Skip to content

DEPS: Bump the docs group in /docs with 12 updates - #106

Merged
gschlager merged 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/docs-9249b7212a
Oct 27, 2026
Merged

DEPS: Bump the docs group in /docs with 12 updates#106
gschlager merged 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/docs-9249b7212a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the docs group in /docs with 12 updates:

Package From To
astro 7.3.8 7.4.0
@astrojs/compiler-rs 0.5.1 0.5.2
@astrojs/markdown-satteri 0.4.3 0.4.4
@astrojs/mdx 8.0.3 8.1.0
@astrojs/prism 4.0.2 4.1.0
@astrojs/telemetry 3.3.3 3.4.0
devalue 5.9.4 6.0.3
es-module-lexer 3.0.3 3.0.4
rolldown 1.2.13 1.2.14
unifont 0.7.5 1.0.3
unstorage 1.17.5 1.17.6
zod 4.6.5 4.6.7

Updates astro from 7.3.8 to 7.4.0

Release notes

Sourced from astro's releases.

astro@7.4.0

Minor Changes

  • #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

    When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

    astro build --timings

    This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

    Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

    All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

    import type { FontProvider } from 'astro';
const provider: FontProvider = {
name: 'my-provider',
resolveFont: ({ familyName }) => {
// ...
},
getFontProperties: ({ familyName }) => ({
weights: ['400', '700'],
styles: ['normal', 'italic'],
subsets: ['latin'],
formats: ['woff2'],
}),
};

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

    This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

    import type { FontProvider } from 'astro';
import type { InitializedProvider } from 'unifont';
import { acmeProvider } from '@acme/unifont-provider';
export function acmeFontProvider(): FontProvider {
const provider = acmeProvider();
let initializedProvider: InitializedProvider | undefined;
return {
name: provider._name,

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.0

Minor Changes

  • #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

    When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

    astro build --timings

    This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

    Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

    All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

    import type { FontProvider } from 'astro';
const provider: FontProvider = {
name: 'my-provider',
resolveFont: ({ familyName }) => {
// ...
},
getFontProperties: ({ familyName }) => ({
weights: ['400', '700'],
styles: ['normal', 'italic'],
subsets: ['latin'],
formats: ['woff2'],
}),
};

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

    This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

    import type { FontProvider } from 'astro';
import type { InitializedProvider } from 'unifont';
import { acmeProvider } from '@acme/unifont-provider';
export function acmeFontProvider(): FontProvider {
const provider = acmeProvider();
let initializedProvider: InitializedProvider | undefined;
return {

... (truncated)

Commits

Updates @astrojs/compiler-rs from 0.5.1 to 0.5.2

Release notes

Sourced from @​astrojs/compiler-rs's releases.

@​astrojs/compiler-rs@​0.5.2

Patch Changes

  • 089b077: Updates Astro’s oxc fork to the latest commit
  • Updated dependencies [089b077]
    • @​astrojs/compiler-binding@​0.5.2
Commits

Updates @astrojs/markdown-satteri from 0.4.3 to 0.4.4

Release notes

Sourced from @​astrojs/markdown-satteri's releases.

@​astrojs/markdown-satteri@​0.4.4

Patch Changes

Changelog

Sourced from @​astrojs/markdown-satteri's changelog.

0.4.4

Patch Changes

Commits

Updates @astrojs/mdx from 8.0.3 to 8.1.0

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​8.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0
    • @​astrojs/markdown-satteri@​0.4.4
Changelog

Sourced from @​astrojs/mdx's changelog.

8.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0
    • @​astrojs/markdown-satteri@​0.4.4
Commits

Updates @astrojs/prism from 4.0.2 to 4.1.0

Release notes

Sourced from @​astrojs/prism's releases.

@​astrojs/prism@​4.1.0

Minor Changes

Changelog

Sourced from @​astrojs/prism's changelog.

4.1.0

Minor Changes

Commits

Updates @astrojs/telemetry from 3.3.3 to 3.4.0

Release notes

Sourced from @​astrojs/telemetry's releases.

@​astrojs/telemetry@​3.4.0

Minor Changes

Changelog

Sourced from @​astrojs/telemetry's changelog.

3.4.0

Minor Changes

Commits

Updates devalue from 5.9.4 to 6.0.3

Release notes

Sourced from devalue's releases.

v6.0.3

Patch Changes

  • 5cd712a: perf: use native JSON.stringify for strings that need escaping, instead of a per-character loop
  • b49ae34: chore: lower required node version to >=18
  • c411e5e: fix: use explicit .js extension in type imports for nodenext compatibility

v6.0.2

Patch Changes

  • 12ad9d6: chore: remove dts-buddy

v6.0.1

Patch Changes

  • c13cf6a: fix: populate error.path for values reached through a promise in stringifyAsync
  • 6156b2e: perf: stringify and uneval skip per-character escaping for strings with nothing to escape
  • e7a9a73: fix: throw Invalid input instead of a raw TypeError for malformed typed array and boxed primitive payloads
  • 6156b2e: perf: only format path when an error is raised
  • 6156b2e: perf: cache quoted property names
  • 9e44253: Fix uneval for typed array views whose backing buffer ends with a partial element

v6.0.0

Major Changes

  • afb3cb4: breaking: use tagged template js for uneval replacers instead of nested uneval
  • 3100507: breaking: require Node 22.17 or newer

Minor Changes

  • afb3cb4: feat: support cyclic custom objects

Patch Changes

  • ac295fb: fix: escape unpaired surrogates so uneval/stringify output survives UTF-8 transport
Changelog

Sourced from devalue's changelog.

6.0.3

Patch Changes

  • 5cd712a: perf: use native JSON.stringify for strings that need escaping, instead of a per-character loop
  • b49ae34: chore: lower required node version to >=18
  • c411e5e: fix: use explicit .js extension in type imports for nodenext compatibility

6.0.2

Patch Changes

  • 12ad9d6: chore: remove dts-buddy

6.0.1

Patch Changes

  • c13cf6a: fix: populate error.path for values reached through a promise in stringifyAsync
  • 6156b2e: perf: stringify and uneval skip per-character escaping for strings with nothing to escape
  • e7a9a73: fix: throw Invalid input instead of a raw TypeError for malformed typed array and boxed primitive payloads
  • 6156b2e: perf: only format path when an error is raised
  • 6156b2e: perf: cache quoted property names
  • 9e44253: Fix uneval for typed array views whose backing buffer ends with a partial element

6.0.0

Major Changes

  • afb3cb4: breaking: use tagged template js for uneval replacers instead of nested uneval
  • 3100507: breaking: require Node 22.17 or newer

Minor Changes

  • afb3cb4: feat: support cyclic custom objects

Patch Changes

  • ac295fb: fix: escape unpaired surrogates so uneval/stringify output survives UTF-8 transport
Commits

Updates es-module-lexer from 3.0.3 to 3.0.4

Release notes

Sourced from es-module-lexer's releases.

3.0.4

What's Changed

Full Changelog: guybedford/es-module-lexer@3.0.3...3.0.4

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for es-module-lexer since your current version.


Updates rolldown from 1.2.13 to 1.2.14

Release notes

Sourced from rolldown's releases.

v1.2.14

[1.2.14] - 2026-10-14

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

  • dev: use dunce::canonicalize so dev engine tests pass on Windows (#11192) by @​shulaoda
  • preserve-entry-signatures: cover nested dynamic imports (#11164) by @​hyfdev

⚙️ Miscellaneous Tasks

... (truncated)

Changelog

Sourced from rolldown's changelog.

[1.2.14] - 2026-10-14

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

  • dev: use dunce::canonicalize so dev engine tests pass on Windows (#11192) by @​shulaoda
  • preserve-entry-signatures: cover nested dynamic imports (#11164) by @​hyfdev

⚙️ Miscellaneous Tasks

... (truncated)

Commits
  • c9a8cda release: v1.2.14 (#11210)
  • 970ad1f fix: handle output.charset: 'ascii' + output.minify: false (#11207)
  • dd2f65f feat: add output.charset option (#11194)
  • e148823 feat(code-splitting): route independent ESM re-exports per consumer (#11177)
  • 0c1de40 fix(strict-execution-order): account for init imports during code splitting (...
  • f71e200 fix(shim-missing-exports): shim missing static namespace members (#11179)
  • 5900698 fix(preserve-entry-signatures): keep internal bindings out of entry exports (...
  • 59f88f8 fix(rolldown): make a repeated close() a no-op (#11142)
  • See full diff in compare view

Updates unifont from 0.7.5 to 1.0.3

Release notes

Sourced from unifont's releases.

v1.0.3

v1.0.3 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes

  • confine font sources from providers + npm packages (#548)

💅 Refactors

  • replace ohash with fnv1a-64 (#549)

❤️ Contributors

v1.0.2

v1.0.2 is the next patch release.

👉 Changelog

compare changes

🔥 Performance

  • isolate provider failures + initialise providers lazily (#531)

🩹 Fixes

  • google: serve curated subsets when glyphs cover them (#532)

📖 Documentation

  • reorder controls over sample text (7af4f6c)
  • use zero-layout shift option for ⌘/Ctrl (8958bbf)

❤️ Contributors

v1.0.1

v1.0.1 is the next patch release with no changes, addressing an issue with the v1 release

👉 Changelog

compare changes

... (truncated)

Commits
  • 09131e0 v1.0.3 (#550)
  • 501e809 fix: confine font sources from providers + npm packages (#548)
  • 715bd58 refactor: replace ohash with fnv1a-64 (#549)
  • 1106a6e chore(deps): update all non-major dependencies (#546)
  • ebb86bf chore(deps): update dependency rou3 to v1 (#545)
  • 765e373 chore(deps): update devdependency eslint to v10.12.0 (#544)
  • e84bc6d chore(deps): update devdependency vite to v8.3.2 (#542)
  • 834f232 chore(deps): update test packages to v5.0.3 (#543)
  • 158bc39 chore(deps): update all non-major dependencies (#541)
  • b3ebfa6 chore(deps): update devdependency @​nuxt/test-utils to v4.3.3 (#540)
  • Additional commits viewable in compare view

Updates unstorage from 1.17.5 to 1.17.6

Release notes

Sourced from unstorage's releases.

v1.17.6

compare changes

🩹 Fixes

  • vercel-runtime-cache: Resolve the request cache on every call (#843)
  • fs: Ignore globs fail under dot-prefixed directories (#768)
  • fs: Ensure directory exists before watching (#703)
  • http, s3, cloudflare-kv-http: Encode key segments in URLs (f203c45)
  • netlify-blobs, vercel-runtime-cache, redis, upstash, vercel-kv: Validate or escape keys used in urls and patterns (59127d1)
  • cloudflare-kv-binding, cloudflare-r2-binding, cloudflare-kv-http, vercel-blob: Use trailing separator for list prefixes (92b952b)
  • netlify-blobs: Reject control characters and leading/trailing spaces in keys (8dae0aa)
  • Reject empty keys and dot segments in storage, prefixStorage and server (c7f65b7)
  • prefixStorage: Reject bases containing ? (4189a67)
  • server: Ignore query for base keys and reject HEAD/PUT on base keys (552e562)

❤️ Contributors

Changelog

Sourced from unstorage's changelog.

v1.17.6

compare changes

🩹 Fixes

  • vercel-runtime-cache: Resolve the request cache on every call (#843)
  • fs: Ignore globs fail under dot-prefixed directories (#768)
  • fs: Ensure directory exists before watching (#703)
  • http, s3, cloudflare-kv-http: Encode key segments in urls (f203c45)
  • netlify-blobs, vercel-runtime-cache, redis, upstash, vercel-kv: Validate or escape keys used in urls and patterns (59127d1)
  • cloudflare-kv-binding, cloudflare-r2-binding, cloudflare-kv-http, vercel-blob: Use trailing separator for list prefixes (92b952b)
  • netlify-blobs: Reject control characters and leading/trailing spaces in keys (8dae0aa)
  • Reject empty keys and dot segments in storage, prefixStorage and server (c7f65b7)
  • prefixStorage: Reject bases containing ? (4189a67)
  • server: Ignore query for base keys and reject HEAD/PUT on base keys (552e562)

🏡 Chore

✅ Tests

  • vercel-kv: Lazy import driver to fix vitest 5 collection without env (0c53506)

❤️ Contributors

Commits
  • 92d0bdb chore(release): v1.17.6
  • 88d29bb chore: update to pnpm 11
  • 552e562 fix(server): ignore query for base keys and reject HEAD/PUT on base keys
  • 4189a67 fix(prefixStorage): reject bases containing ?
  • c7f65b7 fix: reject empty keys and dot segments in storage, prefixStorage and server
  • 8dae0aa fix(netlify-blobs): reject control characters and leading/trailing spaces in ...
  • 92b952b fix(cloudflare-kv-binding, cloudflare-r2-binding, cloudflare-kv-http, vercel-...
  • 59127d1 fix(netlify-blobs, vercel-runtime-cache, redis, upstash, vercel-kv): validate...
  • f203c45 fix(http, s3, cloudflare-kv-http): encode key segments in urls
  • 0c53506 test(vercel-kv): lazy import driver to fix vitest 5 collection without env
  • Additional commits viewable in compare view

Updates zod from 4.6.5 to 4.6.7

Release notes

Sourced from zod's releases.

v4.6.7

Commits:

  • b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7

v4.6.6

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #6620Description has been truncated

@dependabot
DEPS: Bump the docs group in /docs with 12 updates
ffc291a 
Bumps the docs group in /docs with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.8` | `7.4.0` |
| [@astrojs/compiler-rs](https://github.com/withastro/compiler-rs) | `0.5.1` | `0.5.2` |
| [@astrojs/markdown-satteri](https://github.com/withastro/astro/tree/HEAD/packages/markdown/satteri) | `0.4.3` | `0.4.4` |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `8.0.3` | `8.1.0` |
| [@astrojs/prism](https://github.com/withastro/astro/tree/HEAD/packages/astro-prism) | `4.0.2` | `4.1.0` |
| [@astrojs/telemetry](https://github.com/withastro/astro/tree/HEAD/packages/telemetry) | `3.3.3` | `3.4.0` |
| [devalue](https://github.com/sveltejs/devalue) | `5.9.4` | `6.0.3` |
| [es-module-lexer](https://github.com/guybedford/es-module-lexer) | `3.0.3` | `3.0.4` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.13` | `1.2.14` |
| [unifont](https://github.com/unjs/unifont) | `0.7.5` | `1.0.3` |
| [unstorage](https://github.com/unjs/unstorage) | `1.17.5` | `1.17.6` |
| [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` |


Updates `astro` from 7.3.8 to 7.4.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.4.0/packages/astro)

Updates `@astrojs/compiler-rs` from 0.5.1 to 0.5.2
- [Release notes](https://github.com/withastro/compiler-rs/releases)
- [Commits](https://github.com/withastro/compiler-rs/compare/@astrojs/compiler-rs@0.5.1...@astrojs/compiler-rs@0.5.2)

Updates `@astrojs/markdown-satteri` from 0.4.3 to 0.4.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/satteri/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-satteri@0.4.4/packages/markdown/satteri)

Updates `@astrojs/mdx` from 8.0.3 to 8.1.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.1.0/packages/integrations/mdx)

Updates `@astrojs/prism` from 4.0.2 to 4.1.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro-prism/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/prism@4.1.0/packages/astro-prism)

Updates `@astrojs/telemetry` from 3.3.3 to 3.4.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/telemetry/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/telemetry@3.4.0/packages/telemetry)

Updates `devalue` from 5.9.4 to 6.0.3
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](sveltejs/devalue@v5.9.4...v6.0.3)

Updates `es-module-lexer` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/guybedford/es-module-lexer/releases)
- [Commits](guybedford/es-module-lexer@3.0.3...3.0.4)

Updates `rolldown` from 1.2.13 to 1.2.14
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.2.14/packages/rolldown)

Updates `unifont` from 0.7.5 to 1.0.3
- [Release notes](https://github.com/unjs/unifont/releases)
- [Commits](unjs/unifont@v0.7.5...v1.0.3)

Updates `unstorage` from 1.17.5 to 1.17.6
- [Release notes](https://github.com/unjs/unstorage/releases)
- [Changelog](https://github.com/unjs/unstorage/blob/v1.17.6/CHANGELOG.md)
- [Commits](unjs/unstorage@v1.17.5...v1.17.6)

Updates `zod` from 4.6.5 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.5...v4.6.7)

---
updated-dependencies:
- dependency-name: astro
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docs
- dependency-name: "@astrojs/compiler-rs"
  dependency-version: 0.5.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs
- dependency-name: "@astrojs/markdown-satteri"
  dependency-version: 0.4.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs
- dependency-name: "@astrojs/mdx"
  dependency-version: 8.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: docs
- dependency-name: "@astrojs/prism"
  dependency-version: 4.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: docs
- dependency-name: "@astrojs/telemetry"
  dependency-version: 3.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: docs
- dependency-name: devalue
  dependency-version: 6.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: docs
- dependency-name: es-module-lexer
  dependency-version: 3.0.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs
- dependency-name: rolldown
  dependency-version: 1.2.14
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs
- dependency-name: unifont
  dependency-version: 1.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: docs
- dependency-name: unstorage
  dependency-version: 1.17.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: docs
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
@gschlager
gschlager merged commit 3928e88 into main Oct 27, 2026
11 checks passed
@gschlager
gschlager deleted the dependabot/npm_and_yarn/docs/docs-9249b7212a branch October 27, 2026 08:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@gschlager gschlager gschlager approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@gschlager