Update dependency rapidoc to v10

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
rapidoc (source)	^9.3.8 → ^10.0.0

---

Release Notes

rapi-doc/RapiDoc (rapidoc)

v10.1.0

Compare Source

New Features

• In-Browser Mock Server: Added zero-dependency, in-browser OpenAPI mock server enabled via mock-server="true" — prototype frontends before backend APIs are ready without Prism, Docker, or external proxies.
• Host Application Interception: Transparently intercepts both RapiDoc's internal "TRY" console and any in-page fetch() or XMLHttpRequest calls made by host frontend apps (React, Vue, Vite, etc.) with zero CORS issues.
• Multi-Status Code Simulation: Added mock-server-status-code and mock-server-status-strategy with first, cycle (round-robin per endpoint for testing retry/backoff logic), and random (chaos engineering).
• Simulated Network Latency: Added mock-server-delay to simulate artificial network delays in milliseconds for testing loading spinners, skeleton states, and optimistic UI transitions.
• DevTools Intercept Logging: Added mock-server-log to output matched endpoints, synthetic status codes, and latency timing to the browser console.
• Visual Mock Indicator: Added a prominent emerald MOCK ACTIVE badge in the API Server selector bar when mocking is active.

Bug Fixes & Schema Improvements

• Fixed generateExample bug where a singular example was shadowed when examples was passed as an empty object.
• Fixed handling of falsy schema values (0, false, "") in example generation.
• Prevented combinatorial explosion in mergePropertyExamples by capping combinations at 10 to avoid performance freezes on deeply nested schemas.
• Strictly omitted writeOnly fields from mock response payloads (preventing passwords and secrets from leaking into responses).
• Improved MIME type formatting with native support for YAML content types and cleaner XML indentation.

Other Chores & Documentation

• Added new interactive Mock Server Showcase page (/mock-server) with an in-page fetch() testing console.
• Added comprehensive Starlight documentation guide under Advanced Guides → In-Browser Mock Server.
• Updated API reference table with all new mock server attributes.
• Added native Node.js unit test suite (npm run test:unit) covering schema example generation, edge cases, and interception.

v10.0.1

Compare Source

Other Chores

• Bumped package version and updated build dependencies.

v10.0.0

Compare Source

New Features

• Massive Bundle Size Reduction: Replaced swagger-client with @scalar/openapi-parser, shedding over ~300KB of minified JavaScript.
• Vite 6 Migration: Fully migrated build system to Vite 6 in library mode with custom ES module minification.
• Lightweight Syntax Highlighting: Replaced prismjs with microlighter for native CSS-based code highlighting without generating heavy nested DOM nodes.
• Native Sanitization: Replaced DOMpurify with browser-native document.setHTML and a minimal fallback shim to eliminate script injection and inline on* handlers.
• Modernized CSS: Migrated color variables to CSS color-mix() for cleaner, native dark/light theme blending.
• Native Search Dialog: Replaced custom modal implementation with native HTML <dialog> element.
• Responsive Sidebar Toggle: Added dedicated navigation toggle button when responsive breakpoints collapse the sidebar.
• Upgraded Markdown Parser: Upgraded markedjs and integrated github-slugger for GitHub-compatible heading anchor links.
• Monorepo Restructure: Reorganized repository into a monorepo architecture powering both the core Web Component and the Astro/Starlight documentation portal.

Bug Fixes

• fixed #​1067 - Added support for example in OpenAPI 3.0.x / 3.1.0 deprecation handling.
• fixed #​1068 - Escaped single quotes properly in generated cURL -d JSON payloads.
• fixed #​1069 - Long field names in schema-style="table" now support ellipsis with configurable key width and text overflow.
• fixed #​1061 - Sanitized markdown descriptions to block potential XSS injection vectors.
• fixed #​1050 - Fixed max-height calculation of navigation tags that caused endpoints to be truncated.
• fixed #​1048 - Streamlined data-type separator rendering in schemas.
• fixed #​1051 - Fixed endpoint filtering when using match-paths attribute.
• fixed #​910 - Display uniqueItems constraint for arrays in schema view.
• fixed #​1005 - Do not render credentials and inputs in the authentication section when allow-try="false".
• fixed #​1046 - Fixed relative URL resolution for OAuth refreshUrl, tokenUrl, and authorizationUrl.
• fixed #​1042 - Display HTTP Bearer token name if specified in OpenAPI security schemes.

Other Chores

• Removed unmaintained legacy packages xml-but-prettier and randexp, replacing them with custom lightweight utilities.
• Expanded test suites and automated benchmark harnesses.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.