Skip to content

chore(deps): bump the npm group across 1 directory with 6 updates - #3858

Merged
matthewhelmke merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-0d690a2852
Aug 28, 2026
Merged

chore(deps): bump the npm group across 1 directory with 6 updates#3858
matthewhelmke merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-0d690a2852

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 6 updates in the / directory:

Package From To
@docsearch/css 5.0.3 5.0.4
@docsearch/js 5.0.3 5.0.4
@scalar/api-reference 1.65.1 1.66.1
eslint 10.8.1 10.9.1
hugo-extended 0.155.3 0.164.0
sass-embedded 1.102.0 1.103.1

Updates @docsearch/css from 5.0.3 to 5.0.4

Changelog

Sourced from @​docsearch/css's changelog.

5.0.4

Commits

Updates @docsearch/js from 5.0.3 to 5.0.4

Changelog

Sourced from @​docsearch/js's changelog.

5.0.4

Commits

Updates @scalar/api-reference from 1.65.1 to 1.66.1

Changelog

Sourced from @​scalar/api-reference's changelog.

1.66.1

Patch Changes

  • #9941: Republish every package through npm trusted publishing. No functional changes.

1.66.0

Minor Changes

  • #9917: Expose every sidebar URL to crawlers in server-rendered HTML. The interactive sidebar keeps the children of collapsed groups out of the DOM, so links to operations and models inside collapsed tags were missing from server-rendered output unless defaultOpenAllTags was enabled. The server-rendered HTML now includes a hidden, flat list of plain anchors for every navigation entry, so crawlers can discover all deep links without executing JavaScript. The list is dropped right after hydration and never affects the interactive experience.
  • #9918: Render sidebar navigation as anchor links instead of buttons.
    • @scalar/sidebar: ScalarSidebar and SidebarItem accept a new getHref callback. When it returns a URL for an item, that item renders as a real link — this covers every entry except tag-group headings, which are section labels rather than navigation targets. Plain left clicks on the link still emit selectItem for in-app navigation (with the default navigation prevented), modified clicks are left to the browser so links can be opened in a new tab, and clicks on decorator content outside the link keep their native behavior. Items are built with the existing button slot on ScalarSidebarItem and ScalarSidebarGroup, so @scalar/components needs no new API to support this.
    • @scalar/api-reference: the sidebar now passes getHref using the new SSR-safe makeHrefFromId helper, so the rendered sidebar contains real anchor tags whose paths match the URLs pushed to history (the hrefs are relative, so they do not carry the current query string). With path routing this makes the navigation crawlable and indexable by search engines; with hash routing and hash-base-path routing the fragment hrefs improve link semantics and open-in-new-tab behavior, but search engines do not treat fragments as separate URLs — configure pathRouting if URL discovery is the goal. Note that sidebar entries now follow standard link keyboard semantics (Enter activates them, Space scrolls the page), and links inside collapsed groups are only present in server-rendered HTML for groups that are expanded during SSR (for example via defaultOpenAllTags).
    • @scalar/helpers: new isPlainLeftClick helper in dom/is-plain-left-click for deciding when a click should be hijacked for client-side navigation.

Patch Changes

  • #9927: Show a composed schema's own description when it has no properties of its own. A schema that only carries allOf plus a top-level description dropped that description and rendered the first allOf member's description instead, which was visible when browsing the schema standalone in the Models section.

  • #9936: Add bottom padding to the classic layout so the last section is no longer glued to the bottom edge of the screen

  • #9406: feat: support OpenAPI 3.2 nested tags

    The navigation tree now nests tags via the OpenAPI 3.2 tag.parent field, building an arbitrary-depth hierarchy. A parent tag with no operations of its own is treated as a section; a tag that has both operations and children renders as both. Native parent nesting takes precedence over x-tagGroups, which stays as the fallback for older documents. The summary field is used as the tag title (after x-displayName), and the new parent, kind and summary fields are recognized on the Tag Object (both in @scalar/workspace-store and @scalar/schemas). In the modern layout, operation-less parent tags now render their own summary and description header instead of being flattened like a legacy x-tagGroups wrapper.

  • #9893: Show schema pattern as a hover dropdown in the API reference, similar to examples. Long regex patterns are now revealed on hover instead of being truncated inline.

  • #9871: Add a short CDN URL for the ESM standalone build: https://cdn.jsdelivr.net/npm/@scalar/api-reference/esm.js

  • #9865: Ship source maps with the standalone browser build (dist/browser) so config errors are easier to debug

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​scalar/api-reference since your current version.


Updates eslint from 10.8.1 to 10.9.1

Release notes

Sourced from eslint's releases.

v10.9.1

Bug Fixes

  • 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

  • ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

v10.9.0

Features

  • 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
  • 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

  • 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
  • 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
  • 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

  • 9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))
  • 87f66f4 docs: Update README (GitHub Actions Bot)
  • 585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)
  • f3993b0 docs: Update README (GitHub Actions Bot)
  • ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)
  • 1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)
  • 4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)
  • 510d1a2 docs: Update README (GitHub Actions Bot)

Chores

  • 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])
  • 9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)
  • dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)
  • f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])
  • 4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])
Commits

Updates hugo-extended from 0.155.3 to 0.164.0

Commits

Updates sass-embedded from 1.102.0 to 1.103.1

Changelog

Sourced from sass-embedded's changelog.

1.103.1

  • No user-visible changes.

1.103.0

  • Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).
Commits

@dependabot
dependabot Bot requested review from a team as code owners August 27, 2026 22:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file security labels Aug 27, 2026
@netlify

netlify Bot commented Aug 27, 2026

Copy link
Copy Markdown

Deploy Preview for ornate-narwhal-088216 ready!

Name Link
🔨 Latest commit e4d94fc
🔍 Latest deploy log https://app.netlify.com/projects/ornate-narwhal-088216/deploys/6a919c08038a660008239bcb
😎 Deploy Preview https://deploy-preview-3858--ornate-narwhal-088216.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@matthewhelmke

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot dependabot Bot changed the title chore(deps): bump the npm group with 6 updates chore(deps): bump the npm group across 1 directory with 6 updates Aug 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-0d690a2852 branch from c3baf35 to 6a32e8d Compare August 28, 2026 13:00
@matthewhelmke

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-0d690a2852 branch from 6a32e8d to 0195db9 Compare August 28, 2026 13:10
@matthewhelmke

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-0d690a2852 branch from 0195db9 to 90e5f01 Compare August 28, 2026 13:33
matthewhelmke added a commit that referenced this pull request Aug 28, 2026
## What

Two small changes so the site builds on Hugo 0.164.0:

- `config/_default/config.toml`: rename `[caches.getjson]` to
`[caches.getresource]`. Hugo removed the `getjson` cache name and
consolidated it into `getresource`.
- `layouts/rss.xml`: migrate `.Site.Author.{email,name}` to
`.Site.Params.author.*`. Hugo removed the `.Site.Author` field.

## Why

Dependabot #3858 bumps `hugo-extended` 0.155.3 → 0.164.0. That build
fails twice:

1. `failed to decode "caches": "getjson" is not a valid cache name`
(config load)
2. `can't evaluate field Author in type page.Site` (`rss.xml` render)

Both are removals, not deprecations, so they hard-fail the build. This
PR clears both. It needs to merge before #3858 (or #3858 needs a rebase
afterward) for that PR's checks to pass.

## Safety

Both changes are behavior-preserving. There is no `[author]` block in
the config, so the RSS `author`/`managingEditor`/`webMaster` fields
already emit nothing; the migration keeps that output identical.
`getresource` is a valid cache name on both the current 0.155.3 and
0.164.0.

## Testing

Faithful `npm ci && npm run build` (matching CI), all clean:

| Hugo | Config | Result |
| --- | --- | --- |
| 0.155.3 (current `main`) | both fixes | ✅ 1633 pages, 0 errors |
| 0.164.0 (#3858) | both fixes | ✅ 1633 pages, 0 errors |
| 0.164.0 | unfixed | ❌ reproduces both CI errors |

## Follow-up (not this PR)

The 0.164.0 build still emits deprecation warnings that will become
breakage in a future Hugo: the `languageCode`/`languageName` config
keys, `module.mounts.includeFiles`, `.Site.Data`, and
`.Site.LanguageCode`. Worth a separate tracking ticket.

---
Created in collaboration with Claude Code running Claude Opus 4.8 on
2026-08-28.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
@matthewhelmke

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps the npm group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@docsearch/css](https://github.com/algolia/docsearch/tree/HEAD/packages/docsearch-css) | `5.0.3` | `5.0.4` |
| [@docsearch/js](https://github.com/algolia/docsearch/tree/HEAD/packages/docsearch-js) | `5.0.3` | `5.0.4` |
| [@scalar/api-reference](https://github.com/scalar/scalar/tree/HEAD/packages/api-reference) | `1.65.1` | `1.66.1` |
| [eslint](https://github.com/eslint/eslint) | `10.8.1` | `10.9.1` |
| [hugo-extended](https://github.com/jakejarvis/hugo-extended) | `0.155.3` | `0.164.0` |
| [sass-embedded](https://github.com/sass/embedded-host-node) | `1.102.0` | `1.103.1` |



Updates `@docsearch/css` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/algolia/docsearch/releases)
- [Changelog](https://github.com/algolia/docsearch/blob/main/packages/docsearch-css/CHANGELOG.md)
- [Commits](https://github.com/algolia/docsearch/commits/@docsearch/css@5.0.4/packages/docsearch-css)

Updates `@docsearch/js` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/algolia/docsearch/releases)
- [Changelog](https://github.com/algolia/docsearch/blob/main/packages/docsearch-js/CHANGELOG.md)
- [Commits](https://github.com/algolia/docsearch/commits/@docsearch/js@5.0.4/packages/docsearch-js)

Updates `@scalar/api-reference` from 1.65.1 to 1.66.1
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/packages/api-reference/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits/HEAD/packages/api-reference)

Updates `eslint` from 10.8.1 to 10.9.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.1...v10.9.1)

Updates `hugo-extended` from 0.155.3 to 0.164.0
- [Commits](jakejarvis/hugo-extended@v0.155.3...v0.164.0)

Updates `sass-embedded` from 1.102.0 to 1.103.1
- [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md)
- [Commits](sass/embedded-host-node@1.102.0...1.103.1)

---
updated-dependencies:
- dependency-name: "@docsearch/css"
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@docsearch/js"
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@scalar/api-reference"
  dependency-version: 1.66.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint
  dependency-version: 10.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: hugo-extended
  dependency-version: 0.164.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: sass-embedded
  dependency-version: 1.103.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-0d690a2852 branch from 90e5f01 to e4d94fc Compare August 28, 2026 14:32
@matthewhelmke
matthewhelmke merged commit e7e065e into main Aug 28, 2026
8 checks passed
@matthewhelmke
matthewhelmke deleted the dependabot/npm_and_yarn/npm-0d690a2852 branch August 28, 2026 14:34
matthewhelmke added a commit that referenced this pull request Aug 28, 2026
…CS-150) (#3865)

## What

Clears the five Hugo deprecation warnings surfaced by the move to
`hugo-extended` under Dependabot management (see #3858 and the 0.164.0
compat fix #3864). None block the build today, but each becomes a hard
error in a future Hugo release — exactly as `getjson` and `.Site.Author`
did in 0.164.0.

Resolves
[DOCS-150](https://linear.app/chainguard/issue/DOCS-150/resolve-hugo-deprecation-warnings-before-they-break-the-build).

## Changes

| Deprecated | Since | Replacement | File |
| -- | -- | -- | -- |
| `languageCode` config key | v0.158.0 | `locale` |
`config/_default/config.toml` |
| `languages.en.languageName` | v0.158.0 | `label` |
`config/_default/languages.toml` |
| `module.mounts.includeFiles` | v0.153.0 | `files` |
`config/_default/config.toml` |
| `.Site.Data` | v0.156.0 | `hugo.Data` |
`layouts/partials/notice.html`,
`layouts/shortcodes/package-mappings/{image,fedora,debian}-*.html` |
| `.Site.LanguageCode` | v0.158.0 | `.Site.Language.Locale` |
`layouts/_default/baseof.html` |

A repo-wide grep of `config/` and `layouts/` confirms these were the
only occurrences of all five patterns.

## Verification

Built with Hugo **0.164.0** (`npm ci && npm run build`):

- Zero `deprecated:` lines in the output (was 5).
- Build succeeds: 1633 pages, no errors.
- Rendered output unchanged: `<html lang=en-US>` renders identically
(the new `locale` value feeds `.Site.Language.Locale`), and the
package-mappings tables still render their data via `hugo.Data`.

0.164.0 is also the latest published `hugo-extended` on npm, so pinned
and latest are the same today.

Out of scope: the Dart Sass `@import`/`darken()`/slash-div warnings are
a separate deprecation track (Bootstrap + our SCSS, not Hugo config).

---
Created in collaboration with Claude Code running Claude Opus 4.8 on
2026-08-28.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant