Quarto 1.11

Quarto 1.11 is out! We released it early to deliver a Deno security update. You can get it from the download page and see the full list of changes in the release notes.

Alongside the security update, this release includes accessibility improvements, new capabilities for Typst documents and the Julia engine, and fixes to shared metadata.

Security Update#

Quarto 1.11 bundles Deno 2.9.8, which rejects certificate chains containing the compromised eMudhra and emSign keys. This protects HTTPS requests made by Quarto commands, including publishing, downloading extensions and templates, and installing tools.

We released 1.11 early because this update is not being backported to Quarto 1.10. Changing the certificate store setting does not address the problem. See quarto-dev/quarto-cli#15152 for the details.

Just before 1.11, we released Quarto 1.10.20 on October 30, ahead of our usual monthly patch schedule, to include the remaining backported fixes. It is the final patch release in the 1.10 series. We recommend that all users upgrade to Quarto 1.11 to receive the Deno security fix.

Deno moves from 2.7.14 to 2.9.8. The other bundled tools keep their Quarto 1.10 versions: Pandoc 3.10, Typst 0.15.1, Sass 1.101.0, esbuild 0.28.1, and Mermaid 11.12.0. This release also updates the Observable JavaScript runtime components and the Julia engine.

The updated Deno requires macOS 12 (Monterey) or later.

Accessibility Improvements#

Quarto 1.11 improves navigation, visible focus, alternative text, and presentations:

Keyboard navigation: Bootstrap-themed HTML documents, websites, books, and dashboards include a Skip to main content link. Website sidebar sections use buttons you can operate with the keyboard. Scrollable code blocks and cell output can be focused and scrolled in Safari. Popups for citations, footnotes, cross-references, and code annotations close with Esc.
Visible focus: A two-color keyboard focus ring improves visibility, including in forced-colors mode and on code tools and sidebar controls. If you customize focus styling, see the new Sass variables in the upgrade notes below.
Page structure: Websites and books have distinct, localized names for navigation regions, making it easier to find the site navigation, section navigation, breadcrumbs, or table of contents with a screen reader. Links configured to open in a new tab announce that behavior.
Presentations: Keyboard focus stays on the current slide in the normal presentation view, tabsets follow the slide’s reading order, and closed slide menus and unrevealed incremental content stay hidden from screen readers. Touch devices can use pinch-zoom, and the speaker view has named regions and a labeled layout control.

Alternative text is now preserved for Mermaid and Graphviz diagrams in HTML, Revealjs, Word, and Typst output. Word figures also honor fig-alt, including figures produced by code, while keeping their visible captions. In this example, fig-cap is the caption readers see, while fig-alt describes the diagram for readers using assistive technology.

document.qmd
```{mermaid}
%%| label: fig-workflow
%%| fig-cap: "The report workflow."
%%| fig-alt: "Data flows through analysis to a report."
flowchart LR
  Data --> Analysis --> Report
```

Learn more about figure alternative text and diagrams. The HTML Accessibility page explains the checks you can run on your own content.

Thank you to Charlotte Wickham and JooYoung Seo for their work on these accessibility improvements, and to everyone who reported issues, tested changes, and contributed fixes.

Typst Documents#

Typst documents now support lists of figures and tables with lof and lot. Their titles follow the document language and can be customized with crossref.

document.qmd
---
format: typst
lof: true
lot: true
crossref:
  lof-title: "Figures"
  lot-title: "Tables"
---

Proof, remark, and solution blocks now receive theorem-style frames instead of appearing as plain text. Cross-references to blocks with a registered cross-reference label work in Typst too; an ordinary .proof block remains unnumbered.

CSS generic font families such as serif, sans-serif, and monospace now resolve to available fonts, avoiding the warnings caused by passing those names directly to Typst.

Learn more at Lists of Figures and Tables and Theorems and Proofs.

Julia Engine Improvements#

The Julia engine now supports execute-dir and exporting an executed notebook with keep-ipynb: true. Notebooks with matching configurations can share worker processes. This release also fixes renders that hang on long error stack traces or cells that leave a process running.

The bundled engine uses QuartoNotebookRunner 0.18.5. Changes to document or project metadata now invalidate cached cell output.

Learn more about using the Julia engine.

Definition List Syntax#

You can now write a definition list using a .definition-list div containing nested bullet lists. Each top-level bullet is a term, and the bullets nested underneath it are its definitions:

document.qmd
::: {.definition-list}
- `time`
  - A timestamp that identifies when the request was initiated.
  - Type: string
- `id`
  - A unique identifier.
:::

This is the syntax used by Quarto 2, so you can adopt it now in documents you plan to use with both versions. Existing term / : definition syntax continues to work in Quarto 1.11.

Learn more at Definition Lists.

Shared Metadata and Upgrade Notes#

A few changes may affect existing projects, so check these when you upgrade:

Shared metadata: Metadata shared through projects, directories, and metadata-files now reaches Pandoc templates and Lua filters correctly when the document defines the same key. Document values still take precedence for single values, while inherited list entries are retained. If you previously used document-level keywords to replace an inherited list, check the combined result after upgrading. Learn more at Metadata Merging.
Website metadata validation: Quarto now validates website metadata more strictly. Misspelled page-level open-graph and twitter-card options now fail the render with an error instead of being ignored. Put preview-image dimensions under open-graph; Twitter Cards do not use image-width or image-height. When a page provides its own image, declare its dimensions in the page’s open-graph options or shared directory metadata, rather than relying on the site’s image dimensions. Learn more at Social Metadata.
Focus ring variables: If you customize HTML themes, the keyboard focus ring now uses $focus-ring-outer-color, $focus-ring-inner-color, $focus-ring-outline-width, and $focus-ring-outline-offset. Quarto no longer uses Bootstrap’s $focus-ring-color, $focus-ring-box-shadow, $btn-focus-width, or $btn-focus-box-shadow for this styling. See Focus Ring for customization.

Other Highlights#

Website Tools—A page can now disable Open Graph or Twitter Card metadata with open-graph: false or twitter-card: false, even when the website enables it.
Google Scholar Metadata—Fixes improve the citation metadata for HTML articles and books, including shared and CSL JSON bibliographies.