Repository navigation
fix(deps): update all non-major dependencies - #327
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
7.3.3→7.3.40.42.6→0.42.77.4.0→7.4.226.12.0-bookworm-slim→26.12.1-bookworm-slim2.11.9→2.11.10Release Notes
withastro/astro (@astrojs/markdown-remark)
v7.3.4Compare Source
Patch Changes
cf27e70]:withastro/starlight (@astrojs/starlight)
v0.42.7Compare Source
Patch Changes
#4264
94e0985Thanks @chrispezza! - Fixes a layout shift where the table of contents could be painted at the start of the content area and then jump to the end when a page's HTML arrived in several chunks#4285
6f22eddThanks @tunetheweb! - Improves hero image loading by addingfetchpriority="high"hint for browserswithastro/astro (astro)
v7.4.2Compare Source
Patch Changes
#18430
dda9ec3Thanks @Abhirup-99! - Speeds up content sync withexperimental.collectionStorage: "chunked"by computing each character's UTF-8 width from its code point instead of encoding every character throughTextEncoder. On a store of ~44k entries this cuts the chunking step from about 60 seconds to well under a second, with byte-identical output.#18438
5e0eaa4Thanks @astro-factory! - Fixesastro devwith@astrojs/cloudflarefailing withCalling `require` for "node-fetch"when a server dependency such ascross-fetchrequiresnode-fetch#18376
a4e201dThanks @okxint! - Fixesastro devtreating a stale lock file containing a Linux thread ID as a running Astro server. A successful process lookup with no matching PID now marks the lock as stale, preventingastro dev stopandastro dev --forcefrom killing the unrelated process that owns the thread.#18467
d1fb7d3Thanks @astro-factory! - Fixes thedefineConfig()types fori18n.defaultLocale,i18n.fallback, andi18n.domainsso they accept a custom locale'spathinstead of itscodes, matching how Astro validates and uses these values#18475
cf27e70Thanks @ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releasesThis is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.
#18451
7a0ba6fThanks @DenisCDev! - Fixesastro sync,astro checkandastro buildreplacing the optimized dependencies of a dev server running in the same project, which broke framework islands in that dev server until it was restarted with--force#18336
e943003Thanks @astro-factory! - Fixes inline styles in dev so that framework-transformed CSS is used, such as scoped styles andv-bind()in Vue single-file components#18399
829fc00Thanks @astro-factory! - Fixes a dev server error (Could not find server component name) for aserver:deferisland that importsastro:actionsorastro:config/server, when its page was not the first island page loaded after starting the server#18330
4db9e0dThanks @Samuteg! - Fixes theastro:env/servervirtual module being generated with invalid JS in dev when any environment variable contains$replacement patterns ($`,$&,$',$1, …). The inlined env JSON was passed as a string toString.replace, so e.g. theKITTY_PUBLIC_KEYvalue set by default in Kitty terminals corrupted the module and broke dev withFailed to parse source for import analysisUpdated dependencies [
cf27e70]:v7.4.1Compare Source
Patch Changes
#18425
6fdc36eThanks @astro-factory! - Preserves the last modified date of cached optimized images and incrementally restored build output when copying them into the build output on all platforms#18419
395d195Thanks @astro-factory! - Fixes a typo in the error message shown when a fontcssVariableis invalid#18401
484822fThanks @danielmlr! - Fixes a bug where projects whose path contains an apostrophe (') failed to load sessions, middleware, a cache provider, or asrc/fetch.tshandler#18407
a6e00beThanks @astro-factory! - Fixes aTSCONFIG_ERRORduringastro buildwhen a parent directory contains atsconfig.jsonthat cannot be resolved, such as one extendingastro/tsconfigs/strictwithout installed dependencies#18427
908f167Thanks @astro-factory! - Fixes anUnterminated stringbuild error when application code imports fromastro/config(for example,fontProvidersin a shared fonts module)#18428
40e7d54Thanks @astro-factory! - Fixes missing styles in production builds for conditionally rendered framework components (e.g. Svelte components inside{#if}blocks) imported by a hydrated island#18424
617ff59Thanks @astro-factory! - Fixes style-only HMR in.astrocomponents falling back to a full page reload when a PostCSS plugin (such as@unocss/postcss) lists the component as a dependency of its own style#18274
70834bbThanks @Princesseuh! - Fixes increasing memory usage when editing the Astro configuration while the dev server is runningnodejs/node (node)
v26.12.1: 2026-10-21, Version 26.12.1 (Current), @aduh95 prepared by @RafaelGSSCompare Source
This is a security release.
Notable Changes
BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH(Antoine du Hamel) – High0ed4268(Evgenii Kliuchnikov) – High93cd21e(Joyee Cheung)Commits
818e4ca061] - crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel) #66877fd3c87ed43] - crypto: harden X.509 conversion and formatting (Filip Skokan) nodejs-private/node-private#966acffa610db] - crypto: reset random caches across snapshots (Filip Skokan) nodejs-private/node-private#9877895a5cd2d] - deps: update undici to 8.12.2 (Node.js GitHub Bot) #6672112daa54d2e] - deps: V8: backport93cd21e(Joyee Cheung) nodejs-private/node-private#9996a8b3db7e2] - deps: update c-ares to 1.34.9 (Node.js GitHub Bot) #66868a6040b50d9] - deps: brotli: cherry-pick0ed4268(Evgenii Kliuchnikov) nodejs-private/node-private#10026b78ea171d] - dns: validate resolve inputs for null bytes (James M Snell) nodejs-private/node-private#9840683ee5f7d] - http: ensure agent data guard works without I/O (James M Snell) nodejs-private/node-private#983e5cae10148] - Revert "module: synchronously load most ES modules" (Antoine du Hamel) #66786cc244131aa] - permission: check permission model in realpathSync (RafaelGSS) nodejs-private/node-private#9730392385841] - src: exposeBROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH(Antoine du Hamel) nodejs-private/node-private#1002c273a408c9] - src: fix the fs permission tree node on wildcard nodes (James M Snell) nodejs-private/node-private#986a2caddd20e] - tls: reject chains containing blocked public keys (Ulises Gascon) #66871ad788ccd07] - tls: reject non-canonical IP addresses (Matteo Collina) nodejs-private/node-private#982cd4b05469c] - tls: fix ip normalization regression (James M Snell) nodejs-private/node-private#9855fa440e0d7] - tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett) #66855745ad77156] - zlib: avoid caching invalid ZIP local headers (Matteo Collina) nodejs-private/node-private#981vercel/turborepo (turbo)
v2.11.10: Turborepo v2.11.10Compare Source
What's Changed
Changelog
turbo lsoutput is piped to a closed reader by @drakeo338 in #14868Full Changelog: vercel/turborepo@v2.11.9...v2.11.10
Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.