tree 0ac5be66b3f99ff070f3a7d079b72da6bc0bf99a
parent 4a2b2d36d7f5c6b279f8e163e15bb0f532bb69f0
author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1788507734 +0200
committer GitHub <noreply@github.com> 1788507734 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsFcBAABCAAQBQJqmnZWCRC1aQ7uu5UhlAAA/tIQAGFfJcEAxa/jtxgz0IVzmZar
 u1M5nLfKwC/vnv8d0O/zyE951luNYYfsVSZ0wJuiUQxJujWVuy9SAxWqVJn7wERf
 slfaah3qOnPMeCnCvM6N/kOyFSipKyKy6GxnIqtaZeZ2scoHK9aExGfepCAGa/nr
 DdU9ZvCGroxe9yy+PYHD9RhpOuPccOpG0wEGHJBTfRwFjR5yVl/yAH9eryViKFOF
 iJLj47nSHsXCwRDzggDIaI4B1tn+c3p+s+mT0Nc8Dnab9L5Qh1mS060Cv2AK4Aq3
 hL7ECJGS2X48WGCBtg1NpOcVA+sLmfIyckEEsuda+3IBIkTF/TKPbmr7qoY35adH
 WmYgA58xqGJuH/oagryUMoruRvBmi8JMcKdNcNxGFhfh8qs+ZIZIVTP++JL7+ahp
 kPCSe6d6ANg2nJX0CU3mxIdvvXOA7GCEXOtDrzwoWrqXgpzmmSHZ2dVtHVr9t4va
 85FSZRaYm7voiatEMYd1GkQ10rPca7Jk+YOJxOgf3GoNQcuGT7nwz5yAKo2Hd5Pw
 vMaGxkrmJMTpjyuZE3xCftPRvk0IKOscSU/zIDcK2FUbv9bhkrWmTEoYzvxCLP2R
 4gokelCmh6gddvy272enPnem57oWiFQHHmiHefTFhKTuufXeNKJwrsW7eFHxWEax
 NmT5t3t0EH0H2cOPj57t
 =XZhy
 -----END PGP SIGNATURE-----
 

Bump mkdocs-material from 9.7.2 to 9.7.7 in /docs/website (#24878)

Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material)
from 9.7.2 to 9.7.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/squidfunk/mkdocs-material/releases">mkdocs-material's
releases</a>.</em></p>
<blockquote>
<h2>mkdocs-material-9.7.7</h2>
<blockquote>
<p>[!WARNING]</p>
<p><strong>Material for MkDocs is approaching end of life</strong></p>
<p>Material for MkDocs is scheduled to reach end of life on November 5,
2026. Until then, maintenance is limited to critical bug fixes and
security updates. After this date, the project will remain available on
PyPI and GitHub, but no further maintenance is planned except in
exceptional circumstances.</p>
<p>For users looking for a long-term, actively developed successor,
we're building <a href="https://zensical.org">Zensical</a> – a
next-generation static site generator designed for technical
documentation. If you're planning a new documentation project or
evaluating your long-term options, we invite you to take a look.</p>
<p>Organizations requiring support beyond this date are welcome to get
in touch to discuss available options.</p>
<p><a
href="https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/">Read
the full announcement on our blog</a></p>
</blockquote>
<h2>Changes</h2>
<ul>
<li>Fixed a DOM-based XSS vulnerability in search suggestions</li>
</ul>
<blockquote>
<p>Thanks to <a href="https://github.com/p"><code>@​p</code></a>- for
responsibly reporting this issue.</p>
</blockquote>
<h2>mkdocs-material-9.7.6</h2>
<blockquote>
<p>[!WARNING]</p>
<p><strong>Material for MkDocs is in maintenance mode</strong></p>
<p>Going forward, the Material for MkDocs team focuses on <a
href="https://zensical.org">Zensical</a>, a next-gen static site
generator built from first principles. We will provide critical bug
fixes and security updates for Material for MkDocs until November
2026.</p>
<p><a
href="https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/">Read
the full announcement on our blog</a></p>
</blockquote>
<h2>Changes</h2>
<ul>
<li>Automatically disable MkDocs 2.0 warning for forks of MkDocs</li>
</ul>
<h2>mkdocs-material-9.7.5</h2>
<blockquote>
<p>[!WARNING]</p>
<p><strong>Material for MkDocs is in maintenance mode</strong></p>
<p>Going forward, the Material for MkDocs team focuses on <a
href="https://zensical.org">Zensical</a>, a next-gen static site
generator built from first principles. We will provide critical bug
fixes and security updates for Material for MkDocs until November
2026.</p>
<p><a
href="https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/">Read
the full announcement on our blog</a></p>
</blockquote>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG">mkdocs-material's
changelog</a>.</em></p>
<blockquote>
<p>mkdocs-material-9.7.7 (2026-07-17)</p>
<ul>
<li>Fixed DOM-based XSS vulnerability in search suggestions</li>
</ul>
<p>mkdocs-material-9.7.6 (2026-03-19)</p>
<ul>
<li>Automatically disable MkDocs 2.0 warning for forks of MkDocs</li>
</ul>
<p>mkdocs-material-9.7.5 (2026-03-10)</p>
<ul>
<li>Limited version range of mkdocs to &lt;2</li>
<li>Updated MkDocs 2.0 incompatibility warning (clarify relation with
MkDocs)</li>
</ul>
<p>mkdocs-material-9.7.4 (2026-03-03)</p>
<ul>
<li>Hardened social cards plugin by switching to sandboxed
environment</li>
<li>Updated MkDocs 2.0 incompatibility warning</li>
</ul>
<p>mkdocs-material-9.7.3 (2026-02-24)</p>
<ul>
<li>Fixed <a
href="https://redirect.github.com/squidfunk/mkdocs-material/issues/8567">#8567</a>:
Print MkDocs 2.0 incompatibility warning to stderr</li>
</ul>
<p>mkdocs-material-9.7.2 (2026-02-18)</p>
<ul>
<li>Opened up version ranges of optional dependencies for
forward-compatibility</li>
<li>Added warning to 'mkdocs build' about impending MkDocs 2.0
incompatibility</li>
</ul>
<p>mkdocs-material-9.7.1 (2025-12-18)</p>
<ul>
<li>Updated requests to 2.30+ to mitigate CVE in urllib</li>
<li>Fixed privacy plugin not picking up protocol-relative URLs</li>
<li>Fixed <a
href="https://redirect.github.com/squidfunk/mkdocs-material/issues/8542">#8542</a>:
false positives and negatives captured in privacy plugin</li>
</ul>
<p>mkdocs-material-9.7.0 (2025-11-11)</p>
<p>⚠️ Material for MkDocs is now in maintenance mode</p>
<p>This is the last release of Material for MkDocs that will receive new
features.
Going forward, the Material for MkDocs team focuses on Zensical, a
next-gen
static site generator built from first principles. We will provide
critical
bug fixes and security updates for Material for MkDocs for 12 months at
least.</p>
<p>Read the full announcement on our blog:
<a
href="https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/">https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/</a></p>
<p>This release includes all features that were previously exclusive to
the
Insiders edition. These features are now freely available to
everyone.</p>
<p>Note on deprecated plugins: The projects and typeset plugins are
included in
this release, but must be considered deprecated. Both plugins proved</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/squidfunk/mkdocs-material/commit/b3e6dd886a974aa8200759ecfd7db28c598a2894"><code>b3e6dd8</code></a>
Prepare 9.7.7 release</li>
<li><a
href="https://github.com/squidfunk/mkdocs-material/commit/52fb6be8aafe326419f34dc94d3211e7bbfbfb25"><code>52fb6be</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/squidfunk/mkdocs-material/commit/901e6335cc80b0f12e46a1e34bd85e983dd78a6e"><code>901e633</code></a>
Added <code>SECURITY.md</code> with EOL notice</li>
<li><a
href="https://github.com/squidfunk/mkdocs-material/commit/5b36f2ac499a45905e246bc66bbee2858ef6556f"><code>5b36f2a</code></a>
Bump js-yaml from 4.1.1 to 4.2.0 (<a
href="https://redirect.github.com/squidfunk/mkdocs-material/issues/8598">#8598</a>)</li>
<li><a
href="https://github.com/squidfunk/mkdocs-material/commit/2d11e7bc92c59b86d6ac0da2e38044fb4befa6e0"><code>2d11e7b</code></a>
Bump form-data from 3.0.4 to 3.0.5 (<a
href="https://redirect.github.com/squidfunk/mkdocs-material/issues/8597">#8597</a>)</li>
<li><a
href="https://github.com/squidfunk/mkdocs-material/commit/ae05a534a8c8e1c58eb6aa55d460d309bcfce22b"><code>ae05a53</code></a>
Bump esbuild from 0.27.2 to 0.28.1 (<a
href="https://redirect.github.com/squidfunk/mkdocs-material/issues/8596">#8596</a>)</li>
<li><a
href="https://github.com/squidfunk/mkdocs-material/commit/434af93166e5b90b78bba1295ca5a140fc67d0bc"><code>434af93</code></a>
Bump shell-quote from 1.7.3 to 1.8.4 (<a
href="https://redirect.github.com/squidfunk/mkdocs-material/issues/8593">#8593</a>)</li>
<li><a
href="https://github.com/squidfunk/mkdocs-material/commit/4447cdadcbe8bc82570e9f1ae2b970f461b03b68"><code>4447cda</code></a>
Documentation (<a
href="https://redirect.github.com/squidfunk/mkdocs-material/issues/8590">#8590</a>)</li>
<li><a
href="https://github.com/squidfunk/mkdocs-material/commit/8f8d551c9c5296dfc2a5ede35047bfb491d66bc9"><code>8f8d551</code></a>
Updated copyright year (<a
href="https://redirect.github.com/squidfunk/mkdocs-material/issues/8588">#8588</a>)</li>
<li><a
href="https://github.com/squidfunk/mkdocs-material/commit/08d8514d491782b4ac46673bcfdedb2f6fc85f3d"><code>08d8514</code></a>
Bump fast-uri from 3.0.3 to 3.1.2 (<a
href="https://redirect.github.com/squidfunk/mkdocs-material/issues/8587">#8587</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/squidfunk/mkdocs-material/compare/9.7.2...9.7.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mkdocs-material&package-manager=pip&previous-version=9.7.2&new-version=9.7.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/iree-org/iree/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>