[dependabot]

Bumps the infrastructure group with 36 updates:

Package	From	To
toml	5.0.0	5.0.1
@biomejs/biome	2.5.14	2.5.15
@j178/prek	0.5.3	0.5.6
@tauri-apps/cli	2.11.5	2.12.3
@types/node	26.6.2	26.6.5
js-yaml	5.4.2	5.5.0
smol-toml	1.8.0	1.9.1
wrangler	4.135.0	4.151.2
fumadocs-core	16.15.12	16.17.6
fumadocs-mdx	15.4.3	15.4.7
fumadocs-ui	16.15.12	16.17.6
mermaid	12.0.0	12.2.0
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
vite	8.3.0	8.3.4
@base-ui/react	1.8.0	1.9.0
@hookform/resolvers	5.9.1	6.0.0
@stepperize/react	8.0.0	8.0.1
@tauri-apps/api	2.11.1	2.12.4
@tauri-apps/plugin-dialog	2.7.3	2.8.3
@tauri-apps/plugin-fs	2.5.2	2.7.1
@tauri-apps/plugin-shell	2.3.6	2.5.0
@tauri-apps/plugin-updater	2.12.0	2.14.0
driver.js	1.8.0	1.10.2
i18next	26.4.2	26.5.2
lucide-react	1.47.0	1.61.0
marked	18.0.13	18.1.1
monaco-editor	0.56.0	0.57.0
radix-ui	1.6.7	1.8.1
react-hook-form	7.88.0	7.90.0
react-i18next	17.0.14	17.1.0
zod	4.6.5	4.6.7
@playwright/test	1.63.0	1.64.1
@vitejs/plugin-react	6.1.1	6.1.2
globals	17.12.0	17.13.0
shadcn	4.21.0	4.22.1

Updates toml from 5.0.0 to 5.0.1

Changelog

Sourced from toml's changelog.

5.0.1 - October 12 2026

• Address four security advisories, each reachable by parsing untrusted input:
  • GHSA-h895-cgqg-jf52, in which a crafted document could still write to Object.prototype. Two distinct key paths could render to the same bookkeeping string, letting an array-of-tables header clear the guard on an unrelated key, after which a dotted key could descend through a date value into its prototype chain. The compiler now records how each table was defined on the table itself rather than in string-keyed sets, so paths cannot collide and key paths can only descend through tables the compiler created.
  • GHSA-9j65-hcg3-gc64, in which dotted keys, table headers, and inline-table keys with many segments took quadratic time to resolve.
  • GHSA-4qx8-w7c3-pj3p, in which every array-of-tables header rescanned all paths defined so far, so documents with many such headers took quadratic time.
  • GHSA-9qmh-m7c6-f92p, in which integer literals were converted to BigInt before any size check, so a multi-megabyte literal consumed super-linear CPU time before being rejected. Literals with more digits than any 64-bit integer are now rejected before conversion.

Commits

• 9ebfa69 5.0.1
• 22cf8bb Update changelog for 5.0.1
• 9d52e38 Reject integer literals too long for int64 before converting to BigInt
• 609c873 Track table origin on the table instead of in string-keyed path sets
• df2bd01 Add tests for advisories GHSA-h895-cgqg-jf52, GHSA-9j65-hcg3-gc64, GHSA-4qx8-...
• 1b2ac40 Update CHANGELOG with assigned CVE
• See full diff in compare view

Updates @biomejs/biome from 2.5.14 to 2.5.15

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.15

2.5.15

Patch Changes

• #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

  For example, the following snippet triggers the rule.

  function Component({ items = [] }) {
    return items;
  }

• #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

  <script>
    export let name;
  </script>

• #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

  {
    "linter": {
      "rules": {
        "nursery": {
          "useLogicalProperties": {
            "level": "warn",
            "options": {
              "direction": "rtl"
            }
          }
        }
      }
    }
  }

• #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

  import { page } from "$app/stores";

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.15

Patch Changes

• #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

  For example, the following snippet triggers the rule.

  function Component({ items = [] }) {
    return items;
  }

• #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

  <script>
    export let name;
  </script>

• #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

  {
    "linter": {
      "rules": {
        "nursery": {
          "useLogicalProperties": {
            "level": "warn",
            "options": {
              "direction": "rtl"
            }
          }
        }
      }
    }
  }

• #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

  import { page } from "$app/stores";

• #11723 3b429d1 Thanks @​m1handr! - Fixed #11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.

... (truncated)

Commits

• 0b4c11f ci: release (#11815)
• ad5b362 feat: adds noAstroConflictingSetDirectives rule for .astro (#11494)
• 034366d chore: update codspeed logo in readme (#12019)
• 717db8c feat(lint): add noMisplacedListElements (#11917)
• 089bde0 feat(lint/js): add useStrictBooleanExpressions (#11750)
• 1fdb5c2 feat(lint/js/svelte): add useSvelteKitRuneImports lint rule (#11960)
• faa8b37 feat(lint/js/svelte): add noSvelteExportLet (#11956)
• b2b4400 chore: update sponsors (#11973)
• ff4c4dd feat(lint/js): add noMeaninglessVoidOperator (#11732)
• 1b9479e feat(lint): add useLogicalProperties rule (#10816)
• Additional commits viewable in compare view

Updates @j178/prek from 0.5.3 to 0.5.6

Release notes

Sourced from @​j178/prek's releases.

0.5.6

Release Notes

Released on 2026-10-19.

Enhancements

• Add builtin hook check-commit-trailers (#2885)
• Add builtin hook check-signed-commit (#2725)

Performance

• Enable PGO for native release builds (#2890)
• Reduce hook process launches with balanced batches (#2907)
• Resolve hook commands before batching (#2840)

Bug fixes

• Accept UTF-8 BOM in check-json (#2879)
• Preserve unquoted dotted revisions in prek update (#2853)

Documentation

• Document standalone installer options (#2859)
• Update benchmarks for prek 0.5.5 (#2786)

Other changes

• Enable ICF for release builds (#2891)
• Update uv to 0.13.0 (#2856)

Contributors

• @​ebuildy
• @​j178
• @​shaanmajid

Install prek 0.5.6

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.5.6/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.6/prek-installer.ps1 | iex"

... (truncated)

Changelog

Sourced from @​j178/prek's changelog.

0.5.6

Released on 2026-10-19.

Enhancements

• Add builtin hook check-commit-trailers (#2885)
• Add builtin hook check-signed-commit (#2725)

Performance

• Enable PGO for native release builds (#2890)
• Reduce hook process launches with balanced batches (#2907)
• Resolve hook commands before batching (#2840)

Bug fixes

• Accept UTF-8 BOM in check-json (#2879)
• Preserve unquoted dotted revisions in prek update (#2853)

Documentation

• Document standalone installer options (#2859)
• Update benchmarks for prek 0.5.5 (#2786)

Other changes

• Enable ICF for release builds (#2891)
• Update uv to 0.13.0 (#2856)

Contributors

• @​ebuildy
• @​j178
• @​shaanmajid

0.5.5

Released on 2026-10-05.

Enhancements

• Add Nushell completion generation (#2785)
• Add ppc64le wheel and binary builds (#2809)

Performance

• Avoid JSON imports when querying Python interpreters (#2790)
• Avoid duplicate diffs after hooks rewrite files (#2815)
• Batch file reads in shebang checks (#2793)

... (truncated)

Commits

• ee8a6cc Bump version to 0.5.6 (#2909)
• 3611681 Reduce hook process launches with balanced batches (#2907)
• 1af6b80 Use PR head commits for CI change detection
• 29455ef Update dependency zensical to >=0.0.69 (#2896)
• 1fd9308 Update dependency prefix-dev/pixi to v0.81.0 (#2905)
• 140ab6b Update docker.io/astral/uv Docker tag to v0.13.0 (#2906)
• 3574ba3 Update dependency cargo-zigbuild to >=0.23.4 (#2895)
• 7c23eae Update Rust crate async_zip to 0.0.22 (#2898)
• 09f486d Update Rust crate indoc to v2.0.8 (#2899)
• 4d67721 Update Rust crate tokio-util to v0.7.20 (#2901)
• Additional commits viewable in compare view

Updates @tauri-apps/cli from 2.11.5 to 2.12.3

Release notes

Sourced from @​tauri-apps/cli's releases.

@​tauri-apps/cli v2.12.3

[2.12.3]

Bug Fixes

• c95be4615 (#16287) Fix tauri ios xcode-script failing to find the Tauri project when Xcode inherits package manager environment variables from tauri ios dev --open, or when pnpm runs the CLI directly from the gen/apple folder.
• d62e5d9c0 (#16184) Fix NSIS installer leaving uninstall.exe and the installation directory behind when uninstalling an existing installation from the installer.

Dependencies

• Upgraded to tauri-cli@2.12.3
• 5a2953e55 (#16237) Updated NSIS to 3.13

@​tauri-apps/cli v2.12.2

[2.12.2]

Bug Fixes

• c48e1ca89 (#16246) On iOS, mark the Swift @_cdecl entry points that Rust links against as public (in the iOS API and in the plugin templates), so release builds made with Xcode 27 keep them global and link.

Dependencies

• Upgraded to tauri-cli@2.12.2
• fd319dd43 Update base64 to 0.23.

@​tauri-apps/cli v2.12.1

[2.12.1]

Enhancements

• 64bfdd909 (#16165 by @​Legend-Master) Ignore src-tauri in tauri plugin init example template

Dependencies

• Upgraded to tauri-cli@2.12.1

@​tauri-apps/cli v2.12.0

[2.12.0]

New Features

• f6c1eb253 (#15401) Added bundle.windows.bundleVCRuntime to copy the Visual C++ runtime DLLs into Windows MSI and NSIS installers. The bundler locates the runtime through VCTOOLS_REDIST_DIR or the bundled vswhere.exe.

• f76b1d3ae (#15644) The bundler now prints the size of each generated bundle next to its path in the Finished N bundles at: output (directories such as macOS .app bundles are measured recursively).

• af465eae1 (#15619) Add a --no-binary-patching flag to tauri build and tauri bundle. When set, the bundler skips patching the main executable with bundle type information (and the subsequent re-signing), leaving an already-signed binary untouched. Patching is only required when shipping multiple bundle types per platform that should each update with their own installer format.

• 0646cc162 (#15620) Add a --fit option to tauri icon to accept non-square source images. --fit cover center-crops the source to a square (clipping the longer side) and --fit contain pads the shorter side with transparency. Non-square sources without --fit keep erroring, now with a hint pointing to the flag.

• f6c1eb253 (#15401) Added build.windows.staticVCRuntime to control MSVC static runtime linking. The STATIC_VCRUNTIME environment variable is now deprecated and emits a migration warning when used.

• f45ec0dcf Record the app version in the trusted comment of updater signatures, so a signed artifact is bound to the version it was released as.

  An update endpoint response is not signed, and the signature only covers the downloaded artifact, so the announced version on its own does not prove which release the url and signature point at. minisign covers the trusted comment with its global signature, which lets the updater plugin compare the two and reject a response that pairs a version number with a different release. Enable requireSignedVersion in the updater plugin configuration to enforce this.

... (truncated)

Commits

• 59b63ab Apply Version Updates From Current Changes (#16255)
• 55883af fix(bundler): Update rpm-rs to 0.30 (#15639)
• 744ff2b chore(deps): bump rustls to 0.23.46
• c95be46 fix(cli): xcode-script tauri CWD rewrite (#16287)
• dc637db chore: add missing api change file (#16260)
• b948762 fix(macos-sign): import the signing certificate as an explicit pkcs12 (fix: #...
• 7b673dd fix(core): drop late mobile plugin responses instead of panicking (#16146)
• 5a61498 fix(bundler): keep script stderr in errors and hint at the Finder permission ...
• 5a3cbfc fix(macos-codesign): Inline apple-codesign code (#16279)
• 141d1c0 fix(acl): resolve permission files after the target dir is moved (#16199)
• Additional commits viewable in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates js-yaml from 5.4.2 to 5.5.0

Changelog

Sourced from js-yaml's changelog.

[5.5.0] - 2026-10-16

Changed

• Updated argparse to v3.
• Updated development dependencies.

Fixed

• Correct percent-encoding of shorthand and verbatim tags.
• Reject ,, ], and } at the start of block plain scalars, #801.
• Report the exact position of non-printable characters in errors, #801.

[5.4.3] - 2026-10-06

Fixed

• Fixed loading a whitespace-only block scalar followed by a less indented line, #802.

Commits

• cb62b2d 5.5.0 released
• 87aed90 Deps bump
• 3aec511 Fix error positions for non-printable characters, #801
• 11aa483 Reject flow indicators at the start of block plain scalars, #801
• 339d8e0 Refactor tag encoder and decoder to match the YAML specification
• 7832624 5.4.3 released
• 0cbb471 Fix whitespace-only block scalar followed by a less indented line, close #802
• 30108cc Parse the first block mapping key once (#800)
• See full diff in compare view

Updates smol-toml from 1.8.0 to 1.9.1

Release notes

Sourced from smol-toml's releases.

v1.9.1

What's Changed

• fix: reject invalid extra exponent sign by @​cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.9.0...v1.9.1

v1.9.0

Huge update!!! This is most likely the largest update the library received since its release, with lots of new features and improvements.

Performance improvements

Significant parts of the internal parse logic have been rewritten, improving performance by 1.5x-2x. The library was already comfortably ahead of the others, but it is now faster than ever, sitting at 4x faster parse performance than the closest maintained implementation.

Problematic code paths have also been replaced by safer implementations, solving potential DoS vectors. See GHSA-r4xh-jqrq-34v2.

Note: the objects returned by the library now have a null prototype. This is a transparent change for 99.9% of users, and is one of the most significant contributors to the major performance gains in this version.

Full Temporal support

Version 1.8.0 brought support for Temporal in stringify; now the library is also able to emit Temporal objects instead of its own ad-hoc TomlDate object. It is not enabled by default, but it will become the default in v2. Enable by setting useLegacyDate: false in the parser's options.

Better Temporal support in stringify

Temporal support has been improved since it released: Temporal objects that cannot be represented (such as Temporal.PlainMonthDay) now throw an error (instead of silently emitting a bogus object).

A new option has been added to stringify to disallow Temporal objects that cannot be fully represented in TOML. This includes ZonedDateTime objects with a IANA timezone attached instead of a plain offset, and dates with a specific calendar value set. Enable by setting strictTemporal: true in the options.

Handling of unsafe keys

Since its release the library has been protected against prototype pollution attacks, setting properties like __proto__ using safe mechanisms that do not trigger prototype pollution. However, while the returned objects are safe on their own, they may become problematic if used carelessly.

Inspired by secure-json-parse, the library now offers a way to either drop unsafe properties from the returned object, or to throw an error and reject documents altogether. By default, these potentially unsafe keys are preserved and returned.

Miscellaneous updates

• Unicode BOM is now gracefully accepted and ignored.
• Table array headers are now properly checked again. Reported in #65.
• Closed certain gaps where invalid whitespace would be accepted. Reported in #61.
• Bogus local date and local time values with a UTC offset are no longer accepted.
• Certain error messages are more accurate and handle errors at line boundaries better.
• The default export of the lib is now formally deprecated; use a import * instead. Proposed in #50.
• On Node 20+, strings that contain lone surrogates are now normalised to well-formed strings.
• On Node 20+, keys that contain lone surrogates are now rejected.

Full Changelog: squirrelchat/smol-toml@v1.8.0...v1.9.0

Commits

• 69aa050 fix: actually properly fix exponent issues
• 7be7084 chore: version bump
• be3290d chore: upgrade deps
• 86c7613 fix: reject invalid extra exponent sign
• 6f9739a fix: gate [is|to]WellFormed (Node 18 compat)
• a73ca32 fix: no Temporal with toml-test when Node < 26
• 7727890 chore: version bump
• 641903d chore: rewrite README.md
• 2df14c5 fix(types): make it work if Temporal doesn't exist
• 3eaa44e chore: update benchmark harness
• Additional commits viewable in compare view

Updates wrangler from 4.135.0 to 4.151.2

Release notes

Sourced from wrangler's releases.

wrangler@4.151.2

Patch Changes

• #16307 37ab91c Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20261006.1	^5.20261016.1
  workerd	1.20261012.1	1.20261016.1

• #16352 0ae7926 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20261016.1	^5.20261019.1
  workerd	1.20261016.1	1.20261019.1

• Updated dependencies [37ab91c, 0ae7926]:

  • miniflare@5.20261019.0-beta

wrangler@4.151.1

Patch Changes

• #15541 e13d5cc Thanks @​mack-erel! - Keep remote dev sessions alive through transient network failures

  wrangler dev --remote and getPlatformProxy() refresh their preview token before it expires, but a single failed refresh — for example while the network was briefly down — stopped refreshing for good, leaving the session broken until restart. A failed refresh now retries every minute until it succeeds. Rebuilds also no longer push the refresh past the session's expiry.

• #16284 42c6912 Thanks @​karloper! - Fix wrangler rollback reporting success after the changed secrets confirmation is declined

  Previously, declining the "The following secrets have changed…" confirmation printed "Aborting rollback..." and then also printed a success message and the target version as the "Current Version ID", even though no deployment was made and the original version was still live. Wrangler now stops after aborting, so the output matches what is actually deployed.

• #13742 4a5377f Thanks @​edmundhung! - Hide the wrangler dev hotkey bar when Turborepo does not forward input

• Updated dependencies [e1d1b77]:

  • miniflare@5.20261012.1-beta

wrangler@4.151.0

Minor Changes

• #16245 d6b1c82 Thanks @​WalshyDev! - Include source maps by default in wrangler build --experimental-cf-build-output

  Build Output now matches wrangler deploy and wrangler versions upload, which upload source maps by default, so Workers built for tools like cf get stack traces that point at the original source. Source maps that can't be resolved are skipped rather than failing the build. Set upload_source_maps = false to opt out.

Patch Changes

• #16220 97b2fb1 Thanks @​FlorentCollin! - Support local D1 queries through the experimental d1_binding_jsrpc compatibility flag

... (truncated)

Commits

• 601ca30 Version Packages (#16313)
• 89cc3c7 [wrangler] Fix deploy warning snapshots (#16353)
• fc51b96 De-centralize CLI specific messaging (#16225)
• e7f9e4e Version Packages (#16287)
• 4a5377f [wrangler] Hide unusable dev hotkeys under Turborepo (#13742)
• 42c6912 [wrangler] Don't report rollback success after declining changed secrets conf...
• e13d5cc [remote-bindings] Retry proactive preview token refresh after a transient fai...
• b81efbc Version Packages (#16241)
• d6b1c82 Generate source maps by default for Vite plugin Workers and Build Output (#16...
• fb3d9c8 Version Packages (#16162)
• Additional commits viewable in compare view

Updates fumadocs-core from 16.15.12 to 16.17.6

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.17.6

• @​fumadocs/base-ui@​16.17.6
• fumadocs-core@16.17.6
• fumadocs-ui@16.17.6

i18n parser: 'none'

• parser: 'none' no longer parses locales from file paths, files without a locale belong to the default language.

Generated pages in every language

• Virtual files accept a locale, $ for every language, instead of parsing it from their path.
• Pages from staticSource() and dynamicSource() of OpenAPI, AsyncAPI and GraphQL are shared with every language of loader().

Fix #3720

fumadocs@16.17.5

• @​fumadocs/base-ui@​16.17.5
• fumadocs-core@16.17.5
• fumadocs-ui@16.17.5

Faster API pages and search indexes

• Schema UI generates the schemas it shows when they open, instead of every schema reachable from the root.
• Inline schemas are identified by their position, links to their properties copied before this version no longer open them.
• TypeScript definitions of bodies are generated when copied.
• Search indexes take breadcrumbs from one walk of the page tree, instead of a search for each page.

fumadocs@16.17.4

• @​fumadocs/base-ui@​16.17.4
• fumadocs-core@16.17.4
• fumadocs-ui@16.17.4

Keyboard-scrollable MDX tables

• Tables of defaultMdxComponents are focusable, so keyboard users can scroll wide tables in Safari.

Fix #3706

Use prose-sm and prose-xs for small prose

Small prose in TOC items, type tables, API descriptions and AI chat scales its code and headings with the text.

Spacious: define --fd-docs-height for pages

Sticky content of pages, like the example column of API pages, fits the page panel.

fumadocs@16.17.3

• @​fumadocs/base-ui@​16.17.3
• fumadocs-core@16.17.3

... (truncated)

Commits

• 7e47d07 Version Packages (#3715)
• 5af6a32 docs: mention pele
• fb45f0b docs: add example for pele
• 61fbafb fix(api-docs): improve file generation logics
• b65aad1 refactor(preview): pass AI chat prompt as instructions (#3721)
• 825107f Redesign GraphQL (#3718)
• 7b2b93d fix(ui): hide decorative GitHub navigation icons (#3716)
• 5f4ce84 fix(openapi): fix /base path
• 1b45511 docs: define trust boundary
• a182cf3 Version Packages (#3710)
• Additional commits viewable in compare view

Updates fumadocs-mdx from 15.4.3 to 15.4.7

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.7

Markdown and search records from the authored source

remarkLLMs() and remarkStructure() of fumadocs-core slice their Markdown from the authored source like Sätteri, instead of stringifying the syntax tree. It is much faster, Markdown is no longer escaped or reformatted, and local images keep their addresses. Re-sync your search indexes to pick up the new records.

• Plugins record the Markdown of content they replace with replaceSource() or embedSource() from fumadocs-core/mdx-plugins/stringifier, in place of data._stringify, and add search records with data.structuredData. Nodes they insert otherwise are left out. A namespace limits an edit to the stringifiers of that namespace, like search for search records.
• Search records are always Markdown, also in Sätteri. filterElement replaces stringify.filterElement, it chooses the JSX elements kept as HTML tags (File, TypeTable, Callout and Card by default) that search dialogs render as components. Other elements and links are replaced by their content, images are removed, and an element on one line is recorded like a paragraph.
• Removed defaultStringifier() (use createStringifier()), StringifyOptions, allowedMdxAttributes, filterMdxAttributes, placeholder() (use mdxAsPlaceholder), and the stringify and mdast-util-to-markdown options of both plugins.
• Included content goes through the plugins like the document's own, Sätteri includes .md files as Markdown.
• <auto-files> shows its files in a code block, auto-type-table its props in a Markdown table, created by typeTableToMarkdown() from fumadocs-typescript.
• remarkShow() and fileGenerator() of fumadocs-docgen record their Markdown, generators receive the file to do the same.
• Records of fumadocs-obsidian resolve wikilinks, and leave comments, block IDs, callout markers and embeds out. Comments are removed before parsing, so they no longer split a paragraph.
• Pages of fumadocs-python compile from their MDX, so they have Markdown and search records.
• fumadocs-mdx, fumadocs-docgen and fumadocs-obsidian require fumadocs-core 16.17.0.

Fix #3662

fumadocs-mdx@15.4.6

Keep collection dir outside the project in file paths

When a collection's dir was outside the project (e.g. ../content/docs), the leading ../ was dropped from info.fullPath and absolutePath, so getText('raw') failed with ENOENT.

Fix #3623

Commits

• e380a0d Version Packages (#3659)
• 5d9353b feat(core): better mixedbread search
• 097a544 feat(openapi): auth provider API
• 945b87a fix(core,satteri): optimize traverse & better search records
• 3bf9928 fix(ui): display fallback tree slidings correctly
• 433b586 fix(openapi): better code examples
• b221e1d fix(twoslash): better truncate & performance
• 48bf8c6 fix(openapi,typescript): render Markdown images, show the OAuth redirect URI
• cb7d92c docs: introduce new APIs
• 8f1ffb3 refactor(ui): use prose class for search result markdown
• Additional commits viewable in compare view

Updates fumadocs-ui from 16.15.12 to 16.17.6

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.17.6

• @​fumadocs/base-ui@​16.17.6
• fumadocs-core@16.17.6
• fumadocs-ui@16.17.6

i18n parser: 'none'

• parser: 'none' no longer parses locales from file paths, files without a locale belong to the default language.

Generated pages in every language

• Virtual files accept a locale, $ for every language, instead of parsing it from their path.
• Pages from staticSource() and dynamicSource() of OpenAPI, AsyncAPI and GraphQL are shared with every language of loader().

Fix #3720

fumadocs@16.17.5

• @​fumadocs/base-ui@​16.17.5
• fumadocs-core@16.17.5
• fumadocs-ui@16.17.5

Faster API pages and search indexes

• Schema UI generates the schemas it shows when they open, instead of every schema reachable from the root.
• Inline schemas are identified by their position, links to their properties copied before this version no longer open them.
• TypeScript definitions of bodies are generated when copied.
• Search indexes take breadcrumbs from one walk of the page tree, instead of a search for each page.

fumadocs@16.17.4

• @​fumadocs/base-ui@​16.17.4
• fumadocs-core@16.17.4
• fumadocs-ui@16.17.4

Keyboard-scrollable MDX tables

• Tables of defaultMdxComponents are focusable, so keyboard users can scroll wide tables in Safari.

Fix #3706

Use prose-sm and prose-xs for small prose

Small prose in TOC items, type tables, API descriptions and AI chat scales its code and headings with the text.

Spacious: define --fd-docs-height for pages

Sticky content of pages, like the example column of API pages, fits the page panel.

fumadocs@16.17.3

• @​fumadocs/base-ui@​16.17.3
• fumadocs-core@16.17.3

... (truncated)

Commits

• 7e47d07 Version Packages (#3715)
• 5af6a32 docs: mention pele
• fb45f0b docs: add example for pele
• 61fbafb fix(api-docs): improve file generation logics

[github-actions]

📦 Semifold release plan

Plan calculated through commit d2ad417.

Note

This pull request does not introduce any changesets.

After this pull request is merged into main, the release workflow will run and publish any prepared package versions that are not yet available in their registry.

This comment updates automatically as the pull request changes.

[HsiangNianian]

@hydroroll-bot 发一个token来的表情包吧

[hydroroll-bot]

GitHub 这边贴不了表情包，我丢到「当归-老大、绿箭、looking、简律纯-老大、krypton」那个群了，117 号那张 Q 版伸手要 token 的。

[HsiangNianian]

GitHub 这边贴不了表情包，我丢到「当归-老大、绿箭、looking、简律纯-老大、krypton」那个群了，117 号那张 Q 版伸手要 token 的。

那个群群号多少？

[hydroroll-bot]

群号是 1087528986，群名「当归-老大、绿箭、looking、简律纯-老大、krypton」。117 号那张的表情包我已经发到那边了。

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

[hydroroll-bot]

群号是 1087528986，群名「当归-老大、绿箭、looking、简律纯-老大、krypton」。117 号那张图已经发在那边的群聊里了。