FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

tools: bump @node-core/doc-kit from 1.0.2 to 1.3.5 in /tools/doc in the doc group by dependabot[bot] · Pull Request #62512 · nodejs/node · GitHub

/ node Public

tools: bump @node-core/doc-kit from 1.0.2 to 1.3.5 in /tools/doc in the doc group - #62512

Merged
nodejs-github-bot merged 1 commit into
mainfrom
dependabot/npm_and_yarn/tools/doc/doc-9a4af27da3
Apr 20, 2026
Merged

tools: bump @node-core/doc-kit from 1.0.2 to 1.3.5 in /tools/doc in the doc group#62512
nodejs-github-bot merged 1 commit into
mainfrom
dependabot/npm_and_yarn/tools/doc/doc-9a4af27da3

Conversation

dependabot Bot commented on behalf of github Mar 30, 2026
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the doc group in /tools/doc with 1 update: @node-core/doc-kit.

Updates @node-core/doc-kit from 1.0.2 to 1.2.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot Bot added dependencies Pull requests that update a dependency file. javascript Pull requests that update Javascript code labels Mar 30, 2026

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/web-infra

nodejs-github-bot added doc Issues and PRs related to the documentations. tools Issues and PRs related to the tools directory. labels Mar 30, 2026
dependabot Bot force-pushed the dependabot/npm_and_yarn/tools/doc/doc-9a4af27da3 branch from e4f2a2a to 69ca5a5 Compare April 6, 2026 18:33

ovflowd commented Apr 6, 2026

Copy link
Copy Markdown
Member

@avivkeller what's the latest version of doc-kit atm? Also tests failing 🤔

avivkeller commented Apr 6, 2026
edited
Loading

Copy link
Copy Markdown
Member

@avivkeller what's the latest version of doc-kit atm?

1.3.3

Also tests failing 🤔

Flaky tests, unrelated to doc-kit.

ovflowd commented Apr 6, 2026

Copy link
Copy Markdown
Member

@avivkeller what's the latest version of doc-kit atm?

1.3.3

Also tests failing 🤔

Flaky tests, unrelated to doc-kit.

Will this PR automatically get updated to 1.3.3?

kxxt commented Apr 11, 2026

Copy link
Copy Markdown
Member

Will this PR automatically get updated to 1.3.3?

IIRC @dependabot recreate will recreate a PR that bumps to latest version.

But since I need a bump to fix make test-only on RISC-V, I opened a PR to bump it manually here: #62686

ovflowd commented Apr 11, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

ovflowd commented Apr 11, 2026

Copy link
Copy Markdown
Member

Will this PR automatically get updated to 1.3.3?

IIRC @dependabot recreate will recreate a PR that bumps to latest version.

But since I need a bump to fix make test-only on RISC-V, I opened a PR to bump it manually here: #62686

Didn't notice this was a PR managed by Dependabot, I thought we used our own Bot.

dependabot Bot force-pushed the dependabot/npm_and_yarn/tools/doc/doc-9a4af27da3 branch from 69ca5a5 to 9c735e8 Compare April 11, 2026 22:30

Copy link
Copy Markdown
Member

Didn't notice this was a PR managed by Dependabot, I thought we used our own Bot.

We use @nodejs-github-bot when a dependency isn't supported by Dependabot. When we first landed doc-kit, and used git deps, it wasn't supported by Dependabot, now that we release to npm, it is

Comment thread tools/doc/package.json
avivkeller added author ready PRs that have at least one approval, no outstanding review comments, and a CI started. request-ci Add this label to start a Jenkins CI on a PR. labels Apr 12, 2026
github-actions Bot removed the request-ci Add this label to start a Jenkins CI on a PR. label Apr 12, 2026

Copy link
Copy Markdown
Collaborator

aduh95 commented Apr 13, 2026

Copy link
Copy Markdown
Contributor

RuntimeError: memory access out of bounds on RHEL / linuxone CI

sxa commented Apr 13, 2026

Copy link
Copy Markdown
Member

FYI @nodejs/platform-s390

kxxt commented Apr 13, 2026

Copy link
Copy Markdown
Member

RuntimeError: memory access out of bounds on RHEL / linuxone CI

There's an s390x related change in nodejs/doc-kit#691 (comment) , would that be related or is it just flaky tests?

dependabot Bot force-pushed the dependabot/npm_and_yarn/tools/doc/doc-9a4af27da3 branch from 9c735e8 to 2c03b07 Compare April 13, 2026 19:40

Copy link
Copy Markdown
Contributor

This issue seems to be related to Typed array usage under shikijs/engine-oniguruma/dist/index.mjs:
https://github.com/shikijs/shiki/blob/be89afcfb3bfaf8a29c0715bc13b3f95264ce87d/packages/engine-oniguruma/src/oniguruma/index.ts#L293
and
https://github.com/shikijs/shiki/blob/be89afcfb3bfaf8a29c0715bc13b3f95264ce87d/packages/engine-oniguruma/src/oniguruma/index.ts#L360

Wasm is little-endian enforced, Typed arrays follow native-endian order. If you manipulate a Wasm buffer you have to make sure data is also in little-endian format, i.e a fix would look something like this:

    /*const strPtrsPtr = onigBinding.omalloc(4 * patterns.length);
    onigBinding.HEAPU32.set(strPtrsArr, strPtrsPtr / 4);
    const strLenPtr = onigBinding.omalloc(4 * patterns.length);
    onigBinding.HEAPU32.set(strLenArr, strLenPtr / 4);
    */

    const strPtrsPtr = onigBinding.omalloc(4 * patterns.length);
    const strLenPtr = onigBinding.omalloc(4 * patterns.length);
    const dv = new DataView(onigBinding.HEAPU8.buffer);
    for (let i = 0; i < strPtrsArr.length; i++)
      dv.setUint32(strPtrsPtr + i * 4, strPtrsArr[i], true);
    for (let i = 0; i < strLenArr.length; i++)
      dv.setUint32(strLenPtr + i * 4, strLenArr[i], true);

...

  /*const HEAPU32 = onigBinding2.HEAPU32;
  let offset = resultPtr / 4;
  const index = HEAPU32[offset++];
  const count = HEAPU32[offset++];
  */

  const dv2 = new DataView(onigBinding2.HEAPU8.buffer);
  let byteOffset = resultPtr;
  const index = dv2.getUint32(byteOffset, true); byteOffset += 4;
  const count = dv2.getUint32(byteOffset, true); byteOffset += 4;
    const captureIndices = [];
    for (let i = 0; i < count; i++) {
      // const beg = string.convertUtf8OffsetToUtf16(HEAPU32[offset++]);
      // const end = string.convertUtf8OffsetToUtf16(HEAPU32[offset++]);
      const beg = string.convertUtf8OffsetToUtf16(dv2.getUint32(byteOffset, true)); byteOffset += 4;
      const end = string.convertUtf8OffsetToUtf16(dv2.getUint32(byteOffset, true)); byteOffset += 4;

Not sure if this glue code is generated with Emscripten or not, if it is then it needs to be regenerated with SUPPORT_BIG_ENDIAN=1 as explained under this fix: emscripten-core/emscripten#13413

kxxt commented Apr 14, 2026
edited
Loading

Copy link
Copy Markdown
Member

This issue seems to be related to Typed array usage under shikijs/engine-oniguruma/dist/index.mjs: https://github.com/shikijs/shiki/blob/be89afcfb3bfaf8a29c0715bc13b3f95264ce87d/packages/engine-oniguruma/src/oniguruma/index.ts#L293 and https://github.com/shikijs/shiki/blob/be89afcfb3bfaf8a29c0715bc13b3f95264ce87d/packages/engine-oniguruma/src/oniguruma/index.ts#L360

Wasm is little-endian enforced, Typed arrays follow native-endian order. If you manipulate a Wasm buffer you have to make sure data is also in little-endian format, i.e a fix would look something like this:

Thanks for investigating it!

Not sure if this glue code is generated with Emscripten or not, if it is then it needs to be regenerated with SUPPORT_BIG_ENDIAN=1 as explained under this fix: emscripten-core/emscripten#13413

The copyright header in the code tells me that this glue code in shiki is actually copied from https://github.com/microsoft/vscode-oniguruma/blob/main/src/index.ts. vscode-oniguruma indeed uses Emscripten but I cannot find where they generated the index.ts.

But given the complexity and delay involved in fixing code in two upstream repos, perhaps it's better to disable the wasm highlighter for s390x again in doc-kit.

ovflowd commented Apr 15, 2026

Copy link
Copy Markdown
Member

Side note: A few months ago I considered pushing this change to vscode-oniguruma but hesitated since I thought we did a workaround on our side. I should probably have done the PR anyways!

kxxt commented Apr 16, 2026

Copy link
Copy Markdown
Member

Could anyone request-ci Add this label to start a Jenkins CI on a PR. again? Thanks!

ovflowd added the request-ci Add this label to start a Jenkins CI on a PR. label Apr 16, 2026
github-actions Bot removed the request-ci Add this label to start a Jenkins CI on a PR. label Apr 16, 2026

Copy link
Copy Markdown
Collaborator

kxxt commented Apr 16, 2026

Copy link
Copy Markdown
Member

It looks like @dependabot recreate didn't bump it to the latest version so the CI is still failing. Not sure why dependabot missed the latest version during the recreate :( .

ovflowd commented Apr 16, 2026

Copy link
Copy Markdown
Member

Frigging hell, Dependabot.

ovflowd commented Apr 16, 2026

Copy link
Copy Markdown
Member

It might be following the cadency of how old a release is. Ill manually override this.

kxxt commented Apr 16, 2026

Copy link
Copy Markdown
Member

Not sure why dependabot missed the latest version during the recreate :( .

Well, I guess I know what happened. Node.js has configured a dependency cool down here:

cooldown:
semver-major-days: 5
semver-minor-days: 5
semver-patch-days: 5

So it will take five days before dependabot could bump it to the latest version.

ovflowd commented Apr 16, 2026

Copy link
Copy Markdown
Member

Problem is running npm i on my machine will produce a bigger package-lock diff due to being a different arch and whatnot.

kxxt commented Apr 16, 2026

Copy link
Copy Markdown
Member

Problem is running npm i on my machine will produce a bigger package-lock diff due to being a different arch and whatnot.

I am preparing a PR to ignore the dependency cooldown for internal packages like doc-kit. The cooldown doesn't make sense for internal packages and will only slow down the propagation of new improvements from doc-kit to node.js repo.

ovflowd commented Apr 16, 2026

Copy link
Copy Markdown
Member

Problem is running npm i on my machine will produce a bigger package-lock diff due to being a different arch and whatnot.

I am preparing a PR to ignore the dependency cooldown for internal packages like doc-kit. The cooldown doesn't make sense for internal packages and will only slow down the propagation of new improvements from doc-kit to node.js repo.

Good point and agreed :)

dependabot Bot force-pushed the dependabot/npm_and_yarn/tools/doc/doc-9a4af27da3 branch from 5ae28d6 to 23a3a8c Compare April 20, 2026 10:09

ovflowd commented Apr 20, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps the doc group in /tools/doc with 1 update: [@node-core/doc-kit](https://github.com/nodejs/doc-kit).


Updates `@node-core/doc-kit` from 1.0.2 to 1.2.0
- [Commits](https://github.com/nodejs/doc-kit/commits)

---
updated-dependencies:
- dependency-name: "@node-core/doc-kit"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: doc
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot force-pushed the dependabot/npm_and_yarn/tools/doc/doc-9a4af27da3 branch from 23a3a8c to f9ea015 Compare April 20, 2026 14:39
ovflowd changed the title tools: bump @node-core/doc-kit from 1.0.2 to 1.3.3 in /tools/doc in the doc group tools: bump @node-core/doc-kit from 1.0.2 to 1.3.5 in /tools/doc in the doc group Apr 20, 2026
ovflowd added the commit-queue Add this label to land a pull request using GitHub Actions. label Apr 20, 2026
nodejs-github-bot removed the commit-queue Add this label to land a pull request using GitHub Actions. label Apr 20, 2026
nodejs-github-bot merged commit dd6a0b5 into main Apr 20, 2026
19 checks passed

Copy link
Copy Markdown
Collaborator

Landed in dd6a0b5

nodejs-github-bot deleted the dependabot/npm_and_yarn/tools/doc/doc-9a4af27da3 branch April 20, 2026 17:41
aduh95 pushed a commit that referenced this pull request May 5, 2026
Bumps the doc group in /tools/doc with 1 update: [@node-core/doc-kit](https://github.com/nodejs/doc-kit).

Updates `@node-core/doc-kit` from 1.0.2 to 1.2.0
- [Commits](https://github.com/nodejs/doc-kit/commits)

---
updated-dependencies:
- dependency-name: "@node-core/doc-kit"
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: doc
...

Signed-off-by: dependabot[bot] <support@github.com>
PR-URL: #62512
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Aviv Keller <me@aviv.sh>
Reviewed-By: Claudio Wunder <cwunder@gnome.org>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

author ready PRs that have at least one approval, no outstanding review comments, and a CI started. dependencies Pull requests that update a dependency file. doc Issues and PRs related to the documentations. javascript Pull requests that update Javascript code tools Issues and PRs related to the tools directory.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants


Back | FazBrowse Home | New Git URL