Skip to content

fix(deps): update nextra monorepo to v4 (major)#44

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-nextra-monorepo
Open

fix(deps): update nextra monorepo to v4 (major)#44
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-nextra-monorepo

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 28, 2024 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
nextra ^2.4.2 → ^4.0.0 age confidence
nextra-theme-docs ^2.4.2 → ^4.0.0 age confidence

Release Notes

shuding/nextra (nextra)

v4.6.1

Compare Source

Patch Changes
  • 261fcdc: - update zod to v4 stable
    • fix compatibility with Next.js 16

v4.6.0

Compare Source

Minor Changes
  • e1d0ebd: Support disabling the "Copy Page" button through the theme.copyPage
    setting in _meta files
Patch Changes
  • nextra@​4.6.0

v4.5.1

Compare Source

Patch Changes
  • 8a4d176: fix TSDoc @inline tag to properly expand nested type aliases
  • Updated dependencies [8a4d176]
    • nextra@​4.5.1

v4.5.0

Compare Source

Minor Changes

  • 356a782: fix copy page button does not return the correct page contents due to
    cached MDX compiler

    add a copyPageButton layout prop which show/hide copy page content button

Patch Changes
  • Updated dependencies [356a782]
    • nextra@​4.5.0

v4.4.0

Compare Source

Minor Changes

  • 26b1281: feat: add Copy Documentation button/dropdown feature as LLM-Optimized
    Prompt

    Note

    If you are using
    content directory,
    you must pass the sourceCode prop to enable this feature.

    const {
  default: MDXContent,
  toc,
  metadata,
+ sourceCode
} = await importPage(params.mdxPath)
return (
- <Wrapper toc={toc} metadata={metadata}>
+ <Wrapper toc={toc} metadata={metadata} sourceCode={sourceCode}>
    <MDXContent {...props} params={params} />
  </Wrapper>
)
Patch Changes
  • Updated dependencies [26b1281]
    • nextra@​4.4.0

v4.3.0

Compare Source

Minor Changes

  • eed8328: feat: adapt colors and icons from original GitHub alerts syntax

    feat: new Callout type important

    fix: inconsistent built-in Callout's icons size

    feat: improve Callout's accessibility colors

  • 0831a1b: Add an onSearch callback to the <Search /> component. This
    callback, when specified, is called upon every search input change.

  • b0afee7: feat(tsdoc): add support for @inline tag on function parameters

  • c93fc48: update zod to v4

    feat(TSDoc): rename generateDocumentation to generateDefinition

    feat(Bleed): pass all props from div element to Bleed, Callout, Banner
    container

    fix(TSDoc): improve TSDoc comments for components

    • Banner
    • Head
    • Search
    • Bleed
    • Callout
    • Cards
    • FileTree
    • Steps
    • Table
    • Tabs
    • Playground
    • TSDoc
    • Layout
    • Navbar

    fix(TSDoc): improve TSDoc comments for functions:

    • nextra
    • generateDefinition
    • useMDXComponents

  • 01ac538: feat(tsdoc): support @​inline tag and fix mobile overflow in
    table

  • 94b081c: feat: refactor <Search> component styles for improved transitions
    and visibility

  • b5fab80: add MDXRemote component docs page
    https://nextra.site/docs/built-ins/mdxremote

  • ef35ab9: accept all ComboboxInputProps in Nextra's <Search /> component

  • d9dd061: update tailwindcss to 4.1.10 and react-compiler-runtime to
    19.1.0-rc.2

  • c134abe: feat: improve overall accessibility, makes text/colors easier to read
    and achieves WCAG Level AAA compliance in many places

  • 83f6c57: feat: introduce new <TSDoc /> component

    The <TSDoc> component from nextra/tsdoc generates a properties table that
    displays:

    • Property name
    • TypeScript type
    • Property description - is parsed from TSDoc inline
      description or the @description tag. You can use any Markdown/MDX syntax
      here.
    • Default value - are extracted from the @default or @defaultValue
      tag.
    • Permalink - a # anchor link to the property row for easy reference.

    More info can be found in https://nextra.site/docs/built-ins/tsdoc

    [!IMPORTANT]

    Huge thanks to
    xyflow - Node Based UIs for React and Svelte
    for sponsoring this feature!

  • 07debf9: feat(TSDoc): support flattening return object fields

Patch Changes

  • 71f7b3f: Update https://nextra.site/docs/guide/search page

    Fixes extra margin-top inside Tabs.Tab

    Fix breaking <Steps> component numeration when there is <Tabs> component
    inside

  • 47ba5f3: fix: use em for padding-y, padding-x and border-radius styles of
    <Code> element

    fix(TSDoc): for return signature without name return mobile card instead of
    table

    feat: use em instead rem for margins

  • 40267dc: split TSDoc component logic to TSDoc component and
    generateDocumentation function

    update https://nextra.site/docs/built-ins/tsdoc documentation

  • f717156: feat(TSDoc): enable exactOptionalPropertyTypes and
    strictNullChecks in ts-morph compilerOptions

  • 9f449e5: fix(TSDoc): should show null type in properties table

  • 8ac2506: chore: bump babel-plugin-react-compiler and
    react-compiler-runtime, remove custom pnpm patch for
    babel-plugin-react-compiler

  • a6a1f97: fix(tsdoc): check @inline and @remarks tags on alias type too in
    addition to field tags

  • fda0355: fix tsdoc File not found: /var/task/.../tsconfig.json

  • b2cba90: improve TSDoc comments for getPageMap, generateStaticParamsFor
    and importPage functions. Add new https://nextra.site/docs/guide/api page.

  • f40e018: fix TSDoc error Expected to find an alias symbol when using
    @inline comment

  • d29469e: support Next.js 15.3.0

  • 6a82e6f: - Fix: Received false for a non-boolean attribute prefetch.

    • Allow override next-mdx-import-source-file in turbopack.resolveAlias
      option

  • 7de40fb: Update Tailwind CSS guide to match v4 version
    https://nextra.site/docs/advanced/tailwind-css

  • c7d25df: fix(tsdoc): should resolve Partial types as declared

  • 4547eb9: feat(TSDoc): add support for functions and functions with multiple
    signatures

  • 407e0c4: feat(TSDoc): add TSDoc.noParametersContent prop

  • 00f4696: add https://nextra.site/api page generated with TSDoc component

  • 31ddba4: improve LaTeX docs, mention that you need apply styles for KaTeX
    https://nextra.site/docs/advanced/latex#apply-styles

  • a506e0b: fix TypeError: page.generateMetadata is not a function when using
    with withSentryConfig plugin

  • 9690841: Upgrade remark-reading-time to 2.0.2 in dependencies.

v4.2.17

Compare Source

Patch Changes
  • a7db0e6: fix: use correct ReactNode zod validation for Layout.footer/banner/editLink/feedback.content/toc.backToTop/toc.extraContent/toc.title/search and Navbar.children/projectIcon/chatIcon
  • aac469e: fix: improve sidebar folder item arrow animation
  • Updated dependencies [a7db0e6]
  • Updated dependencies [18e7fb9]
    • nextra@​4.2.17

v4.2.16

Compare Source

Patch Changes
  • 2cfaacc: fix: frozen spinner on loading state in search results by updating Tailwind CSS to v4.0.10
  • Updated dependencies [2cfaacc]
    • nextra@​4.2.16

v4.2.15

Compare Source

Patch Changes
  • 5617e04: fix: loading state in search results was only visible during the first search

v4.2.14

Compare Source

Patch Changes
  • ccb5da2: removing custom nextra's scrollbar styles, allowing the browser's default scrollbars to be used
  • 05a202d: fix: make search results appear above the navbar
  • fd4e6d1: fix: make scroll position in sidebar stable between client-side navigation
  • Updated dependencies [ccb5da2]
  • Updated dependencies [05a202d]
    • nextra@​4.2.14

v4.2.13

Compare Source

Patch Changes
  • Updated dependencies [fc4035c]
  • Updated dependencies [fc4035c]
    • nextra@​4.2.13

v4.2.12

Compare Source

Patch Changes
  • 23b1c48: increate z-index for type: menu dropdown from 20 to 30
    • nextra@​4.2.12

v4.2.11

Compare Source

Patch Changes
  • 8805d3f: - add overflow: hidden on <html> element instead of <body> to lock scroll when mobile nav is open
    • increase z-index for mobile nav from 10 to 20, in navbar from 20 to 30
    • fix navbar alignement on mobile when Navbar.align prop is set to left
    • nextra@​4.2.11

v4.2.10

Compare Source

Patch Changes
  • 5c22495: - add Navbar.align prop to align navigation links to the specified side. (default 'right')
    • fix hidden nav links when specified with type: 'page', href: '...' in _meta files

v4.2.9

Compare Source

Patch Changes
  • 31534cb: add Navbar.className prop
    • nextra@​4.2.9

v4.2.8

Compare Source

Patch Changes
  • e610d1d: fix type of Navbar.children, should be ReactNode, not ReactElement
    • nextra@​4.2.8

v4.2.7

Compare Source

Patch Changes
  • 9b5eea6: allow change nextThemes.forcedTheme prop
    • nextra@​4.2.7

v4.2.6

Compare Source

Patch Changes
  • Updated dependencies [a7906d1]
    • nextra@​4.2.6

v4.2.5

Compare Source

Patch Changes
  • Updated dependencies [e6c3050]
    • nextra@​4.2.5

v4.2.4

Compare Source

Patch Changes
  • Updated dependencies [b46d831]
  • Updated dependencies [7949e28]
    • nextra@​4.2.4

v4.2.3

Compare Source

Patch Changes
  • ca67a19: remove requirement page.{jsx,tsx} pages to have exported metadata object

v4.2.2

Compare Source

Patch Changes
  • Updated dependencies [dd32eca]
    • nextra@​4.2.2

v4.2.1

Compare Source

Patch Changes
  • 5c51b49: fix allow configuring theme.toc in _meta file when toc.float is set to false for pages with type: 'page'
  • 996b0b5: fix: show Scroll to top link toc.backToTop when toc.float: false is set
    • nextra@​4.2.1

v4.2.0

Compare Source

Minor Changes
  • 90b8c66: allow configuring theme.toc with layout: 'default' in _meta files
Patch Changes
  • 0b0db89: better animations for open/closed state for the <NavbarMenu> component which is rendered with type: 'menu' in _meta file
  • 427b080: calculate --nextra-banner-height after mounting banner, so banner text can be wrapped on multiple lines
  • 6b8053f: fix a sudden height jump on opening for <detail> element when his last children contain margins
  • 5d1e75b: add the missing transition-opacity style for the <BackToTop> component
  • b0e686e: hide default <summary> arrow on mobile
  • 2b0b434: add the missing cursor-pointer style in the <BackToTop> component
  • bcc34cc: reduce main area padding x to from 24px to 16px like in next.js docs
  • Updated dependencies [427b080]
  • Updated dependencies [6b8053f]
  • Updated dependencies [b0e686e]
    • nextra@​4.2.0

v4.1.1

Compare Source

Patch Changes

v4.1.0

Compare Source

Minor Changes
  • 7caf059: - generate unique anchor id for <summary> elements based on its content at build time
    • add anchor link icon for <summary>
Patch Changes
  • fa7f1ee: fix cropped sidebar footer on desktop, when Nextra's <Banner> is used
  • Updated dependencies [7caf059]
    • nextra@​4.1.0

v4.0.9

Compare Source

Patch Changes

  • e78f796: fix console error from <Search> results error TypeError: Cannot destructure property 'results' of '(intermediate value)' as it is null.

    select right tab and scroll into view when html element with location.hash id is inside <Tabs.Tab>

  • ff007b2: fix clicking on search result from same page doesn't scroll to the heading

v4.0.8

Compare Source

Patch Changes
  • 267ef81: fix parsing empty front matter

v4.0.7

Patch Changes
  • Updated dependencies [32e7d55]
  • Updated dependencies [695e428]
  • Updated dependencies [fc78033]
  • Updated dependencies [b2f2458]
    • nextra@​4.0.7

v4.0.5

Compare Source

Patch Changes
  • Updated dependencies [14bf091]
    • nextra@​4.0.5

v4.0.4

Compare Source

Patch Changes
  • 5132295: fix broken showLineNumbers setting on code blocks
  • 5132295: fix unable order _meta key with index name

v4.0.3

Compare Source

Patch Changes
  • a0c432f: fix TypeError: Cannot read properties of null (reading 'querySelector')
    • nextra@​4.0.3

v4.0.2

Compare Source

Patch Changes
  • 865e2ab: hide On This Page TOC's title themeConfig.toc.title when there is no toc links
    • nextra@​4.0.2

v4.0.1

Compare Source

Patch Changes
  • 481e0d0: fix syntax highlighting for mdx lang and improve docs for /docs/docs-theme/start
  • 426cd66: Remove margin-top from .nextra-steps :before pseudo selector
  • Updated dependencies [481e0d0]
  • Updated dependencies [426cd66]
    • nextra@​4.0.1

v4.0.0

Compare Source

Nextra 4.0 is just released!

🔹App Router
🔹Turbopack
🔹Compiled by React-Compiler
🔹New Rust-powered search engine Pagefind
🔹RSC i18n
🔹Server/Client components
🔹Smallest bundle size EVER for a Nextra-powered website
🔹GitHub Alert Syntax
🔹New _meta.global file
🔹… and more

Blog post announcement and migration guide.

Please refer to CHANGELOG.md for details.

v3.3.1

Compare Source

Patch Changes
  • bfa61d9: add text-overflow: ellipsis for <Cards.Card> component

v3.3.0

Compare Source

Minor Changes

v3.2.5

Compare Source

Patch Changes
  • Updated dependencies [2f5d954]
    • nextra@​3.2.5

v3.2.4

Compare Source

Patch Changes
  • Updated dependencies [a4b0bbb]
    • nextra@​3.2.4

v3.2.3

Compare Source

Patch Changes
  • Updated dependencies [50f33f3]
    • nextra@​3.2.3

v3.2.2

Compare Source

Patch Changes
  • 45cccd4: allow passing className for <Tabs> and <Tabs.Tab>
  • Updated dependencies [45cccd4]
    • nextra@​3.2.2

v3.2.1

Compare Source

Patch Changes

  • 9154c2f: fix(nextra-theme-docs): incorrect makePrimaryColor relative value for
    tailwind primary.900

  • 8a21a77: - Change hamburger menu animation speed

    Google Core Web Vitals rolled out a new
    INP score
    The mobile hamburger menu would occasionally get flagged for "need
    improvement"

    • nextra@​3.2.1

v3.2.0

Compare Source

Minor Changes
  • d755012: feat(nextra-theme-docs): add new theme config option
    color.lightness
Patch Changes
  • nextra@​3.2.0

v3.1.3

Compare Source

Patch Changes
  • 6e64b16: fix
    Error [ERR_PACKAGE_PATH_NOT_EXPORTED]: No "exports" main defined in /path/to/project/node_modules/nextra/package.json
    when using next.config.ts
  • d44c4bc: requires to have a custom App component (pages/_app.jsx)
  • 24f9806: fix folder's index page was not merged with folder itself for some
    edge case
  • Updated dependencies [6e64b16]
  • Updated dependencies [d44c4bc]
  • Updated dependencies [24f9806]
    • nextra@​3.1.3

v3.1.2

Compare Source

Patch Changes
  • Updated dependencies [9c78588]
    • nextra@​3.1.2

v3.1.1

Compare Source

Patch Changes
  • 68633e5: fix: Improve Twoslash Popover Display
  • Updated dependencies [68633e5]
    • nextra@​3.1.1

v3.1.0

Compare Source

Minor Changes
  • 8e9767e: activeType should be initialized from meta['*']
  • fec399a: fix type: 'separator', type: 'menu' and item with href not
    respecting order when not all pages specified in _meta file
Patch Changes
  • 035fe48: - fix empty dropdown menu when _meta item with type: "menu"
    contains items with local pages
  • c002118: - add tests for should respect order for type: "separator",
    type: "menu" and item with href
  • Updated dependencies [035fe48]
  • Updated dependencies [8e9767e]
  • Updated dependencies [fec399a]
  • Updated dependencies [c002118]
    • nextra@​3.1.0

v3.0.15

Compare Source

Patch Changes
  • Updated dependencies [bd498c6]
    • nextra@​3.0.15

v3.0.14

Compare Source

Patch Changes

  • 9794e9e: Fix frontMatter.sidebarTitle didn't affect without
    frontMatter.title set

    now priority for sidebar title is:

    1. title property from _meta file
    2. frontMatter.sidebarTitle
    3. frontMatter.title
    4. formatted with Title based on filename

  • Updated dependencies [6454938]

  • Updated dependencies [9794e9e]

  • Updated dependencies [9794e9e]

    • nextra@​3.0.14

v3.0.13

Compare Source

Patch Changes

  • f1815ac: From an accessibility POV (WCAG G13) there's a need of additional
    visual differentiation factor for hovers. Article achieves this but mdx
    doesn't.

    So changing the mdx link behaviour so on hover the underline disappears.

    • nextra@​3.0.13

v3.0.12

Compare Source

Patch Changes
  • 7e0093f: Fix nextra/locales middleware, redirect to the docs URL relative to
    the /<basePath>.
  • Updated dependencies [7e0093f]
    • nextra@​3.0.12

v3.0.11

Compare Source

Patch Changes
  • Updated dependencies [e0a9303]
    • nextra@​3.0.11

v3.0.10

Compare Source

Patch Changes
  • Updated dependencies [31de764]
  • Updated dependencies [161d350]
    • nextra@​3.0.10

v3.0.9

Compare Source

Patch Changes
  • Updated dependencies [f9cc160]
    • nextra@​3.0.9

v3.0.8

Compare Source

Patch Changes
  • 72c84eb: add max-md:_overflow-hidden instead of _overflow-hidden when
    hamburger is clicked
  • 1530239: hide <summary> marker on Safari
  • 210d68a: trigger scrolling when the TOC item is outside the viewport
  • bf04f96: add ring-inset for navbar links
    • nextra@​3.0.8

v3.0.7

Compare Source

Patch Changes
  • Updated dependencies [4bbc1fe]
    • nextra@​3.0.7

v3.0.6

Compare Source

Patch Changes
  • 4ed7b4b: remove extra horizontal margin spacing in toc
    • nextra@​3.0.6

v3.0.5

Compare Source

Patch Changes
  • 3aac732: Add .nextra-search-results class back
    • nextra@​3.0.5

v3.0.4

Compare Source

Patch Changes
  • 84fc255: should get right activeType, activeThemeContext even when some
    parent has display: 'hidden'
  • 9b6595d: Ensure the jump link behavior is consistent in Markdown.
  • f3a5575: add a scrollbar for nav links in the header when they exceed
    available free space
  • Updated dependencies [84a8a41]
  • Updated dependencies [659b36e]
  • Updated dependencies [84fc255]
    • nextra@​3.0.4

v3.0.3

Compare Source

Patch Changes
  • 9d93caf: RTL support for the <Steps> component.
  • 5fbce2f: Added golang logo for code blocks.
  • Updated dependencies [82fc267]
  • Updated dependencies [edc6c29]
  • Updated dependencies [9d93caf]
  • Updated dependencies [5fbce2f]
    • nextra@​3.0.3

v3.0.2

Compare Source

Patch Changes
  • 991b69a: handle empty item.route in <FolderImpl in <Sidebar> for
    item.type: 'menu'
  • Updated dependencies [b6341f7]
    • nextra@​3.0.2

v3.0.1

Compare Source

Patch Changes
  • d9d0820: fix unclickable links on mobile
    • nextra@​3.0.1

v3.0.0

Compare Source

Major Changes

  • e7e8e84: show react components, variable interpolation and latex in toc

  • 7188278: - insert frontMatter as export node via custom remark plugin

    • remove frontMatter.mdxOptions support

  • 023d37b: add "type": "module" to nextra package

  • 50a52fd: - ❌ remove _app.mdx, use _app.{js,jsx} or _app.{ts,tsx} for
    TypeScript projects instead

    • ❌ remove Nextra middleware nextra/locales
    • ❌ remove parseFileName from nextra/utils
    • ❌ remove nextra/filter-route-locale
    • ❌ remove resolvePageMap and pageMapCache from nextra/page-map
    • ❌ remove __nextraPageOptions.pageNextRoute
    • ❌ remove pageOpts.route and pageOpts.newNextLinkBehavior
    • ❌ remove LoaderOptions.defaultLocale
    • ❌ remove __nextra_internal__.context[route].themeConfig
    • ✅ add nextra/fetch-filepaths-from-github
    • save pageMap to .next/static/chunks/nextra-page-map-{locale}.mjs
    • save fileMap to .next/static/chunks/nextra-file-map.mjs

  • c2ad837: update to MDX3

  • 148278c: rename tailwind prefix nx- to _ to reduce bundle size

  • 919fe97: set "peerDependencies.next": ">=13"

  • 47b125d: fix global style conflicts for
    <a>/<button>/<summary>/<input>/[tabindex]:not([tabindex='-1']

  • ba30c6c: use render props for className with selected, disabled and
    hover state for <Tab>

  • d7d8a3e: new styles for code blocks aka in next.js

  • 2872606: remove image prop from <Card> component, image will be showed
    based on truthiness children prop now

    set icon as optional prop

  • 63ca28b: Remove support of "_meta.json", use "_meta.{js,jsx,ts,tsx}"
    instead.

  • ad4823d: add zod validation for nextraConfig

  • ab07609: remove locale and defaultLocale from normalizePages

  • 2f3be33: - set "engines.node": ">=18"

    • remove Tab export, use Tabs.Tab instead
    • remove Card export, use Cards.Card instead
    • disallow import md/mdx files that are outside the working directory, use
      symlinks instead

  • 66cce1d: BREAKING bundle to ESM only

    ⚠️⚠️⚠️ use next.config.mjs or next.config.js with "type": "module"

  • b9f88e3: - remove use-internals.ts

    • remove layout.tsx, move directly to setup-page.tsx
    • remove kind: 'Meta' | 'Folder' | 'MdxPage' to keep page map smaller

  • 128e195: fix React warning, remove PageOpts.toc, use toc prop from
    components.wrapper

  • 576cb6f: - rename nextraConfig.flexsearch to nextraConfig.search

  • 1f3e7cd: - remove __nextraPageOptions.hot

    • remove __nextraPageOptions.pageOptsChecksum
    • remove __nextra_internal__.refreshListeners (no longer needed since we
      insert toc as esm node in remark plugin)
    • remove hashFnv32a

  • 198dbcc: use toc with JSX elements for remote content

  • 191e6c4: - use shikiji instead of shiki

    • rename useSSG to useData

  • c7f03e5: rename pageOpts.headings to toc

Minor Changes

  • 0fe55db: add import { useRouter } from 'nextra/hooks' for fetching locale
    and defaultLocale

  • 6ec3241: Add Terraform/Move icon #​2811
    #​2808

  • c7f03e5: should not add virtual _meta file if missing

  • 3644e1c: add remark-smartypants

  • 5a63701: add icons for following languages:

    • GraphQL (graphql)
    • C++ (c++, cpp)
    • C# (csharp, c#, cs)
    • Python (python, py)

    allow disallow mobile word wrap button in code blocks with word-wrap=false
    meta data setting

  • 60ec68c: improvements for remarkStaticImage:

    • import same image only once
    • support importing images by markdown image definitions

  • a52a869: add frontmatter.sidebarTitle support for setting page label in
    sidebar via frontmatter

  • 6ec3241: Make the <Tab> component be crawlable and indexable by search
    engines by default

  • f71e660: change to shiki again

  • 6070b02: rename frontmatter.sidebar_label to frontmatter.sidebarTitle

  • 4e55c06: add support for _meta.{js,jsx,ts,tsx} with JSX support

  • 8bce16d: replace transformPageOpts nextra option by transformPageMap

  • 3043826: add shikiji twoslash

    Demo feature:
    https://nextra-v2-na3obnhub-shuding1.vercel.app/docs/guide/twoslash-support

  • 6070b02: move removeLinks function from nextra-theme-docs to
    nextra/remove-links

  • 440ff42: add MathJax support

Patch Changes

  • d1e3e9a: handle case when meta object was added in transformPageMap

  • 73239c4: To ensure consistent horizontal padding, set the default language as
    plaintext for code blocks. This prevents any loss of formatting for code
    blocks without a specified language.

  • 2b9b95b: migrate to @headlessui/react v2

  • 2a3e3e7: Fix first list item in <FileTree> not within permitted parent
    elements

  • a3b67ae: _meta should return
    export const getStaticProps = () => ({ notFound: true }) for static exports,
    instead of page without contain

  • 1a36469: add frontMatter.sidebarTitle only if frontMatter.title is empty

  • 799174f: fixed creating pageMap items for folders with dots

    remove requirement of passing filePaths with .md/.mdx extensions for
    createCatchAllMeta function

  • 98f439c: export evaluate function for remote content

  • cb24790: fix broken export default statement in mdx files

  • 982862f: Support for h2 and h4 Markdown headings with the Steps component.

  • a8c2196: use dynamic import for loading mermaid

  • 0b5cc9d: make nextra compatible with windows

  • fe5061b: fix for remote docs

  • 1a634cd: remove explicit ZodError assertion

  • ad108ff: use overflow-x-auto instead overflow-x-scroll for <Table>

  • 4f0f6b2: Omit ...{:type} inline code annotations from search index #​2922

  • 1f3e7cd: fix pageProps for NextraLayout

  • 90c129e: children in Card component is required only if the image prop is true

  • 150184b: attach heading anchor id attribute to heading (like Pagefind do)
    and fix heading anchor styles when theme.typesetting: 'article' is set

  • c74ae90: Fix TypeError: _jsx is not a function for remote content on
    development environment

  • 7615b62: fix useRouter in nextra/hooks, use asPath instead route
    because locale can be dynamic /[locale]

  • 7bb18e3: Add a generic for themeConfig in NextraThemeLayoutProps to
    improve type inference.

  • 8efbb45: remove nextra/data export, move useData to nextra/hooks,
    RemoteContent to nextra/components

  • 6f4c83a: fix unclickable links in TOC

    allow passing recmaPlugins in mdxOptions

  • d8a406b: add "sideEffects": false for better tree-shaking

  • 9f55bd1: update rehype-pretty-code/shikiji to latest

  • ccaf3d4: Add the autoImportThemeStyle option to the Nextra configuration.
    This allows users to import the official Nextra theme CSS into a specific
    cascade layer.

  • 2630461: fix
    TypeError: undefined is not iterable (cannot read property Symbol(Symbol.iterator))
    on dev environment when frontMatter.searchable: false

  • 217f708: update next-themes

    fix wrong numbering for nested <Steps>

  • 57bc0e2: fix reload of nextra layout on route change, reported by sound.xyz

  • ca51306: Enhance focus ring style consistency.

  • f662237: avoid focus-visible style being cut off by overflow-hidden

  • 3c6193d: Remove unnecessary sortPages from server/utils.ts

  • 363b85f: add flex-shrink: 0 for indent in FileTree for <Ident> and svg
    icons in <Folder> and <File>

  • fef635e: ignore loading pageMap for dynamic locale /[locale]

  • 237c345: Make React 18 as minimal requirement

  • 7faa096: fix visible hidden pages on mobile which set up with
    display: 'hidden'

  • 9099c35: remove nextra/mdx-plugins, add nextra/remark-plugins

  • 98f439c: add rust icon

  • a95e745: Fix the line highlighting background-color does not extend to the
    full width of the code block when a scrollbar appears with line numbers.

  • 80e11e0: move resolvePageMap to nextra/page-map-dynamic

v2.13.4

Compare Source

Patch Changes
  • f7fc10b: fix for the memory leak issue in the highlight-matches.tsx
    component when search query contain multiple whitespaces
    • nextra@​2.13.4

v2.13.3

Compare Source

Patch Changes
  • 93b5705: fix type: 'separator' zod validation, mark title field as
    optional

v2.13.2

Compare Source

Patch Changes

  • ad7b31b: downgrade remark-math from 6 to 5.1.1 to fix
    TypeError: Cannot read properties of undefined (reading 'mathFlowInside')
    error

    fix support of ``math lang that was overridden by rehype-pretty-code`

  • Updated dependencies [ad7b31b]

    • nextra@​2.13.2

v2.13.1

Compare Source

Patch Changes
  • Updated dependencies [ee02a48]
    • nextra@​2.13.1

v2.13.0

[Compare Source](https://redirect.github.com/shuding/

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@vercel
Copy link

vercel bot commented Sep 28, 2024 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
kiai-docs Error Error Mar 5, 2026 6:06pm

@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from a94d48f to 33a7e94 Compare January 13, 2025 13:10
@renovate renovate bot changed the title fix(deps): update nextra monorepo to v3 (major) fix(deps): update nextra monorepo to v4 (major) Jan 13, 2025
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 33a7e94 to 135c617 Compare July 28, 2025 17:49
@coderabbitai
Copy link

coderabbitai bot commented Jul 28, 2025 •
edited
Loading

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 135c617 to 028dc62 Compare August 10, 2025 13:07
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 028dc62 to 6d600fd Compare August 13, 2025 16:26
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 6d600fd to aa15182 Compare August 19, 2025 15:13
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from aa15182 to 6faa418 Compare August 22, 2025 11:02
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 6faa418 to 4f4af63 Compare August 31, 2025 13:12
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 4f4af63 to 320ad49 Compare September 21, 2025 16:48
@socket-security
Copy link

socket-security bot commented Sep 21, 2025 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednextra@​2.12.3 ⏵ 4.6.182 +110074 +490 -4100
Updatednextra-theme-docs@​2.12.3 ⏵ 4.6.199 +110077 +590 -4100

View full report

@socket-security
Copy link

socket-security bot commented Sep 21, 2025 •
edited
Loading

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn Medium
Deprecated by its maintainer: npm mathjax-full

Reason: Version 4 replaces this package with the scoped package @mathjax/src

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/mathjax-full@3.2.2

ℹ Read more on: This package | This alert | What is a deprecated package?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/mathjax-full@3.2.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Potential vulnerability: npm picomatch with risk level "medium"

Location: Package overview

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/picomatch@2.3.1

ℹ Read more on: This package | This alert | Navigating potential vulnerabilities

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: It is advisable to proceed with caution. Engage in a review of the package's security aspects and consider reaching out to the package maintainer for the latest information or patches.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/picomatch@2.3.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
System shell access: npm vscode-languageserver in module child_process

Module: child_process

Location: Package overview

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/vscode-languageserver@9.0.1

ℹ Read more on: This package | This alert | What is shell access?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/vscode-languageserver@9.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm esm was last published 7 years ago

Last Publish: 5/17/2019, 5:24:41 AM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/esm@3.2.25

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/esm@3.2.25. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm format was last published 10 years ago

Last Publish: 1/27/2016, 12:02:03 AM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/format@0.2.2

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/format@0.2.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Publisher changed: npm get-stream is now published by ehmicky instead of sindresorhus

New Author: ehmicky

Previous Author: sindresorhus

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/get-stream@8.0.1

ℹ Read more on: This package | This alert | What is new author?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Scrutinize new collaborator additions to packages because they now have the ability to publish code into your dependency tree. Packages should avoid frequent or unnecessary additions or changes to publishing rights.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/get-stream@8.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm is-extglob was last published 9 years ago

Last Publish: 12/11/2016, 4:04:24 AM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/is-extglob@2.1.1

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/is-extglob@2.1.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm is-number was last published 8 years ago

Last Publish: 7/4/2018, 3:08:58 PM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/is-number@7.0.0

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/is-number@7.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Publisher changed: npm is64bit is now published by sindresorhus instead of xan105

New Author: sindresorhus

Previous Author: xan105

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/is64bit@2.0.0

ℹ Read more on: This package | This alert | What is new author?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Scrutinize new collaborator additions to packages because they now have the ability to publish code into your dependency tree. Packages should avoid frequent or unnecessary additions or changes to publishing rights.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/is64bit@2.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Publisher changed: npm merge-stream is now published by stevemao instead of shinnn

New Author: stevemao

Previous Author: shinnn

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/merge-stream@2.0.0

ℹ Read more on: This package | This alert | What is new author?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Scrutinize new collaborator additions to packages because they now have the ability to publish code into your dependency tree. Packages should avoid frequent or unnecessary additions or changes to publishing rights.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/merge-stream@2.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm merge-stream was last published 7 years ago

Last Publish: 5/23/2019, 1:36:45 PM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/merge-stream@2.0.0

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/merge-stream@2.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm merge2 was last published 6 years ago

Last Publish: 6/3/2020, 7:39:10 AM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/merge2@1.4.1

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/merge2@1.4.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Publisher changed: npm negotiator is now published by wesleytodd instead of dougwilson

New Author: wesleytodd

Previous Author: dougwilson

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/negotiator@1.0.0

ℹ Read more on: This package | This alert | What is new author?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Scrutinize new collaborator additions to packages because they now have the ability to publish code into your dependency tree. Packages should avoid frequent or unnecessary additions or changes to publishing rights.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/negotiator@1.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm path-browserify was last published 6 years ago

Last Publish: 3/3/2020, 4:52:38 PM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/path-browserify@1.0.1

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/path-browserify@1.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm path-data-parser was last published 6 years ago

Last Publish: 4/11/2020, 8:34:44 AM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/path-data-parser@0.1.0

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/path-data-parser@0.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm points-on-path was last published 6 years ago

Last Publish: 5/1/2020, 4:16:00 AM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/points-on-path@0.2.1

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/points-on-path@0.2.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm run-parallel was last published 5 years ago

Last Publish: 2/10/2021, 2:58:08 AM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/run-parallel@1.2.0

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/run-parallel@1.2.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm to-regex-range was last published 7 years ago

Last Publish: 4/7/2019, 6:04:37 AM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/to-regex-range@5.0.1

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/to-regex-range@5.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Publisher changed: npm vscode-uri is now published by microsoft1es instead of vscode-bot

New Author: microsoft1es

Previous Author: vscode-bot

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/vscode-uri@3.1.0

ℹ Read more on: This package | This alert | What is new author?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Scrutinize new collaborator additions to packages because they now have the ability to publish code into your dependency tree. Packages should avoid frequent or unnecessary additions or changes to publishing rights.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/vscode-uri@3.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Low
Unmaintained: npm wicked-good-xpath was last published 10 years ago

Last Publish: 4/1/2016, 9:11:19 AM

From: pnpm-lock.yaml → npm/nextra@4.6.1 → npm/wicked-good-xpath@1.3.0

ℹ Read more on: This package | This alert | What are unmaintained packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Package should publish periodic maintenance releases if they are maintained, or deprecate if they have no intention in further maintenance.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/wicked-good-xpath@1.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 320ad49 to 175562d Compare September 25, 2025 15:47
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 175562d to ff24e77 Compare September 27, 2025 17:29
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from ff24e77 to 41206dc Compare October 2, 2025 18:36
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 41206dc to 8156e56 Compare October 21, 2025 15:52
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 8156e56 to 2239132 Compare November 10, 2025 14:07
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 2239132 to 173d540 Compare November 18, 2025 20:01
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 173d540 to 47b08cc Compare December 3, 2025 17:37
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 47b08cc to c78eff5 Compare December 4, 2025 13:08
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from c78eff5 to 1e6b11c Compare December 31, 2025 14:51
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 1e6b11c to f63e3a1 Compare January 8, 2026 20:00
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from f63e3a1 to 69b7481 Compare January 19, 2026 15:00
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 69b7481 to 429f41d Compare January 23, 2026 17:30
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 429f41d to 5efbf2a Compare February 2, 2026 20:38
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 5efbf2a to 47a1b83 Compare February 12, 2026 10:46
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 47a1b83 to 8fe2b8b Compare February 17, 2026 20:49
@renovate renovate bot force-pushed the renovate/major-nextra-monorepo branch from 8fe2b8b to 7f73c97 Compare March 5, 2026 18:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@thewilloftheshadow thewilloftheshadow Awaiting requested review from thewilloftheshadow thewilloftheshadow is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants