Skip to content

Bump @scalar/api-reference from 1.62.1 to 1.62.5 in the all-ui-bundles group - #112

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-ui-bundles-d1bcebd67d
Closed

Bump @scalar/api-reference from 1.62.1 to 1.62.5 in the all-ui-bundles group#112
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-ui-bundles-d1bcebd67d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-ui-bundles group with 1 update: @scalar/api-reference.

Updates @scalar/api-reference from 1.62.1 to 1.62.5

Changelog

Sourced from @​scalar/api-reference's changelog.

1.62.5

Patch Changes

  • #9671: Add a canDeleteSchemes prop to the auth selector so the delete (trash) affordance can be hidden. It defaults to true (unchanged for the API client, where schemes are editable) and the API reference now passes false, since its schemes come from the rendered document and cannot be removed there.

  • #9646: Fix deep links to response properties. Response property anchors now carry a responses marker so the target operation is found and scrolled to on a fresh load, and response properties are linkable even when expandAllResponses is off (a deep link expands the collapsed response and scrolls the property into view).

  • #9631: Hide the protocol and server filters in the classic layout for AsyncAPI documents

  • #9639: Add a read-only accessor for the global authentication state to the plugin API. Plugin lifecycle hooks (onInit, onConfigChange) now receive an auth accessor alongside config, and the plugin manager exposes getAuthState() for view components. Plugins can read stored secrets and the selected security schemes via auth.export(), auth.getAuthSecrets(documentName, schemeName), and auth.getAuthSelectedSchemas(payload) without being able to mutate auth.

  • #9664: fix: keep base allOf properties when merging oneOf/anyOf branches

    When a schema used allOf to factor out shared object properties next to a oneOf/anyOf, each branch's own properties/required overwrote the shared base fields instead of being combined with them. The base fields now stay visible alongside each branch's own fields.

1.62.4

1.62.3

1.62.2

Patch Changes

  • #9630: Render AsyncAPI tags without the extra horizontal indentation on nested channels, and replace the empty "Operations" card in an AsyncAPI tag header with a "Channels" card that lists the channels in the tag.
  • #9541: Fix an SSR hydration mismatch on the root element: the obtrusive-scrollbar class is now resolved after mount so the first client render matches the server.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-ui-bundles group with 1 update: [@scalar/api-reference](https://github.com/scalar/scalar/tree/HEAD/packages/api-reference).


Updates `@scalar/api-reference` from 1.62.1 to 1.62.5
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/packages/api-reference/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits/HEAD/packages/api-reference)

---
updated-dependencies:
- dependency-name: "@scalar/api-reference"
  dependency-version: 1.62.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-ui-bundles
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 8, 2026
@dependabot
dependabot Bot requested a review from FumingPower3925 as a code owner July 8, 2026 14:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 8, 2026
@FumingPower3925

Copy link
Copy Markdown
Owner

Superseded by #113, which bumps Scalar to 1.62.5 across all pin sites (CDN + embedded + package.json) with full supply-chain verification (SLSA provenance from scalar/scalar, byte-identical npm/jsDelivr, host set unchanged from 1.62.1). Merging this package.json-only change alone would red the pinning tests.

@dependabot @github

dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/all-ui-bundles-d1bcebd67d branch July 8, 2026 14:28
FumingPower3925 added a commit that referenced this pull request Jul 8, 2026
Scalar @scalar/api-reference 1.62.1 -> 1.62.5 across the CDN pin, the
embedded bundle, and the package.json tracker. The 1.62.2-1.62.5 patches
are rendering/behavior fixes (response-property deep links, an
allOf + oneOf/anyOf property-merge fix, AsyncAPI layout tweaks); the
data-configuration and CSP contracts stdocs relies on are unchanged.

Supersedes #112. The bundle was verified byte-identical across the npm
tarball and jsDelivr, its sha512 matches the published dist integrity,
it carries SLSA build provenance from github.com/scalar/scalar, and the
external-host set is unchanged from 1.62.1.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant