Skip to content

chore(deps): bump the website group across 1 directory with 5 updates#1944

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/website/website-50f2ed11ca
Closed

chore(deps): bump the website group across 1 directory with 5 updates#1944
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/website/website-50f2ed11ca

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jan 8, 2026 •
edited
Loading

Bumps the website group with 5 updates in the /website directory:

Package From To
@docsearch/react 4.2.0 4.4.0
@excalidraw/excalidraw 0.17.6 0.18.0
framer-motion 12.23.24 12.23.26
posthog-js 1.280.0 1.310.1
prettier 3.6.2 3.7.4

Updates @docsearch/react from 4.2.0 to 4.4.0

Release notes

Sourced from @​docsearch/react's releases.

v4.4.0

4.4.0 (2025-12-18)

Bug Fixes

Features

v4.3.1

4.3.1 (2025-11-04)

Bug Fixes

  • npm: Publish new packages with public access (#2795) (2d045b5)
Changelog

Sourced from @​docsearch/react's changelog.

4.4.0 (2025-12-18)

Bug Fixes

Features

4.3.2 (2025-11-10)

Bug Fixes

  • suggested-questions: Fixes Suggested Questions on dark theme (#2797) (d9c4220)

4.3.1 (2025-11-04)

Bug Fixes

  • npm: Publish new packages with public access (#2795) (2d045b5)

4.3.0 (2025-11-04)

Bug Fixes

  • docsearch-js: resultsFooterComponent not working in JS CDN version (#2786) (5381e76)
  • website: Fix API Reference docs page formatting (#2783) (8980d47)
  • website: updated askai markdown documentation (#2788) (f7be2a6)

Features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by dylantientcheu, a new releaser for @​docsearch/react since your current version.


Updates @excalidraw/excalidraw from 0.17.6 to 0.18.0

Release notes

Sourced from @​excalidraw/excalidraw's releases.

v0.18.0 (2025-03-11)

Excalidraw Library

0.18.0 (2025-03-11)

Highlights

  • Command palette #7804

  • Multiplayer undo / redo #7348

  • Editable element stats #6382

  • Text element wrapping #7999

  • Font picker with more fonts #8012

  • Font for Chinese, Japanese, and Korean #8530

  • Font subsetting for SVG export #8384

  • Elbow arrows #8299, #8952

  • Flowcharts #8329

  • Scene search #8438

  • Image cropping #8613

  • Element linking #8812

Breaking changes

Deprecated UMD bundle in favor of ES modules #7441, #9127

We've transitioned from UMD to ESM bundle format. Our new dist folder inside @excalidraw/excalidraw package now contains only bundled source files, making any dependencies tree-shakable. The package comes with the following structure:

Note: The structure is simplified for the sake of brevity, omitting lazy-loadable modules, including locales (previously treated as JSON assets) and source maps in the development bundle.

@excalidraw/excalidraw/
├── dist/
│   ├── dev/
│   │   ├── fonts/
│   │   ├── index.css
│   │   ├── index.js
│   │   ├── index.js.map
│   ├── prod/
│   │   ├── fonts/
│   │   ├── index.css
</tr></table>

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by mrazator, a new releaser for @​excalidraw/excalidraw since your current version.


Updates framer-motion from 12.23.24 to 12.23.26

Changelog

Sourced from framer-motion's changelog.

[12.23.26] 2025-12-10

Fixed

  • Moved initialisation of default scale correctors to allow for overwriting existing correctors.

[12.23.25] 2025-12-01

Fixed

  • Ensure relative projection boxes are re-measured when parent layout changes.
Commits

Updates posthog-js from 1.280.0 to 1.310.1

Release notes

Sourced from posthog-js's releases.

posthog-js@1.310.1

1.310.1

Patch Changes

  • #2797 8b1a39a Thanks @​adboio! - product tours: support custom appearance, clean up animations (2025-12-23)

posthog-js@1.310.0

1.310.0

Minor Changes

Patch Changes

posthog-js@1.309.1

1.309.1

Patch Changes

posthog-js@1.309.0

1.309.0

Minor Changes

... (truncated)

Commits
  • 968b6e2 chore: update versions and lockfile [version bump]
  • 8b1a39a feat(product tours): allow customization (#2797)
  • ddf9e1e fix(ci): use read instead of head pipe to avoid SIGPIPE (#2807)
  • 1fda766 chore: add readme for webpack, rollup and react (#2806)
  • d5b645c chore: add vite playground (#2808)
  • 8c6929a chore: update versions and lockfile [version bump]
  • deced33 fix(ci): make Slack notifications non-blocking in release workflow (#2805)
  • 5c2cea5 feat(err): add batch size option (#2804)
  • 6851061 feat: start / stop exception autocapture programatically (#2770)
  • 6b415a0 fix(llma): extract model from response for OpenAI stored prompts (#2789)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for posthog-js since your current version.


Updates prettier from 3.6.2 to 3.7.4

Release notes

Sourced from prettier's releases.

3.7.4

What's Changed

🔗 Changelog

3.7.3

What's Changed

🔗 Changelog

3.7.2

What's Changed

🔗 Changelog

3.7.1

🔗 Changelog

3.7.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;
// Prettier 3.7.3
type Foo = /** comment / (/* comment */ a | b) | c;
// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);
// Prettier 3.7.3 (first format)
type X = (A | B) &
(// comment
A | B);
// Prettier 3.7.3 (second format)
type X = (
| A
</tr></table>

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file minor New features that do not break anything no-release Do not create a new release (wait for additional code changes) labels Jan 8, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 8, 2026 03:48
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Jan 8, 2026

Labels

The following labels could not be found: javascript. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added no-release Do not create a new release (wait for additional code changes) minor New features that do not break anything dependencies Pull requests that update a dependency file labels Jan 8, 2026
@github-actions github-actions bot added size/xl Extra large size PR and removed minor New features that do not break anything labels Jan 8, 2026
@mergify
Copy link
Copy Markdown

mergify bot commented Jan 8, 2026

Warning

This PR exceeds the recommended limit of 1,000 lines.

Large PRs are difficult to review and may be rejected due to their size.

Please verify that this PR does not address multiple issues.
Consider refactoring it into smaller, more focused PRs to facilitate a smoother review process.

@mergify mergify bot added the auto-update This PR was automatically generated label Jan 8, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Jan 8, 2026 •
edited
Loading

Dependency Review

The following issues were found:
  • ❌ 4 vulnerable package(s)
  • ❌ 2 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 5 package(s) with unknown licenses.
See the Details below.

Vulnerabilities

website/pnpm-lock.yaml

NameVersionVulnerabilitySeverity
dompurify3.1.6DOMPurify allows Cross-site Scripting (XSS)moderate
mermaid10.9.3Mermaid improperly sanitizes sequence diagram labels leading to XSSmoderate
nanoid3.3.3Predictable results in nanoid generation when given non-integer valuesmoderate
nanoid4.0.2Predictable results in nanoid generation when given non-integer valuesmoderate
Only included vulnerabilities with severity moderate or higher.

License Issues

website/pnpm-lock.yaml

PackageVersionLicenseIssue Type
elkjs0.9.3EPL-2.0Incompatible License
pako2.0.3MIT AND ZlibIncompatible License
@docsearch/core4.4.0NullUnknown License
@ai-sdk/gateway2.0.27NullUnknown License
@ai-sdk/react2.0.123NullUnknown License
ai5.0.121NullUnknown License
posthog-js1.313.0NullUnknown License
Allowed Licenses: MIT, MIT-0, Apache-2.0, BSD-2-Clause, BSD-2-Clause-Views, BSD-3-Clause, ISC, MPL-2.0, 0BSD, Unlicense, CC0-1.0, CC-BY-3.0, CC-BY-4.0, CC-BY-SA-3.0, Python-2.0, OFL-1.1, LicenseRef-scancode-generic-cla, LicenseRef-scancode-unknown-license-reference, LicenseRef-scancode-unicode, LicenseRef-scancode-google-patent-license-golang

Scanned Files

  • website/pnpm-lock.yaml

@codecov
Copy link
Copy Markdown

codecov bot commented Jan 8, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.93%. Comparing base (bd75dba) to head (47b2c73).
⚠️ Report is 9 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main    #1944      +/-   ##
==========================================
+ Coverage   74.90%   74.93%   +0.02%     
==========================================
  Files         777      777              
  Lines       71302    71302              
==========================================
+ Hits        53409    53429      +20     
+ Misses      14413    14392      -21     
- Partials     3480     3481       +1
Flag Coverage Δ
unittests 74.93% <ø> (+0.02%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 4 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/website/website-50f2ed11ca branch from 268caad to ee78580 Compare January 11, 2026 00:02
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/website/website-50f2ed11ca branch from ee78580 to 7277023 Compare January 16, 2026 00:47
@mergify
Copy link
Copy Markdown

mergify bot commented Jan 16, 2026

💥 This pull request now has conflicts. Could you fix it @dependabot[bot]? 🙏

@mergify mergify bot added the conflict This PR has conflicts label Jan 16, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/website/website-50f2ed11ca branch from 7277023 to cb6f87e Compare January 16, 2026 06:29
@mergify mergify bot removed the conflict This PR has conflicts label Jan 16, 2026
@dependabot
chore(deps): bump the website group across 1 directory with 5 updates
47b2c73 
Bumps the website group with 5 updates in the /website directory:

| Package | From | To |
| --- | --- | --- |
| [@docsearch/react](https://github.com/algolia/docsearch/tree/HEAD/packages/docsearch-react) | `4.2.0` | `4.4.0` |
| [@excalidraw/excalidraw](https://github.com/excalidraw/excalidraw) | `0.17.6` | `0.18.0` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.23.24` | `12.23.26` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.280.0` | `1.310.1` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.4` |



Updates `@docsearch/react` from 4.2.0 to 4.4.0
- [Release notes](https://github.com/algolia/docsearch/releases)
- [Changelog](https://github.com/algolia/docsearch/blob/main/CHANGELOG.md)
- [Commits](https://github.com/algolia/docsearch/commits/v4.4.0/packages/docsearch-react)

Updates `@excalidraw/excalidraw` from 0.17.6 to 0.18.0
- [Release notes](https://github.com/excalidraw/excalidraw/releases)
- [Commits](excalidraw/excalidraw@v0.17.6...v0.18.0)

Updates `framer-motion` from 12.23.24 to 12.23.26
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.23.24...v12.23.26)

Updates `posthog-js` from 1.280.0 to 1.310.1
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.280.0...posthog-js@1.310.1)

Updates `prettier` from 3.6.2 to 3.7.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.7.4)

---
updated-dependencies:
- dependency-name: "@docsearch/react"
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: website
- dependency-name: "@excalidraw/excalidraw"
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: website
- dependency-name: framer-motion
  dependency-version: 12.23.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: website
- dependency-name: posthog-js
  dependency-version: 1.310.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: website
- dependency-name: prettier
  dependency-version: 3.7.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: website
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/website/website-50f2ed11ca branch from cb6f87e to 47b2c73 Compare January 18, 2026 00:04
@osterman osterman closed this Jan 21, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Jan 21, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/website/website-50f2ed11ca branch January 21, 2026 22:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

auto-update This PR was automatically generated dependencies Pull requests that update a dependency file no-release Do not create a new release (wait for additional code changes) size/xl Extra large size PR

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@osterman