dependabot[bot] opened a new pull request, #128: URL: https://github.com/apache/netbeans-antora-ui/pull/128
Bumps the all-dependencies group with 3 updates in the / directory: [@asciidoctor/core](https://github.com/asciidoctor/asciidoctor.js), [js-yaml](https://github.com/nodeca/js-yaml) and [sass](https://github.com/sass/dart-sass). Updates `@asciidoctor/core` from 3.0.4 to 4.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/asciidoctor/asciidoctor.js/releases";>@asciidoctor/core's releases</a>.</em></p> <blockquote> <h2>v4.0.0</h2> <h2>Summary</h2> <p>This release is a complete rewrite of Asciidoctor.js — the Opal runtime and transpiled Ruby code have been replaced by a native JavaScript implementation. The public API has been preserved as closely as possible from version 3, but there are breaking changes. Please refer to the <a href="https://github.com/asciidoctor/asciidoctor.js/blob/main/docs/modules/setup/pages/migration-guide.adoc";>migration guide</a> before upgrading.</p> <h2>Release meta</h2> <p>Released on: 2026-06-22 Released by: github-actions[bot] Published by: GitHub</p> <p>Logs: <a href="https://github.com/asciidoctor/asciidoctor.js/compare/v3.0.4...v4.0.0";>full diff</a></p> <h2>Changelog</h2> <h3>Bug Fixes</h3> <ul> <li>Fix registry reuse — extensions registered directly on a registry instance (e.g. <code>registry.preprocessor(fn)</code>) now survive the internal reset and are preserved across multiple conversions, matching the behaviour of group-block registrations (<code>Extensions.create(name, block)</code>); both patterns are now safe to reuse</li> </ul> <h3>Improvements</h3> <ul> <li>Document registry reuse behaviour — extensions registered via a group block (<code>Extensions.create(name, block)</code>) survive the internal reset and are safe to reuse across multiple conversions; extensions registered directly on a registry instance are cleared on every activation and will be silently lost after the first conversion</li> <li>Add <code>--extension</code> CLI option to load and register Asciidoctor extension files — the option calls the <code>register(registry)</code> named export of the loaded module with a shared registry; can be repeated to load multiple extensions</li> <li>Clarify <code>--require</code> CLI option — it now only loads the module as a side effect and no longer auto-calls any exported function; use <code>--extension</code> to register Asciidoctor extensions, and <code>--require</code> for libraries that configure themselves on load (syntax highlighters, polyfills, etc.)</li> <li>Improve JSDoc for <code>IncludeProcessorDsl#handles</code> — add <code>@overload</code> signatures documenting the two setter forms (arity-1 <code>(target)</code> and arity-2 <code>(doc, target)</code>) and the invoker form; update <code>IncludeProcessorDslInterface</code> typedef to expose both setter overloads</li> </ul> <h3>Breaking Changes</h3> <ul> <li><code>--require</code> no longer inspects or calls a <code>register</code> export from the loaded module — this auto-call was already broken (it passed the <code>Extensions</code> namespace instead of a registry instance); any extension that relied on this behaviour must be updated to either export a <code>register(registry)</code> function and be loaded via <code>--extension</code>, or self-register using <code>Extensions.register()</code> at the top level to remain loadable via <code>--require</code></li> </ul> <h2>v4.0.0-alpha.6</h2> <h2>Summary</h2> <h2>Release meta</h2> <p>Released on: 2026-06-03 Released by: github-actions[bot] Published by: GitHub</p> <p>Logs: <a href="https://github.com/asciidoctor/asciidoctor.js/compare/v4.0.0-alpha.5...v4.0.0-alpha.6";>full diff</a></p> <h2>Changelog</h2> <h3>Build</h3> <ul> <li>Bump <code>playwright</code> from 1.59.1 to 1.60.0 and <code>@vitest/browser</code>, <code>@vitest/browser-playwright</code>, <code>@vitest/ui</code> from 4.1.4 to 4.1.7</li> </ul> <h3>Bug Fixes</h3> <ul> <li>Fix <code>caption</code> attribute on a delimited admonition block being stored as <code>true</code> instead of the caption text (the <code>textlabel</code> attribute now receives the resolved caption, matching Asciidoctor Ruby)</li> <li>Fix escaped include directive (<code>\include::file.adoc[]</code>) inside a listing block in an AsciiDoc table cell logging a spurious "include file not found" error — nested documents now use a plain <code>Reader</code> (no include/conditional processing) matching Ruby Asciidoctor behaviour; the first-line preprocessor directive expansion is handled explicitly as Ruby does</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/asciidoctor/asciidoctor.js/blob/main/CHANGELOG.adoc";>@asciidoctor/core's changelog</a>.</em></p> <blockquote> <p>== v4.0.0 (2026-06-22)</p> <p>Bug Fixes::</p> <ul> <li>Fix registry reuse — extensions registered directly on a registry instance (e.g. <code>registry.preprocessor(fn)</code>) now survive the internal reset and are preserved across multiple conversions, matching the behaviour of group-block registrations (<code>Extensions.create(name, block)</code>); both patterns are now safe to reuse</li> </ul> <p>Improvements::</p> <ul> <li>Document registry reuse behaviour — extensions registered via a group block (<code>Extensions.create(name, block)</code>) survive the internal reset and are safe to reuse across multiple conversions; extensions registered directly on a registry instance are cleared on every activation and will be silently lost after the first conversion</li> <li>Add <code>--extension</code> CLI option to load and register Asciidoctor extension files — the option calls the <code>register(registry)</code> named export of the loaded module with a shared registry; can be repeated to load multiple extensions</li> <li>Clarify <code>--require</code> CLI option — it now only loads the module as a side effect and no longer auto-calls any exported function; use <code>--extension</code> to register Asciidoctor extensions, and <code>--require</code> for libraries that configure themselves on load (syntax highlighters, polyfills, etc.)</li> <li>Improve JSDoc for <code>IncludeProcessorDsl#handles</code> — add <code>@overload</code> signatures documenting the two setter forms (arity-1 <code>(target)</code> and arity-2 <code>(doc, target)</code>) and the invoker form; update <code>IncludeProcessorDslInterface</code> typedef to expose both setter overloads</li> </ul> <p>Breaking Changes::</p> <ul> <li><code>--require</code> no longer inspects or calls a <code>register</code> export from the loaded module — this auto-call was already broken (it passed the <code>Extensions</code> namespace instead of a registry instance); any extension that relied on this behaviour must be updated to either export a <code>register(registry)</code> function and be loaded via <code>--extension</code>, or self-register using <code>Extensions.register()</code> at the top level to remain loadable via <code>--require</code></li> </ul> <p>== v4.0.0-alpha.6 (2026-06-03)</p> <p>Build::</p> <ul> <li>Bump <code>playwright</code> from 1.59.1 to 1.60.0 and <code>@vitest/browser</code>, <code>@vitest/browser-playwright</code>, <code>@vitest/ui</code> from 4.1.4 to 4.1.7</li> </ul> <p>Bug Fixes::</p> <ul> <li>Fix <code>caption</code> attribute on a delimited admonition block being stored as <code>true</code> instead of the caption text (the <code>textlabel</code> attribute now receives the resolved caption, matching Asciidoctor Ruby)</li> <li>Fix escaped include directive (<code>\include::file.adoc[]</code>) inside a listing block in an AsciiDoc table cell logging a spurious "include file not found" error — nested documents now use a plain <code>Reader</code> (no include/conditional processing) matching Ruby Asciidoctor behaviour; the first-line preprocessor directive expansion is handled explicitly as Ruby does</li> <li>Fix <code>findBy</code> throwing <code>TypeError: Receiver must be an instance of class AbstractBlock</code> when traversing a document that contains a description list (<code>dlist</code>) — <code>Array.flat()</code> (depth 1) was leaving the inner terms arrays unflattened, so iterating over them passed a plain array instead of a <code>ListItem</code> to the private <code>#findByInternal</code> method; changed to <code>flat(Infinity)</code> to match Ruby's <code>Array#flatten</code> behaviour</li> <li>Fix named exports from <code>asciidoctor</code> package — remove the redundant <code>export { default } from '@asciidoctor/core'</code> line in <code>index.js</code> that was shadowing named exports and preventing <code>import { Document, ... } from 'asciidoctor'</code> from resolving correctly</li> </ul> <p>== v4.0.0-alpha.5 (2026-05-26)</p> <p>Improvements::</p> <ul> <li>Fix 8 TypeDoc warnings about DSL interface types referenced but not included in the documentation — <code>patch-jsdoc.js</code> now converts <code>export type X = import("./extensions.js").X</code> re-exports in <code>types/index.d.ts</code> to <code>export type { X } from './extensions.js'</code> so TypeDoc follows the re-export chain and documents the definitions inline</li> <li>Add CLI doc generation and copy step to the <code>docs</code> job in <code>build.yml</code> so the main-branch docs push (under <code>/main/</code>) also includes the CLI API docs under <code>/main/cli/</code>, consistent with the release workflow</li> <li>Restore CLI extensibility — <code>Options</code> and <code>Invoker</code> classes are now exported from <code>asciidoctor/cli</code>, allowing third-party tools to extend the CLI by subclassing: add custom options via <code>Options#addOption()</code> and override <code>Invoker#invoke()</code>, <code>Invoker#version()</code>, or <code>Invoker#convertFiles()</code> to customize behavior</li> <li>Add JSDoc to the <code>Options</code> and <code>Invoker</code> classes and generate TypeScript declarations (<code>types/cli.d.ts</code>) via <code>tsc</code> — the <code>asciidoctor/cli</code> export now ships with types</li> <li>Publish CLI API documentation to gh-pages under <code>/\{version}/cli/</code> alongside the core API docs, with cross-navigation links between the two sites</li> <li>Lower the minimum required Node.js version from 24 to 20 — the <code>engines.node</code> field in all packages is now <code>>=20</code>; Node.js 22 remains the recommended version (current LTS/maintenance); Node.js 20 is EOL but the library has no runtime dependency on any API introduced after Node.js 20</li> </ul> <p>== v4.0.0-alpha.4 (2026-05-21)</p> <p>Bug Fixes::</p> <ul> <li>Fix Windows UNC path handling (<code>\\server\share\...</code>) in <code>PathResolver</code> and <code>Document</code> — <code>base_dir</code> is now correctly posixified (<code>\\</code> → <code>//</code>) and <code>..</code> segments are expanded; previously <code>_expandPath</code> silently fell back to returning the path unchanged because <code>require()</code> is not available in ESM modules</li> <li>Remove unused <code>posixfy()</code> alias on <code>PathResolver</code> (duplicate of <code>posixify()</code>)</li> </ul> <p>Improvements::</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/asciidoctor/asciidoctor.js/commit/c73c697d5e1a2a92f9ecf8de68a89415d7981e50";><code>c73c697</code></a> 4.0.0</li> <li><a href="https://github.com/asciidoctor/asciidoctor.js/commit/b9187409c9e1600b6855a29fff386d8463afe470";><code>b918740</code></a> fix(extensions): preserve directly-registered extensions across registry reuse</li> <li><a href="https://github.com/asciidoctor/asciidoctor.js/commit/1b7efdcfbc35bb18b629cb120db6ea45db270ebd";><code>1b7efdc</code></a> docs: document registry reuse behaviour and add tests</li> <li><a href="https://github.com/asciidoctor/asciidoctor.js/commit/0ac262b7f46dec95b1904552fbae697d6f649c52";><code>0ac262b</code></a> docs(extensions): add <a href="https://github.com/overload";><code>@overload</code></a> signatures to IncludeProcessorDsl#handles</li> <li><a href="https://github.com/asciidoctor/asciidoctor.js/commit/b02ce923ae91ffa9cfbedd32aec710132320ec44";><code>b02ce92</code></a> feat(cli): warn when extension does not export a register function</li> <li><a href="https://github.com/asciidoctor/asciidoctor.js/commit/81a909a94683a21eca56323f4ac7171c1374cb60";><code>81a909a</code></a> test: add CJS extension support test and document ESM/CJS formats</li> <li><a href="https://github.com/asciidoctor/asciidoctor.js/commit/b1bba089ccb8d74bd4d66eb3eb4882c4184c499b";><code>b1bba08</code></a> feat: add --extension CLI option and clarify --require contract</li> <li><a href="https://github.com/asciidoctor/asciidoctor.js/commit/d068c5280c095146129f76175b6a2e8334e60fed";><code>d068c52</code></a> 4.0.0-alpha.6</li> <li><a href="https://github.com/asciidoctor/asciidoctor.js/commit/505c48af56c7cd06bb1c9f4ebb4153195d30932c";><code>505c48a</code></a> docs(changelog): move admonition caption fix to unreleased section</li> <li><a href="https://github.com/asciidoctor/asciidoctor.js/commit/e8e93ba4c9c21df85ac8cb5e6b9b39b68d5f4727";><code>e8e93ba</code></a> fix(core): store caption text in textlabel for delimited admonition blocks</li> <li>Additional commits viewable in <a href="https://github.com/asciidoctor/asciidoctor.js/compare/v3.0.4...v4.0.0";>compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions";>GitHub Actions</a>, a new releaser for <code>@asciidoctor/core</code> since your current version.</p> </details> <br /> Updates `js-yaml` from 4.1.1 to 5.1.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md";>js-yaml's changelog</a>.</em></p> <blockquote> <h2>[5.1.0] - 2026-06-23</h2> <h3>Added</h3> <ul> <li>Collection tags can finalize an incrementally populated carrier into a different result value.</li> </ul> <h3>Changed</h3> <ul> <li>[breaking] <code>quoteStyle</code> now selects the preferred quote style; use the restored <code>forceQuotes</code> option to force quoting non-key strings.</li> </ul> <h2>[5.0.0] - 2026-06-20</h2> <h3>Added</h3> <ul> <li>Added named exports for schemas, tags, parser events and AST utilities.</li> <li>Reworked <code>JSON_SCHEMA</code> and <code>CORE_SCHEMA</code> with spec-compliant scalar resolution rules, and added <code>YAML11_SCHEMA</code>.</li> <li>Added <code>realMapTag</code> for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.</li> <li>Added <code>dump()</code> <code>transform</code> option for changing the generated AST before rendering.</li> <li>Added <code>dump()</code> options <code>seqInlineFirst</code>, <code>flowBracketPadding</code>, <code>flowSkipCommaSpace</code>, <code>flowSkipColonSpace</code>, <code>quoteFlowKeys</code>, <code>quoteStyle</code> and <code>tagBeforeAnchor</code>.</li> <li>Added formal data layers (events and AST) for modular data pipelines. <ul> <li>Added low-level parser (to events), presenter and visitor APIs.</li> </ul> </li> <li>Added the <a href="https://github.com/yaml/yaml-test-suite";>YAML Test Suite</a> to the test set.</li> </ul> <h3>Changed</h3> <ul> <li>See the <a href="https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md";>migration guide</a> for upgrade notes.</li> <li>Rewritten in TypeScript and reorganized the public API around flat named exports.</li> <li>Reduced the set of exported schemas: <ul> <li>YAML 1.2 schemas: <code>CORE_SCHEMA</code> (loader default), <code>JSON_SCHEMA</code>, <code>FAILSAFE_SCHEMA</code>.</li> <li><code>YAML11_SCHEMA</code>, a combination of all YAML 1.1 tags (YAML 1.1 does not specify a schema, only "types").</li> </ul> </li> <li><code>load</code>/<code>dump</code> default behaviour is now specified exactly via schemas: <ul> <li><code>load</code> uses <code>CORE_SCHEMA</code>, without <code>!!merge</code> by default.</li> <li><code>dump</code> uses <code>YAML11_SCHEMA</code> + <code>CORE_SCHEMA</code> for the quoting check, to guarantee backward compatibility by default.</li> </ul> </li> <li><code>!!set</code> is now loaded as a JavaScript <code>Set</code>.</li> <li>Replaced the <code>Type</code> API with a tags API. Similar, but more precise and simpler. See examples for details. Tags can be defined via <code>defineScalarTag()</code>, <code>defineSequenceTag()</code> and <code>defineMappingTag()</code>, or as a spread + override of an existing tag.</li> <li>Renamed <code>Schema.extend()</code> to <code>Schema.withTags()</code>.</li> <li>Expanded YAML 1.2 conformance and improved handling of directives, document markers, block keys, multiline scalars, tag syntax and other things.</li> <li><code>load()</code> now throws on empty input instead of returning <code>undefined</code>.</li> <li>Moved browser builds to the <code>js-yaml/browser</code> export.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodeca/js-yaml/commit/f1e45cd201de162cc388a5175717eddf0743d367";><code>f1e45cd</code></a> 5.1.0 released</li> <li><a href="https://github.com/nodeca/js-yaml/commit/53b22be4fe05ea668b2420b142b424d360f6e2cf";><code>53b22be</code></a> Fix constructor coverage</li> <li><a href="https://github.com/nodeca/js-yaml/commit/a1eaa2bce1ce5738d46a918b1f3a228b9fa0bdbd";><code>a1eaa2b</code></a> Fix quote style options and restore forceQuotes</li> <li><a href="https://github.com/nodeca/js-yaml/commit/0532e7d23fff763f07ce166bef0f3b0906f26597";><code>0532e7d</code></a> Add finalizers for immutable collection tags</li> <li><a href="https://github.com/nodeca/js-yaml/commit/9f00b91cdc293f3dfcd017d29dbc413ee98a5c70";><code>9f00b91</code></a> tests: drop the rest of issues tests, move a small fraction of useful checks ...</li> <li><a href="https://github.com/nodeca/js-yaml/commit/6be5d46c88f4caed3103e83075c2eb4aab8770fd";><code>6be5d46</code></a> tests: drop not actual or duplicating issue tests (covered in other places)</li> <li><a href="https://github.com/nodeca/js-yaml/commit/a7c9766f0d79e6506e119dbe91b43deb2d5f8879";><code>a7c9766</code></a> Fix !!pairs coverage</li> <li><a href="https://github.com/nodeca/js-yaml/commit/75148bc4f5eb69b3d338e1c355d8bb2dba5bdf34";><code>75148bc</code></a> 5.0.0 released</li> <li><a href="https://github.com/nodeca/js-yaml/commit/704b25d29229c52e66b824bfc1908d8f3ba3a45e";><code>704b25d</code></a> Quote document markers followed by whitespace</li> <li><a href="https://github.com/nodeca/js-yaml/commit/42dea284430b1077f95a326f14db422b19bedecc";><code>42dea28</code></a> Support complex !!pairs keys with realMapTag</li> <li>Additional commits viewable in <a href="https://github.com/nodeca/js-yaml/compare/4.1.1...5.1.0";>compare view</a></li> </ul> </details> <br /> Updates `sass` from 1.100.0 to 1.101.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sass/dart-sass/releases";>sass's releases</a>.</em></p> <blockquote> <h2>Dart Sass 1.101.0</h2> <p>To install Sass 1.101.0, download one of the packages below and <a href="https://katiek2.github.io/path-doc/";>add it to your PATH</a>, or see <a href="https://sass-lang.com/install";>the Sass website</a> for full installation instructions.</p> <h1>Changes</h1> <ul> <li><strong>Potentially breaking bug fix:</strong> The Node package importer now properly supports resolving import-only variants of Sass files declared in the <code>exports</code>, <code>sass</code>, and <code>style</code> fields of <code>package.json</code>. Previously, these files were ignored even when loaded via <code>@import</code>, so any code relying on loading module-system-only files this way may break.</li> </ul> <p>See the <a href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11010";>full changelog</a> for changes in earlier releases.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md";>sass's changelog</a>.</em></p> <blockquote> <h2>1.101.0</h2> <ul> <li><strong>Potentially breaking bug fix:</strong> The Node package importer now properly supports resolving import-only variants of Sass files declared in the <code>exports</code>, <code>sass</code>, and <code>style</code> fields of <code>package.json</code>. Previously, these files were ignored even when loaded via <code>@import</code>, so any code relying on loading module-system-only files this way may break.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sass/dart-sass/commit/63b9922f5ddbf34bc742b50949e0ee5c47f4686d";><code>63b9922</code></a> Load import-only files through package.json <code>exports</code> (<a href="https://redirect.github.com/sass/dart-sass/issues/2772";>#2772</a>)</li> <li><a href="https://github.com/sass/dart-sass/commit/c7e9947100e8ffdabfe314a4e342595f2bccff35";><code>c7e9947</code></a> Migrate from bufbuild/buf-setup-action to bufbuild/buf-action (<a href="https://redirect.github.com/sass/dart-sass/issues/2773";>#2773</a>)</li> <li><a href="https://github.com/sass/dart-sass/commit/7674a4c29d05c844dcffd40a91e7cf2ac216d524";><code>7674a4c</code></a> Bump postcss from 8.5.13 to 8.5.15 in /pkg/sass-parser (<a href="https://redirect.github.com/sass/dart-sass/issues/2774";>#2774</a>)</li> <li>See full diff in <a href="https://github.com/sass/dart-sass/compare/1.100.0...1.101.0";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] For further information about the NetBeans mailing lists, visit: https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
