[dependabot]

Bumps the minor-updates group with 2 updates: pagefind and @lhci/cli.

Updates pagefind from 1.5.2 to 1.6.0

Release notes

Sourced from pagefind's releases.

v1.6.0

👋 A little overdue, but this release knocks out a healthy selection of bug reports, and includes a lot of work from the community. Thanks to everyone who contributed ❤️ - @​bglw

Multilingual Segmentation

Pagefind's extended build now segments Chinese, Japanese, and Thai pages with ICU4X, replacing the previous dependency (PR #1383). Alongside producing a smaller binary, ICU4X segments a lot closer to the Intl.Segmenter used in the browser on the search query (which is ICU4C). This closes out a mixture of latent and reported issues where the different segmentation between indexing and searching makes for iffy results. It's not perfect yet, but it's a darn sight closer.

Bonuses:

• Segmentation is smarter in languages such as Thai, and doesn't break inside a grapheme cluster
• Japanese katakana has special handling, but should still be improved over 1.5.2
• Japanese voiced and semi-voiced sound marks are no longer normalized into each other

Fewer Fragment Files

Pagefind now has an option to limit the total number of fragment files produced, for hosting providers that cap the number of uploaded files. Contributed in PR #1020 — thanks @​yakovsh !

This limit is set with --max-fragments / max_fragments, and applies per language. When applied, multiple fragments are bundled together and loaded as a set when required.

See 📘 Max fragments.

Explicit Sub-Result Titles

Added support for explicit sub-result titles. Any element with both an id and a data-pagefind-title attribute can be used as a sub-result (PR #1282 — thanks @​samuel-williams-shopify !)

See 📘 Defining a sub result explicitly.

Component UI

• Added a sort attribute to <pagefind-config>, to order results by a sort key (PR #1326)
• Added a max-sub-results attribute to <pagefind-searchbox> (PR #1324)
• Added a placeholder setter to <pagefind-searchbox> and <pagefind-modal-trigger> (PR #1321)
• configureInstance now applies to an instance that already exists but has not loaded yet (PR #1323)
• Fixed the UI language being resolved after the first render, which could flash the wrong translations (PR #1332)
• Fixed component cleanup after being disconnected (PR #1322)
• Fixed IME composition keystrokes support (PR #1284 — thanks @​oharu121 !)
• Fixed the modal staying open when clicking a result for the current page (PR #1327)
• Fixed the filter panel checkbox shrinking when its label wraps (PR #1166 — thanks @​mbrambilla !)
• Hid the keyboard shortcut badge on touch-only devices (PR #1325)

Search Results & Options

• Added an excerptEllipsis option to mark the truncated ends of excerpts (PR #1320)
  • See 📘 Excerpt ellipsis
• Fixed phrase search across diacritic variants, so searching "cafe latte" can match a page containing café latte (PR #1386 — thanks @​sean0407 !)
• Fixed filters not matching values containing escaped characters such as quotes or backslashes (PR #1392)
• Fixed compound words being counted twice in metadata coverage, which could overvalue a metadata match (PR #1319)
• Fixed a bug which could build excerpts from the wrong words (PR #1318)
• Fixed decoding for HTML entities in the automatic image and image_alt metadata (PR #1393 — thanks @​digilist !)

... (truncated)

Changelog

Sourced from pagefind's changelog.

v1.6.0 (November 1, 2026)

👋 A little overdue, but this release knocks out a healthy selection of bug reports, and includes a lot of work from the community. Thanks to everyone who contributed ❤️ - @​bglw

Multilingual Segmentation

Pagefind's extended build now segments Chinese, Japanese, and Thai pages with ICU4X, replacing the previous dependency (PR #1383). Alongside producing a smaller binary, ICU4X segments a lot closer to the Intl.Segmenter used in the browser on the search query (which is ICU4C). This closes out a mixture of latent and reported issues where the different segmentation between indexing and searching makes for iffy results. It's not perfect yet, but it's a darn sight closer.

Bonuses:

• Segmentation is smarter in languages such as Thai, and doesn't break inside a grapheme cluster
• Japanese katakana has special handling, but should still be improved over 1.5.2
• Japanese voiced and semi-voiced sound marks are no longer normalized into each other

Fewer Fragment Files

Pagefind now has an option to limit the total number of fragment files produced, for hosting providers that cap the number of uploaded files. Contributed in PR #1020 — thanks @​yakovsh !

This limit is set with --max-fragments / max_fragments, and applies per language. When applied, multiple fragments are bundled together and loaded as a set when required.

See 📘 Max fragments.

Explicit Sub-Result Titles

Added support for explicit sub-result titles. Any element with both an id and a data-pagefind-title attribute can be used as a sub-result (PR #1282 — thanks @​samuel-williams-shopify !)

See 📘 Defining a sub result explicitly.

Component UI

• Added a sort attribute to <pagefind-config>, to order results by a sort key (PR #1326)
• Added a max-sub-results attribute to <pagefind-searchbox> (PR #1324)
• Added a placeholder setter to <pagefind-searchbox> and <pagefind-modal-trigger> (PR #1321)
• configureInstance now applies to an instance that already exists but has not loaded yet (PR #1323)
• Fixed the UI language being resolved after the first render, which could flash the wrong translations (PR #1332)
• Fixed component cleanup after being disconnected (PR #1322)
• Fixed IME composition keystrokes support (PR #1284 — thanks @​oharu121 !)
• Fixed the modal staying open when clicking a result for the current page (PR #1327)
• Fixed the filter panel checkbox shrinking when its label wraps (PR #1166 — thanks @​mbrambilla !)
• Hid the keyboard shortcut badge on touch-only devices (PR #1325)

Search Results & Options

• Added an excerptEllipsis option to mark the truncated ends of excerpts (PR #1320)
  • See 📘 Excerpt ellipsis
• Fixed phrase search across diacritic variants, so searching "cafe latte" can match a page containing café latte (PR #1386 — thanks @​sean0407 !)
• Fixed filters not matching values containing escaped characters such as quotes or backslashes (PR #1392)
• Fixed compound words being counted twice in metadata coverage, which could overvalue a metadata match (PR #1319)
• Fixed a bug which could build excerpts from the wrong words (PR #1318)
• Fixed decoding for HTML entities in the automatic image and image_alt metadata (PR #1393 — thanks @​digilist !)

... (truncated)

Commits

• 860a4ea Changelog for 1.6.0
• deea3c9 Changelog (#1403)
• 13ebd8e Update multilignual docs (#1402)
• 0544804 Adding support for fewer number of fragment files (#74 and #739) (#1020)
• 9b465ea fix: percent-encode page URLs built from file paths (#1335)
• fcf939c chore(deps): bump certifi (#1385)
• 124b73c fix: EACCES during playground build (#1371)
• f537e50 Fix exact phrase matching across diacritic variants (#1386)
• a0d31b7 Decode HTML entities in the automatic image metadata (#1393)
• c9d4fda Perf: group matching words by page before scoring (#1334)
• Additional commits viewable in compare view

Updates @lhci/cli from 0.15.1 to 0.16.0

Release notes

Sourced from @​lhci/cli's releases.

v0.16.0

v0.16.0 (2026-11-02)

• feat: upgrade to lighthouse 13.6.0 (#1152) (5aa2faf), closes #1152
• feat(cli): support multiple locales in filesystem upload (#1173) (79b609a), closes #1173
• feat(server): add CLS median graph to project dashboard (#1190) (80c2782), closes #1190
• feat(server): support subitems in audit detail pane (#1186) (4db2b5d), closes #1186
• feat(server): support list and checklist audit details in diffing and UI (#1158) (abd2bc0), closes #1158
• feat(server): add audit_cumulative-layout-shift_median statistic (#1155) (331ec55), closes #1155
• feat(utils): fix insight presets and map replaced legacy audits (#1151) (0b39a32), closes #1151
• feat(viewer): add locale switcher to report comparison UI (#1174) (44c608c), closes #1174
• fix(cli): bind FallbackServer to loopback address (#1182) (966ba2d), closes #1182
• fix(cli): catch executablePath error for puppeteer-core in getChromiumPath (#1159) (08b9802), closes #1159
• fix(cli): close Puppeteer browser when collect finishes (#1163) (0359261), closes #1163
• fix(cli): prefer project Puppeteer installation (#1144) (02021f5), closes #1144
• fix(cli): decode stdout and stderr as utf8 in node-runner (#1156) (f88133a), closes #1156
• fix(docker): upgrade base image to node:22-bookworm-slim (#1150) (9c0ee54), closes #1150
• fix(server): render 0 values in audit table details (#1185) (ba536cc), closes #1185
• fix(server): use timing-safe comparison for build and admin tokens (#1180) (ca52d40), closes #1180
• fix(server): use numericUnit and support KiB/MiB in numeric-diff (#1157) (6945cf9), closes #1157
• fix(utils): reject git refs starting with a dash in build-context (#1183) (9c8f1c1), closes #1183
• fix(utils): prevent prototype pollution in lodash merge (#1181) (71fc88e), closes #1181
• fix(utils): match pre-grouped audit items across locales (#1175) (39a3518), closes #1175
• fix(utils): check url/origin before entity in getItemKey (#1172) (b27cadc), closes #1172
• fix(utils): avoid filename collision in saveLHR (#1166) (e6aa7c1), closes #1166
• fix(utils): support string entity key in audit-diff-finder (#1154) (818f6d0), closes #1154
• fix(utils): respect median-run aggregation in category assertions (#1146) (46b2846), closes #1146
• docs: document collecting and uploading multiple configurations (mobile/desktop) (#1184) (3c1431e), closes #1184
• test: fix and update seed-data fixture (#1189) (03514f8)
• test(cli): normalize report link in autorun-github.test.js (#1153) (a0b25d6), closes #1153
• test(server): update snapshots in e2e and storybook tests (#1171) (b169a9d), closes #1171
• test(server): define setImmediate in storybook.test.jsx (#1170) (a3d0ff8), closes #1170
• chore: bump version references to 0.15.1 (ebee453)
• chore: bump to node 22 (#1149) (bc6321c), closes #1149
• chore: bump version references to 0.16 and add node engines requirement (#1194) (6e4f473), closes #1194
• chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#1193) (9f33b5d), closes #1193
• chore(deps): bump ts-jest to ^29.4.15 for TypeScript 6 support (#1191) (493c76f), closes #1191
• chore(deps): update runtime dependencies and security advisories (#1192) (4701152), closes #1192
• chore(deps): bump fast-uri from 3.1.8 to 3.1.9 in the npm_and_yarn group across 1 directory (#1178) (dae03de), closes #1178
• chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates (#1177) (85d3343), closes #1177
• chore(deps): update typescript to 6.0.3 (#1162) (a10daa8), closes #1162
• chore(deps): update dependencies to address security vulnerabilities (#1161) (e4a892f), closes #1161
• chore(deps): bump puppeteer to ^24.43.1 (#1164) (3a5808b), closes #1164
• chore(deps): remove tmp dependency (#1141) (679f74b), closes #1141
• chore(deps): bump inquirer from 6.x to 8.2.7 (#1140) (d36fdee), closes #1140
• misc(release): include dist in server and viewer npm packages (#1187) (8c19aa4), closes #1187
• misc(release): deploy GitHub Pages via publish workflow (#1188) (9c89ccf), closes #1188
• misc(release): add GHA publish workflow for npm, multi-arch Docker (#1176) (c965460), closes #1176

... (truncated)

Commits

• 6e4f473 chore: bump version references to 0.16 and add node engines requirement (#1194)
• 9f33b5d chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#...
• 493c76f chore(deps): bump ts-jest to ^29.4.15 for TypeScript 6 support (#1191)
• 4701152 chore(deps): update runtime dependencies and security advisories (#1192)
• 80c2782 feat(server): add CLS median graph to project dashboard (#1190)
• 03514f8 test: fix and update seed-data fixture (#1189)
• 8c19aa4 misc(release): include dist in server and viewer npm packages (#1187)
• 9c89ccf misc(release): deploy GitHub Pages via publish workflow (#1188)
• 4db2b5d feat(server): support subitems in audit detail pane (#1186)
• ba536cc fix(server): render 0 values in audit table details (#1185)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​lhci/cli since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml