e14c45861deca0cef60dec0f9109b694abebdf52"><code>e14c458</code></a> [security] Limit retained message parts</li> <li>See full diff in <a href="https://github.com/websockets/ws/compare/7.5.10...7.5.11">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-16 16:13:21 -05:00
dependabot[bot]	186d4868cf	build(deps): bump launch-editor from 2.11.1 to 2.14.1 in /docs (#8790 ) Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.11.1 to 2.14.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/launch-editor/commit/3f97c648307a70e7c930ba63f040e6ba8e72bc16"><code>3f97c64</code></a> v2.14.1</li> <li><a href="https://github.com/vitejs/launch-editor/commit/0cc9550e05c35224a1f61914b9731723f78c06a7"><code>0cc9550</code></a> fix: reject UNC paths (<a href="https://redirect.github.com/vitejs/launch-editor/issues/138">#138</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/afd1ab907769adbb0fb76b564551f3cd24822ea6"><code>afd1ab9</code></a> ci: run tests on mac and windows (<a href="https://redirect.github.com/vitejs/launch-editor/issues/136">#136</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/0bfa328e4d2a70d3accd86645efde43a5a8fd931"><code>0bfa328</code></a> test: add some tests for launch-editor package (<a href="https://redirect.github.com/vitejs/launch-editor/issues/135">#135</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/1b006ae00061e83628c884770df4869bac481ed3"><code>1b006ae</code></a> chore: add README (<a href="https://redirect.github.com/vitejs/launch-editor/issues/134">#134</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/383ef26fceaaab75e4f122bf833a8d457e187272"><code>383ef26</code></a> v2.14.0</li> <li><a href="https://github.com/vitejs/launch-editor/commit/6277209316b28bd76b057a97fcdfa42da5adc181"><code>6277209</code></a> ci: harden publish settings</li> <li><a href="https://github.com/vitejs/launch-editor/commit/520b2f787af1bbe3d2333d952547fc90f2c01bb3"><code>520b2f7</code></a> fix(deps): update all non-major dependencies (<a href="https://redirect.github.com/vitejs/launch-editor/issues/129">#129</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/475ac662aeaa40eebe319f76acf7bd7ff2aba5d5"><code>475ac66</code></a> chore(deps): update dependency lint-staged to v17 (<a href="https://redirect.github.com/vitejs/launch-editor/issues/130">#130</a>)</li> <li><a href="https://github.com/vitejs/launch-editor/commit/247bf1dfe2c75efb50f507d33c2c5a3cbf4e20d0"><code>247bf1d</code></a> chore(deps): update dependency yorkie to v2 (<a href="https://redirect.github.com/vitejs/launch-editor/issues/131">#131</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/launch-editor/compare/v2.11.1...v2.14.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for launch-editor since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=launch-editor&package-manager=npm_and_yarn&previous-version=2.11.1&new-version=2.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-policy-agent/opa/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-16 15:51:53 -05:00

1 2 3 4 5 ...

1942 Commits