Skip to content

Update dependency @docusaurus/core to v3#8

Open
dev-mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/docusaurus-core-3.x
Open

Update dependency @docusaurus/core to v3#8
dev-mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/docusaurus-core-3.x

Conversation

@dev-mend-for-github-com
Copy link

@dev-mend-for-github-com dev-mend-for-github-com bot commented Jun 30, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
@docusaurus/core (source) dependencies major ^2.0.0-alpha.64^3.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability
Critical Critical 9.8 CVE-2021-26707
Critical Critical 9.8 CVE-2021-42740
Critical Critical 9.8 CVE-2022-37601
Critical Critical 9.8 CVE-2022-37601
Critical Critical 9.8 CVE-2023-42282
Critical Critical 9.1 CVE-2022-0686
High High 8.8 CVE-2022-0512
High High 8.8 CVE-2024-33883
High High 8.2 CVE-2021-32803
High High 8.2 CVE-2021-32804
High High 8.2 CVE-2021-37701
High High 8.2 CVE-2021-37713
High High 8.1 CVE-2022-1650
High High 7.5 CVE-2021-23424
High High 7.5 CVE-2021-27290
High High 7.5 CVE-2021-27290
High High 7.5 CVE-2021-33502
High High 7.5 CVE-2021-3803
High High 7.5 CVE-2021-3807
High High 7.5 CVE-2021-3807
High High 7.5 CVE-2022-24771
High High 7.5 CVE-2022-24772
High High 7.5 CVE-2022-37603
High High 7.5 CVE-2022-37603
High High 7.5 CVE-2024-4068
High High 7.5 CVE-2024-4068
High High 7.5 CVE-2024-45296
High High 7.5 CVE-2024-45296
High High 7.5 CVE-2024-45296
High High 7.5 CVE-2024-45590
High High 7.3 CVE-2020-7774
High High 7.3 CVE-2020-7788
High High 7.1 CVE-2022-0144
High High 7.1 CVE-2022-46175
Medium Medium 6.8 CVE-2020-28498
Medium Medium 6.5 CVE-2022-0155
Medium Medium 6.5 CVE-2022-0639
Medium Medium 6.5 CVE-2022-0691
Medium Medium 6.1 CVE-2022-0122
Medium Medium 5.3 CVE-2021-23343
Medium Medium 5.3 CVE-2021-23364
Medium Medium 5.3 CVE-2021-23364
Medium Medium 5.3 CVE-2021-23368
Medium Medium 5.3 CVE-2021-23382
Medium Medium 5.3 CVE-2021-27515
Medium Medium 5.3 CVE-2021-29060
Medium Medium 5.3 CVE-2021-32640
Medium Medium 5.3 CVE-2021-3664
Medium Medium 5.3 CVE-2022-24773
Medium Medium 5.3 CVE-2022-25858
Medium Medium 5.3 CVE-2022-25881
Medium Medium 5.3 CVE-2022-25883
Medium Medium 5.3 CVE-2022-33987
Medium Medium 5.3 CVE-2024-4067
Medium Medium 5.3 CVE-2024-4067
Medium Medium 5.3 CVE-2024-42460
Medium Medium 5.3 CVE-2024-42461
Medium Medium 5.3 CVE-2024-47764
Medium Medium 5.3 CVE-2025-30359
Medium Medium 5.0 CVE-2024-43800
Low Low 3.7 CVE-2026-2391
Low Low 2.6 CVE-2022-0536
Low Low 2.5 CVE-2025-54798

Release Notes

facebook/docusaurus (@​docusaurus/core)

v3.8.1

Compare Source

🐛 Bug Fix
  • docusaurus-theme-classic
    • #​11242 fix(theme): fix unability to navigate to category's page when browsing its children items (@​slorber)
  • docusaurus-plugin-css-cascade-layers
  • docusaurus
  • docusaurus-types
🏃‍♀️ Performance
  • docusaurus-plugin-content-blog, docusaurus-plugin-sitemap, docusaurus-theme-classic, docusaurus-types, docusaurus-utils, docusaurus
    • #​11211 perf: avoid duplicated git log calls in loadContent() and postBuild() for untracked Git files (@​slorber)
🔧 Maintenance
Committers: 7

v3.8.0

Compare Source

🚀 New Feature
  • docusaurus-plugin-css-cascade-layers, docusaurus-preset-classic, docusaurus-theme-classic, docusaurus-types, docusaurus
    • #​11142 feat(theme): new CSS cascade layers plugin + built-in v4.useCssCascadeLayers future flag (@​slorber)
  • docusaurus
  • docusaurus-module-type-aliases, docusaurus-plugin-content-blog, docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-search-algolia, docusaurus
  • docusaurus-plugin-content-pages
  • docusaurus-faster, docusaurus
  • docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-translations
  • docusaurus-remark-plugin-npm2yarn
  • docusaurus-theme-classic, docusaurus-theme-common
  • docusaurus-faster, docusaurus-plugin-content-docs, docusaurus-types, docusaurus
  • docusaurus-theme-classic
  • docusaurus-types, docusaurus
  • docusaurus-plugin-sitemap, docusaurus-types, docusaurus
    • #​10850 feat(core): new postBuild({routesBuildMetadata}) API, deprecate head attribute + v4 future flag (@​slorber)
🐛 Bug Fix
  • docusaurus-plugin-content-blog
  • docusaurus-plugin-content-blog
  • docusaurus-plugin-content-docs
  • create-docusaurus
    • #​11157 fix(create-docusaurus): Improve init template README, fix headings and remove $ in bash code blocks (@​arienshibani)
  • docusaurus-theme-common
  • docusaurus-theme-classic
  • docusaurus-theme-classic, docusaurus-theme-translations
    • #​11053 fix(theme): navbar mobile sidebar should allow clicking dropdown parent link (@​slorber)
  • docusaurus-utils
  • docusaurus-theme-translations
  • docusaurus-plugin-ideal-image
  • docusaurus-mdx-loader
  • docusaurus-module-type-aliases
  • docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-translations
  • create-docusaurus, docusaurus-utils
  • docusaurus-mdx-loader, docusaurus-plugin-content-docs
  • docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-plugin-content-pages
  • docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-theme-classic, docusaurus-theme-common
  • docusaurus-theme-classic, docusaurus-theme-common
  • docusaurus
  • docusaurus-plugin-content-docs, docusaurus-theme-classic
  • docusaurus-plugin-svgr, docusaurus-types, docusaurus-utils, docusaurus
  • docusaurus-logger
🏃‍♀️ Performance
  • docusaurus-utils, docusaurus
  • docusaurus
  • docusaurus-bundler, docusaurus-faster, docusaurus
  • docusaurus-utils
  • docusaurus-logger, docusaurus
    • #​11162 perf(core): optimize SSG collected data memory and worker thread communication (@​slorber)
  • docusaurus-bundler, docusaurus
  • docusaurus-theme-classic
  • docusaurus-types, docusaurus
💅 Polish
📝 Documentation
🤖 Dependencies
🔧 Maintenance
  • docusaurus-mdx-loader, docusaurus-utils
  • docusaurus-plugin-content-blog
  • docusaurus-mdx-loader, docusaurus-theme-common, docusaurus-theme-live-codeblock
  • Other
  • docusaurus-faster
  • docusaurus-theme-mermaid
  • docusaurus-mdx-loader
  • docusaurus-theme-classic, docusaurus-theme-common
    • #​11062 refactor(theme): introduce CodeBlockContextProvider + split into smaller components (@​slorber)
    • #​11059 refactor(theme): CodeBlock, centralize metadata parsing + refactor theme component (@​slorber)
  • docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-theme-common
    • #​11058 refactor(theme): refactor CodeBlock parseLines logic + use inline snapshots to ease review (@​slorber)
  • docusaurus-faster, docusaurus
  • docusaurus-plugin-ideal-image
  • docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-mermaid, docusaurus-theme-search-algolia
  • docusaurus-cssnano-preset, docusaurus-mdx-loader, docusaurus-plugin-content-blog, docusaurus-remark-plugin-npm2yarn, eslint-plugin, stylelint-copyright
  • docusaurus-bundler, docusaurus
  • create-docusaurus, docusaurus-plugin-content-docs, docusaurus-utils, docusaurus
  • docusaurus-theme-search-algolia
  • docusaurus-plugin-debug
  • create-docusaurus
Committers: 38

v3.7.0

Compare Source

🚀 New Feature
  • docusaurus-faster, docusaurus
  • docusaurus-plugin-content-blog, docusaurus-theme-classic
    • #​10768 feat(blog): Add author social icons for bluesky, mastodon, threads, twitch, youtube, instagram (@​GingerGeek)
  • create-docusaurus, docusaurus-mdx-loader, docusaurus-module-type-aliases, docusaurus-plugin-client-redirects, docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-plugin-content-pages, docusaurus-plugin-debug, docusaurus-plugin-google-analytics, docusaurus-plugin-google-gtag, docusaurus-plugin-google-tag-manager, docusaurus-plugin-ideal-image, docusaurus-plugin-pwa, docusaurus-plugin-rsdoctor, docusaurus-plugin-sitemap, docusaurus-plugin-svgr, docusaurus-plugin-vercel-analytics, docusaurus-preset-classic, docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-live-codeblock, docusaurus-theme-mermaid, docusaurus-theme-search-algolia, docusaurus-types, docusaurus
  • docusaurus-plugin-content-blog
  • docusaurus-module-type-aliases, docusaurus-plugin-svgr, docusaurus-preset-classic, docusaurus-types, docusaurus-utils, docusaurus
🐛 Bug Fix
  • docusaurus-remark-plugin-npm2yarn
  • docusaurus-theme-classic, docusaurus-theme-common
  • docusaurus-bundler, docusaurus-theme-common
  • docusaurus-theme-common
  • docusaurus-theme-translations
  • docusaurus-plugin-content-docs
  • docusaurus
  • docusaurus-mdx-loader
    • #​10723 fix(mdx-loader): fix md image paths with spaces bug related to transformImage encoding problem (@​slorber)
📝 Documentation
🤖 Dependencies
🔧 Maintenance
  • Other
  • docusaurus-theme-search-algolia
  • docusaurus
    • #​10798 refactor(core): Use Intl native API to get locale direction, remove rtl-detect depend… (@​slorber)
    • #​10747 refactor(core): swizzle wrap should use ReactNode instead of JSX.Element (@​slorber)
  • create-docusaurus, docusaurus-mdx-loader, docusaurus-module-type-aliases, docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-plugin-content-pages, docusaurus-plugin-debug, docusaurus-plugin-ideal-image, docusaurus-plugin-pwa, docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-live-codeblock, docusaurus-theme-mermaid, docusaurus-theme-search-algolia, docusaurus-types, docusaurus
  • docusaurus-theme-common
    • #​10728 refactor(theme-common): change storageUtils useSyncExternalCode getSnapshot workaround (@​slorber)
Committers: 14

v3.6.3

Compare Source

🐛 Bug Fix
Committers: 1

v3.6.2

Compare Source

🐛 Bug Fix
  • `docusaurus-module-type-alias

@dev-mend-for-github-com dev-mend-for-github-com bot added the security fix Security fix generated by Mend label Jun 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants