From 39d395cef9c0df1553c502a494df4f5105bab0a4 Mon Sep 17 00:00:00 2001 From: Peter Steinberger Date: Tue, 27 Oct 2026 15:06:47 -0700 Subject: [PATCH] build(deps): patch Markdown parser and refresh docs tooling Consolidates #283 and #291, fixing both open markdown-it denial-of-service advisories. Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- CHANGELOG.md | 2 ++ package-lock.json | 59 ++++++++++++++++++++++++----------------------- package.json | 10 ++++---- 3 files changed, 37 insertions(+), 34 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e0afb82b51..864b6b8ef8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,8 @@ ## Unreleased +- Fix two Markdown parser denial-of-service advisories with markdown-it 15.0.3 and refresh Carapace, icons, animation, and browser-test tooling within the two-day dependency cooldown. Thanks @dependabot! (#283, #291) + - Reduce translation token use by reconciling only missing or changed pages at high effort; keep full retranslation as explicit recovery and preserve completed work across retries and resumes. **Highlights:** Stable section links and reliable source indexing and translated docs, with bounded publishing requests and workflow jobs. diff --git a/package-lock.json b/package-lock.json index a67e0bdc16..17d9923279 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6,7 +6,7 @@ "": { "name": "openclaw-docs-site", "dependencies": { - "@openclaw/carapace": "git+https://github.com/openclaw/carapace.git#v0.6.2" + "@openclaw/carapace": "git+https://github.com/openclaw/carapace.git#v0.6.3" }, "devDependencies": { "@mdx-js/mdx": "3.1.1", @@ -15,12 +15,12 @@ "glimm": "0.3.1", "highlight.js": "11.12.0", "htmlparser2": "12.0.0", - "lucide": "1.56.0", - "markdown-it": "15.0.2", + "lucide": "1.61.0", + "markdown-it": "15.0.3", "markdown-it-anchor": "10.0.0", "pagefind": "1.5.2", - "pele": "1.6.0", - "playwright": "^1.64.0", + "pele": "1.10.0", + "playwright": "^1.64.1", "tsx": "4.23.15", "web-vitals": "6.2.3", "yaml": "2.9.1" @@ -507,8 +507,9 @@ } }, "node_modules/@openclaw/carapace": { - "version": "0.6.2", - "resolved": "git+ssh://git@github.com/openclaw/carapace.git#6c38d2a9b558104957d581033bce5a127632d60e", + "version": "0.6.3", + "resolved": "git+https://github.com/openclaw/carapace.git#c3d76bc75504c8289a16c9dc582c52d65f20207d", + "integrity": "sha512-0Kva3yEZ8uBf1b+mVoNWU/hMP+PJNZ7m9+NKJQaTVMYTkCE+r3VE2C8lihKj1vO9BSmnA7wMj2Q4Fe48uRnupg==", "license": "MIT", "engines": { "bun": ">=1.3.0" @@ -1009,9 +1010,9 @@ } }, "node_modules/argparse": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/argparse/-/argparse-3.0.2.tgz", - "integrity": "sha512-mFdDM6WqWKraGLsVb+C9CahPnzTXOefAOLq3jYcca2YZ8bEWpr++Tzj+zSaKW9+X9L5uSxcm1AZ3Y6aZJ09OhQ==", + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/argparse/-/argparse-3.0.4.tgz", + "integrity": "sha512-fwWK3Zq22l4XJJjx5mcBHGikIk+hJqO+32dPm0Jur7+rtG5x1scOjSfdT9ZKeWHPpsya/l0HHK4tDImBkTrtvA==", "dev": true, "funding": [ { @@ -1698,9 +1699,9 @@ } }, "node_modules/lucide": { - "version": "1.56.0", - "resolved": "https://registry.npmjs.org/lucide/-/lucide-1.56.0.tgz", - "integrity": "sha512-BOrr2xku0dGUzWvdBZK3NlEdEzcEvXoLRyGvC27lyFB1tSL7Lc7vW61CKeVcw92K2L9y6aNKS7fJ8fVzw/MXIw==", + "version": "1.61.0", + "resolved": "https://registry.npmjs.org/lucide/-/lucide-1.61.0.tgz", + "integrity": "sha512-RPNMBgej6WjPKuCNEODg83CF8lnraCeDOsZ3HZ7KvUYf0O5hdJBzer/Ax/meBHl3xvrp5NmKX0IDA5myyzlvGw==", "dev": true, "license": "ISC" }, @@ -1718,9 +1719,9 @@ } }, "node_modules/markdown-it": { - "version": "15.0.2", - "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-15.0.2.tgz", - "integrity": "sha512-q4IGxMv56jCqT4OCRCADBoDP3LO4MhmTXjFbphHPXs4g3j9Xg5RDnxqN8IF/3vIWEU+VCnUq+7JUg/cfy2E6Qw==", + "version": "15.0.3", + "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-15.0.3.tgz", + "integrity": "sha512-+Az7Ojz3iRGu8KYMvJ6xVhvrxP3eE+vEtJX75Ow88XBpcQNV/0lGX5ZynIIBftREo4DC2jsveAMDaeltmm8QvQ==", "dev": true, "funding": [ { @@ -1734,9 +1735,9 @@ ], "license": "MIT", "dependencies": { - "argparse": "^3.0.0", - "entities": "^8.0.0", - "linkify-it": "^6.0.0", + "argparse": "^3.0.3", + "entities": "^8.1.0", + "linkify-it": "^6.1.0", "mdurl": "^2.1.0", "punycode.js": "^2.3.1", "uc.micro": "^3.0.0" @@ -2620,9 +2621,9 @@ "license": "MIT" }, "node_modules/pele": { - "version": "1.6.0", - "resolved": "https://registry.npmjs.org/pele/-/pele-1.6.0.tgz", - "integrity": "sha512-VfAiVItsOGlGhvnBfphdT28VCG7mXMZxQNOwAGsCtxI2ztbUsT39MraEOYjsapLxVETkdUZscm0DdotYDQMLdw==", + "version": "1.10.0", + "resolved": "https://registry.npmjs.org/pele/-/pele-1.10.0.tgz", + "integrity": "sha512-hDMEM+GQ01pZin8tst3PRXGeB/xFATvXBreHHtjx2glSNAQ7nHFq7EbMuNJGTbqkYgueWPboLjyUBsAudsb1qQ==", "dev": true, "license": "MIT", "engines": { @@ -2630,13 +2631,13 @@ } }, "node_modules/playwright": { - "version": "1.64.0", - "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.64.0.tgz", - "integrity": "sha512-kVzTnYFYEyQ9RGzBjNCd2+yEqWmVbxl3AHPynv3qQ6JTjv4a+kwRcnqQwIpuP3NnrnIrE/Q6wWAIAvMfIE2/Yg==", + "version": "1.64.1", + "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.64.1.tgz", + "integrity": "sha512-HCrVhHr5QQuwYoswEUGTb7gGp522yflbv/ST8nF4sFWGuLjQCt17Q/EubpGGSNKYn1tsTCPZxqHhHCfVURu7UA==", "dev": true, "license": "Apache-2.0", "dependencies": { - "playwright-core": "1.64.0" + "playwright-core": "1.64.1" }, "bin": { "playwright": "cli.js" @@ -2646,9 +2647,9 @@ } }, "node_modules/playwright-core": { - "version": "1.64.0", - "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.64.0.tgz", - "integrity": "sha512-T9r+MZkTECl2+oUcZ26YgZzTrYidTsIhYYkJix+6iDOymOb1FB2RLLSOxRGnZGv5DStt+aduIVbt+E8WygXYpg==", + "version": "1.64.1", + "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.64.1.tgz", + "integrity": "sha512-BC4s8y6SEVA6Q1rSxZTto8hI1KUI3xXlHGZgvGqP4IqPdI/a6FX9H29IDNz7vKo9l21b6LfYosScPL6M3xxyDQ==", "dev": true, "license": "Apache-2.0", "bin": { diff --git a/package.json b/package.json index bd25c116b9..1dabbc422f 100644 --- a/package.json +++ b/package.json @@ -28,17 +28,17 @@ "glimm": "0.3.1", "highlight.js": "11.12.0", "htmlparser2": "12.0.0", - "lucide": "1.56.0", - "markdown-it": "15.0.2", + "lucide": "1.61.0", + "markdown-it": "15.0.3", "markdown-it-anchor": "10.0.0", "pagefind": "1.5.2", - "pele": "1.6.0", - "playwright": "^1.64.0", + "pele": "1.10.0", + "playwright": "^1.64.1", "tsx": "4.23.15", "web-vitals": "6.2.3", "yaml": "2.9.1" }, "dependencies": { - "@openclaw/carapace": "git+https://github.com/openclaw/carapace.git#v0.6.2" + "@openclaw/carapace": "git+https://github.com/openclaw/carapace.git#v0.6.3" } }