chore(deps): pin @citation-js/* to 0.7 until node-fetch v3 bundling fix

@citation-js/* 0.8 pulls in node-fetch v3, which lacks a browser field and does not bundle cleanly due to its node:* imports, breaking the frontend build. Pin to the last 0.7 release until the upstream fix (citation-js/citation-js#277) is released. Assisted-by: Claude:Opus 4.8
2026-07-14 21:20:55 +00:00 · 2026-07-14 12:15:02 +02:00
parent c29f2a65af
commit a22e1690c0
3 changed files with 104 additions and 84 deletions
--- a/package.json
+++ b/package.json
@@ -6,9 +6,9 @@
    "pnpm": ">= 11.0.0"
  },
  "dependencies": {
-    "@citation-js/core": "0.8.1",
-    "@citation-js/plugin-bibtex": "0.8.1",
-    "@citation-js/plugin-csl": "0.8.1",
+    "@citation-js/core": "0.7.21",
+    "@citation-js/plugin-bibtex": "0.7.21",
+    "@citation-js/plugin-csl": "0.7.22",
    "@citation-js/plugin-software-formats": "0.6.2",
    "@codemirror/autocomplete": "6.20.3",
    "@codemirror/commands": "6.10.4",
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -9,14 +9,14 @@ importers:
  .:
    dependencies:
      '@citation-js/core':
-        specifier: 0.8.1
-        version: 0.8.1
+        specifier: 0.7.21
+        version: 0.7.21
      '@citation-js/plugin-bibtex':
-        specifier: 0.8.1
-        version: 0.8.1(@citation-js/core@0.8.1)
+        specifier: 0.7.21
+        version: 0.7.21(@citation-js/core@0.7.21)
      '@citation-js/plugin-csl':
-        specifier: 0.8.1
-        version: 0.8.1(@citation-js/core@0.8.1)
+        specifier: 0.7.22
+        version: 0.7.22(@citation-js/core@0.7.21)
      '@citation-js/plugin-software-formats':
        specifier: 0.6.2
        version: 0.6.2
@@ -383,9 +383,9 @@ packages:
  '@chevrotain/types@11.1.2':
    resolution: {integrity: sha512-U+HFai5+zmJCkK86QsaJtoITlboZHBqrVketcO2ROv865xfCMSFpELQoz1GkX5GzME8pTa+3kbKrZHQtI0gdbw==}

-  '@citation-js/core@0.8.1':
-    resolution: {integrity: sha512-fjDrD6jxxjm8zOMit4O5jXaDRdMJeowlOSWnqUi1gGZMDkeTLa/L3qVQrGZpMWeZIaTcB4ohl47U5I7XCjvoig==}
-    engines: {node: '>=20.19.0'}
+  '@citation-js/core@0.7.21':
+    resolution: {integrity: sha512-Vobv2/Yfnn6C6BVO/pvj7madQ7Mfzl83/jAWwixbemGF6ZThhGMz8++FD9hWHyHXDMYuLGa6fK68c2VsolZmTA==}
+    engines: {node: '>=16.0.0'}

  '@citation-js/date@0.5.1':
    resolution: {integrity: sha512-1iDKAZ4ie48PVhovsOXQ+C6o55dWJloXqtznnnKy6CltJBQLIuLLuUqa8zlIvma0ZigjVjgDUhnVaNU1MErtZw==}
@@ -395,21 +395,21 @@ packages:
    resolution: {integrity: sha512-brSPsjs2fOVzSnARLKu0qncn6suWjHVQtrqSUrnqyaRH95r/Ad4wPF5EsoWr+Dx8HzkCGb/ogmoAzfCsqlTwTQ==}
    engines: {node: '>=6'}

-  '@citation-js/plugin-bibtex@0.8.1':
-    resolution: {integrity: sha512-q1LVVxV5ft4GdqTmJUGM0S39qyV9smuzFq40/aCIjBJwLR7444eux7TNK1v43NeU/Zb6Uw6/C5aL+eFHlJYNvA==}
-    engines: {node: '>=20.19.0'}
+  '@citation-js/plugin-bibtex@0.7.21':
+    resolution: {integrity: sha512-O008pSsJgiYKn4+7gAWrbNpNdUH++aMeYmZaJ2oFQ8X1tcY5jNBxJcr0zZojNtUi5CVOaXXHQ0yIifoUhuF2Vg==}
+    engines: {node: '>=16.0.0'}
    peerDependencies:
-      '@citation-js/core': ^0.8.0
+      '@citation-js/core': ^0.7.0

  '@citation-js/plugin-cff@0.6.2':
    resolution: {integrity: sha512-jvERDFbtQQOBb9s+E8VbRIYsEIb2YEbcLH3yVDxXK0xqBGQDE5m8JZAYUkENy4FmbaD979l0+xJTWAsYN1pV/w==}
    engines: {node: '>=14.0.0'}

-  '@citation-js/plugin-csl@0.8.1':
-    resolution: {integrity: sha512-sNsOurODHoNE3W1RcYokh2fG2jdZZ1QAIf8oUygqoLF/DR+wELucus3VW4wfNYWqtgSJMRCfel74oRwyYYuL5A==}
-    engines: {node: '>=20.19.0'}
+  '@citation-js/plugin-csl@0.7.22':
+    resolution: {integrity: sha512-/rGdtbeP3nS4uZDdEbQUHT8PrUcIs0da2t+sWMKYXoOhXQqfw3oJJ7p4tUD+R8lptyIR5Eq20/DFk/kQDdLpYg==}
+    engines: {node: '>=16.0.0'}
    peerDependencies:
-      '@citation-js/core': ^0.8.0
+      '@citation-js/core': ^0.7.0

  '@citation-js/plugin-github@0.6.2':
    resolution: {integrity: sha512-NKq/1Ja060o4II1Z4p1+utwpvMsx+XIWdNiFvnJDfR2Z9E1xGETjByPpdobGBsteUTpJPEe9OVfF8Dee/Q7zLQ==}
@@ -1758,6 +1758,9 @@ packages:
    resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
    engines: {node: 18 || 20 || >=22}

+  base64-js@1.5.1:
+    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
+
  baseline-browser-mapping@2.10.33:
    resolution: {integrity: sha512-bA6+tcSLpz2tIEdDXZPpPTIuxBcC4+w6SieaYyfigIa4h8GlFxbA17v22Vx3JUtuZQj9SgOsnbK+aTBzyDyEuw==}
    engines: {node: '>=6.0.0'}
@@ -1790,6 +1793,9 @@ packages:
    resolution: {integrity: sha512-nEh+kZOPY1w+gcCMobZ6ETUp9WfibndnosbpwB1iJk/8Gt5ZF2bhS6+B6bPYz424KtwsR6Rflc3tCz1/ghX2dQ==}
    engines: {node: '>=4.0'}

+  buffer@5.7.1:
+    resolution: {integrity: sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==}
+
  builtin-modules@3.3.0:
    resolution: {integrity: sha512-zhaCDicdLuWN5UbN5IMnFqNMhNfo919sH85y2/ea+5Yg9TsTkeZxpL+JLbp6cgYFS4sRLp3YV4S6yDuqVWHYOw==}
    engines: {node: '>=6'}
@@ -2169,10 +2175,6 @@ packages:
  dagre-d3-es@7.0.14:
    resolution: {integrity: sha512-P4rFMVq9ESWqmOgK+dlXvOtLwYg0i7u0HBGJER0LZDJT2VHIPAMZ/riPxqJceWMStH5+E61QxFra9kIS3AqdMg==}

-  data-uri-to-buffer@4.0.1:
-    resolution: {integrity: sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==}
-    engines: {node: '>= 12'}
-
  data-urls@3.0.2:
    resolution: {integrity: sha512-Jy/tj3ldjZJo63sVAvg6LHt2mHvl4V6AgRAmNDtLdm7faqtsx+aJG42rsyCo9JCoRVKwPFzKlIPx3DIibwSIaQ==}
    engines: {node: '>=12'}
@@ -2599,9 +2601,8 @@ packages:
      picomatch:
        optional: true

-  fetch-blob@3.2.0:
-    resolution: {integrity: sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==}
-    engines: {node: ^12.20 || >= 14.13}
+  fetch-ponyfill@7.1.0:
+    resolution: {integrity: sha512-FhbbL55dj/qdVO3YNK7ZEkshvj3eQ7EuIGV2I6ic/2YiocvyWv+7jg2s4AyS0wdRU75s3tA8ZxI/xPigb0v5Aw==}

  fflate@0.8.2:
    resolution: {integrity: sha512-cPJU47OaAoCbg0pBvzsgpTPhmhqI5eJjh/JIu8tPj5q+T7iLvW/JAYUqmE7KOB4R1ZyEhzBaIQpQpardBF5z8A==}
@@ -2643,10 +2644,6 @@ packages:
    resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==}
    engines: {node: '>= 6'}

-  formdata-polyfill@4.0.10:
-    resolution: {integrity: sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==}
-    engines: {node: '>=12.20.0'}
-
  fsevents@2.3.2:
    resolution: {integrity: sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==}
    engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
@@ -2809,6 +2806,9 @@ packages:
  idiomorph@0.7.4:
    resolution: {integrity: sha512-uCdSpLo3uMfqOmrwXTpR1k/sq4sSmKC7l4o/LdJOEU+MMMq+wkevRqOQYn3lP7vfz9Mv+USBEqPvi0XhdL9ENw==}

+  ieee754@1.2.1:
+    resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
+
  ignore@5.3.2:
    resolution: {integrity: sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==}
    engines: {node: '>= 4'}
@@ -3406,18 +3406,27 @@ packages:
  natural-compare@1.4.0:
    resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==}

-  node-domexception@1.0.0:
-    resolution: {integrity: sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ==}
-    engines: {node: '>=10.5.0'}
-    deprecated: Use your platform's native DOMException instead
-
  node-exports-info@1.6.0:
    resolution: {integrity: sha512-pyFS63ptit/P5WqUkt+UUfe+4oevH+bFeIiPPdfb0pFeYEu/1ELnJu5l+5EcTKYL5M7zaAa7S8ddywgXypqKCw==}
    engines: {node: '>= 0.4'}

-  node-fetch@3.3.2:
-    resolution: {integrity: sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+  node-fetch@2.6.13:
+    resolution: {integrity: sha512-StxNAxh15zr77QvvkmveSQ8uCQ4+v5FkvNTj0OESmiHu+VRi/gXArXtkWMElOsOUNLtUEvI4yS+rdtOHZTwlQA==}
+    engines: {node: 4.x || >=6.0.0}
+    peerDependencies:
+      encoding: ^0.1.0
+    peerDependenciesMeta:
+      encoding:
+        optional: true
+
+  node-fetch@2.7.0:
+    resolution: {integrity: sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==}
+    engines: {node: 4.x || >=6.0.0}
+    peerDependencies:
+      encoding: ^0.1.0
+    peerDependenciesMeta:
+      encoding:
+        optional: true

  node-releases@2.0.46:
    resolution: {integrity: sha512-GYVXHE2KnrzAfsAjl4uP++evGFCrAU1jta4ubEjIG7YWt/64Gqv66a30yKwWczVjA6j3bM4nBwH7Pk1JmDHaxQ==}
@@ -4018,9 +4027,9 @@ packages:
  symbol-tree@3.2.4:
    resolution: {integrity: sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==}

-  sync-fetch@0.6.0:
-    resolution: {integrity: sha512-IELLEvzHuCfc1uTsshPK58ViSdNqXxlml1U+fmwJIKLYKOr/rAtBrorE2RYm5IHaMpDNlmC0fr1LAvdXvyheEQ==}
-    engines: {node: '>=18'}
+  sync-fetch@0.4.5:
+    resolution: {integrity: sha512-esiWJ7ixSKGpd9DJPBTC4ckChqdOjIwJfYhVHkcQ2Gnm41323p1TRmEI+esTQ9ppD+b5opps2OTEGTCGX5kF+g==}
+    engines: {node: '>=14'}

  table@6.9.0:
    resolution: {integrity: sha512-9kY+CygyYM6j02t5YFHbNz2FN5QmYGv9zAjVp4lCDjlCw7amdckXlEt/bjMhUIfj4ThGRE4gCUH5+yGnNuPo5A==}
@@ -4045,10 +4054,6 @@ packages:
    resolution: {integrity: sha512-B71/4oyj61iNH0KeCamLuE2rmKuTO5byTOSVwECM5FA7TiAiAW+UqTKZ9ERueC4qvgSttUhdmq1mXC3kJqGX7A==}
    engines: {node: '>=12.22'}

-  timeout-signal@2.0.0:
-    resolution: {integrity: sha512-YBGpG4bWsHoPvofT6y/5iqulfXIiIErl5B0LdtHT1mGXDFTAhhRrbUpTvBgYbovr+3cKblya2WAOcpoy90XguA==}
-    engines: {node: '>=16'}
-
  tinybench@2.9.0:
    resolution: {integrity: sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==}

@@ -4078,6 +4083,9 @@ packages:
    resolution: {integrity: sha512-Loo5UUvLD9ScZ6jh8beX1T6sO1w2/MpCRpEP7V280GKMVUQ0Jzar2U3UJPsrdbziLEMMhu3Ujnq//rhiFuIeag==}
    engines: {node: '>=6'}

+  tr46@0.0.3:
+    resolution: {integrity: sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==}
+
  tr46@3.0.0:
    resolution: {integrity: sha512-l7FvfAHlcmulp8kr+flpQZmVwtu7nfRV7NZujtN0OqES8EL4O4e0qqzL0DC5gAvx/ZC/9lk6rhcUwYvkBnBnYA==}
    engines: {node: '>=12'}
@@ -4319,9 +4327,8 @@ packages:
    resolution: {integrity: sha512-d+BFHzbiCx6zGfz0HyQ6Rg69w9k19nviJspaj4yNscGjrHu94sVP+aRm75yEbCh+r2/yR+7q6hux9LVtbuTGBw==}
    engines: {node: '>=14'}

-  web-streams-polyfill@3.3.3:
-    resolution: {integrity: sha512-d2JWLCivmZYTSIoge9MsgFCZrt571BikcWGYkjC1khllbTeDlGqZ2D8vD8E/lJa8WGWbb7Plm8/XJYV7IJHZZw==}
-    engines: {node: '>= 8'}
+  webidl-conversions@3.0.1:
+    resolution: {integrity: sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==}

  webidl-conversions@7.0.0:
    resolution: {integrity: sha512-VwddBukDzu71offAQR975unBIGqfKZpM+8ZX6ySk8nYhVoo5CYaZyzt3YBvYtRtO+aoGlqxPg/B87NGVZ/fu6g==}
@@ -4336,14 +4343,13 @@ packages:
    resolution: {integrity: sha512-nt+N2dzIutVRxARx1nghPKGv1xHikU7HKdfafKkLNLindmPU/ch3U31NOCGGA/dmPcmb1VlofO0vnKAcsm0o/Q==}
    engines: {node: '>=12'}

-  whatwg-mimetype@4.0.0:
-    resolution: {integrity: sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==}
-    engines: {node: '>=18'}
-
  whatwg-url@11.0.0:
    resolution: {integrity: sha512-RKT8HExMpoYx4igMiVMY83lN6UeITKJlBQ+vR/8ZJ8OCdSiN3RwCq+9gH0+Xzj0+5IrM6i4j/6LuvzbZIQgEcQ==}
    engines: {node: '>=12'}

+  whatwg-url@5.0.0:
+    resolution: {integrity: sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==}
+
  which-boxed-primitive@1.1.1:
    resolution: {integrity: sha512-TbX3mj8n0odCBFVlY8AxkqcHASw3L60jIuF8jFP78az3C2YhmGvqbHBpAjTRH2/xqYunrJ9g1jSyjCjpoWzIAA==}
    engines: {node: '>= 0.4'}
@@ -4456,20 +4462,22 @@ snapshots:

  '@chevrotain/types@11.1.2': {}

-  '@citation-js/core@0.8.1':
+  '@citation-js/core@0.7.21':
    dependencies:
      '@citation-js/date': 0.5.1
      '@citation-js/name': 0.4.2
-      node-fetch: 3.3.2
-      sync-fetch: 0.6.0
+      fetch-ponyfill: 7.1.0
+      sync-fetch: 0.4.5
+    transitivePeerDependencies:
+      - encoding

  '@citation-js/date@0.5.1': {}

  '@citation-js/name@0.4.2': {}

-  '@citation-js/plugin-bibtex@0.8.1(@citation-js/core@0.8.1)':
+  '@citation-js/plugin-bibtex@0.7.21(@citation-js/core@0.7.21)':
    dependencies:
-      '@citation-js/core': 0.8.1
+      '@citation-js/core': 0.7.21
      '@citation-js/date': 0.5.1
      '@citation-js/name': 0.4.2
      moo: 0.5.3
@@ -4479,9 +4487,9 @@ snapshots:
      '@citation-js/date': 0.5.1
      '@citation-js/plugin-yaml': 0.6.2

-  '@citation-js/plugin-csl@0.8.1(@citation-js/core@0.8.1)':
+  '@citation-js/plugin-csl@0.7.22(@citation-js/core@0.7.21)':
    dependencies:
-      '@citation-js/core': 0.8.1
+      '@citation-js/core': 0.7.21
      '@citation-js/date': 0.5.1
      citeproc: 2.4.63

@@ -6007,6 +6015,8 @@ snapshots:

  balanced-match@4.0.4: {}

+  base64-js@1.5.1: {}
+
  baseline-browser-mapping@2.10.33: {}

  binary-extensions@2.3.0: {}
@@ -6039,6 +6049,11 @@ snapshots:
    dependencies:
      '@types/node': 26.1.1

+  buffer@5.7.1:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
  builtin-modules@3.3.0: {}

  builtin-modules@5.2.0: {}
@@ -6427,8 +6442,6 @@ snapshots:
      d3: 7.9.0
      lodash-es: 4.18.1

-  data-uri-to-buffer@4.0.1: {}
-
  data-urls@3.0.2:
    dependencies:
      abab: 2.0.6
@@ -6993,10 +7006,11 @@ snapshots:
    optionalDependencies:
      picomatch: 4.0.5

-  fetch-blob@3.2.0:
+  fetch-ponyfill@7.1.0:
    dependencies:
-      node-domexception: 1.0.0
-      web-streams-polyfill: 3.3.3
+      node-fetch: 2.6.13
+    transitivePeerDependencies:
+      - encoding

  fflate@0.8.2: {}

@@ -7045,10 +7059,6 @@ snapshots:
      hasown: 2.0.4
      mime-types: 2.1.35

-  formdata-polyfill@4.0.10:
-    dependencies:
-      fetch-blob: 3.2.0
-
  fsevents@2.3.2:
    optional: true

@@ -7233,6 +7243,8 @@ snapshots:

  idiomorph@0.7.4: {}

+  ieee754@1.2.1: {}
+
  ignore@5.3.2: {}

  ignore@7.0.5: {}
@@ -7958,8 +7970,6 @@ snapshots:

  natural-compare@1.4.0: {}

-  node-domexception@1.0.0: {}
-
  node-exports-info@1.6.0:
    dependencies:
      array.prototype.flatmap: 1.3.3
@@ -7968,11 +7978,13 @@ snapshots:
      semver: 6.3.1
    optional: true

-  node-fetch@3.3.2:
+  node-fetch@2.6.13:
    dependencies:
-      data-uri-to-buffer: 4.0.1
-      fetch-blob: 3.2.0
-      formdata-polyfill: 4.0.10
+      whatwg-url: 5.0.0
+
+  node-fetch@2.7.0:
+    dependencies:
+      whatwg-url: 5.0.0

  node-releases@2.0.46: {}

@@ -8664,11 +8676,12 @@ snapshots:

  symbol-tree@3.2.4: {}

-  sync-fetch@0.6.0:
+  sync-fetch@0.4.5:
    dependencies:
-      node-fetch: 3.3.2
-      timeout-signal: 2.0.0
-      whatwg-mimetype: 4.0.0
+      buffer: 5.7.1
+      node-fetch: 2.7.0
+    transitivePeerDependencies:
+      - encoding

  table@6.9.0:
    dependencies:
@@ -8718,8 +8731,6 @@ snapshots:

  throttle-debounce@5.0.2: {}

-  timeout-signal@2.0.0: {}
-
  tinybench@2.9.0: {}

  tinyexec@1.2.4: {}
@@ -8748,6 +8759,8 @@ snapshots:
      universalify: 0.2.0
      url-parse: 1.5.10

+  tr46@0.0.3: {}
+
  tr46@3.0.0:
    dependencies:
      punycode: 2.3.1
@@ -8986,7 +8999,7 @@ snapshots:
    dependencies:
      xml-name-validator: 4.0.0

-  web-streams-polyfill@3.3.3: {}
+  webidl-conversions@3.0.1: {}

  webidl-conversions@7.0.0: {}

@@ -8996,13 +9009,16 @@ snapshots:

  whatwg-mimetype@3.0.0: {}

-  whatwg-mimetype@4.0.0: {}
-
  whatwg-url@11.0.0:
    dependencies:
      tr46: 3.0.0
      webidl-conversions: 7.0.0

+  whatwg-url@5.0.0:
+    dependencies:
+      tr46: 0.0.3
+      webidl-conversions: 3.0.1
+
  which-boxed-primitive@1.1.1:
    dependencies:
      is-bigint: 1.1.0
--- a/renovate.json5
+++ b/renovate.json5
@@ -39,6 +39,10 @@
      "matchPackageNames": ["tailwindcss"],
      "allowedVersions": "^3", // need to migrate
    },
+    {
+      "matchPackageNames": ["@citation-js/core", "@citation-js/plugin-bibtex", "@citation-js/plugin-csl"],
+      "allowedVersions": "<0.8", // 0.8 pulls in node-fetch v3 which does not bundle cleanly, see https://github.com/citation-js/citation-js/pull/277
+    },
    {
      "matchPackageNames": ["github.com/Azure/azure-sdk-for-go/sdk/azcore"],
      "allowedVersions": "<1.21.0", // v1.21.0+ uses API version unsupported by Azurite in CI