Skip to content

Bump the dependencies group across 1 directory with 4 updates - #517

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/main/dependencies-9532cb568b
Closed

Bump the dependencies group across 1 directory with 4 updates#517
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/main/dependencies-9532cb568b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 4 updates in the / directory: @antora/cli, @antora/site-generator-default, asciidoctor-kroki and fast-xml-parser.

Updates @antora/cli from 3.2.0-alpha.9 to 3.2.0

Changelog

Sourced from @​antora/cli's changelog.

== 3.2.0 (2026-08-29)

=== Changed

  • site-generator: Log original error message when Antora extension is suspected to be Asciidoctor extension
  • Upgrade js-yaml to 5.3.x (playbook-builder, content-aggregator, ui-loader)

=== Fixed

  • Don't crash if pub property not set on start page

== 3.2.0-rc.3 (2026-08-12)

=== Added

  • playbook-builder: Add antoraVersion property to playbook to provide access to Antora core version (#1236)
  • content-classifier: Modify ContentCatalog#getComponentVersion to return latest component version if version is unspecified (#1231)
  • asciidoc-loader: Pass standalone option through to Asciidoctor#load API (#1228)
  • asciidoc-loader: Add antoraResourceRefs option to control whether Antora resource ref integration is enabled; pass through safe, docfile, and docdir options as well (#1241)
  • file-publisher: Update publishFiles to accept an array of files as alternative to array of catalogs (#1235)

=== Changed

  • logger: Use src.abspath (absolute path) as file path in log message, if available, even if origin is not set
  • playbook-builder: Allow collection keys (array or map) in playbook to be null (#1233)
  • playbook-builder: Map --stacktrace CLI option to runtime.stacktrace property on playbook (#1227)
  • content-classifier: Change createFile method to set module property to ROOT if not set when inflating src
  • content-classifier: Change createFile method to compute and assign path property if not set if input is not a Vinyl instance
  • asciidoc-loader: Always prefix docname with family segment if family is not page (#1232)
  • navigation-builder: Assign pathname property to navigation entry with internal url when url has a hash (i.e., fragment) (#1237)
  • file-publisher: Don't output site if output dir is null; still allow destinations to be null (#1234)
  • file-publisher: Only allow primary output dir to set path for fs destination if first entry and path key is not set (#1238)
  • file-publisher: Honor empty output destinations; require entry for primary fs destination if destinations key is set (#1240)
  • cli: Pass --stacktrace argument to buildPlaybook (#1227)

=== Fixed

  • playbook-builder: Don't crash when coercing CLI option value if target collection is null; related to #1233
  • file-publisher: Honor clean: false set on output destination when default clean value is true

== 3.2.0-rc.2 (2026-06-20)

=== Added

  • content-classifier: Add create argument as second argument to addFile method on content catalog for backwards compatibility; default to true

=== Changed

  • content-classifier: Convert contents to Buffer if contents is string for file passed to createFile method on content catalog; only used if input file is not a Vinyl object (#1226)

... (truncated)

Commits
  • 85665d0 release 3.2.0
  • 79f23d7 add Node.js 26 to test matrix
  • 04c952a upgrade xmldom
  • 4b923ed update declared supported versions of Node.js
  • ecc28eb update release date on what's new page
  • 03b788c add missing entries from what's new page
  • 058f436 apply pending formatting to example code
  • 9452cca upgrade js-yaml
  • 621fe93 refresh dependency lock file
  • 57a244e remove unused images
  • Additional commits viewable in compare view

Updates @antora/site-generator-default from 3.2.0-alpha.9 to 3.2.0

Changelog

Sourced from @​antora/site-generator-default's changelog.

== 3.2.0 (2026-08-29)

=== Changed

  • site-generator: Log original error message when Antora extension is suspected to be Asciidoctor extension
  • Upgrade js-yaml to 5.3.x (playbook-builder, content-aggregator, ui-loader)

=== Fixed

  • Don't crash if pub property not set on start page

== 3.2.0-rc.3 (2026-08-12)

=== Added

  • playbook-builder: Add antoraVersion property to playbook to provide access to Antora core version (#1236)
  • content-classifier: Modify ContentCatalog#getComponentVersion to return latest component version if version is unspecified (#1231)
  • asciidoc-loader: Pass standalone option through to Asciidoctor#load API (#1228)
  • asciidoc-loader: Add antoraResourceRefs option to control whether Antora resource ref integration is enabled; pass through safe, docfile, and docdir options as well (#1241)
  • file-publisher: Update publishFiles to accept an array of files as alternative to array of catalogs (#1235)

=== Changed

  • logger: Use src.abspath (absolute path) as file path in log message, if available, even if origin is not set
  • playbook-builder: Allow collection keys (array or map) in playbook to be null (#1233)
  • playbook-builder: Map --stacktrace CLI option to runtime.stacktrace property on playbook (#1227)
  • content-classifier: Change createFile method to set module property to ROOT if not set when inflating src
  • content-classifier: Change createFile method to compute and assign path property if not set if input is not a Vinyl instance
  • asciidoc-loader: Always prefix docname with family segment if family is not page (#1232)
  • navigation-builder: Assign pathname property to navigation entry with internal url when url has a hash (i.e., fragment) (#1237)
  • file-publisher: Don't output site if output dir is null; still allow destinations to be null (#1234)
  • file-publisher: Only allow primary output dir to set path for fs destination if first entry and path key is not set (#1238)
  • file-publisher: Honor empty output destinations; require entry for primary fs destination if destinations key is set (#1240)
  • cli: Pass --stacktrace argument to buildPlaybook (#1227)

=== Fixed

  • playbook-builder: Don't crash when coercing CLI option value if target collection is null; related to #1233
  • file-publisher: Honor clean: false set on output destination when default clean value is true

== 3.2.0-rc.2 (2026-06-20)

=== Added

  • content-classifier: Add create argument as second argument to addFile method on content catalog for backwards compatibility; default to true

=== Changed

  • content-classifier: Convert contents to Buffer if contents is string for file passed to createFile method on content catalog; only used if input file is not a Vinyl object (#1226)

... (truncated)

Commits
  • 85665d0 release 3.2.0
  • 79f23d7 add Node.js 26 to test matrix
  • 04c952a upgrade xmldom
  • 4b923ed update declared supported versions of Node.js
  • ecc28eb update release date on what's new page
  • 03b788c add missing entries from what's new page
  • 058f436 apply pending formatting to example code
  • 9452cca upgrade js-yaml
  • 621fe93 refresh dependency lock file
  • 57a244e remove unused images
  • Additional commits viewable in compare view

Updates asciidoctor-kroki from 0.18.1 to 1.0.1

Release notes

Sourced from asciidoctor-kroki's releases.

v1.0.1

Added

  • Publish TypeScript type declarations, generated from the JSDoc annotations (tsc --emitDeclarationOnly into build/types). The package now declares a types entry point so TypeScript consumers get typed register, KrokiContext and Vfs APIs.

v1.0.0

First stable release. It includes every change from the 1.0.0-beta.* prereleases.

This version requires Asciidoctor.js 4.0 (@asciidoctor/core >=4.0.0 <5.0.0). It is not yet compatible with Antora, which still bundles an older Asciidoctor.js; keep using the latest-0 release line (currently 0.18.1) with Antora. See the installation guide.

v1.0.0-beta.2

Changed

  • The inline option (opts=inline or kroki-default-options: inline) now embeds the diagram as a data: URI image target when neither kroki-fetch-diagram nor allow-uri-read is set, instead of producing a server URL the converter cannot read (which rendered as the image's alt text). The extension still only sets the image target — the converter decides how to render it — so DocBook, PDF and other backends keep working from the same data-URI image. Inlining the result as <svg> requires @asciidoctor/core with data:-URI inline SVG support.

Fixed

  • Encode diagram sources with TextEncoder/btoa instead of the Node-only Buffer global, so the JavaScript extension works in a real browser (VS Code for the Web / vscode.dev) where modern bundlers no longer polyfill Buffer. Previously every diagram failed with ReferenceError: Buffer is not defined; the new encoding produces byte-for-byte identical output.
  • Attach a source location to warnings emitted when a diagram is skipped, so the message points at the offending block instead of embedding a JSON stack blob.

v1.0.0-beta.1

Added

  • Ruby: support the kroki-default-options document attribute, on par with the JavaScript extension (#156).

Changed

  • Breaking: require Asciidoctor.js 4.0 (@asciidoctor/core >=4.0.0 <5.0.0). Antora is not yet supported because it ships an older Asciidoctor.js; use the latest-0 release line with Antora until it upgrades.
  • Use a stable file name for fetched diagrams that are given an explicit name: [ditaa,foo] now generates foo.svg instead of foo-<checksum>.svg, so links to generated images stay stable across content changes. Anonymous diagrams keep a content-addressed name (diag-<sha256>.svg); reusing the same name for diagrams with different content overwrites the file and logs a warning. The JavaScript checksum is also switched from SHA-1 to SHA-256 to match the Ruby gem (#451).
  • Lower the minimum supported Node.js version to 22 (nothing in the code requires Node.js 24).
  • Document the feature parity between the JavaScript/Node.js extension and the Ruby gem. Preprocessing (resolving PlantUML/Structurizr !include and Vega-Lite data.url) and kroki-plantuml-include-paths are available in the JavaScript/Node.js extension only; the Ruby gem relies on the Kroki server to resolve includes.

Fixed

  • Resolve relative !include directives nested inside a remote PlantUML/Structurizr file against the remote URL of the including file, instead of looking them up on the local file system and silently skipping them (#398).
  • Fix the broken documentation link in the README.
Changelog

Sourced from asciidoctor-kroki's changelog.

[1.0.1] - 2026-07-15

Added

  • Publish TypeScript type declarations, generated from the JSDoc annotations (tsc --emitDeclarationOnly into build/types). The package now declares a types entry point so TypeScript consumers get typed register, KrokiContext and Vfs APIs.

[1.0.0] - 2026-07-14

First stable release. It includes every change from the 1.0.0-beta.* prereleases.

This version requires Asciidoctor.js 4.0 (@asciidoctor/core >=4.0.0 <5.0.0). It is not yet compatible with Antora, which still bundles an older Asciidoctor.js; keep using the latest-0 release line (currently 0.18.1) with Antora. See the installation guide.

[1.0.0-beta.2] - 2026-07-06

Changed

  • The inline option (opts=inline or kroki-default-options: inline) now embeds the diagram as a data: URI image target when neither kroki-fetch-diagram nor allow-uri-read is set, instead of producing a server URL the converter cannot read (which rendered as the image's alt text). The extension still only sets the image target — the converter decides how to render it — so DocBook, PDF and other backends keep working from the same data-URI image. Inlining the result as <svg> requires @asciidoctor/core with data:-URI inline SVG support.

Fixed

  • Encode diagram sources with TextEncoder/btoa instead of the Node-only Buffer global, so the JavaScript extension works in a real browser (VS Code for the Web / vscode.dev) where modern bundlers no longer polyfill Buffer. Previously every diagram failed with ReferenceError: Buffer is not defined; the new encoding produces byte-for-byte identical output.
  • Attach a source location to warnings emitted when a diagram is skipped, so the message points at the offending block instead of embedding a JSON stack blob.

[1.0.0-beta.1] - 2026-06-23

Added

  • Ruby: support the kroki-default-options document attribute, on par with the JavaScript extension (#156).

Changed

  • Breaking: require Asciidoctor.js 4.0 (@asciidoctor/core >=4.0.0 <5.0.0). Antora is not yet supported because it ships an older Asciidoctor.js; use the latest-0 release line with Antora until it upgrades.
  • Use a stable file name for fetched diagrams that are given an explicit name: [ditaa,foo] now generates foo.svg instead of foo-<checksum>.svg, so links to generated images stay stable across content changes. Anonymous diagrams keep a content-addressed name (diag-<sha256>.svg); reusing the same name for diagrams with different content overwrites the file and logs a warning. The JavaScript checksum is also switched from SHA-1 to SHA-256 to match the Ruby gem (#451).
  • Lower the minimum supported Node.js version to 22 (nothing in the code requires Node.js 24).
  • Document the feature parity between the JavaScript/Node.js extension and the Ruby gem. Preprocessing (resolving PlantUML/Structurizr !include and Vega-Lite data.url) and kroki-plantuml-include-paths are available in the JavaScript/Node.js extension only; the Ruby gem relies on the Kroki server to resolve includes.

Fixed

  • Resolve relative !include directives nested inside a remote PlantUML/Structurizr file against the remote URL of the including file, instead of looking them up on the local file system and silently skipping them (#398).
  • Fix the broken documentation link in the README.
Commits
  • 7af83e4 chore: release v1.0.1
  • 92954d0 feat: publish TypeScript declarations generated from JSDoc
  • d492e0e docs: consistent tone and document missing features and behaviors
  • af15391 docs: register the extension with the Asciidoctor.js CLI using --extension
  • 4310e1f chore: release v1.0.0
  • a8ce127 docs: quote Antora component version to keep it a string
  • f4566f3 docs: use xref for Asciidoctor document attributes link
  • 9fe8d60 docs: add missing changelog entries for 1.0.0-beta.2
  • 655168e chore: release v1.0.0-beta.2
  • d03ba69 ci: name release workflow run with the version
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for asciidoctor-kroki since your current version.


Updates fast-xml-parser from 5.2.5 to 5.11.1

Release notes

Sourced from fast-xml-parser's releases.

v5.11.1

What's Changed

New Contributors

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.11.0...v5.11.1

v5.11.0

What's Changed

New Contributors

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.10.1...v5.11.0

v5.10.1

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.10.0...v5.10.1

v5.10.0

What's Changed

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.3...v5.10.0

v5.9.3

What's Changed

New Contributors

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.2...v5.9.3

v5.9.2

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.1...v5.9.2

v5.9.1

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.0...v5.9.1

... (truncated)

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.11.1 / 2026-08-27

  • fix: validator; Replace regex with a single-pass scanner for attribute tokens, eliminating quadratic behavior on long whitespace runs.

5.11.0 / 2026-08-16

  • feat: support for endIndex in node metadata (#850) [By Pavel Dranichnikov]
  • fix: don't crash on a closing tag with no matching opening tag (#861) [By Haïm Dimer]
  • fix: DOCTYPE to read SYSTEM/PUBLIC
  • deps: strnum v2.4.2

5.10.1 / 2026-07-17

  • fix: multiple DOCTYPE declarations.
  • deps: @nodable/entities for treeshaking

5.10.0 / 2026-07-11

  • upgrade:
    • xml-naming v0.3.0: cache support
    • PEM v1.6.2: sibling bug fix
    • is-unsafe v2.0.0: tree shaking

*5.9.3 / 2026-06-19

  • update strnum

*5.9.2 / 2026-06-17

  • dummy release to test changes in github action

*5.9.1 / 2026-06-17

  • dummy release to test release from github action

*5.9.0 / 2026-06-15

  • update strnum to 2.3.0
    • you can set hex, binary, enotation, infinity, unicode
  • validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.

*5.8.0 / 2026-05-12

  • integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)
    • This will consider xml-version as well. '1.0' is default
  • update strnum to 2.3.0
    • You can set octal and binary parsing which is bydeault off
  • update fast-xml-builder to 1.2.0
    • can sanitize tag names if found invalid
    • fix format output

5.7.3 / 2006-05-05

  • fix: alwaysCreateTextNode should create text node when attributes are present for self closing node

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fast-xml-parser since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group across 1 directory with 4 updates
3feb555 
Bumps the dependencies group with 4 updates in the / directory: [@antora/cli](https://gitlab.com/antora/antora/tree/HEAD/packages/cli), [@antora/site-generator-default](https://gitlab.com/antora/antora/tree/HEAD/packages/site-generator-default), [asciidoctor-kroki](https://github.com/asciidoctor/asciidoctor-kroki) and [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser).


Updates `@antora/cli` from 3.2.0-alpha.9 to 3.2.0
- [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc)
- [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-alpha.9...v3.2.0)

Updates `@antora/site-generator-default` from 3.2.0-alpha.9 to 3.2.0
- [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc)
- [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-alpha.9...v3.2.0)

Updates `asciidoctor-kroki` from 0.18.1 to 1.0.1
- [Release notes](https://github.com/asciidoctor/asciidoctor-kroki/releases)
- [Changelog](https://github.com/asciidoctor/asciidoctor-kroki/blob/main/CHANGELOG.md)
- [Commits](asciidoctor/asciidoctor-kroki@v0.18.1...v1.0.1)

Updates `fast-xml-parser` from 5.2.5 to 5.11.1
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.2.5...v5.11.1)

---
updated-dependencies:
- dependency-name: "@antora/cli"
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@antora/site-generator-default"
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: asciidoctor-kroki
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: fast-xml-parser
  dependency-version: 5.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) September 7, 2026 05:07
@ramanathan1504

ramanathan1504 commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@ramanathan1504

ramanathan1504 commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot @github

dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 8, 2026
auto-merge was automatically disabled September 8, 2026 09:56

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/main/dependencies-9532cb568b branch September 8, 2026 09:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ramanathan1504