chore(lapis-docs): bump the minorandpatch group across 1 directory with 7 updates

[dependabot]

Bumps the minorandpatch group with 5 updates in the /lapis-docs directory:

Package	From	To
@astrojs/starlight	0.41.7	0.42.0
daisyui	5.7.17	5.7.37
swagger-ui	5.32.13	5.32.15
swagger-ui-react	5.32.13	5.32.15
@playwright/test	1.62.1	1.63.0

Updates @astrojs/starlight from 0.41.7 to 0.42.0

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.0

Minor Changes

• #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

• #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

  ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

  In the following example, custom styles for the menu button are updated for the new approach:

  - starlight-menu-button button {
  + .sl-menu-button {
    color: var(--sl-color-text);
  }
  
  starlight-menu-button[aria-expanded='true'] button {
  
  
  .sl-menu-button:has(~ :popover-open) {
  color: var(--sl-color-text-accent-high);
  }

See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

#3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

If your configuration included a tagline option, you can safely remove it without any replacement.

#4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

⚠️ BREAKING CHANGE: The following minimum versions are now required:

• astro v7.2.10 or later
• @astrojs/markdown-satteri 0.4.0 or later (if you use it)
• @astrojs/markdown-remark 7.3.0 or later (if you use it)

Please update Starlight and Astro together:

npx @astrojs/upgrade

#4121 2623ae6 Thanks @​delucis! - Refactors Starlight’s mobile menu toggle to work when JavaScript fails or is disabled

⚠️ BREAKING CHANGE: This release drops official support for Chromium-based browsers prior to version 116 (released August 2023), Safari-based browsers prior to version 17.0 (released September 2023), and Firefox prior to version 125 (released April 2024). You can find a list of currently supported browsers and their versions using this browserslist query.

This change also removes the data-mobile-menu-expanded attribute, which was previously added to <body> while the mobile menu is open. If you have custom code that was depending on this attribute, you will need to update it to use a new selector to check if the mobile menu is open.

In the following example, a custom background colour for the site header while the menu is open is updated for the new approach:

... (truncated)

Changelog

Sourced from @​astrojs/starlight's changelog.

0.42.0

Minor Changes

• #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

• #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

  ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

  In the following example, custom styles for the menu button are updated for the new approach:

  - starlight-menu-button button {
  + .sl-menu-button {
    color: var(--sl-color-text);
  }
  
  starlight-menu-button[aria-expanded='true'] button {
  
  
  .sl-menu-button:has(~ :popover-open) {
  color: var(--sl-color-text-accent-high);
  }

See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

#3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

If your configuration included a tagline option, you can safely remove it without any replacement.

#4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

⚠️ BREAKING CHANGE: The following minimum versions are now required:

• astro v7.2.10 or later
• @astrojs/markdown-satteri 0.4.0 or later (if you use it)
• @astrojs/markdown-remark 7.3.0 or later (if you use it)

Please update Starlight and Astro together:

npx @astrojs/upgrade

#4121 2623ae6 Thanks @​delucis! - Refactors Starlight’s mobile menu toggle to work when JavaScript fails or is disabled

⚠️ BREAKING CHANGE: This release drops official support for Chromium-based browsers prior to version 116 (released August 2023), Safari-based browsers prior to version 17.0 (released September 2023), and Firefox prior to version 125 (released April 2024). You can find a list of currently supported browsers and their versions using this browserslist query.

This change also removes the data-mobile-menu-expanded attribute, which was previously added to <body> while the mobile menu is open. If you have custom code that was depending on this attribute, you will need to update it to use a new selector to check if the mobile menu is open.

... (truncated)

Commits

• 88ad3c2 [ci] release (#4172)
• 74cb3f1 Update dependencies (#4173)
• 6135f01 Use Sätteri 0.10 APIs (#4134)
• 2623ae6 Refactor mobile menu to use Popover API (#4121)
• 09af1c6 chore(deps): update magic-string to v1 (#4082)
• 292fb17 [i18nIgnore] Transpile Starlight packages (#3572)
• 0138f22 [ci] release (#4169)
• 32a5e29 Fix hidden heading anchor links (#4167)
• cdfafd8 perf: optimize route and sidebar lookups (#4148)
• dd7fb97 chore: add benchmarks (#4157)
• Additional commits viewable in compare view

Updates astro from 7.2.2 to 7.3.2

Release notes

Sourced from astro's releases.

astro@7.3.2

Patch Changes

• #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

• #17931 c1a6a89 Thanks @​astro-factory! - Fixes the dev toolbar returning a 504 "Outdated Optimize Dep" error when a workspace-linked package imports a dependency that Vite's initial scan did not discover

• #17908 42e9188 Thanks @​astro-factory! - Fixes i18n fallback routing replacing the first substring match instead of the actual locale segment, which mangled paths like /energy/en/about into /esergy/en/about

• #17936 4b92ddc Thanks @​astro-factory! - Fixes sessions breaking in dev mode with the Cloudflare adapter when middleware is present

• Updated dependencies [a548223]:

  • @​astrojs/markdown-satteri@​0.4.1

astro@7.3.1

Patch Changes

• #17899 0389640 Thanks @​ematipico! - Fixes an error that prevented projects using astro:assets from starting or building

astro@7.3.0

Minor Changes

• #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

• #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

  Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

  import type { LocalImageService } from 'astro';
  const service: LocalImageService = {
  // ...
  async transform(inputBuffer, transform, imageConfig, logger) {
  logger.warn(Could not optimize "${transform.src}". Passing it through unchanged.);
  return { data: inputBuffer, format: 'png' };
  },
  };

  Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

• #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

  Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

  import type { CacheProvider } from 'astro';
  const provider: CacheProvider = {

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.2

Patch Changes

• #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

• #17931 c1a6a89 Thanks @​astro-factory! - Fixes the dev toolbar returning a 504 "Outdated Optimize Dep" error when a workspace-linked package imports a dependency that Vite's initial scan did not discover

• #17908 42e9188 Thanks @​astro-factory! - Fixes i18n fallback routing replacing the first substring match instead of the actual locale segment, which mangled paths like /energy/en/about into /esergy/en/about

• #17936 4b92ddc Thanks @​astro-factory! - Fixes sessions breaking in dev mode with the Cloudflare adapter when middleware is present

• Updated dependencies [a548223]:

  • @​astrojs/markdown-satteri@​0.4.1

7.3.1

Patch Changes

• #17899 0389640 Thanks @​ematipico! - Fixes an error that prevented projects using astro:assets from starting or building

7.3.0

Minor Changes

• #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

• #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

  Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

  import type { LocalImageService } from 'astro';
  const service: LocalImageService = {
  // ...
  async transform(inputBuffer, transform, imageConfig, logger) {
  logger.warn(Could not optimize "${transform.src}". Passing it through unchanged.);
  return { data: inputBuffer, format: 'png' };
  },
  };

  Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

• #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

  Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

... (truncated)

Commits

• aa4949e [ci] release (#17915)
• 42e9188 fix(i18n): replace locale segment by index in fallback routing (#17907) (#17908)
• 4b92ddc Guard setFetchHandler call in non-runnable dev entrypoint to fix sessions + m...
• c1a6a89 fix: include .astro files in client optimizeDeps entries to prevent 504 on la...
• a548223 Only treat literal script/style content as raw in MDX rendering (#17896)
• 92f23cc [ci] release (#17900)
• 0389640 fix: dont use internal paths (#17899)
• f800de1 [ci] release (#17881)
• 1e0b7e6 [ci] format
• 4671a5c chore(deps): update react to v19 in 0-css fixture (#17888)
• Additional commits viewable in compare view

Updates daisyui from 5.7.17 to 5.7.37

Release notes

Sourced from daisyui's releases.

v5.7.37

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.37

💚 Thank you for using daisyUI!

v5.7.36

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.36

💚 Thank you for using daisyUI!

v5.7.35

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.35

💚 Thank you for using daisyUI!

v5.7.34

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.34

💚 Thank you for using daisyUI!

v5.7.33

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.33

💚 Thank you for using daisyUI!

... (truncated)

Changelog

Sourced from daisyui's changelog.

5.7.37 (2026-09-11)

Bug Fixes

• OTP disabled style (#4750) (02623f0)

5.7.36 (2026-09-10)

Bug Fixes

• checkbox tick and dash alignment (#4743) (0ca4325)
• loading spinner shrinks inside a flex container (#4744) (f585b8e)

5.7.35 (2026-09-10)

Bug Fixes

• prevent badge shrink inside a flex container (#4745) (da60fca)

5.7.34 (2026-09-10)

Bug Fixes

• FAB wrong font size when using prefix (#4729) (3ce15b4)

5.7.33 (2026-09-10)

Bug Fixes

• otp border width and position (#4730) (fe56cba)

5.7.32 (2026-09-08)

Bug Fixes

• dropdown RTL positions (#4716) (c0fec1b)

5.7.31 (2026-09-08)

Bug Fixes

• keep toast-center horizontally centered in RTL (#4700) (e5ca64e)

5.7.30 (2026-09-08)

Bug Fixes

• list style leaking to nested lists (ad55d08)

5.7.29 (2026-09-07)

Bug Fixes

• OTP monospace font-family variable receiving unwanted prefix when prefix option is used. (c1452df)

5.7.28 (2026-09-03)

Bug Fixes

... (truncated)

Commits

• 1dcc1a8 chore(release): 5.7.37
• 02623f0 fix: OTP disabled style (#4750)
• b1efdc9 chore(release): 5.7.36
• 0ca4325 fix: checkbox tick and dash alignment (#4743)
• f585b8e fix: loading spinner shrinks inside a flex container (#4744)
• 45cc891 chore(release): 5.7.35
• da60fca fix: prevent badge shrink inside a flex container (#4745)
• 7aaf192 chore(release): 5.7.34
• 3ce15b4 fix: FAB wrong font size when using prefix (#4729)
• 7680e8d chore(release): 5.7.33
• Additional commits viewable in compare view

Updates sharp from 0.35.3 to 0.35.4

Release notes

Sourced from sharp's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

• Bound resize dimensions to coordinate limit.

• Bound composite left and top to coordinate limit. #4564 @​metsw24-max

• Round palette bit depth up for png and gif colours. #4569 @​metsw24-max

• Ensure tiff.subifd input option is used. #4572 @​metsw24-max

• Ensure info.pages is correct when limiting input page range. #4578 @​metsw24-max

• Improve support for input Streams finishing before output is requested. #4584 @​Jaybhade

v0.35.4-rc.0

• Upgrade to libvips v8.18.6 for upstream bug fixes.

• Bound resize dimensions to coordinate limit.

• Bound composite left and top to coordinate limit. #4564 @​metsw24-max

• Round palette bit depth up for png and gif colours. #4569 @​metsw24-max

• Ensure tiff.subifd input option is used. #4572 @​metsw24-max

• Ensure info.pages is correct when limiting input page range. #4578 @​metsw24-max

• Improve support for input Streams finishing before output is requested. #4584 @​Jaybhade

Commits

• 7f1a0a2 Release v0.35.4
• f927818 Upgrade to sharp-libvips v1.3.3
• e802092 Prerelease v0.35.4-rc.0
• e13eb2f CI: Fix wasm32 build (#4589)
• a82a0b3 Upgrade to libvips v8.18.6
• 8044fe4 Bound resize dimensions to coordinate limit
• 147f859 Docs: changelog entries for #4578 #4584
• ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
• 7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
• ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
• Additional commits viewable in compare view

Updates swagger-ui from 5.32.13 to 5.32.15

Release notes

Sourced from swagger-ui's releases.

v5.32.15

5.32.15 (2026-09-04)

Bug Fixes

• oas32: include query in default supportedSubmitMethods (#11021) (c26e573)
• use scoped DOMPurify instance to avoid mutating global (#11029) (182fb83)

v5.32.14

5.32.14 (2026-08-18)

Bug Fixes

• a11y: add accessible names for buttons (d5a04d5)
• build: include license and source map in dist (#10979) (7fb32b5), closes #8317
• dark-mode: indicate dark color-scheme for native browser controls (#10844) (7cf5114)

Huge thanks to our contributors who made this release happen: @​moskvin, @​tstarling, and @​yogeshwaran-c

Commits

• eb37d16 chore(release): cut the 5.32.15 release
• 09de8cd chore(deps-dev): bump browserslist from 4.28.1 to 4.28.8 (#11032)
• c0ebd36 chore(deps-dev): bump fast-uri from 3.1.5 to 3.1.7 (#11031)
• 4a28782 chore(deps): bump postcss-selector-parser from 7.1.0 to 7.1.5 (#11030)
• 182fb83 fix: use scoped DOMPurify instance to avoid mutating global (#11029)
• d715d6c refactor(deep-linking): convert layout to TypeScript and fix license issue (#...
• 7757ca4 chore(deps): bump immutable from 4.3.9 to 5.1.9 (#11025)
• c26e573 fix(oas32): include query in default supportedSubmitMethods (#11021)
• 0c10b51 chore(deps-dev): bump cypress from 15.20.0 to 15.20.1 (#11012)
• f341af5 chore(deps): bump nginx from 1.31.3-alpine to 1.31.4-alpine (#11020)
• Additional commits viewable in compare view

Updates swagger-ui-react from 5.32.13 to 5.32.15

Release notes

Sourced from swagger-ui-react's releases.

v5.32.15

5.32.15 (2026-09-04)

Bug Fixes

• oas32: include query in default supportedSubmitMethods (#11021) (c26e573)
• use scoped DOMPurify instance to avoid mutating global (#11029) (182fb83)

v5.32.14

5.32.14 (2026-08-18)

Bug Fixes

• a11y: add accessible names for buttons (d5a04d5)
• build: include license and source map in dist (#10979) (7fb32b5), closes #8317
• dark-mode: indicate dark color-scheme for native browser controls (#10844) (7cf5114)

Huge thanks to our contributors who made this release happen: @​moskvin, @​tstarling, and @​yogeshwaran-c

Commits

• eb37d16 chore(release): cut the 5.32.15 release
• 09de8cd chore(deps-dev): bump browserslist from 4.28.1 to 4.28.8 (#11032)
• c0ebd36 chore(deps-dev): bump fast-uri from 3.1.5 to 3.1.7 (#11031)
• 4a28782 chore(deps): bump postcss-selector-parser from 7.1.0 to 7.1.5 (#11030)
• 182fb83 fix: use scoped DOMPurify instance to avoid mutating global (#11029)
• d715d6c refactor(deep-linking): convert layout to TypeScript and fix license issue (#...
• 7757ca4 chore(deps): bump immutable from 4.3.9 to 5.1.9 (#11025)
• c26e573 fix(oas32): include query in default supportedSubmitMethods (#11021)
• 0c10b51 chore(deps-dev): bump cypress from 15.20.0 to 15.20.1 (#11012)
• f341af5 chore(deps): bump nginx from 1.31.3-alpine to 1.31.4-alpine (#11020)
• Additional commits viewable in compare view

Updates @playwright/test from 1.62.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits

• 1b025d7 chore: mark v1.63.0 (#42569)
• 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
• 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
• e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
• 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
• 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
• 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
• 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
• 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
• bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
lapis	Error		Sep 14, 2026 7:54pm UTC

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.