Skip to content

Bump the astro group across 1 directory with 5 updates - #147

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/astro-1e63406d53
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/astro-1e63406d53

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the astro group with 5 updates in the / directory:

Package From To
@astrojs/mdx 7.0.5 8.0.1
@astrojs/node 11.1.2 11.1.6
@astrojs/react 6.0.2 6.0.6
@astrojs/sitemap 3.7.3 3.7.4
astro 7.2.2 7.3.3

Updates @astrojs/mdx from 7.0.5 to 8.0.1

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​8.0.1

Patch Changes

  • Updated dependencies [a548223]:
    • @​astrojs/markdown-satteri@​0.4.1

@​astrojs/mdx@​8.0.0

Major Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Moves MDX file processing to the Markdown processors.

    '@​astrojs/mdx' is still required to add MDX support to your project. However, it now delegates the MDX files processing to Markdown processors.

    What should I do?

    If you haven't explicitly installed a Markdown processor, you don't need to do anything.

    Otherwise, ensure that your configured Markdown processor uses the following version:

    • @astrojs/markdown-satteri 0.4.0 or later if you use satteri()
    • @astrojs/markdown-remark 7.3.0 or later if you use unified()

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes .mdx files still using markdown.processor when extendMarkdownConfig is false. They now use a clean default processor instead; pass mdx({ processor }) to choose one explicitly.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a warning when the deprecated remarkPlugins, rehypePlugins, recmaPlugins and remarkRehype options are ignored because your Markdown processor does not run them. They still apply when your processor is unified(), and were previously dropped silently otherwise.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0

@​astrojs/mdx@​7.0.8

Patch Changes

  • #17757 660991c Thanks @​astro-factory! - Fixes build errors showing wrong file location, missing line:col, and misleading hints when a plugin error (e.g. from MDX) is wrapped by Vite's build error

  • #17766 0762a83 Thanks @​HiDeoo! - Fixes Sätteri processor option types to accept all plugin entries supported by Sätteri v0.10.3.

@​astrojs/mdx@​7.0.7

Patch Changes

@​astrojs/mdx@​7.0.6

Patch Changes

... (truncated)

Changelog

Sourced from @​astrojs/mdx's changelog.

8.0.1

Patch Changes

  • Updated dependencies [a548223]:
    • @​astrojs/markdown-satteri@​0.4.1

8.0.0

Major Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Moves MDX file processing to the Markdown processors.

    '@​astrojs/mdx' is still required to add MDX support to your project. However, it now delegates the MDX files processing to Markdown processors.

    What should I do?

    If you haven't explicitly installed a Markdown processor, you don't need to do anything.

    Otherwise, ensure that your configured Markdown processor uses the following version:

    • @astrojs/markdown-satteri 0.4.0 or later if you use satteri()
    • @astrojs/markdown-remark 7.3.0 or later if you use unified()

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes .mdx files still using markdown.processor when extendMarkdownConfig is false. They now use a clean default processor instead; pass mdx({ processor }) to choose one explicitly.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a warning when the deprecated remarkPlugins, rehypePlugins, recmaPlugins and remarkRehype options are ignored because your Markdown processor does not run them. They still apply when your processor is unified(), and were previously dropped silently otherwise.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0

7.0.8

Patch Changes

  • #17757 660991c Thanks @​astro-factory! - Fixes build errors showing wrong file location, missing line:col, and misleading hints when a plugin error (e.g. from MDX) is wrapped by Vite's build error

  • #17766 0762a83 Thanks @​HiDeoo! - Fixes Sätteri processor option types to accept all plugin entries supported by Sätteri v0.10.3.

7.0.7

Patch Changes

... (truncated)

Commits

Updates @astrojs/node from 11.1.2 to 11.1.6

Release notes

Sourced from @​astrojs/node's releases.

@​astrojs/node@​11.1.6

Patch Changes

  • #17971 0037c1a Thanks @​matthewp! - Fixes aborted request bodies causing duplicate unhandled rejection logs in standalone mode when using src/fetch.ts

  • #17964 01395b8 Thanks @​astro-factory! - Fixes trailing-slash redirects truncating query strings that contain a second ? character

@​astrojs/node@​11.1.5

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

@​astrojs/node@​11.1.4

Patch Changes

  • Updated dependencies [05763a0]:
    • @​astrojs/internal-helpers@​0.10.4

@​astrojs/node@​11.1.3

Patch Changes

  • #17636 51723b1 Thanks @​matthewp! - Updates the adapter to wait for the configured log destination through Astro's new app.getLogger() API. This release requires Astro 7.2.1 or later.

  • Updated dependencies [8c193f6]:

    • @​astrojs/internal-helpers@​0.10.3
Changelog

Sourced from @​astrojs/node's changelog.

11.1.6

Patch Changes

  • #17971 0037c1a Thanks @​matthewp! - Fixes aborted request bodies causing duplicate unhandled rejection logs in standalone mode when using src/fetch.ts

  • #17964 01395b8 Thanks @​astro-factory! - Fixes trailing-slash redirects truncating query strings that contain a second ? character

11.1.5

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

11.1.4

Patch Changes

  • Updated dependencies [05763a0]:
    • @​astrojs/internal-helpers@​0.10.4

11.1.3

Patch Changes

  • #17636 51723b1 Thanks @​matthewp! - Updates the adapter to wait for the configured log destination through Astro's new app.getLogger() API. This release requires Astro 7.2.1 or later.

  • Updated dependencies [8c193f6]:

    • @​astrojs/internal-helpers@​0.10.3
Commits

Updates @astrojs/react from 6.0.2 to 6.0.6

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​6.0.6

Patch Changes

  • #17985 7a6e7f7 Thanks @​astro-factory! - Fixes Vue render-function components failing to build when @astrojs/react is also enabled. React's renderer check no longer crashes on non-React object components, and Vue's check now recognizes defineComponent() components that use a setup function returning a render function.

@​astrojs/react@​6.0.5

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

@​astrojs/react@​6.0.4

Patch Changes

  • Updated dependencies [05763a0]:
    • @​astrojs/internal-helpers@​0.10.4

@​astrojs/react@​6.0.3

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
Changelog

Sourced from @​astrojs/react's changelog.

6.0.6

Patch Changes

  • #17985 7a6e7f7 Thanks @​astro-factory! - Fixes Vue render-function components failing to build when @astrojs/react is also enabled. React's renderer check no longer crashes on non-React object components, and Vue's check now recognizes defineComponent() components that use a setup function returning a render function.

6.0.5

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

6.0.4

Patch Changes

  • Updated dependencies [05763a0]:
    • @​astrojs/internal-helpers@​0.10.4

6.0.3

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
Commits

Updates @astrojs/sitemap from 3.7.3 to 3.7.4

Release notes

Sourced from @​astrojs/sitemap's releases.

@​astrojs/sitemap@​3.7.4

Patch Changes

  • #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"
Changelog

Sourced from @​astrojs/sitemap's changelog.

3.7.4

Patch Changes

  • #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"
Commits

Updates astro from 7.2.2 to 7.3.3

Release notes

Sourced from astro's releases.

astro@7.3.3

Patch Changes

  • #17651 504333c Thanks @​sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

  • #17942 0bc5715 Thanks @​matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

  • #17700 b2222fc Thanks @​winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

  • #17941 394ff79 Thanks @​matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

  • #17928 3277927 Thanks @​ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.

  • #17928 3277927 Thanks @​ArmandPhilippot! - Fixes a type error in getImage() options that allowed passing both widths and densities at the same time.

  • #17857 2637ed1 Thanks @​Princesseuh! - Improves rendering performance

  • #17943 2fc7ce9 Thanks @​matthewp! - Fixes a WebAssembly error when importing astro:actions in tests that run under @cloudflare/vitest-pool-workers

  • #18018 1b5a234 Thanks @​astro-factory! - Fixes trailing-slash redirect response body pointing to the incoming URL instead of the redirect target. The location header was correct, but the HTML body (<meta http-equiv="refresh">, <title>, and <a> tag) contained the original request path without the trailing-slash correction or query string.

  • #17905 eaf70fa Thanks @​SudoDevStudio! - Fixes custom dev toolbar apps losing their UI after client-side navigation with <ClientRouter />.

  • #18011 558b301 Thanks @​astro-factory! - Fixes prerendered Cloudflare pages rendering as [object Object] when nodejs_compat is enabled in wrangler.toml

  • #17944 ba08e35 Thanks @​matthewp! - Fixes a regression in astro dev where writes outside the module graph (for example, @astrojs/cloudflare's .wrangler/state files) invalidated the middleware on every request, causing repeated SSR reloads. Such writes no longer invalidate the middleware.

  • #17531 ae837db Thanks @​danilloestrela! - Updates svgo to 4.0.2 to resolve a security advisory

  • #17953 dbbf10e Thanks @​astro-factory! - Fixes a one-time page reload shortly after the first load on cold dev-server starts when a project has framework components imported from MDX content entries. MDX files are now included in the dev dependency pre-bundling scan, so their framework dependencies are bundled up front instead of being discovered (and reloaded for) at runtime.

  • #17955 4e8ad9a Thanks @​matthewp! - Improves dev server startup time. The content config and dev server app module graphs now begin compiling during server creation without blocking the server from listening. Request handling waits for the shared setup result when needed, cutting astro dev ready time by roughly a third on projects with a content config.

  • #17960 9838049 Thanks @​Chy-Zaber-Bin-Zahid! - Improves the diagnostics of some Astro errors.

  • #17998 0e5478d Thanks @​astro-factory! - Fixes SVG <style> elements nested inside <defs> or other container elements not being hashed for CSP

  • #17994 80f9f1d Thanks @​astro-factory! - Fixes experimental.incrementalBuild restoring pages with stale CSS after a preprocessor partial changes or missing original images referenced by restored pages

  • #17889 8ae6b46 Thanks @​ajfAfg! - Fixes a bug where the dev server stripped the configured base from URLs that only share a prefix with it. With base: '/s', requests to /src/... were rewritten to /rc/... and failed, breaking those pages during development.

  • #17980 cfccafa Thanks @​gameroman! - Improves JSDoc for fonts api

  • #17953 dbbf10e Thanks @​astro-factory! - Fixes CSS HMR for framework components rendered through content entries after ClientRouter navigation

  • #17970 0b4dc3a Thanks @​matthewp! - Improves serialization of transition animation values in generated CSS

  • #17999 30ef3cb Thanks @​astro-factory! - Fixes content collection HMR not updating prerendered pages when an adapter enables a separate prerender environment (e.g. @astrojs/cloudflare with prerenderEnvironment: 'node')

  • #18002 312ab49 Thanks @​shoutoutuoadi325! - Fixes redirect targets being corrupted when a dynamic route parameter value contains $ replacement patterns like $&

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.3

Patch Changes

  • #17651 504333c Thanks @​sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

  • #17942 0bc5715 Thanks @​matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

  • #17700 b2222fc Thanks @​winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

  • #17941 394ff79 Thanks @​matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

  • #17928 3277927 Thanks @​ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.

  • #17928 3277927 Thanks @​ArmandPhilippot! - Fixes a type error in getImage() options that allowed passing both widths and densities at the same time.

  • #17857 2637ed1 Thanks @​Princesseuh! - Improves rendering performance

  • #17943 2fc7ce9 Thanks @​matthewp! - Fixes a WebAssembly error when importing astro:actions in tests that run under @cloudflare/vitest-pool-workers

  • #18018 1b5a234 Thanks @​astro-factory! - Fixes trailing-slash redirect response body pointing to the incoming URL instead of the redirect target. The location header was correct, but the HTML body (<meta http-equiv="refresh">, <title>, and <a> tag) contained the original request path without the trailing-slash correction or query string.

  • #17905 eaf70fa Thanks @​SudoDevStudio! - Fixes custom dev toolbar apps losing their UI after client-side navigation with <ClientRouter />.

  • #18011 558b301 Thanks @​astro-factory! - Fixes prerendered Cloudflare pages rendering as [object Object] when nodejs_compat is enabled in wrangler.toml

  • #17944 ba08e35 Thanks @​matthewp! - Fixes a regression in astro dev where writes outside the module graph (for example, @astrojs/cloudflare's .wrangler/state files) invalidated the middleware on every request, causing repeated SSR reloads. Such writes no longer invalidate the middleware.

  • #17531 ae837db Thanks @​danilloestrela! - Updates svgo to 4.0.2 to resolve a security advisory

  • #17953 dbbf10e Thanks @​astro-factory! - Fixes a one-time page reload shortly after the first load on cold dev-server starts when a project has framework components imported from MDX content entries. MDX files are now included in the dev dependency pre-bundling scan, so their framework dependencies are bundled up front instead of being discovered (and reloaded for) at runtime.

  • #17955 4e8ad9a Thanks @​matthewp! - Improves dev server startup time. The content config and dev server app module graphs now begin compiling during server creation without blocking the server from listening. Request handling waits for the shared setup result when needed, cutting astro dev ready time by roughly a third on projects with a content config.

  • #17960 9838049 Thanks @​Chy-Zaber-Bin-Zahid! - Improves the diagnostics of some Astro errors.

  • #17998 0e5478d Thanks @​astro-factory! - Fixes SVG <style> elements nested inside <defs> or other container elements not being hashed for CSP

  • #17994 80f9f1d Thanks @​astro-factory! - Fixes experimental.incrementalBuild restoring pages with stale CSS after a preprocessor partial changes or missing original images referenced by restored pages

  • #17889 8ae6b46 Thanks @​ajfAfg! - Fixes a bug where the dev server stripped the configured base from URLs that only share a prefix with it. With base: '/s', requests to /src/... were rewritten to /rc/... and failed, breaking those pages during development.

  • #17980 cfccafa Thanks @​gameroman! - Improves JSDoc for fonts api

  • #17953 dbbf10e Thanks @​astro-factory! - Fixes CSS HMR for framework components rendered through content entries after ClientRouter navigation

  • #17970 0b4dc3a Thanks @​matthewp! - Improves serialization of transition animation values in generated CSS

  • #17999 30ef3cb Thanks @​astro-factory! - Fixes content collection HMR not updating prerendered pages when an adapter enables a separate prerender environment (e.g. @astrojs/cloudflare with prerenderEnvironment: 'node')

... (truncated)

Commits
  • 8a3106e [ci] release (#17939)
  • 5efea1b Add a version field to the astro-client-only fixture
  • 80f9f1d Hash compiled CSS output in incremental build to detect Sass partial changes ...
  • bc6572f Revert "Forward user class to Picture's outer element" (#18004) (#18030)
  • 0e5478d Normalize CRLF line endings before computing CSP hashes (#17998)
  • 30ef3cb fix: invalidate prerender environment in invalidateDataStore (#17991) (#17999)
  • 312ab49 Fix redirect targets when a param value contains a $ replacement pattern (#...
  • 1b5a234 Fix trailing-slash redirect body to match the Location header target (#18018)
  • 558b301 Fix prerendered Cloudflare pages rendering as [object Object] with nodejs_com...
  • 4464b3a fix(assets): forward class to picture element in Picture component (#18003) (...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026
Bumps the astro group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `7.0.5` | `8.0.1` |
| [@astrojs/node](https://github.com/withastro/astro/tree/HEAD/packages/integrations/node) | `11.1.2` | `11.1.6` |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `6.0.2` | `6.0.6` |
| [@astrojs/sitemap](https://github.com/withastro/astro/tree/HEAD/packages/integrations/sitemap) | `3.7.3` | `3.7.4` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.2` | `7.3.3` |



Updates `@astrojs/mdx` from 7.0.5 to 8.0.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.0.1/packages/integrations/mdx)

Updates `@astrojs/node` from 11.1.2 to 11.1.6
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/node/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/node@11.1.6/packages/integrations/node)

Updates `@astrojs/react` from 6.0.2 to 6.0.6
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/react@6.0.6/packages/integrations/react)

Updates `@astrojs/sitemap` from 3.7.3 to 3.7.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/sitemap/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/sitemap@3.7.4/packages/integrations/sitemap)

Updates `astro` from 7.2.2 to 7.3.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.3/packages/astro)

---
updated-dependencies:
- dependency-name: "@astrojs/mdx"
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: astro
- dependency-name: "@astrojs/node"
  dependency-version: 11.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: astro
- dependency-name: "@astrojs/react"
  dependency-version: 6.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: astro
- dependency-name: "@astrojs/sitemap"
  dependency-version: 3.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: astro
- dependency-name: astro
  dependency-version: 7.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: astro
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the astro group with 5 updates Bump the astro group across 1 directory with 5 updates Oct 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bun/astro-1e63406d53 branch from e2b1b5d to 37d1d2f Compare October 1, 2026 09:04

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants