Skip to content

chore(deps): bump katex from 0.16.47 to 0.19.0 in the npm_and_yarn group across 1 directory - #160

Merged
cfbender merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-89976db822
Oct 14, 2026
Merged

cfbender merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-89976db822

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the / directory: katex.

Updates katex from 0.16.47 to 0.19.0

Release notes

Sourced from katex's releases.

v0.19.0

0.19.0 (2026-10-01)

Documentation

BREAKING CHANGES

  • Missing character metrics now reported via strict with error code symbolNotInFont, changing warning formatting, calling any strict callbacks, and producing errors in strict: "error" mode. Also, strict callbacks returning undefined or null now warn instead of ignoring the issue (and no longer typecheck); return false or "ignore" to suppress warnings.

v0.18.11

0.18.11 (2026-10-01)

Features

  • handle character metrics warnings via strict (#4243) (4237070)

v0.18.10

0.18.10 (2026-09-30)

Features

  • make KaTeX fallback to browsr math font before Times New Roman (#4298) (a477b2e)

v0.18.9

0.18.9 (2026-09-23)

Features

v0.18.8

0.18.8 (2026-09-23)

Bug Fixes

v0.18.7

0.18.7 (2026-09-06)

Features

... (truncated)

Changelog

Sourced from katex's changelog.

0.19.0 (2026-10-01)

Documentation

BREAKING CHANGES

  • Missing character metrics now reported via strict with error code symbolNotInFont, changing warning formatting, calling any strict callbacks, and producing errors in strict: "error" mode. Also, strict callbacks returning undefined or null now warn instead of ignoring the issue (and no longer typecheck); return false or "ignore" to suppress warnings.

0.18.11 (2026-10-01)

Features

  • handle character metrics warnings via strict (#4243) (4237070)

0.18.10 (2026-09-30)

Features

  • make KaTeX fallback to browsr math font before Times New Roman (#4298) (a477b2e)

0.18.9 (2026-09-23)

Features

0.18.8 (2026-09-23)

Bug Fixes

0.18.7 (2026-09-06)

Features

0.18.6 (2026-09-05)

... (truncated)

Commits
  • 6ea2dc9 chore(release): 0.19.0 [ci skip]
  • cbb1fce docs: note strict changes shipped in 0.18.11 (#4300)
  • d5bed9f chore(release): 0.18.11 [ci skip]
  • 4237070 feat: handle character metrics warnings via strict (#4243)
  • 411da70 chore(release): 0.18.10 [ci skip]
  • a477b2e feat: make KaTeX fallback to browsr math font before Times New Roman (#4298)
  • 5a6a8f8 chore(deps): bump github/codeql-action from 4.38.1 to 4.38.2 (#4297)
  • 71a7bc0 chore(release): 0.18.9 [ci skip]
  • aafa187 feat(types): add contrib module declarations (#4250)
  • e749fd1 chore(release): 0.18.8 [ci skip]
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 7, 2026
@coderabbitai

coderabbitai Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 0ed3a5b9-d8e1-401e-8307-09aedd82c7b9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-89976db822 branch from 91ba38e to 5b350f5 Compare October 7, 2026 19:35
dependabot Bot and others added 2 commits October 14, 2026 17:33
Bumps the npm_and_yarn group with 1 update in the / directory: [katex](https://github.com/KaTeX/KaTeX).


Updates `katex` from 0.16.47 to 0.19.0
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.19.0)

---
updated-dependencies:
- dependency-name: katex
  dependency-version: 0.19.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
rehype-katex and micromark-extension-math require katex ^0.16, so bumping
the direct dependency alone left primer math rendering with the vulnerable
0.16.47 (GHSA-238p-pmpm-9mq7). Pin every copy through overrides and update
aube-lock.yaml, which Dependabot does not regenerate.
@cfbender
cfbender force-pushed the dependabot/npm_and_yarn/npm_and_yarn-89976db822 branch from 5b350f5 to b763b15 Compare October 14, 2026 17:38
@cfbender
cfbender merged commit ea25450 into main Oct 14, 2026
3 checks passed
@cfbender
cfbender deleted the dependabot/npm_and_yarn/npm_and_yarn-89976db822 branch October 14, 2026 17:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant