[dependabot]

Bumps quantecon-book-theme from 0.22.0 to 0.22.2.

Release notes

Sourced from quantecon-book-theme's releases.

v0.22.2

Fixed

• Links that open in a new tab now carry rel="noopener" (#429) — the seven target="_blank" links in the page template had no rel hardening. Author and translator byline links get noopener (keeping rel="author" on authors), so the sites they point at still see referrer attribution; the toolbar's "View Source" links and the "Launch Notebook" button get noopener noreferrer. Browsers released since 2021 already imply noopener for target="_blank", so this is defence in depth and keeps the template consistent for security linters.
• The dark-mode toolbar button's tooltip now says "Toggle dark mode" (#132) — it still said "Change contrast", the feature's pre-0.18.0 name, while the docs and the rest of the UI call it dark mode. The localStorage key is unchanged, so existing readers keep their setting.
• The page header no longer shows "Author name not set" (#428) — a site that sets neither the theme's authors option nor Sphinx's author rendered that literal text on every page. Sphinx 7.4 changed its default author from unknown to Author name not set, and the guard in the theme only knew the old string. The theme now treats both placeholders as unset, removes the author key from the page context (so the same stale value written by sphinx_book_theme cannot leak through either), and leaves the authors paragraph out of the header altogether instead of rendering it empty.

Documentation

• README links to the published docs and the developer guide (#9) — adds PyPI and documentation badges, and replaces a link to a docs/contributing/ path that no longer exists with the developer guide at docs/developer/.

v0.22.1

Changed

• Theme assets are now compiled on Node.js 24.21.0 — sphinx-theme-builder installs its own Node.js into .nodeenv/ at the version pinned under [tool.sphinx-theme-builder] in pyproject.toml, and that Node runs npm install and webpack for every wheel: the PyPI release, CI and local installs. The pin still read 20.18.0 after CI's setup-node steps and .nvmrc moved to Node 24 in #401, so the published assets were still being built on Node 20, which reached end-of-life in April 2026. It is now 24.21.0, the current Node 24 LTS, and .nvmrc names the same exact version so nvm use matches the build. The compiled CSS and JS are byte-identical to the Node 20 build. After pulling this change, a local checkout with an existing .nodeenv/ fails with nodeenv-version-mismatch until it is removed (rm -rf .nodeenv); see the troubleshooting section of the developer setup guide. With .nvmrc pinned exactly, run nvm install once after each bump, since nvm use only switches to a version already installed. Building from source (an sdist, pip install --no-binary, or a git install) now needs a platform that nodejs.org ships a Node 24 binary for, which excludes 32-bit ARM Linux (linux-armv7l) and 32-bit Windows; the py3-none-any wheel on PyPI is unaffected.

Fixed

• "View Source" no longer links to None on generated pages (#384) — Sphinx's generated pages (genindex.html, search.html, and domain indices such as sphinx-proof's prf-prf.html) have no source document, so the theme has no repository URL for them, and the toolbar's GitHub button rendered as <a href="None">, which link checkers report as a missing file. The button is now left out on those pages; every other page keeps it, with the same link as before. A site that sets no repository_url had the same broken button on every page, and now shows none.
• Pages no longer request the missing _static/scripts/sphinx-book-theme.js (#454) — the theme sets up sphinx_book_theme as an extension for its Python features, and that registers sphinx-book-theme's own script on every page. The file lives in sphinx-book-theme's static folder, which is only copied when sphinx-book-theme is the active theme, so the script has never loaded on a quantecon-book-theme site and every page 404'd on it. The theme now drops that registration straight after setting the extension up, so the request goes away and nothing else changes. This holds whether the theme sets sphinx-book-theme up itself or Jupyter Book 1 has already loaded it from its default extensions.

CI

• /update-snapshots regenerates all baselines again — the workflow and npm run test:visual:update (used by tox -e visual-update) passed a bare --update-snapshots, which since Playwright 1.50 means changed: only snapshots that fail comparison are rewritten. A real change small enough to stay within the screenshot tolerance therefore left the baselines untouched, and the summary comment wrongly said the regenerated snapshots "came out identical". One example is the toolbar's GitHub icon disappearing from the fixtures site after #453. Both now pass --update-snapshots=all, which rewrites every baseline whose render differs, as the developer docs describe. The snapshot-update-diff artifact now holds only the regenerated images, so the docs and the summary comment point to the PR's Files changed view for before and after.

Changelog

Sourced from quantecon-book-theme's changelog.

[0.22.2] - 2026-11-05

Fixed

• Links that open in a new tab now carry rel="noopener" (#429) — the seven target="_blank" links in the page template had no rel hardening. Author and translator byline links get noopener (keeping rel="author" on authors), so the sites they point at still see referrer attribution; the toolbar's "View Source" links and the "Launch Notebook" button get noopener noreferrer. Browsers released since 2021 already imply noopener for target="_blank", so this is defence in depth and keeps the template consistent for security linters.
• The dark-mode toolbar button's tooltip now says "Toggle dark mode" (#132) — it still said "Change contrast", the feature's pre-0.18.0 name, while the docs and the rest of the UI call it dark mode. The localStorage key is unchanged, so existing readers keep their setting.
• The page header no longer shows "Author name not set" (#428) — a site that sets neither the theme's authors option nor Sphinx's author rendered that literal text on every page. Sphinx 7.4 changed its default author from unknown to Author name not set, and the guard in the theme only knew the old string. The theme now treats both placeholders as unset, removes the author key from the page context (so the same stale value written by sphinx_book_theme cannot leak through either), and leaves the authors paragraph out of the header altogether instead of rendering it empty.

Documentation

• README links to the published docs and the developer guide (#9) — adds PyPI and documentation badges, and replaces a link to a docs/contributing/ path that no longer exists with the developer guide at docs/developer/.

[0.22.1] - 2026-10-09

Changed

• Theme assets are now compiled on Node.js 24.21.0 — sphinx-theme-builder installs its own Node.js into .nodeenv/ at the version pinned under [tool.sphinx-theme-builder] in pyproject.toml, and that Node runs npm install and webpack for every wheel: the PyPI release, CI and local installs. The pin still read 20.18.0 after CI's setup-node steps and .nvmrc moved to Node 24 in #401, so the published assets were still being built on Node 20, which reached end-of-life in April 2026. It is now 24.21.0, the current Node 24 LTS, and .nvmrc names the same exact version so nvm use matches the build. The compiled CSS and JS are byte-identical to the Node 20 build. After pulling this change, a local checkout with an existing .nodeenv/ fails with nodeenv-version-mismatch until it is removed (rm -rf .nodeenv); see the troubleshooting section of the developer setup guide. With .nvmrc pinned exactly, run nvm install once after each bump, since nvm use only switches to a version already installed. Building from source (an sdist, pip install --no-binary, or a git install) now needs a platform that nodejs.org ships a Node 24 binary for, which excludes 32-bit ARM Linux (linux-armv7l) and 32-bit Windows; the py3-none-any wheel on PyPI is unaffected.

Fixed

• "View Source" no longer links to None on generated pages (#384) — Sphinx's generated pages (genindex.html, search.html, and domain indices such as sphinx-proof's prf-prf.html) have no source document, so the theme has no repository URL for them, and the toolbar's GitHub button rendered as <a href="None">, which link checkers report as a missing file. The button is now left out on those pages; every other page keeps it, with the same link as before. A site that sets no repository_url had the same broken button on every page, and now shows none.
• Pages no longer request the missing _static/scripts/sphinx-book-theme.js (#454) — the theme sets up sphinx_book_theme as an extension for its Python features, and that registers sphinx-book-theme's own script on every page. The file lives in sphinx-book-theme's static folder, which is only copied when sphinx-book-theme is the active theme, so the script has never loaded on a quantecon-book-theme site and every page 404'd on it. The theme now drops that registration straight after setting the extension up, so the request goes away and nothing else changes. This holds whether the theme sets sphinx-book-theme up itself or Jupyter Book 1 has already loaded it from its default extensions.

CI

• /update-snapshots regenerates all baselines again — the workflow and npm run test:visual:update (used by tox -e visual-update) passed a bare --update-snapshots, which since Playwright 1.50 means changed: only snapshots that fail comparison are rewritten. A real change small enough to stay within the screenshot tolerance therefore left the baselines untouched, and the summary comment wrongly said the regenerated snapshots "came out identical". One example is the toolbar's GitHub icon disappearing from the fixtures site after #453. Both now pass --update-snapshots=all, which rewrites every baseline whose render differs, as the developer docs describe. The snapshot-update-diff artifact now holds only the regenerated images, so the docs and the summary comment point to the PR's Files changed view for before and after.

Commits

• 2deedb1 Release version 0.22.2 (#479)
• 865073a fix: suppress default Sphinx author placeholder (#430)
• 53967a1 fix: harden new-tab links, rename the dark-mode tooltip, fix README docs link...
• 29e4e87 ⬆️ bump serialize-javascript from 7.0.5 to 7.1.4 (#475)
• 1cfbcd5 ⬆️ bump qs from 6.15.3 to 6.17.1 (#477)
• ece1e6b ⬆️ bump launch-editor from 2.14.1 to 2.14.2 (#467)
• 73405c7 ⬆️ bump compression from 1.8.1 to 1.8.2 (#458)
• 17a9c0c ⬆️ bump browserslist from 4.28.1 to 4.29.5 (#469)
• 6cbb54c ⬆️ bump fast-uri from 3.1.5 to 3.1.9 (#470)
• 1603462 ⬆️ bump svgo from 4.0.2 to 4.1.0 (#439)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[netlify]

✅ Deploy Preview for taupe-gaufre-c4e660 ready!

Name	Link
🔨 Latest commit	bce004c
🔍 Latest deploy log	https://app.netlify.com/projects/taupe-gaufre-c4e660/deploys/6af8dcda26636fa67ccf85d3
😎 Deploy Preview	https://deploy-preview-869--taupe-gaufre-c4e660.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.