Skip to content

chore(deps): bump the site-dependencies group across 1 directory with 4 updates - #460

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/site/site-dependencies-66d3d977c7
Closed

chore(deps): bump the site-dependencies group across 1 directory with 4 updates#460
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/site/site-dependencies-66d3d977c7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the site-dependencies group with 4 updates in the /site directory: @astrojs/markdown-remark, @astrojs/starlight, astro and sharp.

Updates @astrojs/markdown-remark from 7.2.0 to 7.3.1

Release notes

Sourced from @​astrojs/markdown-remark's releases.

@​astrojs/markdown-remark@​7.3.1

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

@​astrojs/markdown-remark@​7.3.0

Minor Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds MDX rendering to the unified() and satteri() processors.

    Both processors now compile .mdx files themselves. You still need to install @astrojs/mdx to add MDX support to your project.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a recmaPlugins option to unified() for adding recma (estree/JSX) plugins to the MDX compiler.

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

@​astrojs/markdown-remark@​7.2.4

Patch Changes

  • Updated dependencies [05763a0]:
    • @​astrojs/internal-helpers@​0.10.4

@​astrojs/markdown-remark@​7.2.3

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
Changelog

Sourced from @​astrojs/markdown-remark's changelog.

7.3.1

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

7.3.0

Minor Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds MDX rendering to the unified() and satteri() processors.

    Both processors now compile .mdx files themselves. You still need to install @astrojs/mdx to add MDX support to your project.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a recmaPlugins option to unified() for adding recma (estree/JSX) plugins to the MDX compiler.

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

7.2.4

Patch Changes

  • Updated dependencies [05763a0]:
    • @​astrojs/internal-helpers@​0.10.4

7.2.3

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3

7.2.2

Patch Changes

  • Updated dependencies [c895b12]:
    • @​astrojs/internal-helpers@​0.10.2

7.2.1

Patch Changes

  • Updated dependencies [eb6f97e]:
    • @​astrojs/internal-helpers@​0.10.1
Commits

Updates @astrojs/starlight from 0.40.0 to 0.42.4

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.4

Patch Changes

@​astrojs/starlight@​0.42.3

Patch Changes

@​astrojs/starlight@​0.42.2

Patch Changes

@​astrojs/starlight@​0.42.1

Patch Changes

  • #4198 96a44d4 Thanks @​mayank99! - Removes the popover attribute from the sidebar pane on desktop viewports. This ensures the desktop sidebar doesn't stay in a "hidden" popover visibility state.

@​astrojs/starlight@​0.42.0

Minor Changes

  • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

  • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

    ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

    In the following example, custom styles for the menu button are updated for the new approach:

    - starlight-menu-button button {
+ .sl-menu-button {
  color: var(--sl-color-text);
}

starlight-menu-button[aria-expanded='true'] button {


.sl-menu-button:has(~ :popover-open) {
color: var(--sl-color-text-accent-high);
}

See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    • ... (truncated)

    Changelog

    Sourced from @​astrojs/starlight's changelog.

    0.42.4

    Patch Changes

    0.42.3

    Patch Changes

    0.42.2

    Patch Changes

    0.42.1

    Patch Changes

    • #4198 96a44d4 Thanks @​mayank99! - Removes the popover attribute from the sidebar pane on desktop viewports. This ensures the desktop sidebar doesn't stay in a "hidden" popover visibility state.

    0.42.0

    Minor Changes

    • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

    • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

      ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

      In the following example, custom styles for the menu button are updated for the new approach:

      - starlight-menu-button button {
+ .sl-menu-button {
  color: var(--sl-color-text);
}

starlight-menu-button[aria-expanded='true'] button {


.sl-menu-button:has(~ :popover-open) {
color: var(--sl-color-text-accent-high);
}

    ... (truncated)

    Commits

    Updates astro from 6.4.7 to 7.3.5

    Release notes

    Sourced from astro's releases.

    astro@7.3.5

    Patch Changes

    • #17736 2b8b2e8 Thanks @​ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

      Users must import the component with the new ?container query string:

      import { experimental_AstroContainer } from "astro/container";
import TodoList from "../components/TodoList.astro?container";
const container = await experimental_AstroContainer.create();
const _string = container.renderComponent(TodoList);

    astro@7.3.4

    Patch Changes

    • #18063 40896ac Thanks @​adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

    • #18053 cf5d72f Thanks @​Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

    • #18086 795a7e4 Thanks @​ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&#x26;) and named (&amp;) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

    • #18074 0429805 Thanks @​SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

    • #18007 2245837 Thanks @​L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

    • #18096 43657c4 Thanks @​matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

    • #18043 8a53a8b Thanks @​astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

    • #18029 c08252d Thanks @​matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

    • Updated dependencies [3fd16ee, 8358d59]:

      • @​astrojs/markdown-satteri@​0.4.2

    astro@7.3.3

    Patch Changes

    • #17651 504333c Thanks @​sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

    • #17942 0bc5715 Thanks @​matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

    • #17700 b2222fc Thanks @​winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

    • #17941 394ff79 Thanks @​matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

    • #17928 3277927 Thanks @​ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.

    ... (truncated)

    Commits

    Updates sharp from 0.35.1 to 0.35.5

    Release notes

    Sourced from sharp's releases.

    v0.35.5

    https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4

    • Add upper bounds check on length of linear and GIF delay arrays.

    • Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

    • TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

    • TypeScript: Remove non-existent named export. #4604

    • Increase accepted dimensions when extending an image. #4605

    • Improve gain map support for extract and rotate operations. #4606

    • Tests: Ensure composite tests pass on big endian platforms. #4609

    v0.35.5-rc.1

    https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1

    • Add upper bounds check on length of linear and GIF delay arrays.

    • Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

    • TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

    • TypeScript: Remove non-existent named export. #4604

    • Increase accepted dimensions when extending an image. #4605

    • Improve gain map support for extract operation. #4606

    ... (truncated)

    Commits
    • 51a990f Release v0.35.5
    • 96de105 Upgrade to sharp-libvips v1.3.4
    • 3a61390 CI: Configure Dependabot with all package.json locations
    • 4940c50 Improve gain map support for rotate/flip/flop ops
    • 20654aa Prerelease v0.35.5-rc.1
    • ef4f934 CI: Upgrade to Ubuntu 26.04
    • 358df95 Upgrade to libvips v8.18.7
    • 49f4903 Improve gain map support for rotate-then-extract #4606
    • 0e2e55e Silence a couple of compiler/static analysis warnings
    • cef3b8c Improve gain map support for extract operation #4606
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

    @dependabot
    chore(deps): bump the site-dependencies group across 1 directory with…
    5ebe5fe 
    … 4 updates

Bumps the site-dependencies group with 4 updates in the /site directory: [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark), [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight), [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) and [sharp](https://github.com/lovell/sharp).


Updates `@astrojs/markdown-remark` from 7.2.0 to 7.3.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.3.1/packages/markdown/remark)

Updates `@astrojs/starlight` from 0.40.0 to 0.42.4
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.4/packages/starlight)

Updates `astro` from 6.4.7 to 7.3.5
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v6.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.5/packages/astro)

Updates `sharp` from 0.35.1 to 0.35.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.1...v0.35.5)

---
updated-dependencies:
- dependency-name: "@astrojs/markdown-remark"
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: site-dependencies
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.42.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: site-dependencies
- dependency-name: astro
  dependency-version: 7.3.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: site-dependencies
- dependency-name: sharp
  dependency-version: 0.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: site-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 30, 2026
    @dependabot @github

    dependabot Bot commented on behalf of github Oct 1, 2026

    Copy link
    Copy Markdown
    Contributor Author

    Looks like these dependencies are no longer updatable, so this is no longer needed.

    @dependabot dependabot Bot closed this Oct 1, 2026
    @dependabot
    dependabot Bot deleted the dependabot/npm_and_yarn/site/site-dependencies-66d3d977c7 branch October 1, 2026 00:14
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    No reviews

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    0 participants