Skip to content

deps: bump the npm-deps group across 1 directory with 16 updates - #439

Merged
EricAndrechek merged 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-deps-2768a973de
Aug 10, 2026
Merged

EricAndrechek merged 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-deps-2768a973de

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-deps group with 16 updates in the / directory:

Package From To
markdownlint-cli2 0.22.1 0.23.2
@vitest/coverage-v8 4.1.8 4.1.10
@astrojs/check 0.9.9 0.9.10
@fontsource-variable/inter 5.2.8 5.3.0
@fontsource-variable/jetbrains-mono 5.2.8 5.3.0
@tailwindcss/vite 4.3.0 4.3.3
astro-vtbot 2.1.12 3.0.1
katex 0.17.0 0.18.1
sharp 0.34.5 0.35.3
starlight-image-zoom 0.14.2 0.15.0
starlight-links-validator 0.24.0 0.25.2
tailwindcss 4.3.0 4.3.3
typescript 6.0.3 7.0.2
playwright 1.60.0 1.62.1
@types/node 24.12.4 26.1.2
vitest 4.1.8 4.1.10

Updates markdownlint-cli2 from 0.22.1 to 0.23.2

Changelog

Sourced from markdownlint-cli2's changelog.

0.23.2

  • Update dependencies

0.23.1

  • Show attempted fix counts after fixing
  • Update dependencies (including markdownlint)

0.23.0

  • Add overrides configuration option
  • Improve options/configuration file handling
  • Update dependencies (including markdownlint)
  • Remove support for end-of-life Node 20
Commits
  • b82a6c8 Update to version 0.23.2.
  • e4e659d Add a stub for process.nextTick (using queueMicrotask) now that globby (indir...
  • 99760af Bump globby from 16.2.1 to 16.2.2
  • 3070236 Address new ESLint warnings from previous commit.
  • 6e3cc93 Bump eslint-plugin-unicorn from 71.1.0 to 72.0.0
  • 4ba8177 Add eslint-package-json/all to lint script, address new issues.
  • 9cb99b2 Refactor eslint.config.mjs to use defineConfig, change eslint-plugin-n from "...
  • 37fb0ec Address new ESLint warnings from previous commit.
  • f7fea61 Bump eslint-node-test from 0.2.0 to 0.3.0
  • 85bb5e7 Bump js-yaml from 5.2.1 to 5.2.2
  • Additional commits viewable in compare view

Updates @vitest/coverage-v8 from 4.1.8 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub
Commits

Updates @astrojs/check from 0.9.9 to 0.9.10

Release notes

Sourced from @​astrojs/check's releases.

@​astrojs/check@​0.9.10

Patch Changes

Changelog

Sourced from @​astrojs/check's changelog.

0.9.10

Patch Changes

Commits

Updates @fontsource-variable/inter from 5.2.8 to 5.3.0

Commits

Updates @fontsource-variable/jetbrains-mono from 5.2.8 to 5.3.0

Commits

Updates @tailwindcss/vite from 4.3.0 to 4.3.3

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.3

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

v4.3.2

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

v4.3.1

Added

  • Add --silent option to suppress output in @tailwindcss/cli (#20100)

Fixed

  • Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#20028)
  • Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)
  • Allow @apply to be used with CSS mixins (#19427)
  • Ensure not-* correctly negates @container queries, including style(…) queries (#20059)
  • Ensure drop-shadow-* color utilities work with custom shadow values containing calc(…) (#20080)
  • Fix 'Sourcemap is likely to be incorrect' warnings when using @tailwindcss/vite (#20103)
  • Ensure @tailwindcss/webpack can be installed in Rspack projects without requiring webpack as a peer dependency (#20027)

... (truncated)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.3] - 2026-07-16

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

[4.3.2] - 2026-06-26

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

[4.3.1] - 2026-06-12

Added

  • Add --silent option to suppress output in @tailwindcss/cli (#20100)

Fixed

  • Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#20028)
  • Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)
  • Allow @apply to be used with CSS mixins (#19427)
  • Ensure not-* correctly negates @container queries, including style(…) queries (#20059)

... (truncated)

Commits

Updates astro-vtbot from 2.1.12 to 3.0.1

Changelog

Sourced from astro-vtbot's changelog.

3.0.1 - 2026-07-30

Patch Changes

  • 19a0839: Updates dependencies, especially now comes with @​vtbag/utensil-drawer@​1.2.17

  • ae7ac18: Additionally exports remarkEndOfMarkdown now also as mdastEndOfMarkdown. For all who prefer that name when switching Starlight from remark to mdast for Sätteri.

    See the StarlightPlugin page for details.

3.0.0 - 2026-06-28

Major Changes

  • 15401f3: Technical release for Astro 7 compatibility.

    Astro 7 removed a bunch of deprecated constants and functions from the astro:transitions and astro:transitions/client endpoints. One of those was exposed by astro-vtbot as the CreateAnimationScope.astro component. This component was removed from astro-vtbot in the current release. It was never officially documented and was rarely, if ever, used. If you were using it, please get in touch on Discord (@​martrapp) or Bluesky (@​martr.app) and we will find a solution.

3.0.0-beta.1 - 2026-06-23

Major Changes

  • 8609017: Technical release to make astro-vtbot compatible with Astro up to version 7.

    Upgrading to version 3.0.0 of astro-vtbot should be safe for all users unless you use the CreateAnimationScope.astro component.

    Removal of CreateAnimationScope.astro is the only breaking change in this release. There is no direct replacement. In the very unlikely case that you used this component, ping me on discord or bluesky and we will find a solution.

    Be aware that Astro 7.0 itself has breaking changes regarding view transitions that result from removal of already deprecated features, including constants for lifecycle event names and helper functions for event type checking. If you use those, replace them with their string event names and use direct type imports.

Commits

Updates katex from 0.17.0 to 0.18.1

Release notes

Sourced from katex's releases.

v0.18.1

0.18.1 (2026-07-19)

Bug Fixes

v0.18.0

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.
Changelog

Sourced from katex's changelog.

0.18.1 (2026-07-19)

Bug Fixes

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.
Commits
  • cdf479f chore(release): 0.18.1 [ci skip]
  • 87a2b30 fix(htmlData): allow escaped commas in \htmlData (#4236)
  • 2318066 chore(deps): bump codecov/codecov-action from 6 to 7 (#4227)
  • 3b5b6a0 chore(deps): bump actions/checkout from 6 to 7 (#4232)
  • 4e9d31a chore(deps): update dependency js-yaml to v4.2.0 [security] (#4244)
  • b7ca8f0 chore(deps): update dependency webpack-dev-server to v5.2.5 [security] (#4242)
  • bf1a59f chore: use pixel diff as fallback for byte-to-byte (#4245)
  • 4d9d0ae chore(release): 0.18.0 [ci skip]
  • 6f5c44f feat: prefix css classes (#4229)
  • 2c6143a refactor: remove direct hasOwnProperty call (#4230)
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

  • Improve code bundler support by resolving path to libvips binary.

  • Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

  • Emit warning about binaries provided by Electron for use on Linux.

  • Add hasAlpha property to output info. #4500

  • TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @​Andarist

  • Bound clahe width and height to avoid signed overflow. #4551 @​metsw24-max

  • Bound trim margin to avoid signed overflow. #4552 @​metsw24-max

  • Reject infinite values when validating numbers. #4553 @​metsw24-max

  • Bound extract region to libvips coordinate limit. #4555 @​metsw24-max

  • Verify background colour values are numbers. #4556 @​metsw24-max

  • Bound create and raw input dimensions to coordinate limit. #4558 @​metsw24-max

  • Tighten recomb and affine matrix verification. #4560 @​chatman-media

  • Verify cache memory limit to avoid overflow. #4561 @​metsw24-max

v0.35.3-rc.2

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits
  • 1018449 Release v0.35.3
  • ba303a7 Prerelease v0.35.3-rc.2
  • 4f94fc5 Upgrade to sharp-libvips v1.3.2
  • c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
  • 9a8d002 Docs: Add changelog entry and note about transferable #4520
  • 8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
  • e000d0b Prerelease v0.35.3-rc.1
  • 9554ca9 Prerelease v0.35.3-rc.0
  • 6a29fd5 Emit warning about native binaries on Linux Electron
  • 540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
  • Additional commits viewable in compare view

Updates starlight-image-zoom from 0.14.2 to 0.15.0

Release notes

Sourced from starlight-image-zoom's releases.

starlight-image-zoom@0.15.0

Minor Changes

Changelog

Sourced from starlight-image-zoom's changelog.

0.15.0

Minor Changes

Commits

Updates starlight-links-validator from 0.24.0 to 0.25.2

Release notes

Sourced from starlight-links-validator's releases.

starlight-links-validator@0.25.2

Patch Changes

  • #171 19b97a0 Thanks @​HiDeoo! - Fixes link validation issue for frontmatter-only pages when using Sätteri.

starlight-links-validator@0.25.1

Patch Changes

starlight-links-validator@0.25.0

Minor Changes

  • #167 5019546 Thanks @​HiDeoo! - Adds support for Astro v7, drops support for Astro v6.

    ⚠️ BREAKING CHANGE: The minimum supported version of Starlight is now 0.41.0.

    Please follow the upgrade guide to update your project.

  • #167 5019546 Thanks @​HiDeoo! - Adds support for the Sätteri Markdown processor.

starlight-links-validator@0.24.1

Patch Changes

Changelog

Sourced from starlight-links-validator's changelog.

0.25.2

Patch Changes

  • #171 19b97a0 Thanks @​HiDeoo! - Fixes link validation issue for frontmatter-only pages when using Sätteri.

0.25.1

Patch Changes

0.25.0

Minor Changes

  • #167 5019546 Thanks @​HiDeoo! - Adds support for Astro v7, drops support for Astro v6.

    ⚠️ BREAKING CHANGE: The minimum supported version of Starlight is now 0.41.0.

    Please follow the upgrade guide to update your project.

  • #167 5019546 Thanks @​HiDeoo! - Adds support for the Sätteri Markdown processor.

0.24.1

Patch Changes

Commits

Updates tailwindcss from 4.3.0 to 4.3.3

Release notes

Sourced from tailwindcss's releases.

v4.3.3

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

v4.3.2

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

v4.3.1

Added

  • Add --silent option to suppress output in @tailwindcss/cli (#20100)

Fixed

  • Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#20028)
  • Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)
  • Allow @apply to be used with CSS mixins (#19427)
  • Ensure not-* correctly negates @container queries, including style(…) queries (#20059)
  • Ensure drop-shadow-* color utilities work with custom shadow values containing calc(…) (#20080)
  • Fix 'Sourcemap is likely to be incorrect' warnings when using @tailwindcss/vite (#20103)
  • Ensure @tailwindcss/webpack can be installed in Rspack projects without requiring webpack as a peer dependency (#20027)

... (truncated)

Changelog

Sourced from tailwindcss's changelog.

[4.3.3] - 2026-07-16

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (

Bumps the npm-deps group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) | `0.22.1` | `0.23.2` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.8` | `4.1.10` |
| [@astrojs/check](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check) | `0.9.9` | `0.9.10` |
| [@fontsource-variable/inter](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/inter) | `5.2.8` | `5.3.0` |
| [@fontsource-variable/jetbrains-mono](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/jetbrains-mono) | `5.2.8` | `5.3.0` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.0` | `4.3.3` |
| [astro-vtbot](https://github.com/martrapp/astro-vtbot) | `2.1.12` | `3.0.1` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.17.0` | `0.18.1` |
| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.3` |
| [starlight-image-zoom](https://github.com/HiDeoo/starlight-image-zoom/tree/HEAD/packages/starlight-image-zoom) | `0.14.2` | `0.15.0` |
| [starlight-links-validator](https://github.com/HiDeoo/starlight-links-validator/tree/HEAD/packages/starlight-links-validator) | `0.24.0` | `0.25.2` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.0` | `4.3.3` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.62.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.12.4` | `26.1.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.10` |



Updates `markdownlint-cli2` from 0.22.1 to 0.23.2
- [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint-cli2@v0.22.1...v0.23.2)

Updates `@vitest/coverage-v8` from 4.1.8 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8)

Updates `@astrojs/check` from 0.9.9 to 0.9.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/astro-check/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/check@0.9.10/packages/language-tools/astro-check)

Updates `@fontsource-variable/inter` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/inter)

Updates `@fontsource-variable/jetbrains-mono` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/jetbrains-mono)

Updates `@tailwindcss/vite` from 4.3.0 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite)

Updates `astro-vtbot` from 2.1.12 to 3.0.1
- [Changelog](https://github.com/martrapp/astro-vtbot/blob/main/CHANGELOG.md)
- [Commits](https://github.com/martrapp/astro-vtbot/commits)

Updates `katex` from 0.17.0 to 0.18.1
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.17.0...v0.18.1)

Updates `sharp` from 0.34.5 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.3)

Updates `starlight-image-zoom` from 0.14.2 to 0.15.0
- [Release notes](https://github.com/HiDeoo/starlight-image-zoom/releases)
- [Changelog](https://github.com/HiDeoo/starlight-image-zoom/blob/main/packages/starlight-image-zoom/CHANGELOG.md)
- [Commits](https://github.com/HiDeoo/starlight-image-zoom/commits/starlight-image-zoom@0.15.0/packages/starlight-image-zoom)

Updates `starlight-links-validator` from 0.24.0 to 0.25.2
- [Release notes](https://github.com/HiDeoo/starlight-links-validator/releases)
- [Changelog](https://github.com/HiDeoo/starlight-links-validator/blob/main/packages/starlight-links-validator/CHANGELOG.md)
- [Commits](https://github.com/HiDeoo/starlight-links-validator/commits/starlight-links-validator@0.25.2/packages/starlight-links-validator)

Updates `tailwindcss` from 4.3.0 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `playwright` from 1.60.0 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.62.1)

Updates `@types/node` from 24.12.4 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `vitest` from 4.1.8 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: markdownlint-cli2
  dependency-version: 0.23.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@astrojs/check"
  dependency-version: 0.9.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@fontsource-variable/inter"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@fontsource-variable/jetbrains-mono"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: astro-vtbot
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: katex
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: sharp
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: starlight-image-zoom
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: starlight-links-validator
  dependency-version: 0.25.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: playwright
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
@dependabot
dependabot Bot requested review from a team and EricAndrechek August 10, 2026 16:16
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
@github-actions github-actions Bot added documentation Improvements or additions to documentation area/sdk TypeScript SDK (clients/ts/) area/docs Documentation, site/, README labels Aug 10, 2026
@EricAndrechek

Copy link
Copy Markdown
Member

Every job on this PR failed for the same reason — make pnpm-install (Makefile:627) exits 1, which takes Lint, Unit tests, E2E tests, Docs build and Coverage down with it. There are two independent breaks in the group. Fix (verified locally, not yet pushed): hold the three packages responsible, keep the other 13 updates.

1. typescript ^6.0.3 → ^7.0.2

The catalog bump in pnpm-workspace.yaml is workspace-wide, so it hits the SDK build:

TypeError: Cannot read properties of undefined (reading 'useCaseSensitiveFileNames')
  at node_modules/.pnpm/rollup-plugin-dts@6.1.1_rollup@4.53.2_typescript@5.7.3/...
  at tsup/dist/rollup.js:4857:37

tsup@8.5.1 (latest) bundles rollup-plugin-dts@6.1.1, whose peer range predates TS 7; pnpm resolves it a separate typescript@5.7.3 while tsup itself gets 7.0.2, and the two disagree about the compiler-host shape. rollup-plugin-dts@6.5.1 does support ^7, but an overrides entry doesn't take — tsup pins it internally.

Independently, @astrojs/check@0.9.10 peer-caps typescript at ^5.0.0 || ^6.0.0, so the docs type-check won't accept TS 7 either.

Held at ^6.0.3. TypeScript 7 is the native port and a real migration — it deserves its own PR once tsup ships a rollup-plugin-dts that handles it, not a drive-by in a security batch.

2. starlight-image-zoom 0.15.0 + starlight-links-validator 0.25.2

Both require @astrojs/starlight >= 0.41, and 0.25.2 additionally requires astro >= 7.0.2. Dependabot bumped them anyway against the pinned Starlight 0.38.5, and make build-docs fails:

[AstroUserError] The configured 'markdown.processor' is not supported by the starlight-image-zoom plugin.

Held at ^0.14.1 / ^0.24.0. They move with the Astro 7 upgrade in #416, which carries Starlight 0.38 → 0.41.

What still lands

All 13 remaining updates, including the security-relevant ones: sharp 0.34.5 → 0.35.3 (GHSA-f88m-g3jw-g9cj, also closes #420) plus the transitive lock refresh, katex 0.18.1, astro-vtbot 3.0.1, tailwindcss / @tailwindcss/vite 4.3.3, playwright 1.62.1, markdownlint-cli2 0.23.2, @astrojs/check 0.9.10, @types/node 26.1.2, vitest / @vitest/coverage-v8 4.1.10, both @fontsource-variable fonts.

Verification

pnpm install --frozen-lockfile clean, make build-docs clean (21 pages, links valid), make typecheck-ts clean, SDK vitest 125 passed / 1 skipped.

Note

This PR was also blocked by the govulncheck failure that grounded every branch in the repo — three Go advisories on main (grpc, x/text, klauspost/compress). That's fixed in #438, which needs to land first.

EricAndrechek and others added 2 commits August 10, 2026 14:06
Three of the group's 16 updates break the build; the other 13 are fine.

typescript ^7.0.2 (catalog-wide) breaks the SDK dts build — tsup 8.5.1
bundles rollup-plugin-dts 6.1.1, which predates TS 7 and dies with
"Cannot read properties of undefined (reading 'useCaseSensitiveFileNames')".
@astrojs/check 0.9.10 also peer-caps typescript at ^5 || ^6. Held at ^6.0.3
until tsup ships a rollup-plugin-dts that handles TS 7; the native-port
migration deserves its own PR, not a drive-by in a security batch.

starlight-image-zoom 0.15.0 and starlight-links-validator 0.25.2 both
require @astrojs/starlight >= 0.41, and 0.25.2 additionally requires
astro >= 7.0.2. Against the pinned Starlight 0.38.5 the docs build fails
with "The configured 'markdown.processor' is not supported". Held until
the astro 7 upgrade (#416) carries Starlight 0.38 -> 0.41.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QFfYUaPp3Pv3gLjniiHCpm
@github-actions

Copy link
Copy Markdown

📚 Docs preview is live → https://0c4e001c-wavehouse-docs.wave-rf.workers.dev

  • Commit — 06d6ce9: deps: hold typescript 6.x and the astro-7-only starlight plugins
  • Author — @EricAndrechek, Claude Opus 5 (1M context)
  • Committed — 2026-08-10 15:06 (UTC-04:00)
  • Deployed — 2026-08-10 15:10 EDT

@github-code-quality

Copy link
Copy Markdown
Contributor

Code Coverage Overview

Languages: Go

Go

The overall coverage in commit 06d6ce9 in the dependabot/npm_and_y... branch remains at 90%, unchanged from commit 4f599bd in the main branch.

@EricAndrechek
EricAndrechek merged commit db8f390 into main Aug 10, 2026
20 checks passed
@EricAndrechek
EricAndrechek deleted the dependabot/npm_and_yarn/npm-deps-2768a973de branch August 10, 2026 19:19
@github-project-automation github-project-automation Bot moved this from Backlog to Done in WaveHouse Task Board Aug 10, 2026
EricAndrechek added a commit that referenced this pull request Aug 10, 2026
Astro 7 can't land alone: @astrojs/starlight 0.38.5 peer-requires
astro ^6.0.0, while starlight 0.41.x requires astro ^7.0.2. Dependabot
can't escape that on its own — it won't bump Starlight while astro is on
6, nor pull astro 7 into the Starlight PR — so both move here.

This also lifts the two holds from #439: starlight-image-zoom 0.15.0 and
starlight-links-validator 0.25.2 both require starlight >= 0.41, which is
now satisfied. No source changes were needed; every other integration
declares a permissive peer range and satisfies astro 7 / starlight 0.41
as-is.

The lockfile is a full rebuild (pnpm clean --lockfile + pnpm install).
Dependabot's generated lockfile contained 35+ entries younger than the
minimumReleaseAge cooldown in pnpm-workspace.yaml (e.g.
@esbuild/openbsd-arm64@0.28.2, published 2 days before the 7-day cutoff),
so `pnpm install` refused it. Rebuilding from a policy-respecting
resolution also collapses the duplicate @types/hast (3.0.4 + 3.0.5) whose
incompatible Root types made `astro check` reject the rehypePlugins array.

Verified: pnpm install --frozen-lockfile, astro check, and make build-docs
clean — 21 pages, all internal links valid, 68 diagram PNGs rendered.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QFfYUaPp3Pv3gLjniiHCpm
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/docs Documentation, site/, README area/sdk TypeScript SDK (clients/ts/) dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation javascript Pull requests that update javascript code

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

1 participant