Bump axios, @docusaurus/core and @docusaurus/preset-classic in /docs - #29
Bump axios, @docusaurus/core and @docusaurus/preset-classic in /docs#29dependabot[bot] wants to merge 1 commit into
Conversation
Removes [axios](https://github.com/axios/axios). It's no longer used after updating ancestor dependencies [axios](https://github.com/axios/axios), [@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus) and [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic). These dependencies need to be updated together. Removes `axios` Updates `@docusaurus/core` from 2.4.0 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG-v2.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus) Updates `@docusaurus/preset-classic` from 2.4.0 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG-v2.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-preset-classic) --- updated-dependencies: - dependency-name: axios dependency-version: dependency-type: indirect - dependency-name: "@docusaurus/core" dependency-version: 3.10.2 dependency-type: direct:production - dependency-name: "@docusaurus/preset-classic" dependency-version: 3.10.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 2 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 9b47d87. Configure here.
| "@docusaurus/core": "2.4.0", | ||
| "@docusaurus/preset-classic": "2.4.0", | ||
| "@docusaurus/core": "3.10.2", | ||
| "@docusaurus/preset-classic": "3.10.2", |
There was a problem hiding this comment.
Node engine below Docusaurus requirement
Medium Severity
engines.node remains >=18 while @docusaurus/core 3.10.2 and related packages require Node >=20.0. Developers or CI on Node 18 can hit install or CLI failures even though package.json still claims 18 is supported.
Reviewed by Cursor Bugbot for commit 9b47d87. Configure here.
| "@docusaurus/core": "2.4.0", | ||
| "@docusaurus/preset-classic": "2.4.0", | ||
| "@docusaurus/core": "3.10.2", | ||
| "@docusaurus/preset-classic": "3.10.2", |
There was a problem hiding this comment.
npm2yarn plugin major mismatch
Medium Severity
@docusaurus/remark-plugin-npm2yarn stays on ^2.4.0 while core and preset are 3.10.2. The v2 plugin targets the MDX/remark stack used with Docusaurus 2, so npm2yarn tab transforms in docusaurus.config.js may fail or silently break under MDX 3.
Reviewed by Cursor Bugbot for commit 9b47d87. Configure here.
There was a problem hiding this comment.
Risk: medium. Not approving: Cursor Bugbot reported 2 unresolved issues (Node engine mismatch and npm2yarn plugin version mismatch) and its check completed as skipped. Human review is needed for this Docusaurus 2→3 upgrade; assigned baskaryan and zchenyu as reviewers.
Sent by Cursor Approval Agent: Pull Request Approver
Removes axios. It's no longer used after updating ancestor dependencies axios, @docusaurus/core and @docusaurus/preset-classic. These dependencies need to be updated together.
Removes
axiosUpdates
@docusaurus/corefrom 2.4.0 to 3.10.2Release notes
Sourced from @docusaurus/core's releases.
... (truncated)
Changelog
Sourced from @docusaurus/core's changelog.
... (truncated)
Commits
f37f903v3.10.22f5389dchore: cherry-pick commits for v3.10.2 patch release (#12265)d4164aechore: cherry-pick commits for v3.10.1 patch release (#11982)4892e7ffeat(core): addfuture.v4.mdx1CompatDisabledByDefaultflag (#11896)543eaebfix(core): fixurl.resolve()Node.js deprecation warning (#11844)1a52592fix(faster): upgrade Rspack, fix Yarn PnP support (#11817)4a0273ffix(create-docusaurus): fix support for TypeScript 6.0 + fix our CI (#11843)f659aeffix(core): upgrade serve handler min version to for upgrade users to a secure...1451780chore(ci): fixes for the npm trusted publishing workflow (#11823)5dff744chore(ci): add Trusted Publishing release workflow through dispatch action (#...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@docusaurus/coresince your current version.Updates
@docusaurus/preset-classicfrom 2.4.0 to 3.10.2Release notes
Sourced from @docusaurus/preset-classic's releases.
... (truncated)
Changelog
Sourced from @docusaurus/preset-classic's changelog.
... (truncated)
Commits
f37f903v3.10.21451780chore(ci): fixes for the npm trusted publishing workflow (#11823)5dff744chore(ci): add Trusted Publishing release workflow through dispatch action (#...bca9ce7chore: release v3.9.2 (#11491)c3e5db1chore: release v3.9.1 (#11436)c24d7dcchore: release v3.9 (#11419)1c484e1chore: drop support for Node 18, that reached End-of-Life (#11408)f811e2dchore: release 3.8.1 (#11249)b126e64chore: release Docusaurus 3.8 (#11200)abd04a2feat(theme): new CSS cascade layers plugin + built-in `v4.useCssCascadeLayers...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@docusaurus/preset-classicsince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Medium Risk
A major Docusaurus 2→3 upgrade can break docs build, MDX, or plugins until CI passes; scope is limited to the docs package, not core product services.
Overview
Updates the
docssite from Docusaurus 2.4.0 to 3.10.2 by pinning@docusaurus/coreand@docusaurus/preset-classicto3.10.2, with the lockfile refreshed for the new dependency tree.axiosis removed fromdocsdependencies because it is no longer pulled in or used after the Docusaurus upgrade. No application runtime code changes—only documentation tooling and lockfile churn.Reviewed by Cursor Bugbot for commit 9b47d87. Bugbot is set up for automated code reviews on this repo. Configure here.