…n permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

…n permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

…n permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Potential fixes for 3 code scanning alerts

Bumps the bundler group with 3 updates in the /docs directory: [commonmarker](https://github.com/gjtorikian/commonmarker), [faraday](https://github.com/lostisland/faraday) and [rexml](https://github.com/ruby/rexml).


Updates `commonmarker` from 0.23.7 to 0.23.10
- [Release notes](https://github.com/gjtorikian/commonmarker/releases)
- [Changelog](https://github.com/gjtorikian/commonmarker/blob/v0.23.10/CHANGELOG.md)
- [Commits](gjtorikian/commonmarker@v0.23.7...v0.23.10)

Updates `faraday` from 1.10.0 to 1.10.5
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](lostisland/faraday@v1.10.0...v1.10.5)

Updates `rexml` from 3.2.5 to 3.4.2
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.2.5...v3.4.2)

---
updated-dependencies:
- dependency-name: commonmarker
  dependency-version: 0.23.10
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: faraday
  dependency-version: 1.10.5
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: rexml
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>

…60e203198

Bump the bundler group across 1 directory with 3 updates

Bumps the npm_and_yarn group with 1 update in the / directory: [on-headers](https://github.com/jshttp/on-headers).


Updates `on-headers` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/jshttp/on-headers/releases)
- [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md)
- [Commits](jshttp/on-headers@v1.0.2...v1.1.0)

---
updated-dependencies:
- dependency-name: on-headers
  dependency-version: 1.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

…arn-fa0ee328e1

Bump on-headers from 1.0.2 to 1.1.0 in the npm_and_yarn group across 1 directory

Bumps the npm_and_yarn group with 1 update in the / directory: [minimatch](https://github.com/isaacs/minimatch).


Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

…arn-bb3626eb1a

Bump minimatch from 3.1.2 to 3.1.5 in the npm_and_yarn group across 1 directory

Bumps the npm_and_yarn group with 1 update in the / directory: [lodash](https://github.com/lodash/lodash).


Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.18.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

…arn-52571dc7e9

Bump lodash from 4.17.21 to 4.18.1 in the npm_and_yarn group across 1 directory

…OM mutations

Replace per-element WeakMap+rAF deduplication with a shared Set of
pending elements and a single requestAnimationFrame timer. When many
elements are added in one frame (e.g. framework list rendering), only
one rAF callback now runs before paint instead of one per element.

Fixes #343

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

fix: coalesce scan() into a single rAF to avoid paint delay on bulk DOM mutations