Skip to content

build(deps): bump the npm-all group across 1 directory with 29 updates - #1644

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/frontend/npm-all-e3d9bf3aa7
Closed

build(deps): bump the npm-all group across 1 directory with 29 updates#1644
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/frontend/npm-all-e3d9bf3aa7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-all group with 29 updates in the /src/frontend directory:

Package From To
@astrojs/markdown-remark 7.2.1 7.3.0
@astrojs/mdx 7.0.3 8.0.0
@astrojs/starlight 0.41.3 0.42.0
@expressive-code/plugin-collapsible-sections 0.44.1 0.44.2
@expressive-code/plugin-line-numbers 0.44.1 0.44.2
astro 7.1.3 7.3.0
astro-expressive-code 0.44.1 0.44.2
mermaid 11.16.1 11.17.2
satori 0.28.1 0.33.4
satteri 0.9.5 0.10.5
sharp 0.35.3 0.35.4
starlight-image-zoom 0.15.0 0.16.0
starlight-links-validator 0.25.2 0.26.0
starlight-page-actions 0.7.0 0.7.1
starlight-scroll-to-top 1.0.1 2.0.0
@axe-core/playwright 4.12.1 4.13.0
@iconify-json/material-icon-theme 1.2.69 1.2.70
@playwright/test 1.61.1 1.62.1
@unocss/astro 66.7.5 66.9.2
astro-embed 0.13.1 0.14.0
astro-vtbot 3.0.0 3.1.0
eslint 10.7.0 10.9.1
globals 17.7.0 17.12.0
prettier 3.9.5 3.9.6
tsx 4.23.1 4.23.13
typescript 6.0.3 7.0.2
typescript-eslint 8.65.0 8.69.0
unocss 66.7.5 66.9.2
vitest 4.1.10 5.0.0

Updates @astrojs/markdown-remark from 7.2.1 to 7.3.0

Release notes

Sourced from @​astrojs/markdown-remark's releases.

@​astrojs/markdown-remark@​7.3.0

Minor Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds MDX rendering to the unified() and satteri() processors.

    Both processors now compile .mdx files themselves. You still need to install @astrojs/mdx to add MDX support to your project.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a recmaPlugins option to unified() for adding recma (estree/JSX) plugins to the MDX compiler.

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

@​astrojs/markdown-remark@​7.2.4

Patch Changes

  • Updated dependencies [05763a0]:
    • @​astrojs/internal-helpers@​0.10.4

@​astrojs/markdown-remark@​7.2.3

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3

@​astrojs/markdown-remark@​7.2.2

Patch Changes

  • Updated dependencies [c895b12]:
    • @​astrojs/internal-helpers@​0.10.2
Changelog

Sourced from @​astrojs/markdown-remark's changelog.

7.3.0

Minor Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds MDX rendering to the unified() and satteri() processors.

    Both processors now compile .mdx files themselves. You still need to install @astrojs/mdx to add MDX support to your project.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a recmaPlugins option to unified() for adding recma (estree/JSX) plugins to the MDX compiler.

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

7.2.4

Patch Changes

  • Updated dependencies [05763a0]:
    • @​astrojs/internal-helpers@​0.10.4

7.2.3

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3

7.2.2

Patch Changes

  • Updated dependencies [c895b12]:
    • @​astrojs/internal-helpers@​0.10.2
Commits

Updates @astrojs/mdx from 7.0.3 to 8.0.0

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​8.0.0

Major Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Moves MDX file processing to the Markdown processors.

    '@​astrojs/mdx' is still required to add MDX support to your project. However, it now delegates the MDX files processing to Markdown processors.

    What should I do?

    If you haven't explicitly installed a Markdown processor, you don't need to do anything.

    Otherwise, ensure that your configured Markdown processor uses the following version:

    • @astrojs/markdown-satteri 0.4.0 or later if you use satteri()
    • @astrojs/markdown-remark 7.3.0 or later if you use unified()

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes .mdx files still using markdown.processor when extendMarkdownConfig is false. They now use a clean default processor instead; pass mdx({ processor }) to choose one explicitly.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a warning when the deprecated remarkPlugins, rehypePlugins, recmaPlugins and remarkRehype options are ignored because your Markdown processor does not run them. They still apply when your processor is unified(), and were previously dropped silently otherwise.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0

@​astrojs/mdx@​7.0.8

Patch Changes

  • #17757 660991c Thanks @​astro-factory! - Fixes build errors showing wrong file location, missing line:col, and misleading hints when a plugin error (e.g. from MDX) is wrapped by Vite's build error

  • #17766 0762a83 Thanks @​HiDeoo! - Fixes Sätteri processor option types to accept all plugin entries supported by Sätteri v0.10.3.

@​astrojs/mdx@​7.0.7

Patch Changes

@​astrojs/mdx@​7.0.6

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
    • @​astrojs/markdown-remark@​7.2.3

@​astrojs/mdx@​7.0.5

... (truncated)

Changelog

Sourced from @​astrojs/mdx's changelog.

8.0.0

Major Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Moves MDX file processing to the Markdown processors.

    '@​astrojs/mdx' is still required to add MDX support to your project. However, it now delegates the MDX files processing to Markdown processors.

    What should I do?

    If you haven't explicitly installed a Markdown processor, you don't need to do anything.

    Otherwise, ensure that your configured Markdown processor uses the following version:

    • @astrojs/markdown-satteri 0.4.0 or later if you use satteri()
    • @astrojs/markdown-remark 7.3.0 or later if you use unified()

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes .mdx files still using markdown.processor when extendMarkdownConfig is false. They now use a clean default processor instead; pass mdx({ processor }) to choose one explicitly.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a warning when the deprecated remarkPlugins, rehypePlugins, recmaPlugins and remarkRehype options are ignored because your Markdown processor does not run them. They still apply when your processor is unified(), and were previously dropped silently otherwise.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0

7.0.8

Patch Changes

  • #17757 660991c Thanks @​astro-factory! - Fixes build errors showing wrong file location, missing line:col, and misleading hints when a plugin error (e.g. from MDX) is wrapped by Vite's build error

  • #17766 0762a83 Thanks @​HiDeoo! - Fixes Sätteri processor option types to accept all plugin entries supported by Sätteri v0.10.3.

7.0.7

Patch Changes

7.0.6

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3

... (truncated)

Commits

Updates @astrojs/starlight from 0.41.3 to 0.42.0

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.0

Minor Changes

  • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

  • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

    ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

    In the following example, custom styles for the menu button are updated for the new approach:

    - starlight-menu-button button {
    + .sl-menu-button {
      color: var(--sl-color-text);
    }
    
    starlight-menu-button[aria-expanded='true'] button {
    
    
    .sl-menu-button:has(~ :popover-open) {
    color: var(--sl-color-text-accent-high);
    }

See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    If your configuration included a tagline option, you can safely remove it without any replacement.

  • #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:

    • astro v7.2.10 or later
    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
    • @astrojs/markdown-remark 7.3.0 or later (if you use it)

    Please update Starlight and Astro together:

    npx @astrojs/upgrade
  • #4121 2623ae6 Thanks @​delucis! - Refactors Starlight’s mobile menu toggle to work when JavaScript fails or is disabled

    ⚠️ BREAKING CHANGE: This release drops official support for Chromium-based browsers prior to version 116 (released August 2023), Safari-based browsers prior to version 17.0 (released September 2023), and Firefox prior to version 125 (released April 2024). You can find a list of currently supported browsers and their versions using this browserslist query.

    This change also removes the data-mobile-menu-expanded attribute, which was previously added to <body> while the mobile menu is open. If you have custom code that was depending on this attribute, you will need to update it to use a new selector to check if the mobile menu is open.

    In the following example, a custom background colour for the site header while the menu is open is updated for the new approach:

  • ... (truncated)

    Changelog

    Sourced from @​astrojs/starlight's changelog.

    0.42.0

    Minor Changes

    • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

    • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

      ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

      In the following example, custom styles for the menu button are updated for the new approach:

      - starlight-menu-button button {
      + .sl-menu-button {
        color: var(--sl-color-text);
      }
      
      starlight-menu-button[aria-expanded='true'] button {
      
      
      .sl-menu-button:has(~ :popover-open) {
      color: var(--sl-color-text-accent-high);
      }

    See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    If your configuration included a tagline option, you can safely remove it without any replacement.

  • #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:

    • astro v7.2.10 or later
    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
    • @astrojs/markdown-remark 7.3.0 or later (if you use it)

    Please update Starlight and Astro together:

    npx @astrojs/upgrade
  • #4121 2623ae6 Thanks @​delucis! - Refactors Starlight’s mobile menu toggle to work when JavaScript fails or is disabled

    ⚠️ BREAKING CHANGE: This release drops official support for Chromium-based browsers prior to version 116 (released August 2023), Safari-based browsers prior to version 17.0 (released September 2023), and Firefox prior to version 125 (released April 2024). You can find a list of currently supported browsers and their versions using this browserslist query.

    This change also removes the data-mobile-menu-expanded attribute, which was previously added to <body> while the mobile menu is open. If you have custom code that was depending on this attribute, you will need to update it to use a new selector to check if the mobile menu is open.

  • ... (truncated)

    Commits

    Updates @expressive-code/plugin-collapsible-sections from 0.44.1 to 0.44.2

    Release notes

    Sourced from @​expressive-code/plugin-collapsible-sections's releases.

    @​expressive-code/plugin-collapsible-sections@​0.44.2

    Patch Changes

    • @​expressive-code/core@​0.44.2
    Changelog

    Sourced from @​expressive-code/plugin-collapsible-sections's changelog.

    0.44.2

    Patch Changes

    • @​expressive-code/core@​0.44.2
    Commits

    Updates @expressive-code/plugin-line-numbers from 0.44.1 to 0.44.2

    Release notes

    Sourced from @​expressive-code/plugin-line-numbers's releases.

    @​expressive-code/plugin-line-numbers@​0.44.2

    Patch Changes

    • @​expressive-code/core@​0.44.2
    Changelog

    Sourced from @​expressive-code/plugin-line-numbers's changelog.

    0.44.2

    Patch Changes

    • @​expressive-code/core@​0.44.2
    Commits

    Updates astro from 7.1.3 to 7.3.0

    Release notes

    Sourced from astro's releases.

    astro@7.3.0

    Minor Changes

    • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

      Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { LocalImageService } from 'astro';
      const service: LocalImageService = {
      // ...
      async transform(inputBuffer, transform, imageConfig, logger) {
      logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
      return { data: inputBuffer, format: 'png' };
      },
      };

      Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

      Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { CacheProvider } from 'astro';
      const provider: CacheProvider = {
      name: 'my-cache',
      async onRequest({ request, url, logger }, next) {
      logger.warn(Skipping cache for ${url.pathname} because the response sets a cookie.);
      return next();
      },
      // ...
      };

      Astro's built-in memoryCache() provider now uses this logger for the warnings it emits when it skips caching a response that sets cookies, and when a background revalidation fails.

    Patch Changes

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Updates Astro's remaining internal warnings and errors to be written through the configured logger instead of directly to the console, when possible

    • #17886 e747cba Thanks @​matthewp! - Fixes the memory cache provider to skip responses with Vary: Cookie or Vary: *

    • #17885 916b738 Thanks @​Princesseuh! - Improves build performance for sites with a large number of pages coming from a large amount of different modules.

    ... (truncated)

    Changelog

    Sourced from astro's changelog.

    7.3.0

    Minor Changes

    • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

      Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { LocalImageService } from 'astro';
      const service: LocalImageService = {
      // ...
      async transform(inputBuffer, transform, imageConfig, logger) {
      logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
      return { data: inputBuffer, format: 'png' };
      },
      };

      Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

      Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { CacheProvider } from 'astro';
      const provider: CacheProvider = {
      name: 'my-cache',
      async onRequest({ request, url, logger }, next) {
      logger.warn(Skipping cache for ${url.pathname} because the response sets a cookie.);
      return next();
      },
      // ...
      };

      Astro's built-in memoryCache() provider now uses this logger for the warnings it emits when it skips caching a response that sets cookies, and when a background revalidation fails.

    Patch Changes

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Updates Astro's remaining internal warnings and errors to be written through the configured logger instead of directly to the console, when possible

    • #17886 e747cba Thanks @​matthewp! - Fixes the memory cache provider to skip responses with Vary: Cookie or Vary: *

    • #17885 916b738 Thanks @​Princesseuh! - Improves build performance for sites with a large number of pages coming from a large amount of different modules.

    ... (truncated)

    Commits

    Updates astro-expressive-code from 0.44.1 to 0.44.2

    Release notes

    Sourced from astro-expressive-code's releases.

    astro-expressive-code@0.44.2

    Patch Changes

    • rehype-expressive-code@0.44.2
    Changelog

    Sourced from astro-expressive-code's changelog.

    0.44.2

    Patch Changes

    • rehype-expressive-code@0.44.2
    Commits

    Updates mermaid from 11.16.1 to 11.17.2

    Release notes

    Sourced from mermaid's releases.

    mermaid@11.17.2

    Patch Changes

    • #8125 178d7c7 Thanks @​knsv-bot! - fix: restore the edgePaths class on the edge group in rendered SVG, and point the flowchart, block and user journey stylesheets at it

    mermaid@11.17.1

    Patch Changes

    • #8092 31ce60a Thanks @​pbrolin47! - fix(c4): wrap element labels to c4.width again

      C4 element labels (System, Container, Component, Person and their _Ext variants) stopped wrapping in 11.17.0, so long descriptions rendered on one unbroken line and the shape grew sideways well past the configured c4.width. The unified-shapes label helper gated wrapping on the root-level wrap option, which has no schema default and is therefore undefined; it now gates on c4.wrap (default true), which is what the legacy renderer used.

    • #8088 c66200b Thanks @​ashishjain0512! - fix: neo-look arrowheads and crow's-foot markers no longer fall back to default theme colours/stroke widths on the first render with layout: elk. State diagram arrowheads stayed dark on dark themes, and ER / requirement markers were drawn at the default stroke width, because markers were created from the layout package's own bundled copy of mermaid, whose config had not been initialized yet.

    • #8079 281cd7b Thanks @​ashishjain0512! - fix(class): class diagram relation markers (composition, aggregation, extension, dependency, lollipop) no longer scale with the edge stroke width, so they stay outside the class box boundary in themes that set strokeWidth: 2 (redux, redux-dark, redux-color, redux-dark-color, neo, neo-dark) with the default classic look.

    mermaid@11.17.0

    Minor Changes

    Patch Changes

    • #7847 215fe89 Thanks @​filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

    • #7871 8d874c4 Thanks @​knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

    • #8071 b3d1f63 Thanks @​pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

    • #7870 71b8843 Thanks @​knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

    • #7924 9cbef5d Thanks @​nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

    ... (truncated)

    Commits

    Updates satori from 0.28.1 to 0.33.4

    Release notes

    Sourced from satori's releases.

    0.33.4

    0.33.4 (2026-08-24)

    Bug Fixes

    0.33.3

    0.33.3 (2026-08-21)

    Bug Fixes

    0.33.2

    0.33.2 (2026-08-21)

    Bug Fixes

    0...

    Description has been truncated

    Bumps the npm-all group with 29 updates in the /src/frontend directory:
    
    | Package | From | To |
    | --- | --- | --- |
    | [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) | `7.2.1` | `7.3.0` |
    | [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `7.0.3` | `8.0.0` |
    | [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.3` | `0.42.0` |
    | [@expressive-code/plugin-collapsible-sections](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/@expressive-code/plugin-collapsible-sections) | `0.44.1` | `0.44.2` |
    | [@expressive-code/plugin-line-numbers](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/@expressive-code/plugin-line-numbers) | `0.44.1` | `0.44.2` |
    | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.3` | `7.3.0` |
    | [astro-expressive-code](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/astro-expressive-code) | `0.44.1` | `0.44.2` |
    | [mermaid](https://github.com/mermaid-js/mermaid) | `11.16.1` | `11.17.2` |
    | [satori](https://github.com/vercel/satori) | `0.28.1` | `0.33.4` |
    | [satteri](https://github.com/bruits/satteri) | `0.9.5` | `0.10.5` |
    | [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.4` |
    | [starlight-image-zoom](https://github.com/HiDeoo/starlight-image-zoom/tree/HEAD/packages/starlight-image-zoom) | `0.15.0` | `0.16.0` |
    | [starlight-links-validator](https://github.com/HiDeoo/starlight-links-validator/tree/HEAD/packages/starlight-links-validator) | `0.25.2` | `0.26.0` |
    | [starlight-page-actions](https://github.com/dlcastillop/starlight-page-actions/tree/HEAD/packages/starlight-page-actions) | `0.7.0` | `0.7.1` |
    | [starlight-scroll-to-top](https://github.com/frostybee/starlight-scroll-to-top/tree/HEAD/packages/starlight-scroll-to-top) | `1.0.1` | `2.0.0` |
    | [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.12.1` | `4.13.0` |
    | [@iconify-json/material-icon-theme](https://github.com/iconify/icon-sets) | `1.2.69` | `1.2.70` |
    | [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.1` |
    | [@unocss/astro](https://github.com/unocss/unocss/tree/HEAD/packages-integrations/astro) | `66.7.5` | `66.9.2` |
    | [astro-embed](https://github.com/delucis/astro-embed/tree/HEAD/packages/astro-embed) | `0.13.1` | `0.14.0` |
    | [astro-vtbot](https://github.com/martrapp/astro-vtbot) | `3.0.0` | `3.1.0` |
    | [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.9.1` |
    | [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.12.0` |
    | [prettier](https://github.com/prettier/prettier) | `3.9.5` | `3.9.6` |
    | [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.13` |
    | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
    | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.65.0` | `8.69.0` |
    | [unocss](https://github.com/unocss/unocss/tree/HEAD/packages-presets/unocss) | `66.7.5` | `66.9.2` |
    | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `5.0.0` |
    
    
    
    Updates `@astrojs/markdown-remark` from 7.2.1 to 7.3.0
    - [Release notes](https://github.com/withastro/astro/releases)
    - [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md)
    - [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.3.0/packages/markdown/remark)
    
    Updates `@astrojs/mdx` from 7.0.3 to 8.0.0
    - [Release notes](https://github.com/withastro/astro/releases)
    - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
    - [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.0.0/packages/integrations/mdx)
    
    Updates `@astrojs/starlight` from 0.41.3 to 0.42.0
    - [Release notes](https://github.com/withastro/starlight/releases)
    - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
    - [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.0/packages/starlight)
    
    Updates `@expressive-code/plugin-collapsible-sections` from 0.44.1 to 0.44.2
    - [Release notes](https://github.com/expressive-code/expressive-code/releases)
    - [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/@expressive-code/plugin-collapsible-sections/CHANGELOG.md)
    - [Commits](https://github.com/expressive-code/expressive-code/commits/@expressive-code/plugin-collapsible-sections@0.44.2/packages/@expressive-code/plugin-collapsible-sections)
    
    Updates `@expressive-code/plugin-line-numbers` from 0.44.1 to 0.44.2
    - [Release notes](https://github.com/expressive-code/expressive-code/releases)
    - [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/@expressive-code/plugin-line-numbers/CHANGELOG.md)
    - [Commits](https://github.com/expressive-code/expressive-code/commits/@expressive-code/plugin-line-numbers@0.44.2/packages/@expressive-code/plugin-line-numbers)
    
    Updates `astro` from 7.1.3 to 7.3.0
    - [Release notes](https://github.com/withastro/astro/releases)
    - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
    - [Commits](https://github.com/withastro/astro/commits/astro@7.3.0/packages/astro)
    
    Updates `astro-expressive-code` from 0.44.1 to 0.44.2
    - [Release notes](https://github.com/expressive-code/expressive-code/releases)
    - [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/astro-expressive-code/CHANGELOG.md)
    - [Commits](https://github.com/expressive-code/expressive-code/commits/astro-expressive-code@0.44.2/packages/astro-expressive-code)
    
    Updates `mermaid` from 11.16.1 to 11.17.2
    - [Release notes](https://github.com/mermaid-js/mermaid/releases)
    - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.1...mermaid@11.17.2)
    
    Updates `satori` from 0.28.1 to 0.33.4
    - [Release notes](https://github.com/vercel/satori/releases)
    - [Commits](vercel/satori@0.28.1...0.33.4)
    
    Updates `satteri` from 0.9.5 to 0.10.5
    - [Release notes](https://github.com/bruits/satteri/releases)
    - [Commits](bruits/satteri@satteri-v0.9.5...satteri-v0.10.5)
    
    Updates `sharp` from 0.35.3 to 0.35.4
    - [Release notes](https://github.com/lovell/sharp/releases)
    - [Commits](lovell/sharp@v0.35.3...v0.35.4)
    
    Updates `starlight-image-zoom` from 0.15.0 to 0.16.0
    - [Release notes](https://github.com/HiDeoo/starlight-image-zoom/releases)
    - [Changelog](https://github.com/HiDeoo/starlight-image-zoom/blob/main/packages/starlight-image-zoom/CHANGELOG.md)
    - [Commits](https://github.com/HiDeoo/starlight-image-zoom/commits/starlight-image-zoom@0.16.0/packages/starlight-image-zoom)
    
    Updates `starlight-links-validator` from 0.25.2 to 0.26.0
    - [Release notes](https://github.com/HiDeoo/starlight-links-validator/releases)
    - [Changelog](https://github.com/HiDeoo/starlight-links-validator/blob/main/packages/starlight-links-validator/CHANGELOG.md)
    - [Commits](https://github.com/HiDeoo/starlight-links-validator/commits/starlight-links-validator@0.26.0/packages/starlight-links-validator)
    
    Updates `starlight-page-actions` from 0.7.0 to 0.7.1
    - [Release notes](https://github.com/dlcastillop/starlight-page-actions/releases)
    - [Commits](https://github.com/dlcastillop/starlight-page-actions/commits/v0.7.1/packages/starlight-page-actions)
    
    Updates `starlight-scroll-to-top` from 1.0.1 to 2.0.0
    - [Release notes](https://github.com/frostybee/starlight-scroll-to-top/releases)
    - [Changelog](https://github.com/frostybee/starlight-scroll-to-top/blob/main/packages/starlight-scroll-to-top/CHANGELOG.md)
    - [Commits](https://github.com/frostybee/starlight-scroll-to-top/commits/starlight-scroll-to-top@2.0.0/packages/starlight-scroll-to-top)
    
    Updates `@axe-core/playwright` from 4.12.1 to 4.13.0
    - [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
    - [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
    - [Commits](https://github.com/dequelabs/axe-core-npm/commits/v4.13.0)
    
    Updates `@iconify-json/material-icon-theme` from 1.2.69 to 1.2.70
    - [Commits](https://github.com/iconify/icon-sets/commits)
    
    Updates `@playwright/test` from 1.61.1 to 1.62.1
    - [Release notes](https://github.com/microsoft/playwright/releases)
    - [Commits](microsoft/playwright@v1.61.1...v1.62.1)
    
    Updates `@unocss/astro` from 66.7.5 to 66.9.2
    - [Release notes](https://github.com/unocss/unocss/releases)
    - [Commits](https://github.com/unocss/unocss/commits/v66.9.2/packages-integrations/astro)
    
    Updates `astro-embed` from 0.13.1 to 0.14.0
    - [Release notes](https://github.com/delucis/astro-embed/releases)
    - [Changelog](https://github.com/delucis/astro-embed/blob/main/packages/astro-embed/CHANGELOG.md)
    - [Commits](https://github.com/delucis/astro-embed/commits/astro-embed@0.14.0/packages/astro-embed)
    
    Updates `astro-vtbot` from 3.0.0 to 3.1.0
    - [Changelog](https://github.com/martrapp/astro-vtbot/blob/main/CHANGELOG.md)
    - [Commits](https://github.com/martrapp/astro-vtbot/commits)
    
    Updates `eslint` from 10.7.0 to 10.9.1
    - [Release notes](https://github.com/eslint/eslint/releases)
    - [Commits](eslint/eslint@v10.7.0...v10.9.1)
    
    Updates `globals` from 17.7.0 to 17.12.0
    - [Release notes](https://github.com/sindresorhus/globals/releases)
    - [Commits](sindresorhus/globals@v17.7.0...v17.12.0)
    
    Updates `prettier` from 3.9.5 to 3.9.6
    - [Release notes](https://github.com/prettier/prettier/releases)
    - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
    - [Commits](prettier/prettier@3.9.5...3.9.6)
    
    Updates `tsx` from 4.23.1 to 4.23.13
    - [Release notes](https://github.com/privatenumber/tsx/releases)
    - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
    - [Commits](privatenumber/tsx@v4.23.1...v4.23.13)
    
    Updates `typescript` from 6.0.3 to 7.0.2
    - [Release notes](https://github.com/microsoft/TypeScript/releases)
    - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)
    
    Updates `typescript-eslint` from 8.65.0 to 8.69.0
    - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
    - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
    - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.69.0/packages/typescript-eslint)
    
    Updates `unocss` from 66.7.5 to 66.9.2
    - [Release notes](https://github.com/unocss/unocss/releases)
    - [Commits](https://github.com/unocss/unocss/commits/v66.9.2/packages-presets/unocss)
    
    Updates `vitest` from 4.1.10 to 5.0.0
    - [Release notes](https://github.com/vitest-dev/vitest/releases)
    - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
    - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/vitest)
    
    ---
    updated-dependencies:
    - dependency-name: "@astrojs/markdown-remark"
      dependency-version: 7.3.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: "@astrojs/mdx"
      dependency-version: 8.0.0
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: npm-all
    - dependency-name: "@astrojs/starlight"
      dependency-version: 0.42.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: "@expressive-code/plugin-collapsible-sections"
      dependency-version: 0.44.2
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: npm-all
    - dependency-name: "@expressive-code/plugin-line-numbers"
      dependency-version: 0.44.2
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: npm-all
    - dependency-name: astro
      dependency-version: 7.3.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: astro-expressive-code
      dependency-version: 0.44.2
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: npm-all
    - dependency-name: mermaid
      dependency-version: 11.17.2
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: satori
      dependency-version: 0.33.4
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: satteri
      dependency-version: 0.10.5
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: sharp
      dependency-version: 0.35.4
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: npm-all
    - dependency-name: starlight-image-zoom
      dependency-version: 0.16.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: starlight-links-validator
      dependency-version: 0.26.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: starlight-page-actions
      dependency-version: 0.7.1
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: npm-all
    - dependency-name: starlight-scroll-to-top
      dependency-version: 2.0.0
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: npm-all
    - dependency-name: "@axe-core/playwright"
      dependency-version: 4.13.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: "@iconify-json/material-icon-theme"
      dependency-version: 1.2.70
      dependency-type: direct:development
      update-type: version-update:semver-patch
      dependency-group: npm-all
    - dependency-name: "@playwright/test"
      dependency-version: 1.62.1
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: "@unocss/astro"
      dependency-version: 66.9.2
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: astro-embed
      dependency-version: 0.14.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: astro-vtbot
      dependency-version: 3.1.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: eslint
      dependency-version: 10.9.1
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: globals
      dependency-version: 17.12.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: prettier
      dependency-version: 3.9.6
      dependency-type: direct:development
      update-type: version-update:semver-patch
      dependency-group: npm-all
    - dependency-name: tsx
      dependency-version: 4.23.13
      dependency-type: direct:development
      update-type: version-update:semver-patch
      dependency-group: npm-all
    - dependency-name: typescript
      dependency-version: 7.0.2
      dependency-type: direct:development
      update-type: version-update:semver-major
      dependency-group: npm-all
    - dependency-name: typescript-eslint
      dependency-version: 8.69.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: unocss
      dependency-version: 66.9.2
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-all
    - dependency-name: vitest
      dependency-version: 5.0.0
      dependency-type: direct:development
      update-type: version-update:semver-major
      dependency-group: npm-all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Copilot AI lite review requested due to automatic review settings September 10, 2026 13:07
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 10, 2026
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 10, 2026

    Copilot AI left a comment

    Copy link
    Copy Markdown
    Contributor

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    🟡 Changes recommended

    The Starlight 0.42 upgrade is incompatible with current repo CSS/JS/E2E selectors targeting removed/changed mobile menu markup/state and needs accompanying code/test updates (or the upgrade should be deferred).

    Once you've addressed the issues Copilot identified, you can request another Copilot review.

    Pull request overview

    Updates the frontend toolchain dependencies in src/frontend (Astro/Starlight ecosystem plus lint/test/build tooling), aligning the docs site with newer upstream releases.

    Changes:

    • Bump Astro + Starlight packages (including MDX, markdown processors, and Starlight plugins).
    • Update supporting frontend dependencies (e.g., Mermaid, Sharp, UnoCSS).
    • Refresh dev tooling versions (Playwright, ESLint, Prettier, TypeScript, Vitest, etc.).
    File summaries
    File Description
    src/frontend/package.json Updates 29 frontend dependency and devDependency versions for the Astro/Starlight-based site.
    Review details
    • Files reviewed: 1/2 changed files
    • Comments generated: 1
    • Review effort level: Lite

    💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

    Comment thread src/frontend/package.json
    "@astrojs/mdx": "^8.0.0",
    "@astrojs/rss": "^4.0.19",
    "@astrojs/starlight": "^0.41.3",
    "@astrojs/starlight": "^0.42.0",
    @IEvangelist

    Copy link
    Copy Markdown
    Member

    Tracked/superseded by #1645 — the [auto-sec] canonical remediation for the aspire.dev frontend npm security cluster, which folds this update in and clears all 12 open Dependabot alerts. Keeping this open until the canonical PR is confirmed green, then it will be closed as superseded.

    @IEvangelist

    Copy link
    Copy Markdown
    Member

    Superseded by #1645, the canonical [auto-sec] consolidation for /src/frontend npm dependencies. #1645 is open, mergeable, conflict-free, and CI-green (frontend build + all E2E suites pass), and it already includes this bump (regenerated pnpm-lock.yaml with public-registry tarballs + overrides clearing all Dependabot alerts). Closing per the automation closure gate; will be reopened if #1645 is not merged.

    @dependabot @github

    dependabot Bot commented on behalf of github Sep 10, 2026

    Copy link
    Copy Markdown
    Contributor Author

    This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

    To ignore these dependencies, configure ignore rules in dependabot.yml

    @dependabot
    dependabot Bot deleted the dependabot/npm_and_yarn/src/frontend/npm-all-e3d9bf3aa7 branch September 10, 2026 15:01
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    2 participants