Bump the all-ui-bundles group across 1 directory with 4 updates

[dependabot]

Bumps the all-ui-bundles group with 4 updates in the / directory: @scalar/api-reference, @stoplight/elements, redoc and swagger-ui-dist.

Updates @scalar/api-reference from 1.66.1 to 1.68.0

Changelog

Sourced from @​scalar/api-reference's changelog.

1.68.0

Minor Changes

• #9937: Add a way to open the request body editor in the Form view by default. Set the defaultRequestBodyView: 'form' config option, or the x-scalar-default-request-body-view extension in your OpenAPI document (which also works per source). Defaults to raw, and falls back to raw when a body cannot be shown as a form.

Patch Changes

• #10066: Show referenced model names for array branches in schema composition selectors.
• #10058: chore: upgrade to Storybook 10.5.10 and drop the third-party dark mode addon

1.67.0

Minor Changes

• #10043: Resolve heading levels from a block's place in the page outline instead of hardcoding them, so a block rendered on its own starts at h1.

  A block now assumes it is the top of the page: rendered alone, an operation's title is the h1 and everything it contains follows beneath it. A component that renders several blocks alongside each other owns the relationship between them and anchors the outline — Content renders the info block above the tags and operations, so it declares document and the rest resolve against it. Composed into a full reference, every heading renders at the level it always has.

  Also fixes two headings that never went through the heading components: the classic-layout operation title was a raw h3, and the classic-layout Models section label passed a level prop to a component that does not accept one, so it rendered no heading element at all.

• feat: test OpenAPI webhooks from the API reference and API client

Patch Changes

• #9983: Bump the zod catalog to ^4.4.3 so the standalone bundle ships a single zod instead of two (4.3.5 from @scalar/types plus 4.4.3 from the ai / @ai-sdk peer). This makes standalone.js ~68KB raw / ~18KB gzip smaller.
• #9965: Fix oneOf selector labels showing the shared allOf base name instead of the variant's own name. When a oneOf branch extended a common base through a single-$ref allOf (a common inheritance pattern), flattening that allOf for display left the base schema's own identity ($ref, title, or name) on the flattened variant, so the selector picked up the base's name for every branch instead of each branch's own name.
• #9973: Fix the "OAuth scopes" section rendering for any security scheme with a non-empty scope array, including http and apiKey schemes. Scopes are only meaningful for oauth2 and openIdConnect schemes, so the section is now skipped when the resolved scheme is of a different type.
• #9289: fix response example panel to reflect selected content type from the response dropdown
• #9968: Move the schema Pattern hover chip next to the Example chip so it no longer collides with the preceding constraint (for example max length: 26Pattern). Real constraints like length and nullable now stay together in the dotted list.

Commits

• See full diff in compare view

Updates @stoplight/elements from 9.0.24 to 9.0.25

Commits

• See full diff in compare view

Updates redoc from 2.5.3 to 2.5.4

Changelog

Sourced from redoc's changelog.

2.5.4 (2026-09-10)

Bug Fixes

• Fix accessibility errors reported by pa11y (#2837) (1424bfd)
• Resolve js-yaml, fast-uri and brace-expansion vulnerabilities (#2832) (6188dc4)
• Bump dompurify from 3.4.6 to 3.4.13 (#2824) (616398b)

Commits

• See full diff in compare view

Updates swagger-ui-dist from 5.32.14 to 5.32.15

Release notes

Sourced from swagger-ui-dist's releases.

v5.32.15

5.32.15 (2026-09-04)

Bug Fixes

• oas32: include query in default supportedSubmitMethods (#11021) (c26e573)
• use scoped DOMPurify instance to avoid mutating global (#11029) (182fb83)

Commits

• eb37d16 chore(release): cut the 5.32.15 release
• 09de8cd chore(deps-dev): bump browserslist from 4.28.1 to 4.28.8 (#11032)
• c0ebd36 chore(deps-dev): bump fast-uri from 3.1.5 to 3.1.7 (#11031)
• 4a28782 chore(deps): bump postcss-selector-parser from 7.1.0 to 7.1.5 (#11030)
• 182fb83 fix: use scoped DOMPurify instance to avoid mutating global (#11029)
• d715d6c refactor(deep-linking): convert layout to TypeScript and fix license issue (#...
• 7757ca4 chore(deps): bump immutable from 4.3.9 to 5.1.9 (#11025)
• c26e573 fix(oas32): include query in default supportedSubmitMethods (#11021)
• 0c10b51 chore(deps-dev): bump cypress from 15.20.0 to 15.20.1 (#11012)
• f341af5 chore(deps): bump nginx from 1.31.3-alpine to 1.31.4-alpine (#11020)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions