Bump @fedify/vocab from 2.0.6 to 2.0.7

[dependabot]

Bumps @fedify/vocab from 2.0.6 to 2.0.7.

Release notes

Sourced from @​fedify/vocab's releases.

Fedify 2.0.7

Released on March 22, 2026.

@​fedify/fedify

• Switched Fedify's source-based JSON-LD loading to the new @fedify/vocab-runtime/jsonld subpath so generated vocabulary code and Linked Data signature support no longer have to evaluate jsonld through a CommonJS-sensitive package root in Fresh 2, Deno, and other ESM-first runtimes. Fresh 2 development mode has been verified on Deno 2.7.7 after an upstream Deno 2.7.6 dev server regression was fixed. [#621, #639]

@​fedify/vocab-runtime

• Fixed multibase public key handling to stop relying on the deprecated CommonJS-only multicodec package. This removes the Vite SSR crash that prevented Fresh 2 applications from importing @fedify/fedify with TypeError: varint.encode is not a function. Fresh 2 no longer needs a Vite externalization workaround for Fedify. [#621, #639]

• Added the new @fedify/vocab-runtime/jsonld subpath export so generated vocabulary code and other Fedify runtime code can share a JSR-safe wrapper around jsonld's ESM entrypoint instead of depending on fragile relative shims or the package-root import path. [#621, #639]

@​fedify/init

• Revived removed fedify init options. [#632, #638 by ChanHaeng Lee]
  • bare-bones option for web framework.
  • in-memory option for key-value store.
  • in-process option for message queue.

Changelog

Sourced from @​fedify/vocab's changelog.

Version 2.0.7

Released on March 22, 2026.

@​fedify/fedify

• Switched Fedify's source-based JSON-LD loading to the new @fedify/vocab-runtime/jsonld subpath so generated vocabulary code and Linked Data signature support no longer have to evaluate jsonld through a CommonJS-sensitive package root in Fresh 2, Deno, and other ESM-first runtimes. Fresh 2 development mode has been verified on Deno 2.7.7 after an upstream Deno 2.7.6 dev server regression was fixed. [#621, #639]

#621: fedify-dev/fedify#621 #639: fedify-dev/fedify#639

@​fedify/vocab-runtime

• Fixed multibase public key handling to stop relying on the deprecated CommonJS-only multicodec package. This removes the Vite SSR crash that prevented Fresh 2 applications from importing @fedify/fedify with TypeError: varint.encode is not a function. Fresh 2 no longer needs a Vite externalization workaround for Fedify. [#621, #639]

• Added the new @fedify/vocab-runtime/jsonld subpath export so generated vocabulary code and other Fedify runtime code can share a JSR-safe wrapper around jsonld's ESM entrypoint instead of depending on fragile relative shims or the package-root import path. [#621, #639]

@​fedify/init

• Revived removed fedify init options. [#632, #638 by ChanHaeng Lee]
  • bare-bones option for web framework.
  • in-memory option for key-value store.
  • in-process option for message queue.

#632: fedify-dev/fedify#632 #638: fedify-dev/fedify#638

Commits

• 4054642 Use vocab-runtime jsonld subpath
• bc47a8c Avoid multicodec in vocab-runtime
• 7b8990b Version bump
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dahlia]

@dependabot rebase

[dependabot]

Looks like @fedify/vocab is up-to-date now, so this is no longer needed.