Skip to content

chore(deps): Bump esbuild, vuepress, vuepress-plugin-seo2 and vuepress-plugin-sitemap2 in /docs#1068

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/docs/multi-1204cd371a
Open

chore(deps): Bump esbuild, vuepress, vuepress-plugin-seo2 and vuepress-plugin-sitemap2 in /docs#1068
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/docs/multi-1204cd371a

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps esbuild to 0.25.12 and updates ancestor dependencies esbuild, vuepress, vuepress-plugin-seo2 and vuepress-plugin-sitemap2. These dependencies need to be updated together.

Updates esbuild from 0.16.17 to 0.25.12

Release notes

Sourced from esbuild's releases.

v0.25.12

  • Fix a minification regression with CSS media queries (#4315)

    The previous release introduced support for parsing media queries which unintentionally introduced a regression with the removal of duplicate media rules during minification. Specifically the grammar for @media <media-type> and <media-condition-without-or> { ... } was missing an equality check for the <media-condition-without-or> part, so rules with different suffix clauses in this position would incorrectly compare equal and be deduplicated. This release fixes the regression.

  • Update the list of known JavaScript globals (#4310)

    This release updates esbuild's internal list of known JavaScript globals. These are globals that are known to not have side-effects when the property is accessed. For example, accessing the global Array property is considered to be side-effect free but accessing the global scrollY property can trigger a layout, which is a side-effect. This is used by esbuild's tree-shaking to safely remove unused code that is known to be side-effect free. This update adds the following global properties:

    From ES2017:

    • Atomics
    • SharedArrayBuffer

    From ES2020:

    • BigInt64Array
    • BigUint64Array

    From ES2021:

    • FinalizationRegistry
    • WeakRef

    From ES2025:

    • Float16Array
    • Iterator

    Note that this does not indicate that constructing any of these objects is side-effect free, just that accessing the identifier is side-effect free. For example, this now allows esbuild to tree-shake classes that extend from Iterator:

    // This can now be tree-shaken by esbuild:
    class ExampleIterator extends Iterator {}
  • Add support for the new @view-transition CSS rule (#4313)

    With this release, esbuild now has improved support for pretty-printing and minifying the new @view-transition rule (which esbuild was previously unaware of):

    /* Original code */
    @view-transition {
      navigation: auto;
      types: check;
    }
    /* Old output */
    @​view-transition { navigation: auto; types: check; }
    /* New output */
    @​view-transition {
    navigation: auto;
    types: check;

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2023

This changelog documents all esbuild versions published in the year 2023 (versions 0.16.13 through 0.19.11).

0.19.11

  • Fix TypeScript-specific class transform edge case (#3559)

    The previous release introduced an optimization that avoided transforming super() in the class constructor for TypeScript code compiled with useDefineForClassFields set to false if all class instance fields have no initializers. The rationale was that in this case, all class instance fields are omitted in the output so no changes to the constructor are needed. However, if all of this is the case and there are #private instance fields with initializers, those private instance field initializers were still being moved into the constructor. This was problematic because they were being inserted before the call to super() (since super() is now no longer transformed in that case). This release introduces an additional optimization that avoids moving the private instance field initializers into the constructor in this edge case, which generates smaller code, matches the TypeScript compiler's output more closely, and avoids this bug:

    // Original code
    class Foo extends Bar {
      #private = 1;
      public: any;
      constructor() {
        super();
      }
    }
    // Old output (with esbuild v0.19.9)
    class Foo extends Bar {
    constructor() {
    super();
    this.#private = 1;
    }
    #private;
    }
    // Old output (with esbuild v0.19.10)
    class Foo extends Bar {
    constructor() {
    this.#private = 1;
    super();
    }
    #private;
    }
    // New output
    class Foo extends Bar {
    #private = 1;
    constructor() {
    super();
    }
    }

  • Minifier: allow reording a primitive past a side-effect (#3568)

    The minifier previously allowed reordering a side-effect past a primitive, but didn't handle the case of reordering a primitive past a side-effect. This additional case is now handled:

... (truncated)

Commits
  • 208f539 publish 0.25.12 to npm
  • 5f03afd update release notes
  • 6b2ee78 minify: remove css rules containing empty :is()
  • f361deb add some additional known static methods
  • 07aa646 automatically mark "RegExp.escape()" calls as pure
  • 9039c46 simplify some call expression checks
  • 188944d add some additional known static methods
  • d3c67f9 fix #4310: add Iterator and other known globals
  • 4a51f0b fix: escape dev server breadcrumb hrefs properly (#4316)
  • 26b29ed fix #4315: @media deduplication bug edge case
  • Additional commits viewable in compare view

Updates vuepress from 2.0.0-beta.66 to 2.0.0-rc.26

Commits

Updates vuepress-plugin-seo2 from 2.0.0-beta.209 to 2.0.0-rc.16

Release notes

Sourced from vuepress-plugin-seo2's releases.

v2.0.0-rc.16

Features

Bug Fixes

v2.0.0-rc.15

Important Note⚠️

In VuePress2 rc2, you should:

  • manually install bundler packages (at least 1 of @vuepress/bundler-vite and @vuepress/bundler-webpack)
  • declare bundler field in config file, or use vuepress-vite / vuepress-webpack bin instead of vuepress to specify a bundler.
- vuepress dev src

vuepress-vite dev src
or
vuepress-webpack dev src


vuepress build src


vuepress-vite build src
or
vuepress-webpack build src

Bug Fixes

  • create: fix create flow (2cb4b30)
  • theme: fix VuePress detect (fd2fae0)

v2.0.0-rc.14

Highlights 🎉

In this version we upgrade to vuepress@2.0.0-rc.2, which has the following highlights:

  • sub exports of packages, which means you no longer need to manually declare @vuepress/client as deps

  • markdown-it v14 and sass-loader v14 are shipped in this version

  • title support in code block

    ```ts title=".vuepress/config.js"

... (truncated)

Changelog

Sourced from vuepress-plugin-seo2's changelog.

2.0.0-rc.16 (2024-01-27)

Features

Bug Fixes

2.0.0-rc.15 (2024-01-26)

Bug Fixes

  • create: fix create flow (2cb4b30)
  • theme: fix VuePress detect (fd2fae0)

2.0.0-rc.14 (2024-01-26)

Features

  • bump to vp2rc2 (05f917d)
  • md-enhance: improve sandpack attr handle (be94b6d)

Bug Fixes

  • append-date: avoid covering the file content (e97cb05)

2.0.0-rc.13 (2024-01-25)

Features

  • shared: remove usePageTitle (9458a40)
  • theme: improve HopeIcon (c120670)

Bug Fixes

  • auto-catalog: fix catalog issue in vue3.4, close #3854 (42898bd)
  • avoid calling composition apis in computed hook (993e1b9)
  • theme: fix inject warning (244f5b1)

Performance Improvements

  • use shadowRef if possible (454eb32)

2.0.0-rc.12 (2024-01-25)

Bug Fixes

... (truncated)

Commits
  • 119360c chore(release): publish v2.0.0-rc.16
  • 935d97d chore: remove check version
  • 462dd31 chore(release): publish v2.0.0-rc.15
  • 1f9cc0b chore(release): publish v2.0.0-rc.14
  • 05f917d feat: bump to vp2rc2
  • e651b83 chore(release): publish v2.0.0-rc.13
  • 7a4ad8f style: sort package.json
  • f8539ea chore(release): publish v2.0.0-rc.12
  • 5c52376 chore: update deps
  • 767a936 chore: fix clean script (#3839)
  • Additional commits viewable in compare view

Updates vuepress-plugin-sitemap2 from 2.0.0-beta.234 to 2.0.0-rc.16

Release notes

Sourced from vuepress-plugin-sitemap2's releases.

v2.0.0-rc.16

Features

Bug Fixes

v2.0.0-rc.15

Important Note⚠️

In VuePress2 rc2, you should:

  • manually install bundler packages (at least 1 of @vuepress/bundler-vite and @vuepress/bundler-webpack)
  • declare bundler field in config file, or use vuepress-vite / vuepress-webpack bin instead of vuepress to specify a bundler.
- vuepress dev src

vuepress-vite dev src
or
vuepress-webpack dev src


vuepress build src


vuepress-vite build src
or
vuepress-webpack build src

Bug Fixes

  • create: fix create flow (2cb4b30)
  • theme: fix VuePress detect (fd2fae0)

v2.0.0-rc.14

Highlights 🎉

In this version we upgrade to vuepress@2.0.0-rc.2, which has the following highlights:

  • sub exports of packages, which means you no longer need to manually declare @vuepress/client as deps

  • markdown-it v14 and sass-loader v14 are shipped in this version

  • title support in code block

    ```ts title=".vuepress/config.js"

... (truncated)

Changelog

Sourced from vuepress-plugin-sitemap2's changelog.

2.0.0-rc.16 (2024-01-27)

Features

Bug Fixes

2.0.0-rc.15 (2024-01-26)

Bug Fixes

  • create: fix create flow (2cb4b30)
  • theme: fix VuePress detect (fd2fae0)

2.0.0-rc.14 (2024-01-26)

Features

  • bump to vp2rc2 (05f917d)
  • md-enhance: improve sandpack attr handle (be94b6d)

Bug Fixes

  • append-date: avoid covering the file content (e97cb05)

2.0.0-rc.13 (2024-01-25)

Features

  • shared: remove usePageTitle (9458a40)
  • theme: improve HopeIcon (c120670)

Bug Fixes

  • auto-catalog: fix catalog issue in vue3.4, close #3854 (42898bd)
  • avoid calling composition apis in computed hook (993e1b9)
  • theme: fix inject warning (244f5b1)

Performance Improvements

  • use shadowRef if possible (454eb32)

2.0.0-rc.12 (2024-01-25)

Bug Fixes

... (truncated)

Commits
  • 119360c chore(release): publish v2.0.0-rc.16
  • 935d97d chore: remove check version
  • 462dd31 chore(release): publish v2.0.0-rc.15
  • 1f9cc0b chore(release): publish v2.0.0-rc.14
  • 05f917d feat: bump to vp2rc2
  • e651b83 chore(release): publish v2.0.0-rc.13
  • 7a4ad8f style: sort package.json
  • f8539ea chore(release): publish v2.0.0-rc.12
  • 5c52376 chore: update deps
  • 767a936 chore: fix clean script (#3839)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 9, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/docs/multi-1204cd371a branch from 39b3aab to e3ec860 Compare March 9, 2026 21:47
@loderunner
Copy link
Owner

@dependabot rebase

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 10, 2026

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

…s-plugin-sitemap2

Bumps [esbuild](https://github.com/evanw/esbuild) to 0.25.12 and updates ancestor dependencies [esbuild](https://github.com/evanw/esbuild), [vuepress](https://github.com/vuejs/vuepress/tree/HEAD/packages/vuepress), [vuepress-plugin-seo2](https://github.com/vuepress-theme-hope/vuepress-theme-hope/tree/HEAD/packages/seo2) and [vuepress-plugin-sitemap2](https://github.com/vuepress-theme-hope/vuepress-theme-hope/tree/HEAD/packages/sitemap2). These dependencies need to be updated together.


Updates `esbuild` from 0.16.17 to 0.25.12
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md)
- [Commits](evanw/esbuild@v0.16.17...v0.25.12)

Updates `vuepress` from 2.0.0-beta.66 to 2.0.0-rc.26
- [Release notes](https://github.com/vuejs/vuepress/releases)
- [Changelog](https://github.com/vuejs/vuepress/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vuepress/commits/HEAD/packages/vuepress)

Updates `vuepress-plugin-seo2` from 2.0.0-beta.209 to 2.0.0-rc.16
- [Release notes](https://github.com/vuepress-theme-hope/vuepress-theme-hope/releases)
- [Changelog](https://github.com/vuepress-theme-hope/vuepress-theme-hope/blob/v2.0.0-rc.16/CHANGELOG.md)
- [Commits](https://github.com/vuepress-theme-hope/vuepress-theme-hope/commits/v2.0.0-rc.16/packages/seo2)

Updates `vuepress-plugin-sitemap2` from 2.0.0-beta.234 to 2.0.0-rc.16
- [Release notes](https://github.com/vuepress-theme-hope/vuepress-theme-hope/releases)
- [Changelog](https://github.com/vuepress-theme-hope/vuepress-theme-hope/blob/v2.0.0-rc.16/CHANGELOG.md)
- [Commits](https://github.com/vuepress-theme-hope/vuepress-theme-hope/commits/v2.0.0-rc.16/packages/sitemap2)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.25.12
  dependency-type: indirect
- dependency-name: vuepress
  dependency-version: 2.0.0-rc.26
  dependency-type: direct:production
- dependency-name: vuepress-plugin-seo2
  dependency-version: 2.0.0-rc.16
  dependency-type: direct:production
- dependency-name: vuepress-plugin-sitemap2
  dependency-version: 2.0.0-rc.16
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/docs/multi-1204cd371a branch from e3ec860 to 653ee37 Compare March 10, 2026 12:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant