From 1c4433151dd1b851b5256e3b4665a7bce97b19fb Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 6 Jul 2026 00:27:48 +0000
Subject: [PATCH] chore(deps): update dependency @scalar/api-reference to
 v1.62.4

---
 internal/serviceoffercontroller/scalar_html.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/internal/serviceoffercontroller/scalar_html.go b/internal/serviceoffercontroller/scalar_html.go
index 3b8678e0..ad1cd887 100644
--- a/internal/serviceoffercontroller/scalar_html.go
+++ b/internal/serviceoffercontroller/scalar_html.go
@@ -6,7 +6,7 @@ package serviceoffercontroller
 // payload never drifts silently. After a bump, refresh the SRI hash below
 // with scripts/update-scalar-sri.sh (the renovate PR body links it too).
 // renovate: datasource=npm depName=@scalar/api-reference
-const scalarBundleVersion = "1.62.1"
+const scalarBundleVersion = "1.62.4"
 
 // scalarBundleSRI is the Subresource Integrity hash for the pinned bundle.
 // The /api page is served over the public tunnel, so the third-party Scalar
@@ -16,7 +16,7 @@ const scalarBundleVersion = "1.62.1"
 // bundle and rewrites this constant). The hash is taken over the exact
 // (jsdelivr-minified) bytes that the pinned URL serves; it must be refreshed
 // in lockstep with scalarBundleVersion or the browser will block the script.
-const scalarBundleSRI = "sha384-PbtNjho0PH2QGB1/2Su//W99xhKoSNGumXARK4KrO/4daQHPSI4029R1KQtXcaw5"
+const scalarBundleSRI = "sha384-8krtlmjW90KNKDXFfcFls2ueiU+9/jzPmL/C2r7Y2NPh9KWCau8HyweAvBvm/y0y"
 
 // scalarHTML returns the static HTML shell served at /api. It loads the
 // pinned @scalar/api-reference bundle from jsdelivr, points it at the