Skip to content

chore(deps): bump the minor-and-patch group with 7 updates - #72

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-0ed3be4be7
Open

chore(deps): bump the minor-and-patch group with 7 updates#72
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-0ed3be4be7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 7 updates:

Package From To
@astrojs/starlight 0.41.10 0.42.0
astro 7.2.9 7.3.1
jose 6.2.10 6.2.12
@cloudflare/workers-types 5.20260830.1 5.20260906.1
wrangler 4.127.1 4.129.0
@testing-library/user-event 14.6.6 14.6.7
@cloudflare/vite-plugin 1.54.2 1.54.4

Updates @astrojs/starlight from 0.41.10 to 0.42.0

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.0

Minor Changes

  • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

  • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

    ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

    In the following example, custom styles for the menu button are updated for the new approach:

    - starlight-menu-button button {
+ .sl-menu-button {
  color: var(--sl-color-text);
}

starlight-menu-button[aria-expanded='true'] button {


.sl-menu-button:has(~ :popover-open) {
color: var(--sl-color-text-accent-high);
}

See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    If your configuration included a tagline option, you can safely remove it without any replacement.

  • #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:

    • astro v7.2.10 or later
    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
    • @astrojs/markdown-remark 7.3.0 or later (if you use it)

    Please update Starlight and Astro together:

    npx @astrojs/upgrade

  • #4121 2623ae6 Thanks @​delucis! - Refactors Starlight’s mobile menu toggle to work when JavaScript fails or is disabled

    ⚠️ BREAKING CHANGE: This release drops official support for Chromium-based browsers prior to version 116 (released August 2023), Safari-based browsers prior to version 17.0 (released September 2023), and Firefox prior to version 125 (released April 2024). You can find a list of currently supported browsers and their versions using this browserslist query.

    This change also removes the data-mobile-menu-expanded attribute, which was previously added to <body> while the mobile menu is open. If you have custom code that was depending on this attribute, you will need to update it to use a new selector to check if the mobile menu is open.

    In the following example, a custom background colour for the site header while the menu is open is updated for the new approach:

    • ... (truncated)

    Changelog

    Sourced from @​astrojs/starlight's changelog.

    0.42.0

    Minor Changes

    • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

    • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

      ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

      In the following example, custom styles for the menu button are updated for the new approach:

      - starlight-menu-button button {
+ .sl-menu-button {
  color: var(--sl-color-text);
}

starlight-menu-button[aria-expanded='true'] button {


.sl-menu-button:has(~ :popover-open) {
color: var(--sl-color-text-accent-high);
}

    See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    If your configuration included a tagline option, you can safely remove it without any replacement.

  • #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:

    • astro v7.2.10 or later
    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
    • @astrojs/markdown-remark 7.3.0 or later (if you use it)

    Please update Starlight and Astro together:

    npx @astrojs/upgrade

  • #4121 2623ae6 Thanks @​delucis! - Refactors Starlight’s mobile menu toggle to work when JavaScript fails or is disabled

    ⚠️ BREAKING CHANGE: This release drops official support for Chromium-based browsers prior to version 116 (released August 2023), Safari-based browsers prior to version 17.0 (released September 2023), and Firefox prior to version 125 (released April 2024). You can find a list of currently supported browsers and their versions using this browserslist query.

    This change also removes the data-mobile-menu-expanded attribute, which was previously added to <body> while the mobile menu is open. If you have custom code that was depending on this attribute, you will need to update it to use a new selector to check if the mobile menu is open.

    • ... (truncated)

    Commits

    Updates astro from 7.2.9 to 7.3.1

    Release notes

    Sourced from astro's releases.

    astro@7.3.1

    Patch Changes

    astro@7.3.0

    Minor Changes

    • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

      Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { LocalImageService } from 'astro';
const service: LocalImageService = {
// ...
async transform(inputBuffer, transform, imageConfig, logger) {
logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
return { data: inputBuffer, format: 'png' };
},
};

      Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

      Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { CacheProvider } from 'astro';
const provider: CacheProvider = {
name: 'my-cache',
async onRequest({ request, url, logger }, next) {
logger.warn(Skipping cache for ${url.pathname} because the response sets a cookie.);
return next();
},
// ...
};

      Astro's built-in memoryCache() provider now uses this logger for the warnings it emits when it skips caching a response that sets cookies, and when a background revalidation fails.

    Patch Changes

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Updates Astro's remaining internal warnings and errors to be written through the configured logger instead of directly to the console, when possible

    ... (truncated)

    Changelog

    Sourced from astro's changelog.

    7.3.1

    Patch Changes

    7.3.0

    Minor Changes

    • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

      Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { LocalImageService } from 'astro';
const service: LocalImageService = {
// ...
async transform(inputBuffer, transform, imageConfig, logger) {
logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
return { data: inputBuffer, format: 'png' };
},
};

      Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

      Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { CacheProvider } from 'astro';
const provider: CacheProvider = {
name: 'my-cache',
async onRequest({ request, url, logger }, next) {
logger.warn(Skipping cache for ${url.pathname} because the response sets a cookie.);
return next();
},
// ...
};

      Astro's built-in memoryCache() provider now uses this logger for the warnings it emits when it skips caching a response that sets cookies, and when a background revalidation fails.

    Patch Changes

    ... (truncated)

    Commits

    Updates jose from 6.2.10 to 6.2.12

    Release notes

    Sourced from jose's releases.

    v6.2.12

    Documentation

    • clarify and shorten public API guidance (be62530)

    Refactor

    • simplify JWS and JWE operation cores (92e9640)

    Performance

    • avoid copying AES-GCM output (6925d43)
    • deduplicate pending jwks key imports (bf5138b)
    • encode single-signature JWS input once (7bc9a33)
    • normalize General JWE shared headers once (78637bd)
    • normalize jwks selection metadata once (fd3ae3f)
    • use native encoding for larger ASCII strings (b23a6f3)

    v6.2.11

    Documentation

    • render subpath indexes as tables (94589ee)
    • shorten API index descriptions (681482f)

    Refactor

    • model JWE key management modes (e01dda6)
    • types: reduce declaration repetition (55b970f)
    Changelog

    Sourced from jose's changelog.

    6.2.12 (2026-09-05)

    Documentation

    • clarify and shorten public API guidance (be62530)

    Refactor

    • simplify JWS and JWE operation cores (92e9640)

    Performance

    • avoid copying AES-GCM output (6925d43)
    • deduplicate pending jwks key imports (bf5138b)
    • encode single-signature JWS input once (7bc9a33)
    • normalize General JWE shared headers once (78637bd)
    • normalize jwks selection metadata once (fd3ae3f)
    • use native encoding for larger ASCII strings (b23a6f3)

    6.2.11 (2026-09-04)

    Documentation

    • render subpath indexes as tables (94589ee)
    • shorten API index descriptions (681482f)

    Refactor

    • model JWE key management modes (e01dda6)
    • types: reduce declaration repetition (55b970f)
    Commits
    • 505a55b chore(release): 6.2.12
    • 7bc9a33 perf: encode single-signature JWS input once
    • 78637bd perf: normalize General JWE shared headers once
    • bf5138b perf: deduplicate pending jwks key imports
    • b23a6f3 perf: use native encoding for larger ASCII strings
    • fd3ae3f perf: normalize jwks selection metadata once
    • 6925d43 perf: avoid copying AES-GCM output
    • be62530 docs: clarify and shorten public API guidance
    • 1b41312 build: preserve README when generation fails
    • 0b51829 build: check tree-shaking for every public binding
    • Additional commits viewable in compare view

    Updates @cloudflare/workers-types from 5.20260830.1 to 5.20260906.1

    Commits

    Updates wrangler from 4.127.1 to 4.129.0

    Release notes

    Sourced from wrangler's releases.

    wrangler@4.129.0

    Minor Changes

    • #15460 93d72a5 Thanks @​QnJ1c2kNCg! - Support gzip compression for JSON Pipelines sinks

      Pipelines is in open beta. wrangler pipelines sinks create and the interactive setup flow now pass the selected JSON compression to the Pipelines API. JSON sinks accept uncompressed or gzip, while Parquet retains its existing compression options and zstd default.

    • #15358 d2d8eea Thanks @​pombosilva! - Add a --json flag to the wrangler workflows commands

      Every wrangler workflows command now accepts --json, which emits the raw API payload instead of the human-readable rendering. The formatted output remains the default, so existing usage is unaffected:

      wrangler workflows instances list my-workflow --json

      The JSON output carries raw values rather than a serialisation of the formatted view: ISO timestamps instead of locale-formatted dates, plain status strings instead of emojified labels, and no presentation-only derived fields.

    Patch Changes

    • #15469 d40a634 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

      The following dependency versions have been updated:

      Dependency From To
      @​cloudflare/workers-types ^5.20260831.1 ^5.20260902.1
      workerd 1.20260831.1 1.20260902.1

    • #15481 7c1b2a6 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

      The following dependency versions have been updated:

      Dependency From To
      @​cloudflare/workers-types ^5.20260902.1 ^5.20260903.1
      workerd 1.20260902.1 1.20260903.1

    • #15472 f6fb347 Thanks @​emily-shen! - Tolerate missing permissions during wrangler delete cleanup checks

      wrangler delete now warns and continues when it cannot inspect Worker dependencies or clean up legacy Workers Sites KV namespaces because of missing permissions. The Worker delete request itself still fails normally if the token cannot delete the Worker.

    • #15472 f6fb347 Thanks @​emily-shen! - Tolerate missing resource permissions during resource provisioning

      When Wrangler cannot check whether a bound resource exists because the API returns a 403, it now skips automatic provisioning for that resource type and continues the deploy. The deploy may still fail later if the resource is missing.

    • #15476 dc24057 Thanks @​christhorwarth! - Fix remote development with static assets for API tokens using granular Worker permissions

      Wrangler now creates Workers.dev preview sessions through the Worker-scoped endpoint and derives the preview hostname from the session response. This avoids requiring account-level Workers subdomain access.

    • Updated dependencies [00a9f2f, 1dba24a, d40a634, 7c1b2a6]:

    ... (truncated)

    Commits

    Updates @testing-library/user-event from 14.6.6 to 14.6.7

    Release notes

    Sourced from @​testing-library/user-event's releases.

    v14.6.7

    14.6.7 (2026-09-02)

    Bug Fixes

    • normalize DataTransfer format aliases (#1326) (1e0020b)
    • feature: Add iframe support for user.keyboard typing (#1275) (1e0020b)
    Commits

    Updates @cloudflare/vite-plugin from 1.54.2 to 1.54.4

    Release notes

    Sourced from @​cloudflare/vite-plugin's releases.

    @​cloudflare/vite-plugin@​1.54.4

    Patch Changes

    @​cloudflare/vite-plugin@​1.54.3

    Patch Changes

    Changelog

    Sourced from @​cloudflare/vite-plugin's changelog.

    1.54.4

    Patch Changes

    1.54.3

    Patch Changes

    Commits

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

    @dependabot
    chore(deps): bump the minor-and-patch group with 7 updates
    a2d553d 
    Bumps the minor-and-patch group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.10` | `0.42.0` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.9` | `7.3.1` |
| [jose](https://github.com/panva/jose) | `6.2.10` | `6.2.12` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260830.1` | `5.20260906.1` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.127.1` | `4.129.0` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.6` | `14.6.7` |
| [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) | `1.54.2` | `1.54.4` |


Updates `@astrojs/starlight` from 0.41.10 to 0.42.0
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.0/packages/starlight)

Updates `astro` from 7.2.9 to 7.3.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.1/packages/astro)

Updates `jose` from 6.2.10 to 6.2.12
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.10...v6.2.12)

Updates `@cloudflare/workers-types` from 5.20260830.1 to 5.20260906.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `wrangler` from 4.127.1 to 4.129.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.129.0/packages/wrangler)

Updates `@testing-library/user-event` from 14.6.6 to 14.6.7
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.6...v14.6.7)

Updates `@cloudflare/vite-plugin` from 1.54.2 to 1.54.4
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@1.54.4/packages/vite-plugin-cloudflare)

---
updated-dependencies:
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: astro
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260906.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: wrangler
  dependency-version: 4.129.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@cloudflare/vite-plugin"
  dependency-version: 1.54.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 9, 2026
    @cloudflare-workers-and-pages

    cloudflare-workers-and-pages Bot commented Sep 9, 2026 •
    edited
    Loading

    Copy link
    Copy Markdown

    Deploying with  Cloudflare Workers  Cloudflare Workers

    The latest updates on your project. Learn more about integrating Git with Workers.

    Status Name Latest Commit Preview URL Updated (UTC)
    ✅ Deployment successful!
    View logs    		 nyuchi-docs a2d553d Commit Preview URL

    Branch Preview URL    		 Sep 09 2026, 04:37 AM

    @cloudflare-workers-and-pages

    cloudflare-workers-and-pages Bot commented Sep 9, 2026 •
    edited
    Loading

    Copy link
    Copy Markdown

    Deploying with  Cloudflare Workers  Cloudflare Workers

    The latest updates on your project. Learn more about integrating Git with Workers.

    Status Name Latest Commit Preview URL Updated (UTC)
    ✅ Deployment successful!
    View logs    		 shamwari-docs-ai a2d553d Commit Preview URL

    Branch Preview URL    		 Sep 09 2026, 04:37 AM

    @cloudflare-workers-and-pages

    cloudflare-workers-and-pages Bot commented Sep 9, 2026 •
    edited
    Loading

    Copy link
    Copy Markdown

    Deploying with  Cloudflare Workers  Cloudflare Workers

    The latest updates on your project. Learn more about integrating Git with Workers.

    Status Name Latest Commit Preview URL Updated (UTC)
    ✅ Deployment successful!
    View logs    		 nyuchi-docs-mcp a2d553d Commit Preview URL

    Branch Preview URL    		 Sep 09 2026, 04:37 AM

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    No reviews

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    0 participants