[Docs Site] Bump the non-major group across 1 directory with 5 updates by dependabot[bot] · Pull Request #33299 · cloudflare/cloudflare-docs

dependabot · 2026-09-08T12:58:04Z

Bumps the non-major group with 5 updates in the / directory:

Package	From	To
@cloudflare/nimbus-docs	`0.11.0`	`0.13.1`
@cloudflare/workers-types	`5.20260906.1`	`5.20260907.1`
@iconify/utils	`3.1.6`	`3.1.7`
mermaid	`11.16.0`	`11.17.2`
node-html-parser	`9.0.3`	`9.0.4`

Updates @cloudflare/nimbus-docs from 0.11.0 to 0.13.1

Release notes

Sourced from @cloudflare/nimbus-docs's releases.

@cloudflare/nimbus-docs@0.12.0

Minor Changes

#93 43c161a Thanks @MohamedH1998! - Add first-party OpenAPI reference support to Nimbus.

Configure local or inline OpenAPI specs as routed, version-aware collections with operations, schemas, tags, webhooks, generated samples, and every declared request-body media type.

Install an editable api-layout UI that shares Nimbus's docs shell, navigation, breadcrumbs, banners, mobile behavior, and deep-linkable field and code-sample controls. The copied ApiFieldList field iterator is explicitly typed so the scaffolded UI type-checks cleanly under a consumer's strict TypeScript.

Publish per-page Markdown, agent indexes, corpus entries, coordinate manifests, and api.ref: citations across local and cross-site documentation.

Harden generated-consumer delivery with exact registry dependencies, working pnpm installs from scaffold roots, and base-aware canonical, Markdown, sitemap, and agent URLs through the new public withBase helper.

Control how operation pages are addressed, and stay resilient to messy specs. By default, operations that lack a usable operationId no longer abort the build — they warn and fall back to a path-derived coordinate, so real-world specs (e.g. Cloudflare's brand-protection operations) build; set api[].requireOperationId: true on specs you own to keep that fatal, while route-hostile paths and coordinate collisions stay fatal regardless. For readable, path-derived URLs, opt into the resource-action-v1 route convention: set api[].routes: { convention: "resource-action-v1" } (per version in a family) to derive slugs like charges/list from an operation's method and path, decoupled from operationId so route-hostile identifiers no longer poison URLs. Trim shared bases with stripPathPrefixes (e.g. ["/v1"]), pin individual pages with an operations (operationId → slug) map, and inspect how each slug resolved (override / derived / fallback) via the new getApiRouteProvenance export. Derivation collisions, reserved-route segments, unused overrides, cross-version slug drift, and unknown config keys (e.g. a stripPrefixes typo for stripPathPrefixes) are reported with pointed messages; the default (no routes) keeps the legacy operationId slugs unchanged.

#104 79d6430 Thanks @MohamedH1998! - Add server-output support and the @cloudflare/nimbus-docs/adapters export.

Nimbus can now target on-request (server) output in addition to static. A new @cloudflare/nimbus-docs/adapters public export ships the adapter recipes plus the shared astro.config and wrangler.jsonc emitters, and two new CLI verbs opt an existing site in: nimbus-docs add server-output --adapter <vercel|node|netlify|cloudflare> (alias nimbus-docs add adapter-<id>). The installer rewrites astro.config at the // nimbus:adapter marker and, for Cloudflare, creates a server wrangler.jsonc or replaces an exact Nimbus static config. Cloudflare installs add request rendering when the active Nimbus config has no explicit rendering policy; explicit or ambiguous policies are preserved and receive an agent-ready handoff. Adapter dependencies are saved at their exact resolved versions so subsequent runs accept the installed declaration. Custom and alternate Wrangler configs are preserved with manual adaptation instructions.

Withdraw the gated config option because it did not hold as a confidentiality boundary. Existing gated config now fails with a migration error; to keep a page out of the build, move the page out of a routed content collection.

Fix env preflight precedence and parsing to match Vite, including empty shell overrides, last-wins .env* files, and inline dotenv comments. Adapter dependency validation now resolves pnpm catalog declarations, and compatibility warnings reflect the versions installed by the command.

Fix NimbusHead URLs for sub-path deployments by applying Astro's configured base to sitemap, LLM index, social image, JSON-LD, canonical, and version-alternate URLs. Root deployments and already-based paths are unchanged.

Keep registry component render counters compatible with adapter-defined Astro.locals types, including Cloudflare server output.

#104 862df4a Thanks @MohamedH1998! - Add Cloudflare request rendering for canonical content collections.

Nimbus now supports collection-level build and request rendering policies with validated defaults and per-collection overrides. Request-rendered prose and API routes use response-aware page helpers, prepared API models, request-safe partial headings, 404 responses, and build-derived syntax-highlighting assets without shipping source OpenAPI specs to Workers. Cloudflare server scaffolds enable request rendering by default, and generated pnpm configuration installs Satteri's WASI fallback alongside the current architecture.

Preserve sitemap, Pagefind, Markdown, and agent-index discovery for request-rendered routes. Pin the tested sitemap integration, clean up synthetic Pagefind staging files transactionally, and generate cross-collection Open Graph images in new starters.

Patch Changes

#99 2965d9f Thanks @MohamedH1998! - - Honor noindex: true on machine discovery surfaces. noindex pages now drop out of /llms.txt, per-section llms.txt, and the /llms-full.txt corpus (matching on-site search, which already excluded them) while staying directly addressable and navigable. A single exported isDiscoverable predicate defines the contract for custom index/corpus routes.

Pin @vercel/detect-agent to 1.2.3, the last release published with npm provenance. Versions 1.2.4/1.2.5 dropped provenance, tripping pnpm's ERR_PNPM_TRUST_DOWNGRADE and blocking lockfile updates. Pinning holds at the attested artifact until upstream restores provenance.

Fix navigation for pages under CJK (percent-encoded) paths. Route matching now decodes percent-encoded request paths (toRouteKey), so active sidebar state, breadcrumbs, and prev/next resolve correctly instead of falling back to a URL-encoded trail; the breadcrumb URL fallback also decodes segment labels.

Changelog

Sourced from @cloudflare/nimbus-docs's changelog.

0.13.1

Patch Changes

#110 e6fb2b1 Thanks @sansynx! - Reject registry install paths that resolve outside src through symbolic links.

#109 f4d0d78 Thanks @sansynx! - Preserve casing in static page routes during duplicate-route checks.

#119 bd179bb Thanks @MohamedH1998! - Index API response coordinates for direct citations, and keep scaffold progress readable in non-interactive terminals. Emit canonical trailing slashes for API navigation links.

0.13.0

Minor Changes

#114 3c0d794 Thanks @MohamedH1998! - Generate deterministic Markdown versions for every public page, prepared MDX source versions for authored pages, llms.txt indexes, llms-full.txt, and merged partial headings at build time. Request-rendered pages now consume compact prepared heading data, and custom component transforms and partial resolvers are configured through markdown.componentMap and markdown.partialResolver. Worker bundles no longer include partial-expansion parsers. Calls to renderEntryAsMarkdown or getEntryMarkdown that still pass <Render> partials now fail instead of attempting runtime expansion; migrate custom Markdown routes to the prepared helpers exported by @cloudflare/nimbus-docs/build.

Rename prepared publication APIs without compatibility aliases: TwinSurface becomes PreparedMarkdownSurface, PreparedTwin* becomes PreparedMarkdown*, PreparedCorpus* becomes PreparedLlms*, getPreparedTwin* becomes getPreparedMarkdown*, getPreparedCorpus* becomes getPreparedLlms*, and renderCorpusMarkdown becomes renderLlmsFullMarkdown. Move integration customization from twins.componentMap and twins.partialResolver to markdown.componentMap and markdown.partialResolver.

Keep framework assets, metadata, starter navigation, and generated API links inside Astro's configured deployment base path. Replace the removed withBaseRoute runtime export with withBase; site-relative inputs to withBase must be logical, unbased paths.

Keep generated .nimbus build data out of source control, deduplicate sitemap roots on subpath deployments, and advertise prepared MDX source responses as text/mdx consistently across static and request rendering.

0.12.0

Minor Changes

#93 43c161a Thanks @MohamedH1998! - Add first-party OpenAPI reference support to Nimbus.

Configure local or inline OpenAPI specs as routed, version-aware collections with operations, schemas, tags, webhooks, generated samples, and every declared request-body media type.

Install an editable api-layout UI that shares Nimbus's docs shell, navigation, breadcrumbs, banners, mobile behavior, and deep-linkable field and code-sample controls. The copied ApiFieldList field iterator is explicitly typed so the scaffolded UI type-checks cleanly under a consumer's strict TypeScript.

Publish per-page Markdown, agent indexes, corpus entries, coordinate manifests, and api.ref: citations across local and cross-site documentation.

Harden generated-consumer delivery with exact registry dependencies, working pnpm installs from scaffold roots, and base-aware canonical, Markdown, sitemap, and agent URLs through the new public withBase helper.

Control how operation pages are addressed, and stay resilient to messy specs. By default, operations that lack a usable operationId no longer abort the build — they warn and fall back to a path-derived coordinate, so real-world specs (e.g. Cloudflare's brand-protection operations) build; set api[].requireOperationId: true on specs you own to keep that fatal, while route-hostile paths and coordinate collisions stay fatal regardless. For readable, path-derived URLs, opt into the resource-action-v1 route convention: set api[].routes: { convention: "resource-action-v1" } (per version in a family) to derive slugs like charges/list from an operation's method and path, decoupled from operationId so route-hostile identifiers no longer poison URLs. Trim shared bases with stripPathPrefixes (e.g. ["/v1"]), pin individual pages with an operations (operationId → slug) map, and inspect how each slug resolved (override / derived / fallback) via the new getApiRouteProvenance export. Derivation collisions, reserved-route segments, unused overrides, cross-version slug drift, and unknown config keys (e.g. a stripPrefixes typo for stripPathPrefixes) are reported with pointed messages; the default (no routes) keeps the legacy operationId slugs unchanged.

#104 79d6430 Thanks @MohamedH1998! - Add server-output support and the @cloudflare/nimbus-docs/adapters export.

Nimbus can now target on-request (server) output in addition to static. A new @cloudflare/nimbus-docs/adapters public export ships the adapter recipes plus the shared astro.config and wrangler.jsonc emitters, and two new CLI verbs opt an existing site in: nimbus-docs add server-output --adapter <vercel|node|netlify|cloudflare> (alias nimbus-docs add adapter-<id>). The installer rewrites astro.config at the // nimbus:adapter marker and, for Cloudflare, creates a server wrangler.jsonc or replaces an exact Nimbus static config. Cloudflare installs add request rendering when the active Nimbus config has no explicit rendering policy; explicit or ambiguous policies are preserved and receive an agent-ready handoff. Adapter dependencies are saved at their exact resolved versions so subsequent runs accept the installed declaration. Custom and alternate Wrangler configs are preserved with manual adaptation instructions.

Withdraw the gated config option because it did not hold as a confidentiality boundary. Existing gated config now fails with a migration error; to keep a page out of the build, move the page out of a routed content collection.

Fix env preflight precedence and parsing to match Vite, including empty shell overrides, last-wins .env* files, and inline dotenv comments. Adapter dependency validation now resolves pnpm catalog declarations, and compatibility warnings reflect the versions installed by the command.

Fix NimbusHead URLs for sub-path deployments by applying Astro's configured base to sitemap, LLM index, social image, JSON-LD, canonical, and version-alternate URLs. Root deployments and already-based paths are unchanged.

Keep registry component render counters compatible with adapter-defined Astro.locals types, including Cloudflare server output.

#104 862df4a Thanks @MohamedH1998! - Add Cloudflare request rendering for canonical content collections.

Nimbus now supports collection-level build and request rendering policies with validated defaults and per-collection overrides. Request-rendered prose and API routes use response-aware page helpers, prepared API models, request-safe partial headings, 404 responses, and build-derived syntax-highlighting assets without shipping source OpenAPI specs to Workers. Cloudflare server scaffolds enable request rendering by default, and generated pnpm configuration installs Satteri's WASI fallback alongside the current architecture.

... (truncated)

Commits

See full diff in compare view

Updates @cloudflare/workers-types from 5.20260906.1 to 5.20260907.1

Commits

See full diff in compare view

Updates @iconify/utils from 3.1.6 to 3.1.7

Commits

See full diff in compare view

Updates mermaid from 11.16.0 to 11.17.2

Release notes

Sourced from mermaid's releases.

mermaid@11.17.2

Patch Changes

#8125 178d7c7 Thanks @knsv-bot! - fix: restore the edgePaths class on the edge group in rendered SVG, and point the flowchart, block and user journey stylesheets at it

mermaid@11.17.1

Patch Changes

#8092 31ce60a Thanks @pbrolin47! - fix(c4): wrap element labels to c4.width again

C4 element labels (System, Container, Component, Person and their _Ext variants) stopped wrapping in 11.17.0, so long descriptions rendered on one unbroken line and the shape grew sideways well past the configured c4.width. The unified-shapes label helper gated wrapping on the root-level wrap option, which has no schema default and is therefore undefined; it now gates on c4.wrap (default true), which is what the legacy renderer used.

#8088 c66200b Thanks @ashishjain0512! - fix: neo-look arrowheads and crow's-foot markers no longer fall back to default theme colours/stroke widths on the first render with layout: elk. State diagram arrowheads stayed dark on dark themes, and ER / requirement markers were drawn at the default stroke width, because markers were created from the layout package's own bundled copy of mermaid, whose config had not been initialized yet.

#8079 281cd7b Thanks @ashishjain0512! - fix(class): class diagram relation markers (composition, aggregation, extension, dependency, lollipop) no longer scale with the edge stroke width, so they stay outside the class box boundary in themes that set strokeWidth: 2 (redux, redux-dark, redux-color, redux-dark-color, neo, neo-dark) with the default classic look.

mermaid@11.17.0

Minor Changes

#7842 3670b4e Thanks @filipsajdak! - feat(c4): render C4 elements through the unified shape system, using the new person shape

#7812 cdfc0ea Thanks @knsv-bot! - feat(class): route classDiagram to the unified (v2) renderer by default

Set class: { defaultRenderer: 'dagre-d3' } in the config to restore the legacy renderer.

#7785 c45cde9 Thanks @knsv-bot! - feat(flowchart): add collapsible flowchart subgraphs via subgraphId@{ view: collapsed }

#7828 8eb3afc Thanks @knsv-bot! - feat(elk): add elk.keepEntryNodeOnTop config option to keep a recursive flow's entry node on top

#7803 74e44eb Thanks @knsv-bot! - feat(elk): add elk.nodePlacementAlignment config option

#7792 ea55b31 Thanks @RodrigojndSantos! - feat(er): add subgraph support to ER diagrams.

#7970 a2c0fb6 Thanks @filipsajdak! - feat(flowchart): add folder, bucket, console (terminal window) and browser shapes

#7842 ae3e115 Thanks @filipsajdak! - feat(flowchart): add person shape (circular head above a rounded body), usable in flowcharts via A@{ shape: person }

#7724 0fd7a9f Thanks @xdumaine! - feat(xyChart): add legends for named line and bar series

Patch Changes

#7847 215fe89 Thanks @filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

#7871 8d874c4 Thanks @knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

#8071 b3d1f63 Thanks @pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

#7870 71b8843 Thanks @knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

#7924 9cbef5d Thanks @nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

... (truncated)

Commits

dcb694d Version Packages (#8130)
178d7c7 fix: restore edgePaths class on the edge group (#8125)
569f46e Version Packages (#8114)
3054836 Version Packages
5b17e0a Merge pull request #8092 from mermaid-js/hotfix/11.17.1
655211a Reverted change of wrap-options
8a23480 Updated doc from feedback
412c80a Update doc and consistent handlig in c4 as for seq diags
b433a9a Updated changeset to describe specifik diagram affected
6bae15e Updated tests to Playwright API
Additional commits viewable in compare view

Updates node-html-parser from 9.0.3 to 9.0.4

Changelog

Sourced from node-html-parser's changelog.

9.0.4 (2026-09-07)

Commits

c0cae42 chore(release): 9.0.4
468e8f2 Merge branch 'adarshx01-fix/unclosed-dt-dd'
f561cd0 Merge branch 'fix/unclosed-dt-dd' of github.com:adarshx01/node-html-parser in...
db9c9c9 Honor implied end tags for dt and dd
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the non-major group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@cloudflare/nimbus-docs](https://github.com/cloudflare/nimbus/tree/HEAD/packages/nimbus-docs) | `0.11.0` | `0.13.1` | | [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260906.1` | `5.20260907.1` | | [@iconify/utils](https://github.com/iconify/iconify/tree/HEAD/packages/utils) | `3.1.6` | `3.1.7` | | [mermaid](https://github.com/mermaid-js/mermaid) | `11.16.0` | `11.17.2` | | [node-html-parser](https://github.com/taoqf/node-fast-html-parser) | `9.0.3` | `9.0.4` | Updates `@cloudflare/nimbus-docs` from 0.11.0 to 0.13.1 - [Release notes](https://github.com/cloudflare/nimbus/releases) - [Changelog](https://github.com/cloudflare/nimbus/blob/main/packages/nimbus-docs/CHANGELOG.md) - [Commits](https://github.com/cloudflare/nimbus/commits/HEAD/packages/nimbus-docs) Updates `@cloudflare/workers-types` from 5.20260906.1 to 5.20260907.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](https://github.com/cloudflare/workerd/commits) Updates `@iconify/utils` from 3.1.6 to 3.1.7 - [Commits](https://github.com/iconify/iconify/commits/HEAD/packages/utils) Updates `mermaid` from 11.16.0 to 11.17.2 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.0...mermaid@11.17.2) Updates `node-html-parser` from 9.0.3 to 9.0.4 - [Release notes](https://github.com/taoqf/node-fast-html-parser/releases) - [Changelog](https://github.com/taoqf/node-html-parser/blob/main/CHANGELOG.md) - [Commits](taoqf/node-html-parser@v9.0.3...v9.0.4) --- updated-dependencies: - dependency-name: "@cloudflare/nimbus-docs" dependency-version: 0.13.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: non-major - dependency-name: "@cloudflare/workers-types" dependency-version: 5.20260907.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: non-major - dependency-name: "@iconify/utils" dependency-version: 3.1.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: non-major - dependency-name: mermaid dependency-version: 11.17.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: non-major - dependency-name: node-html-parser dependency-version: 9.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: non-major ... Signed-off-by: dependabot[bot] <support@github.com>

cloudflare-docs-bot · 2026-09-08T12:58:11Z

Dependabot review

Package	Impact	Recommendation
`@cloudflare/nimbus-docs` 0.11.0 → 0.13.1	🟠 Medium	⚠️ Verify
`@cloudflare/workers-types` 5.20260906.1 → 5.20260907.1	⬜ None	✅ Merge
`@iconify/utils` 3.1.6 → 3.1.7	🟢 Very Low	✅ Merge
`mermaid` 11.16.0 → 11.17.2	🟡 Low	✅ Merge
`node-html-parser` 9.0.3 → 9.0.4	🟡 Low	✅ Merge

Overall: ✅ Merge + spot-check

All five bumps are direct devDependencies in this Astro/Nimbus docs site. The standout is @cloudflare/nimbus-docs (0.11.0 → 0.13.1), which spans two minor versions containing breaking changes: 0.13.0 renamed prepared-publication APIs without aliases (TwinSurface→PreparedMarkdownSurface, PreparedCorpus→PreparedLlms, renderCorpusMarkdown→renderLlmsFullMarkdown, withBaseRoute→withBase, twins.→markdown.) and 0.12.0 withdrew the gated config option. Code search confirms none of those renamed/removed APIs or options are used in this repo (no withBaseRoute, TwinSurface, renderCorpusMarkdown, getPreparedTwin/Corpus, renderEntryAsMarkdown, getEntryMarkdown, gated, or twins.* usages; the repo's llms.txt routes are custom in-repo implementations), and the repo relies only on the stable nimbus surface (defineConfig, getSidebar, getBreadcrumbs, getRouteNavigation, getSidebarSections, getDocsPageProps, getPrevNext, getHeadingsFromHtml, defaultCodeTransformers, getVersionStatus, plus /markdown, /client, /react, /types, and Icon.astro subpaths). The framework also now pins @astrojs/sitemap 3.7.2 internally and pulls in new dependencies. mermaid 11.17.x is a minor+patch release whose only default-behavior change (classDiagram routed to the v2 renderer) does not affect the diagram types used in content (flowchart/graph, sequenceDiagram, stateDiagram-v2); the rest are bug fixes and additive features. node-html-parser 9.0.4 is a spec-compliant parsing fix for implied end tags on dt/dd. @iconify/utils 3.1.7 is a patch with no release notes, and @cloudflare/workers-types is a one-day type-only refresh. Merge is likely safe, but verify the production build and spot-check pages exercising the nimbus surfaces (sidebar/breadcrumbs, code components, /directory icons, mermaid diagrams) since the framework bump is the largest in this group.

Package details

`@cloudflare/nimbus-docs`: 0.11.0 → 0.13.1

Type: feature
Dependency type: direct

What changed

0.13.0 renamed prepared-publication APIs without compatibility aliases (TwinSurface→PreparedMarkdownSurface, PreparedTwin→PreparedMarkdown, PreparedCorpus→PreparedLlms, getPreparedTwin→getPreparedMarkdown, getPreparedCorpus→getPreparedLlms, renderCorpusMarkdown→renderLlmsFullMarkdown); renderEntryAsMarkdown/getEntryMarkdown calls passing partials now fail.
0.13.0 replaced removed withBaseRoute export with withBase and moved twins.componentMap/twins.partialResolver to markdown.componentMap/markdown.partialResolver.
0.12.0 withdrew the gated config option (existing config fails with a migration error).
0.12.0/0.13.x added OpenAPI reference support, server-output adapters, prepared Markdown/llms.txt generation, noindex handling on discovery surfaces, and CJK path decoding fixes.
0.13.1 added path-traversal guard for registry installs, casing preservation in duplicate-route checks, and API response coordinate indexing.

Usage in this repo
Core docs framework: astro.config.ts (nimbus(), defineNimbusConfig) plus imports from @cloudflare/nimbus-docs (defineConfig, getBreadcrumbs, getRouteNavigation, getSidebar, getSidebarSections, getDocsPageProps, getPrevNext, getHeadingsFromHtml, defaultCodeTransformers, getVersionStatus), /markdown (externalLinks, titleFigure, EXTERNAL_LINK_ARROW), /client (mount, codeCopy), /components/Icon.astro, /react (useDiagram), and /types (BasePageProps) across src/util/sidebar.ts, src/layouts/BaseLayout.astro, src/pages/*.astro, and src/plugins/satteri.

Impact: 🟠 Medium — None of the renamed/removed APIs or withdrawn options are used by this repo (verified by search), and llms.txt routes are custom in-repo pages, so the breaking changes don't touch existing code. However, this is the site's core rendering framework jumping two minor versions with new dependencies and build-time Markdown/sitemap behavior, so a full build verification is warranted.

`@cloudflare/workers-types`: 5.20260906.1 → 5.20260907.1

Type: dependency bump
Dependency type: direct

What changed

Daily refresh of Workers runtime type definitions (one-day delta, no changelog).

Usage in this repo
Type-only devDependency referenced in worker/tsconfig.json (types: ["@cloudflare/workers-types"]) and .flue/tsconfig.json; also wired as the optional peer of wrangler and @cloudflare/vitest-pool-workers in pnpm-lock.yaml.

Impact: ⬜ None — Type-only package with a one-day version delta; no runtime code, no API surface used directly beyond TS types for the Worker. No action needed beyond the bump.

`@iconify/utils`: 3.1.6 → 3.1.7

Type: dependency bump
Dependency type: direct

What changed

Patch release (3.1.7) with no release notes in the PR body; also updated as a transitive dependency of @iconify/tools and mermaid in the lockfile.

Usage in this repo
Direct import in src/pages/directory.astro (getIconData, iconToSVG) to build product icons, and the IconifyIconBuildResult type in src/components/directory/grid.ts.

Impact: 🟢 Very Low — Patch bump on the stable icon-lookup/build API surface used on the /directory page; no breaking or behavior changes documented, and the usage is limited to a single prerendered page.

`mermaid`: 11.16.0 → 11.17.2

Type: feature
Dependency type: direct

What changed

11.17.0 routes classDiagram to the unified (v2) renderer by default (opt-out via class.defaultRenderer: 'dagre-d3') — the only default-behavior change.
11.17.0 added new flowchart shapes (person, folder, bucket, console, browser), ER subgraph support, xyChart legends, elk config options, and C4 unified shapes.
11.17.0/11.17.1/11.17.2 fixed dagre warn-log spam, a RangeError: Invalid array length crash on certain edges, treeView icons after sanitization, block-diagram overlaps, C4 attribute clobbering/label wrapping, elk marker theme fallbacks, class relation marker scaling, and restored the edgePaths class on the edge group.

Usage in this repo
Client-side rendering only: dynamically imported in src/scripts/mermaid.client.ts (mermaid.initialize with theme 'base' and custom themeVariables, mermaid.render per

). Content uses flowchart LR/TD/RL, graph TD/LR, sequenceDiagram, and stateDiagram-v2 fences (no classDiagram, C4, or ER diagrams in src/content).

Impact: 🟡 Low — The only renderer-default change (classDiagram v2) targets a diagram type not used in this repo's content; the remaining changes are bug fixes and additive features. Diagrams are visitor-visible client-side output, so a spot check of a flowchart/sequence/state diagram page after merge is a reasonable precaution.

`node-html-parser`: 9.0.3 → 9.0.4

Type: bug fix
Dependency type: direct

What changed

Honor implied end tags for dt and dd (unclosed
/
inside
now close per HTML spec).

Usage in this repo
parse() from node-html-parser used in src/util/markdown.ts and src/util/description.ts (HTML→text/description extraction), src/components/cf/WranglerConfig.astro and TypeScriptExample.astro (slot HTML parsing with blockTextElements: {}), and worker tests (worker/index.worker.test.ts, preview/JSON-LD tests).

Impact: 🟡 Low — A spec-compliant parsing fix that changes the tree shape only for unclosed

/

; description extraction and code-slot parsing could theoretically shift on pages with definition lists, but the change corrects behavior rather than altering stable output. Worker tests already parse rendered HTML and will catch regressions.

github-actions · 2026-09-08T12:59:00Z

This pull request requires reviews from CODEOWNERS as it changes files that match the following patterns:

Pattern	Owners
`package.json`	`@cloudflare/content-engineering`
`*`	`@cloudflare/product-owners`

github-actions · 2026-09-08T12:59:54Z

CI run failed: build logs

cloudflare-workers-and-pages · 2026-09-08T13:04:30Z

🚀 Deploying Preview to Cloudflare 🚀

Preview Deployments by commit

Status	Deployment URL	Commit	Updated (UTC)	See this deployment's details
Build: Failed ❌ View logs ↗		ff24bf7	2026-09-08T12:59:14.897Z	View logs ↗

dependabot · 2026-09-08T17:48:11Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot assigned kodster28 Sep 8, 2026

dependabot Bot requested review from a team as code owners September 8, 2026 12:58

dependabot Bot assigned mvvmm Sep 8, 2026

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 8, 2026

github-actions Bot added the size/m label Sep 8, 2026

mvvmm closed this Sep 8, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/non-major-08cd7c7c16 branch September 8, 2026 17:48

Navigation Menu

Uh oh!

[Docs Site] Bump the non-major group across 1 directory with 5 updates - #33299

[Docs Site] Bump the non-major group across 1 directory with 5 updates#33299
dependabot[bot] wants to merge 1 commit into
productionfrom
dependabot/npm_and_yarn/non-major-08cd7c7c16

dependabot Bot commented on behalf of github Sep 8, 2026

Uh oh!

cloudflare-docs-bot Bot commented Sep 8, 2026 •

edited

Loading

`@cloudflare/nimbus-docs`: 0.11.0 → 0.13.1

`@cloudflare/workers-types`: 5.20260906.1 → 5.20260907.1

`@iconify/utils`: 3.1.6 → 3.1.7

`mermaid`: 11.16.0 → 11.17.2

`node-html-parser`: 9.0.3 → 9.0.4

Uh oh!

github-actions Bot commented Sep 8, 2026

Uh oh!

github-actions Bot commented Sep 8, 2026

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 8, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 8, 2026

@​cloudflare/nimbus-docs@​0.12.0

Minor Changes

Patch Changes

0.13.1

Patch Changes

0.13.0

Minor Changes

0.12.0

Minor Changes

mermaid@11.17.2

Patch Changes

mermaid@11.17.1

Patch Changes

mermaid@11.17.0

Minor Changes

Patch Changes

9.0.4 (2026-09-07)

Uh oh!

cloudflare-docs-bot Bot commented Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependabot review

@cloudflare/nimbus-docs: 0.11.0 → 0.13.1

@cloudflare/workers-types: 5.20260906.1 → 5.20260907.1

@iconify/utils: 3.1.6 → 3.1.7

mermaid: 11.16.0 → 11.17.2

node-html-parser: 9.0.3 → 9.0.4

Uh oh!

github-actions Bot commented Sep 8, 2026

Uh oh!

github-actions Bot commented Sep 8, 2026

Uh oh!

cloudflare-workers-and-pages Bot commented Sep 8, 2026

🚀 Deploying Preview to Cloudflare 🚀

Preview Deployments by commit

Uh oh!

dependabot Bot commented on behalf of github Sep 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`@cloudflare/nimbus-docs@0`.12.0

cloudflare-docs-bot Bot commented Sep 8, 2026 •

edited

Loading

`@cloudflare/nimbus-docs`: 0.11.0 → 0.13.1

`@cloudflare/workers-types`: 5.20260906.1 → 5.20260907.1

`@iconify/utils`: 3.1.6 → 3.1.7

`mermaid`: 11.16.0 → 11.17.2

`node-html-parser`: 9.0.3 → 9.0.4