Bump docmd-search from 0.1.1 to 0.1.3 in /Docs

[dependabot]

Bumps docmd-search from 0.1.1 to 0.1.3.

Release notes

Sourced from docmd-search's releases.

docmd-search@0.1.3

Offline semantic search engine for documentation with local vector embeddings and browser-ready search indexes.

Dependency Metadata & Peer Security Constraints

• Enforced Minimum Peer Dependency Ranges: Added explicit minimum peer dependency version constraints for underlying binary and utility modules (sharp >=0.35.0, adm-zip >=0.6.0, protobufjs >=7.6.5, onnxruntime-node >=1.27.0).
• Clean Audit Assurance: Resolves transitive audit warnings when installed in end-user applications without requiring custom "overrides" blocks in the user's package.json.

Installation

npm install docmd-search@0.1.3

Full Changelog: docmd-io/docmd-search@0.1.2...0.1.3

docmd-search@0.1.2 🛡️ (Security Update)

Offline semantic search engine for documentation with local vector embeddings and browser-ready search indexes.

Security & Dependency Updates

• Patched Dependency Vulnerabilities: Resolved all 5 reported security vulnerabilities (0 vulnerabilities in npm audit).
  • Upgraded protobufjs to ^7.6.5 (mitigating DoS in .proto option parsing).
  • Enforced adm-zip to ^0.6.0 via overrides (patching 4GB memory allocation vulnerability).
  • Upgraded sharp to ^0.35.0 via overrides (resolving inherited libvips security advisories).
• Node.js Engine Minimum: Standardised engines.node requirement to >=20.0.0.
• GitHub Actions Runners: Updated CI workflows (.github/workflows/*.yml) to use Node 24.

Installation

npm install docmd-search@0.1.2

Usage Example

import { createSearchIndex, searchDocumentation } from 'docmd-search';
// Generate offline vector embeddings index
const index = await createSearchIndex({
docsDir: './docs'
});
// Perform local semantic query
const results = await searchDocumentation(index, 'How to configure custom domain');
console.log(results);

Full Changelog: docmd-io/docmd-search@0.1.1...0.1.2

Commits

• 85d6cae fix(overrides): use self-referencing syntax to prevent EOVERRIDE conflicts
• 1d70178 chore: bump version to 0.1.3
• 29e2ab9 chore(deps): add minimum version requirements for sharp, adm-zip, protobufjs ...
• 7ae0bc6 chore: bump version to 0.1.2
• 639e930 fix(deps): patch security vulnerabilities (adm-zip, protobufjs, sharp) and re...
• b5ed51b chore: bump minimum Node.js requirement to >=22.0.0
• 53c397c Deleted
• 20a8017 Update README.md
• 6ff4b51 fix(config): rename project output dir .docmd-search → _docmd-search; global ...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)