[codex] Fix Prism startup crashes

.github/dependabot.yml

@@ -9,8 +9,20 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 0
+    groups:
+      npm-security-updates:
+        applies-to: security-updates
+        patterns:
+          - "*"
 
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 0
+    groups:
+      github-actions-security-updates:
+        applies-to: security-updates
+        patterns:
+          - "*"

CHANGELOG.md

@@ -7,6 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Release notes since `v1.0.6`
+
+| Area | Package updates | Impact |
+| --- | --- | --- |
+| UI components | `bootstrap-vue-next` `0.42.0 -> 0.45.5` | Bootstrap component compatibility and rendering stability. |
+| Vue runtime | `vue` `3.5.34 -> 3.5.35`, `vue-router` `4.6.4 -> 5.0.6`, `@fortawesome/vue-fontawesome` `3.1.3 -> 3.2.0` | Framework and router patch updates, plus icon component compatibility. |
+| Icons | `@fortawesome/free-regular-svg-icons`, `@fortawesome/free-solid-svg-icons` | Updated icon set used by the UI. |
+| RDF and data handling | `rdflib` `2.3.8 -> 2.3.9`, `vis-data` `6.4.1 -> 8.0.4` | RDF parsing and graph/data handling updates. |
+| Tooling | `vite` `8.0.14 -> 8.0.16`, `core-js` `3.47.0 -> 3.49.0`, `semver` `7.8.0 -> 7.8.1`, `tmp` `0.2.5 -> 0.2.7`, `form-data` `4.0.5 -> 4.0.6` | Build/runtime and indirect dependency stability and security updates. |
+
+### Release process fixes since `v1.0.6`
+
+- `fix: make release tag selection stable` prevented the release workflow from picking the wrong tag.
+- `fix: skip existing release versions` prevented duplicate release creation for already published versions.
+- The Prism white-screen/startup crash is avoided by registering the Turtle and SPARQL grammars locally in the app, which keeps the patched Vite build workable.
+
 ## [v1.0.6] - 2026-05-05
 
 ### Changed

src/main.ts

@@ -6,11 +6,9 @@ import vSelect from 'vue-select'
 import 'bootstrap/dist/css/bootstrap.css'
 import 'bootstrap-vue-next/dist/bootstrap-vue-next.css'
 import 'prismjs/themes/prism.css'
+import '@/prism-languages'
 import 'vue-prism-editor/dist/prismeditor.min.css'
 import 'vue-select/dist/vue-select.css'
-import 'prismjs'
-import 'prismjs/components/prism-turtle'
-import 'prismjs/components/prism-sparql'
 import { createEntityConfigs } from '@/entity/entityConfigs'
 import type { EntitySpec } from '@/entity/EntityConfig'
 import App from './App.vue'

src/prism-languages.ts

@@ -0,0 +1,2 @@
+import 'prismjs/components/prism-turtle'
+import 'prismjs/components/prism-sparql'

vite.config.ts

@@ -2,9 +2,36 @@ import path from 'path'
 import { defineConfig } from 'vite'
 import vue from '@vitejs/plugin-vue'
 
+const prismGlobalComponents = new Set([
+  'prism-turtle.js',
+  'prism-sparql.js',
+])
+
+function prismComponentImportPlugin() {
+  return {
+    name: 'prism-component-import',
+    transform(code: string, id: string) {
+      const normalizedId = id.replaceAll('\\', '/')
+
+      if (!normalizedId.includes('/node_modules/prismjs/components/')) {
+        return undefined
+      }
+
+      if (!prismGlobalComponents.has(path.basename(normalizedId))) {
+        return undefined
+      }
+
+      // Prism language components expect a free global `Prism` script variable.
+      // Make it explicit for Vite/Rolldown module builds. Upstream issue:
+      // https://github.com/PrismJS/prism/issues/4088
+      return `import Prism from 'prismjs'\n${code}`
+    },
+  }
+}
+
 export default defineConfig(({ mode }) => ({
   base: mode === 'production' ? '/app/' : '/',
-  plugins: [vue()],
+  plugins: [prismComponentImportPlugin(), vue()],
   define: {
     global: 'globalThis',
     'process.env': {},