@diplodoc/client 5.7.6 → 5.7.8

package/.github/CODEOWNERS

@@ -1 +1 @@
-* @diplodoc-platform/team
+* @diplodoc-platform/team @diplodoc-bot

package/.github/workflows/coverage.yml

@@ -29,19 +29,10 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
+      - name: Setup Node.js and install dependencies
+        uses: diplodoc-platform/setup-node-action@v1
         with:
-          node-version: ${{ vars.NODE_VERSION }}
-          cache: 'npm'
-
-      - name: Install latest npm (>= 11.5.1)
-        run: |
-          [ "$(printf '%s\n' "11.5.1" "$(npm -v)" | sort -V | head -n1)" = "11.5.1" ] || npm install -g npm@11.5.1
-        shell: bash
-
-      - name: Install dependencies
-        run: npm ci
+          node-version: ${{ vars.NODE_VERSION || '24' }}
 
       - name: Run tests with coverage
         id: coverage-run
@@ -62,8 +53,15 @@ jobs:
           path: coverage/
           retention-days: 7
 
+      # Secrets aren't exposed to workflows triggered by pull_request from a fork,
+      # so SONAR_TOKEN is empty and SonarCloud responds with "Project not found".
+      # Skip the scan in that case — coverage artifact is still uploaded above.
       - name: SonarCloud Scan
-        if: success() && steps.coverage-run.outputs.ran == 'true'
+        if: |
+          success() &&
+          steps.coverage-run.outputs.ran == 'true' &&
+          (github.event_name != 'pull_request' ||
+           github.event.pull_request.head.repo.full_name == github.repository)
         uses: SonarSource/sonarqube-scan-action@v7.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

package/.github/workflows/package-lock.yml

@@ -16,6 +16,10 @@ jobs:
   update-package-lock:
     name: Update package-lock.json
     runs-on: ubuntu-latest
+    # Skip for PRs from forks: the bot token isn't available in fork context
+    # (actions/checkout fails with "Input required: token"), and we couldn't
+    # push back into the fork's branch anyway.
+    if: github.event.pull_request.head.repo.full_name == github.repository
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -25,16 +29,11 @@ jobs:
           token: ${{ secrets.YC_UI_BOT_GITHUB_TOKEN }}
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: diplodoc-platform/setup-node-action@v1
         with:
-          node-version: ${{ vars.NODE_VERSION }}
+          node-version: ${{ vars.NODE_VERSION || '24' }}
           registry-url: 'https://registry.npmjs.org'
-          cache: 'npm'
-
-      - name: Install latest npm (>= 11.5.1)
-        run: |
-          [ "$(printf '%s\n' "11.5.1" "$(npm -v)" | sort -V | head -n1)" = "11.5.1" ] || npm install -g npm@11.5.1
-        shell: bash
+          run-install: 'false'
 
       - name: Regenerate package-lock.json
         run: npm install --no-workspaces --package-lock-only --ignore-scripts

package/.github/workflows/release.yml

@@ -59,19 +59,16 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: diplodoc-platform/setup-node-action@v1
         with:
-          node-version: ${{ vars.NODE_VERSION }}
+          node-version: ${{ vars.NODE_VERSION || '24' }}
           registry-url: 'https://registry.npmjs.org'
+          cache: ''
+          run-install: 'false'
 
       - uses: codex-team/action-nodejs-package-info@v1
         id: package
 
-      - name: Install latest npm (>= 11.5.1)
-        run: |
-          [ "$(printf '%s\n' "11.5.1" "$(npm -v)" | sort -V | head -n1)" = "11.5.1" ] || npm install -g npm@11.5.1
-        shell: bash
-
       - name: Install dependencies
         if: inputs.release_type != 'deprecate'
         run: npm ci
@@ -125,14 +122,21 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       # === DEPRECATE STEPS ===
+      # workflow_dispatch inputs are user-controlled. Do not interpolate them
+      # directly into a shell script (${{ inputs.* }} in run:) — pass them
+      # through env: and reference as "$VAR" so quotes / $(...) / ;-chains in
+      # input values cannot escape into the shell.
       - name: Validate deprecate inputs
         if: github.event_name == 'workflow_dispatch' && inputs.release_type == 'deprecate'
+        env:
+          INPUT_DEPRECATE_VERSION: ${{ inputs.deprecate_version }}
+          INPUT_DEPRECATE_MESSAGE: ${{ inputs.deprecate_message }}
         run: |
-          if [[ -z "${{ inputs.deprecate_version }}" ]]; then
+          if [[ -z "$INPUT_DEPRECATE_VERSION" ]]; then
             echo "::error::deprecate_version is required for deprecate action"
             exit 1
           fi
-          if [[ -z "${{ inputs.deprecate_message }}" ]]; then
+          if [[ -z "$INPUT_DEPRECATE_MESSAGE" ]]; then
             echo "::error::deprecate_message is required for deprecate action"
             exit 1
           fi
@@ -141,23 +145,25 @@ jobs:
         if: github.event_name == 'workflow_dispatch' && inputs.release_type == 'deprecate'
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          # See note above the "Validate deprecate inputs" step.
+          PACKAGE_NAME: ${{ steps.package.outputs.name }}
+          INPUT_DEPRECATE_VERSION: ${{ inputs.deprecate_version }}
+          INPUT_DEPRECATE_MESSAGE: ${{ inputs.deprecate_message }}
+          INPUT_DEPRECATE_NEW_LATEST: ${{ inputs.deprecate_new_latest }}
         run: |
           set -e
 
-          PACKAGE="${{ steps.package.outputs.name }}"
-          LATEST="$(npm view $PACKAGE@latest version 2>/dev/null || echo '')"
-          VERSION="${{ inputs.deprecate_version }}"
-          MESSAGE="${{ inputs.deprecate_message }}"
-          TARGET="$PACKAGE@$VERSION"
+          LATEST="$(npm view "$PACKAGE_NAME@latest" version 2>/dev/null || echo '')"
+          TARGET="$PACKAGE_NAME@$INPUT_DEPRECATE_VERSION"
 
-          if [[ "$LATEST" == "$VERSION" ]]; then
-            if [[ -z "${{ inputs.deprecate_new_latest }}" ]]; then
+          if [[ "$LATEST" == "$INPUT_DEPRECATE_VERSION" ]]; then
+            if [[ -z "$INPUT_DEPRECATE_NEW_LATEST" ]]; then
               echo "::error::deprecate_new_latest is required when deprecating the current latest version ($LATEST)"
               exit 1
             fi
-            echo "::notice::Setting new latest tag to $PACKAGE@${{ inputs.deprecate_new_latest }}"
-            npm dist-tag add "$PACKAGE@${{ inputs.deprecate_new_latest }}" latest
+            echo "::notice::Setting new latest tag to $PACKAGE_NAME@$INPUT_DEPRECATE_NEW_LATEST"
+            npm dist-tag add "$PACKAGE_NAME@$INPUT_DEPRECATE_NEW_LATEST" latest
           fi
 
-          echo "::notice::Deprecating $TARGET. Reason: $MESSAGE"
-          npm deprecate "$TARGET" "$MESSAGE"
+          echo "::notice::Deprecating $TARGET. Reason: $INPUT_DEPRECATE_MESSAGE"
+          npm deprecate "$TARGET" "$INPUT_DEPRECATE_MESSAGE"

package/.github/workflows/security.yml

@@ -22,19 +22,10 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
+      - name: Setup Node.js and install dependencies
+        uses: diplodoc-platform/setup-node-action@v1
         with:
-          node-version: ${{ vars.NODE_VERSION }}
-          cache: 'npm'
-
-      - name: Install latest npm (>= 11.5.1)
-        run: |
-          [ "$(printf '%s\n' "11.5.1" "$(npm -v)" | sort -V | head -n1)" = "11.5.1" ] || npm install -g npm@11.5.1
-        shell: bash
-
-      - name: Install dependencies
-        run: npm ci
+          node-version: ${{ vars.NODE_VERSION || '24' }}
 
       - name: Run npm audit
         id: audit

package/.github/workflows/tests.yml

@@ -30,19 +30,10 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
+      - name: Setup Node.js and install dependencies
+        uses: diplodoc-platform/setup-node-action@v1
         with:
-          node-version: ${{ vars.NODE_VERSION }}
-          cache: 'npm'
-
-      - name: Install latest npm (>= 11.5.1)
-        run: |
-          [ "$(printf '%s\n' "11.5.1" "$(npm -v)" | sort -V | head -n1)" = "11.5.1" ] || npm install -g npm@11.5.1
-        shell: bash
-
-      - name: Install dependencies
-        run: npm ci
+          node-version: ${{ vars.NODE_VERSION || '24' }}
 
       - name: Run type check
         run: npm run typecheck

package/.github/workflows/update-deps.yml

@@ -38,6 +38,7 @@ on:
           - '@diplodoc/search-extension'
           - '@diplodoc/tabs-extension'
 
+
       update_as_dev:
         description: 'Update as devDependency (only for single package selection)'
         required: false
@@ -67,58 +68,56 @@ jobs:
           fetch-depth: 0
           token: ${{ secrets.YC_UI_BOT_GITHUB_TOKEN }}
 
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
+      - name: Setup Node.js and install dependencies
+        uses: diplodoc-platform/setup-node-action@v1
         with:
-          node-version: ${{ vars.NODE_VERSION }}
+          node-version: ${{ vars.NODE_VERSION || '24' }}
           registry-url: 'https://registry.npmjs.org'
-          cache: 'npm'
-
-      - name: Install latest npm (>= 11.5.1)
-        run: |
-          [ "$(printf '%s\n' "11.5.1" "$(npm -v)" | sort -V | head -n1)" = "11.5.1" ] || npm install -g npm@11.5.1
-        shell: bash
-
-      - name: Install dependencies
-        run: npm ci
 
       - name: Update packages
+        # workflow_dispatch inputs are user-controlled. Never interpolate them
+        # directly into a shell script (${{ inputs.* }} in run:) — pass them
+        # through env: and reference as "$VAR" so quotes / $(...) / ;-chains
+        # in input values cannot escape into the shell.
+        env:
+          INPUT_PACKAGES: ${{ inputs.packages }}
+          INPUT_PACKAGE: ${{ inputs.package }}
+          INPUT_VERSION: ${{ inputs.version }}
+          INPUT_UPDATE_AS_DEV: ${{ inputs.update_as_dev }}
         run: |
           set -e
 
           # Determine which packages to update
-          if [[ -n "${{ inputs.packages }}" ]]; then
+          if [[ -n "$INPUT_PACKAGES" ]]; then
             # Use multi-selection field with dev: prefix support
-            PACKAGES_INPUT="${{ inputs.packages }}"
-            
             # Parse comma-separated packages
-            IFS=',' read -ra PACKAGES <<< "$PACKAGES_INPUT"
-            
+            IFS=',' read -ra PACKAGES <<< "$INPUT_PACKAGES"
+
             for PACKAGE_ENTRY in "${PACKAGES[@]}"; do
               # Trim whitespace
               PACKAGE_ENTRY=$(echo "$PACKAGE_ENTRY" | xargs)
-              
+
               # Check for dev: prefix
               if [[ "$PACKAGE_ENTRY" == dev:* ]]; then
                 PACKAGE="${PACKAGE_ENTRY#dev:}"
-                echo "::info::Updating $PACKAGE to ${{ inputs.version }} as devDependency"
-                npm install --no-workspaces --save-dev "$PACKAGE@${{ inputs.version }}"
+                echo "::info::Updating $PACKAGE to $INPUT_VERSION as devDependency"
+                npm install --no-workspaces --save-dev "$PACKAGE@$INPUT_VERSION"
               else
                 PACKAGE="$PACKAGE_ENTRY"
-                echo "::info::Updating $PACKAGE to ${{ inputs.version }}"
-                npm install --no-workspaces "$PACKAGE@${{ inputs.version }}"
+                echo "::info::Updating $PACKAGE to $INPUT_VERSION"
+                npm install --no-workspaces "$PACKAGE@$INPUT_VERSION"
               fi
             done
-          elif [[ -n "${{ inputs.package }}" ]]; then
+          elif [[ -n "$INPUT_PACKAGE" ]]; then
             # Use single selection field
-            PACKAGE="${{ inputs.package }}"
-            
-            if [[ "${{ inputs.update_as_dev }}" == "true" ]]; then
-              echo "::info::Updating $PACKAGE to ${{ inputs.version }} as devDependency"
-              npm install --no-workspaces --save-dev "$PACKAGE@${{ inputs.version }}"
+            PACKAGE="$INPUT_PACKAGE"
+
+            if [[ "$INPUT_UPDATE_AS_DEV" == "true" ]]; then
+              echo "::info::Updating $PACKAGE to $INPUT_VERSION as devDependency"
+              npm install --no-workspaces --save-dev "$PACKAGE@$INPUT_VERSION"
             else
-              echo "::info::Updating $PACKAGE to ${{ inputs.version }}"
-              npm install --no-workspaces "$PACKAGE@${{ inputs.version }}"
+              echo "::info::Updating $PACKAGE to $INPUT_VERSION"
+              npm install --no-workspaces "$PACKAGE@$INPUT_VERSION"
             fi
           else
             echo "::error::Either package or packages must be specified"
@@ -131,6 +130,12 @@ jobs:
       - name: Create and publish PR
         env:
           GH_TOKEN: ${{ secrets.YC_UI_BOT_GITHUB_TOKEN }}
+          # See "Update packages" step above — inputs go through env, never
+          # via ${{ inputs.* }} into the shell body.
+          INPUT_PACKAGES: ${{ inputs.packages }}
+          INPUT_PACKAGE: ${{ inputs.package }}
+          INPUT_VERSION: ${{ inputs.version }}
+          INPUT_UPDATE_AS_DEV: ${{ inputs.update_as_dev }}
         run: |
           set -e
 
@@ -141,19 +146,18 @@ jobs:
           fi
 
           # Determine which packages to update
-          if [[ -n "${{ inputs.packages }}" ]]; then
+          FIRST_PACKAGE=""
+          if [[ -n "$INPUT_PACKAGES" ]]; then
             # Use multi-selection field with dev: prefix support
-            PACKAGES_INPUT="${{ inputs.packages }}"
-            
             # Parse comma-separated packages
-            IFS=',' read -ra PACKAGES <<< "$PACKAGES_INPUT"
-            
+            IFS=',' read -ra PACKAGES <<< "$INPUT_PACKAGES"
+
             # Get actual installed versions for all packages
             VERSIONS=""
             for PACKAGE_ENTRY in "${PACKAGES[@]}"; do
               # Trim whitespace
               PACKAGE_ENTRY=$(echo "$PACKAGE_ENTRY" | xargs)
-              
+
               # Check for dev: prefix
               if [[ "$PACKAGE_ENTRY" == dev:* ]]; then
                 PACKAGE="${PACKAGE_ENTRY#dev:}"
@@ -162,23 +166,25 @@ jobs:
                 PACKAGE="$PACKAGE_ENTRY"
                 DEV_PREFIX=""
               fi
-              
+
               VERSION=$(npm explore --no-workspaces "$PACKAGE" "node -pe 'require(\"./package.json\").version'" --shell sh)
               if [[ -n "$VERSIONS" ]]; then
                 VERSIONS="$VERSIONS, "
               fi
               VERSIONS="$VERSIONS$DEV_PREFIX$PACKAGE@$VERSION"
             done
-          elif [[ -n "${{ inputs.package }}" ]]; then
+            FIRST_PACKAGE=$(echo "$INPUT_PACKAGES" | cut -d',' -f1 | xargs)
+          elif [[ -n "$INPUT_PACKAGE" ]]; then
             # Use single selection field
-            PACKAGE="${{ inputs.package }}"
+            PACKAGE="$INPUT_PACKAGE"
             VERSION=$(npm explore --no-workspaces "$PACKAGE" "node -pe 'require(\"./package.json\").version'" --shell sh)
-            
-            if [[ "${{ inputs.update_as_dev }}" == "true" ]]; then
+
+            if [[ "$INPUT_UPDATE_AS_DEV" == "true" ]]; then
               VERSIONS="dev:$PACKAGE@$VERSION"
             else
               VERSIONS="$PACKAGE@$VERSION"
             fi
+            FIRST_PACKAGE="$PACKAGE"
           else
             echo "::error::Either package or packages must be specified"
             exit 1
@@ -188,16 +194,19 @@ jobs:
           git config --global user.email "95919151+yc-ui-bot@users.noreply.github.com"
           git config --global user.name "yc-ui-bot"
 
-          # Create branch name (use first package for simplicity)
-          # Remove dev: prefix and @ symbol for valid branch name
-          FIRST_PACKAGE=$(echo "$PACKAGES_INPUT" | cut -d',' -f1 | xargs)
+          # Create branch name — sanitize FIRST_PACKAGE so a hostile npm name
+          # (e.g. one containing `/`, spaces, or `;`) cannot escape into the
+          # branch ref or surrounding git commands.
           FIRST_PACKAGE=$(echo "$FIRST_PACKAGE" | sed 's/^dev://; s/@//g')
-          BRANCH_NAME="ci/update-deps/$FIRST_PACKAGE-${{ inputs.version }}"
-          git push -f origin :$BRANCH_NAME || true
-          git checkout -b $BRANCH_NAME
+          SAFE_FIRST_PACKAGE=$(echo "$FIRST_PACKAGE" | tr -c 'A-Za-z0-9._-' '_')
+          SAFE_VERSION=$(echo "$INPUT_VERSION" | tr -c 'A-Za-z0-9._-' '_')
+          BRANCH_NAME="ci/update-deps/${SAFE_FIRST_PACKAGE}-${SAFE_VERSION}"
+
+          git push -f origin ":$BRANCH_NAME" || true
+          git checkout -b "$BRANCH_NAME"
           git add package.json package-lock.json
           git commit -m "fix(deps): Update $VERSIONS" --no-verify
-          git push -u origin $BRANCH_NAME
+          git push -u origin "$BRANCH_NAME"
 
           # Create PR
           gh pr create --title "fix(deps): Update $VERSIONS" --body "Automated dependency update" --base master

package/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "5.7.6"
+  ".": "5.7.8"
 }

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [5.7.8](https://github.com/diplodoc-platform/client/compare/v5.7.7...v5.7.8) (2026-06-10)
+
+
+### Bug Fixes
+
+* **deps:** Update dev:@diplodoc/mermaid-extension@2.1.2 ([338f29e](https://github.com/diplodoc-platform/client/commit/338f29ed1d76c6cd8af507baabe1dd4ff521c81e))
+
+## [5.7.7](https://github.com/diplodoc-platform/client/compare/v5.7.6...v5.7.7) (2026-06-01)
+
+
+### Bug Fixes
+
+* **deps:** Update @diplodoc/components@5.9.5 ([cb726fe](https://github.com/diplodoc-platform/client/commit/cb726fe8a6b697e70565e77f02d88b1ab112a823))
+
 ## [5.7.6](https://github.com/diplodoc-platform/client/compare/v5.7.5...v5.7.6) (2026-05-29)
 
 

package/build/client/manifest.json

@@ -4,14 +4,14 @@
       "976-40cbc1d2518eb8ea.js"
     ],
     "js": [
-      "vendor-fefbbd2336b585a3.js",
+      "vendor-524b1f13dac0da4a.js",
       "search-286bba91cb85430c.js",
       "react-869ecca253e3f1ec.js"
     ],
     "css": [
-      "vendor-d5e0c222434c650d.css",
+      "vendor-da21b7bb600238a3.css",
       "search-0580ed74afc78bb6.css",
-      "vendor-91614c3a68c7424d.rtl.css",
+      "vendor-1d6206fadf034682.rtl.css",
       "app-61bec9b6ec295f5c.rtl.css",
       "search-a556879086a8816e.rtl.css"
     ]
@@ -22,13 +22,13 @@
     ],
     "js": [
       "app-c3e8973ab1d89cc8.js",
-      "vendor-fefbbd2336b585a3.js",
+      "vendor-524b1f13dac0da4a.js",
       "react-869ecca253e3f1ec.js"
     ],
     "css": [
-      "vendor-d5e0c222434c650d.css",
+      "vendor-da21b7bb600238a3.css",
       "app-b63bbc0bca8257d4.css",
-      "vendor-91614c3a68c7424d.rtl.css",
+      "vendor-1d6206fadf034682.rtl.css",
       "app-61bec9b6ec295f5c.rtl.css",
       "search-a556879086a8816e.rtl.css"
     ]

package/build/client/{vendor-91614c3a68c7424d.rtl.css → vendor-1d6206fadf034682.rtl.css}

@@ -200,6 +200,7 @@ a.pc-image-card_border_shadow,.pc-image-card_border_shadow{box-shadow:0px 4px 24
 .dropdown-content{display:flex;flex-direction:column;gap:var(--g-spacing-3)}@media(min-width: 769px){.dropdown-content{flex-direction:row}}
 .dc-mobile-dropdown{display:flex;justify-content:space-between;align-items:center;padding:10px 4px 10px 12px;width:100%}.dc-mobile-dropdown__foldable .dc-mobile-dropdown__list{display:flex;padding:4px 12px;flex-direction:column;border-radius:11px;background:var(--g-color-base-generic)}.dc-mobile-dropdown__list-item{display:flex;padding:10px 28px 10px 12px;gap:4px;width:100%;margin:0;font-weight:400}.dc-mobile-dropdown__icon{transition:transform 150ms}.dc-mobile-dropdown__icon_up{transform:rotate(-180deg)}@media(min-width: 769px){.dc-mobile-dropdown{display:none}.pc-navigation-item:has(.dc-mobile-dropdown){display:none}}
 .pc-navigation-item__content_type_label{cursor:default}
+.pc-navigation-dropdown{cursor:pointer}
 .g-hotkey{display:inline-block;padding:1px 5px;border-radius:var(--g-border-radius-xs)}.g-hotkey,.g-hotkey kbd{font-family:var(--g-text-body-font-family);font-weight:var(--g-text-body-font-weight);font-size:var(--g-text-body-1-font-size);line-height:var(--g-text-body-1-line-height)}.g-hotkey_view_light{color:var(--g-color-text-primary);background-color:var(--g-color-base-generic)}.g-hotkey_view_light .g-hotkey__plus{color:var(--g-color-text-hint)}.g-hotkey_view_dark{color:var(--g-color-text-light-complementary);background-color:var(--g-color-base-light-simple-hover)}.g-hotkey_view_dark .g-hotkey__plus{color:var(--g-color-text-light-hint)}
 .g-tooltip{--_--text-color: var(--g-tooltip-text-color, var(--g-color-text-primary));--_--background-color: var(--g-tooltip-background-color, var(--g-color-base-float));--_--padding: var(--g-tooltip-padding, var(--g-spacing-1) var(--g-spacing-2));--_--border-radius: var(--g-tooltip-border-radius, 4px);--_--box-shadow: var(--g-tooltip-box-shadow, 0 1px 5px 0 var(--g-color-sfx-shadow));display:-webkit-box;-webkit-box-orient:vertical;-ms-box-orient:vertical;-webkit-line-clamp:20;-moz-line-clamp:20;-ms-line-clamp:20;box-sizing:border-box;padding:var(--_--padding);max-width:360px;background-color:var(--_--background-color);box-shadow:var(--_--box-shadow);border-radius:4px;border-radius:var(--_--border-radius);overflow:hidden;text-overflow:ellipsis}
 .g-action-tooltip{--g-tooltip-text-color: var(--g-color-text-light-primary);--g-tooltip-background-color: var(--g-color-base-float-heavy);--g-tooltip-padding: var(--g-spacing-2) var(--g-spacing-3)}.g-action-tooltip__heading{display:flex;align-items:baseline;justify-content:space-between}.g-action-tooltip__title{color:var(--g-color-text-light-primary)}.g-action-tooltip__hotkey{margin-inline-start:var(--g-spacing-2)}.g-action-tooltip__description{margin-block-start:var(--g-spacing-1);color:var(--g-color-text-light-secondary)}