Skip to content

chore(deps): bump the npm-deps group with 8 updates - #638

Merged
AbhishekDoshi26 merged 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-deps-090e918aef
Aug 31, 2026
Merged

chore(deps): bump the npm-deps group with 8 updates#638
AbhishekDoshi26 merged 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-deps-090e918aef

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-deps group with 8 updates:

Package From To
@astrojs/starlight 0.41.7 0.41.9
astro 7.2.4 7.2.9
astro-opengraph-images 1.18.0 1.20.0
mermaid 11.17.0 11.17.2
sharp 0.35.3 0.35.4
typescript 6.0.3 7.0.2
cspell 10.0.1 10.1.1
js-yaml 4.3.1 5.4.1

Updates @astrojs/starlight from 0.41.7 to 0.41.9

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.41.9

Patch Changes

@​astrojs/starlight@​0.41.8

Patch Changes

Changelog

Sourced from @​astrojs/starlight's changelog.

0.41.9

Patch Changes

0.41.8

Patch Changes

Commits

Updates astro from 7.2.4 to 7.2.9

Release notes

Sourced from astro's releases.

astro@7.2.9

Patch Changes

astro@7.2.8

Patch Changes

astro@7.2.7

Patch Changes

  • #17415 55d38c8 Thanks @​iseraph-dev! - Deserializes each route once when loading the SSR manifest

  • #17772 023b48b Thanks @​matthewp! - Fixes route selection for normalized request paths in adapter and development request handling

  • #17819 633855b Thanks @​matthewp! - Updates generated and default Cloudflare compatibility_date values to match the installed runtime and requires Wrangler ^4.125.0

  • #17813 ae26d18 Thanks @​matthewp! - Fixes rewrite() and next(payload) for GET and HEAD requests with host-provided bodies

  • #17816 a0d2fe3 Thanks @​astro-factory! - Fixes the experimental svgOptimizer not generating unique per-file ID prefixes when using SVGO's prefixIds plugin

astro@7.2.6

Patch Changes

  • #17812 29af6da Thanks @​matthewp! - Fixes a bug where new FetchState(request) could fail in development when server dependencies were optimized

astro@7.2.5

Patch Changes

  • #17758 5f419e2 Thanks @​astro-factory! - Fixes a bug where experimental_getFontFileURL() rejected valid font URLs when using the Cloudflare adapter

  • #17416 493796b Thanks @​iseraph-dev! - Skips no-op pathname writes when normalizing SSR request URLs

  • #17712 bd374b7 Thanks @​fkatsuhiro! - Updates deprecation messages target from Astro 7 to 8

  • #17719 dac1768 Thanks @​astrobot-houston! - Fixes session ID validation to reject non-UUID cookie values before using them as storage keys

  • #17770 84eb7e7 Thanks @​astro-factory! - Fixes --mode, --site, --base, --out-dir, --verbose, --silent, and --open flags being silently dropped when using astro dev --background or astro preview --background

  • #17713 d035290 Thanks @​wakqasahmed! - Fixes content-modules.mjs not removing entries for deleted or renamed content files, which could cause Vite to attempt to resolve non-existent modules

... (truncated)

Changelog

Sourced from astro's changelog.

7.2.9

Patch Changes

7.2.8

Patch Changes

7.2.7

Patch Changes

  • #17415 55d38c8 Thanks @​iseraph-dev! - Deserializes each route once when loading the SSR manifest

  • #17772 023b48b Thanks @​matthewp! - Fixes route selection for normalized request paths in adapter and development request handling

  • #17819 633855b Thanks @​matthewp! - Updates generated and default Cloudflare compatibility_date values to match the installed runtime and requires Wrangler ^4.125.0

  • #17813 ae26d18 Thanks @​matthewp! - Fixes rewrite() and next(payload) for GET and HEAD requests with host-provided bodies

  • #17816 a0d2fe3 Thanks @​astro-factory! - Fixes the experimental svgOptimizer not generating unique per-file ID prefixes when using SVGO's prefixIds plugin

7.2.6

Patch Changes

  • #17812 29af6da Thanks @​matthewp! - Fixes a bug where new FetchState(request) could fail in development when server dependencies were optimized

7.2.5

Patch Changes

... (truncated)

Commits

Updates astro-opengraph-images from 1.18.0 to 1.20.0

Release notes

Sourced from astro-opengraph-images's releases.

astro-opengraph-images: v1.20.0

1.20.0 (2026-08-25)

A major satori bump plus a startup-cost improvement; no public API changes.

  • satori and @resvg/resvg-js are now imported lazily, at the moment a page is rendered, rather than when the integration module is loaded. Builds whose filter matches no pages no longer pay to load the native resvg binding (6f0d73e)
  • Runtime dep satori bumped to ^0.33.0 (was ^0.29.0) (6f0d73e)
  • README logo assets now resolve from the monorepo instead of the retired standalone repository's CDN (3dd65f4)

astro-opengraph-images: v1.19.0

1.19.0 (2026-08-23)

Features

  • astro-opengraph-images: add early path filtering (#2331) (63bbab7)
Changelog

Sourced from astro-opengraph-images's changelog.

1.20.0 (2026-08-25)

A major satori bump plus a startup-cost improvement; no public API changes.

  • satori and @resvg/resvg-js are now imported lazily, at the moment a page is rendered, rather than when the integration module is loaded. Builds whose filter matches no pages no longer pay to load the native resvg binding (6f0d73e)
  • Runtime dep satori bumped to ^0.33.0 (was ^0.29.0) (6f0d73e)
  • README logo assets now resolve from the monorepo instead of the retired standalone repository's CDN (3dd65f4)

1.19.0 (2026-08-23)

Features

  • astro-opengraph-images: add early path filtering (#2331) (63bbab7)
Commits
  • 9a63133 chore: release main (#2366)
  • c03da78 feat(root): replace the global jscpd threshold with a baseline ratchet (#2409)
  • 6f0d73e chore(deps): refresh eligible dependency maintenance (#2363)
  • 3dd65f4 feat(root): make npm releases consumer-driven (#2333)
  • 9844c60 chore: release main (#2348)
  • 63bbab7 feat(astro-opengraph-images): add early path filtering (#2331)
  • 4d0e181 chore(deps): sweep the Renovate #481 backlog across catalog, npm, tofu, and G...
  • cf6a528 test(root): standardize TypeScript suites on Vitest and Bun (#2315)
  • 9a546a4 Remove the README refresh workflow and overhaul every repo README (#2108)
  • See full diff in compare view

Updates mermaid from 11.17.0 to 11.17.2

Release notes

Sourced from mermaid's releases.

mermaid@11.17.2

Patch Changes

  • #8125 178d7c7 Thanks @​knsv-bot! - fix: restore the edgePaths class on the edge group in rendered SVG, and point the flowchart, block and user journey stylesheets at it

mermaid@11.17.1

Patch Changes

  • #8092 31ce60a Thanks @​pbrolin47! - fix(c4): wrap element labels to c4.width again

    C4 element labels (System, Container, Component, Person and their _Ext variants) stopped wrapping in 11.17.0, so long descriptions rendered on one unbroken line and the shape grew sideways well past the configured c4.width. The unified-shapes label helper gated wrapping on the root-level wrap option, which has no schema default and is therefore undefined; it now gates on c4.wrap (default true), which is what the legacy renderer used.

  • #8088 c66200b Thanks @​ashishjain0512! - fix: neo-look arrowheads and crow's-foot markers no longer fall back to default theme colours/stroke widths on the first render with layout: elk. State diagram arrowheads stayed dark on dark themes, and ER / requirement markers were drawn at the default stroke width, because markers were created from the layout package's own bundled copy of mermaid, whose config had not been initialized yet.

  • #8079 281cd7b Thanks @​ashishjain0512! - fix(class): class diagram relation markers (composition, aggregation, extension, dependency, lollipop) no longer scale with the edge stroke width, so they stay outside the class box boundary in themes that set strokeWidth: 2 (redux, redux-dark, redux-color, redux-dark-color, neo, neo-dark) with the default classic look.

Commits

Updates sharp from 0.35.3 to 0.35.4

Release notes

Sourced from sharp's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

v0.35.4-rc.0

Commits
  • 7f1a0a2 Release v0.35.4
  • f927818 Upgrade to sharp-libvips v1.3.3
  • e802092 Prerelease v0.35.4-rc.0
  • e13eb2f CI: Fix wasm32 build (#4589)
  • a82a0b3 Upgrade to libvips v8.18.6
  • 8044fe4 Bound resize dimensions to coordinate limit
  • 147f859 Docs: changelog entries for #4578 #4584
  • ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
  • 7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
  • ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
  • Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates cspell from 10.0.1 to 10.1.1

Release notes

Sourced from cspell's releases.

v10.1.1

Fixes

fix: Do not load .pnp.js files when untrusted (#9064)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#9055)

Update Dictionaries (main)

Summary

 packages/cspell-bundled-dicts/package.json | 2 +-
 pnpm-lock.yaml                             | 9 +++++++--
 2 files changed, 8 insertions(+), 3 deletions(-)

v10.1.0

Features

feat(cspell-junit-reporter): add JUnit XML reporter package (#8945)

Closes #4570.

Adds @cspell/cspell-junit-reporter, a new workspace package modeled on packages/cspell-json-reporter, that emits a JUnit-compatible XML report of a cspell run.

The issue asked for a minimal mapping along the lines of:

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.1.1 (2026-08-25)

Fixes

fix: Do not load .pnp.js files when untrusted (#9064)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#9055)

Update Dictionaries (main)

Summary

 packages/cspell-bundled-dicts/package.json | 2 +-
 pnpm-lock.yaml                             | 9 +++++++--
 2 files changed, 8 insertions(+), 3 deletions(-)

v10.1.0 (2026-08-22)

Features

feat(cspell-junit-reporter): add JUnit XML reporter package (#8945)

Closes #4570.

Adds @cspell/cspell-junit-reporter, a new workspace package modeled on packages/cspell-json-reporter, that emits a JUnit-compatible XML report of a cspell run.

The issue asked for a minimal mapping along the lines of:

</tr></table>

... (truncated)

Commits
  • bc3bc22 v10.1.1
  • 77992dd chore: Prepare Release v10.1.1 (auto-deploy) (#9043)
  • 8ca97eb fix: add publishConfig with provenance to cspell package (#9041)
  • 401518c v10.1.0
  • acf8449 chore: Prepare Release v10.1.0 (auto-deploy) (#8883)
  • 3078371 fix: Workflow Bot -- Update Dictionaries (main) (#9024)
  • f557824 ci: Workflow Bot -- Update ALL Dependencies (main) (#9014)
  • 1c11da6 ci: Workflow Bot -- Update ALL Dependencies (main) (#8970)
  • 67448c8 chore: bump the development-dependencies group across 1 directory with 16 upd...
  • ce30dc7 chore: bump chalk from 5.6.2 to 6.0.0 (#8973)
  • Additional commits viewable in compare view

Updates js-yaml from 4.3.1 to 5.4.1

Changelog

Sourced from js-yaml's changelog.

[5.4.1] - 2026-08-26

Changed

  • Hard-limit merge sequence size to 100.

Security

  • Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

[5.4.0] - 2026-08-25

Added

  • Added the scalarStyleRules dumper option to customize string formatting. See Scalar styling for details.

Changed

  • [breaking] Flattened the low-level AST node style representation. Scalar and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values; explicit tags use the separate tagged property. Alias nodes now contain only kind and anchor. This only affects code that directly constructs or edits AST nodes.
  • [breaking] The sortKeys option was rewritten using AST mutation to avoid side effects.
  • Reworked scalar style selection. This can change formatting without changing loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

  • Accept a byte order mark at the start of each document in a stream, #791.
  • Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace, including alias and property-only keys, #786.
  • Preserve empty scalar items when converting block sequences to flow style.
  • Do not apply the 1024-character simple-key limit to flow mapping keys.
  • Count Unicode code points, rather than UTF-16 code units, for the 1024-character simple-key limit.
  • Add an explicit document-end marker after keep-chomped block scalars when needed to preserve trailing newlines.

[5.3.0] - 2026-08-14

This release focuses on reworking the documentation and making small architectural improvements before moving forward.

Added

  • Added completely new documentation.
  • Exported DUMP_SCHEMA, the default schema used by the dumper.
  • Added YAMLException.throwAt() for throwing an error at a source position.

Changed

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the npm-deps group with 8 updates
2417641 
Bumps the npm-deps group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.7` | `0.41.9` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.4` | `7.2.9` |
| [astro-opengraph-images](https://github.com/shepherdjerred/monorepo/tree/HEAD/packages/astro-opengraph-images) | `1.18.0` | `1.20.0` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.17.0` | `11.17.2` |
| [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.4` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.0.1` | `10.1.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.3.1` | `5.4.1` |


Updates `@astrojs/starlight` from 0.41.7 to 0.41.9
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.41.9/packages/starlight)

Updates `astro` from 7.2.4 to 7.2.9
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.2.9/packages/astro)

Updates `astro-opengraph-images` from 1.18.0 to 1.20.0
- [Release notes](https://github.com/shepherdjerred/monorepo/releases)
- [Changelog](https://github.com/shepherdjerred/monorepo/blob/main/packages/astro-opengraph-images/CHANGELOG.md)
- [Commits](https://github.com/shepherdjerred/monorepo/commits/astro-opengraph-images-v1.20.0/packages/astro-opengraph-images)

Updates `mermaid` from 11.17.0 to 11.17.2
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.0...mermaid@11.17.2)

Updates `sharp` from 0.35.3 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.3...v0.35.4)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `cspell` from 10.0.1 to 10.1.1
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.1.1/packages/cspell)

Updates `js-yaml` from 4.3.1 to 5.4.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.1...5.4.1)

---
updated-dependencies:
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.41.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: astro
  dependency-version: 7.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: astro-opengraph-images
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: mermaid
  dependency-version: 11.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: cspell
  dependency-version: 10.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: js-yaml
  dependency-version: 5.4.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 31, 2026
@AbhishekDoshi26
fix: revert typescript to ^6.x and js-yaml to ^4.x (intentional pins)
bbc7415 
TypeScript 7 (Project Corsa, Go rewrite) removed ts.sys, which breaks
twoslash (a dep of starlight-theme-nova) at astro:config:setup time.
js-yaml v5 is ESM-only with no default export, breaking astro's CJS
interop. Both are pinned intentionally per the comment in package.json.

Keeping all other dependabot bumps from this PR.
@AbhishekDoshi26
AbhishekDoshi26 enabled auto-merge (squash) August 31, 2026 12:32
@AbhishekDoshi26
AbhishekDoshi26 self-requested a review August 31, 2026 12:32
@AbhishekDoshi26
AbhishekDoshi26 enabled auto-merge (squash) August 31, 2026 12:33
@AbhishekDoshi26
AbhishekDoshi26 merged commit 578916b into main Aug 31, 2026
5 checks passed
@AbhishekDoshi26
AbhishekDoshi26 deleted the dependabot/npm_and_yarn/npm-deps-090e918aef branch August 31, 2026 12:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@AbhishekDoshi26 AbhishekDoshi26 AbhishekDoshi26 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@AbhishekDoshi26