Merge branch 'main' into serhalp/cmdk-palette

serhalp · web-flow · commit 7fe8390201df · 2026-04-06T07:21:00.000-04:00
diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           cache: true
diff --git a/.github/workflows/chromatic.yml b/.github/workflows/chromatic.yml
@@ -26,7 +26,7 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           cache: true
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -28,7 +28,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           run-install: false
@@ -46,7 +46,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           cache: true
@@ -61,7 +61,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           cache: true
@@ -82,7 +82,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           cache: true
@@ -114,7 +114,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           cache: true
@@ -137,7 +137,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           cache: true
@@ -158,7 +158,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           cache: true
@@ -173,7 +173,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           run-install: false
diff --git a/.github/workflows/lunaria.yml b/.github/workflows/lunaria.yml
@@ -28,7 +28,7 @@ jobs:
           # Makes the action clone the entire git history
           fetch-depth: 0
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           cache: true
diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           run-install: false
diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml
@@ -23,7 +23,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           run-install: false
@@ -95,7 +95,7 @@ jobs:
         with:
           ref: release
 
-      - uses: voidzero-dev/setup-vp@a03302daa50cf2f017c8c7345730c2740df207d6 # v1
+      - uses: voidzero-dev/setup-vp@8ecb39174989ce55af90f45cf55b02738599831d # v1
         with:
           node-version: lts/*
           registry-url: https://registry.npmjs.org
diff --git a/app/components/Package/Versions.vue b/app/components/Package/Versions.vue
@@ -211,12 +211,16 @@ const visibleTagRows = computed(() => {
       )
     : rowsMaybeFilteredForDeprecation
   const first = rows.slice(0, MAX_VISIBLE_TAGS)
-  const latestTagRow = rows.find(row => row.tag === 'latest')
-  // Ensure 'latest' tag is always included (at the end) if not already present
-  if (latestTagRow && !first.includes(latestTagRow)) {
-    first.pop()
-    first.push(latestTagRow)
+
+  // When no filter is active, ensure 'latest' is always shown (even if not fully loaded)
+  if (!isFilterActive.value) {
+    const latestTagRow = rows.find(row => row.tag === 'latest')
+    if (latestTagRow && !first.includes(latestTagRow)) {
+      first.pop()
+      first.push(latestTagRow)
+    }
   }
+
   return first
 })
 
diff --git a/app/components/Readme.vue b/app/components/Readme.vue
@@ -112,20 +112,25 @@ function handleClick(event: MouseEvent) {
 .readme :deep([data-level='1']) {
   font-size: 1.5rem;
 }
+
 .readme :deep([data-level='2']) {
   font-size: 1.25rem;
   padding-bottom: 0.5rem;
   border-bottom: 1px solid var(--border);
 }
+
 .readme :deep([data-level='3']) {
   font-size: 1.125rem;
 }
+
 .readme :deep([data-level='4']) {
   font-size: 1rem;
 }
+
 .readme :deep([data-level='5']) {
   font-size: 0.925rem;
 }
+
 .readme :deep([data-level='6']) {
   font-size: 0.875rem;
 }
@@ -137,9 +142,11 @@ function handleClick(event: MouseEvent) {
 .readme :deep(a) {
   @apply underline-offset-[0.2rem] underline decoration-1 decoration-fg/30 font-mono text-fg transition-colors duration-200;
 }
+
 .readme :deep(a:hover) {
   @apply decoration-accent text-accent;
 }
+
 .readme :deep(a:focus-visible) {
   @apply decoration-accent text-accent;
 }
@@ -318,10 +325,12 @@ function handleClick(event: MouseEvent) {
   border-inline-start-color: var(--syntax-str);
   background: rgba(59, 130, 246, 0.05);
 }
+
 .readme :deep(blockquote[data-callout='note']::before) {
   content: var(--i18n-note, 'Note');
   color: #3b82f6;
 }
+
 .readme :deep(blockquote[data-callout='note']::after) {
   background-color: #3b82f6;
   -webkit-mask: icon('i-lucide:info') no-repeat;
@@ -333,10 +342,12 @@ function handleClick(event: MouseEvent) {
   border-inline-start-color: #22c55e;
   background: rgba(34, 197, 94, 0.05);
 }
+
 .readme :deep(blockquote[data-callout='tip']::before) {
   content: var(--i18n-tip, 'Tip');
   color: #22c55e;
 }
+
 .readme :deep(blockquote[data-callout='tip']::after) {
   background-color: #22c55e;
   -webkit-mask: icon('i-lucide:lightbulb') no-repeat;
@@ -348,10 +359,12 @@ function handleClick(event: MouseEvent) {
   border-inline-start-color: var(--syntax-fn);
   background: rgba(168, 85, 247, 0.05);
 }
+
 .readme :deep(blockquote[data-callout='important']::before) {
   content: var(--i18n-important, 'Important');
   color: var(--syntax-fn);
 }
+
 .readme :deep(blockquote[data-callout='important']::after) {
   background-color: var(--syntax-fn);
   -webkit-mask: icon('i-lucide:pin') no-repeat;
@@ -363,10 +376,12 @@ function handleClick(event: MouseEvent) {
   border-inline-start-color: #eab308;
   background: rgba(234, 179, 8, 0.05);
 }
+
 .readme :deep(blockquote[data-callout='warning']::before) {
   content: var(--i18n-warning, 'Warning');
   color: #eab308;
 }
+
 .readme :deep(blockquote[data-callout='warning']::after) {
   background-color: #eab308;
   -webkit-mask: icon('i-lucide:triangle-alert') no-repeat;
@@ -378,10 +393,12 @@ function handleClick(event: MouseEvent) {
   border-inline-start-color: #ef4444;
   background: rgba(239, 68, 68, 0.05);
 }
+
 .readme :deep(blockquote[data-callout='caution']::before) {
   content: var(--i18n-caution, 'Caution');
   color: #ef4444;
 }
+
 .readme :deep(blockquote[data-callout='caution']::after) {
   background-color: #ef4444;
   -webkit-mask: icon('i-lucide:circle-alert') no-repeat;
@@ -457,4 +474,18 @@ function handleClick(event: MouseEvent) {
   white-space: nowrap;
   border-width: 0;
 }
+
+/* Details element */
+.readme :deep(details) {
+  /**
+   * same size as [data-level='5']
+   */
+  font-size: 0.925rem;
+  color: var(--fg-subtle);
+
+  summary {
+    font-size: 1rem;
+    color: var(--fg-muted);
+  }
+}
 </style>
diff --git a/package.json b/package.json
@@ -57,6 +57,7 @@
     "@iconify-json/svg-spinners": "1.2.4",
     "@iconify-json/vscode-icons": "1.2.45",
     "@intlify/shared": "11.3.0",
+    "@li/regexp-escape-polyfill": "jsr:0.3.4",
     "@lunariajs/core": "https://pkg.pr.new/lunariajs/lunaria/@lunariajs/core@904b935",
     "@napi-rs/canvas": "0.1.97",
     "@nuxt/a11y": "1.0.0-alpha.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/shared/utils/dev-dependency.ts b/shared/utils/dev-dependency.ts
@@ -1,3 +1,5 @@
+import { regExpEscape } from '@li/regexp-escape-polyfill'
+
 export type DevDependencySuggestionReason = 'known-package' | 'readme-hint'
 
 export interface DevDependencySuggestion {
@@ -59,15 +61,11 @@ function isKnownDevDependencyPackage(packageName: string): boolean {
   )
 }
 
-function escapeRegExp(text: string): string {
-  return text.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
-}
-
 function hasReadmeDevInstallHint(packageName: string, readmeContent?: string | null): boolean {
   if (!readmeContent) return false
 
-  const escapedName = escapeRegExp(packageName)
-  const escapedNpmName = escapeRegExp(`npm:${packageName}`)
+  const escapedName = regExpEscape(packageName)
+  const escapedNpmName = regExpEscape(`npm:${packageName}`)
   const packageSpec = `(?:${escapedName}|${escapedNpmName})(?:@[\\w.-]+)?`
 
   const patterns = [
diff --git a/shared/utils/emoji.ts b/shared/utils/emoji.ts
@@ -1,3 +1,5 @@
+import { regExpEscape } from '@li/regexp-escape-polyfill'
+
 // copied from https://github.com/markdown-it/markdown-it-emoji/blob/master/lib/data/full.mjs
 const emojis = {
   '100': '💯',
@@ -1907,7 +1909,7 @@ const emojis = {
 
 const emojisKeysRegex = new RegExp(
   Object.keys(emojis)
-    .map(key => `:${key}:`)
+    .map(key => `:${regExpEscape(key)}:`)
     .join('|'),
   'g',
 )
diff --git a/test/nuxt/components/Package/Versions.spec.ts b/test/nuxt/components/Package/Versions.spec.ts
@@ -1281,6 +1281,21 @@ describe('PackageVersions', () => {
         expect(text).not.toContain('0.5.0')
       })
     })
+
+    it('does not show latest tag when it does not match the filter', async () => {
+      const component = await mountSuspended(PackageVersions, { props: multiVersionProps })
+
+      const input = component.find('input[type="text"]')
+      await input.setValue('^1.0.0 <2.0.0')
+
+      const versionLinks = component.findAll('a').filter(isVersionLink)
+      const versions = versionLinks.map(l => l.text())
+
+      // 3.0.0 is latest but does NOT match the filter
+      expect(versions).not.toContain('3.0.0')
+      // 1.0.0 does match
+      expect(versions).toContain('1.0.0')
+    })
   })
 
   describe('error handling', () => {
