Skip to content

chore(deps): bump the dev-dependencies group across 1 directory with 4 updates - #330

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/dev-dependencies-88c9a92396
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/dev-dependencies-88c9a92396

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 4 updates in the /docs directory: @astrojs/starlight, astro, sharp and sass.

Updates @astrojs/starlight from 0.37.7 to 0.42.2

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.2

Patch Changes

@​astrojs/starlight@​0.42.1

Patch Changes

  • #4198 96a44d4 Thanks @​mayank99! - Removes the popover attribute from the sidebar pane on desktop viewports. This ensures the desktop sidebar doesn't stay in a "hidden" popover visibility state.

@​astrojs/starlight@​0.42.0

Minor Changes

  • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

  • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

    ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

    In the following example, custom styles for the menu button are updated for the new approach:

    - starlight-menu-button button {
    + .sl-menu-button {
      color: var(--sl-color-text);
    }
    
    starlight-menu-button[aria-expanded='true'] button {
    
    
    .sl-menu-button:has(~ :popover-open) {
    color: var(--sl-color-text-accent-high);
    }

See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    If your configuration included a tagline option, you can safely remove it without any replacement.

  • #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:

    • astro v7.2.10 or later
    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
    • @astrojs/markdown-remark 7.3.0 or later (if you use it)

    Please update Starlight and Astro together:

  • ... (truncated)

    Changelog

    Sourced from @​astrojs/starlight's changelog.

    0.42.2

    Patch Changes

    0.42.1

    Patch Changes

    • #4198 96a44d4 Thanks @​mayank99! - Removes the popover attribute from the sidebar pane on desktop viewports. This ensures the desktop sidebar doesn't stay in a "hidden" popover visibility state.

    0.42.0

    Minor Changes

    • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

    • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

      ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

      In the following example, custom styles for the menu button are updated for the new approach:

      - starlight-menu-button button {
      + .sl-menu-button {
        color: var(--sl-color-text);
      }
      
      starlight-menu-button[aria-expanded='true'] button {
      
      
      .sl-menu-button:has(~ :popover-open) {
      color: var(--sl-color-text-accent-high);
      }

    See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    If your configuration included a tagline option, you can safely remove it without any replacement.

  • #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:

    • astro v7.2.10 or later
    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
    • @astrojs/markdown-remark 7.3.0 or later (if you use it)
  • ... (truncated)

    Commits

    Updates astro from 5.18.1 to 7.3.3

    Release notes

    Sourced from astro's releases.

    astro@7.3.3

    Patch Changes

    • #17651 504333c Thanks @​sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

    • #17942 0bc5715 Thanks @​matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

    • #17700 b2222fc Thanks @​winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

    • #17941 394ff79 Thanks @​matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

    • #17928 3277927 Thanks @​ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.

    • #17928 3277927 Thanks @​ArmandPhilippot! - Fixes a type error in getImage() options that allowed passing both widths and densities at the same time.

    • #17857 2637ed1 Thanks @​Princesseuh! - Improves rendering performance

    • #17943 2fc7ce9 Thanks @​matthewp! - Fixes a WebAssembly error when importing astro:actions in tests that run under @cloudflare/vitest-pool-workers

    • #18018 1b5a234 Thanks @​astro-factory! - Fixes trailing-slash redirect response body pointing to the incoming URL instead of the redirect target. The location header was correct, but the HTML body (<meta http-equiv="refresh">, <title>, and <a> tag) contained the original request path without the trailing-slash correction or query string.

    • #17905 eaf70fa Thanks @​SudoDevStudio! - Fixes custom dev toolbar apps losing their UI after client-side navigation with <ClientRouter />.

    • #18011 558b301 Thanks @​astro-factory! - Fixes prerendered Cloudflare pages rendering as [object Object] when nodejs_compat is enabled in wrangler.toml

    • #17944 ba08e35 Thanks @​matthewp! - Fixes a regression in astro dev where writes outside the module graph (for example, @astrojs/cloudflare's .wrangler/state files) invalidated the middleware on every request, causing repeated SSR reloads. Such writes no longer invalidate the middleware.

    • #17531 ae837db Thanks @​danilloestrela! - Updates svgo to 4.0.2 to resolve a security advisory

    • #17953 dbbf10e Thanks @​astro-factory! - Fixes a one-time page reload shortly after the first load on cold dev-server starts when a project has framework components imported from MDX content entries. MDX files are now included in the dev dependency pre-bundling scan, so their framework dependencies are bundled up front instead of being discovered (and reloaded for) at runtime.

    • #17955 4e8ad9a Thanks @​matthewp! - Improves dev server startup time. The content config and dev server app module graphs now begin compiling during server creation without blocking the server from listening. Request handling waits for the shared setup result when needed, cutting astro dev ready time by roughly a third on projects with a content config.

    • #17960 9838049 Thanks @​Chy-Zaber-Bin-Zahid! - Improves the diagnostics of some Astro errors.

    • #17998 0e5478d Thanks @​astro-factory! - Fixes SVG <style> elements nested inside <defs> or other container elements not being hashed for CSP

    • #17994 80f9f1d Thanks @​astro-factory! - Fixes experimental.incrementalBuild restoring pages with stale CSS after a preprocessor partial changes or missing original images referenced by restored pages

    • #17889 8ae6b46 Thanks @​ajfAfg! - Fixes a bug where the dev server stripped the configured base from URLs that only share a prefix with it. With base: '/s', requests to /src/... were rewritten to /rc/... and failed, breaking those pages during development.

    • #17980 cfccafa Thanks @​gameroman! - Improves JSDoc for fonts api

    • #17953 dbbf10e Thanks @​astro-factory! - Fixes CSS HMR for framework components rendered through content entries after ClientRouter navigation

    • #17970 0b4dc3a Thanks @​matthewp! - Improves serialization of transition animation values in generated CSS

    • #17999 30ef3cb Thanks @​astro-factory! - Fixes content collection HMR not updating prerendered pages when an adapter enables a separate prerender environment (e.g. @astrojs/cloudflare with prerenderEnvironment: 'node')

    • #18002 312ab49 Thanks @​shoutoutuoadi325! - Fixes redirect targets being corrupted when a dynamic route parameter value contains $ replacement patterns like $&

    ... (truncated)

    Changelog

    Sourced from astro's changelog.

    7.3.3

    Patch Changes

    • #17651 504333c Thanks @​sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

    • #17942 0bc5715 Thanks @​matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

    • #17700 b2222fc Thanks @​winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

    • #17941 394ff79 Thanks @​matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

    • #17928 3277927 Thanks @​ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.

    • #17928 3277927 Thanks @​ArmandPhilippot! - Fixes a type error in getImage() options that allowed passing both widths and densities at the same time.

    • #17857 2637ed1 Thanks @​Princesseuh! - Improves rendering performance

    • #17943 2fc7ce9 Thanks @​matthewp! - Fixes a WebAssembly error when importing astro:actions in tests that run under @cloudflare/vitest-pool-workers

    • #18018 1b5a234 Thanks @​astro-factory! - Fixes trailing-slash redirect response body pointing to the incoming URL instead of the redirect target. The location header was correct, but the HTML body (<meta http-equiv="refresh">, <title>, and <a> tag) contained the original request path without the trailing-slash correction or query string.

    • #17905 eaf70fa Thanks @​SudoDevStudio! - Fixes custom dev toolbar apps losing their UI after client-side navigation with <ClientRouter />.

    • #18011 558b301 Thanks @​astro-factory! - Fixes prerendered Cloudflare pages rendering as [object Object] when nodejs_compat is enabled in wrangler.toml

    • #17944 ba08e35 Thanks @​matthewp! - Fixes a regression in astro dev where writes outside the module graph (for example, @astrojs/cloudflare's .wrangler/state files) invalidated the middleware on every request, causing repeated SSR reloads. Such writes no longer invalidate the middleware.

    • #17531 ae837db Thanks @​danilloestrela! - Updates svgo to 4.0.2 to resolve a security advisory

    • #17953 dbbf10e Thanks @​astro-factory! - Fixes a one-time page reload shortly after the first load on cold dev-server starts when a project has framework components imported from MDX content entries. MDX files are now included in the dev dependency pre-bundling scan, so their framework dependencies are bundled up front instead of being discovered (and reloaded for) at runtime.

    • #17955 4e8ad9a Thanks @​matthewp! - Improves dev server startup time. The content config and dev server app module graphs now begin compiling during server creation without blocking the server from listening. Request handling waits for the shared setup result when needed, cutting astro dev ready time by roughly a third on projects with a content config.

    • #17960 9838049 Thanks @​Chy-Zaber-Bin-Zahid! - Improves the diagnostics of some Astro errors.

    • #17998 0e5478d Thanks @​astro-factory! - Fixes SVG <style> elements nested inside <defs> or other container elements not being hashed for CSP

    • #17994 80f9f1d Thanks @​astro-factory! - Fixes experimental.incrementalBuild restoring pages with stale CSS after a preprocessor partial changes or missing original images referenced by restored pages

    • #17889 8ae6b46 Thanks @​ajfAfg! - Fixes a bug where the dev server stripped the configured base from URLs that only share a prefix with it. With base: '/s', requests to /src/... were rewritten to /rc/... and failed, breaking those pages during development.

    • #17980 cfccafa Thanks @​gameroman! - Improves JSDoc for fonts api

    • #17953 dbbf10e Thanks @​astro-factory! - Fixes CSS HMR for framework components rendered through content entries after ClientRouter navigation

    • #17970 0b4dc3a Thanks @​matthewp! - Improves serialization of transition animation values in generated CSS

    • #17999 30ef3cb Thanks @​astro-factory! - Fixes content collection HMR not updating prerendered pages when an adapter enables a separate prerender environment (e.g. @astrojs/cloudflare with prerenderEnvironment: 'node')

    ... (truncated)

    Commits
    • 8a3106e [ci] release (#17939)
    • 5efea1b Add a version field to the astro-client-only fixture
    • 80f9f1d Hash compiled CSS output in incremental build to detect Sass partial changes ...
    • bc6572f Revert "Forward user class to Picture's outer element" (#18004) (#18030)
    • 0e5478d Normalize CRLF line endings before computing CSP hashes (#17998)
    • 30ef3cb fix: invalidate prerender environment in invalidateDataStore (#17991) (#17999)
    • 312ab49 Fix redirect targets when a param value contains a $ replacement pattern (#...
    • 1b5a234 Fix trailing-slash redirect body to match the Location header target (#18018)
    • 558b301 Fix prerendered Cloudflare pages rendering as [object Object] with nodejs_com...
    • 4464b3a fix(assets): forward class to picture element in Picture component (#18003) (...
    • Additional commits viewable in compare view

    Updates sharp from 0.34.5 to 0.35.4

    Release notes

    Sourced from sharp's releases.

    v0.35.4

    https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

    v0.35.4-rc.0

    ... (truncated)

    Commits
    • 7f1a0a2 Release v0.35.4
    • f927818 Upgrade to sharp-libvips v1.3.3
    • e802092 Prerelease v0.35.4-rc.0
    • e13eb2f CI: Fix wasm32 build (#4589)
    • a82a0b3 Upgrade to libvips v8.18.6
    • 8044fe4 Bound resize dimensions to coordinate limit
    • 147f859 Docs: changelog entries for #4578 #4584
    • ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
    • 7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
    • ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
    • Additional commits viewable in compare view

    Updates sass from 1.97.3 to 1.104.1

    Release notes

    Sourced from sass's releases.

    Dart Sass 1.104.1

    To install Sass 1.104.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

    • Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

    Command Line Interface

    • Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

    • Sass now sets the modification time of output files to the time compilation started rather than the time it ended. This ensures that, if a source file is modified during compilation, --watch and --update mode will recompile the outputs to include the new source file contents.

    See the full changelog for changes in earlier releases.

    Dart Sass 1.104.0

    To install Sass 1.104.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • Potentially breaking compatibility fix: Colors now convert the special values NaN and negative zero, as well as infinity and negative infinity for polar-hue channels, to 0 as per the CSS spec.

    • The special value negative zero is now serialized as -0 instead of 0 for greater compatibility when using it in CSS calculations.

    See the full changelog for changes in earlier releases.

    Dart Sass 1.103.1

    To install Sass 1.103.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • No user-visible changes.

    See the full changelog for changes in earlier releases.

    Dart Sass 1.103.0

    To install Sass 1.103.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    ... (truncated)

    Changelog

    Sourced from sass's changelog.

    1.104.1

    • Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

    • Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

    Command Line Interface

    • Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

    • Sass now sets the modification time of output files to the time compilation started rather than the time it ended. This ensures that, if a source file is modified during compilation, --watch and --update mode will recompile the outputs to include the new source file contents.

    1.104.0

    • Potentially breaking compatibility fix: Colors now convert the special values NaN and negative zero, as well as infinity and negative infinity for polar-hue channels, to 0 as per the CSS spec.

    • The special value negative zero is now serialized as -0 instead of 0 for greater compatibility when using it in CSS calculations.

    1.103.1

    • No user-visible changes.

    1.103.0

    • Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

    1.102.0

    • Use the 2.4 gamma transfer function for rec2020, as specified by the latest draft of CSS Color 4.

    1.101.7

    • No user-visible changes.

    ... (truncated)

    Commits
    • da84fb5 Fix --watch not recompiling sources modified during a compilation (#2850)
    • 8a287a7 Merge pull request #2859 from sass/fix-auto-merge
    • 6033b46 Add explicit versions to .github/util actions
    • cc71d43 Only auto-merge dependabot PRs once the tests pass
    • 49ddc4f Revert "Bump dart-lang/setup-dart in /.github/util/initialize"
    • 71a127d Avoid duplicating loud comments that appear before @use (#2854)
    • f19baab Merge pull request #2857 from sass/dependabot/github_actions/dot-github/util/...
    • f5263e2 Bump dart-lang/setup-dart in /.github/util/initialize
    • 3018c0d Merge pull request #2856 from sass/dependabot/github_actions/dart-lang/setup-...
    • 5d74adb Bump dart-lang/setup-dart from 1.8.0 to 1.8.1
    • Additional commits viewable in compare view

    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 15, 2026
    @dependabot
    dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/dev-dependencies-88c9a92396 branch from a9bada3 to ef604a0 Compare July 27, 2026 10:13
    …4 updates
    
    Bumps the dev-dependencies group with 4 updates in the /docs directory: [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight), [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro), [sharp](https://github.com/lovell/sharp) and [sass](https://github.com/sass/dart-sass).
    
    
    Updates `@astrojs/starlight` from 0.37.7 to 0.42.2
    - [Release notes](https://github.com/withastro/starlight/releases)
    - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
    - [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.2/packages/starlight)
    
    Updates `astro` from 5.18.1 to 7.3.3
    - [Release notes](https://github.com/withastro/astro/releases)
    - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
    - [Commits](https://github.com/withastro/astro/commits/astro@7.3.3/packages/astro)
    
    Updates `sharp` from 0.34.5 to 0.35.4
    - [Release notes](https://github.com/lovell/sharp/releases)
    - [Commits](lovell/sharp@v0.34.5...v0.35.4)
    
    Updates `sass` from 1.97.3 to 1.104.1
    - [Release notes](https://github.com/sass/dart-sass/releases)
    - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
    - [Commits](sass/dart-sass@1.97.3...1.104.1)
    
    ---
    updated-dependencies:
    - dependency-name: "@astrojs/starlight"
      dependency-version: 0.40.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: dev-dependencies
    - dependency-name: astro
      dependency-version: 6.4.6
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: dev-dependencies
    - dependency-name: sass
      dependency-version: 1.101.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: dev-dependencies
    - dependency-name: sharp
      dependency-version: 0.35.1
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: dev-dependencies
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/dev-dependencies-88c9a92396 branch from ef604a0 to 7b6b068 Compare September 21, 2026 10:13
    @github-actions

    Copy link
    Copy Markdown

    Code Coverage

    Package Line Rate Branch Rate Complexity Health
    StageZero 100% 100% 5 ✔
    StageZero.Selenium 58% 34% 103 ➖
    StageZero.Playwright 81% 60% 72 ✔
    Summary 67% (476 / 709) 42% (33 / 78) 180 ➖

    This branch has not been deployed

    No deployments
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    0 participants