Skip to content

Bump the npm-all group across 1 directory with 9 updates - #1405

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-all-7a22cd6896
Open

Bump the npm-all group across 1 directory with 9 updates#1405
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-all-7a22cd6896

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown

Bumps the npm-all group with 9 updates in the / directory:

Package From To
@astrojs/markdown-satteri 0.3.5 0.4.1
@astrojs/starlight 0.41.7 0.42.2
@iconify-json/simple-icons 1.2.93 1.2.97
astro 7.2.1 7.3.3
astro-icon 1.1.5 1.2.0
sharp 0.34.5 0.35.4
@playwright/cli 0.1.18 0.1.21
prettier 3.9.6 3.9.8
prettier-plugin-astro 0.14.1 1.0.1

Updates @astrojs/markdown-satteri from 0.3.5 to 0.4.1

Release notes

Sourced from @​astrojs/markdown-satteri's releases.

@​astrojs/markdown-satteri@​0.4.1

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

@​astrojs/markdown-satteri@​0.4.0

Minor Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds MDX rendering to the unified() and satteri() processors.

    Both processors now compile .mdx files themselves. You still need to install @astrojs/mdx to add MDX support to your project.

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

@​astrojs/markdown-satteri@​0.3.8

Patch Changes

  • #17766 0762a83 Thanks @​HiDeoo! - Fixes Sätteri processor option types to accept all plugin entries supported by Sätteri v0.10.3.

  • #17314 0c99615 Thanks @​barry166! - Fixes the editor tooltip for smartPunctuation claiming it defaults to false when Astro enables it by default.

@​astrojs/markdown-satteri@​0.3.7

Patch Changes

@​astrojs/markdown-satteri@​0.3.6

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
Changelog

Sourced from @​astrojs/markdown-satteri's changelog.

0.4.1

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

0.4.0

Minor Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds MDX rendering to the unified() and satteri() processors.

    Both processors now compile .mdx files themselves. You still need to install @astrojs/mdx to add MDX support to your project.

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

0.3.8

Patch Changes

  • #17766 0762a83 Thanks @​HiDeoo! - Fixes Sätteri processor option types to accept all plugin entries supported by Sätteri v0.10.3.

  • #17314 0c99615 Thanks @​barry166! - Fixes the editor tooltip for smartPunctuation claiming it defaults to false when Astro enables it by default.

0.3.7

Patch Changes

0.3.6

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
Commits

Updates @astrojs/starlight from 0.41.7 to 0.42.2

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.2

Patch Changes

@​astrojs/starlight@​0.42.1

Patch Changes

  • #4198 96a44d4 Thanks @​mayank99! - Removes the popover attribute from the sidebar pane on desktop viewports. This ensures the desktop sidebar doesn't stay in a "hidden" popover visibility state.

@​astrojs/starlight@​0.42.0

Minor Changes

  • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

  • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

    ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

    In the following example, custom styles for the menu button are updated for the new approach:

    - starlight-menu-button button {
+ .sl-menu-button {
  color: var(--sl-color-text);
}

starlight-menu-button[aria-expanded='true'] button {


.sl-menu-button:has(~ :popover-open) {
color: var(--sl-color-text-accent-high);
}

See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    If your configuration included a tagline option, you can safely remove it without any replacement.

  • #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:

    • astro v7.2.10 or later
    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
    • @astrojs/markdown-remark 7.3.0 or later (if you use it)

    Please update Starlight and Astro together:

    

    • 



    

    ... (truncated)
    

    

    
Changelog

    Sourced from @​astrojs/starlight's changelog.
    

    

    0.42.2
    

    Patch Changes
    


    0.42.1
    

    Patch Changes
    

      

    • #4198 96a44d4 Thanks @​mayank99! - Removes the popover attribute from the sidebar pane on desktop viewports. This ensures the desktop sidebar doesn't stay in a "hidden" popover visibility state.
      • 

    

    0.42.0
    

    Minor Changes
    

      

    • 

      #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.
      

      • 

    • 

      #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle
      

      ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.
      

      In the following example, custom styles for the menu button are updated for the new approach:
      

      - starlight-menu-button button {
+ .sl-menu-button {
  color: var(--sl-color-text);
}

starlight-menu-button[aria-expanded='true'] button {


.sl-menu-button:has(~ :popover-open) {
color: var(--sl-color-text-accent-high);
}
      • 

    

    See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.
    


  • 

    #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.
    

    If your configuration included a tagline option, you can safely remove it without any replacement.
    

    • 

  • 

    #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.
    

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:
    

      

    • astro v7.2.10 or later
      • 

    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
      • 

    • @astrojs/markdown-remark 7.3.0 or later (if you use it)
      • 

    

    • 



    

    ... (truncated)
    

    

    
Commits


    

    

    Updates @iconify-json/simple-icons from 1.2.93 to 1.2.97
    

    
Commits


    

    

    Updates astro from 7.2.1 to 7.3.3
    

    
Release notes

    Sourced from astro's releases.
    

    

    astro@7.3.3
    

    Patch Changes
    

      

    • 

      #17651 504333c Thanks @​sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency
      

      • 

    • 

      #17942 0bc5715 Thanks @​matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths
      

      • 

    • 

      #17700 b2222fc Thanks @​winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us
      

      • 

    • 

      #17941 394ff79 Thanks @​matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.
      

      • 

    • 

      #17928 3277927 Thanks @​ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.
      

      • 

    • 

      #17928 3277927 Thanks @​ArmandPhilippot! - Fixes a type error in getImage() options that allowed passing both widths and densities at the same time.
      

      • 

    • 

      #17857 2637ed1 Thanks @​Princesseuh! - Improves rendering performance
      

      • 

    • 

      #17943 2fc7ce9 Thanks @​matthewp! - Fixes a WebAssembly error when importing astro:actions in tests that run under @cloudflare/vitest-pool-workers
      

      • 

    • 

      #18018 1b5a234 Thanks @​astro-factory! - Fixes trailing-slash redirect response body pointing to the incoming URL instead of the redirect target. The location header was correct, but the HTML body (<meta http-equiv="refresh">, <title>, and <a> tag) contained the original request path without the trailing-slash correction or query string.
      

      • 

    • 

      #17905 eaf70fa Thanks @​SudoDevStudio! - Fixes custom dev toolbar apps losing their UI after client-side navigation with <ClientRouter />.
      

      • 

    • 

      #18011 558b301 Thanks @​astro-factory! - Fixes prerendered Cloudflare pages rendering as [object Object] when nodejs_compat is enabled in wrangler.toml
      

      • 

    • 

      #17944 ba08e35 Thanks @​matthewp! - Fixes a regression in astro dev where writes outside the module graph (for example, @astrojs/cloudflare's .wrangler/state files) invalidated the middleware on every request, causing repeated SSR reloads. Such writes no longer invalidate the middleware.
      

      • 

    • 

      #17531 ae837db Thanks @​danilloestrela! - Updates svgo to 4.0.2 to resolve a security advisory
      

      • 

    • 

      #17953 dbbf10e Thanks @​astro-factory! - Fixes a one-time page reload shortly after the first load on cold dev-server starts when a project has framework components imported from MDX content entries. MDX files are now included in the dev dependency pre-bundling scan, so their framework dependencies are bundled up front instead of being discovered (and reloaded for) at runtime.
      

      • 

    • 

      #17955 4e8ad9a Thanks @​matthewp! - Improves dev server startup time. The content config and dev server app module graphs now begin compiling during server creation without blocking the server from listening. Request handling waits for the shared setup result when needed, cutting astro dev ready time by roughly a third on projects with a content config.
      

      • 

    • 

      #17960 9838049 Thanks @​Chy-Zaber-Bin-Zahid! - Improves the diagnostics of some Astro errors.
      

      • 

    • 

      #17998 0e5478d Thanks @​astro-factory! - Fixes SVG <style> elements nested inside <defs> or other container elements not being hashed for CSP
      

      • 

    • 

      #17994 80f9f1d Thanks @​astro-factory! - Fixes experimental.incrementalBuild restoring pages with stale CSS after a preprocessor partial changes or missing original images referenced by restored pages
      

      • 

    • 

      #17889 8ae6b46 Thanks @​ajfAfg! - Fixes a bug where the dev server stripped the configured base from URLs that only share a prefix with it. With base: '/s', requests to /src/... were rewritten to /rc/... and failed, breaking those pages during development.
      

      • 

    • 

      #17980 cfccafa Thanks @​gameroman! - Improves JSDoc for fonts api
      

      • 

    • 

      #17953 dbbf10e Thanks @​astro-factory! - Fixes CSS HMR for framework components rendered through content entries after ClientRouter navigation
      

      • 

    • 

      #17970 0b4dc3a Thanks @​matthewp! - Improves serialization of transition animation values in generated CSS
      

      • 

    • 

      #17999 30ef3cb Thanks @​astro-factory! - Fixes content collection HMR not updating prerendered pages when an adapter enables a separate prerender environment (e.g. @astrojs/cloudflare with prerenderEnvironment: 'node')
      

      • 

    • 

      #18002 312ab49 Thanks @​shoutoutuoadi325! - Fixes redirect targets being corrupted when a dynamic route parameter value contains $ replacement patterns like $&
      

      • 

    


    

    ... (truncated)
    

    

    
Changelog

    Sourced from astro's changelog.
    

    

    7.3.3
    

    Patch Changes
    

      

    • 

      #17651 504333c Thanks @​sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency
      

      • 

    • 

      #17942 0bc5715 Thanks @​matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths
      

      • 

    • 

      #17700 b2222fc Thanks @​winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us
      

      • 

    • 

      #17941 394ff79 Thanks @​matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.
      

      • 

    • 

      #17928 3277927 Thanks @​ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.
      

      • 

    • 

      #17928 3277927 Thanks @​ArmandPhilippot! - Fixes a type error in getImage() options that allowed passing both widths and densities at the same time.
      

      • 

    • 

      #17857 2637ed1 Thanks @​Princesseuh! - Improves rendering performance
      

      • 

    • 

      #17943 2fc7ce9 Thanks @​matthewp! - Fixes a WebAssembly error when importing astro:actions in tests that run under @cloudflare/vitest-pool-workers
      

      • 

    • 

      #18018 1b5a234 Thanks @​astro-factory! - Fixes trailing-slash redirect response body pointing to the incoming URL instead of the redirect target. The location header was correct, but the HTML body (<meta http-equiv="refresh">, <title>, and <a> tag) contained the original request path without the trailing-slash correction or query string.
      

      • 

    • 

      #17905 eaf70fa Thanks @​SudoDevStudio! - Fixes custom dev toolbar apps losing their UI after client-side navigation with <ClientRouter />.
      

      • 

    • 

      #18011 558b301 Thanks @​astro-factory! - Fixes prerendered Cloudflare pages rendering as [object Object] when nodejs_compat is enabled in wrangler.toml
      

      • 

    • 

      #17944 ba08e35 Thanks @​matthewp! - Fixes a regression in astro dev where writes outside the module graph (for example, @astrojs/cloudflare's .wrangler/state files) invalidated the middleware on every request, causing repeated SSR reloads. Such writes no longer invalidate the middleware.
      

      • 

    • 

      #17531 ae837db Thanks @​danilloestrela! - Updates svgo to 4.0.2 to resolve a security advisory
      

      • 

    • 

      #17953 dbbf10e Thanks @​astro-factory! - Fixes a one-time page reload shortly after the first load on cold dev-server starts when a project has framework components imported from MDX content entries. MDX files are now included in the dev dependency pre-bundling scan, so their framework dependencies are bundled up front instead of being discovered (and reloaded for) at runtime.
      

      • 

    • 

      #17955 4e8ad9a Thanks @​matthewp! - Improves dev server startup time. The content config and dev server app module graphs now begin compiling during server creation without blocking the server from listening. Request handling waits for the shared setup result when needed, cutting astro dev ready time by roughly a third on projects with a content config.
      

      • 

    • 

      #17960 9838049 Thanks @​Chy-Zaber-Bin-Zahid! - Improves the diagnostics of some Astro errors.
      

      • 

    • 

      #17998 0e5478d Thanks @​astro-factory! - Fixes SVG <style> elements nested inside <defs> or other container elements not being hashed for CSP
      

      • 

    • 

      #17994 80f9f1d Thanks @​astro-factory! - Fixes experimental.incrementalBuild restoring pages with stale CSS after a preprocessor partial changes or missing original images referenced by restored pages
      

      • 

    • 

      #17889 8ae6b46 Thanks @​ajfAfg! - Fixes a bug where the dev server stripped the configured base from URLs that only share a prefix with it. With base: '/s', requests to /src/... were rewritten to /rc/... and failed, breaking those pages during development.
      

      • 

    • 

      #17980 cfccafa Thanks @​gameroman! - Improves JSDoc for fonts api
      

      • 

    • 

      #17953 dbbf10e Thanks @​astro-factory! - Fixes CSS HMR for framework components rendered through content entries after ClientRouter navigation
      

      • 

    • 

      #17970 0b4dc3a Thanks @​matthewp! - Improves serialization of transition animation values in generated CSS
      

      • 

    • 

      #17999 30ef3cb Thanks @​astro-factory! - Fixes content collection HMR not updating prerendered pages when an adapter enables a separate prerender environment (e.g. @astrojs/cloudflare with prerenderEnvironment: 'node')
      

      • 

    


    

    ... (truncated)
    

    

    
Commits

      

    • 8a3106e [ci] release (#17939)
      • 

    • 5efea1b Add a version field to the astro-client-only fixture
      • 

    • 80f9f1d Hash compiled CSS output in incremental build to detect Sass partial changes ...
      • 

    • bc6572f Revert "Forward user class to Picture's outer element" (#18004) (#18030)
      • 

    • 0e5478d Normalize CRLF line endings before computing CSP hashes (#17998)
      • 

    • 30ef3cb fix: invalidate prerender environment in invalidateDataStore (#17991) (#17999)
      • 

    • 312ab49 Fix redirect targets when a param value contains a $ replacement pattern (#...
      • 

    • 1b5a234 Fix trailing-slash redirect body to match the Location header target (#18018)
      • 

    • 558b301 Fix prerendered Cloudflare pages rendering as [object Object] with nodejs_com...
      • 

    • 4464b3a fix(assets): forward class to picture element in Picture component (#18003) (...
      • 

    • Additional commits viewable in compare view
      • 

    

    

    

    Updates astro-icon from 1.1.5 to 1.2.0
    

    
Release notes

    Sourced from astro-icon's releases.
    

    

    astro-icon@1.2.0
    

    Minor Changes
    

      

    • 

      #290 956817e Thanks @​stramel! - Bump @iconify/tools to v5 and @iconify/utils to v3, removing the transitive extract-zip dependency that was flagged for a symlink path-traversal vulnerability (GHSA-jmr9-qjv8-65gv).
      

      Requires Node ≥22.12 — @iconify/utils v3 uses node:util's styleText, which needs Node ≥20.12/21.7, but the toolchain now also builds against Astro 7 (which itself requires Node ≥22.12). Node 20 reached end-of-life in April 2026, so astro-icon's engines field is raised to the currently-supported floor rather than the bare minimum.
      

      • 

    • 

      #285 2e83ca0 Thanks @​stramel! - title/desc props now accept { id, value } in addition to a plain string, so consumers can set id attributes on the generated <title>/<desc> elements for aria-labelledby referencing.
      

      • 

    

    Patch Changes
    

      

    • 

      #291 3db45a5 Thanks @​stramel! - Strip the lastModified timestamp from the generated local icon collection so its output is deterministic across builds, allowing Astro's incremental build cache to work as expected.
      

      • 

    • 

      #288 adb18cf Thanks @​stramel! - Log a warning instead of silently swallowing errors when the local icon collection fails to load, so failures during dev/build are visible instead of hidden.
      

      • 

    • 

      #287 fd5d522 Thanks @​stramel! - Fix icon dir watcher so newly added local icons (including files inside subfolders) are picked up without restarting the dev server
      

      • 

    • 

      #282 8904693 Thanks @​stramel! - Update @iconify/tools and @iconify/utils to resolve axios and undici vulnerabilities pulled in transitively.
      

      • 

    • 

      #286 6af6fcf Thanks @​stramel! - Fix viewBox being inconsistently present on <svg> elements across repeated uses of the same icon. The viewBox is now always kept on the <svg> element, so attributes that depend on it (such as preserveAspectRatio) continue to work. Icons whose viewBox has a non-zero min-x/min-y keep a viewBox on their shared <symbol> and anchor their <use> element, so they stay positioned correctly and a per-instance viewBox override no longer leaks onto other instances of the same icon.
      

      • 

    • 

      #281 df57ce6 Thanks @​stramel! - Fix duplicate/incorrect icons rendering in Chromium-based browsers by rewriting internal SVG ids (e.g. gradients, clip paths) to be unique per rendered icon.
      

      • 

    • 

      #284 09177dd Thanks @​stramel! - Fixes Astro.request.headers warning on prerendered pages by keying the internal per-render icon cache off Astro.locals instead of Astro.request
      

      • 

    

    

    

    
Changelog

    Sourced from astro-icon's changelog.
    

    

    1.2.0
    

    Minor Changes
    

      

    • 

      #290 956817e Thanks @​stramel! - Bump @iconify/tools to v5 and @iconify/utils to v3, removing the transitive extract-zip dependency that was flagged for a symlink path-traversal vulnerability (GHSA-jmr9-qjv8-65gv).
      

      Requires Node ≥22.12 — @iconify/utils v3 uses node:util's styleText, which needs Node ≥20.12/21.7, but the toolchain now also builds against Astro 7 (which itself requires Node ≥22.12). Node 20 reached end-of-life in April 2026, so astro-icon's engines field is raised to the currently-supported floor rather than the bare minimum.
      

      • 

    • 

      #285 2e83ca0 Thanks @​stramel! - title/desc props now accept { id, value } in addition to a plain string, so consumers can set id attributes on the generated <title>/<desc> elements for aria-labelledby referencing.
      

      • 

    

    Patch Changes
    

      

    • 

      #291 3db45a5 Thanks @​stramel! - Strip the lastModified timestamp from the generated local icon collection so its output is deterministic across builds, allowing Astro's incremental build cache to work as expected.
      

      • 

    • 

      #288 adb18cf Thanks @​stramel! - Log a warning instead of silently swallowing errors when the local icon collection fails to load, so failures during dev/build are visible instead of hidden.
      

      • 

    • 

      #287 fd5d522 Thanks @​stramel! - Fix icon dir watcher so newly added local icons (including files inside subfolders) are picked up without restarting the dev server
      

      • 

    • 

      #282 8904693 Thanks @​stramel! - Update @iconify/tools and @iconify/utils to resolve axios and undici vulnerabilities pulled in transitively.
      

      • 

    • 

      #286 6af6fcf Thanks @​stramel! - Fix viewBox being inconsistently present on <svg> elements across repeated uses of the same icon. The viewBox is now always kept on the <svg> element, so attributes that depend on it (such as preserveAspectRatio) continue to work. Icons whose viewBox has a non-zero min-x/min-y keep a viewBox on their shared <symbol> and anchor their <use> element, so they stay positioned correctly and a per-instance viewBox override no longer leaks onto other instances of the same icon.
      

      • 

    • 

      #281 df57ce6 Thanks @​stramel! - Fix duplicate/incorrect icons rendering in Chromium-based browsers by rewriting internal SVG ids (e.g. gradients, clip paths) to be unique per rendered icon.
      

      • 

    • 

      #284 09177dd Thanks @​stramel! - Fixes Astro.request.headers warning on prerendered pages by keying the internal per-render icon cache off Astro.locals instead of Astro.request
      

      • 

    

    

    

    
Commits

      

    • c079583 chore: release (#283)
      • 

    • eb0663b fix: keep viewBox on the svg wrapper instead of stripping it (#298)
      • 

    • d90facd chore: raise Node engines floor to >=22.12 (#296)
      • 

    • bb9e07e chore: format .astro files with prettier-plugin-astro (#295)
      • 

    • 9a2964b chore: bump dependencies to resolve pnpm audit vulnerabilities (#294)
      • 

    • 2e83ca0 feat: allow setting id on title/desc elements (#285)
      • 

    • 5f94dfc chore: require Node >=20.12 and mark @​iconify/tools v5 bump as minor (#293)
      • 

    • 3db45a5 fix: strip lastModified from local icon collection for deterministic output (...
      • 

    • 956817e fix: bump @​iconify/tools to v5 to remove vulnerable extract-zip dependency (#...
      • 

    • adb18cf fix: warn instead of silently swallowing local collection load errors (#288)
      • 

    • Additional commits viewable in compare view
      • 

    

    

    
Maintainer changes

    This version was pushed to npm by GitHub Actions, a new releaser for astro-icon since your current version.
    

    

    

    Updates sharp from 0.34.5 to 0.35.4
    

    
Release notes

    Sourced from sharp's releases.
    

    

    v0.35.4
    

    https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3
    

      

    • 

      Bound resize dimensions to coordinate limit.
      

      • 

    • 

      Bound composite left and top to coordinate limit.
#4564
@​metsw24-max
      

      • 

    • 

      Round palette bit depth up for png and gif colours.
#4569
@​metsw24-max
      

      • 

    • 

      Ensure tiff.subifd input option is ...

      Description has been truncated
    
    
    
      
  

    

      
    

          
    
          
  
  
    
    
  
    
    

  
    
  

  
    

    
                    
    
          
        
    



    
  
    

    
    

    
    


      
    
  
        
    
  
    
      
    
  
  
    
  
              
    
  
    
    
    
      

    
  
    
        
          @dependabot
  
    

    

      
    
        
          Bump the npm-all group across 1 directory with 9 updates
        

          
                        
      
    

      
    
        

    
    
    

  

    


      
    

      
    
        
    
          

    
    
    

  

  
    
    
  
    

    
        
    
      
    

      
    
        
          9907769
        
      
    
    
    
  
    
    
    
      
    Bumps the npm-all group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/markdown-satteri](https://github.com/withastro/astro/tree/HEAD/packages/markdown/satteri) | `0.3.5` | `0.4.1` |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.7` | `0.42.2` |
| [@iconify-json/simple-icons](https://github.com/iconify/icon-sets) | `1.2.93` | `1.2.97` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.1` | `7.3.3` |
| [astro-icon](https://github.com/natemoo-re/astro-icon/tree/HEAD/packages/core) | `1.1.5` | `1.2.0` |
| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.4` |
| [@playwright/cli](https://github.com/microsoft/playwright-cli) | `0.1.18` | `0.1.21` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.8` |
| [prettier-plugin-astro](https://github.com/withastro/prettier-plugin-astro) | `0.14.1` | `1.0.1` |



Updates `@astrojs/markdown-satteri` from 0.3.5 to 0.4.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/satteri/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-satteri@0.4.1/packages/markdown/satteri)

Updates `@astrojs/starlight` from 0.41.7 to 0.42.2
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.2/packages/starlight)

Updates `@iconify-json/simple-icons` from 1.2.93 to 1.2.97
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `astro` from 7.2.1 to 7.3.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.3/packages/astro)

Updates `astro-icon` from 1.1.5 to 1.2.0
- [Release notes](https://github.com/natemoo-re/astro-icon/releases)
- [Changelog](https://github.com/natemoo-re/astro-icon/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/natemoo-re/astro-icon/commits/astro-icon@1.2.0/packages/core)

Updates `sharp` from 0.34.5 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.4)

Updates `@playwright/cli` from 0.1.18 to 0.1.21
- [Release notes](https://github.com/microsoft/playwright-cli/releases)
- [Commits](microsoft/playwright-cli@v0.1.18...v0.1.21)

Updates `prettier` from 3.9.6 to 3.9.8
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.8)

Updates `prettier-plugin-astro` from 0.14.1 to 1.0.1
- [Release notes](https://github.com/withastro/prettier-plugin-astro/releases)
- [Changelog](https://github.com/withastro/prettier-plugin-astro/blob/main/CHANGELOG.md)
- [Commits](withastro/prettier-plugin-astro@v0.14.1...v1.0.1)

---
updated-dependencies:
- dependency-name: "@astrojs/markdown-satteri"
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.42.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: "@iconify-json/simple-icons"
  dependency-version: 1.2.97
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: astro
  dependency-version: 7.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: astro-icon
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: "@playwright/cli"
  dependency-version: 0.1.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: prettier
  dependency-version: 3.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: prettier-plugin-astro
  dependency-version: 1.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
...

Signed-off-by: dependabot[bot] <support@github.com>
    
    
    

    


    

      
    

    



    

      
    
  
            
    
    
    
      
    
    
    
    

      


          @dependabot
dependabot
Bot



            added
      
  dependencies

  Pull requests that update a dependency file

      
  javascript

  Pull requests that update javascript code

  labels


      Sep 21, 2026

    
    
  
    





    





  
  
    
    
    
      

      
    




    



    
    
    
    
    

      
      

    
  
    
    
  
    

  
    This branch has not been deployed
    
  
        No deployments
  

    

    
    
  
    


    





    
  
      
    
  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  

    


    

    

    

    
        
    
  
    
    
    
    
    

  
    
    Reviewers
  
    

    

    No reviews




    


  
      
    
  
    

      
  
    
    Assignees
  
    


        


    No one assigned




    


  
        

    
  


  
    
    Labels
  
    


    
    
      
    dependencies

  Pull requests that update a dependency file
  
    javascript

  Pull requests that update javascript code


    


    


  
        

  
    
    
    
        
    
    Projects
  
    

        
    

    

    None yet




      
    


  
        

    
  
    
    
  
    
    Milestone
  
    

      No milestone


    


    
      
          

    
  
    
    
    
      
        
    
          
  
    
    Development
  
    


            


    Successfully merging this pull request may close these issues.
    




  
  



              
    
    
  
    

    

          

  
  
        
    
  
    
    
    
      0 participants