Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps quantecon-book-theme from 0.9.2 to 0.15.0.

Release notes

Sourced from quantecon-book-theme's releases.

v0.15.0

Major Refactoring and Modernization

This release includes a comprehensive refactoring of the theme's codebase, security improvements, and enhanced developer experience.

🔄 Changed

  • Major refactoring and modernization (#335)
    • Updated Node.js from 16.13.2 (EOL) to 18.18.0 LTS
    • Modularized SCSS: Split 2038-line monolithic stylesheet into 11 focused modules
    • Modularized JavaScript: Organized 565 lines into 8 feature-specific modules
    • Updated npm dependencies: sass (1.94.2), sass-loader (16.0.6), css-loader (7.1.2), webpack (5.103.0), and more
    • Updated Python dependencies: Added version constraints for pyyaml, docutils, beautifulsoup4
    • Updated flake8 constraint from <3.8.0 to >=7.0.0
    • Removed unused click dependency

✨ Added

  • Performance optimizations (#335)
    • Preconnect hints for CDN resources (unpkg.com, cdn.jsdelivr.net, fonts.googleapis.com)
    • Reduces connection time by 100-300ms per CDN
  • Security improvements (#335)
    • Fixed 2 npm vulnerabilities (cross-spawn HIGH severity, nanoid MODERATE severity)
    • Added SRI (Subresource Integrity) hashes to all CDN-loaded scripts
  • Testing improvements (#335)
    • New test infrastructure with conftest.py and shared fixtures
    • Added test_module_structure.py with 10 new tests (13→23 total tests)
    • Validates SCSS module structure, JavaScript module exports, layout template configuration
  • Documentation improvements (#335)
    • Comprehensive CONTRIBUTING.md with development guide
    • New testing guide at docs/contributing/testing.md
    • AI-assisted development guide at .github/copilot-instructions.md
    • Added .editorconfig for consistent code formatting
    • Added .nvmrc for Node.js version pinning

🐛 Fixed

  • Deprecation warnings (#335)
    • Fixed deprecated datetime.utcnow()datetime.now(timezone.utc)
    • Fixed deprecated datetime.utcfromtimestamp()datetime.fromtimestamp(..., tz=timezone.utc)
    • All 19 deprecation warnings resolved
  • Removed obsolete console polyfill for IE8/9 (#335)
    • Reduces JavaScript bundle size from 8.91 KiB to 8.73 KiB

📊 Impact

  • Security vulnerabilities: 2 → 0
  • Test count: 13 → 23 tests (77% increase)
  • Deprecation warnings: 19 → 0
  • Bundle size: 67.3 KiB → 67.1 KiB

Full Changelog: QuantEcon/quantecon-book-theme@v0.14.0...v0.15.0

v0.14.0

... (truncated)

Changelog

Sourced from quantecon-book-theme's changelog.

[0.15.0] - 2025-12-08

Changed

  • Major refactoring and modernization (#335)
    • Updated Node.js from 16.13.2 (EOL) to 18.18.0 LTS
    • Modularized SCSS: Split 2038-line monolithic stylesheet into 11 focused modules
    • Modularized JavaScript: Organized 565 lines into 8 feature-specific modules
    • Updated npm dependencies: sass (1.94.2), sass-loader (16.0.6), css-loader (7.1.2), webpack (5.103.0), and more
    • Updated Python dependencies: Added version constraints for pyyaml, docutils, beautifulsoup4
    • Updated flake8 constraint from <3.8.0 to >=7.0.0
    • Removed unused click dependency

Added

  • Performance optimizations (#335)
    • Preconnect hints for CDN resources (unpkg.com, cdn.jsdelivr.net, fonts.googleapis.com)
    • Reduces connection time by 100-300ms per CDN
  • Security improvements (#335)
    • Fixed 2 npm vulnerabilities (cross-spawn HIGH severity, nanoid MODERATE severity)
    • Added SRI (Subresource Integrity) hashes to all CDN-loaded scripts
  • Testing improvements (#335)
    • New test infrastructure with conftest.py and shared fixtures
    • Added test_module_structure.py with 10 new tests (13→23 total tests)
    • Validates SCSS module structure, JavaScript module exports, layout template configuration
  • Documentation improvements (#335)
    • Comprehensive CONTRIBUTING.md with development guide
    • New testing guide at docs/contributing/testing.md
    • AI-assisted development guide at .github/copilot-instructions.md
    • Added .editorconfig for consistent code formatting
    • Added .nvmrc for Node.js version pinning

Fixed

  • Deprecation warnings (#335)
    • Fixed deprecated datetime.utcnow()datetime.now(timezone.utc)
    • Fixed deprecated datetime.utcfromtimestamp()datetime.fromtimestamp(..., tz=timezone.utc)
    • All 19 deprecation warnings resolved
  • Removed obsolete console polyfill for IE8/9 (#335)
    • Reduces JavaScript bundle size from 8.91 KiB to 8.73 KiB

[0.14.0] - 2025-12-01

Added

  • Visual regression testing with Playwright (#339)
    • Automated screenshot comparison for theme styling
    • Tests for code blocks, dark mode, math equations, headers, sidebars
    • Desktop and mobile viewport coverage
    • CI integration with GitHub Actions
  • New /update-new-snapshots PR comment command (#340)
    • Automatically generates baseline snapshots for new visual tests
    • Only creates missing snapshots (won't overwrite existing baselines)
    • Documents workflow in tests/visual/README.md

... (truncated)

Commits
  • a997b1e Bump version to 0.15.0
  • d6b1ad1 Fix trailing whitespace (pre-commit)
  • 94efaf9 Release version 0.15.0
  • 345890a Add multilingual support architecture planning document
  • 09a8eb3 Technical Review Nov 2025: Modernization and Security Updates (#335)
  • 98b6ca4 RELEASE: bump version to 0.14.0
  • 8f8d2b0 STYLE: Remove italic formatting from f-string interpolation tokens (#340)
  • 5ca98a1 FEAT: add visual regression testing with Playwright (#339)
  • 74a21c2 RELEASE: bump version to 0.13.2
  • c20c5af FIX: update Jupyter Book links to avoid redirects (#337)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [quantecon-book-theme](https://github.com/QuantEcon/quantecon-book-theme) from 0.9.2 to 0.15.0.
- [Release notes](https://github.com/QuantEcon/quantecon-book-theme/releases)
- [Changelog](https://github.com/QuantEcon/quantecon-book-theme/blob/main/CHANGELOG.md)
- [Commits](QuantEcon/quantecon-book-theme@v0.9.2...v0.15.0)

---
updated-dependencies:
- dependency-name: quantecon-book-theme
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file conda Pull requests that update conda code labels Dec 8, 2025
@netlify
Copy link

netlify bot commented Dec 8, 2025

Deploy Preview for taupe-gaufre-c4e660 ready!

Name Link
🔨 Latest commit 9234916
🔍 Latest deploy log https://app.netlify.com/projects/taupe-gaufre-c4e660/deploys/693750a42c5a350008030088
😎 Deploy Preview https://deploy-preview-669--taupe-gaufre-c4e660.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

conda Pull requests that update conda code dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant