Skip to content

build(deps): bump the dependencies group across 1 directory with 18 updates - #78

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/dependencies-954d9f760f
Open

build(deps): bump the dependencies group across 1 directory with 18 updates#78
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/dependencies-954d9f760f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 18 updates in the / directory:

Package From To
eslint 10.7.0 10.8.0
turbo 2.10.5 2.10.8
typescript 6.0.3 7.0.2
@cloudflare/nimbus-docs 0.6.1 0.8.2
astro 7.1.3 7.1.6
@astrojs/check 0.9.9 0.9.10
wrangler 4.112.0 4.118.0
@astrojs/cloudflare 14.1.4 14.1.7
@astrojs/react 6.0.1 6.0.2
@base-ui/react 1.6.0 1.7.0
lucide-react 1.25.0 1.28.0
react 19.2.7 19.2.8
@types/react 19.2.17 19.2.18
react-dom 19.2.7 19.2.8
@types/react-dom 19.2.3 19.2.4
recharts 3.10.0 3.10.1
@types/react 19.2.17 19.2.18
@types/react-dom 19.2.3 19.2.4
@cloudflare/workers-types 5.20260721.1 5.20260804.1
@types/node 26.1.1 26.1.2

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)
Commits

Updates turbo from 2.10.5 to 2.10.8

Release notes

Sourced from turbo's releases.

Turborepo v2.10.8

What's Changed

Changelog

... (truncated)

Commits

Updates typescript from 6.0.3 to 7.0.2

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates @cloudflare/nimbus-docs from 0.6.1 to 0.8.2

Release notes

Sourced from @​cloudflare/nimbus-docs's releases.

@​cloudflare/nimbus-docs@​0.8.2

Patch Changes

  • #59 01a5d23 Thanks @​MohamedH1998! - Fix overview-leaf reordering a flat top-level sidebar per page

    In indexDisplay: "overview-leaf" mode, the section-root pin relabelled and moved any top-level link whose slug matched the current section — including standalone top-level pages with no content beneath them. On a flat top-level of single pages, that pulled the current page to the front and renamed it "Overview" on every page. Pinning now requires the section to actually have content under it, so standalone pages stay put and keep their label.

@​cloudflare/nimbus-docs@​0.8.1

Patch Changes

  • #55 a590ebd Thanks @​MohamedH1998! - CLI hints now print a runnable, scoped invocation instead of the bare nimbus-docs binary. Error messages, install hints, and --help reference pnpm dlx @cloudflare/nimbus-docs … (matched to your package manager — npx / yarn dlx / bunx), so a first-run dlx/npx user can copy-paste them, and they never resolve the unrelated legacy unscoped nimbus-docs package on npm. For example, an unknown slug now suggests pnpm dlx @cloudflare/nimbus-docs list rather than nimbus-docs list. Once @cloudflare/nimbus-docs is a project dependency you can still call the nimbus-docs bin directly (via pnpm exec or an npm script) — --help documents both. The "framework is behind" nudge from outdated now suggests your package manager's update command instead of a hardcoded npm update.

@​cloudflare/nimbus-docs@​0.8.0

Minor Changes

  • #42 8e4e210 Thanks @​MohamedH1998! - Add the ownership + upgrade loop to the nimbus-docs CLI:

    • nimbus-docs init — reconstruct a nimbus.json for a project that lacks one (scaffolded before this record existed, an existing Astro site adopting Nimbus, or a deleted record), matching installed components against the registry and marking what it can't recover.
    • nimbus-docs outdated — a read-only check across both tiers: starter files behind their templates-v* tag (which git diff can't show) and registry components whose recorded bytes differ from the registry.
    • nimbus-docs diff [file] / diff --apply <file> — review upstream/your changes to starter files, and pull a clean upstream change per file (never a merge).
    • nimbus-docs add <slug> --overwrite — re-install a component over your copy (review with git diff). add also records each install in nimbus.json.

    Also adds a getRouteFlags layout-flag helper and a CI guard for the registry tier invariants.

    Migration — add --yes no longer overwrites files you own. It now assents to prompts (dependency installs, etc.) but keeps existing files on conflict, so a bare -y in CI never clobbers your code. Use --overwrite to replace files.

    # before — --yes overwrote conflicting files
nimbus-docs add card --yes
after — replace files explicitly
nimbus-docs add card --overwrite

  • #34 73bbecf Thanks @​mvvmm! - nimbus/internal-link and nimbus/image-ref now match their ignore: string[] option against full glob syntax (**, *, {a,b}, extglobs, …) via picomatch, not just an exact match or a prefix immediately followed by /**. In particular, a leading any-depth wildcard like **/llms.txt is now supported — the previous hand-rolled matcher had no way to express that.

    Existing ignore lists using only exact paths or prefix/** patterns keep working unchanged.

@​cloudflare/nimbus-docs@​0.7.1

Patch Changes

  • #36 738c8a0 Thanks @​mvvmm! - Merge partial headings into the parent page's TOC. <Render file="..." /> partials that contain literal markdown headings (## Foo) now contribute those headings to the parent page's "On this page" table of contents, in document order, recursively. Pass partialHeadings: { resolvePartialId } to getDocsPageProps() / getCollectionPageProps() to customise how <Render> attributes map to a partial collection id (e.g. cloudflare-docs' product convention).

@​cloudflare/nimbus-docs@​0.7.0

... (truncated)

Changelog

Sourced from @​cloudflare/nimbus-docs's changelog.

0.8.2

Patch Changes

  • #59 01a5d23 Thanks @​MohamedH1998! - Fix overview-leaf reordering a flat top-level sidebar per page

    In indexDisplay: "overview-leaf" mode, the section-root pin relabelled and moved any top-level link whose slug matched the current section — including standalone top-level pages with no content beneath them. On a flat top-level of single pages, that pulled the current page to the front and renamed it "Overview" on every page. Pinning now requires the section to actually have content under it, so standalone pages stay put and keep their label.

0.8.1

Patch Changes

  • #55 a590ebd Thanks @​MohamedH1998! - CLI hints now print a runnable, scoped invocation instead of the bare nimbus-docs binary. Error messages, install hints, and --help reference pnpm dlx @cloudflare/nimbus-docs … (matched to your package manager — npx / yarn dlx / bunx), so a first-run dlx/npx user can copy-paste them, and they never resolve the unrelated legacy unscoped nimbus-docs package on npm. For example, an unknown slug now suggests pnpm dlx @cloudflare/nimbus-docs list rather than nimbus-docs list. Once @cloudflare/nimbus-docs is a project dependency you can still call the nimbus-docs bin directly (via pnpm exec or an npm script) — --help documents both. The "framework is behind" nudge from outdated now suggests your package manager's update command instead of a hardcoded npm update.

0.8.0

Minor Changes

  • #42 8e4e210 Thanks @​MohamedH1998! - Add the ownership + upgrade loop to the nimbus-docs CLI:

    • nimbus-docs init — reconstruct a nimbus.json for a project that lacks one (scaffolded before this record existed, an existing Astro site adopting Nimbus, or a deleted record), matching installed components against the registry and marking what it can't recover.
    • nimbus-docs outdated — a read-only check across both tiers: starter files behind their templates-v* tag (which git diff can't show) and registry components whose recorded bytes differ from the registry.
    • nimbus-docs diff [file] / diff --apply <file> — review upstream/your changes to starter files, and pull a clean upstream change per file (never a merge).
    • nimbus-docs add <slug> --overwrite — re-install a component over your copy (review with git diff). add also records each install in nimbus.json.

    Also adds a getRouteFlags layout-flag helper and a CI guard for the registry tier invariants.

    Migration — add --yes no longer overwrites files you own. It now assents to prompts (dependency installs, etc.) but keeps existing files on conflict, so a bare -y in CI never clobbers your code. Use --overwrite to replace files.

    # before — --yes overwrote conflicting files
nimbus-docs add card --yes
after — replace files explicitly
nimbus-docs add card --overwrite

  • #34 73bbecf Thanks @​mvvmm! - nimbus/internal-link and nimbus/image-ref now match their ignore: string[] option against full glob syntax (**, *, {a,b}, extglobs, …) via picomatch, not just an exact match or a prefix immediately followed by /**. In particular, a leading any-depth wildcard like **/llms.txt is now supported — the previous hand-rolled matcher had no way to express that.

    Existing ignore lists using only exact paths or prefix/** patterns keep working unchanged.

0.7.1

Patch Changes

  • #36 738c8a0 Thanks @​mvvmm! - Merge partial headings into the parent page's TOC. <Render file="..." /> partials that contain literal markdown headings (## Foo) now contribute those headings to the parent page's "On this page" table of contents, in document order, recursively. Pass partialHeadings: { resolvePartialId } to getDocsPageProps() / getCollectionPageProps() to customise how

... (truncated)

Commits
  • b13d241 chore: bump package versions
  • 01a5d23 chore: pin only real section roots in overview-leaf sidebars
  • d6b35f6 chore: bump package versions
  • a590ebd chore: consistent package scope
  • fbcc522 chore: www copy
  • 773f249 chore: bump package versions
  • 42629c9 Merge branch 'main' into chore/dx-consistency-sweep
  • 1cfd543 Merge pull request #34 from cloudflare/feat/internal-link-ignore-glob
  • 55deade Merge pull request #35 from cloudflare/chore/scaffold-command-standardisation
  • 89f84d5 feat: feature versioning
  • Additional commits viewable in compare view

Updates astro from 7.1.3 to 7.1.6

Release notes

Sourced from astro's releases.

astro@7.1.6

Patch Changes

  • #17536 ff97b86 Thanks @​dmgawel! - Fixes concurrent static builds failing to generate i18n rewrite fallbacks for dynamic routes

  • #17383 296e1b0 Thanks @​thelazylamaGit! - Fixes stale dev CSS after editing component style blocks and CSS files in dev

  • #17543 bbc1ec9 Thanks @​ematipico! - Adds a feature to experimental.collectionStorage that allows to change the size of chunks.

    For example, you can reduce the size of chunks to 1MB:

    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
collectionStorage: {
type: 'chunked',
chunkSize: 1024 * 1024,
},
},
});

  • #17545 5214663 Thanks @​ematipico! - Bumps the Astro compiler to the latest version. Changelog.

astro@7.1.5

Patch Changes

  • #17524 7613030 Thanks @​matthewp! - Fixes a bug where an error while finalizing a request could prevent a response from being sent

  • #17480 f61ba9c Thanks @​florian-lefebvre! - Fixes a case where a custom logger.entrypoint failed to load at runtime in a built server bundle.

  • #17525 e614b7b Thanks @​matthewp! - Fixes action path resolution so that properties of a resolved action function are not treated as routable path segments

  • #17284 c775c1f Thanks @​matthewp! - Fixes a bug where the custom 404 (or 500) page was not rendered when a middleware rewrite targeted a route that returned an empty 404/500 response, and a blank page was returned instead

  • #17474 c895b12 Thanks @​nicksnyder! - Updates dependency js-yaml to v4.3.0

  • Updated dependencies [c895b12]:

    • @​astrojs/internal-helpers@​0.10.2
    • @​astrojs/markdown-remark@​7.2.2
    • @​astrojs/markdown-satteri@​0.3.5

astro@7.1.4

Patch Changes

  • #17488 d4f266d Thanks @​emerson-d-lopes! - Fixes duplicate CSS files being emitted in server output when a prerendered page and a server-rendered page share the same styles (e.g. a shared layout importing Tailwind). The prerender and SSR environments each emitted their own copy of the same stylesheet (index.X.css and _..Y.css); the SSR build now reuses the CSS asset filename from the prerender build when the stylesheet is backed by the same CSS source modules, so only a single file is emitted.

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.6

Patch Changes

  • #17536 ff97b86 Thanks @​dmgawel! - Fixes concurrent static builds failing to generate i18n rewrite fallbacks for dynamic routes

  • #17383 296e1b0 Thanks @​thelazylamaGit! - Fixes stale dev CSS after editing component style blocks and CSS files in dev

  • #17543 bbc1ec9 Thanks @​ematipico! - Adds a feature to experimental.collectionStorage that allows to change the size of chunks.

    For example, you can reduce the size of chunks to 1MB:

    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
collectionStorage: {
type: 'chunked',
chunkSize: 1024 * 1024,
},
},
});

  • #17545 5214663 Thanks @​ematipico! - Bumps the Astro compiler to the latest version. Changelog.

7.1.5

Patch Changes

  • #17524 7613030 Thanks @​matthewp! - Fixes a bug where an error while finalizing a request could prevent a response from being sent

  • #17480 f61ba9c Thanks @​florian-lefebvre! - Fixes a case where a custom logger.entrypoint failed to load at runtime in a built server bundle.

  • #17525 e614b7b Thanks @​matthewp! - Fixes action path resolution so that properties of a resolved action function are not treated as routable path segments

  • #17284 c775c1f Thanks @​matthewp! - Fixes a bug where the custom 404 (or 500) page was not rendered when a middleware rewrite targeted a route that returned an empty 404/500 response, and a blank page was returned instead

  • #17474 c895b12 Thanks @​nicksnyder! - Updates dependency js-yaml to v4.3.0

  • Updated dependencies [c895b12]:

    • @​astrojs/internal-helpers@​0.10.2
    • @​astrojs/markdown-remark@​7.2.2
    • @​astrojs/markdown-satteri@​0.3.5

7.1.4

Patch Changes

... (truncated)

Commits

Updates @astrojs/check from 0.9.9 to 0.9.10

Release notes

Sourced from @​astrojs/check's releases.

@​astrojs/check@​0.9.10

Patch Changes

Changelog

Sourced from @​astrojs/check's changelog.

0.9.10

Patch Changes

Commits

Updates wrangler from 4.112.0 to 4.118.0

Release notes

Sourced from wrangler's releases.

wrangler@4.118.0

Minor Changes

  • #14057 cc63aae Thanks @​matingathani! - Add --json flag to wrangler containers info for consistent JSON output with sibling commands list and instances

  • #14944 a249591 Thanks @​nickpatt! - Enable local observability capture by default in dev

    wrangler dev and the Vite plugin now capture request traces and console logs into the Local Explorer's Observability tab out of the box — previously this was opt-in behind X_LOCAL_OBSERVABILITY=true. Set X_LOCAL_OBSERVABILITY=false to opt out (for example if the extra per-worker collector/streaming-tail services cause trouble in a multi-process dev-registry setup).

  • #14919 e0bbf55 Thanks @​avenceslau! - Add additional triggers to Workflows

    Workers can now declaratively start a locally defined Workflow. Configure event subscriptions under triggers.events; Wrangler validates each target and updates the script's event triggers during deployment.

    {
  "triggers": {
    "events": [
      {
        "type": "cf.artifacts.repo.pushed",
        "filter": {
          "namespace": "my-namespace",
          "repo_name": "my-repo"
        },
        "targets": [
          {
            "type": "workflow",
            "workflow_name": "my-workflow"
          }
        ]
      }
    ]
  }
}

Patch Changes

  • #14936 f92d1fc Thanks @​petebacondarwin! - Fix jsx_fragment being ignored when wrangler dev runs a custom build

    If your project uses a custom build and sets both jsx_factory and jsx_fragment, wrangler dev used your jsx_factory value for JSX fragments as well, so fragments compiled incorrectly. Your jsx_fragment value is now used.

  • #14936 f92d1fc Thanks @​petebacondarwin! - Stop wrangler dev starting new work after you stop it or it reloads

    Stopping wrangler dev, or having it reload after a configuration change, could still leave it starting work for the state it had just left behind: your custom build command could run once more after dev had stopped, a change to a file in your assets directory could be reported against configuration that had already been replaced, and in some cases the process could stay alive instead of exiting.

    That work is now discarded, so stopping or reloading wrangler dev leaves nothing running behind it.

  • #14936 f92d1fc Thanks @​petebacondarwin! - Stop wrangler dev from running custom builds concurrently

    When several watched files changed at once — for example during a git pull or a "save all" ...

    Description has been truncated

    Summary by cubic

    Upgrade dependencies across the repo to keep builds and dev tools current. Key updates include typescript 7, astro 7.1.6, wrangler 4.118.0, eslint 10.8.0, turbo 2.10.8, and @cloudflare/nimbus-docs 0.8.2, plus minor React and UI library bumps.

    • Dependencies
      • Tooling: typescript 7.0.2, eslint 10.8.0, turbo 2.10.8.
      • Astro/docs: astro 7.1.6, @astrojs/check 0.9.10, @astrojs/cloudflare 14.1.7, @astrojs/react 6.0.2, @cloudflare/nimbus-docs 0.8.2.
      • Cloudflare: wrangler 4.118.0, @cloudflare/workers-types 5.20260804.1.
      • Web UI: react/react-dom 19.2.8, @types/react 19.2.18, @types/react-dom 19.2.4, @base-ui/react 1.7.0, lucide-react 1.28.0, recharts 3.10.1.

    Written for commit 004c338. Summary will update on new commits.

@dependabot
build(deps): bump the dependencies group across 1 directory with 18 u…
004c338 
…pdates

Bumps the dependencies group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.0` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.5` | `2.10.8` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [@cloudflare/nimbus-docs](https://github.com/cloudflare/nimbus/tree/HEAD/packages/nimbus-docs) | `0.6.1` | `0.8.2` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.3` | `7.1.6` |
| [@astrojs/check](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check) | `0.9.9` | `0.9.10` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.112.0` | `4.118.0` |
| [@astrojs/cloudflare](https://github.com/withastro/astro/tree/HEAD/packages/integrations/cloudflare) | `14.1.4` | `14.1.7` |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `6.0.1` | `6.0.2` |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.6.0` | `1.7.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.28.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` |
| [recharts](https://github.com/recharts/recharts) | `3.10.0` | `3.10.1` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260721.1` | `5.20260804.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.1` | `26.1.2` |



Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.0)

Updates `turbo` from 2.10.5 to 2.10.8
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.5...v2.10.8)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `@cloudflare/nimbus-docs` from 0.6.1 to 0.8.2
- [Release notes](https://github.com/cloudflare/nimbus/releases)
- [Changelog](https://github.com/cloudflare/nimbus/blob/main/packages/nimbus-docs/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/nimbus/commits/@cloudflare/nimbus-docs@0.8.2/packages/nimbus-docs)

Updates `astro` from 7.1.3 to 7.1.6
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.1.6/packages/astro)

Updates `@astrojs/check` from 0.9.9 to 0.9.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/astro-check/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/check@0.9.10/packages/language-tools/astro-check)

Updates `wrangler` from 4.112.0 to 4.118.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.118.0/packages/wrangler)

Updates `@astrojs/cloudflare` from 14.1.4 to 14.1.7
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/cloudflare/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/cloudflare@14.1.7/packages/integrations/cloudflare)

Updates `@astrojs/react` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/react@6.0.2/packages/integrations/react)

Updates `@base-ui/react` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.7.0/packages/react)

Updates `lucide-react` from 1.25.0 to 1.28.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.28.0/packages/lucide-react)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `recharts` from 3.10.0 to 3.10.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v3.10.0...v3.10.1)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@cloudflare/workers-types` from 5.20260721.1 to 5.20260804.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@types/node` from 26.1.1 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: turbo
  dependency-version: 2.10.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: "@cloudflare/nimbus-docs"
  dependency-version: 0.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: astro
  dependency-version: 7.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@astrojs/check"
  dependency-version: 0.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: wrangler
  dependency-version: 4.118.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@astrojs/cloudflare"
  dependency-version: 14.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@astrojs/react"
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@base-ui/react"
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: lucide-react
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: recharts
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260804.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
@greptile-apps

greptile-apps Bot commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

PR author is in the excluded authors list.

@socket-security

socket-security Bot commented Aug 11, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​types/​react-dom@​19.2.3 ⏵ 19.2.4100 +110075 +188100
Updated@​cloudflare/​nimbus-docs@​0.6.1 ⏵ 0.8.278 +210088 +196 +5100
Updated@​types/​react@​19.2.17 ⏵ 19.2.18100 +110079 +192100
Updatedrecharts@​3.10.0 ⏵ 3.10.180 +1100100 +195 -1100
Updated@​astrojs/​check@​0.9.9 ⏵ 0.9.101001008091100
Updatedlucide-react@​1.25.0 ⏵ 1.28.0100 +110098 +196 +180
Added@​types/​node@​26.1.21001008196100
Updated@​astrojs/​react@​6.0.1 ⏵ 6.0.2991008296100
Updated@​astrojs/​cloudflare@​14.1.4 ⏵ 14.1.7100 +110084 +198 +1100
Updatedreact@​19.2.7 ⏵ 19.2.81001008497100
Updatedturbo@​2.10.5 ⏵ 2.10.8100 +110085 +197100
Updatedastro@​7.1.3 ⏵ 7.1.698 +1010088 +198100
Updatedtypescript@​6.0.3 ⏵ 7.0.29910089 -1100100 +10
Updated@​base-ui/​react@​1.6.0 ⏵ 1.7.089 +1810089 +195 +5100
Updatedwrangler@​4.112.0 ⏵ 4.118.0981009296 +1100
Updatedreact-dom@​19.2.7 ⏵ 19.2.81001009298100
Updated@​cloudflare/​workers-types@​5.20260721.1 ⏵ 5.20260804.1100 +261009699100
Updatedeslint@​10.7.0 ⏵ 10.8.09710010097 +1100

View full report

@socket-security

socket-security Bot commented Aug 11, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm astro is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: apps/docs/package.json → npm/astro@7.1.6

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/astro@7.1.6. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@codecov

codecov Bot commented Aug 11, 2026

Copy link
Copy Markdown

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.

chatgpt-codex-connector[bot]
chatgpt-codex-connector Bot reviewed Aug 11, 2026
View reviewed changes

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 004c3380ec

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread package.json
"typescript": "^6.0"
"eslint": "^10.8.0",
"turbo": "^2.10.8",
"typescript": "^7.0"

@chatgpt-codex-connector chatgpt-codex-connector Bot Aug 11, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep TypeScript within supported peer ranges

This upgrades the workspace TypeScript to 7.x, but the resolved lint stack in bun.lock still uses @typescript-eslint/parser/eslint-plugin 8.63.0, whose peer range is typescript >=4.8.4 <6.1.0; the same commit also puts the docs astro check on TypeScript 7 while @astrojs/check declares ^5.0.0 || ^6.0.0. In CI, .github/workflows/ci.yml runs bun run lint and bun run typecheck, so this dependency set leaves both quality gates running against unsupported TypeScript APIs rather than the versions those tools declare compatible.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chatgpt-codex-connector chatgpt-codex-connector[bot] chatgpt-codex-connector[bot] left review comments

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants