chore(deps): Bump scalar-fastapi from 1.8.2 to 1.9.0

[dependabot]

Bumps scalar-fastapi from 1.8.2 to 1.9.0.

Release notes

Sourced from scalar-fastapi's releases.

Release 2026-08-28

Releases

@​scalar/hono-api-reference@​0.12.0

Minor Changes

• #9976: Add Scalar.serve() to render the API reference and serve its OpenAPI document from a single mount. Instead of wiring a separate document route and keeping the reference's url in sync, mount it once with app.route('/scalar', Scalar.serve({ document })). document accepts an OpenAPI object or a function that returns one (for example () => app.getOpenAPI31Document(...) from Zod OpenAPI Hono), and the JSON path is configurable via documentPath.

@​scalar/api-client@​3.17.0

Minor Changes

• feat: test OpenAPI webhooks from the API reference and API client

Patch Changes

• #9983: Bump the zod catalog to ^4.4.3 so the standalone bundle ships a single zod instead of two (4.3.5 from @scalar/types plus 4.4.3 from the ai / @ai-sdk peer). This makes standalone.js ~68KB raw / ~18KB gzip smaller.
• #10024: Fix "Test Request" discarding an edited request body when the operation it opens is already the one on screen. Reopening the entry the modal already shows does not route anywhere, so the request body kept its edited value while the composition selection was replaced with whatever the reference page had selected. The request body read that as a manual oneOf/anyOf branch switch and regenerated itself from the schema. An open modal now keeps the selection it is already showing, while opening a different entry still re-establishes it.

@​scalar/api-reference@​1.67.0

Minor Changes

• #10043: Resolve heading levels from a block's place in the page outline instead of hardcoding them, so a block rendered on its own starts at h1.

  A block now assumes it is the top of the page: rendered alone, an operation's title is the h1 and everything it contains follows beneath it. A component that renders several blocks alongside each other owns the relationship between them and anchors the outline — Content renders the info block above the tags and operations, so it declares document and the rest resolve against it. Composed into a full reference, every heading renders at the level it always has.

  Also fixes two headings that never went through the heading components: the classic-layout operation title was a raw h3, and the classic-layout Models section label passed a level prop to a component that does not accept one, so it rendered no heading element at all.

• feat: test OpenAPI webhooks from the API reference and API client

Patch Changes

• #9983: Bump the zod catalog to ^4.4.3 so the standalone bundle ships a single zod instead of two (4.3.5 from @scalar/types plus 4.4.3 from the ai / @ai-sdk peer). This makes standalone.js ~68KB raw / ~18KB gzip smaller.
• #9965: Fix oneOf selector labels showing the shared allOf base name instead of the variant's own name. When a oneOf branch extended a common base through a single-$ref allOf (a common inheritance pattern), flattening that allOf for display left the base schema's own identity ($ref, title, or name) on the flattened variant, so the selector picked up the base's name for every branch instead of each branch's own name.
• #9973: Fix the "OAuth scopes" section rendering for any security scheme with a non-empty scope array, including http and apiKey schemes. Scopes are only meaningful for oauth2 and openIdConnect schemes, so the section is now skipped when the resolved scheme is of a different type.
• #9289: fix response example panel to reflect selected content type from the response dropdown
• #9968: Move the schema Pattern hover chip next to the Example chip so it no longer collides with the preceding constraint (for example max length: 26Pattern). Real constraints like length and nullable now stay together in the dotted list.

@​scalar/asyncapi-validator@​0.1.0

Minor Changes

• #9967: Add @scalar/asyncapi-validator, a package that validates AsyncAPI documents (2.x and 3.x) against the AsyncAPI Specification. It is built on @scalar/json-schema-validator and uses the official schemas from @asyncapi/specs.

@​scalar/components@​0.29.0

Minor Changes

• #10025: Breaking: ScalarHeader no longer lays out its own columns. The start and end slots have been removed in favour of composing ScalarHeaderColumn children in the default slot, and a new is prop lets the header render as something other than a header element.

  Columns hug their content. Give the content-bearing column flex-1 so it takes the free space — that is also the column that absorbs the shrinking when space runs out.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)