[dependabot]

Bumps the workspace-npm group with 1 update in the /packages/aid-core directory: typescript.
Bumps the workspace-npm group with 3 updates in the /packages/control-plane directory: @aws-sdk/client-s3, hono and wrangler.
Bumps the workspace-npm group with 1 update in the /packages/installer-engine directory: @types/node.
Bumps the workspace-npm group with 31 updates in the /site/docs directory:

Package	From	To
typescript	4.9.5	7.0.2
@docusaurus/core	0.0.0-4192	3.10.2
@docusaurus/mdx-loader	0.0.0-4192	3.10.2
@docusaurus/plugin-client-redirects	0.0.0-4192	3.10.2
@docusaurus/plugin-content-docs	0.0.0-4192	3.10.2
@docusaurus/plugin-content-pages	0.0.0-4192	3.10.2
@docusaurus/plugin-debug	0.0.0-4192	3.10.2
@docusaurus/plugin-google-analytics	0.0.0-4192	3.10.2
@docusaurus/plugin-google-gtag	0.0.0-4192	3.10.2
@docusaurus/plugin-sitemap	0.0.0-4192	3.10.2
@docusaurus/preset-classic	0.0.0-4192	3.10.2
@docusaurus/theme-classic	0.0.0-4192	3.10.2
@docusaurus/theme-search-algolia	0.0.0-4192	3.10.2
@mdx-js/react	1.6.22	3.1.1
@prismicio/client	6.9.0	7.23.0
@prismicio/react	2.7.3	3.5.1
clsx	1.2.1	2.1.1
fs-extra	9.1.0	11.4.1
modern-normalize	1.1.0	3.0.1
react	16.14.0	19.3.1
@types/react	16.14.56	19.3.0
react-dom	16.14.0	19.3.1
remark-html	13.0.2	16.0.1
remark-parse	8.0.3	11.0.0
sass	1.71.1	1.108.1
sass-loader	10.5.2	17.1.0
semver	7.6.0	7.8.6
@docusaurus/module-type-aliases	0.0.0-4192	3.10.2
@ionic/prettier-config	2.1.2	4.0.0
@tsconfig/docusaurus	1.0.7	2.0.9
@types/react	16.14.56	19.3.0
prettier	2.8.8	3.9.10
typescript	4.9.5	7.0.2
prettier	2.8.8	3.9.10
@docusaurus/theme-classic	0.0.0-4192	3.10.2

Bumps the workspace-npm group with 2 updates in the /site/docs/docusaurus-theme-classic directory: @docusaurus/theme-classic and prettier.

Updates typescript from 5.8.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).

... (truncated)

Commits

• 1e4744d Merge branch 'main' into ts7-release
• a5a219cmicrosoft/typescript-go#4558
• ecfe30d Update status localization
• 5de25b5 Hide executable name in TypeScript status
• d7ce74a Show bundled TypeScript version for packaged servers
• 29be66a Correct TS 7 release version to 7.0.2
• ed2bd1b Merge branch 'main' into ts7-release
• 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
• 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
• d4eaca5microsoft/typescript-go#4549
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates typescript from 5.8.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).

... (truncated)

Commits

• 1e4744d Merge branch 'main' into ts7-release
• a5a219cmicrosoft/typescript-go#4558
• ecfe30d Update status localization
• 5de25b5 Hide executable name in TypeScript status
• d7ce74a Show bundled TypeScript version for packaged servers
• 29be66a Correct TS 7 release version to 7.0.2
• ed2bd1b Merge branch 'main' into ts7-release
• 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
• 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
• d4eaca5microsoft/typescript-go#4549
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates @aws-sdk/client-s3 from 3.1163.0 to 3.1164.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1164.0

3.1164.0(2026-11-06)

Chores

• util-endpoints:
  • update aws partitions.json (616248b7)
  • update aws partitions.json (4acce3eb)
• endpoints: update endpoints model (aa699bbb)
• models: update API models (51f69a86)

Documentation Changes

• lib-sqs: add README (#8405) (c57d0cb5)

New Features

• client-mediaconvert: Smart subtitling uses AWS Elemental Inference to generate captions from your content's audio, in embedded, burn-in, DVB-Sub, IMSC, SMI, SRT, teletext, TTML, or WebVTT outputs. Also fixes HEVC passthrough writing an incomplete codecs string to DASH and HLS manifests. (cfc598fc)
• client-bedrock-agent: Add support for configuring searchability for metadata fields via UpdateKnowledgeBase request for Managed Knowledge Base. Once a field is marked as searchable it can be queried via query text and is factored into Managed Knowledge Base's ranking algorithm. (c980a42b)
• client-connectcases: Amazon Connect Cases adds two Bulk Case Actions operations. BatchCreateRelatedItem adds a Comment-type related item to up to 100 cases per request, BatchUpdateCase updates fields (title, status, customer ID, custom) on up to 100 cases. Same domain, per-case success and failure results returned. (f44ef094)
• client-auto-scaling: Amazon EC2 Auto Scaling now lets you exclude managed resources from describe API responses using the new optional IncludeManagedResources parameter. Set this parameter to false to exclude managed resources from the response. By default, managed resources are included. (5f8c11ac)
• client-ram: Adds support for using managed permission template parameters, discovering shared customer-managed permissions, and managing customer-managed permission deprecation. (87c5566c)
• client-datazone: Adds support for updating OAuth 2.0 connection settings with UpdateConnection. (b324b9a0)
• client-athena: Added support for Athena System Tables which writes Athena usage data to AWS S3 managed tables in Apache Iceberg format. Adds CreateSystemTableConfiguration, UpdateSystemTableConfiguration, DeleteSystemTableConfiguration, GetSystemTableConfiguration, and ListSystemTableStatuses. (2f076d9e)
• client-connect: Rules in Amazon Connect now support ending email contacts associated to a case based on case events. (cf923d5d)
• client-lightsail: Marking fields as sensitive in GetInstanceAccessDetails, CreateKeyPair, DownloadDefaultKeyPair, CreateBucketAccessKey, CreateContainerServiceRegistryLogin, and GetRelationalDatabase responses. (da2578c3)
• client-eks-auth: Added workloadIdentityProviderArn to the AssumeRoleForPodIdentity API response. (2ea374e6)
• client-glue: Adds support for user-defined functions governed by AWS Lake Formation. (bc94b9f6)
• client-ssm: AWS Systems Manager now provides two new APIs - RegisterDefaultHostManagementConfiguration and DeregisterDefaultHostManagementConfiguration - along with a new DefaultHostManagementConfiguration CloudFormation resource type. (99097cdf)

---

For list of updated packages, view updated-packages.md in assets-3.1164.0.zip

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1164.0 (2026-11-06)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

• ea82eac Publish v3.1164.0
• See full diff in compare view

Updates hono from 4.13.14 to 4.13.17

Release notes

Sourced from hono's releases.

v4.13.17

What's Changed

• fix(cookie): match the __Secure- and __Host- prefixes case-insensitively in honojs/hono#5608
• fix(utils/url): do not match a query key across separators in honojs/hono#5607
• fix(etag,pretty-json): cancel the discarded response body in honojs/hono#5606
• fix(client): detect the JSON media type with whitespace before a parameter in honojs/hono#5609
• fix(timing): honor a precision of 0 in setMetric in honojs/hono#5363
• fix(utils/mime,ssg): match media types case-insensitively in honojs/hono#5449
• fix(timing): escape double quotes and backslashes in Server-Timing descriptions in honojs/hono#5478
• fix(etag): preserve commas within quoted entity tags in honojs/hono#5353
• fix(accepts): preserve exact media type quality over subtype wildcards in honojs/hono#5427
• fix(cookie): match the __Secure- and __Host- prefixes case-insensitively in CookieConstraint in honojs/hono#5611
• fix(jsx): add the CSP nonce to all scripts generated by ErrorBoundary in honojs/hono#5430
• fix(ssg): do not reuse created directories across toSSG runs in honojs/hono#5381
• fix(aws-lambda): sanitize non-ASCII header values in API Gateway v2 events in honojs/hono#5483
• fix(jsx): escape element and object attribute values in honojs/hono#5512
• fix(jsx): do not render ref objects as attributes in honojs/hono#5615
• fix(factory): keep independent return types for nine handlers in honojs/hono#5618

Full Changelog: honojs/hono@v4.13.16...v4.13.17

v4.13.16

Security fixes

This release includes fixes for the following security issues:

mount() and app.mount() can forward a path that bypasses middleware scoped inside the mount prefix

Affects: mount() in hono/mount and app.mount(). A dynamic prefix such as /api/:tenant/* was removed by the length of the route pattern. The forwarded path was also re-normalized by the URL parser, so a decoded \ became / and .. collapsed. Both let a crafted request skip middleware scoped inside the mount prefix. Routes such as /assets* and duplicate parameter names now throw. GHSA-4m76-xfj5-7975

RegExpRouter skips wildcard middleware for certain route patterns and for paths with an encoded line terminator

Affects: RegExpRouter, including the default SmartRouter. Wildcard middleware was not applied in three cases: a parameter written as {[^/]+} in the middleware path only, a /prefix* route next to /prefix/* middleware, and a path with an encoded line terminator. RegExpRouter now covers the same routes as the other routers. Custom patterns that can match the empty string, such as {[0-9]*}, throw UnsupportedPathError. Regenerate PreparedRegExpRouter data. GHSA-h7mg-cq63-vhpq

validator('form') skips validation for multipart/form-data requests with extra parameters

Affects: validator('form') in hono/validator. A multipart/form-data request with an extra parameter such as charset was not recognized as a form. The validator then saw an empty object while the handler could read all fields. GHSA-4h7h-rv7c-7m2v

css helper does not escape a closing tag assembled from template parts and values, allowing HTML injection

Affects: css in hono/css. A </style> split between the template and a value, or between two values, was not escaped. Closing tags are now escaped after minification. GHSA-3gg2-335m-rxc6

csrf() does not check requests sent by hyperlink auditing (text/ping)

Affects: csrf() in hono/csrf. A POST sent by Chromium's <a ping> has the content type text/ping and was not checked against Origin and Sec-Fetch-Site. GHSA-46wx-v44x-9hh2

---

Users who rely on path-scoped middleware with mount(), wildcard middleware with the default router, validator('form'), the css helper with untrusted values, or csrf() are strongly encouraged to upgrade to this version.

... (truncated)

Commits

• 61f7c59 4.13.17
• 1534ffa fix(factory): keep independent return types for nine handlers (#5618)
• eb754bd fix(jsx): do not render ref objects as attributes (#5615)
• 6cbe361 fix(jsx): escape element and object attribute values (#5512)
• 8b7f9e9 fix(aws-lambda): sanitize non-ASCII header values in API Gateway v2 events (#...
• 7852e0a fix(ssg): do not reuse created directories across toSSG runs (#5381)
• bcfd02b fix(jsx): add the CSP nonce to all scripts generated by ErrorBoundary (#5430)
• 456fe46 fix(cookie): match the __Secure- and __Host- prefixes case-insensitively in C...
• 98b35af fix(accepts): preserve exact media type quality over subtype wildcards (#5427)
• b3f1272 fix(etag): preserve commas within quoted entity tags (#5353)
• Additional commits viewable in compare view

Updates wrangler from 4.157.0 to 4.159.0

Release notes

Sourced from wrangler's releases.

wrangler@4.159.0

Minor Changes

• #16737 a589d23 Thanks @​jamesopstad! - Store experimental cf-wrangler dev state in .cloudflare/state

  Persist local resource data in .cloudflare/state relative to the configuration file. Direct Wrangler usage continues to default to .wrangler/state.

• #16663 fe69809 Thanks @​FlorentCollin! - Add --compatibility flag to wrangler d1 export

  You can now export a remote D1 database that contains virtual tables, such as FTS5 or R*Tree tables:

  wrangler d1 export my-database --remote --output dump.sql --compatibility sqlite3_cli_only

  It accepts d1 (the default) and sqlite3_cli_only. With sqlite3_cli_only, the dump matches the output of the sqlite3 .dump command, including virtual tables. D1 cannot import this dump. sqlite3_cli_only is only supported for remote exports.

• #16599 dee7a1d Thanks @​petebacondarwin! - Support CLOUDFLARE_AUTH_PROFILE for shared authentication profile selection

  Cloudflare tooling can pass a selected profile to child processes through CLOUDFLARE_AUTH_PROFILE. Explicit profile arguments take precedence over the variable, followed by directory bindings and the default profile. The cf-wrangler development delegate also initializes cf authentication so it reads the selected cf credentials.

  Experimental cf development delegates inherit the selected profile without additional command-line flags. Vite refreshes remote authentication when the resolved profile changes, and cf-wrangler keeps its authentication scoped to the delegate invocation.

• #15615 c64fdfb Thanks @​svetch! - Support jurisdiction when automatically provisioning D1 databases

  Set jurisdiction on a D1 binding without a database_id to create the database in that jurisdiction during deployment. For example, {"d1_databases":[{"binding":"DB","jurisdiction":"eu"}]} creates an EU-jurisdiction database.

• #16066 4112820 Thanks @​petebacondarwin! - Add an explicit opt-out for main module imports in generated Worker types

  Use wrangler types --include-main-module=false when the Worker entrypoint is generated build output that should not be type-checked as application source. The corresponding includeMainModule option is available in the experimental type-generation API. The option is preserved by --check and automatic regeneration. Omitting the import opts out of module-derived ctx.exports typing while preserving runtime types, environment bindings, and Durable Object namespace declarations.

  New SvelteKit Workers projects created with C3 use this option so their generated declarations remain stable before and after a build. Imports needed to type Durable Object, service, and Workflow bindings are unaffected.

Patch Changes

• #16648 56459a5 Thanks @​dario-piotrowicz! - Update bundled third-party dependencies with known security fixes

  Local development and Workers Vitest tests now include security fixes for their bundled dependencies. Local browser rendering also includes security fixes for browser downloads, archive extraction, and proxy support.

  Miniflare and Wrangler now require Node.js 22.12.0 or later, matching the supported runtime range of the new browser installer.

• #16746 abf924e Thanks @​dependabot! - Update DEFAULT_COMPAT_DATE to 2026-11-06

  Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

• #16792 de10016 Thanks @​dependabot! - Update DEFAULT_COMPAT_DATE to 2026-11-09

  Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

• #16746 abf924e Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

... (truncated)

Commits

• bf3ec7b Version Packages (#16729)
• dc4e093 [wrangler] Only mention a verification email when the created address is unve...
• 56459a5 Update bundled third-party dependencies with known security fixes (#16648)
• 3ef2afd [wrangler] Delegate Container cleanup to Miniflare (#16413)
• 6f29f97 Stop persisting account selections made by cf (#16683)
• fe69809 [wrangler] Add --compatibility flag to d1 export (#16663)
• 2fb01e7 [deploy-helpers] Warn when dispatch namespace deploys ignore cron triggers (#...
• c64fdfb [wrangler] Support D1 jurisdiction in automatic provisioning (#15615)
• a589d23 Store experimental cf-wrangler dev state in .cloudflare/state (#16737)
• 9b6582c Stop getPlatformProxy() asset misses from recursively calling its own liste...
• Additional commits viewable in compare view

Updates @types/node from 24.10.0 to 26.6.6

Commits

• See full diff in compare view

Updates typescript from 4.9.5 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).

... (truncated)

Commits

• 1e4744d Merge branch 'main' into ts7-release
• a5a219cmicrosoft/typescript-go#4558
• ecfe30d Update status localization
• 5de25b5 Hide executable name in TypeScript status
• d7ce74a Show bundled TypeScript version for packaged servers
• 29be66a Correct TS 7 release version to 7.0.2
• ed2bd1b Merge branch 'main' into ts7-release
• 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
• 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
• d4eaca5microsoft/typescript-go#4549
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates @docusaurus/core from 0.0.0-4192 to 3.10.2

Release notes

Sourced from @​docusaurus/core's releases.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

• [fix(bundler): do not import @swc/html, fix StackBlitz playground #12055](facebook/docusaurus#12055)
• [fix(core): use locale url in site config #12054](facebook/docusaurus#12054)
• [fix(theme-classic): remove redundant sidebar label titles #11966](facebook/docusaurus#11966)
• [fix(mdx-loader): avoid transforming dotted directory links into asset… #11944](facebook/docusaurus#11944)
• [fix(dev-server): for HTTPS, support non-RSA TLS certs #12065](facebook/docusaurus#12065)
• [fix(utils): fix extractLeadingEmoji() edge cases #12100](facebook/docusaurus#12100)
• [fix(gtag.js, faster): Fix StackBlitz, vendor @types/gtag.js, upgrade @swc/html #12080](facebook/docusaurus#12080)
• [fix(create-docusaurus): init template README should use npm commands by default #12138](facebook/docusaurus#12138)
• [fix(cli): docusaurus serve should pass --host to server.listen() #12127](facebook/docusaurus#12127)
• [fix(core): bump detect-port to v2.1, fix pnpm trustPolicy downgrade issue #12012](facebook/docusaurus#12012)
• [fix(i18n): complete Spanish translations for theme-common and theme-l… #12180](facebook/docusaurus#12180)
• [chore(deps): migrate to @11ty/gray-matter #12181](facebook/docusaurus#12181)
• [fix(core): fix BaseUrlIssueBanner little security issue #12260](facebook/docusaurus#12260)
• [fix(core): accept boolean attributes in headTags config validation #12238](facebook/docusaurus#12238)
• [fix(sitemap): don't drop lastmod for an epoch (0) timestamp #12212](facebook/docusaurus#12212)
• [fix(utils): preserve author names containing commas in git log parsing #12069](facebook/docusaurus#12069)

3.10.1 (2026-04-30)

🐛 Bug Fix

• docusaurus-bundler
  • #11981 fix(bundler): fix v3 webpackbar bug due to webpack breaking change (@​slorber)

🔧 Maintenance

• docusaurus
  • #11982 chore: cherry-pick commits for v3.10.1 patch release (@​slorber)

Committers: 1

• Sébastien Lorber (@​slorber)

3.10.0 (2026-04-07)

🚀 New Feature

• docusaurus-types, docusaurus
  • #11896 feat(core): add future.v4.mdx1CompatDisabledByDefault flag (@​slorber)
  • #11797 feat(core): promote siteConfig.storage to stable + add future.v4.siteStorageNamespacing flag [Claude] (@​slorber)
  • #11571 feat(core): support custom html elements in head tags (@​lebalz)
• create-docusaurus
  • #11897 feat(create-docusaurus): update init template to .mdx extension and strict MDX syntax (@​slorber)
  • #11696 feat(create-docusaurus): Newly initialized TS sites should use "strict: true" (@​slorber)
  • #11611 feat(create-docusaurus): enable creation in current directory (@​Mcheung7272)
• Other

... (truncated)

Changelog

Sourced from @​docusaurus/core's changelog.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

• [fix(bundler): do not import @swc/html, fix StackBlitz playground #12055](facebook/docusaurus#12055)
• [fix(core): use locale url in site config #12054](facebook/docusaurus#12054)
• [fix(theme-classic): remove redundant sidebar label titles #11966](facebook/docusaurus#11966)
• [fix(mdx-loader): avoid transforming dotted directory links into asset… #11944](facebook/docusaurus#11944)
• [fix(dev-server): for HTTPS, support non-RSA TLS certs #12065](facebook/docusaurus#12065)
• [fix(utils): fix extractLeadingEmoji() edge cases #12100](facebook/docusaurus#12100)
• [fix(gtag.js, faster): Fix StackBlitz, vendor @types/gtag.js, upgrade @swc/html #12080](facebook/docusaurus#12080)
• [fix(create-docusaurus): init template README should use npm commands by default #12138](facebook/docusaurus#12138)
• [fix(cli): docusaurus serve should pass --host to server.listen() #12127](facebook/docusaurus#12127)
• [fix(core): bump detect-port to v2.1, fix pnpm trustPolicy downgrade issue #12012](facebook/docusaurus#12012)
• [fix(i18n): complete Spanish translations for theme-common and theme-l… #12180](facebook/docusaurus#12180)
• [chore(deps): migrate to @11ty/gray-matter #12181](facebook/docusaurus#12181)
• [fix(core): fix BaseUrlIssueBanner little security issue #12260](facebook/docusaurus#12260)
• [fix(core): accept boolean attributes in headTags config validation #12238](facebook/docusaurus#12238)
• [fix(sitemap): don't drop lastmod for an epoch (0) timestamp #12212](facebook/docusaurus#12212)
• [fix(utils): preserve author names containing commas in git log parsing #12069](facebook/docusaurus#12069)

3.10.1 (2026-04-30)

🐛 Bug Fix

• docusaurus-bundler
  • #11981 fix(bundler): fix v3 webpackbar bug due to webpack breaking change (@​slorber)

🔧 Maintenance

• docusaurus
  • #11982 chore: cherry-pick commits for v3.10.1 patch release (@​slorber)

Committers: 1

• Sébastien Lorber (@​slorber)

3.10.0 (2026-04-07)

🚀 New Feature

• docusaurus-types, docusaurus
  • #11896 feat(core): add future.v4.mdx1CompatDisabledByDefault flag (@​slorber)
  • #11797 feat(core): promote siteConfig.storage to stable + add future.v4.siteStorageNamespacing flag [Claude] (@​slorber)
  • #11571 feat(core): support custom html elements in head tags (@​lebalz)
• create-docusaurus
  • #11897 feat(create-docusaurus): update init template to .mdx extension and strict MDX syntax (@​slorber)
  • #11696 feat(create-docusaurus): Newly initialized TS sites should use "strict: true" (@​slorber)
  • #11611 feat(create-docusaurus): enable creation in current directory (@​Mcheung7272)
• Other

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​docusaurus/core since your current version.

Updates @docusaurus/mdx-loader from 0.0.0-4192 to 3.10.2

Release notes

Sourced from @​docusaurus/mdx-loader's releases.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

• [fix(bundler): do not import @swc/html, fix StackBlitz playground #12055](facebook/docusaurus#12055)
• [fix(core): use locale url in site config