chore(deps): bump blume from 1.4.2 to 1.5.3

[dependabot]

Bumps blume from 1.4.2 to 1.5.3.

Release notes

Sourced from blume's releases.

blume@1.5.3

Patch Changes

• b6770b3: Fix fully unstyled frames during client-router navigations. Astro hoists the CSS of components rendered after the head has streamed (a page's MDX content, for one) into the body as stylesheet links, and the client router neither preloads nor persists body stylesheets — so swapping in a page painted a frame or two with no CSS applied before its sheet loaded. The layouts now load an incoming page's body stylesheets into the head and wait for them before the swap, and keep the loaded copy across it.

blume@1.5.2

Patch Changes

• 7650327: Add ai.ask.retrieval — maxResults, excerptChars, and contextBudget — so a site can size how much documentation each Ask AI question injects into the model's prompt. Injected characters are the dominant term in time-to-first-token, and on a self-hosted backend the fixed 10,000-character grounding could push a single question past 40 seconds. The three knobs stay separate because they aren't interchangeable: contextBudget caps the total, excerptChars decides how deep into one long page an excerpt reaches, and maxResults caps how many pages retrieval adds (the page the reader is viewing is injected on top of them). Defaults are unchanged (6 / 2000 / 10000), so existing sites behave exactly as before.
• 0c2c985: Try It message composer on native AsyncAPI operation pages. Each send/receive operation ships an interactive Try it panel: a payload editor prefilled from the message's examples (or a value sampled from the payload schema when the message declares none) and validated against the payload schema as you type, an input per channel parameter, and a server picker fed by the channel's servers with a free-text URL override. The protocol-aware code samples (wscat, browser WebSocket, kcat, mosquitto_pub/mosquitto_sub) stay in lockstep with the form, filling the channel address template with the parameter values you type. On ws/wss bindings the panel also connects live to the resolved channel URL, shows connection state, sends composed messages, and logs received frames with timestamps — there's no reconnect logic; other protocols get the composer and copyable CLI samples, since Blume doesn't fake broker connectivity from a browser tab. The panel is server-rendered collapsed and loads its JavaScript only when a reader first opens it; asyncapi.playground mirrors openapi.playground, so it's on by default with the native renderer and false turns it off. playground.proxy stays OpenAPI-only, and no broker credentials are collected or persisted for event operations.
• e2dbf74: Adopt Astro's client router (<ClientRouter />) for page navigation. Same-origin link clicks now swap the new page into the live document instead of tearing it down for a full load, so navigation is flicker-free in every browser — including Firefox, which has no cross-document paint holding and briefly flashed a blank frame between pages. Navigations animate with native view transitions where supported and Astro's fade fallback elsewhere, both honoring prefers-reduced-motion; the sidebar keeps its scroll position across pages; search results navigate through the router too; and PostHog analytics captures a pageview per client-side navigation. The Scalar API reference intentionally keeps full-page loads (it is a SPA that mounts once per document), and the cross-document @view-transition rule from the previous release is gone — the router supersedes it.
• 97a9b30: Support a dark-mode favicon. A dark mark is invisible against dark browser chrome, so Blume now auto-detects a -dark sibling of your icon file — the same name and directory with -dark before the extension, like icon.svg → icon-dark.svg — and emits both icons behind media="(prefers-color-scheme: …)", preceded by a plain light link so crawlers and browsers that ignore media queries on icons still get a sensible mark. Only the sibling of the icon Blume resolved is picked up, so an unrelated -dark file can't pair with your mark by accident. Ship one icon and nothing changes: a single <link rel="icon">, as before. The bundled Blume fallback now ships a light variant too, so a site with no icon of its own keeps a visible favicon in dark mode in browsers that honor media queries on icon links.
• 2597b38: Ignore repo-locating GIT_* environment variables (GIT_DIR, GIT_WORK_TREE, GIT_INDEX_FILE and friends) when resolving git last-modified dates and shallow-clone status. A parent git process exports an absolute GIT_DIR to its hooks, so a build run from inside one — a husky hook, a post-merge script, a CI wrapper — silently read the wrong repository and dropped every page's date.
• 0c2c985: Try It playground on native OpenAPI operation pages. Each operation ships an interactive Try it panel: a form generated from the operation's parameters and request-body schema, prefilled from the spec's examples, with a server picker fed by the spec's servers and auth inputs matching the operation's security schemes (bearer, API key, basic, and a token paste field for OAuth2). Values typed into the form update the generated code samples live, and Send fires the request directly from the browser — with an optional proxy for APIs that don't allow cross-origin requests from the docs site (openapi.playground.proxy: a URL of your own, or true for the built-in /_api-proxy server route). The panel is server-rendered collapsed and loads its JavaScript only when a reader first opens it; it's on by default with the native renderer, and playground: false turns it off.
• e31ff0a: Add ai.openInChat to configure the "Open in chat" page action: false hides it, and an array of provider keys ("v0", "chatgpt", "claude", "t3", "scira", "cursor") shows just that subset, in order.
• 5f41cbb: Keep the Ask AI panel alive across page navigations. The island now rides the client router with transition:persist, so the conversation, a draft question, and the open panel all survive moving between pages instead of resetting on every click. The island re-anchors its portaled panel and the desktop content-push attribute after each swap, and the mobile overlay's focus containment re-applies to the new page's content.
• 6eceaea: Segment search text for every non-Latin default locale, not just Japanese, Chinese, Korean, and Thai. Orama's default tokenizer keeps only basic Latin letters and digits, so when i18n.defaultLocale was a Cyrillic, Greek, Hebrew, or Devanagari language the index collapsed to zero tokens and every query silently returned no hits. The script now comes from Intl.Locale.maximize() — sr-Latn keeps Orama's tokenizer while az-Cyrl is segmented — with legacy tags (ja_JP.UTF-8, zh-cmn-Hans) resolved by their language subtag, and Latin terms on a segmented index fold diacritics so café still matches cafe. The tokenizer follows the default locale for the whole index, so non-Latin translations on a Latin-default site are unchanged.
• 0c2c985: Harden the Try It playground: empty auth inputs no longer send their redaction placeholder as a real credential (the live request goes out anonymous instead), pre-network URL/header errors are reported as themselves rather than as a CORS failure, spec-derived names are escaped before selector interpolation, external proxy URLs that already carry a query string join with &, blank required parameters stay visible in samples and sends, and mid-edit invalid JSON renders as a string literal in the JS/Python samples instead of broken syntax. The AsyncAPI composer now connects with an empty payload editor, prefills channel parameters from declared defaults/examples/enums instead of the sampler literal string, and degrades a no-example, no-schema payload to {} rather than null. The built-in CORS proxy allowlist skips templated server URLs, and a proxy with no allowable origin warns at build time.
• c289eff: Stop blume validate reporting colocated images as broken assets. A relative image embed (![](https://github.com/haydenbleasel/blume/tree/HEAD/packages/blume/blob/HEAD/diagram.png)) — the form the docs recommend for local images, since those are optimized at build time — was resolved into a site route and then looked for under public/, where it never lands: the image pipeline emits it to _astro/ from beside the content. Every such reference came back as BLUME_BROKEN_ASSET, so --strict failed on a site whose pages render the image correctly. Validation now accepts an image embed whose file exists next to its page source, passing the raw target through the same resolver that decides which colocated images the /blume-assets/content endpoint serves, so the two can't disagree about what one is. Everything that resolver would skip is still reported: a plain link to a relative path (only image nodes go through the pipeline), a ?query/#fragment suffix, a case-mismatched or directory-shaped name (which breaks on the case-sensitive production build), and a reference that resolves nowhere — the last with a diagnostic that points at the page's folder rather than public/, and even when no public/ directory exists.
• 1517f9c: Fix the sidebar rendering empty on archived version pages when header tabs are configured. A version tree's navigation root is versionized while tab paths stay in current-docs space, so the root tab was misread as a section tab that owns no group in the snapshot; it is now recognized as the root tab — via a single shared containment check used by sidebar scoping, tab-section pruning, and hoisting alike — and the archived sidebar renders its full tree. Header tabs also no longer claim aria-current on archived pages: they link back to the current docs, so none of them is the current page there.

blume@1.5.1

Patch Changes

• ca28fb8: Generate an Open Graph card for the changelog index. The /changelog page previously shipped no og:image (and fell back to X's compact summary card); it now gets the same generated card every other page has, served at /og/changelog.png.
• ca28fb8: Stop doubling the site title in the changelog index's document title. The page passed "{site title} {Changelog}" to a layout that suffixes "- {site title}" itself, producing titles like "Acme Changelog - Acme"; it now reads "Changelog - Acme".
• 8db1ecb: The default display font is now Inter, matching the body font — default sites download one text family instead of two (Inter Tight's files alone were ~190 KB per page). To keep the tightened display look, headings now get letter-spacing: -0.05em from the theme itself, which also means any font you configure for display reads correctly at heading sizes instead of depending on tracking built into the font. Inter Tight remains available as the inter-tight slug.
• ca28fb8: Let a user-supplied ogImage on PageLayout declare its alt text and pixel size via the new ogImageAlt and ogImageSize props, emitted as og:image:alt / og:image:width / og:image:height — the metadata Blume's generated cards already declare automatically.
• ca28fb8: Emit schema.org JSON-LD from PageLayout, so custom pages — most importantly a custom home page — carry the same WebSite structured-data graph the docs pages do. On by default; pass structuredDataEnabled={false} to opt a page out.
• ca28fb8: Keep the trailing slash on the home page's canonical, og:url, and hreflang URLs (https://site/ instead of https://site), so they byte-match the sitemap's <loc> for the root route.
• ca28fb8: Warn when lastModified runs in a shallow git clone. CI platforms usually check out limited history, which silently dropped most git-derived dates — sitemap <lastmod> and "Last updated" stamps vanished in production while working locally. The build now emits a BLUME_SHALLOW_GIT_HISTORY warning pointing at the fix (VERCEL_DEEP_CLONE=true on Vercel, fetch-depth: 0 for actions/checkout).
• bad025f: Smooth out page navigation: every link now prefetches on hover/viewport, and same-origin navigations opt into cross-document view transitions in supporting browsers, replacing the hard flash between pages with a crossfade. Respects prefers-reduced-motion.
• 8db1ecb: Preload only the font weights above-the-fold text actually renders in (body 400/500, display 500/600, mono 400) instead of every configured face. On a default site this cuts the per-page font preloads from ten files (~260 KB) to a handful (~50 KB), bandwidth that was competing with the critical CSS and pushing out mobile LCP. All other faces still load on demand through their @font-face rules with font-display: swap.
• ca28fb8: Redirect trailing-slash URLs to their slashless twins on Vercel with a 308. /docs/ and /docs previously both served 200 as duplicate URLs; the routing config now collapses the slashed form onto the canonical slashless one (the root / is untouched).

blume@1.5.0

Minor Changes

• 94b0678: Add docs versioning. The latest documentation lives at the content root with unprefixed URLs; each past version is a frozen snapshot directory cut with the new blume version <id> command, which copies the tree, rewrites root-absolute links to stay inside the snapshot, and registers the id in blume.config.ts. With a versions block configured, the header grows an automatic version switcher (same-page navigation, falling back to the version root), every archived page shows a localized "you're viewing an old version" notice with a go-to-latest link, and archived pages default their canonical to the same page in the live docs — the SEO treatment guides recommend and no docs framework automates — while version-only pages stay self-canonical and per-version canonical: "self" and noindex remain available. Search scopes results to the version being viewed with a remembered "All versions" toggle across Orama, FlexSearch, Algolia, and Typesense, and the agent surface is version-aware: the MCP search_docs/list_pages tools default to the current docs and accept an archived id or "all" (plus a new locale filter), get_navigation serves snapshot and per-locale trees, llms.txt sections archived versions with an "(archived)" label, llms-full.txt stays current-only, and the sitemap drops archived pages whose canonical points at a live equivalent. Versioning composes with i18n (snapshot outermost on disk, locale outermost in URLs), snapshots keep their own folder meta and translations, and blume translate never retranslates them.

Patch Changes

• b954287: Tighten types across the package: unknown-typed parameters, returns, and open dictionaries are replaced with precise named types, and every remaining type assertion carries a documented invariant (adopting ultracite's anti-slop lint preset).

• c8d1624: Native AsyncAPI renderer. The asyncapi block now defaults to renderer: "blume" — one real page per send/receive operation, grouped by tag (or channel address) in a tab-scoped sidebar, with message payload and header schema tables, channel parameters, protocol bindings, an Authorization section derived from securitySchemes, protocol-aware code samples (wscat/WebSocket for ws, kcat for Kafka, mosquitto_pub/mosquitto_sub for MQTT), and full participation in site search, llms.txt, and OG images. AsyncAPI 2.x specs are normalized to 3.x automatically with the official AsyncAPI converter, so publish/subscribe map onto stable operation URLs. The asyncapi block gains renderer, codeSamples, and expandSchemas for full parity with openapi; per-source includeInSearch/includeInLlms/noindex now apply to AsyncAPI sources too.

  Behavior change: AsyncAPI references were previously always rendered by the embedded Scalar SPA. Set asyncapi: { renderer: "scalar" } to keep the old behavior.

• 84055a7: Measure the audit's title and meta-description limits in display columns rather than characters. What a search engine truncates is the space the text takes up, and a character count only stands in for that where every character is one column wide — true of Latin text and of nothing else. Counted in characters, one range cannot serve both scripts: the same 110–160 was at once too strict for a Japanese description (which says in ~60 characters what English needs ~120 for, so every page of a Japanese site reported BLUME_AUDIT_DESCRIPTION_LENGTH) and too loose for a Japanese title (60 characters render as wide as 120 Latin ones and truncate, and nothing was reported). Widths come from string-width, so a fullwidth or wide character counts 2 and ASCII or precomposed (NFC) Latin text scores exactly as it did before — an English site's findings are unchanged. (Two knowable divergences: an emoji now counts 2 columns instead of its UTF-16 code units, and a decomposed (NFD) combining mark counts 0 instead of 1.) The changelog and OpenAPI generators, which trim their derived meta descriptions to the same snippet range, now budget in display columns too, so generated pages keep passing the audit in every script.

• a749fd7: blume eject no longer drops ai.ask.instructions: the ejected Ask AI endpoint now carries the custom system-prompt text, matching the hidden runtime.

• eab66c5: Per-group sidebar display modes on the generated sidebar. A folder can opt its group into flat, group, or page without an explicit navigation.sidebar config: set display in the folder's meta.ts, or — sugar for folders with an index page — sidebar.display in the index page's frontmatter. A generated group's effective mode resolves index frontmatter first, then folder meta, then the global navigation.sidebar.display, then the flat default; a group's value applies to that group only, and nested subgroups resolve their own chain. page-mode drill-in panels stay route-aware and list the index page first, loose pages hoist above sibling groups only where a sibling renders flat (self-delimiting group/page rows keep authored interleaving), and under i18n a fallback-filled index page never overrides a locale's own meta.ts display. sidebar.display anywhere it is dead — a non-index page, the content root's own index page, or any page under an explicit config sidebar — reports a new BLUME_SIDEBAR_DISPLAY_IGNORED warning instead of being silently dropped. Explicit config sidebars render exactly as before.

... (truncated)

Changelog

Sourced from blume's changelog.

1.5.3

Patch Changes

• b6770b3: Fix fully unstyled frames during client-router navigations. Astro hoists the CSS of components rendered after the head has streamed (a page's MDX content, for one) into the body as stylesheet links, and the client router neither preloads nor persists body stylesheets — so swapping in a page painted a frame or two with no CSS applied before its sheet loaded. The layouts now load an incoming page's body stylesheets into the head and wait for them before the swap, and keep the loaded copy across it.

1.5.2

Patch Changes

• 7650327: Add ai.ask.retrieval — maxResults, excerptChars, and contextBudget — so a site can size how much documentation each Ask AI question injects into the model's prompt. Injected characters are the dominant term in time-to-first-token, and on a self-hosted backend the fixed 10,000-character grounding could push a single question past 40 seconds. The three knobs stay separate because they aren't interchangeable: contextBudget caps the total, excerptChars decides how deep into one long page an excerpt reaches, and maxResults caps how many pages retrieval adds (the page the reader is viewing is injected on top of them). Defaults are unchanged (6 / 2000 / 10000), so existing sites behave exactly as before.
• 0c2c985: Try It message composer on native AsyncAPI operation pages. Each send/receive operation ships an interactive Try it panel: a payload editor prefilled from the message's examples (or a value sampled from the payload schema when the message declares none) and validated against the payload schema as you type, an input per channel parameter, and a server picker fed by the channel's servers with a free-text URL override. The protocol-aware code samples (wscat, browser WebSocket, kcat, mosquitto_pub/mosquitto_sub) stay in lockstep with the form, filling the channel address template with the parameter values you type. On ws/wss bindings the panel also connects live to the resolved channel URL, shows connection state, sends composed messages, and logs received frames with timestamps — there's no reconnect logic; other protocols get the composer and copyable CLI samples, since Blume doesn't fake broker connectivity from a browser tab. The panel is server-rendered collapsed and loads its JavaScript only when a reader first opens it; asyncapi.playground mirrors openapi.playground, so it's on by default with the native renderer and false turns it off. playground.proxy stays OpenAPI-only, and no broker credentials are collected or persisted for event operations.
• e2dbf74: Adopt Astro's client router (<ClientRouter />) for page navigation. Same-origin link clicks now swap the new page into the live document instead of tearing it down for a full load, so navigation is flicker-free in every browser — including Firefox, which has no cross-document paint holding and briefly flashed a blank frame between pages. Navigations animate with native view transitions where supported and Astro's fade fallback elsewhere, both honoring prefers-reduced-motion; the sidebar keeps its scroll position across pages; search results navigate through the router too; and PostHog analytics captures a pageview per client-side navigation. The Scalar API reference intentionally keeps full-page loads (it is a SPA that mounts once per document), and the cross-document @view-transition rule from the previous release is gone — the router supersedes it.
• 97a9b30: Support a dark-mode favicon. A dark mark is invisible against dark browser chrome, so Blume now auto-detects a -dark sibling of your icon file — the same name and directory with -dark before the extension, like icon.svg → icon-dark.svg — and emits both icons behind media="(prefers-color-scheme: …)", preceded by a plain light link so crawlers and browsers that ignore media queries on icons still get a sensible mark. Only the sibling of the icon Blume resolved is picked up, so an unrelated -dark file can't pair with your mark by accident. Ship one icon and nothing changes: a single <link rel="icon">, as before. The bundled Blume fallback now ships a light variant too, so a site with no icon of its own keeps a visible favicon in dark mode in browsers that honor media queries on icon links.
• 2597b38: Ignore repo-locating GIT_* environment variables (GIT_DIR, GIT_WORK_TREE, GIT_INDEX_FILE and friends) when resolving git last-modified dates and shallow-clone status. A parent git process exports an absolute GIT_DIR to its hooks, so a build run from inside one — a husky hook, a post-merge script, a CI wrapper — silently read the wrong repository and dropped every page's date.
• 0c2c985: Try It playground on native OpenAPI operation pages. Each operation ships an interactive Try it panel: a form generated from the operation's parameters and request-body schema, prefilled from the spec's examples, with a server picker fed by the spec's servers and auth inputs matching the operation's security schemes (bearer, API key, basic, and a token paste field for OAuth2). Values typed into the form update the generated code samples live, and Send fires the request directly from the browser — with an optional proxy for APIs that don't allow cross-origin requests from the docs site (openapi.playground.proxy: a URL of your own, or true for the built-in /_api-proxy server route). The panel is server-rendered collapsed and loads its JavaScript only when a reader first opens it; it's on by default with the native renderer, and playground: false turns it off.
• e31ff0a: Add ai.openInChat to configure the "Open in chat" page action: false hides it, and an array of provider keys ("v0", "chatgpt", "claude", "t3", "scira", "cursor") shows just that subset, in order.
• 5f41cbb: Keep the Ask AI panel alive across page navigations. The island now rides the client router with transition:persist, so the conversation, a draft question, and the open panel all survive moving between pages instead of resetting on every click. The island re-anchors its portaled panel and the desktop content-push attribute after each swap, and the mobile overlay's focus containment re-applies to the new page's content.
• 6eceaea: Segment search text for every non-Latin default locale, not just Japanese, Chinese, Korean, and Thai. Orama's default tokenizer keeps only basic Latin letters and digits, so when i18n.defaultLocale was a Cyrillic, Greek, Hebrew, or Devanagari language the index collapsed to zero tokens and every query silently returned no hits. The script now comes from Intl.Locale.maximize() — sr-Latn keeps Orama's tokenizer while az-Cyrl is segmented — with legacy tags (ja_JP.UTF-8, zh-cmn-Hans) resolved by their language subtag, and Latin terms on a segmented index fold diacritics so café still matches cafe. The tokenizer follows the default locale for the whole index, so non-Latin translations on a Latin-default site are unchanged.
• 0c2c985: Harden the Try It playground: empty auth inputs no longer send their redaction placeholder as a real credential (the live request goes out anonymous instead), pre-network URL/header errors are reported as themselves rather than as a CORS failure, spec-derived names are escaped before selector interpolation, external proxy URLs that already carry a query string join with &, blank required parameters stay visible in samples and sends, and mid-edit invalid JSON renders as a string literal in the JS/Python samples instead of broken syntax. The AsyncAPI composer now connects with an empty payload editor, prefills channel parameters from declared defaults/examples/enums instead of the sampler literal string, and degrades a no-example, no-schema payload to {} rather than null. The built-in CORS proxy allowlist skips templated server URLs, and a proxy with no allowable origin warns at build time.
• c289eff: Stop blume validate reporting colocated images as broken assets. A relative image embed (![](https://github.com/haydenbleasel/blume/blob/main/packages/blume/diagram.png)) — the form the docs recommend for local images, since those are optimized at build time — was resolved into a site route and then looked for under public/, where it never lands: the image pipeline emits it to _astro/ from beside the content. Every such reference came back as BLUME_BROKEN_ASSET, so --strict failed on a site whose pages render the image correctly. Validation now accepts an image embed whose file exists next to its page source, passing the raw target through the same resolver that decides which colocated images the /blume-assets/content endpoint serves, so the two can't disagree about what one is. Everything that resolver would skip is still reported: a plain link to a relative path (only image nodes go through the pipeline), a ?query/#fragment suffix, a case-mismatched or directory-shaped name (which breaks on the case-sensitive production build), and a reference that resolves nowhere — the last with a diagnostic that points at the page's folder rather than public/, and even when no public/ directory exists.
• 1517f9c: Fix the sidebar rendering empty on archived version pages when header tabs are configured. A version tree's navigation root is versionized while tab paths stay in current-docs space, so the root tab was misread as a section tab that owns no group in the snapshot; it is now recognized as the root tab — via a single shared containment check used by sidebar scoping, tab-section pruning, and hoisting alike — and the archived sidebar renders its full tree. Header tabs also no longer claim aria-current on archived pages: they link back to the current docs, so none of them is the current page there.

1.5.1

Patch Changes

• ca28fb8: Generate an Open Graph card for the changelog index. The /changelog page previously shipped no og:image (and fell back to X's compact summary card); it now gets the same generated card every other page has, served at /og/changelog.png.
• ca28fb8: Stop doubling the site title in the changelog index's document title. The page passed "{site title} {Changelog}" to a layout that suffixes "- {site title}" itself, producing titles like "Acme Changelog - Acme"; it now reads "Changelog - Acme".
• 8db1ecb: The default display font is now Inter, matching the body font — default sites download one text family instead of two (Inter Tight's files alone were ~190 KB per page). To keep the tightened display look, headings now get letter-spacing: -0.05em from the theme itself, which also means any font you configure for display reads correctly at heading sizes instead of depending on tracking built into the font. Inter Tight remains available as the inter-tight slug.
• ca28fb8: Let a user-supplied ogImage on PageLayout declare its alt text and pixel size via the new ogImageAlt and ogImageSize props, emitted as og:image:alt / og:image:width / og:image:height — the metadata Blume's generated cards already declare automatically.
• ca28fb8: Emit schema.org JSON-LD from PageLayout, so custom pages — most importantly a custom home page — carry the same WebSite structured-data graph the docs pages do. On by default; pass structuredDataEnabled={false} to opt a page out.
• ca28fb8: Keep the trailing slash on the home page's canonical, og:url, and hreflang URLs (https://site/ instead of https://site), so they byte-match the sitemap's <loc> for the root route.
• ca28fb8: Warn when lastModified runs in a shallow git clone. CI platforms usually check out limited history, which silently dropped most git-derived dates — sitemap <lastmod> and "Last updated" stamps vanished in production while working locally. The build now emits a BLUME_SHALLOW_GIT_HISTORY warning pointing at the fix (VERCEL_DEEP_CLONE=true on Vercel, fetch-depth: 0 for actions/checkout).
• bad025f: Smooth out page navigation: every link now prefetches on hover/viewport, and same-origin navigations opt into cross-document view transitions in supporting browsers, replacing the hard flash between pages with a crossfade. Respects prefers-reduced-motion.
• 8db1ecb: Preload only the font weights above-the-fold text actually renders in (body 400/500, display 500/600, mono 400) instead of every configured face. On a default site this cuts the per-page font preloads from ten files (~260 KB) to a handful (~50 KB), bandwidth that was competing with the critical CSS and pushing out mobile LCP. All other faces still load on demand through their @font-face rules with font-display: swap.
• ca28fb8: Redirect trailing-slash URLs to their slashless twins on Vercel with a 308. /docs/ and /docs previously both served 200 as duplicate URLs; the routing config now collapses the slashed form onto the canonical slashless one (the root / is untouched).

1.5.0

Minor Changes

• 94b0678: Add docs versioning. The latest documentation lives at the content root with unprefixed URLs; each past version is a frozen snapshot directory cut with the new blume version <id> command, which copies the tree, rewrites root-absolute links to stay inside the snapshot, and registers the id in blume.config.ts. With a versions block configured, the header grows an automatic version switcher (same-page navigation, falling back to the version root), every archived page shows a localized "you're viewing an old version" notice with a go-to-latest link, and archived pages default their canonical to the same page in the live docs — the SEO treatment guides recommend and no docs framework automates — while version-only pages stay self-canonical and per-version canonical: "self" and noindex remain available. Search scopes results to the version being viewed with a remembered "All versions" toggle across Orama, FlexSearch, Algolia, and Typesense, and the agent surface is version-aware: the MCP search_docs/list_pages tools default to the current docs and accept an archived id or "all" (plus a new locale filter), get_navigation serves snapshot and per-locale trees, llms.txt sections archived versions with an "(archived)" label, llms-full.txt stays current-only, and the sitemap drops archived pages whose canonical points at a live equivalent. Versioning composes with i18n (snapshot outermost on disk, locale outermost in URLs), snapshots keep their own folder meta and translations, and blume translate never retranslates them.

Patch Changes

• b954287: Tighten types across the package: unknown-typed parameters, returns, and open dictionaries are replaced with precise named types, and every remaining type assertion carries a documented invariant (adopting ultracite's anti-slop lint preset).

• c8d1624: Native AsyncAPI renderer. The asyncapi block now defaults to renderer: "blume" — one real page per send/receive operation, grouped by tag (or channel address) in a tab-scoped sidebar, with message payload and header schema tables, channel parameters, protocol bindings, an Authorization section derived from securitySchemes, protocol-aware code samples (wscat/WebSocket for ws, kcat for Kafka, mosquitto_pub/mosquitto_sub for MQTT), and full participation in site search, llms.txt, and OG images. AsyncAPI 2.x specs are normalized to 3.x automatically with the official AsyncAPI converter, so publish/subscribe map onto stable operation URLs. The asyncapi block gains renderer, codeSamples, and expandSchemas for full parity with openapi; per-source includeInSearch/includeInLlms/noindex now apply to AsyncAPI sources too.

  Behavior change: AsyncAPI references were previously always rendered by the embedded Scalar SPA. Set asyncapi: { renderer: "scalar" } to keep the old behavior.

... (truncated)

Commits

• aa83f89 Version Packages (#204)
• b6770b3 fix: load body-hoisted CSS before client-router swaps
• 55f1146 Version Packages (#198)
• 0c2c985 feat: Try It playground for the native API reference (#189)
• e31ff0a feat: configure the "Open in chat" page action via ai.openInChat
• c289eff fix(validate): accept images colocated with the page source (#199)
• 5f41cbb feat: persist the Ask AI panel across client-side navigations
• e2dbf74 fix: adopt Astro's client router for flicker-free navigation
• 1517f9c Fix blank sidebar on archived version pages with header tabs (#197)
• 97a9b30 Support a dark-mode favicon (#195)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[changeset-bot]

⚠️ No Changeset found

Latest commit: 2855a2a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.