Skip to content

build: bump the dependencies group with 12 updates - #368

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-b9810837c1
Open

build: bump the dependencies group with 12 updates#368
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-b9810837c1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 12 updates:

Package From To
@astrojs/markdown-satteri 0.3.5 0.3.6
@astrojs/mdx 7.0.5 7.0.6
@astrojs/preact 6.0.2 6.0.3
@astrojs/ts-plugin 1.10.10 1.10.11
@lucide/astro 1.31.0 1.32.0
@posthog/types 1.404.1 1.405.0
@types/markdown-it 14.1.2 14.2.0
lucide-react 1.31.0 1.32.0
posthog-js 1.417.2 1.418.0
remeda 2.41.0 2.42.0
@vitest/coverage-v8 4.1.10 4.1.11
astro 7.2.2 7.2.3

Updates @astrojs/markdown-satteri from 0.3.5 to 0.3.6

Release notes

Sourced from @​astrojs/markdown-satteri's releases.

@​astrojs/markdown-satteri@​0.3.6

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
Changelog

Sourced from @​astrojs/markdown-satteri's changelog.

0.3.6

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
Commits

Updates @astrojs/mdx from 7.0.5 to 7.0.6

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​7.0.6

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
    • @​astrojs/markdown-remark@​7.2.3
Changelog

Sourced from @​astrojs/mdx's changelog.

7.0.6

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
    • @​astrojs/markdown-remark@​7.2.3
Commits

Updates @astrojs/preact from 6.0.2 to 6.0.3

Release notes

Sourced from @​astrojs/preact's releases.

@​astrojs/preact@​6.0.3

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
Changelog

Sourced from @​astrojs/preact's changelog.

6.0.3

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3
Commits

Updates @astrojs/ts-plugin from 1.10.10 to 1.10.11

Release notes

Sourced from @​astrojs/ts-plugin's releases.

@​astrojs/ts-plugin@​1.10.11

Patch Changes

  • #17668 bef9db5 Thanks @​lazerg! - Fixes Astro's ambient types leaking into unrelated TypeScript projects. In a monorepo with hoisted node_modules, the plugin found the shared astro install from any project and injected env.d.ts and astro-jsx.d.ts into it, which pulled @types/node into projects that never asked for it. The plugin now only injects those types when the project actually depends on astro or has an astro.config.* file.
Changelog

Sourced from @​astrojs/ts-plugin's changelog.

1.10.11

Patch Changes

  • #17668 bef9db5 Thanks @​lazerg! - Fixes Astro's ambient types leaking into unrelated TypeScript projects. In a monorepo with hoisted node_modules, the plugin found the shared astro install from any project and injected env.d.ts and astro-jsx.d.ts into it, which pulled @types/node into projects that never asked for it. The plugin now only injects those types when the project actually depends on astro or has an astro.config.* file.
Commits

Updates @lucide/astro from 1.31.0 to 1.32.0

Release notes

Sourced from @​lucide/astro's releases.

Version 1.32.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.31.0...1.32.0

Commits

Updates @posthog/types from 1.404.1 to 1.405.0

Release notes

Sourced from @​posthog/types's releases.

@​posthog/types@​1.405.0

1.405.0

Minor Changes

  • #4496 1ade666 Thanks @​marandaneto! - Add cookieWinsOnConflict to keep shared cross-subdomain identity and session state ahead of stale per-origin localStorage, deprecate __preview_cookie_wins_on_conflict, and enable the new behavior for the 2026-08-29 defaults. (2026-08-18)
Changelog

Sourced from @​posthog/types's changelog.

1.405.0

Minor Changes

  • #4496 1ade666 Thanks @​marandaneto! - Add cookieWinsOnConflict to keep shared cross-subdomain identity and session state ahead of stale per-origin localStorage, deprecate __preview_cookie_wins_on_conflict, and enable the new behavior for the 2026-08-29 defaults. (2026-08-18)
Commits
  • 09d10b0 chore: update versions and lockfile [version bump]
  • 1ade666 feat(browser): keep cross-subdomain cookie state in sync (#4496)
  • See full diff in compare view

Updates @types/markdown-it from 14.1.2 to 14.2.0

Commits

Updates lucide-react from 1.31.0 to 1.32.0

Release notes

Sourced from lucide-react's releases.

Version 1.32.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.31.0...1.32.0

Commits

Updates posthog-js from 1.417.2 to 1.418.0

Release notes

Sourced from posthog-js's releases.

posthog-js@1.418.0

1.418.0

Minor Changes

  • #4496 1ade666 Thanks @​marandaneto! - Add cookieWinsOnConflict to keep shared cross-subdomain identity and session state ahead of stale per-origin localStorage, deprecate __preview_cookie_wins_on_conflict, and enable the new behavior for the 2026-08-29 defaults. (2026-08-18)

Patch Changes

  • Updated dependencies [1ade666]:
    • @​posthog/types@​1.405.0

posthog-js@1.417.4

1.417.4

Patch Changes

  • #4509 8d74821 Thanks @​ksvat! - Take a full snapshot when session recording wakes from idle if DOM mutations were dropped while idle, so replay no longer shows duplicated or overlapping DOM after an idle period. (2026-08-17)

posthog-js@1.417.3

1.417.3

Patch Changes

  • #4540 ce8fc13 Thanks @​marandaneto! - Restore exception autocapture compatibility for posthog-js clients through version 1.141.0. (2026-08-17)
Commits
  • 09d10b0 chore: update versions and lockfile [version bump]
  • 0fe77e8 fix(mcp): avoid conversation ID prompt injection (#4542)
  • 51a4155 chore(llma): bump the ai-providers group with 3 updates (#4538)
  • 7748cf9 chore(deps): bump the github-actions group with 3 updates (#4539)
  • 1ade666 feat(browser): keep cross-subdomain cookie state in sync (#4496)
  • 964c53c chore: update versions and lockfile [version bump]
  • 8d74821 fix(replay): take a full snapshot on idle wake when mutations were dropped (#...
  • b2a445a fix(nuxt): support Nuxt 5 and Nitro 3 plugin boundaries (#4445)
  • 1a9ae60 chore: update versions and lockfile [version bump]
  • ce8fc13 fix(browser): support legacy exception autocapture loaders (#4540)
  • See full diff in compare view

Updates remeda from 2.41.0 to 2.42.0

Release notes

Sourced from remeda's releases.

v2.42.0

2.42.0 (2026-08-18)

Bug Fixes

  • zip,zipWith: handle data-last with empty param (#1420) (8701357)
Commits
  • 8701357 fix(zip,zipWith): handle data-last with empty param (#1420)
  • 6d956a9 docs(funnel,debounce): Improve reference implementation documentation (#1419)
  • See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.10 to 4.1.11

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates astro from 7.2.2 to 7.2.3

Release notes

Sourced from astro's releases.

astro@7.2.3

Patch Changes

  • #17724 97140b2 Thanks @​ematipico! - Fixes an issue where Astro could run out of memory when experimental.collectionStorage is set to chunked and there are multiple concurrent updates to the same collection.

  • #17636 51723b1 Thanks @​matthewp! - Fixes the dev server sometimes matching against stale routes after pages were added, removed, or renamed, requiring a dev server restart to pick up the change

  • #17636 51723b1 Thanks @​matthewp! - Fixes the composable request helpers (astro/fetch) throwing an error when used on a request that had been rewritten with Astro.rewrite() or next()

  • #17636 51723b1 Thanks @​matthewp! - Refactors Astro's internal server-side request handling. This is an internal change: all documented public APIs, including App and NodeApp, keep their existing signatures and behavior.

    The undocumented internal app.pipeline property and the AppPipeline export from astro/app have been removed. Adapters that used app.pipeline.getLogger() to wait for the configured log destination can call the new app.getLogger() instead.

    As a result of this refactor, new FetchState(request) from astro/fetch now works anywhere inside a built Astro server — including custom src/fetch.ts entrypoints — without the request needing to first pass through app.render(). Previously this threw an error, breaking patterns like the Cloudflare adapter's advanced custom-worker setup.

  • #17723 c3b9aed Thanks @​florian-lefebvre! - Fixes a link in font providers JSDoc annotations

  • #17699 e28d227 Thanks @​ArmandPhilippot! - Fixes several documentation issues related to the JSDoc for configuration options.

    • When hovering over the server and fonts options, the JSDoc for the nested options was displayed instead of the JSDoc for the top-level property.
    • Two i18n configuration options were being used incorrectly in the examples.
    • The indentation of some code blocks was broken on hover.

  • #17572 2066f39 Thanks @​matthewp! - Fixes a crash when a request arrives with a malformed port in the Host header (for example example.com:65536 or example.com:8080:8080). Such a host made the constructed request URL invalid, and the fallback that was meant to recover reused the same invalid host and threw again. The request URL now degrades to a host the server controls when the incoming host cannot be parsed, so the request is handled instead of erroring.

  • #17685 9f15609 Thanks @​astrobot-houston! - Fixes a dev server error where an SSR full reload triggered by a third-party Vite plugin (such as @tailwindcss/vite) could fail with Failed to load url astro:server-app.js

  • #17636 51723b1 Thanks @​matthewp! - Improves error handling for custom log destinations. When the configured logger fails to load, Astro now reports the error and continues with the default console logger instead of failing the first request.

  • #17631 cf29bec Thanks @​matthewp! - Fixes getCollection() and getEntry() throwing DataCloneError when a collection schema transform returns a Temporal.PlainDate or other class instance.

  • Updated dependencies [8c193f6]:

    • @​astrojs/internal-helpers@​0.10.3
    • @​astrojs/markdown-remark@​7.2.3
    • @​astrojs/markdown-satteri@​0.3.6
Changelog

Sourced from astro's changelog.

7.2.3

Patch Changes

  • #17724 97140b2 Thanks @​ematipico! - Fixes an issue where Astro could run out of memory when experimental.collectionStorage is set to chunked and there are multiple concurrent updates to the same collection.

  • #17636 51723b1 Thanks @​matthewp! - Fixes the dev server sometimes matching against stale routes after pages were added, removed, or renamed, requiring a dev server restart to pick up the change

  • #17636 51723b1 Thanks @​matthewp! - Fixes the composable request helpers (astro/fetch) throwing an error when used on a request that had been rewritten with Astro.rewrite() or next()

  • #17636 51723b1 Thanks @​matthewp! - Refactors Astro's internal server-side request handling. This is an internal change: all documented public APIs, including App and NodeApp, keep their existing signatures and behavior.

    The undocumented internal app.pipeline property and the AppPipeline export from astro/app have been removed. Adapters that used app.pipeline.getLogger() to wait for the configured log destination can call the new app.getLogger() instead.

    As a result of this refactor, new FetchState(request) from astro/fetch now works anywhere inside a built Astro server — including custom src/fetch.ts entrypoints — without the request needing to first pass through app.render(). Previously this threw an error, breaking patterns like the Cloudflare adapter's advanced custom-worker setup.

  • #17723 c3b9aed Thanks @​florian-lefebvre! - Fixes a link in font providers JSDoc annotations

  • #17699 e28d227 Thanks @​ArmandPhilippot! - Fixes several documentation issues related to the JSDoc for configuration options.

    • When hovering over the server and fonts options, the JSDoc for the nested options was displayed instead of the JSDoc for the top-level property.
    • Two i18n configuration options were being used incorrectly in the examples.
    • The indentation of some code blocks was broken on hover.

  • #17572 2066f39 Thanks @​matthewp! - Fixes a crash when a request arrives with a malformed port in the Host header (for example example.com:65536 or example.com:8080:8080). Such a host made the constructed request URL invalid, and the fallback that was meant to recover reused the same invalid host and threw again. The request URL now degrades to a host the server controls when the incoming host cannot be parsed, so the request is handled instead of erroring.

  • #17685 9f15609 Thanks @​astrobot-houston! - Fixes a dev server error where an SSR full reload triggered by a third-party Vite plugin (such as @tailwindcss/vite) could fail with Failed to load url astro:server-app.js

  • #17636 51723b1 Thanks @​matthewp! - Improves error handling for custom log destinations. When the configured logger fails to load, Astro now reports the error and continues with the default console logger instead of failing the first request.

  • #17631 cf29bec Thanks @​matthewp! - Fixes getCollection() and getEntry() throwing DataCloneError when a collection schema transform returns a Temporal.PlainDate or other class instance.

  • Updated dependencies [8c193f6]:

    • @​astrojs/internal-helpers@​0.10.3
    • @​astrojs/markdown-remark@​7.2.3
    • @​astrojs/markdown-satteri@​0.3.6
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build: bump the dependencies group with 12 updates
0e950c8 
Bumps the dependencies group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/markdown-satteri](https://github.com/withastro/astro/tree/HEAD/packages/markdown/satteri) | `0.3.5` | `0.3.6` |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `7.0.5` | `7.0.6` |
| [@astrojs/preact](https://github.com/withastro/astro/tree/HEAD/packages/integrations/preact) | `6.0.2` | `6.0.3` |
| [@astrojs/ts-plugin](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/ts-plugin) | `1.10.10` | `1.10.11` |
| [@lucide/astro](https://github.com/lucide-icons/lucide/tree/HEAD/packages/astro) | `1.31.0` | `1.32.0` |
| [@posthog/types](https://github.com/PostHog/posthog-js/tree/HEAD/packages/types) | `1.404.1` | `1.405.0` |
| [@types/markdown-it](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/markdown-it) | `14.1.2` | `14.2.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.32.0` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.417.2` | `1.418.0` |
| [remeda](https://github.com/remeda/remeda) | `2.41.0` | `2.42.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `4.1.11` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.2` | `7.2.3` |


Updates `@astrojs/markdown-satteri` from 0.3.5 to 0.3.6
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/satteri/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-satteri@0.3.6/packages/markdown/satteri)

Updates `@astrojs/mdx` from 7.0.5 to 7.0.6
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@7.0.6/packages/integrations/mdx)

Updates `@astrojs/preact` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/preact/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/preact@6.0.3/packages/integrations/preact)

Updates `@astrojs/ts-plugin` from 1.10.10 to 1.10.11
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/ts-plugin/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/ts-plugin@1.10.11/packages/language-tools/ts-plugin)

Updates `@lucide/astro` from 1.31.0 to 1.32.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.32.0/packages/astro)

Updates `@posthog/types` from 1.404.1 to 1.405.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/types/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/commits/@posthog/types@1.405.0/packages/types)

Updates `@types/markdown-it` from 14.1.2 to 14.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/markdown-it)

Updates `lucide-react` from 1.31.0 to 1.32.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.32.0/packages/lucide-react)

Updates `posthog-js` from 1.417.2 to 1.418.0
- [Release notes](https://github.com/PostHog/posthog-js/releases)
- [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.417.2...posthog-js@1.418.0)

Updates `remeda` from 2.41.0 to 2.42.0
- [Release notes](https://github.com/remeda/remeda/releases)
- [Commits](remeda/remeda@v2.41.0...v2.42.0)

Updates `@vitest/coverage-v8` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8)

Updates `astro` from 7.2.2 to 7.2.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.2.3/packages/astro)

---
updated-dependencies:
- dependency-name: "@astrojs/markdown-satteri"
  dependency-version: 0.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@astrojs/mdx"
  dependency-version: 7.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@astrojs/preact"
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@astrojs/ts-plugin"
  dependency-version: 1.10.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@lucide/astro"
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@posthog/types"
  dependency-version: 1.405.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@types/markdown-it"
  dependency-version: 14.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: lucide-react
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: posthog-js
  dependency-version: 1.418.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: remeda
  dependency-version: 2.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: astro
  dependency-version: 7.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 21, 2026
@socket-security

socket-security Bot commented Aug 21, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedposthog-js@​1.418.05610080100100
Added@​astrojs/​markdown-satteri@​0.3.61001006795100
Added@​types/​markdown-it@​14.2.01001007587100
Added@​astrojs/​ts-plugin@​1.10.11991007892100
Updated@​vitest/​coverage-v8@​4.1.10 ⏵ 4.1.11991007999100
Added@​lucide/​astro@​1.32.0100100989680
Addedlucide-react@​1.32.0100100989680
Added@​astrojs/​preact@​6.0.31001008196100
Added@​astrojs/​mdx@​7.0.6991008397100
Addedremeda@​2.42.01001008496100
Addedastro@​7.2.3971008898100
Added@​posthog/​types@​1.405.0100100100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants