Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 24, 2025

Bumps the npm_and_yarn group with 10 updates in the / directory:

Package From To
astro 4.14.2 4.16.18
mermaid 10.9.1 10.9.3
@pagefind/default-ui 1.1.0 1.3.0
cookie 0.5.0 0.7.2
youch 3.3.3 3.3.4
cross-spawn 7.0.3 7.0.6
katex 0.16.11 0.16.21
pagefind 1.1.0 1.3.0
path-to-regexp 6.2.2 6.3.0
undici 5.28.4 5.28.5

Bumps the npm_and_yarn group with 1 update in the /.github/actions/assign-issue directory: cross-spawn.
Bumps the npm_and_yarn group with 1 update in the /.github/actions/assign-pr directory: cross-spawn.

Updates astro from 4.14.2 to 4.16.18

Release notes

Sourced from astro's releases.

astro@4.16.18

Patch Changes

astro@4.16.17

Patch Changes

  • #12632 e7d14c3 Thanks @​ematipico! - Fixes an issue where the checkOrigin feature wasn't correctly checking the content-type header

astro@4.16.16

Patch Changes

Changelog

Sourced from astro's changelog.

4.16.18

Patch Changes

4.16.17

Patch Changes

  • #12632 e7d14c3 Thanks @​ematipico! - Fixes an issue where the checkOrigin feature wasn't correctly checking the content-type header

4.16.16

Patch Changes

4.16.15

Patch Changes

4.16.14

Patch Changes

4.16.13

Patch Changes

... (truncated)

Commits

Updates mermaid from 10.9.1 to 10.9.3

Commits
  • 85ec96a chore: bump mermaid version to v10.9.3
  • 9301a57 style: prettify src/diagrams/block/blockDB.ts
  • 2bedd0e chore(deps): update katex to 0.16.11
  • 92a07ff chore(deps): update bundled DOMPurify to 3.1.6
  • 4dd4997 chore: Bump version
  • fc61512 [10] ci: upgrade to pnpm/action-setup@v4 to avoid CI failures
  • 402abdf [10] fix: ban version v3.1.7 of DOMPurify
  • 8d815f8 Lint fix
  • See full diff in compare view

Updates @pagefind/default-ui from 1.1.0 to 1.3.0

Updates cookie from 0.5.0 to 0.7.2

Release notes

Sourced from cookie's releases.

v0.7.2

Fixed

  • Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates youch from 3.3.3 to 3.3.4

Commits

Updates cross-spawn from 7.0.3 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

  • update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

Commits
  • 77cd97f chore(release): 7.0.6
  • 6717de4 chore: upgrade standard-version
  • f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
  • 9a7e3b2 chore: fix build status badge
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • Additional commits viewable in compare view

Updates dset from 3.1.3 to 3.1.4

Commits

Updates katex from 0.16.11 to 0.16.21

Release notes

Sourced from katex's releases.

v0.16.21

0.16.21 (2025-01-17)

Bug Fixes

v0.16.20

0.16.20 (2025-01-12)

Bug Fixes

v0.16.19

0.16.19 (2024-12-29)

Bug Fixes

v0.16.18

0.16.18 (2024-12-18)

Bug Fixes

  • Actually publish TypeScript type definitions (#4008) (629b873)

v0.16.17

0.16.17 (2024-12-17)

Bug Fixes

  • MathML combines multidigit numbers with sup/subscript, comma separators, and multicharacter text when outputting to DOM (#3999) (7d79e22), closes #3995

v0.16.16

0.16.16 (2024-12-17)

Features

... (truncated)

Changelog

Sourced from katex's changelog.

0.16.21 (2025-01-17)

Bug Fixes

  • escape \htmlData attribute name (57914ad)

0.16.20 (2025-01-12)

Bug Fixes

0.16.19 (2024-12-29)

Bug Fixes

0.16.18 (2024-12-18)

Bug Fixes

  • Actually publish TypeScript type definitions (#4008) (629b873)

0.16.17 (2024-12-17)

Bug Fixes

  • MathML combines multidigit numbers with sup/subscript, comma separators, and multicharacter text when outputting to DOM (#3999) (7d79e22), closes #3995

0.16.16 (2024-12-17)

Features

0.16.15 (2024-12-09)

Features

  • italic sans-serif in math mode via \mathsfit command (#3998) (2218901)

0.16.14 (2024-12-08)

... (truncated)

Commits
  • 923f2aa chore(release): 0.16.21 [ci skip]
  • 57914ad fix: escape \htmlData attribute name
  • ff28995 Merge commit from fork
  • 28a0bf5 chore(release): 0.16.20 [ci skip]
  • 6d30fe4 fix: \providecommand does not overwrite existing macro (#4000)
  • 8f47dba chore(deps): update actions/upload-artifact to v4 (#4012)
  • 88b5056 chore(release): 0.16.19 [ci skip]
  • 4228b4e fix(types): improve strict function type (#4009)
  • f934646 chore(release): 0.16.18 [ci skip]
  • 629b873 fix: Actually publish TypeScript type definitions (#4008)
  • Additional commits viewable in compare view

Updates micromatch from 4.0.7 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

Commits

Updates nanoid from 3.3.7 to 3.3.8

Changelog

Sourced from nanoid's changelog.

3.3.8

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).
Commits

Updates pagefind from 1.1.0 to 1.3.0

Release notes

Sourced from pagefind's releases.

v1.3.0

Core Features & Improvements

  • Added --quiet and --silent flags when running the Pagefind CLI, which reduce the logging output to only warnings or only errors respectively.
  • Stablized the Pagefind Rust library.
    • Thanks to @​cdxker for leading this in #751 ❤️
    • This library interface has feature parity with the Node and Python indexing APIs, and is a great solution for integrating Pagefind indexing into any Rust-based tooling.

Default UI Features & Improvements

  • Added a data-pagefind-ui-meta attribute to the metadata tags on search results in the Default UI, allowing them to be targeted with CSS.
    • For example, a tag on a result containing Date: April 19, 2024 will now have data-pagefind-ui-meta="date".

Fixes & Tweaks

  • Fixed an issue where inline metadata would incorrectly render with html-escaped characters.
    • Specifically, tagging metadata inline with data-pagefind-meta="phrase:this &lt; that would index the literal &lt; rather than a < character.
    • This bug didn't occur when using data-pagefind-meta to capture the content of an element.
  • Fixed an issue where matches in compound words could (sometimes) be ranked lower than intended.
    • Specifically, for example, matching just the Cannon in CloudCannon may have ranked the word incorrectly.
  • Fixed an issue where fragment hashes would change between every Pagefind build.
    • Now, if an HTML page has not changed between two Pagefind indexes, the fragment filename will not change.
    • This saves you from having to re-upload all fragment files after every Pagefind build.

v1.2.0

Core Features & Improvements

UI Translations

*️⃣ : These languages are the first right-to-left languages in the translation set. Please open any issues if improvements can be made to the Pagefind UI libraries when rendered for these RTL languages.

v1.1.1

Fixes & Tweaks

  • Fixes an issue where internal anchor and weight tokens would leak when captured in meta or filter attributes.
  • Improves segmentation for extended languages (PR #600 — thanks @​hamano !).
  • Improves Pagefind's processing of "index.html" URLs (PR #604 — thanks @​dscho !).
  • Fixes some instances of incorrect types in the Pagefind NodeJS API (PRs #642 & #655 — thanks @​vanyauhalin & SKalt !).

UI Translations

  • Added Swahili translations

Secutiry

Changelog

Sourced from pagefind's changelog.

v1.3.0 (December 18, 2024)

Core Features & Improvements

  • Added --quiet and --silent flags when running the Pagefind CLI, which reduce the logging output to only warnings or only errors respectively.
  • Stablized the Pagefind Rust library.
    • Thanks to @​cdxker for leading this in #751 ❤️
    • This library interface has feature parity with the Node and Python indexing APIs, and is a great solution for integrating Pagefind indexing into any Rust-based tooling.

Default UI Features & Improvements

  • Added a data-pagefind-ui-meta attribute to the metadata tags on search results in the Default UI, allowing them to be targeted with CSS.
    • For example, a tag on a result containing Date: April 19, 2024 will now have data-pagefind-ui-meta="date".

Fixes & Tweaks

  • Fixed an issue where inline metadata would incorrectly render with html-escaped characters.
    • Specifically, tagging metadata inline with data-pagefind-meta="phrase:this &lt; that would index the literal &lt; rather than a < character.
    • This bug didn't occur when using data-pagefind-meta to capture the content of an element.
  • Fixed an issue where matches in compound words could (sometimes) be ranked lower than intended.
    • Specifically, for example, matching just the Cannon in CloudCannon may have ranked the word incorrectly.
  • Fixed an issue where fragment hashes would change between every Pagefind build.
    • Now, if an HTML page has not changed between two Pagefind indexes, the fragment filename will not change.
    • This saves you from having to re-upload all fragment files after every Pagefind build.

v1.2.0 (November 6, 2024)

Core Features & Improvements

UI Translations

*️⃣ : These languages are the first right-to-left languages in the translation set. Please open any issues if improvements can be made to the Pagefind UI libraries when rendered for these RTL languages.

v1.1.1 (September 3, 2024)

Fixes & Tweaks

  • Fixes an issue where internal anchor and weight tokens would leak when captured in meta or filter attributes.
  • Improves segmentation for extended languages (PR #600 — thanks @​hamano !).
  • Improves Pagefind's processing of "index.html" URLs (PR #604 — thanks @​dscho !).
  • Fixes some instances of incorrect types in the Pagefind NodeJS API (PRs #642 & #655 — thanks @​vanyauhalin & SKalt !).

UI Translations

  • Added Swahili translations

Security

... (truncated)

Commits
  • df0f721 Merge pull request #762 from CloudCannon/chore/changelog
  • 597d9a5 Changelog
  • a138dd1 Merge pull request #761 from CloudCannon/fix/stable-output
  • da3c0f9 Only test fragment stabilization
  • c933742 Stabilize filename hashes for fragments
  • 36358de Merge pull request #760 from CloudCannon/feat/ui-meta-attribute
  • c45609d Merge pull request #759 from CloudCannon/feat/quiet
  • ae0d9a1 Added data-pagefind-ui-meta attribute to the default UI as CSS target
  • 7899d3d Add --quiet and --silent configuration options when indexing
  • 74c4ed8 Merge pull request #758 from CloudCannon/feat/fix-meta-encoding
  • Additional commits viewable in compare view

Updates path-to-regexp from 6.2.2 to 6.3.0

Release notes

Sourced from path-to-regexp's releases.

Fix backtracking in 6.x

Fixed

pillarjs/path-to-regexp@v6.2.2...v6.3.0

Commits

Updates rollup from 4.18.0 to 4.31.0

Release notes

Sourced from rollup's releases.

v4.31.0

4.31.0

2025-01-19

Features

  • Do not immediately quit when trying to use watch mode from within non-TTY environments (#5803)

Bug Fixes

  • Handle files with more than one UTF-8 BOM header (#5806)

Pull Requests

v4.30.1

4.30.1

2025-01-07

Bug Fixes

  • Prevent invalid code when simplifying unary expressions in switch cases (#5786)

Pull Requests

v4.30.0

4.30.0

2025-01-06

Features

  • Inline values of resolvable unary expressions for improved tree-shaking (#5775)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.31.0

2025-01-19

Features

  • Do not immediately quit when trying to use watch mode from within non-TTY environments (#5803)

Bug Fixes

  • Handle files with more than one UTF-8 BOM header (#5806)

Pull Requests

4.30.1

2025-01-07

Bug Fixes

  • Prevent invalid code when simplifying unary expressions in switch cases (#5786)

Pull Requests

4.30.0

2025-01-06

Features

  • Inline values of resolvable unary expressions for improved tree-shaking (#5775)

Pull Requests

4.29.2

2025-01-05

... (truncated)

Commits

Updates undici from 5.28.4 to 5.28.5

Release notes

Sourced from undici's releases.

v5.28.5

⚠️ Security Release ⚠️

Fixes CVE CVE-2025-22150 GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).

Full Changelog: nodejs/undici@v5.28.4...v5.28.5

Commits

Updates vite from 5.4.0 to 5.4.14

Release notes

Sourced from vite's releases.

v5.4.14

Please refer to CHANGELOG.md for details.

v5.4.13

Please refer to CHANGELOG.md for details.

v5.4.12

This version contains a breaking change due to security fixes. See GHSA-vg6x-rcgg-rjx6 for more details.

Please refer to CHANGELOG.md for details.

v5.4.11

Please refer to CHANGELOG.md for details.

v5.4.10

Please refer to CHANGELOG.md for details.

v5.4.9

Please refer to CHANGELOG.md for details.

v5.4.8

Please refer to CHANGELOG.md for details.

v5.4.7

Please refer to CHANGELOG.md for details.

v5.4.6

Please refer to CHANGELOG.md for details.

v5.4.5

Please refer to CHANGELOG.md for details.

v5.4.4

Please refer to CHANGELOG.md for details.

v5.4.3

Please refer to CHANGELOG.md for details.

plugin-legacy@5.4.3

Please refer to CHANGELOG.md for details.

plugin-legacy@5.4.2

Please refer to CHANGELOG.md for details.

v5.4.2

Please refer to CHANGELOG.md for details.

plugin-legacy@5.4.1

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

5.4.14 (2025-01-21)

5.4.13 (2025-01-20)

5.4.12 (2025-01-20)

  • fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (9da4abc)
  • fix!: default server.cors: false to disallow fetching from untrusted origins (dfea38f)
  • fix: verify token for HMR WebSocket connection (b71a5c8)
  • chore: add deps update changelog (ecd2375)

5.4.11 (2024-11-11)

  • fix(deps): update dependencies of postcss-modules (ceb15db), closes #18617

5.4.10 (2024-10-23)

  • fix: backport #18367,augment hash for CSS files to prevent chromium erroring by loading previous fil (7d1a3bc), closes #18367 #18412

5.4.9 (2024-10-14)

  • fix: bump launch-editor-middleware to v2.9.1 (#18348) (508d9ab), closes #18348
  • fix(css): fix lightningcss dep url resolution with custom root (#18125) (eae00b5), closes #18125
  • fix(data-uri): only match ids starting with data: (#18241) (96084d6), closes #18241
  • fix(deps): bump tsconfck (#18322) (dc5434c), closes #18322
  • fix(hmr): don't try to rewrite impo...

    Description has been truncated

Bumps the npm_and_yarn group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `4.14.2` | `4.16.18` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `10.9.1` | `10.9.3` |
| @pagefind/default-ui | `1.1.0` | `1.3.0` |
| [cookie](https://github.com/jshttp/cookie) | `0.5.0` | `0.7.2` |
| [youch](https://github.com/poppinss/youch) | `3.3.3` | `3.3.4` |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.11` | `0.16.21` |
| [pagefind](https://github.com/CloudCannon/pagefind) | `1.1.0` | `1.3.0` |
| [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `6.2.2` | `6.3.0` |
| [undici](https://github.com/nodejs/undici) | `5.28.4` | `5.28.5` |

Bumps the npm_and_yarn group with 1 update in the /.github/actions/assign-issue directory: [cross-spawn](https://github.com/moxystudio/node-cross-spawn).
Bumps the npm_and_yarn group with 1 update in the /.github/actions/assign-pr directory: [cross-spawn](https://github.com/moxystudio/node-cross-spawn).


Updates `astro` from 4.14.2 to 4.16.18
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/astro@4.16.18/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@4.16.18/packages/astro)

Updates `mermaid` from 10.9.1 to 10.9.3
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Changelog](https://github.com/mermaid-js/mermaid/blob/develop/CHANGELOG.md)
- [Commits](mermaid-js/mermaid@v10.9.1...v10.9.3)

Updates `@pagefind/default-ui` from 1.1.0 to 1.3.0

Updates `cookie` from 0.5.0 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.5.0...v0.7.2)

Updates `youch` from 3.3.3 to 3.3.4
- [Release notes](https://github.com/poppinss/youch/releases)
- [Commits](https://github.com/poppinss/youch/commits)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `dset` from 3.1.3 to 3.1.4
- [Release notes](https://github.com/lukeed/dset/releases)
- [Commits](lukeed/dset@v3.1.3...v3.1.4)

Updates `katex` from 0.16.11 to 0.16.21
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.11...v0.16.21)

Updates `micromatch` from 4.0.7 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.7...4.0.8)

Updates `nanoid` from 3.3.7 to 3.3.8
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.8)

Updates `pagefind` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/CloudCannon/pagefind/releases)
- [Changelog](https://github.com/CloudCannon/pagefind/blob/main/CHANGELOG.md)
- [Commits](Pagefind/pagefind@v1.1.0...v1.3.0)

Updates `path-to-regexp` from 6.2.2 to 6.3.0
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v6.2.2...v6.3.0)

Updates `rollup` from 4.18.0 to 4.31.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.18.0...v4.31.0)

Updates `undici` from 5.28.4 to 5.28.5
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.28.4...v5.28.5)

Updates `vite` from 5.4.0 to 5.4.14
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.14/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.14/packages/vite)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

---
updated-dependencies:
- dependency-name: astro
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mermaid
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@pagefind/default-ui"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: youch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: dset
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: katex
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: pagefind
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant