Update examples by renovate[bot] · Pull Request #18204 · withastro/astro

renovate · 2026-10-02T09:21:34Z

This PR contains the following updates:

Package	Change	Age	Confidence
@nanostores/preact	`^1.0.0` → `^1.1.0`
@preact/signals (source)	`^2.8.1` → `^2.11.2`
@tailwindcss/vite (source)	`^4.2.1` → `^4.3.3`
@types/alpinejs (source)	`^3.13.11` → `^3.17.0`
@types/react (source)	`^18.3.28` → `^18.3.31`
alpinejs (source)	`^3.15.8` → `^3.17.4`
hono (source)	`^4.13.7` → `^4.13.11`
nanostores	`^1.1.1` → `^1.5.4`
preact (source)	`^10.28.4` → `^10.29.8`
sass	`^1.97.3` → `^1.105.0`
solid-js (source)	`^1.9.11` → `^1.9.15`
svelte (source)	`^5.55.7` → `^5.57.1`
tailwindcss (source)	`^4.2.1` → `^4.3.3`
vite (source)	`^8.0.13` → `^8.3.1`
vitest (source)	`^5.0.0` → `^5.0.2`
vue (source)	`^3.5.29` → `^3.5.43`

Release Notes

nanostores/preact (@nanostores/preact)

`v1.1.0`

Compare Source

Added ssr option (by @jmurty).

alpinejs/alpine (alpinejs)

`v3.17.4`

Compare Source

What's Changed

Fix mutation observer recovery after errors by @BillyNoyes in #4908
Add viewport modifier to resize plugin by @BillyNoyes in #4910

New Contributors

@BillyNoyes made their first contribution in #4908

Full Changelog: alpinejs/alpine@v3.17.3...v3.17.4

`v3.17.3`

Compare Source

What's Changed

Bump js-yaml from 3.14.1 to 3.15.2 by @dependabot[bot] in #4896
Change x-for to allow loops like (foo)in(bar) by @ColonelThirtyTwo in #4897
Fix(CspParser): accept reserved words as property/method names and object keys by @MaxencePaulin in #4905
Fix: $watch and x-modelable can fire after being unwatched/released by @MaxencePaulin in #4903
Fix: skip init() in x-data during clone, matching x-init behavior by @MaxencePaulin in #4901
Bump @vitest/mocker and vitest by @dependabot[bot] in #4898
Stop x-on and x-model's own modifiers from being read as key names by @dylanpulver in #4891
Fix CI compatibility after the Vitest 5 upgrade by @calebporzio in #4906

New Contributors

@ColonelThirtyTwo made their first contribution in #4897
@MaxencePaulin made their first contribution in #4905
@dylanpulver made their first contribution in #4891

Full Changelog: alpinejs/alpine@v3.17.2...v3.17.3

`v3.17.2`

Compare Source

What's Changed

Fix decode-uri-component Dependabot alert by @calebporzio in #4889
Bump browserslist from 4.21.5 to 4.28.8 by @dependabot[bot] in #4890
Fix CSP initialization in sandboxed iframes by @calebporzio in #4893

Full Changelog: alpinejs/alpine@v3.17.1...v3.17.2

`v3.17.1`

Compare Source

What's Changed

Add dwell timing to the intersect plugin by @cyppe in #4884
Bump brace-expansion from 1.1.11 to 1.1.18 by @dependabot[bot] in #4882
Docs: clarify how Alpine effects track reactive dependencies by @MuslumYilmaz in #4883

New Contributors

@cyppe made their first contribution in #4884
@MuslumYilmaz made their first contribution in #4883

Full Changelog: alpinejs/alpine@v3.17.0...v3.17.1

`v3.17.0`

Compare Source

What's Changed

Fix Unicode escapes in CSP string literals by @dawNotPoi in #4881
Add Alpine.deferInit() — suspend a tree until an async prerequisite settles by @calebporzio in #4887

New Contributors

@dawNotPoi made their first contribution in #4881

Full Changelog: alpinejs/alpine@v3.16.3...v3.17.0

`v3.16.3`

Compare Source

What's Changed

docs: clarify x-modelable value support by @pooridev in #4880
Fix x-mask attribute changes on x-model inputs by @joshhanley in #4852
Bump postcss from 8.5.6 to 8.5.26 by @dependabot[bot] in #4871

New Contributors

@pooridev made their first contribution in #4880

Full Changelog: alpinejs/alpine@v3.16.2...v3.16.3

`v3.16.2`

Compare Source

What's Changed

Fix fallback storage returning undefined for missing keys by @hamdyelbatal122 in #4867
fix(persist): don't persist undefined values by @Xuepoo in #4876
Run structural effects before dependent effects by @calebporzio in #4878
Upgrade @vue/reactivity to Vue 3.5 by @oddvalue in #4861

New Contributors

@hamdyelbatal122 made their first contribution in #4867
@Xuepoo made their first contribution in #4876
@oddvalue made their first contribution in #4861

Full Changelog: alpinejs/alpine@v3.16.1...v3.16.2

`v3.16.1`

Compare Source

What's Changed

Fix Persist compatibility with older Alpine versions by @calebporzio in #4875

Full Changelog: alpinejs/alpine@v3.16.0...v3.16.1

`v3.16.0`

Compare Source

What's Changed

Fix data loss when binding objects to regular attributes by @daftspunk in #4826
Fix mask resurrecting key in object when it is cleared by @danharrin in #4812
Fix x-if and x-for content duplicating during morph by @ganyicz in #4785
fix: sync x-model select value after x-for renders options by @ljk0071 in #4769
Fix x-bind:value on <option> losing attribute when value is an empty string by @joshhanley in #4831
Fix :value bindings not updating custom elements when bound object data mutates by @joshhanley in #4833
Add .parent modifier for x-intersect by @kevinruscoe in #4839
Upgrade Cypress by @joshhanley in #4849
Preserve x-data scope when its expression changes by @calebporzio in #4868
Fix persisted single-value stores by @joshhanley in #4859
Pass cleanup callback to direct store interceptors by @calebporzio in #4869
Split draft and npm release workflows by @calebporzio in #4870
Use Node 24 for release workflows by @calebporzio in #4872

New Contributors

@daftspunk made their first contribution in #4826
@ljk0071 made their first contribution in #4769
@kevinruscoe made their first contribution in #4839

Full Changelog: alpinejs/alpine@v3.15.12...v3.16.0

`v3.15.12`

Compare Source

What's Changed

Add .fixed positioning modifier to x-anchor by @nicolagianelli in #4773
fix(csp): support MemberExpression assignments in evaluator by @dasm in #4807
Fix x-for crashing on null-prototype objects like Object.groupBy() results by @joshhanley in #4825
Fix && and || not short-circuiting in CSP evaluator by @joshhanley in #4823
Fix x-sort crash when container has a <template> with no .content by @joshhanley in #4819
Add minified ESM build output for each package by @joshhanley in #4820
Fix x-id evaluation order so $id resolves consistently inside x-data by @joshhanley in #4821
Fix @teleport leaking detached nodes on every Livewire render by @joshhanley in #4822

New Contributors

@dasm made their first contribution in #4807

Full Changelog: alpinejs/alpine@v3.15.11...v3.15.12

`v3.15.11`

Compare Source

What's Changed

fix(csp): skip sharedStorage when enumerating globalThis properties by @PierreBultez in #4787
Fix x-trap.noscroll layout shift conflict with scrollbar-gutter by @dotfrag in #4512
Add support for [x-sort:handle] attributes defined in template tags by @SimoTod in #4483
Add x-anchor.noflip modifier by @calebporzio in #4791
Warn when x-for template has multiple root elements by @calebporzio in #4752
Fix $refs unavailable during morph (v3.15.9 regression) by @calebporzio in #4793

New Contributors

@PierreBultez made their first contribution in #4787
@dotfrag made their first contribution in #4512

Full Changelog: alpinejs/alpine@v3.15.10...v3.15.11

`v3.15.10`

Compare Source

Fixed

Fix x-anchor crash during wire:navigate cleanup #4790

`v3.15.9`

Compare Source

What's Changed

fix(morph): close dialogs properly when removing open attribute by @calebporzio in #4739
Update tabbable and focus-trap dependencies in focus plugin by @joshhanley in #4737
feat(x-anchor): allow dynamic reference to be used with x-anchor by @maximbelyayev in #4735
Handle all types of whitespace in class lists, not just spaces by @calebporzio in #4743
docs: clearer variable name in x-bind example by @calebporzio in #4742
Fix x-model.parent when inside of x-teleport by @willrowe in #4676
feat: x-on.passive.false modifier by @hirasso in #4610
Add support for Set objects in x-for loop function by @alfanzain in #4672
Add support for custom options and cancelable $dispatch by @nicolagianelli in #4608
Fix how x-html handles undefined by @willrowe in #4555
move dependencies from monorepo root to correct packages by @Igloczek in #4550
Don't assign the normalEvaluator per default by @JeroenBoersma in #4548
Fix class setters invocation on nested x-data by @helio3197 in #4528
🐛 Masks model updates by @ekwoka in #4175
Allow debouncing/throttling x-model when using x-modelable by @Spitfire972 in #4186
UI x-radio: fix keyboard navigation when value of first/last radio option is null by @gdebrauwer in #4308
Improve handling of autocomplete values in X-Mask by @robertmarney in #4260
⚡ Improves x-for performance by @ekwoka in #4361
Fix x-ref crash during child-element morph by @calebporzio in #4748
Fix $watch oldValue for objects by @calebporzio in #4749
Escape attribute values in morph setAttribute patch by @joshhanley in #4770
Fix x-model setting .value instead of .checked on checkboxes by @ganyicz in #4779
Fix x-model.blur crash when input is removed from a form by @joshhanley in #4783

New Contributors

@maximbelyayev made their first contribution in #4735
@hirasso made their first contribution in #4610
@alfanzain made their first contribution in #4672
@nicolagianelli made their first contribution in #4608
@Igloczek made their first contribution in #4550
@JeroenBoersma made their first contribution in #4548
@helio3197 made their first contribution in #4528
@Spitfire972 made their first contribution in #4186
@robertmarney made their first contribution in #4260

Full Changelog: alpinejs/alpine@v3.15.8...v3.15.9

nanostores/nanostores (nanostores)

`v1.5.4`

Compare Source

Fixed listenKeys for deepMap (by @tiagovilasboas).
Fixed listener calls lost after unbind and inside batch() (by @psd-coder).
Fixed tasks during cleaning up (by @lprnmns).
Fixed listenKeys with non-string map keys (by @lprnmns).
Fixed listenKeys to use Object.is (by @lprnmns).
Fixed effect() on an error during subscription (by @lprnmns).

`v1.5.3`

Compare Source

Fixed using Store#eq in computed (by @lprnmns).
Throw an error on Object.prototype keys in mapCreator (by @lprnmns).
Fixed batch() inside a listener (by @lenamonj).
Fixed calling unbind twice (by @lenamonj).
Fixed cleanTasks() for completions tasks (by @lenamonj).

`v1.5.2`

Compare Source

Fixed types (by @edloidas).

`v1.5.1`

Compare Source

Fixed types (by @edloidas).
Fixed listenKeys when old value is not available (by @edloidas).

`v1.5.0`

Compare Source

Added eq and eqKey for custom value comparison (by @psd-coder).
Fixed calling other listeners if one of them throws (by @psd-coder).
Fixed listenKeys deep paths on whole store set (by @ankit1324).

`v1.4.2`

Compare Source

Fixed batch() conflict with builder (by @psd-coder).
Added new tools to docs (by @firatciftci & @alexcarpenter).

`v1.4.1`

Compare Source

Fixed task() for synchronous callbacks (by @rajanpanth).
Fixed docs (by @maxtaran2010 & @VdustR).

`v1.4.0`

Compare Source

Added batch to run one re-render on many stores changes (by @psd-coder).
Added listening base key for nested mutation to listenKeys (by @ifo123).
Fixed getPath throwing on null intermediate values (by @chatman-media).
Fixed listenKeys on the whole set changes (by @LeSingh1).
Fixed resetting computed cache on cleanStores (by @ATOM00blue).

`v1.3.0`

Compare Source

Added globalThis.nanostoresGlobal to sync stores in JS bundles (by @afurm).

`v1.2.0`

Compare Source

Deprecated async computed in favor of @nanostores/async (by @Fryuni).
Added Store#init to fix SSR (by @jmurty).

vitest-dev/vitest (vitest)

`v5.0.2`

Compare Source

🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in #11343 (0b792)
detect-async-leaks:
- Ignore process.stdio handles - by @AriPerkkio in #11333 (0fd6b)
expect:
- Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in #11100 (42523)
jsdom:
- Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in #11295 (d1c3e)
reporter:
- agent to respect --silent - by @Raj4478 and @AriPerkkio in #11271 (5b95e)
reporters:
- Handle concurrent createReport calls - by @7rulnik in #11278 (e8e55)
- hanging-process to use ESM entrypoint - by @AriPerkkio in #11316 (4e91e)
spy:
- Fix stack overflow when spying Set.prototype.add - by @fengmk2 in #11299 (a0a93)
ui:
- Persist authentication cookie beyond current browser session - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #11066 (f8819)

View changes on GitHub

`v5.0.1`

Compare Source

🚀 Features

ui:
- Move trace attempts selector to viewer header - by @hi-ogawa, Hiroshi Ogawa and Codex in #11189 (5dc4b)
- Add focused trace view layout mode - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in #11190 (376dc)

🐞 Bug Fixes

Exit 1 when vitest list fails collection - by @hamed-bavar in #11145 and #11146 (6108b)
Keep parse error details in static collection - by @hamed-bavar in #11150 and #11151 (7c818)
Avoid recursive prototype in automocking - by @sheremet-va in #11195 (99fc5)
Prevent false Vitest import resolution - by @sheremet-va in #11196 (b426c)
Keep metadata file when clearing the cache - by @sheremet-va in #11199 (73614)
Correct typos in error message and comments - by @shinji00222 and Shinji in #11187 (115c3)
Resolve ResolvedConfig exactOptionalPropertyTypes errors - by @LukeAbby in #11175 (498fb)
Share the server on self-referencing extends - by @sheremet-va in #11034 (23dda)
Warn when deprecated deps.optimizer.web is used - by @im10furry in #11214 (2ce29)
browser:
- Avoid double quotes in config.define - by @sheremet-va in #11198 (972e2)
doctor:
- Measure vm pools for custom environments - by @sheremet-va in #11212 (91ab1)
expect:
- Correct return value in toMatchAriaSnapshot - by @sheremet-va in #11208 (c119b)
fakeTimers:
- Force queueMicrotask and nextTick in toNotFake - by @kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @hi-ogawa in #11261 (a47d7)
snapshot:
- Report obsolete keys next to skipped tests - by @hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #11157 and #11158 (17e2b)
types:
- Make public declarations self-contained - by @ZoeySigel in #11141 (45546)
ui:
- Fix collapse/expand suite with file name search - by @hi-ogawa, Hiroshi Ogawa and Codex in #11260 (0a712)
- Fix explorer file summary count - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in #11125 (05982)
utils:
- Fix deepMerge to handle prototype - by @hi-ogawa, Hiroshi Ogawa and Codex in #11215 (4944c)

View changes on GitHub

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-10-02T09:21:38Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 565 workspace projects
? Verifying lockfile against supply-chain policies (2261 entries)...
[WARN] Request took 10226ms: https://registry.npmjs.org/@typescript-eslint%2Ftypescript-estree
[WARN] Request took 11168ms: https://registry.npmjs.org/@typescript-eslint%2Feslint-plugin
[WARN] Request took 11590ms: https://registry.npmjs.org/@types%2Fnode
[WARN] Request took 10477ms: https://registry.npmjs.org/@typescript-eslint%2Ftype-utils
[WARN] Request took 10842ms: https://registry.npmjs.org/@typescript-eslint%2Futils
[WARN] Request took 11618ms: https://registry.npmjs.org/@typescript-eslint%2Ftypes
[WARN] Request took 11437ms: https://registry.npmjs.org/@typescript-eslint%2Fvisitor-keys
[WARN] Request took 11383ms: https://registry.npmjs.org/@typescript-eslint%2Fscope-manager
[WARN] Request took 11133ms: https://registry.npmjs.org/@typescript-eslint%2Fparser
[WARN] Request took 10654ms: https://registry.npmjs.org/@typescript-eslint%2Ftypescript-estree
[WARN] Request took 10547ms: https://registry.npmjs.org/@typescript-eslint%2Feslint-plugin
✓ Lockfile passes supply-chain policies (2261 entries in 31.9s)
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 44, reused 0, downloaded 0, added 0
Progress: resolved 91, reused 0, downloaded 0, added 0
Progress: resolved 116, reused 0, downloaded 0, added 0
Progress: resolved 121, reused 0, downloaded 0, added 0
Progress: resolved 127, reused 0, downloaded 0, added 0
Progress: resolved 147, reused 2, downloaded 0, added 0
Progress: resolved 184, reused 2, downloaded 1, added 0
Progress: resolved 192, reused 2, downloaded 1, added 0
Progress: resolved 226, reused 2, downloaded 1, added 0
[WARN] Request took 10216ms: https://registry.npmjs.org/tailwindcss
Progress: resolved 266, reused 2, downloaded 1, added 0
[WARN] Request took 12032ms: https://registry.npmjs.org/typescript
Progress: resolved 271, reused 2, downloaded 1, added 0
Progress: resolved 272, reused 2, downloaded 1, added 0
Progress: resolved 273, reused 2, downloaded 1, added 0
[WARN] Request took 16171ms: https://registry.npmjs.org/vite
Progress: resolved 274, reused 2, downloaded 1, added 0
Progress: resolved 308, reused 2, downloaded 1, added 0
Progress: resolved 377, reused 2, downloaded 1, added 0
/tmp/renovate/repos/github/withastro/astro/examples/container-with-vitest:
[ERR_PNPM_TRUST_DOWNGRADE] High-risk trust downgrade for "why-is-node-running@3.2.2" (possible package takeover)

This error happened while installing the dependencies of vitest@5.0.2

Trust checks are based solely on publish date, not semver. A package cannot be installed if any earlier-published version had stronger trust evidence. Earlier versions had provenance attestation, but this version has no trust evidence. A trust downgrade may indicate a supply chain incident.

changeset-bot · 2026-10-02T09:21:44Z

⚠️ No Changeset found

Latest commit: 02061ae

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions · 2026-10-02T09:32:31Z

⚠️ New Duplicate Dependencies (found: 1, threshold: 1)

📦 Package	📋 Versions
why-is-node-running	2 versions root@ vitest@4.1.11 why-is-node-running@2.3.0 why-is-node-running@3.2.2

💡 To find out what depends on a specific package, run: pnpm -r why example-package

renovate · 2026-10-02T10:00:53Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Update examples

35784ef

renovate Bot added the dependencies Pull requests that update a dependency file label Oct 2, 2026

github-actions Bot added the pkg: example Related to an example package (scope) label Oct 2, 2026

fix

02061ae

florian-lefebvre approved these changes Oct 2, 2026

View reviewed changes

florian-lefebvre merged commit 4c1470a into main Oct 2, 2026
24 of 25 checks passed

florian-lefebvre deleted the renovate/examples branch October 2, 2026 12:07

Navigation Menu

Repository navigation

Update examples - #18204

Update examples#18204
florian-lefebvre merged 2 commits into
mainfrom
renovate/examples

renovate Bot commented Oct 2, 2026

Uh oh!

renovate Bot commented Oct 2, 2026

Uh oh!

changeset-bot Bot commented Oct 2, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 2, 2026

Uh oh!

renovate Bot commented Oct 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Oct 2, 2026

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Fixed

What's Changed

New Contributors

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

Configuration

Uh oh!

renovate Bot commented Oct 2, 2026

⚠️ Artifact update problem

File name: pnpm-lock.yaml

Uh oh!

changeset-bot Bot commented Oct 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

github-actions Bot commented Oct 2, 2026

⚠️ New Duplicate Dependencies (found: 1, threshold: 1)

Uh oh!

renovate Bot commented Oct 2, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

changeset-bot Bot commented Oct 2, 2026 •

edited

Loading