chore(deps): Bump the docs group in /docs with 9 updates by dependabot[bot] · Pull Request #517 · TrogonStack/TrogonEventStore

dependabot · 2026-10-01T14:11:33Z

Bumps the docs group in /docs with 9 updates:

Package	From	To
@vuepress/plugin-docsearch	`2.0.0-rc.132`	`2.0.0-rc.137`
@vuepress/plugin-google-analytics	`2.0.0-rc.130`	`2.0.0-rc.135`
@vuepress/plugin-register-components	`2.0.0-rc.132`	`2.0.0-rc.135`
@vuepress/theme-default	`2.0.0-rc.132`	`2.0.0-rc.137`
sass-loader	`17.0.0`	`17.0.1`
vue	`3.5.42`	`3.5.43`
vuepress-plugin-md-enhance	`2.0.0-rc.107`	`2.0.0-rc.109`
eslint	`10.9.1`	`10.11.0`
markdown-it	`15.0.1`	`15.0.2`

Updates @vuepress/plugin-docsearch from 2.0.0-rc.132 to 2.0.0-rc.137

Commits

See full diff in compare view

Updates @vuepress/plugin-google-analytics from 2.0.0-rc.130 to 2.0.0-rc.135

Commits

See full diff in compare view

Updates @vuepress/plugin-register-components from 2.0.0-rc.132 to 2.0.0-rc.135

Commits

See full diff in compare view

Updates @vuepress/theme-default from 2.0.0-rc.132 to 2.0.0-rc.137

Commits

See full diff in compare view

Updates sass-loader from 17.0.0 to 17.0.1

Release notes

Sourced from sass-loader's releases.

v17.0.1

Patch Changes

Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @alexander-akait in #1337)

Changelog

Sourced from sass-loader's changelog.

17.0.1

Patch Changes

Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @alexander-akait in #1337)

Commits

f38ee40 chore(release): new release (#1338)
d33042b docs: explain how @use/@import requests are resolved (#1339)
72640db fix: remove the BOM from the compiled CSS (#1337)
a28ab73 docs: use the built-in CSS support of webpack in examples (#1336)
7b81867 chore(deps): apply socket fixes (#1333)
b17bc02 chore(deps-dev): bump postcss from 8.5.14 to 8.5.26 (#1332)
c7a83fe chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.5 (#1331)
14a29c0 chore(deps-dev): bump shell-quote from 1.8.2 to 1.10.0 (#1328)
e2a48b8 chore(deps): bump immutable from 5.1.5 to 5.1.9 (#1327)
87864a5 chore(deps-dev): bump @babel/core from 7.29.0 to 7.29.6 (#1326)
Additional commits viewable in compare view

Updates vue from 3.5.42 to 3.5.43

Release notes

Sourced from vue's releases.

v3.5.43

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.43 (2026-09-17)

Bug Fixes

compiler-sfc: ignore comment delimiters inside strings and url() when parsing css vars (#15548) (2fde323)

compiler-sfc: prepend semicolon for await in switch case (#15498) (9a1df69), closes #15495

compiler-sfc: restore await scope when leaving nested blocks (5409708), closes #15465

compiler-sfc: reuse parsed parent configs across tsconfig walks (fix #15478) (#15480) (d6febaa)

hydration: run leave hooks for hydration placeholders (#15431) (5dda192)

reactivity: preserve readonly wrappers in array copy methods (#15469) (599f35b)

runtime-core: unmount v-once children after parent rerenders (#15435) (d720338)

shared: handle circular references in looseEqual (#15499) (718f782), closes #15496

shared: preserve comment-like text in style values (#15471) (b9456cb)

suspense: don't drop nested suspense patches during hydration (#15429) (76d42dc)

suspense: keep the boundary pending while its branch is patched (#15411) (bfcfe9e), closes #7506

suspense: patch a hydrating boundary's pending branch in place (#15432) (2cde6f7)

suspense: unmount the DOM an interrupted async component claimed (#15430) (fb9b45c)

types: keep optional props when a runtime prop uses a generic PropType (#15523) (243aabc), closes #9546

Commits

5be58b4 release: v3.5.43
a0b61aa chore: remove and ignore generated git hooks
2fde323 fix(compiler-sfc): ignore comment delimiters inside strings and url() when pa...
599f35b fix(reactivity): preserve readonly wrappers in array copy methods (#15469)
55a2b45 chore(deps): update pnpm to v12 (#15439)
243aabc fix(types): keep optional props when a runtime prop uses a generic PropType (...
718f782 fix(shared): handle circular references in looseEqual (#15499)
9a1df69 fix(compiler-sfc): prepend semicolon for await in switch case (#15498)
d6febaa fix(compiler-sfc): reuse parsed parent configs across tsconfig walks (fix #15...
b9456cb fix(shared): preserve comment-like text in style values (#15471)
Additional commits viewable in compare view

Updates vuepress-plugin-md-enhance from 2.0.0-rc.107 to 2.0.0-rc.109

Release notes

Sourced from vuepress-plugin-md-enhance's releases.

v2.0.0-rc.108

🐛 Bug Fixes

create: fix pnpm allow build (8521962)

deps: update dependency vidstack to v1.15.6 (#5345) (0a0fd1d)

Documentation

fix logo (6a0b6d6)

Changelog

Sourced from vuepress-plugin-md-enhance's changelog.

2.0.0-rc.109 (2026-09-07)

Note: Version bump only for package vuepress-plugin-md-enhance

2.0.0-rc.108 (2026-09-07)

Miscellaneous Chores

deps: update dependency markdown-it to v14.3.1 (#5369) (331fc1b)

Build System

bump deps (cdb1603)

bump deps (#5404) (dd81e3f)

Commits

8e0cbee chore(release): publish v2.0.0-rc.109
6a6d270 chore(release): publish v2.0.0-rc.108
331fc1b chore(deps): update dependency markdown-it to v14.3.1 (#5369)
dd81e3f build: bump deps (#5404)
cdb1603 build: bump deps
See full diff in compare view

Updates eslint from 10.9.1 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)

397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)

d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)

b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)

26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)

6c789ff docs: Update README (GitHub Actions Bot)

5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)

92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)

9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])

24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)

45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])

ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)

c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)

f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)

fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)

v10.10.0

Features

264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)

c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)

5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)

427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)

9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)

87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)

8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)

9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

2417cad docs: Update README (GitHub Actions Bot)

9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)

8724829 docs: update compat table links (#21263) (fnx)

5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)

1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))

... (truncated)

Commits

3c0b7c6 10.11.0
321f0a7 Build: changelog update for 10.11.0
520dd77 perf: Implement fast paths in critical areas (#21210)
9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
24310e3 chore: update ecosystem plugins (#21324)
d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
Additional commits viewable in compare view

Updates markdown-it from 15.0.1 to 15.0.2

Changelog

Sourced from markdown-it's changelog.

[15.0.2] - 2026-09-11

Security

Fixed quadratic complexity in smartquotes when quote types don't match, #1209. Also limited the smartquotes stack to 1000 unmatched openers.

Commits

3c51991 15.0.2 released
cf27366 Polish #1209 and limit smartquotes stack to 1000 openers
1b379c1 Fix quadratic complexity in smartquotes rule when quote types don't match (#1...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

Bumps the docs group in /docs with 9 updates: | Package | From | To | | --- | --- | --- | | [@vuepress/plugin-docsearch](https://github.com/vuepress/vuepress-next) | `2.0.0-rc.132` | `2.0.0-rc.137` | | [@vuepress/plugin-google-analytics](https://github.com/vuejs/vuepress/tree/HEAD/packages/@vuepress/plugin-google-analytics) | `2.0.0-rc.130` | `2.0.0-rc.135` | | [@vuepress/plugin-register-components](https://github.com/vuejs/vuepress/tree/HEAD/packages/@vuepress/plugin-register-components) | `2.0.0-rc.132` | `2.0.0-rc.135` | | [@vuepress/theme-default](https://github.com/vuejs/vuepress/tree/HEAD/packages/@vuepress/theme-default) | `2.0.0-rc.132` | `2.0.0-rc.137` | | [sass-loader](https://github.com/webpack/sass-loader) | `17.0.0` | `17.0.1` | | [vue](https://github.com/vuejs/core) | `3.5.42` | `3.5.43` | | [vuepress-plugin-md-enhance](https://github.com/vuepress-theme-hope/vuepress-theme-hope/tree/HEAD/packages/md-enhance) | `2.0.0-rc.107` | `2.0.0-rc.109` | | [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.11.0` | | [markdown-it](https://github.com/markdown-it/markdown-it) | `15.0.1` | `15.0.2` | Updates `@vuepress/plugin-docsearch` from 2.0.0-rc.132 to 2.0.0-rc.137 - [Release notes](https://github.com/vuepress/vuepress-next/releases) - [Changelog](https://github.com/vuepress/core/blob/main/CHANGELOG.md) - [Commits](https://github.com/vuepress/vuepress-next/commits) Updates `@vuepress/plugin-google-analytics` from 2.0.0-rc.130 to 2.0.0-rc.135 - [Release notes](https://github.com/vuejs/vuepress/releases) - [Changelog](https://github.com/vuejs/vuepress/blob/master/CHANGELOG.md) - [Commits](https://github.com/vuejs/vuepress/commits/HEAD/packages/@vuepress/plugin-google-analytics) Updates `@vuepress/plugin-register-components` from 2.0.0-rc.132 to 2.0.0-rc.135 - [Release notes](https://github.com/vuejs/vuepress/releases) - [Changelog](https://github.com/vuejs/vuepress/blob/master/CHANGELOG.md) - [Commits](https://github.com/vuejs/vuepress/commits/HEAD/packages/@vuepress/plugin-register-components) Updates `@vuepress/theme-default` from 2.0.0-rc.132 to 2.0.0-rc.137 - [Release notes](https://github.com/vuejs/vuepress/releases) - [Changelog](https://github.com/vuejs/vuepress/blob/master/CHANGELOG.md) - [Commits](https://github.com/vuejs/vuepress/commits/HEAD/packages/@vuepress/theme-default) Updates `sass-loader` from 17.0.0 to 17.0.1 - [Release notes](https://github.com/webpack/sass-loader/releases) - [Changelog](https://github.com/webpack/sass-loader/blob/main/CHANGELOG.md) - [Commits](webpack/sass-loader@v17.0.0...v17.0.1) Updates `vue` from 3.5.42 to 3.5.43 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.42...v3.5.43) Updates `vuepress-plugin-md-enhance` from 2.0.0-rc.107 to 2.0.0-rc.109 - [Release notes](https://github.com/vuepress-theme-hope/vuepress-theme-hope/releases) - [Changelog](https://github.com/vuepress-theme-hope/vuepress-theme-hope/blob/main/packages/md-enhance/CHANGELOG.md) - [Commits](https://github.com/vuepress-theme-hope/vuepress-theme-hope/commits/v2.0.0-rc.109/packages/md-enhance) Updates `eslint` from 10.9.1 to 10.11.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.9.1...v10.11.0) Updates `markdown-it` from 15.0.1 to 15.0.2 - [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md) - [Commits](markdown-it/markdown-it@15.0.1...15.0.2) --- updated-dependencies: - dependency-name: "@vuepress/plugin-docsearch" dependency-version: 2.0.0-rc.137 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs - dependency-name: "@vuepress/plugin-google-analytics" dependency-version: 2.0.0-rc.135 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs - dependency-name: "@vuepress/plugin-register-components" dependency-version: 2.0.0-rc.135 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs - dependency-name: "@vuepress/theme-default" dependency-version: 2.0.0-rc.137 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs - dependency-name: sass-loader dependency-version: 17.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs - dependency-name: vue dependency-version: 3.5.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs - dependency-name: vuepress-plugin-md-enhance dependency-version: 2.0.0-rc.109 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs - dependency-name: eslint dependency-version: 10.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: docs - dependency-name: markdown-it dependency-version: 15.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: docs ... Signed-off-by: dependabot[bot] <support@github.com>

cursor · 2026-10-01T14:11:45Z

PR Summary

Low Risk
Dependency-only changes in the documentation package; risk is limited to docs build/dev behavior and should be validated with pnpm install and vuepress build in docs/.

Overview
Updates only the docs/ site toolchain: docs/package.json version bumps and a refreshed docs/pnpm-lock.yaml. No source or config changes outside dependency manifests.

Direct dependency updates: VuePress plugins/theme (@vuepress/plugin-docsearch rc.137, theme-default rc.137, analytics/register-components rc.135), vuepress-plugin-md-enhance rc.109, vue 3.5.43, eslint 10.11.0, markdown-it 15.0.2, and sass-loader 17.0.1.

Notable lockfile fallout: DocSearch moves from 4.x to 5.1.1; markdown enhancement stack upgrades @mdit/* plugins to 2.x (markdown-it 15 peer); VuePress ecosystem pulls @vueuse/core 15.x in several plugins; ESLint’s cache stack updates (file-entry-cache / flat-cache / keyv 5.x).

^{Reviewed by Cursor Bugbot for commit 9ffd45e. Bugbot is set up for automated code reviews on this repo. Configure here.}

coderabbitai · 2026-10-01T14:12:00Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 7f63ebb6-f7ba-4d33-8000-6d5fb0d7f1b5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026

dependabot Bot requested a review from a team as a code owner October 1, 2026 14:11

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026

Navigation Menu

chore(deps): Bump the docs group in /docs with 9 updates - #517

chore(deps): Bump the docs group in /docs with 9 updates#517
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/docs/docs-88a98ce992

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited by blacksmith-sh Bot

Loading

Uh oh!

cursor Bot commented Oct 1, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 1, 2026

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026 • edited by blacksmith-sh Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v17.0.1

Patch Changes

17.0.1

Patch Changes

v3.5.43

3.5.43 (2026-09-17)

Bug Fixes

v2.0.0-rc.108

🐛 Bug Fixes

Documentation

2.0.0-rc.109 (2026-09-07)

2.0.0-rc.108 (2026-09-07)

Miscellaneous Chores

Build System

v10.11.0

Features

Bug Fixes

Documentation

Chores

v10.10.0

Features

Bug Fixes

Documentation

Chores

[15.0.2] - 2026-09-11

Security

Uh oh!

cursor Bot commented Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Summary

Uh oh!

coderabbitai Bot commented Oct 1, 2026

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited by blacksmith-sh Bot

Loading

cursor Bot commented Oct 1, 2026 •

edited

Loading