chore(deps): bump mcanouil/quarto-extensions-updater from 2.1.2 to 2.2.1 in the github-actions group

[dependabot]

Bumps the github-actions group with 1 update: mcanouil/quarto-extensions-updater.

Updates mcanouil/quarto-extensions-updater from 2.1.2 to 2.2.1

Release notes

Sourced from mcanouil/quarto-extensions-updater's releases.

v2.2.1

• ci: run the action from the checked-out working tree in quarto-extensions-updater.yml rather than a pinned release, so each scheduled run exercises the code on main; the reference no longer trails the latest tag by a release, and Dependabot no longer has to bump it (#66).
• ci: schedule Dependabot on the first of the month, grouping the github-actions and npm ecosystems into one pull request each.
• chore(deps): update @quarto-wizard/core to 3.2.0 (#68). The release removes findAllExtensionRoots() and writeManifest(); the action consumes only fetchRegistry(), getDefaultRegistryUrl(), and the manifest and registry types, so neither removal reaches it.
• chore(deps): bump typescript from 5 to 6 and @types/node to 26.1.2 (#67). The bundle in dist/ is byte for byte identical under the new compiler.
• chore(deps): update the documentation extensions vendored in docs/, mcanouil/gitlink to 1.9.1 and mcanouil/atelier to 0.10.1, through the action's own scheduled run (#62, #63).

v2.2.0

• docs: add a documentation website at https://m.canouil.dev/quarto-extensions-updater, built with Quarto and deployed to GitHub Pages; the inputs and outputs reference is generated from action.yml at render time.
• docs: reduce README.md to a landing page pointing at the documentation website.
• docs: add a hand-authored SVG icon with its favicon, apple touch icon, and web app manifest, a 1200x630 social preview image rendered from a committed HTML template, and full Open Graph and Twitter card metadata including a per-page description, canonical URL, and og:url; the head tags come from the atelier extension's social-metadata filter, configured through extensions.atelier. The manifest names its icons relatively, so it resolves both under quarto preview at the server root and under the project path prefix on GitHub Pages.
• ci: scan docs for Quarto extension updates, so the action maintains its own documentation extensions.
• chore(deps): bump @actions/core from 1 to 3 and @actions/github from 6 to 9, clearing every undici advisory reported for the action.
• refactor: build the action as an ES module, required by @actions/core 3 and @actions/github 9.
• chore(deps): bump js-yaml from 4 to 5, deduplicating it with @quarto-wizard/core and removing one copy from the bundle.
• chore(deps): bump eslint and @eslint/js from 9 to 10.
• chore(deps): bump @types/node from 24 to 26, @vercel/ncc from 0.38 to 0.44, and remaining development dependencies.
• chore(deps): remove @types/js-yaml, superseded by the typings shipped with js-yaml 5.
• ci: add the npm ecosystem to Dependabot on a monthly schedule.
• chore(deps): update @quarto-wizard/core to 3.1.3 (#52).
• chore(deps): bump actions/setup-node from 6 to 7 (#51).
• chore(deps): bump actions/checkout from 6 to 7 (#50).

Changelog

Sourced from mcanouil/quarto-extensions-updater's changelog.

2.2.1 (2026-08-02)

• ci: run the action from the checked-out working tree in quarto-extensions-updater.yml rather than a pinned release, so each scheduled run exercises the code on main; the reference no longer trails the latest tag by a release, and Dependabot no longer has to bump it (#66).
• ci: schedule Dependabot on the first of the month, grouping the github-actions and npm ecosystems into one pull request each.
• chore(deps): update @quarto-wizard/core to 3.2.0 (#68). The release removes findAllExtensionRoots() and writeManifest(); the action consumes only fetchRegistry(), getDefaultRegistryUrl(), and the manifest and registry types, so neither removal reaches it.
• chore(deps): bump typescript from 5 to 6 and @types/node to 26.1.2 (#67). The bundle in dist/ is byte for byte identical under the new compiler.
• chore(deps): update the documentation extensions vendored in docs/, mcanouil/gitlink to 1.9.1 and mcanouil/atelier to 0.10.1, through the action's own scheduled run (#62, #63).

2.2.0 (2026-07-31)

• docs: add a documentation website at https://m.canouil.dev/quarto-extensions-updater, built with Quarto and deployed to GitHub Pages; the inputs and outputs reference is generated from action.yml at render time.
• docs: reduce README.md to a landing page pointing at the documentation website.
• docs: add a hand-authored SVG icon with its favicon, apple touch icon, and web app manifest, a 1200x630 social preview image rendered from a committed HTML template, and full Open Graph and Twitter card metadata including a per-page description, canonical URL, and og:url; the head tags come from the atelier extension's social-metadata filter, configured through extensions.atelier. The manifest names its icons relatively, so it resolves both under quarto preview at the server root and under the project path prefix on GitHub Pages.
• ci: scan docs for Quarto extension updates, so the action maintains its own documentation extensions.
• chore(deps): bump @actions/core from 1 to 3 and @actions/github from 6 to 9, clearing every undici advisory reported for the action.
• refactor: build the action as an ES module, required by @actions/core 3 and @actions/github 9.
• chore(deps): bump js-yaml from 4 to 5, deduplicating it with @quarto-wizard/core and removing one copy from the bundle.
• chore(deps): bump eslint and @eslint/js from 9 to 10.
• chore(deps): bump @types/node from 24 to 26, @vercel/ncc from 0.38 to 0.44, and remaining development dependencies.
• chore(deps): remove @types/js-yaml, superseded by the typings shipped with js-yaml 5.
• ci: add the npm ecosystem to Dependabot on a monthly schedule.
• chore(deps): update @quarto-wizard/core to 3.1.3 (#52).
• chore(deps): bump actions/setup-node from 6 to 7 (#51).
• chore(deps): bump actions/checkout from 6 to 7 (#50).

Commits

• d16c018 ci: bump version for release 🚀 (#69)
• 8a39105 docs: expand the Unreleased changelog entries
• afdc968 ci: run the updater action from the working tree
• 0fd58ac chore(deps): update @​quarto-wizard/core to 3.2.0 (#68)
• a86155b chore(deps-dev): bump the npm group with 2 updates (#67)
• 475f8cf chore(deps): bump mcanouil/quarto-extensions-updater from 2 to 2.1.2 in the g...
• d3a906f ci: schedule Dependabot on the first of the month with grouped updates
• f92087c chore(deps): update 2 Quarto extensions (#63)
• 2780377 chore(deps): update mcanouil/gitlink extension to 1.9.0 (#62)
• aa09de4 ci: bump version for release 🚀 (#61)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions