Skip to content

Bump actions and npm dependencies with multiple updates - #29

Merged
xinshoutw merged 4 commits into
mainfrom
dev
Sep 4, 2026
Merged

xinshoutw merged 4 commits into
mainfrom
dev

Conversation

@xinshoutw

Copy link
Copy Markdown
Collaborator

This pull request updates several dependencies and CI workflow actions to their latest versions, ensuring improved stability, security, and compatibility across the project.

Dependency updates:

  • Updated core dependencies in package.json, including @astrojs/markdown-remark, @astrojs/sitemap, @shikijs/transformers, astro, and mermaid to their latest minor or patch versions for bug fixes and new features.
  • Upgraded the puppeteer-core development dependency to a newer patch version.

CI workflow updates:

  • Updated GitHub Actions in .github/workflows/ci.yml, specifically actions/checkout and actions/setup-node, from version 4 to version 7 to take advantage of the latest improvements and security patches.

dependabot Bot and others added 4 commits September 4, 2026 01:13
Bumps the actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [actions/setup-node](https://github.com/actions/setup-node).


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v7)

Updates `actions/setup-node` from 4 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the npm-minor-and-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) | `7.2.1` | `7.3.0` |
| [@astrojs/sitemap](https://github.com/withastro/astro/tree/HEAD/packages/integrations/sitemap) | `3.7.3` | `3.7.4` |
| [@shikijs/transformers](https://github.com/shikijs/shiki/tree/HEAD/packages/transformers) | `4.3.1` | `4.4.3` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.1` | `7.2.10` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.16.0` | `11.17.2` |
| [puppeteer-core](https://github.com/puppeteer/puppeteer) | `25.3.0` | `25.9.0` |


Updates `@astrojs/markdown-remark` from 7.2.1 to 7.3.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.3.0/packages/markdown/remark)

Updates `@astrojs/sitemap` from 3.7.3 to 3.7.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/sitemap/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/sitemap@3.7.4/packages/integrations/sitemap)

Updates `@shikijs/transformers` from 4.3.1 to 4.4.3
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.4.3/packages/transformers)

Updates `astro` from 7.1.1 to 7.2.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.2.10/packages/astro)

Updates `mermaid` from 11.16.0 to 11.17.2
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.0...mermaid@11.17.2)

Updates `puppeteer-core` from 25.3.0 to 25.9.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-core-v25.3.0...puppeteer-core-v25.9.0)

---
updated-dependencies:
- dependency-name: "@astrojs/markdown-remark"
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@astrojs/sitemap"
  dependency-version: 3.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@shikijs/transformers"
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: astro
  dependency-version: 7.2.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: mermaid
  dependency-version: 11.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: puppeteer-core
  dependency-version: 25.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…s/dev/actions-9b61906d8b

ci(deps): bump the actions group with 2 updates
…dev/npm-minor-and-patch-e06ec55f1d

chore(deps): bump the npm-minor-and-patch group with 6 updates
@xinshoutw xinshoutw self-assigned this Sep 4, 2026
@xinshoutw xinshoutw added the dependencies Pull requests that update a dependency file label Sep 4, 2026
@xinshoutw
xinshoutw merged commit 235275c into main Sep 4, 2026
2 checks passed
@greptile-apps

greptile-apps Bot commented Sep 4, 2026

Copy link
Copy Markdown

Greptile Summary

Updates the Astro application dependencies, Mermaid and syntax-highlighting packages, Puppeteer tooling, and the corresponding npm lockfile. It also upgrades the checkout and Node setup actions used by the clean CI build.

  • Updates Astro and its Markdown and sitemap integrations.
  • Updates Shiki transformers, Mermaid, Puppeteer, and resolved transitive packages.
  • Moves the CI workflow from checkout/setup-node v4 to v7.

Confidence Score: 5/5

The pull request appears safe to merge, with no concrete changed-code failure identified.

The updated action references resolve and remain compatible with the hosted runner, while the dependency graph satisfies the repository’s Node and peer constraints without an established API or rendering regression.

Important Files Changed

Filename Overview
.github/workflows/ci.yml Upgrades checkout and setup-node to published v7 actions whose inputs and runner requirements match the existing workflow.
package.json Raises several compatible minor or patch dependency versions while preserving the Node engine contract.
package-lock.json Regenerates the resolved dependency graph consistently with the manifest updates; no concrete engine, peer, or integration conflict was established.

Reviews (1): Last reviewed commit: "Merge pull request #28 from NTUST-OpenSo..." | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant