Skip to content

chore(deps): bump the minor-updates group across 1 directory with 12 updates - #71

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-minor-updates-f8ce8a3e97
Closed

chore(deps): bump the minor-updates group across 1 directory with 12 updates#71
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-minor-updates-f8ce8a3e97

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-updates group with 12 updates in the / directory:

Package From To
@astrojs/cloudflare 14.3.1 14.4.6
@astrojs/mdx 8.0.1 8.1.3
@astrojs/svelte 9.0.1 9.1.2
@mermanjs/web 0.8.0-alpha.3 0.9.3
astro 7.3.2 7.4.7
ci-info 4.4.0 4.5.0
hast-util-from-html 2.0.3 2.1.0
pagefind 1.5.2 1.6.0
satteri 0.10.5 0.11.7
takumi-js 2.14.0 2.20.0
unist-util-visit 5.1.0 5.2.0
wrangler 4.147.0 4.158.0

Updates @astrojs/cloudflare from 14.3.1 to 14.4.6

Release notes

Sourced from @​astrojs/cloudflare's releases.

@​astrojs/cloudflare@​14.4.6

Patch Changes

  • Updated dependencies [7da442b]:
    • @​astrojs/internal-helpers@​0.13.1
    • @​astrojs/underscore-redirects@​1.0.4

@​astrojs/cloudflare@​14.4.5

Patch Changes

  • #18562 9055de2 Thanks @​astro-factory! - Fixes the passthrough /_image endpoint returning a 404 instead of 304 Not Modified when the browser revalidates a cached local image with If-None-Match. Revalidation supports weak ETags, tag lists, and wildcard conditions for local and allowed remote images while preserving image-type validation.
  • Updated dependencies []:
    • @​astrojs/underscore-redirects@​1.0.4

@​astrojs/cloudflare@​14.4.4

Patch Changes

  • #18552 549f88e Thanks @​astro-factory! - Fixes a dev dependency scan error caused by object keys named import in frontmatter, such as the import option of import.meta.glob()
  • Updated dependencies []:
    • @​astrojs/underscore-redirects@​1.0.4

@​astrojs/cloudflare@​14.4.3

Patch Changes

  • #18526 d0504c2 Thanks @​astro-factory! - Fixes process is not defined errors in client-side scripts and islands that reference process.env. The adapter's process.env define now applies only to the server output, so browser builds get Vite's default replacement.
  • Updated dependencies []:
    • @​astrojs/underscore-redirects@​1.0.4
Changelog

Sourced from @​astrojs/cloudflare's changelog.

14.4.6

Patch Changes

  • Updated dependencies [7da442b]:
    • @​astrojs/internal-helpers@​0.13.1
    • @​astrojs/underscore-redirects@​1.0.4

14.4.5

Patch Changes

  • #18562 9055de2 Thanks @​astro-factory! - Fixes the passthrough /_image endpoint returning a 404 instead of 304 Not Modified when the browser revalidates a cached local image with If-None-Match. Revalidation supports weak ETags, tag lists, and wildcard conditions for local and allowed remote images while preserving image-type validation.
  • Updated dependencies []:
    • @​astrojs/underscore-redirects@​1.0.4

14.4.4

Patch Changes

  • #18552 549f88e Thanks @​astro-factory! - Fixes a dev dependency scan error caused by object keys named import in frontmatter, such as the import option of import.meta.glob()
  • Updated dependencies []:
    • @​astrojs/underscore-redirects@​1.0.4

14.4.3

Patch Changes

  • #18526 d0504c2 Thanks @​astro-factory! - Fixes process is not defined errors in client-side scripts and islands that reference process.env. The adapter's process.env define now applies only to the server output, so browser builds get Vite's default replacement.
  • Updated dependencies []:
    • @​astrojs/underscore-redirects@​1.0.4

14.4.2

Patch Changes

  • #18422 07700d4 Thanks @​cyface! - Fixes the /_image endpoint returning a 500 error when href points to a missing file or a file that isn't an image. It now responds with a 404 or 400 instead.

  • #18465 f31f143 Thanks @​astro-factory! - Fixes a custom src/fetch.ts rendering truncated pages without islands or hoisted scripts in astro dev when prerenderEnvironment: 'node' is set

  • #18461 8b77891 Thanks @​astro-factory! - Fixes options passed to sharpImageService() being ignored when generating images at build time with imageService: 'compile'

  • #18468 119263a Thanks @​astro-factory! - Fixes astro sync, astro check, and astro build overwriting the dependency cache of a running astro dev server, which caused it to fail with "The file does not exist ... in the optimize deps directory" errors

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.4

14.4.1

Patch Changes

... (truncated)

Commits

Updates @astrojs/mdx from 8.0.1 to 8.1.3

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​8.1.3

Patch Changes

  • Updated dependencies [7da442b]:
    • @​astrojs/internal-helpers@​0.13.1
    • @​astrojs/markdown-satteri@​0.4.7

@​astrojs/mdx@​8.1.3-beta.0

Patch Changes

  • Updated dependencies [db62f3b]:
    • astro@7.4.4-beta.0

@​astrojs/mdx@​8.1.2

Patch Changes

  • Updated dependencies [edfbf4a]:
    • @​astrojs/markdown-satteri@​0.4.6
Changelog

Sourced from @​astrojs/mdx's changelog.

8.1.3

Patch Changes

  • Updated dependencies [7da442b]:
    • @​astrojs/internal-helpers@​0.13.1
    • @​astrojs/markdown-satteri@​0.4.7

8.1.2

Patch Changes

  • Updated dependencies [edfbf4a]:
    • @​astrojs/markdown-satteri@​0.4.6

8.1.1

Patch Changes

8.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0
    • @​astrojs/markdown-satteri@​0.4.4

8.0.3

Patch Changes

  • #18099 6987261 Thanks @​renovate! - Adds YAML parsing with timestamp and merge key support, and formats YAML errors consistently across Astro, Markdown, MDX, and Markdoc.
  • Updated dependencies [6987261, 62b13ba]:
    • @​astrojs/internal-helpers@​0.12.0
    • @​astrojs/markdown-satteri@​0.4.3

8.0.2

... (truncated)

Commits

Updates @astrojs/svelte from 9.0.1 to 9.1.2

Release notes

Sourced from @​astrojs/svelte's releases.

@​astrojs/svelte@​9.1.2

Patch Changes

  • 5e47636 Thanks @​matthewp! - Escapes slot names when rendering the slot wrapper elements for Svelte components
Changelog

Sourced from @​astrojs/svelte's changelog.

9.1.2

Patch Changes

  • 5e47636 Thanks @​matthewp! - Escapes slot names when rendering the slot wrapper elements for Svelte components

9.1.1

Patch Changes

9.1.0

Minor Changes

Commits

Updates @mermanjs/web from 0.8.0-alpha.3 to 0.9.3

Release notes

Sourced from @​mermanjs/web's releases.

0.9.3 - 2026-10-30

Release Notes

This release adds native C and WASI SDKs and improves diagram text and native exports on the Mermaid 12.1.0 line. Review SVG and image/PDF snapshots after upgrading.

Choose a package for your host in the installation guide. Keep wrappers and native/WASM artifacts on the same version.

Added

  • Embed Merman without a browser or JavaScript runtime using prebuilt native C libraries or a wasm32-wasip1 WASI module. Choose standard without formulas or ELK, math with formulas but no ELK, or full with both. SDKs include capability catalogs, license notices, checksums, and C/C++, Go/wazero, or Python/wasmtime examples. WASI supports SVG and PNG output. See the SDK guide for targets and integration. #241, #245, [issue #243](Latias94/merman#243)
  • Supply font bytes to native C and WASI engines for matching text layout and image painting. Add fonts for CJK or emoji beyond the bundled Cousine fallback; SVG viewers also need matching fonts installed. #245
  • Use loaded Iconify packs with Web createRenderSession({ iconPacks }) and Node createNodeEngine({ iconPacks }). Icons are scoped to each engine; the application controls loading. #247

Changed

  • CLI Mermaid-to-PNG/JPEG/PDF exports now use the same fonts for text layout and painting by default when built with system-fonts. This reduces clipping but can change wrapping, dimensions, and snapshots. Native measurement rejects --css-file and themeCSS; use --font-measurement deterministic without font sources to retain previous layout estimates and CSS support. Painting may still discover system fonts. SVG and library/binding defaults are unchanged. See the CLI font guide. #255
  • CLI capabilities --json distinguishes SVG and PNG/JPEG/PDF font defaults. Integrations reading native_fonts.default_policy_scope must accept mermaid-svg-input and use encoded_output_defaults for image/PDF output. #255

Fixed

  • Restore Neo shadows in Sequence diagrams and GitGraph tag backgrounds, keep Sequence note frames visible in native exports, and prevent Sequence boxes from clipping at the diagram edges. #255
  • Prevent clipped labels and misplaced titles by measuring fonts, styles, whitespace, and visible text consistently across diagram families. Browser text measurement also handles zero and subpixel sizes correctly. #247, #250
  • Preserve literal text and escaped characters in HTML/SVG labels, fix invalid Class-note XML, and display Kanban line breaks correctly. See the before/after examples. #247, #250
  • Fix missing or clipped formula glyphs and fraction bars in native PNG/JPEG/PDF exports, including Sequence placement. Native formula output rejects caller-supplied CSS that cannot be preserved; remove that CSS or use SVG for browser rendering. #245, #247, #250
  • Keep wrapped Swimlane edge labels complete in native SVG and PNG output. #245, [issue #242](Latias94/merman#242)
  • Honor configured Gantt tick intervals, Mindmap root padding/width and resolved layout, and Sequence numbering, participant visibility, and note alignment. #252
  • Apply Mermaid 12.1.0 init-directive overrides consistently. When combining directives, replace legacy config with explicit configuration namespaces or frontmatter. #252
  • Preserve % in Flowchart node IDs and parse header directions correctly. Separate the header direction from the diagram body with a newline or semicolon; malformed inline headers now fail strict parsing. #241
  • Accept brackets in YAML frontmatter comments and block text without false nesting-limit errors. #251
  • Return Error::OperationCancelled when a custom parser is cancelled, including in lenient mode, instead of rendering an error diagram. #252

Security

  • Update DOMPurify to 3.4.17 and Tokio to 1.54.1, and refresh affected JavaScript dependency locks. The dependency policy records retained compatibility exceptions. #245, #247

Contributors

Thanks @​Latias94 for the implementation and maintenance backports, @​nerzhulart for the Swimlane report, and @​mrueg for the WASI integration request.

merman-cli 0.9.3

Install merman-cli 0.9.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/Latias94/merman/releases/download/v0.9.3/merman-cli-installer.sh | sh

Install prebuilt binaries via powershell script

... (truncated)

Changelog

Sourced from @​mermanjs/web's changelog.

[0.9.3] - 2026-10-30

This release adds native C and WASI SDKs and improves diagram text and native exports on the Mermaid 12.1.0 line. Review SVG and image/PDF snapshots after upgrading.

Added

  • Embed Merman without a browser or JavaScript runtime using prebuilt native C libraries or a wasm32-wasip1 WASI module. Choose standard without formulas or ELK, math with formulas but no ELK, or full with both. SDKs include capability catalogs, license notices, checksums, and C/C++, Go/wazero, or Python/wasmtime examples. WASI supports SVG and PNG output. See the SDK guide for targets and integration. #241, #245, [issue #243](Latias94/merman#243)
  • Supply font bytes to native C and WASI engines for matching text layout and image painting. Add fonts for CJK or emoji beyond the bundled Cousine fallback; SVG viewers also need matching fonts installed. #245
  • Use loaded Iconify packs with Web createRenderSession({ iconPacks }) and Node createNodeEngine({ iconPacks }). Icons are scoped to each engine; the application controls loading. #247

Changed

  • CLI Mermaid-to-PNG/JPEG/PDF exports now use the same fonts for text layout and painting by default when built with system-fonts. This reduces clipping but can change wrapping, dimensions, and snapshots. Native measurement rejects --css-file and themeCSS; use --font-measurement deterministic without font sources to retain previous layout estimates and CSS support. Painting may still discover system fonts. SVG and library/binding defaults are unchanged. See the CLI font guide. #255
  • CLI capabilities --json distinguishes SVG and PNG/JPEG/PDF font defaults. Integrations reading native_fonts.default_policy_scope must accept mermaid-svg-input and use encoded_output_defaults for image/PDF output. #255

Fixed

  • Restore Neo shadows in Sequence diagrams and GitGraph tag backgrounds, keep Sequence note frames visible in native exports, and prevent Sequence boxes from clipping at the diagram edges. #255
  • Prevent clipped labels and misplaced titles by measuring fonts, styles, whitespace, and visible text consistently across diagram families. Browser text measurement also handles zero and subpixel sizes correctly. #247, #250
  • Preserve literal text and escaped characters in HTML/SVG labels, fix invalid Class-note XML, and display Kanban line breaks correctly. See the before/after examples. #247, #250
  • Fix missing or clipped formula glyphs and fraction bars in native PNG/JPEG/PDF exports, including Sequence placement. Native formula output rejects caller-supplied CSS that cannot be preserved; remove that CSS or use SVG for browser rendering. #245, #247, #250
  • Keep wrapped Swimlane edge labels complete in native SVG and PNG output. #245, [issue #242](Latias94/merman#242)
  • Honor configured Gantt tick intervals, Mindmap root padding/width and resolved layout, and Sequence numbering, participant visibility, and note alignment. #252
  • Apply Mermaid 12.1.0 init-directive overrides consistently. When combining directives, replace legacy config with explicit configuration namespaces or frontmatter. #252
  • Preserve % in Flowchart node IDs and parse header directions correctly. Separate the header direction from the diagram body with a newline or semicolon; malformed inline headers now fail strict parsing. #241
  • Accept brackets in YAML frontmatter comments and block text without false nesting-limit errors. #251
  • Return Error::OperationCancelled when a custom parser is cancelled, including in lenient mode, instead of rendering an error diagram. #252

Security

  • Update DOMPurify to 3.4.17 and Tokio to 1.54.1, and refresh affected JavaScript dependency locks. The dependency policy records retained compatibility exceptions. #245, #247

Contributors

Thanks @​Latias94 for the implementation and maintenance backports, @​nerzhulart for the Swimlane report, and @​mrueg for the WASI integration request.

[0.9.2] - 2026-10-22

Fixed

  • Native exports exclude symbolic and pictorial fonts from implicit generic/default font selection, preventing Latin text from rendering as Greek or symbol glyphs. Explicitly named symbol fonts remain available. #235, [issue #228](Latias94/merman#228)
  • Filled C4 boundaries no longer cover their children. Host themes also reach boundary labels, relationships, and arrowheads while explicit configuration and relationship styles retain priority. #235, [issue #229](Latias94/merman#229)
  • Wardley host themes reach anchor labels, component surfaces, and structural lines while preserving explicit colors and evolved-component styling. #235, [issue #230](Latias94/merman#230)
  • ZenUML host themes consistently style the frame, participants, messages, lifelines, notes, groups, activations, and text. Explicit ZenUML settings retain priority, and layout uses the same typography as the rendered labels. #235, [issue #231](Latias94/merman#231)
  • Explicit site or source theme selections preserve the selected Mermaid theme's complete derived palette instead of mixing it with host-derived colors. Independent host fonts remain available, and host roles fill only values missing from the selected theme. This fixes ER, Quadrant, and Timeline color combinations under host themes. #235, [issue #232](Latias94/merman#232)
  • Restrict look-based SVG selectors to supported looks; unsupported values use the normal fallback. #235
  • Drop rejected Block inline CSS declarations instead of copying them into SVG, preserving valid sibling declarations. #235
  • Validate Requirement source CSS while preserving declaration order, quoted values, and !important handling. #235
  • Repeated Flowchart classDef declarations retain earlier properties and apply later overrides in source order. #227, #237
  • Unsupported Flowchart Unicode characters produce whole-character error spans and allow lexing to continue on valid UTF-8 boundaries. #178, #237

... (truncated)

Commits
  • 3b915f6 Merge pull request #254 from Latias94/docs/release-0.9.3-readiness-20261029
  • cf15826 chore(release): merge maintenance fixes for v0.9.3
  • b3fde2b Merge pull request #255 from Latias94/fix/native-export-font-defaults-09-2026...
  • c476412 fix(sequence): include restored Neo box shadows in maintenance viewports
  • 674a56c fix(cli): backport consistent native export fonts and shadows
  • a965d8e fix(ci): install the cargo-about CLI on macOS Intel
  • 3f3c24f perf(ci): qualify SDKs alongside independent preflight owners
  • cdab9aa fix(ci): install SDK toolchain components before Cargo
  • b1a5e85 fix(release): refresh generated Rustdoc version receipt
  • a29f76b fix(ci): install WASI target for strict release preflight
  • Additional commits viewable in compare view

Updates astro from 7.3.2 to 7.4.7

Release notes

Sourced from astro's releases.

astro@7.4.7

Patch Changes

  • 7da442b Thanks @​matthewp! - Fixes the image endpoint treating directories whose names differ only by letter case as being inside the build output directory on case-sensitive filesystems
  • Updated dependencies [7da442b]:
    • @​astrojs/internal-helpers@​0.13.1
    • @​astrojs/markdown-satteri@​0.4.7

astro@7.4.6

Patch Changes

  • #18565 cd09986 Thanks @​praveen-kumary! - Avoids attributing client-only components or scripts to unrelated pages importing astro:i18n by bounding top-level page graph traversal at virtual page entries

  • #18608 babd96d Thanks @​umeraamir69! - Fixes an extra page reload on the first page load after starting astro dev without an existing .astro directory

  • #18589 402c0fa Thanks @​astro-factory! - Fixes astro check exiting with code 0 when @astrojs/check or typescript is not installed. The command now exits with code 1 so CI fails instead of silently skipping type checking.

  • #18503 54fcdd5 Thanks @​SwastikTripathi! - Preserves the last-modified date of cached font files and unchanged public files when copying them into the build output. Public-file timestamp preservation respects the resolved public-directory configuration, follows source symlinks, and avoids backdating files overwritten by build plugins.

  • #18605 76cd239 Thanks @​astro-factory! - Fixes the glob() loader adding files from a folder excluded with a negation pattern such as !_docs when they change during astro dev

  • #18432 ed60d82 Thanks @​alexmv! - Improves the MissingSharp error to include the reason Sharp failed to load, such as its prebuilt binaries not supporting the current CPU

  • #18474 59543c3 Thanks @​miottid! - Fixes i18n fallback for on-demand rendered pages. A locale-prefixed request for a page that only exists in the fallback locale (for example /de/about with fallback: { de: 'en' }) was answered with status 302 and no Location header. Such requests are now rewritten or redirected to the fallback locale according to i18n.routing.fallbackType, including encoded paths and sites with a configured base. Query strings are preserved, and explicit page statuses and redirects are left unchanged.

  • #18541 cfa2d2b Thanks @​ump45nose! - Fixes matchAllRoutes to consider fallbackRoutes, matching matchRoute and the production router. Dev-server i18n fallback requests now resolve to the source route's metadata instead of the 404 route, and SSR-only fallback candidates can fall through the prerender handler.

  • #18602 d856064 Thanks @​astro-factory! - Fixes astro check losing the end of its output, including the Result summary, when stdout is piped to a slow reader. When the reader closes the pipe early, for example astro check | head, astro check now exits with code 1 instead of crashing with an EPIPE stack trace.

  • #18574 da0f149 Thanks @​astro-factory! - Fixes an unnecessary full page reload in astro dev when a content loader calls store.clear() or store.delete() and the content store has no asset imports

  • #18570 e71c038 Thanks @​astro-factory! - Fixes pages using <ClientRouter /> briefly showing the top of the page on reload before jumping back to the previous scroll position. Full reloads now use the browser's native scroll restoration.

  • #18531 f75553b Thanks @​praveen-kumary! - Fixes an unhandled TypeError: Cannot convert undefined or null to object when calling route.generate() without arguments on static routes

astro@7.4.5

Patch Changes

  • #18558 fac3c50 Thanks @​astro-factory! - Fixes astro dev status and other background server commands deleting the lock file of a running dev or preview server when run from a sandbox or as another user that is not permitted to signal its process

  • #18559 10dae2f Thanks @​astro-factory! - Fixes import.meta.env values containing $ sequences (such as $$ or $&) being corrupted in astro build when server code reads the import.meta.env object directly, for example with const { MY_SECRET } = import.meta.env

  • #18544 e3bec3d Thanks @​skezo! - Fixes request paths with invalid percent-encoding (e.g. /%C0%AF or a bare %) being logged as an Invalid URL encoding error and routed with the undecoded path. These requests now return a 400, the same as a path that is encoded too many times.

  • #18520 e023aba Thanks @​matthewp! - Makes rendering of string tag names stricter and consistent across .astro dynamic tags, JSX, and MDX. Only the leading part of the string that is a valid element name is rendered, so characters such as / or = can no longer change the generated markup. A string that does not start with a valid element name (for example '!--' or '') now throws an error instead of producing invalid HTML.

astro@7.4.4

Patch Changes

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.7

Patch Changes

  • 7da442b Thanks @​matthewp! - Fixes the image endpoint treating directories whose names differ only by letter case as being inside the build output directory on case-sensitive filesystems
  • Updated dependencies [7da442b]:
    • @​astrojs/internal-helpers@​0.13.1
    • @​astrojs/markdown-satteri@​0.4.7

7.4.6

Patch Changes

  • #18565 cd09986 Thanks @​praveen-kumary! - Avoids attributing client-only components or scripts to unrelated pages importing astro:i18n by bounding top-level page graph traversal at virtual page entries

  • #18608 babd96d Thanks @​umeraamir69! - Fixes an extra page reload on the first page load after starting astro dev without an existing .astro directory

  • #18589 402c0fa Thanks @​astro-factory! - Fixes astro check exiting with code 0 when @astrojs/check or typescript is not installed. The command now exits with code 1 so CI fails instead of silently skipping type checking.

  • #18503 54fcdd5 Thanks @​SwastikTripathi! - Preserves the last-modified date of cached font files and unchanged public files when copying them into the build output. Public-file timestamp preservation respects the resolved public-directory configuration, follows source symlinks, and avoids backdating files overwritten by build plugins.

  • #18605 76cd239 Thanks @​astro-factory! - Fixes the glob() loader adding files from a folder excluded with a negation pattern such as !_docs when they change during astro dev

  • #18432 ed60d82 Thanks @​alexmv! - Improves the MissingSharp error to include the reason Sharp failed to load, such as its prebuilt binaries not supporting the current CPU

  • #18474 59543c3 Thanks @​miottid! - Fixes i18n fallback for on-demand rendered pages. A locale-prefixed request for a page that only exists in the fallback locale (for example /de/about with fallback: { de: 'en' }) was answered with status 302 and no Location header. Such requests are now rewritten or redirected to the fallback locale according to i18n.routing.fallbackType, including encoded paths and sites with a configured base. Query strings are preserved, and explicit page statuses and redirects are left unchanged.

  • #18541 cfa2d2b Thanks @​ump45nose! - Fixes matchAllRoutes to consider fallbackRoutes, matching matchRoute and the production router. Dev-server i18n fallback requests now resolve to the source route's metadata instead of the 404 route, and SSR-only fallback candidates can fall through the prerender handler.

  • #18602 d856064 Thanks @​astro-factory! - Fixes astro check losing the end of its output, including the Result summary, when stdout is piped to a slow reader. When the reader closes the pipe early, for example astro check | head, astro check now exits with code 1 instead of crashing with an EPIPE stack trace.

  • #18574 da0f149 Thanks @​astro-factory! - Fixes an unnecessary full page reload in astro dev when a content loader calls store.clear() or store.delete() and the content store has no asset imports

  • #18570 e71c038 Thanks @​astro-factory! - Fixes pages using <ClientRouter /> briefly showing the top of the page on reload before jumping back to the previous scroll position. Full reloads now use the browser's native scroll restoration.

  • #18531 f75553b Thanks @​praveen-kumary! - Fixes an unhandled TypeError: Cannot convert undefined or null to object when calling route.generate() without arguments on static routes

7.4.5

Patch Changes

  • #18558 fac3c50 Thanks @​astro-factory! - Fixes astro dev status and other background server commands deleting the lock file of a running dev or preview server when run from a sandbox or as another user that is not permitted to signal its process

  • #18559 10dae2f Thanks @​astro-factory! - Fixes import.meta.env values containing $ sequences (such as $$ or $&) bein...

    Description has been truncated

@dependabot
chore(deps): bump the minor-updates group across 1 directory with 12 …
b4a9860 
…updates

Bumps the minor-updates group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/cloudflare](https://github.com/withastro/astro/tree/HEAD/packages/integrations/cloudflare) | `14.3.1` | `14.4.6` |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `8.0.1` | `8.1.3` |
| [@astrojs/svelte](https://github.com/withastro/astro/tree/HEAD/packages/integrations/svelte) | `9.0.1` | `9.1.2` |
| [@mermanjs/web](https://github.com/Latias94/merman) | `0.8.0-alpha.3` | `0.9.3` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.2` | `7.4.7` |
| [ci-info](https://github.com/watson/ci-info) | `4.4.0` | `4.5.0` |
| [hast-util-from-html](https://github.com/syntax-tree/hast-util-from-html) | `2.0.3` | `2.1.0` |
| [pagefind](https://github.com/Pagefind/pagefind) | `1.5.2` | `1.6.0` |
| [satteri](https://github.com/bruits/satteri) | `0.10.5` | `0.11.7` |
| [takumi-js](https://github.com/kane50613/takumi/tree/HEAD/takumi-js) | `2.14.0` | `2.20.0` |
| [unist-util-visit](https://github.com/syntax-tree/unist-util-visit) | `5.1.0` | `5.2.0` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.147.0` | `4.158.0` |



Updates `@astrojs/cloudflare` from 14.3.1 to 14.4.6
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/cloudflare/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/cloudflare@14.4.6/packages/integrations/cloudflare)

Updates `@astrojs/mdx` from 8.0.1 to 8.1.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.1.3/packages/integrations/mdx)

Updates `@astrojs/svelte` from 9.0.1 to 9.1.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/svelte/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/svelte@9.1.2/packages/integrations/svelte)

Updates `@mermanjs/web` from 0.8.0-alpha.3 to 0.9.3
- [Release notes](https://github.com/Latias94/merman/releases)
- [Changelog](https://github.com/Latias94/merman/blob/main/CHANGELOG.md)
- [Commits](Latias94/merman@v0.8.0-alpha.3...v0.9.3)

Updates `astro` from 7.3.2 to 7.4.7
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.4.7/packages/astro)

Updates `ci-info` from 4.4.0 to 4.5.0
- [Release notes](https://github.com/watson/ci-info/releases)
- [Changelog](https://github.com/watson/ci-info/blob/master/CHANGELOG.md)
- [Commits](watson/ci-info@v4.4.0...v4.5.0)

Updates `hast-util-from-html` from 2.0.3 to 2.1.0
- [Release notes](https://github.com/syntax-tree/hast-util-from-html/releases)
- [Commits](syntax-tree/hast-util-from-html@2.0.3...2.1.0)

Updates `pagefind` from 1.5.2 to 1.6.0
- [Release notes](https://github.com/Pagefind/pagefind/releases)
- [Changelog](https://github.com/Pagefind/pagefind/blob/main/CHANGELOG.md)
- [Commits](Pagefind/pagefind@v1.5.2...v1.6.0)

Updates `satteri` from 0.10.5 to 0.11.7
- [Release notes](https://github.com/bruits/satteri/releases)
- [Commits](bruits/satteri@satteri-v0.10.5...satteri-v0.11.7)

Updates `takumi-js` from 2.14.0 to 2.20.0
- [Release notes](https://github.com/kane50613/takumi/releases)
- [Changelog](https://github.com/kane50613/takumi/blob/master/takumi-js/CHANGELOG.md)
- [Commits](https://github.com/kane50613/takumi/commits/takumi@2.20.0/takumi-js)

Updates `unist-util-visit` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/syntax-tree/unist-util-visit/releases)
- [Commits](syntax-tree/unist-util-visit@5.1.0...5.2.0)

Updates `wrangler` from 4.147.0 to 4.158.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.158.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@astrojs/cloudflare"
  dependency-version: 14.4.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: "@astrojs/mdx"
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: "@astrojs/svelte"
  dependency-version: 9.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: "@mermanjs/web"
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: astro
  dependency-version: 7.4.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: ci-info
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: hast-util-from-html
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: pagefind
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: satteri
  dependency-version: 0.11.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: takumi-js
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: unist-util-visit
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: wrangler
  dependency-version: 4.158.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 13, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 13, 2026
@dependabot
dependabot Bot deleted the dependabot-npm_and_yarn-minor-updates-f8ce8a3e97 branch November 13, 2026 12:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants