[PR #1880] [MERGED] build(deps): bump socratiq markdown-it + dompurify, rebuild bundle #30980

Closed
opened 2026-06-21 20:36:49 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/harvard-edge/cs249r_book/pull/1880
Author: @profvjreddi
Created: 6/16/2026
Status: Merged
Merged: 6/16/2026
Merged by: @profvjreddi

Base: devHead: fix/socratiq-dep-bumps


📝 Commits (1)

  • efbdc34 build(deps): bump socratiq markdown-it 14.2.0 + dompurify 3.4.10, rebuild bundle

📊 Changes

3 files changed (+865 additions, -686 deletions)

View changed files

📝 book/quarto/tools/scripts/socratiQ/bundle.js (+815 -656)
📝 socratiq/package-lock.json (+32 -12)
📝 socratiq/package.json (+18 -18)

📄 Description

Combines the two blocked dependabot socratiq bumps and rebuilds the committed widget bundle so it passes the SocratiQ Bundle Drift check (which dependabot cannot satisfy on its own).

  • markdown-it 14.1.1 → 14.2.0 (supersedes #1862)
  • dompurify 3.4.1 → 3.4.10 (supersedes #1863)
  • regenerated book/quarto/tools/scripts/socratiQ/bundle.js via npm run build:vite

Bundle build verified deterministic across rebuilds (tooling pinned by package-lock).

Closes #1862
Closes #1863


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/harvard-edge/cs249r_book/pull/1880 **Author:** [@profvjreddi](https://github.com/profvjreddi) **Created:** 6/16/2026 **Status:** ✅ Merged **Merged:** 6/16/2026 **Merged by:** [@profvjreddi](https://github.com/profvjreddi) **Base:** `dev` ← **Head:** `fix/socratiq-dep-bumps` --- ### 📝 Commits (1) - [`efbdc34`](https://github.com/harvard-edge/cs249r_book/commit/efbdc344066e430c3fdc940d0be3a90af7063f8f) build(deps): bump socratiq markdown-it 14.2.0 + dompurify 3.4.10, rebuild bundle ### 📊 Changes **3 files changed** (+865 additions, -686 deletions) <details> <summary>View changed files</summary> 📝 `book/quarto/tools/scripts/socratiQ/bundle.js` (+815 -656) 📝 `socratiq/package-lock.json` (+32 -12) 📝 `socratiq/package.json` (+18 -18) </details> ### 📄 Description Combines the two blocked dependabot socratiq bumps and rebuilds the committed widget bundle so it passes the SocratiQ Bundle Drift check (which dependabot cannot satisfy on its own). - markdown-it 14.1.1 → 14.2.0 (supersedes #1862) - dompurify 3.4.1 → 3.4.10 (supersedes #1863) - regenerated `book/quarto/tools/scripts/socratiQ/bundle.js` via `npm run build:vite` Bundle build verified deterministic across rebuilds (tooling pinned by package-lock). Closes #1862 Closes #1863 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-06-21 20:36:49 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/cs249r_book#30980