chore(deps): bump the website group in /website with 2 updates

[dependabot]

Bumps the website group in /website with 2 updates: docusaurus-plugin-llms and posthog-js.

Updates docusaurus-plugin-llms from 0.4.0 to 0.5.0

Changelog

Sourced from docusaurus-plugin-llms's changelog.

[0.5.0] - 2026-07-17

Added

• Multi-version output via a new versions option. Generate a separate set of LLM files per documentation version, each written under its own subdirectory with links scoped to that version's routes. Accepts an explicit array of versions ({ name, label, docsDir, path, customLLMFiles, includeOrder }) or 'auto' to detect them from Docusaurus docs versioning (versions.json + versioned_docs/). Omitting versions preserves the existing single-root behavior. Unset per-version fields fall back to the top-level options.

[0.4.5] - 2026-07-13

Fixed

• Code samples corrupted by content cleaning — HTML/JSX tag stripping, import removal (excludeImports), image-URL rewriting, and title detection now skip fenced code blocks and inline code, so examples shown in code blocks are preserved verbatim.
• Global version option ignored — it's now included in llms.txt/llms-full.txt (previously only per-custom-file version worked).
• draft: "true" — quoted-string frontmatter is now skipped like the boolean true.
• MDX/JSX component tags — tags like <Tabs>/<TabItem> are now stripped from generated text, keeping their inner content.
• Custom-file includeUnmatchedLast — now defaults to true (matching standard files), so includePatterns-selected docs aren't dropped when orderPatterns doesn't list them.
• pathTransformation.ignorePaths — no longer leaves a trailing slash when removing a terminal segment, and tolerates entries written with a trailing slash.
• buildImageAssetMap — no longer indexes non-image build assets.

[0.4.4] - 2026-07-13

Fixed

• .md links returning 404 (#41) — addMdExtension appended .md to llms.txt links by default, but the .md files are only produced when generateMarkdownFiles is enabled, so the links pointed to files that didn't exist. .md is now appended only when the markdown files are actually generated; otherwise links point to the normal doc routes.

[0.4.3] - 2026-07-13

Added

• useRelativeUrls option (#37, #42) — opt-in (false by default) that emits origin-relative links in llms.txt (e.g. /docs/page.md) instead of absolute URLs. Useful for subpath deployments where the site url can't be pinned to the real deployment host. The baseUrl portion of the path is preserved.

[0.4.2] - 2026-07-13

Fixed

• baseUrl dropped from generated URLs (#43) — sites deployed to a subpath (e.g. baseUrl: '/docs/') had the base path silently discarded, producing links to the wrong location. The baseUrl pathname is now preserved on both the resolved-route and fallback code paths, and is added to a route only when not already present (so it's never dropped or duplicated).
• Trailing slash in docsDir (#43) — a docsDir like 'foo/' produced a doubled slash that prevented the prefix from being stripped. The prefix is now normalized before use.

[0.4.1] - 2026-07-13

Added

• rewriteImageUrls option — opt-in (false by default) that rewrites relative image references (./img/, ../img/, ../../img/, etc.) in generated .md files and llms-full.txt to absolute hashed URLs served by the site (e.g. https://site.com/assets/images/diagram-abc123.png). Resolves images being inaccessible to LLMs reading the served markdown.
  • Scans build/assets/images/ after the build and builds a basename → hashed-path lookup map.
  • Uses byte-comparison to disambiguate when two source images share the same filename.

... (truncated)

Commits

• a2a23a0 Merge PR #56: multi-version llms output via versions option
• 306baba feat: multi-version llms output via versions option
• 2a33fca Merge PR #57: resolve @​site partials via siteDir
• f8f390a Tidy @​site partials test comment
• e79ceda Resolve @​site partials via siteDir instead of process.cwd()
• bb07820 Merge PR #55: resolve @​site alias partials (#54)
• 417a199 Wire @​site alias partial test into test:unit
• b2230f6 Add test for @​site alias partial resolution
• 36118e2 Resolve partials imported via @​site alias and partials directories
• 2bb78e3 Merge PR #53: split utils.ts into focused modules
• Additional commits viewable in compare view

Updates posthog-js from 1.399.2 to 1.404.1

Release notes

Sourced from posthog-js's releases.

posthog-js@1.404.1

1.404.1

Patch Changes

• #4191 66c1666 Thanks @​turnipdabeets! - Honour the project-level autocapture opt-out when the remote config request fails. Previously a failed config fetch (network error, timeout, blocked request) enabled autocapture on opted-out projects and persisted that state for later page loads. Autocapture now keeps the last successfully received server value, and stays off until the first successful config response. (2026-07-17)

posthog-js@1.404.0

1.404.0

Minor Changes

• #4149 607bf54 Thanks @​pauldambra! - Add dead swipe detection to dead clicks autocapture. When dead clicks autocapture is enabled, touch swipe gestures that produce no observable screen change (no scroll, mutation, selection or visibility change) are now captured as $dead_swipe events, surfacing failed navigations on touch devices. Configurable via capture_dead_swipes (default true) and swipe_threshold_px (default 30) on the capture_dead_clicks config. Swipes over surfaces whose response cannot be observed (canvas, video and other media elements under the finger) are skipped, and captures are limited per page load via max_dead_swipes_per_page_load (default 10). (2026-07-16)

Patch Changes

• #4171 df17ddc Thanks @​posthog! - Catch synchronous throws from a monkey-patched window.fetch so they no longer escape as unhandled exceptions. A synchronous throw is now routed through the same handling as an async rejection, so the request queue retries instead of the error leaking into error tracking. (2026-07-16)
• Updated dependencies [607bf54]:
  • @​posthog/types@​1.397.0

posthog-js@1.403.0

1.403.0

Minor Changes

• #4159 fad6d9a Thanks @​haacked! - add $feature_flag_has_experiment to $feature_flag_called events

  $feature_flag_called events now carry a $feature_flag_has_experiment boolean sourced from the server's has_experiment flag metadata (the /flags?v=2 response for remote evaluation, the /api/feature_flag/local_evaluation definitions for posthog-node local evaluation). The property is only sent when the server explicitly reports has_experiment; it is omitted entirely when the value is unknown (older servers, missing metadata, bootstrapped or locally injected flags). (2026-07-16)

Patch Changes

• Updated dependencies [fad6d9a]:
  • @​posthog/core@​1.43.0
  • @​posthog/types@​1.396.0

posthog-js@1.402.3

1.402.3

Patch Changes

• #4157 4a2ecf5 Thanks @​posthog! - Session recording no longer emits an uncaught NotAllowedError ("Sharing constructed stylesheets in multiple documents is not allowed") when a page assigns a CSSStyleSheet constructed in a different document to adoptedStyleSheets. That assignment is the host page's own invalid operation, but the recorder's patched setter sat on the call stack, so the exception was attributed to rrweb and churned fingerprints in error tracking. The recorder now contains this specific rejection (matched by its standardized NotAllowedError name, so it works even when the setter throws from an iframe realm) and skips recording those sheets, while still re-throwing any other native-setter error so host-page behaviour is preserved. (2026-07-15)

• #4158 0dc389e Thanks @​posthog! - fix(replay): session recording no longer throws TypeError: Converting circular structure to JSON when replay event data contains a circular reference. The circular-reference guard now also detects cycles that pass through an array, and affected events are captured with [Circular] markers instead of surfacing an unhandled error and being dropped. (2026-07-15)

• Updated dependencies [fc2cb2e]:

  • @​posthog/core@​1.42.1

... (truncated)

Commits

• da1d781 chore: update versions and lockfile [version bump]
• 8bf1b19 chore: ban object-literal type assertions in package sources (#4192)
• 66c1666 fix(autocapture): keep server opt-out when remote config fetch fails (#4191)
• 635b73e chore: update versions and lockfile [version bump]
• 7b8a11c feat: publish browser-common (#4190)
• 6326610 chore: update versions and lockfile [version bump]
• 45f5488 feat(prompts): Fetch prompts by label (#4163)
• 97b2a55 chore: update versions and lockfile [version bump]
• 607bf54 feat(dead-clicks): detect dead swipes as $dead_swipe events (#4149)
• df17ddc fix(web): route synchronous fetch throws through the request queue (#4171)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: javascript. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[atmos-pro]

Tip

Atmos Pro  

No affected stacks workflow was detected for this pull request.
If this is expected, no action is needed.
Learn More. Ask AI.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Files

• website/pnpm-lock.yaml

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.77%. Comparing base (08b6452) to head (f5cb45f).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2853   +/-   ##
=======================================
  Coverage   82.77%   82.77%           
=======================================
  Files        1861     1861           
  Lines      180480   180480           
=======================================
+ Hits       149390   149392    +2     
+ Misses      23304    23298    -6     
- Partials     7786     7790    +4     

Flag	Coverage Δ
unittests	82.77% <ø> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 9 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.