Skip to content

chore(deps): bump the npm group with 5 updates - #4310

Merged
matthewhelmke merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-4d43b08998
Oct 23, 2026
Merged

matthewhelmke merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-4d43b08998

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 5 updates:

Package From To
@scalar/api-reference 1.74.0 1.75.0
eslint 10.12.0 10.13.0
hugo-extended 0.167.0 0.168.0
postcss 8.5.30 8.5.31
sass-embedded 1.105.1 1.105.2

Updates @scalar/api-reference from 1.74.0 to 1.75.0

Changelog

Sourced from @​scalar/api-reference's changelog.

1.75.0

Minor Changes

  • #10616: Render AsyncAPI operation replies with expandable message schemas, channel links, static addresses, and dynamic reply address expressions.

  • #10600: Display AsyncAPI application, server, operation, and message tags, including trait tags, and filter navigation by tags while preserving channel grouping.

  • #10604: Display AsyncAPI server, channel, operation, and message binding details, including versions, referenced bindings, and unfamiliar fields.

  • #10213: Add per-reference Markdown rendering hooks and an explicitly loaded Mermaid plugin with interactive diagrams, keyboard panning, and zoom controls.

    Provide Markdown hooks before mounting the embedded client modal so its initial render receives the configured hooks. The Mermaid viewer uses customizable Scalar theme styles and an intentional light drawing surface.

    Isolate Markdown plugin cleanup failures so other plugins still release their resources when content changes or unmounts.

Patch Changes

  • #10597: Render AsyncAPI string discriminators with inherited schema variants and effective discriminator values.

  • #10530: Render AsyncAPI external documentation on servers, channels, operations, messages, tags, and schemas, with referenced objects and descriptions, using the existing OpenAPI link presentation.

    Keep AsyncAPI messages searchable when navigation renders them beneath operations.

  • #10599: Preserve recursive schemas when generating request bodies, code samples, and response examples instead of replacing recursion points with null or empty arrays.

  • #10608: Keep shared component styles from overriding host page body backgrounds and margins, including hosts using CSS layers. Keep full-page body styling in the standalone bundles.

  • #10594: Update AI SDK dependencies to address GHSA-866g-f22w-33x8 in response body handling.

  • #10365: Preserve document-backed API key name edits for export, allow clearing configured names, and release configured overrides when their default name is restored.

  • #10628: Add developer-tools controls for parameter and schema expansion, model names, required properties, and schema property ordering. Preserve explicit toggle overrides of supplied configuration.

  • #10588: Ignore sibling properties on AsyncAPI Reference Objects when rendering content, navigation, search, and schemas.

  • #10587: Display AsyncAPI channel parameter locations alongside their descriptions, examples, and constraints.

  • #10595: Display AsyncAPI channel summaries and addresses separately, and label missing or null addresses as unknown in channel content and search results.

  • #10603: Display AsyncAPI message content types, inherit document defaults, and format examples for their effective media type.

  • #10615: Render AsyncAPI Avro, Protobuf, and other schema formats as labeled, copyable source instead of dropping them or treating them as JSON Schema.

  • #10617: Index response schema fields on operations and webhook request/response fields. Search nested objects, arrays, compositions, and resolved references with bounded, cycle-safe traversal while keeping field names ranked above descriptive prose.

  • #10614: Clean up API reference lint warnings while preserving existing behavior.

Commits

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits

Updates hugo-extended from 0.167.0 to 0.168.0

Commits

Updates postcss from 8.5.30 to 8.5.31

Release notes

Sourced from postcss's releases.

8.5.31

Changelog

Sourced from postcss's changelog.

8.5.31

Commits

Updates sass-embedded from 1.105.1 to 1.105.2

Changelog

Sourced from sass-embedded's changelog.

1.105.2

Node.js Embedded Host

  • Fix a deadlock when the async compiler fails to start.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@scalar/api-reference](https://github.com/scalar/scalar/tree/HEAD/packages/api-reference) | `1.74.0` | `1.75.0` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [hugo-extended](https://github.com/jakejarvis/hugo-extended) | `0.167.0` | `0.168.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.30` | `8.5.31` |
| [sass-embedded](https://github.com/sass/embedded-host-node) | `1.105.1` | `1.105.2` |


Updates `@scalar/api-reference` from 1.74.0 to 1.75.0
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/packages/api-reference/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits/HEAD/packages/api-reference)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `hugo-extended` from 0.167.0 to 0.168.0
- [Commits](jakejarvis/hugo-extended@v0.167.0...v0.168.0)

Updates `postcss` from 8.5.30 to 8.5.31
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.30...8.5.31)

Updates `sass-embedded` from 1.105.1 to 1.105.2
- [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md)
- [Commits](sass/embedded-host-node@1.105.1...1.105.2)

---
updated-dependencies:
- dependency-name: "@scalar/api-reference"
  dependency-version: 1.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: hugo-extended
  dependency-version: 0.168.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: postcss
  dependency-version: 8.5.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: sass-embedded
  dependency-version: 1.105.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team as code owners October 22, 2026 22:43
@vercel

vercel Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
chainguard-docs-preview Ready Ready Preview Oct 22, 2026 10:44pm UTC
1 Skipped Deployment
Project Deployment Actions Updated
chainguard-docs Ignored Ignored Oct 22, 2026 10:44pm UTC

Request Review

@matthewhelmke
matthewhelmke merged commit ece55fb into main Oct 23, 2026
8 checks passed
@matthewhelmke
matthewhelmke deleted the dependabot/npm_and_yarn/npm-4d43b08998 branch October 23, 2026 12:00

This branch was successfully deployed

1 active deployment
Preview – chainguard-docs-preview — 92b7788f Deployed Oct 22, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant