Skip to content

Bump the minor-and-patch group across 1 directory with 9 updates#2307

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-6a9eb809ec
Open

Bump the minor-and-patch group across 1 directory with 9 updates#2307
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-and-patch-6a9eb809ec

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 13, 2026

Bumps the minor-and-patch group with 8 updates in the / directory:

Package From To
@crowdin/cli 4.12.0 4.14.1
docusaurus-plugin-openapi-docs 4.5.1 4.7.1
docusaurus-theme-openapi-docs 4.5.1 4.7.1
react 19.2.3 19.2.4
react-dom 19.2.3 19.2.4
@eslint/eslintrc 3.3.3 3.3.5
@redocly/cli 2.14.1 2.21.1
prettier 3.7.4 3.8.1

Updates @crowdin/cli from 4.12.0 to 4.14.1

Release notes

Sourced from @​crowdin/cli's releases.

4.14.1

What's Changed

Full Changelog: crowdin/crowdin-cli@4.14.0...4.14.1

4.14.0

What's Changed

New Contributors

Full Changelog: crowdin/crowdin-cli@4.13.0...4.14.0

4.13.0

What's Changed

Full Changelog: crowdin/crowdin-cli@4.12.0...4.13.0

Changelog

Sourced from @​crowdin/cli's changelog.

4.14.1 (2026-03-13)

Bug Fixes

4.14.0 (2026-02-23)

Features

  • add export_languages support in the config file (#985) (8234dac)
  • add source file existence validation to config lint (#976) (37573aa)
  • log cache saving path in verbose mode (#986) (9243204)
  • pre-translate, add exclude-language option (#982) (079c871)
  • strings context management (#987) (91c66e0)

4.13.0 (2026-01-20)

Bug Fixes

Features

Commits
  • ed8dda2 chore(release): version 4.14.1 [skip ci]
  • 3237cdd ci: improve CrowdinCLIInstaller (#999)
  • 4a64d6e build(deps): update jDeploy to version 6.0.20 (#1005)
  • be100bb chore: upgrade workflow actions to Node 24–compatible versions (#1004)
  • 7adbf20 build(deps): update jDeploy to version 6.0.19 (#1003)
  • 4a163cb fix: cache in upload sources (#1000)
  • 7a4438b chore(deps): bump tar and npm (#1002)
  • 33ef545 chore(deps): bump tar from 7.5.9 to 7.5.10 (#998)
  • c75b1c3 chore(deps): bump svgo from 2.8.0 to 2.8.2 in /website (#997)
  • c29f807 docs: add notes about the --croql option in context commands (#995)
  • Additional commits viewable in compare view

Updates docusaurus-plugin-openapi-docs from 4.5.1 to 4.7.1

Release notes

Sourced from docusaurus-plugin-openapi-docs's releases.

v4.7.1

Major performance improvement: The new externalJsonProps option (enabled by default) dramatically reduces build times and bundle sizes by externalizing large JSON props from MDX files.

  • New externalJsonProps plugin option significantly improves build performance
  • Sticky positioning for the API Explorer right panel improves UX on long API pages
  • Dynamic request body updates when switching anyOf/oneOf tabs

Note: v4.7.0 had a build error affecting downstream projects. Please use v4.7.1 instead.

🚀 New Feature

  • feat(plugin): add externalJsonProps option (enabled by default) to improve build performance (#1279)
  • feat(theme): add sticky positioning to API Explorer right panel (#1288)
  • feat: dynamically update request body when anyOf/oneOf tab changes (#1287)

🐛 Bug Fix

  • fix(theme): use import type for plugin type imports (#1292)
  • fix: render inline enum values in anyOf schemas (#1286)
  • fix: generate correct examples for different request content types (#1284)

🏠 Refactoring

  • refactor: change plugin and theme types.ts to types.d.ts (#1281)
  • refactor: externalize using create() and drop size threshold requirement (#1280)

📝 Documentation

  • docs: sync README and intro.mdx with plugin docs

🤖 Dependencies

  • chore(deps): bump lodash from 4.17.21 to 4.17.23 (#1282)

Committers: 3

  • dependabot[bot]
  • Ollie Monk
  • Steven Serrata

v4.6.0

What's Changed

... (truncated)

Changelog

Sourced from docusaurus-plugin-openapi-docs's changelog.

4.7.1 (2026-01-27)

Hotfix release for build error in v4.7.0.

🐛 Bug Fix

  • fix(theme): use import type for plugin type imports (#1292)

4.7.0 (2026-01-27)

Major performance improvement: The new externalJsonProps option (enabled by default) dramatically reduces build times and bundle sizes by externalizing large JSON props from MDX files.

  • New externalJsonProps plugin option significantly improves build performance
  • Sticky positioning for the API Explorer right panel improves UX on long API pages
  • Dynamic request body updates when switching anyOf/oneOf tabs

🚀 New Feature

  • feat(plugin): add externalJsonProps option (enabled by default) to improve build performance (#1279)
  • feat(theme): add sticky positioning to API Explorer right panel (#1288)
  • feat: dynamically update request body when anyOf/oneOf tab changes (#1287)

🐛 Bug Fix

  • fix: render inline enum values in anyOf schemas (#1286)
  • fix: generate correct examples for different request content types (#1284)

🏠 Refactoring

  • refactor: change plugin and theme types.ts to types.d.ts (#1281)
  • refactor: externalize using create() and drop size threshold requirement (#1280)

📝 Documentation

  • docs: sync README and intro.mdx with plugin docs

🤖 Dependencies

  • chore(deps): bump lodash from 4.17.21 to 4.17.23 (#1282)

Committers: 3

  • dependabot[bot]
  • Ollie Monk
  • Steven Serrata

4.6.0 (Jan 16, 2026)

High level enhancements

... (truncated)

Commits
  • 0a89b9d Prepare release v4.7.1 (#1293)
  • f5829b8 Prepare release v4.7.0 (#1289)
  • 71621ac Change plugin and theme types.ts to types.d.ts (#1281)
  • 6a466fe fix: render inline enum values in anyOf schemas (#1285) (#1286)
  • bfe7bd8 Externalize using create() and drop size threshold requirement (#1280)
  • 77f891e feat(plugin): add externalJsonProps option (enabled by default) to improve bu...
  • c7c5ca9 Prepare release v4.6.0 (#1277)
  • d9275c0 remove beta badge
  • e1e210e feat: add showInfoPage option to disable info page generation (#1272)
  • 7740c82 fix: handle undefined when outputDir doesn't contain docPath (#1271)
  • Additional commits viewable in compare view

Updates docusaurus-theme-openapi-docs from 4.5.1 to 4.7.1

Release notes

Sourced from docusaurus-theme-openapi-docs's releases.

v4.7.1

Major performance improvement: The new externalJsonProps option (enabled by default) dramatically reduces build times and bundle sizes by externalizing large JSON props from MDX files.

  • New externalJsonProps plugin option significantly improves build performance
  • Sticky positioning for the API Explorer right panel improves UX on long API pages
  • Dynamic request body updates when switching anyOf/oneOf tabs

Note: v4.7.0 had a build error affecting downstream projects. Please use v4.7.1 instead.

🚀 New Feature

  • feat(plugin): add externalJsonProps option (enabled by default) to improve build performance (#1279)
  • feat(theme): add sticky positioning to API Explorer right panel (#1288)
  • feat: dynamically update request body when anyOf/oneOf tab changes (#1287)

🐛 Bug Fix

  • fix(theme): use import type for plugin type imports (#1292)
  • fix: render inline enum values in anyOf schemas (#1286)
  • fix: generate correct examples for different request content types (#1284)

🏠 Refactoring

  • refactor: change plugin and theme types.ts to types.d.ts (#1281)
  • refactor: externalize using create() and drop size threshold requirement (#1280)

📝 Documentation

  • docs: sync README and intro.mdx with plugin docs

🤖 Dependencies

  • chore(deps): bump lodash from 4.17.21 to 4.17.23 (#1282)

Committers: 3

  • dependabot[bot]
  • Ollie Monk
  • Steven Serrata

v4.6.0

What's Changed

... (truncated)

Changelog

Sourced from docusaurus-theme-openapi-docs's changelog.

4.7.1 (2026-01-27)

Hotfix release for build error in v4.7.0.

🐛 Bug Fix

  • fix(theme): use import type for plugin type imports (#1292)

4.7.0 (2026-01-27)

Major performance improvement: The new externalJsonProps option (enabled by default) dramatically reduces build times and bundle sizes by externalizing large JSON props from MDX files.

  • New externalJsonProps plugin option significantly improves build performance
  • Sticky positioning for the API Explorer right panel improves UX on long API pages
  • Dynamic request body updates when switching anyOf/oneOf tabs

🚀 New Feature

  • feat(plugin): add externalJsonProps option (enabled by default) to improve build performance (#1279)
  • feat(theme): add sticky positioning to API Explorer right panel (#1288)
  • feat: dynamically update request body when anyOf/oneOf tab changes (#1287)

🐛 Bug Fix

  • fix: render inline enum values in anyOf schemas (#1286)
  • fix: generate correct examples for different request content types (#1284)

🏠 Refactoring

  • refactor: change plugin and theme types.ts to types.d.ts (#1281)
  • refactor: externalize using create() and drop size threshold requirement (#1280)

📝 Documentation

  • docs: sync README and intro.mdx with plugin docs

🤖 Dependencies

  • chore(deps): bump lodash from 4.17.21 to 4.17.23 (#1282)

Committers: 3

  • dependabot[bot]
  • Ollie Monk
  • Steven Serrata

4.6.0 (Jan 16, 2026)

High level enhancements

... (truncated)

Commits
  • 0a89b9d Prepare release v4.7.1 (#1293)
  • 3c5d387 fix(theme): use import type for plugin type imports (#1292)
  • f5829b8 Prepare release v4.7.0 (#1289)
  • 71621ac Change plugin and theme types.ts to types.d.ts (#1281)
  • fd4ed79 feat(theme): add sticky positioning to API Explorer right panel (#1288)
  • 6ebffbb feat: dynamically update request body when anyOf/oneOf tab changes (#1235) (#...
  • 6a466fe fix: render inline enum values in anyOf schemas (#1285) (#1286)
  • 47258df fix: generate correct examples for different request content types (#1283) (#...
  • c7c5ca9 Prepare release v4.6.0 (#1277)
  • b7b7b77 fix: allow Send API Request button with proxy-only configuration (#1274)
  • Additional commits viewable in compare view

Updates react from 19.2.3 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

Commits

Updates react-dom from 19.2.3 to 19.2.4

Release notes

Sourced from react-dom's releases.

19.2.4 (January 26th, 2026)

React Server Components

Commits

Updates sass from 1.97.1 to 1.98.0

Release notes

Sourced from sass's releases.

Dart Sass 1.98.0

To install Sass 1.98.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Command-Line Interface

  • Gracefully handle dependency loops in --watch mode.

Dart API

  • Add a const Logger.defaultLogger field. This provides a logger that emits to standard error or the browser console, but automatically chooses whether to use terminal colors.

JavaScript API

  • Fix a crash when manually constructing a SassCalculation for 'calc' with an argument that can't be simplified.

  • Properly emit deprecation warnings as text rather than StringBuffer objects when running in a browser.

  • Emit colored warnings and other messages on the console when running in a browser.

See the full changelog for changes in earlier releases.

Dart Sass 1.97.3

To install Sass 1.97.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug where nesting an at-rule within multiple style rules in plain CSS could cause outer style rules to be omitted.

See the full changelog for changes in earlier releases.

Dart Sass 1.97.2

To install Sass 1.97.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Additional fixes for implicit configuration when nested imports are involved.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.98.0

Command-Line Interface

  • Gracefully handle dependency loops in --watch mode.

Dart API

  • Add a const Logger.defaultLogger field. This provides a logger that emits to standard error or the browser console, but automatically chooses whether to use terminal colors.

JavaScript API

  • Fix a crash when manually constructing a SassCalculation for 'calc' with an argument that can't be simplified.

  • Properly emit deprecation warnings as text rather than StringBuffer objects when running in a browser.

  • Emit colored warnings and other messages on the console when running in a browser.

1.97.3

  • Fix a bug where nesting an at-rule within multiple style rules in plain CSS could cause outer style rules to be omitted.

1.97.2

  • Additional fixes for implicit configuration when nested imports are involved.
Commits
  • 5a81ae3 Bump version to 1.98.0 (#2754)
  • e25e71d Update immutable to v5.1.5 (#2753)
  • 43fac1a Bump actions/upload-artifact from 6 to 7 (#2747)
  • 8b85c9a Bump actions/download-artifact from 7 to 8 (#2749)
  • 00f83f0 Bump postcss from 8.5.6 to 8.5.8 in /pkg/sass-parser (#2752)
  • 0a325a4 Bump actions/attest-build-provenance from 3 to 4 (#2748)
  • 7fb3c0f Gracefully handle dependency loops in watch mode (#2746)
  • e86d044 Bump eslint from 9.39.3 to 10.0.1 in /pkg/sass-parser (#2743)
  • 4bcd256 Add Logger.defaultLogger to automatically choose whether to use colors (#2742)
  • c3f8ff0 Always convert printed objects to strings in JS (#2741)
  • Additional commits viewable in compare view

Updates @eslint/eslintrc from 3.3.3 to 3.3.5

Release notes

Sourced from @​eslint/eslintrc's releases.

eslintrc: v3.3.5

3.3.5 (2026-03-04)

Bug Fixes

  • update dependency minimatch to ^3.1.5 (#227) (3dc2381)

eslintrc: v3.3.4

3.3.4 (2026-02-22)

Bug Fixes

  • update ajv to 6.14.0 to address security vulnerabilities (#221) (9139140)
  • update minimatch to 3.1.3 to address security vulnerabilities (#224) (30339d0)
Changelog

Sourced from @​eslint/eslintrc's changelog.

3.3.5 (2026-03-04)

Bug Fixes

  • update dependency minimatch to ^3.1.5 (#227) (3dc2381)

3.3.4 (2026-02-22)

Bug Fixes

  • update ajv to 6.14.0 to address security vulnerabilities (#221) (9139140)
  • update minimatch to 3.1.3 to address security vulnerabilities (#224) (30339d0)
Commits
  • 5135df1 chore: release 3.3.5 🚀 (#228)
  • c109d69 docs: Update README sponsors
  • 3dc2381 fix: update dependency minimatch to ^3.1.5 (#227)
  • 81385b6 ci: pin Node.js 25.6.1 (#226)
  • 4c45e24 chore: release 3.3.4 🚀 (#223)
  • 30339d0 fix: update minimatch to 3.1.3 to address security vulnerabilities (#224)
  • 9139140 fix: update ajv to 6.14.0 to address security vulnerabilities (#221)
  • 245ada5 docs: Update README sponsors
  • 78b1a0e docs: Update README sponsors
  • df32fff docs: Update README sponsors
  • Additional commits viewable in compare view

Updates @redocly/cli from 2.14.1 to 2.21.1

Release notes

Sourced from @​redocly/cli's releases.

@​redocly/cli@​2.21.1

Patch Changes

  • Restricted scorecard-classic project URL to the .redocly.com domain only.
  • Fixed an issue where join --prefix-components-with-info-prop would incorrectly rewrite discriminator mapping refs. This issue occurred when schema names contained the same substring as the prefix.
  • Updated @​redocly/openapi-core to v2.21.1.

@​redocly/cli@​2.21.0

Minor Changes

  • Added a new option to the filter-in decorator, allowing to filter through specific target nodes (PathItem or Operation).
  • Added a new option to the filter-out decorator, allowing to filter through specific target nodes (PathItem or Operation).
  • Added support for the NO_PROXY environment variable.

Patch Changes

  • Updated @​redocly/openapi-core to v2.21.0.

@​redocly/cli@​2.20.5

Patch Changes

  • Updated @​redocly/openapi-core to v2.20.5.

@​redocly/cli@​2.20.4

Patch Changes

  • Improved error messaging when a path parameter referenced via $ref is not used in the path.
  • Updated @​redocly/openapi-core to v2.20.4.

@​redocly/cli@​2.20.3

Patch Changes

  • Updated @​redocly/respect-core to v2.20.3.

@​redocly/cli@​2.20.2

Patch Changes

  • Add support for data: URLs (RFC 2397) in references. The resolver now handles inline base64-encoded and URL-encoded data in $ref fields, allowing schemas and other content to be embedded directly as data URLs.
  • Updated @​redocly/openapi-core to v2.20.2.

@​redocly/cli@​2.20.1

Patch Changes

  • Updated @redocly/ajv to v8.18.0
  • Updated @​redocly/respect-core to v2.20.1.

@​redocly/cli@​2.20.0

Patch Changes

... (truncated)

Commits

Updates prettier from 3.7.4 to 3.8.1

Release notes

Sourced from prettier's releases.

3.8.1

🔗 Changelog

3.8.0

  • Support Angular v21.1

diff

🔗 Release note "Prettier 3.8: Support for Angular v21.1"

Changelog

Sourced from prettier's changelog.

3.8.1

diff

Include available printers in plugin type declarations (#18706 by @​porada)

// Input
import * as prettierPluginEstree from "prettier/plugins/estree";
// Prettier 3.8.0
// Property 'printers' does not exist on type 'typeof import("prettier/plugins/estree")'. ts(2339)
prettierPluginEstree.printers.estree; //=> any
// Prettier 3.8.1
prettierPluginEstree.printers.estree; //=> Printer
prettierPluginEstree.printers["estree-json"]; //=> Printer

3.8.0

diff

🔗 Release Notes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-and-patch group across 1 directory with 9 updates
b9d1672 
Bumps the minor-and-patch group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@crowdin/cli](https://github.com/crowdin/crowdin-cli) | `4.12.0` | `4.14.1` |
| [docusaurus-plugin-openapi-docs](https://github.com/PaloAltoNetworks/docusaurus-openapi-docs/tree/HEAD/packages/docusaurus-plugin-openapi-docs) | `4.5.1` | `4.7.1` |
| [docusaurus-theme-openapi-docs](https://github.com/PaloAltoNetworks/docusaurus-openapi-docs/tree/HEAD/packages/docusaurus-theme-openapi-docs) | `4.5.1` | `4.7.1` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.3` | `19.2.4` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.2.4` |
| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.3` | `3.3.5` |
| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `2.14.1` | `2.21.1` |
| [prettier](https://github.com/prettier/prettier) | `3.7.4` | `3.8.1` |



Updates `@crowdin/cli` from 4.12.0 to 4.14.1
- [Release notes](https://github.com/crowdin/crowdin-cli/releases)
- [Changelog](https://github.com/crowdin/crowdin-cli/blob/main/CHANGELOG.md)
- [Commits](crowdin/crowdin-cli@4.12.0...4.14.1)

Updates `docusaurus-plugin-openapi-docs` from 4.5.1 to 4.7.1
- [Release notes](https://github.com/PaloAltoNetworks/docusaurus-openapi-docs/releases)
- [Changelog](https://github.com/PaloAltoNetworks/docusaurus-openapi-docs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PaloAltoNetworks/docusaurus-openapi-docs/commits/v4.7.1/packages/docusaurus-plugin-openapi-docs)

Updates `docusaurus-theme-openapi-docs` from 4.5.1 to 4.7.1
- [Release notes](https://github.com/PaloAltoNetworks/docusaurus-openapi-docs/releases)
- [Changelog](https://github.com/PaloAltoNetworks/docusaurus-openapi-docs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PaloAltoNetworks/docusaurus-openapi-docs/commits/v4.7.1/packages/docusaurus-theme-openapi-docs)

Updates `react` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react)

Updates `react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom)

Updates `sass` from 1.97.1 to 1.98.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.97.1...1.98.0)

Updates `@eslint/eslintrc` from 3.3.3 to 3.3.5
- [Release notes](https://github.com/eslint/eslintrc/releases)
- [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md)
- [Commits](eslint/eslintrc@eslintrc-v3.3.3...eslintrc-v3.3.5)

Updates `@redocly/cli` from 2.14.1 to 2.21.1
- [Release notes](https://github.com/Redocly/redocly-cli/releases)
- [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.14.1...@redocly/cli@2.21.1)

Updates `prettier` from 3.7.4 to 3.8.1
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.7.4...3.8.1)

---
updated-dependencies:
- dependency-name: "@crowdin/cli"
  dependency-version: 4.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: docusaurus-plugin-openapi-docs
  dependency-version: 4.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: docusaurus-theme-openapi-docs
  dependency-version: 4.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sass
  dependency-version: 1.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@eslint/eslintrc"
  dependency-version: 3.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@redocly/cli"
  dependency-version: 2.21.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 13, 2026
Copilot AI review requested due to automatic review settings March 13, 2026 17:50
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 13, 2026
@dependabot dependabot bot review requested due to automatic review settings March 13, 2026 17:50
@socket-security
Copy link

socket-security bot commented Mar 13, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updateddocusaurus-theme-openapi-docs@​4.5.1 ⏵ 4.7.19810076 +196 +2100
Updated@​redocly/​cli@​2.14.1 ⏵ 2.21.176 -21100100100100
Updatedreact@​19.2.3 ⏵ 19.2.41001008497100
Updated@​crowdin/​cli@​4.12.0 ⏵ 4.14.1100 +110089 +192 -1100
Updatedprettier@​3.7.4 ⏵ 3.8.19010097 +193100
Updated@​eslint/​eslintrc@​3.3.3 ⏵ 3.3.59910010091100
Updatedreact-dom@​19.2.3 ⏵ 19.2.41001009298100
Updatedsass@​1.97.1 ⏵ 1.98.010010010095 +3100
Updateddocusaurus-plugin-openapi-docs@​4.5.1 ⏵ 4.7.197100100 +196 +2100

View full report

@socket-security
Copy link

socket-security bot commented Mar 13, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
License policy violation: npm sass

Location: Package overview

From: package.json → npm/sass@1.98.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/sass@1.98.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants