Skip to content

build(deps-dev): Bump mkdocs-material from 9.8.0 to 9.8.1 in the docs-dependencies group across 1 directory - #71

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/dev/docs-dependencies-fb10aa534d
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/dev/docs-dependencies-fb10aa534d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the docs-dependencies group with 1 update in the / directory: mkdocs-material.

Updates mkdocs-material from 9.8.0 to 9.8.1

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.8.1

[!WARNING]

Material for MkDocs reaches end of life on May 5, 2027. Critical fixes and security updates continue until that date.

We're continuing our work with Zensical, a maintained successor built by the team behind Material for MkDocs. It carries forward what we've learned from building documentation tools with this community, with Markdown authoring, a familiar design, and full control over your content. Zensical is Open Source and MIT-licensed.

You can evaluate Zensical alongside MkDocs using your existing mkdocs.yml. Check plugin compatibility and compare your pages, navigation, search, and customizations before switching. The classic theme variant preserves the appearance of Material for MkDocs. See the migration guide for the steps and current compatibility details.

Upcoming changes on November 5

  • Updated Docker base image to Alpine 3.24
  • Updated Docker image dependencies to fix vulnerabilities
  • Updated Node build-time dependencies to fix vulnerabilities
Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.8.1 (2026-11-07)

  • Updated Docker base image to Alpine 3.24
  • Updated Docker image dependencies to fix vulnerabilities
  • Updated Node build-time dependencies to fix vulnerabilities

mkdocs-material-9.8.0 (2026-10-24)

This is primarily a security release. It raises dependency minimums to address known vulnerabilities. We recommend upgrading to this release and updating your dependency lockfiles.

Python 3.11 or newer is now required. Python 3.8–3.10 are no longer supported.

  • Updated Node build-time dependencies to fix vulnerabilities
  • Updated Python dependency minimums and required Python 3.11
  • Removed RSS from recommended dependencies
  • Updated project status and maintenance links
  • Updated CLI notice with end-of-life and migration guidance
  • Removed redirects from recommended dependencies

Previous dependency ranges allowed versions with known vulnerabilities. The new minimums cover core Python dependencies and the optional git and imaging extras, including GitPython 3.2.1 or newer for the git extra.

Recent releases of mkdocs-rss-plugin and mkdocs-redirects depend on ProperDocs, a separate static site generator that Material for MkDocs does not require. Removing these plugins from the recommended extra keeps its dependency footprint smaller and leaves the choice of additional tools to each project. If your project uses RSS feeds or redirects, declare the relevant plugin explicitly in your own dependencies.

The CLI notice now gives the May 5, 2027 end-of-life date and links to the Zensical migration guide: https://zensical.org/docs/compatibility/mkdocs/migration/

It also clarifies that third-party ProperDocs migration notices do not represent a recommendation from the Material for MkDocs team. Package metadata now marks the project as inactive and includes maintenance and migration links.

Selected Python security advisories addressed by the new minimums:

Jinja2: affected <=3.1.5; new minimum 3.1.6 (CVE-2025-27516) GHSA-cpwx-vrp4-4pq7

Markdown: affected <3.8.1; new minimum 3.8.1 (CVE-2025-69534) GHSA-5wmx-573v-2qwq

Pygments: affected <2.20.0; new minimum 2.20.0 (CVE-2026-4539) GHSA-5239-wwwm-4pmq

... (truncated)

Commits
  • 16c95ad Prepare 9.8.1 release
  • b3fe832 Fixed documentation workflow
  • 004d29e Updated dependencies to fix vulnerabilities
  • 7590e14 Documentation
  • 0f044db Updated documentation build to use public Material
  • dc38d1e Documentation
  • ebbfb46 Updated Docker base image to Alpine 3.24
  • 624aff1 Updated build and documentation workflows
  • See full diff in compare view

@dependabot
dependabot Bot requested a review from uniqueg as a code owner November 12, 2026 01:59
@dependabot dependabot Bot added the type: dependencies Related to managing upstream dependencies label Nov 12, 2026
@codecov

codecov Bot commented Nov 12, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (eea8b72) to head (900476c).
⚠️ Report is 1 commits behind head on dev.

Additional details and impacted files
@@            Coverage Diff            @@
##               dev       #71   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           11        11           
  Lines         1001      1001           
  Branches       143       143           
=========================================
  Hits          1001      1001           
Flag Coverage Δ
foca-plugin-generic-example-noop 100.00% <ø> (ø)
foca-plugin-generic-routing-random 100.00% <ø> (ø)
foca-plugin-tes-data-crypt4gh 100.00% <ø> (ø)
foca-plugin-tes-routing-distance 100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot dependabot Bot changed the title build(deps-dev): Bump mkdocs-material from 9.8.0 to 9.8.1 in the docs-dependencies group build(deps-dev): Bump mkdocs-material from 9.8.0 to 9.8.1 in the docs-dependencies group across 1 directory Nov 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/dev/docs-dependencies-fb10aa534d branch from 700aed4 to eeea701 Compare November 12, 2026 10:15
@read-the-docs-community

read-the-docs-community Bot commented Nov 12, 2026 •

Copy link
Copy Markdown

Documentation build overview

📚 foca-plugins | 🛠️ Build #35896049 | 📁 Comparing 900476c against latest (acbfb0c)

  🔍 Preview build  

5 files changed · ± 5 modified

± Modified

@dependabot
dependabot Bot force-pushed the dependabot/uv/dev/docs-dependencies-fb10aa534d branch from eeea701 to 9c81c7f Compare November 14, 2026 00:22
Bumps the docs-dependencies group with 1 update in the / directory: [mkdocs-material](https://github.com/squidfunk/mkdocs-material).


Updates `mkdocs-material` from 9.8.0 to 9.8.1
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.8.0...9.8.1)

---
updated-dependencies:
- dependency-name: mkdocs-material
  dependency-version: 9.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: docs-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/dev/docs-dependencies-fb10aa534d branch from 9c81c7f to 900476c Compare November 14, 2026 20:13

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: dependencies Related to managing upstream dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants