Skip to content

fix(deps): update dependency safe-mdx to ^1.12.0 - #604

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/safe-mdx-1.x
Open

fix(deps): update dependency safe-mdx to ^1.12.0#604
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/safe-mdx-1.x

Conversation

@renovate

@renovate renovate Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
safe-mdx ^1.11.0^1.12.0 age confidence

Release Notes

holocron-hq/safe-mdx (safe-mdx)

v1.12.0

Compare Source

  1. Render JSX inside MDX expressions — conditional elements, ternaries, nullish fallbacks, arrays, objects, and callback results now use the same safe component allow-list and prop validation as normal MDX elements:

    {visible && <TextField name="title" />}
    
    {items.map(item => <Card key={item.id}>{item.name}</Card>)}

    Callback-local values work in component props, spread attributes, children, and nested callbacks. Inactive conditional branches remain lazy, so components in branches that are not selected are not resolved.

  2. Render JSX fragments in documents and expression props — fragments now preserve all children at the document root, inside components, and inside props:

    <>
      <Heading>First</Heading>
      <Heading>Second</Heading>
    </>
  3. Validate nested component propscomponentPropsSchema now validates components nested inside expression props and reports their validation errors through the normal error collection path.

  4. Resolve react-dom in strict-linking installsreact-dom is now declared as a peer dependency because the main entry imports the client module that uses prefetchDNS and preconnect. pnpm consumers no longer need a packageExtensions workaround and no longer get Cannot find package 'react-dom' at runtime.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependency Dependency version related label Aug 10, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Aug 10, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
website 809f143 Commit Preview URL

Branch Preview URL
Aug 10 2026, 06:07 PM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependency Dependency version related

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant