chore(deps): update dependency @docusaurus/core to v3.8.1 by mend-for-github-com[bot] · Pull Request #3 · amaybaum-prod/wasp

mend-for-github-com · 2025-10-26T07:56:14Z

This PR contains the following updates:

Package	Type	Update	Change
@docusaurus/core (source)	dependencies	minor	`3.7.0` → `3.8.1`

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	Vulnerability
High	8.6	CVE-2025-12816
High	7.5	CVE-2025-66031
Medium	6.5	CVE-2025-30360
Medium	6.5	CVE-2026-2950
Medium	5.3	CVE-2025-30359
Medium	5.3	CVE-2025-66030
Low	3.7	CVE-2025-15284
Low	3.7	CVE-2025-68157
Low	3.7	CVE-2025-68458
Low	3.7	CVE-2026-2391
Low	3.4	CVE-2025-7339

Release Notes

facebook/docusaurus (@docusaurus/core)

`v3.8.1`

Compare Source

🐛 Bug Fix

docusaurus-theme-classic
- #11242 fix(theme): fix unability to navigate to category's page when browsing its children items (@slorber)
docusaurus-plugin-css-cascade-layers
- #11241 fix(css-cascade-layers): fix windows css cascade layers bug (@slorber)
docusaurus
- #11222 fix(bundler): fix docusaurus start using concatenateModules: true (@slorber)
- #11217 fix: include Arc to supported Chromium Browsers (@wellwelwel)
- #11205 fix(core): fix docusaurus start error for macOS users with no Chromium-based browser (@slorber)
docusaurus-types
- #11221 fix(types): fix future flags public types (@slorber)

🏃‍♀️ Performance

docusaurus-plugin-content-blog, docusaurus-plugin-sitemap, docusaurus-theme-classic, docusaurus-types, docusaurus-utils, docusaurus
- #11211 perf: avoid duplicated git log calls in loadContent() and postBuild() for untracked Git files (@slorber)

🔧 Maintenance

docusaurus-faster
- #11248 chore(faster): upgrade Rspack (@slorber)
docusaurus-plugin-content-docs
- #11230 refactor(docs): extract loadVersion() without changing the behavior (@slorber)
Other
- #11212 chore: upgrade to Node 22 by default (@slorber)

Committers: 7

Ben McCann (@benmccann)
Dave Meyer (@dave-meyer)
Léo Vincent (@leovct)
Noritaka Kobayashi (@noritaka1166)
Phil Parsons (@p-m-p)
Sébastien Lorber (@slorber)
Weslley Araújo (@wellwelwel)

`v3.8.0`

Compare Source

🚀 New Feature

docusaurus-plugin-css-cascade-layers, docusaurus-preset-classic, docusaurus-theme-classic, docusaurus-types, docusaurus
- #11142 feat(theme): new CSS cascade layers plugin + built-in v4.useCssCascadeLayers future flag (@slorber)
docusaurus
- #11156 feat(core): add internal flag to skip bundling (@slorber)
- #11067 feat(core): enable Rspack parallelCodeSplitting (@slorber)
docusaurus-module-type-aliases, docusaurus-plugin-content-blog, docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-search-algolia, docusaurus
- #11090 feat(theme): make it possible to provide your own page title formatter (@slorber)
docusaurus-plugin-content-pages
- #11088 feat(pages): Support frontMatter.slug like docs and blog plugins (@slorber)
docusaurus-faster, docusaurus
- #11006 feat(core): Add bundler tracing/profiling (@slorber)
docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-translations
- #10987 feat(theme): Allow resetting colorMode to System/OS value (@slorber)
docusaurus-remark-plugin-npm2yarn
- #10953 feat(plugin-npm2yarn): Add Bun to default tabs conversions (@jakeboone02)
docusaurus-theme-classic, docusaurus-theme-common
- #10945 feat(theme): add theme layout stable CSS classes (@slorber)
- #10846 feat(theme): code block showLineNumbers=start metastring (@slorber)
docusaurus-faster, docusaurus-plugin-content-docs, docusaurus-types, docusaurus
- #10931 feat(core): Docusaurus Faster - Rspack Persistent Cache (@slorber)
docusaurus-theme-classic
- #10852 feat(theme): add versions attribute to docsVersionDropdown navbar item (@hrumhurum)
docusaurus-types, docusaurus
- #10826 feat(core): Docusaurus Faster - SSG worker threads (@slorber)
docusaurus-plugin-sitemap, docusaurus-types, docusaurus
- #10850 feat(core): new postBuild({routesBuildMetadata}) API, deprecate head attribute + v4 future flag (@slorber)

🐛 Bug Fix

docusaurus-plugin-content-blog
- #11138 refactor(content-blog): replace reading-time with Intl.Segmenter API (@shreedharbhat98)
docusaurus-plugin-content-blog
- #11138 refactor(content-blog): replace reading-time with Intl.Segmenter API (@shreedharbhat98)
- #11068 fix(blog): fix blog Atom feed item url / XSL bug (@slorber)
docusaurus-plugin-content-docs
- #11179 fix(mdx-loader): remove opt-in for mdx dependency file (@slorber)
- #10875 fix(docs): versioning CLI should copy localized translation file current.json to version-<v>.json (@jkboxomine)
create-docusaurus
- #11157 fix(create-docusaurus): Improve init template README, fix headings and remove $ in bash code blocks (@arienshibani)
docusaurus-theme-common
- #11153 fix(theme): restore former code block theme-common internal APIs (@slorber)
- #11046 fix(theme): Fix code block magic comments with CRLF line breaks bug (@coder-xiaomo)
- #10989 fix(theme): mobile drawer history blocker should be rendered conditionally (workaround) (@slorber)
- #10954 fix(theme): fix useColorMode().colorMode leading to React hydration mismatches (@slorber)
docusaurus-theme-classic
- #11085 fix(theme): add missing rel="tag" attribute for docs/blog tags (@slorber)
- #10999 fix(theme): CodeBlock should accept title of ReactNode type (@lebalz)
- #10705 fix(theme): only render secondaryMenu if it should be shown (@hidde)
- #10898 fix(theme): a11y fix on mobile DropdownNavbarItem (@mxschmitt)
- #10909 fix(theme): apply docs sidebar_class_name in DocCard + better dogfooding (@slorber)
- #10849 fix(theme): fix <DocCard> height inconsistency (@hichemfantar)
- #10866 fix(theme): Hide code block buttons before React hydration (@kennethormandy)
docusaurus-theme-classic, docusaurus-theme-translations
- #11053 fix(theme): navbar mobile sidebar should allow clicking dropdown parent link (@slorber)
docusaurus-utils
- #11027 fix(cli): fix CLI write-translation bug (@slorber)
docusaurus-theme-translations
- #11030 fix(theme-translation): add missing Japanese translation for System Mode (@tats-u)
- #10893 fix(theme-translations): Turkish exist language translate completed. (@ramazansancar)
- #10884 fix(theme-translations): Add missing Polish (pl) theme translations (@mariuszkrzaczkowski)
docusaurus-plugin-ideal-image
- #11026 fix(ideal-image): fix waypoint initial scroll bug (@slorber)
- #11014 fix(ideal-image): Internalize react-waypoint dependency, fix React 19 compatibility (@slorber)
- #10910 fix(ideal-image): Add issuer to ideal-image Webpack loader (@slorber)
docusaurus-mdx-loader
- #11004 fix(mdx-loader): refactor and fix heading to toc html value serialization (@slorber)
docusaurus-module-type-aliases
- #10998 fix(module-type-aliases): pin react-helmet-async to @slorber/react-helmet-async@1.3.0 (@cylewaitforit)
docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-translations
- #10987 feat(theme): Allow resetting colorMode to System/OS value (@slorber)
create-docusaurus, docusaurus-utils
- #10958 fix(create-docusaurus): fix CLI and remove shelljs escapeShellArg util (@slorber)
docusaurus-mdx-loader, docusaurus-plugin-content-docs
- #10934 fix(docs): fix mdx loader cache invalidation bug on versions changes (@slorber)
docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-plugin-content-pages
- #10929 fix(plugins): add missing validateOptions types (@slorber)
docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-theme-classic, docusaurus-theme-common
- #10888 fix(seo): docs breadcrumb structured data should use JSON-LD and filter unliked categories (@johnnyreilly)
docusaurus-theme-classic, docusaurus-theme-common
- #10886 fix(theme): collapse doc sidebar category on label click if active (@slorber)
docusaurus
- #10915 fix(core): use os.availableParallelism() for SSG worker threads count (@slorber)
docusaurus-plugin-content-docs, docusaurus-theme-classic
- #10847 fix(theme): Fix <DocCardList> usage on docs at root of a sidebar (@slorber)
docusaurus-plugin-svgr, docusaurus-types, docusaurus-utils, docusaurus
- #10820 fix(core): restore core svg file-loader (@slorber)
docusaurus-logger
- #10818 fix: perflogger mark detail bug (@slorber)

🏃‍♀️ Performance

docusaurus-utils, docusaurus
- #11178 perf(core): disable Rspack parallelCodeSplitting temporarily (@slorber)
docusaurus
- #11177 perf(core): fix bad value for mergeDuplicateChunks (typo) (@slorber)
- #11170 perf(core): add default for DOCUSAURUS_SSG_WORKER_THREAD_RECYCLER_MAX_MEMORY (@slorber)
- #11166 feat(core): expose opt-in env variable for SSG thread recycling (@slorber)
- #11072 perf(core): remove bundler optimization.removeAvailableModules (@slorber)
- #11067 feat(core): enable Rspack parallelCodeSplitting (@slorber)
- #11037 refactor(core): remove clean-webpack-plugin (@slorber)
- #11007 perf(core): Optimize docusaurus start/serve, fix openBrowser() perf issue on macOS (@slorber)
docusaurus-bundler, docusaurus-faster, docusaurus
- #11176 perf(bundler): fine-tuning of Webpack/Rspack optimizations (@slorber)
docusaurus-utils
- #11163 perf(utils): implement git command queue (@slorber)
docusaurus-logger, docusaurus
- #11162 perf(core): optimize SSG collected data memory and worker thread communication (@slorber)
docusaurus-bundler, docusaurus
- #10956 refactor: remove react-dev-utils (CRA) dependency, internalize code (@slorber)
docusaurus-theme-classic
- #10885 perf(theme): use SVG sprite for IconExternalLink (@slorber)
docusaurus-types, docusaurus
- #10826 feat(core): Docusaurus Faster - SSG worker threads (@slorber)

💅 Polish

docusaurus-theme-live-codeblock
- #11120 fix(theme): improve color contrast of live code block header (@JackHowa)
docusaurus-theme-translations
- #10825 fix(theme-translations): Add missing Polish (pl) theme translations (@mariuszkrzaczkowski)
- #10816 chore(theme-translations): add missing zh theme translations (@MisterFISHUP)

📝 Documentation

#11181 docs: adjust the Docusaurus release process documentation to our new simpler process (@slorber)
#11180 docs(ideal-image): Add warning for pnpm 10+ and sharp install script (@slorber)
#11137 docs(deploy): remove layer0 from deployment docs (@PaiJi)
#10822 docs(website): Comparison with Rspress (@DevJoaoLopes)

🤖 Dependencies

#11185 chore(deps): bump actions/dependency-review-action from 4.7.0 to 4.7.1 (@dependabot[bot])
#11182 chore(deps): bump lockfile-lint-api from 5.9.1 to 5.9.2 (@dependabot[bot])
#11174 chore(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.0 (@dependabot[bot])
#11135 chore(deps): bump http-proxy-middleware from 2.0.7 to 2.0.9 (@dependabot[bot])
#11103 chore(deps): bump marocchino/sticky-pull-request-comment from 2.9.1 to 2.9.2 (@dependabot[bot])
#11102 chore(deps): bump actions/setup-node from 4.3.0 to 4.4.0 (@dependabot[bot])
#11070 chore(deps): bump estree-util-value-to-estree from 3.1.2 to 3.3.3 (@dependabot[bot])
#11069 chore(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 (@dependabot[bot])
#11002 chore(deps): bump actions/setup-node from 4.2.0 to 4.3.0 (@dependabot[bot])
#10990 chore(deps): bump @babel/runtime-corejs3 from 7.25.9 to 7.26.10 (@dependabot[bot])
#10970 chore(deps): bump axios from 1.7.7 to 1.8.2 (@dependabot[bot])
#10978 chore(deps): bump prismjs from 1.29.0 to 1.30.0 (@dependabot[bot])
#10957 chore(deps): bump http-proxy-middleware from 2.0.6 to 2.0.7 (@dependabot[bot])
#10937 chore(deps): bump dompurify from 3.1.6 to 3.2.4 (@dependabot[bot])
#10936 chore(deps): bump preactjs/compressed-size-action from 2.7.0 to 2.8.0 (@dependabot[bot])
#10873 chore(deps): bump actions/setup-node from 4.1.0 to 4.2.0 (@dependabot[bot])
#10853 chore(deps): bump marocchino/sticky-pull-request-comment from 2.9.0 to 2.9.1 (@dependabot[bot])
#10851 chore(deps): bump katex from 0.16.11 to 0.16.21 (@dependabot[bot])

🔧 Maintenance

docusaurus-mdx-loader, docusaurus-utils
- #11168 chore: add Node 24 to CI + fix deprecation warnings (@slorber)
docusaurus-plugin-content-blog
- #11116 test(blog): Add unit tests for calculating blog posts reading time (@shreedharbhat98)
docusaurus-mdx-loader, docusaurus-theme-common, docusaurus-theme-live-codeblock
- #11077 refactor(live-codeblock): refactor live code block theme components (@slorber)
Other
- #11075 fix(c): fix yarn lint:spelling:fix script (@slorber)
docusaurus-faster
- #11073 chore: upgrade Rspack 1.3.3 (@slorber)
- #10870 chore(deps): bump @rspack/core in Faster from 1.2.0-alpha.0 to 1.2.2 (@tats-u)
docusaurus-theme-mermaid
- #11066 chore: upgrade mermaid, fix diagram labels bug (@slorber)
docusaurus-mdx-loader
- #11065 chore: upgrade image-size deps to v2 (@slorber)
docusaurus-theme-classic, docusaurus-theme-common
- #11062 refactor(theme): introduce CodeBlockContextProvider + split into smaller components (@slorber)
- #11059 refactor(theme): CodeBlock, centralize metadata parsing + refactor theme component (@slorber)
docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-theme-common
- #11058 refactor(theme): refactor CodeBlock parseLines logic + use inline snapshots to ease review (@slorber)
docusaurus-faster, docusaurus
- #11039 chore: use rspack 1.3.0 (@slorber)
docusaurus-plugin-ideal-image
- #11010 refactor(ideal-image-plugin): internalize legacy component code (@slorber)
docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-mermaid, docusaurus-theme-search-algolia
- #10969 chore: add eslint-plugin-react-compiler (@slorber)
docusaurus-cssnano-preset, docusaurus-mdx-loader, docusaurus-plugin-content-blog, docusaurus-remark-plugin-npm2yarn, eslint-plugin, stylelint-copyright
- #10966 chore: upgrade monorepo to TS 5.8 (@slorber)
docusaurus-bundler, docusaurus
- #10956 refactor: remove react-dev-utils (CRA) dependency, internalize code (@slorber)
create-docusaurus, docusaurus-plugin-content-docs, docusaurus-utils, docusaurus
- #10358 refactor: replace unmaintained shelljs dependency by execa (@OzakIOne)
docusaurus-theme-search-algolia
- #10941 chore(algolia): bump docsearch dependency to v3.9 (@slorber)
docusaurus-plugin-debug
- #10903 chore(plugin-debug): upgrade react-json-view-lite to v2.3.0 for react 19 (@reece-white)
- #10819 chore(plugin-debug): upgrade react-json-view-lite to v2, prepare for React 19 (@slorber)
create-docusaurus
- #10871 refactor(create-docusaurus): add future.v4 flag to init templates (@slorber)

Committers: 38

Arien Shibani (@arienshibani)
Balthasar Hofer (@lebalz)
Ben McCann (@benmccann)
Daniel Kuschny (@Danielku15)
David King Roderos (@dkroderos)
FISH UP (@MisterFISHUP)
Hichem Fantar (@hichemfantar)
Hidde de Vries (@hidde)
Jack Howard (@JackHowa)
Jake Boone (@jakeboone02)
JiPai (@PaiJi)
John Reilly (@johnnyreilly)
Joshua Chen (@Josh-Cena)
João Victor Lopes (@DevJoaoLopes)
Justin D Mathew (@JDMathew)
Kenneth Ormandy (@kennethormandy)
Mariusz Krzaczkowski (@mariuszkrzaczkowski)
Massoud Maboudi (@massoudmaboudi)
Max Schmitt (@mxschmitt)
Milica (@mmaksimovic)
Oleksiy Gapotchenko (@hrumhurum)
Ramazan Sancar (@ramazansancar)
Shreedhar Bhat (@shreedharbhat98)
Stephen Glass (@stephenglass)
Sébastien Lorber (@slorber)
Taras (@taraspos)
Tatsunori Uchino (@tats-u)
Waldir Pimenta (@waldyrious)
Yangshun Tay (@yangshun)
Yoshiaki Yoshida (@kakakakakku)
@cylewaitforit
@jkboxomine
@reece-white
kilavvy (@kilavvy)
ozaki (@OzakIOne)
pedenys (@pedenys)
マルコメ (@Marukome0743)
程序员小墨 (@coder-xiaomo)

If you want to rebase/retry this PR, check this box

mend-for-github-com bot added the security fix Security fix generated by Mend label Oct 26, 2025

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch from 5abee7b to d49a50f Compare October 26, 2025 08:05

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 2 times, most recently from 2bb98fc to 8fd888c Compare November 22, 2025 01:23

mend-for-github-com bot changed the title ~~chore(deps): update dependency @docusaurus/core to v3.8.0~~ chore(deps): update dependency @docusaurus/core to v3.8.1 Nov 22, 2025

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 6 times, most recently from 7ba8938 to b718216 Compare December 2, 2025 08:02

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 5 times, most recently from c3b944e to 35c8b40 Compare December 10, 2025 09:44

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 4 times, most recently from 414ec50 to 3c899b2 Compare December 17, 2025 14:24

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch from 3c899b2 to 0cfd2d6 Compare December 19, 2025 17:20

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 3 times, most recently from 0f502b8 to fc386b3 Compare December 30, 2025 11:18

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 3 times, most recently from 067dae2 to a018ae4 Compare January 12, 2026 09:10

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 3 times, most recently from 7aded93 to f421843 Compare January 18, 2026 22:34

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 3 times, most recently from 6f325f8 to d23f395 Compare February 11, 2026 03:13

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 4 times, most recently from 949b41b to d0e15d3 Compare February 21, 2026 10:30

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 3 times, most recently from 13a5d77 to 3e5f095 Compare March 1, 2026 09:22

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 4 times, most recently from ac1b119 to aef8130 Compare March 6, 2026 11:31

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 5 times, most recently from aef0c0b to 9f5944a Compare March 18, 2026 10:51

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 5 times, most recently from c1f97f3 to 29f7c55 Compare March 26, 2026 01:20

mend-for-github-com bot force-pushed the whitesource-remediate/docusaurus-core-3.x-lockfile branch 5 times, most recently from a7d9795 to 0a179b0 Compare March 31, 2026 10:04

chore(deps): update dependency @docusaurus/core to v3.8.1

52f74e2

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency @docusaurus/core to v3.8.1#3

chore(deps): update dependency @docusaurus/core to v3.8.1#3
mend-for-github-com[bot] wants to merge 1 commit intomainfrom
whitesource-remediate/docusaurus-core-3.x-lockfile

mend-for-github-com bot commented Oct 26, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

mend-for-github-com bot commented Oct 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v3.8.1

🐛 Bug Fix

🏃‍♀️ Performance

🔧 Maintenance

Committers: 7

v3.8.0

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

💅 Polish

📝 Documentation

🤖 Dependencies

🔧 Maintenance

Committers: 38

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

mend-for-github-com bot commented Oct 26, 2025 •

edited

Loading

`v3.8.1`

`v3.8.0`