Skip to content

chore(deps): bump the patch-updates group with 17 updates - #664

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot-npm_and_yarn-patch-updates-4a836ce343
Closed

chore(deps): bump the patch-updates group with 17 updates#664
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot-npm_and_yarn-patch-updates-4a836ce343

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the patch-updates group with 17 updates:

Package From To
@astrojs/cloudflare 14.3.1 14.3.4
@astrojs/markdown-remark 7.3.1 7.3.2
@astrojs/markdown-satteri 0.4.1 0.4.3
@astrojs/mdx 8.0.1 8.0.3
@fancyapps/ui 6.1.14 6.1.15
@iconify-json/material-symbols 1.2.91 1.2.95
@iconify-json/simple-icons 1.2.95 1.2.99
@napi-rs/wasm-runtime 1.2.3 1.2.5
astro 7.3.2 7.3.8
pako 3.0.1 3.0.2
sharp 0.35.4 0.35.5
svelte 5.57.0 5.57.2
tsx 4.23.13 4.23.15
@astrojs/ts-plugin 1.10.11 1.10.12
@biomejs/biome 2.5.12 2.5.15
pinyin-pro 3.29.3 3.29.4
postcss-nesting 14.0.1 14.0.3

Updates @astrojs/cloudflare from 14.3.1 to 14.3.4

Release notes

Sourced from @​astrojs/cloudflare's releases.

@​astrojs/cloudflare@​14.3.4

Patch Changes

  • #18213 1e5523d Thanks @​astro-factory! - Fixes the globalThis.process shim being prepended to client-side scripts. The shim is now only added to the server output.

  • #18253 78dca00 Thanks @​astro-factory! - Fixes the @astrojs/cloudflare/hono usage example so i18n() is mounted before pages(). In the old order, i18n() never ran, so locale redirects and fallbacks were skipped.

  • #18145 02246c9 Thanks @​astro-factory! - Fixes dev dependency scan failing when a frontmatter line starts with import.meta or import(

  • #17677 4f85749 Thanks @​andreialba! - Fixes remote images without a file extension failing with 400 Unsupported format: null when using the cloudflare-binding image service

    Astro only adds the f (format) parameter to /_image URLs when it can infer a format from the source, and otherwise leaves it off so the image service resolves the format from the source itself. Extensionless remote images, such as GitHub avatars like https://avatars.githubusercontent.com/u/1234, take that path. The image transform endpoint now falls back to the source's media type when f is absent, passing SVG sources through unchanged and encoding everything else as WebP. This also fixes SVG images, which are requested as f=svg and previously failed the same way.

  • #18057 8db3024 Thanks @​asqar! - Fixes astro build failing with fetch failed / connect ECONNREFUSED 127.0.0.1:<port> during prerendering on hosts where localhost resolves to IPv6

    The prerenderer started its Vite preview server with host: 'localhost' and then built the fetch URL by re-stating that same hostname. localhost was therefore resolved twice, independently — once by listen() to pick a bind address and once by fetch() to pick a connect address — with nothing making the two agree. On hosts where those resolutions land on different families, the preview server listens on ::1 while fetch dials 127.0.0.1, and every prerender request is refused. The URL is now derived from the address actually bound, so bind and connect agree by construction.

  • Updated dependencies [6987261, 62b13ba]:

    • @​astrojs/internal-helpers@​0.12.0
    • @​astrojs/underscore-redirects@​1.0.4

@​astrojs/cloudflare@​14.3.3

Patch Changes

  • #18059 30cb32e Thanks @​Princesseuh! - Fixes image transforms without a specified quality outputting an higher quality than expected on certain formats

  • #18091 28d59a9 Thanks @​astro-factory! - Fixes optimizeDeps.include glob astro/runtime/** matching .d.ts files, which caused 83 unnecessary optimizer entries and empty output chunks per environment during dev

  • #18032 f7dbc6a Thanks @​adamchal! - Fixes image requests when using imageService: 'compile' with passthroughImageService().

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.4

@​astrojs/cloudflare@​14.3.2

Patch Changes

  • #17958 b95c574 Thanks @​astro-factory! - Fixes a build failure when the wrangler config uses the exports field to declare Durable Object classes

  • #18022 24946f7 Thanks @​matthewp! - Fixes cold astro dev crashes when using the passthrough image service

  • #17842 d68db73 Thanks @​adamchal! - Fixes broken images on static sites by transforming prerendered images at build time with the default Cloudflare Images binding

  • #17945 750b4db Thanks @​matthewp! - Pre-bundles renderer server entrypoints and the default console logger during dev so they are included in the initial optimization pass, preventing a mid-request re-optimization that could crash the dev server on Cloudflare (workerd).

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.4
Changelog

Sourced from @​astrojs/cloudflare's changelog.

14.3.4

Patch Changes

  • #18213 1e5523d Thanks @​astro-factory! - Fixes the globalThis.process shim being prepended to client-side scripts. The shim is now only added to the server output.

  • #18253 78dca00 Thanks @​astro-factory! - Fixes the @astrojs/cloudflare/hono usage example so i18n() is mounted before pages(). In the old order, i18n() never ran, so locale redirects and fallbacks were skipped.

  • #18145 02246c9 Thanks @​astro-factory! - Fixes dev dependency scan failing when a frontmatter line starts with import.meta or import(

  • #17677 4f85749 Thanks @​andreialba! - Fixes remote images without a file extension failing with 400 Unsupported format: null when using the cloudflare-binding image service

    Astro only adds the f (format) parameter to /_image URLs when it can infer a format from the source, and otherwise leaves it off so the image service resolves the format from the source itself. Extensionless remote images, such as GitHub avatars like https://avatars.githubusercontent.com/u/1234, take that path. The image transform endpoint now falls back to the source's media type when f is absent, passing SVG sources through unchanged and encoding everything else as WebP. This also fixes SVG images, which are requested as f=svg and previously failed the same way.

  • #18057 8db3024 Thanks @​asqar! - Fixes astro build failing with fetch failed / connect ECONNREFUSED 127.0.0.1:<port> during prerendering on hosts where localhost resolves to IPv6

    The prerenderer started its Vite preview server with host: 'localhost' and then built the fetch URL by re-stating that same hostname. localhost was therefore resolved twice, independently — once by listen() to pick a bind address and once by fetch() to pick a connect address — with nothing making the two agree. On hosts where those resolutions land on different families, the preview server listens on ::1 while fetch dials 127.0.0.1, and every prerender request is refused. The URL is now derived from the address actually bound, so bind and connect agree by construction.

  • Updated dependencies [6987261, 62b13ba]:

    • @​astrojs/internal-helpers@​0.12.0
    • @​astrojs/underscore-redirects@​1.0.4

14.3.3

Patch Changes

  • #18059 30cb32e Thanks @​Princesseuh! - Fixes image transforms without a specified quality outputting an higher quality than expected on certain formats

  • #18091 28d59a9 Thanks @​astro-factory! - Fixes optimizeDeps.include glob astro/runtime/** matching .d.ts files, which caused 83 unnecessary optimizer entries and empty output chunks per environment during dev

  • #18032 f7dbc6a Thanks @​adamchal! - Fixes image requests when using imageService: 'compile' with passthroughImageService().

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.4

14.3.2

Patch Changes

  • #17958 b95c574 Thanks @​astro-factory! - Fixes a build failure when the wrangler config uses the exports field to declare Durable Object classes

  • #18022 24946f7 Thanks @​matthewp! - Fixes cold astro dev crashes when using the passthrough image service

  • #17842 d68db73 Thanks @​adamchal! - Fixes broken images on static sites by transforming prerendered images at build time with the default Cloudflare Images binding

  • #17945 750b4db Thanks @​matthewp! - Pre-bundles renderer server entrypoints and the default console logger during dev so they are included in the initial optimization pass, preventing a mid-request re-optimization that could crash the dev server on Cloudflare (workerd).

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.4
Commits
  • e4f8f46 [ci] release (#18120)
  • 78dca00 Mount i18n() before pages() in documented astro/hono order (#18253)
  • 1e5523d Scope Cloudflare adapter process banner to SSR and prerender environments onl...
  • 322cd13 Update astro (#18203)
  • 4f85749 fix(cloudflare): resolve image format from the source when f is absent (#17...
  • 02246c9 Fix @astrojs/cloudflare dependency scan incorrectly matching import.meta ...
  • 4ce2fca [ci] format
  • 8db3024 fix(cloudflare): derive prerender server URL from the bound address (#18057)
  • 790c6f7 [ci] release (#18035)
  • 00393ff Update dependency vitest [SECURITY] (#18026)
  • Additional commits viewable in compare view

Updates @astrojs/markdown-remark from 7.3.1 to 7.3.2

Release notes

Sourced from @​astrojs/markdown-remark's releases.

@​astrojs/markdown-remark@​7.3.2

Patch Changes

  • #18099 6987261 Thanks @​renovate! - Adds YAML parsing with timestamp and merge key support, and formats YAML errors consistently across Astro, Markdown, MDX, and Markdoc.

  • #18139 d047b5c Thanks @​breken-ai! - Fixes Markdown code blocks with languages ending in a symbol, such as c#, c++, and f#, being highlighted as c or f

  • Updated dependencies [6987261, 62b13ba]:

    • @​astrojs/internal-helpers@​0.12.0
Changelog

Sourced from @​astrojs/markdown-remark's changelog.

7.3.2

Patch Changes

  • #18099 6987261 Thanks @​renovate! - Adds YAML parsing with timestamp and merge key support, and formats YAML errors consistently across Astro, Markdown, MDX, and Markdoc.

  • #18139 d047b5c Thanks @​breken-ai! - Fixes Markdown code blocks with languages ending in a symbol, such as c#, c++, and f#, being highlighted as c or f

  • Updated dependencies [6987261, 62b13ba]:

    • @​astrojs/internal-helpers@​0.12.0
Commits

Updates @astrojs/markdown-satteri from 0.4.1 to 0.4.3

Release notes

Sourced from @​astrojs/markdown-satteri's releases.

@​astrojs/markdown-satteri@​0.4.3

Patch Changes

@​astrojs/markdown-satteri@​0.4.2

Patch Changes

  • #17946 3fd16ee Thanks @​odysseus0! - Fix syntax highlighting for fenced code blocks when raw HTML is enabled.

  • #18046 8358d59 Thanks @​Princesseuh! - Fixes satteriHeadingIdsPlugin sharing Slugger state across documents when reused as a user hast plugin, which caused headings with the same text in different posts to receive incorrect numeric suffixes

Changelog

Sourced from @​astrojs/markdown-satteri's changelog.

0.4.3

Patch Changes

0.4.2

Patch Changes

  • #17946 3fd16ee Thanks @​odysseus0! - Fix syntax highlighting for fenced code blocks when raw HTML is enabled.

  • #18046 8358d59 Thanks @​Princesseuh! - Fixes satteriHeadingIdsPlugin sharing Slugger state across documents when reused as a user hast plugin, which caused headings with the same text in different posts to receive incorrect numeric suffixes

Commits

Updates @astrojs/mdx from 8.0.1 to 8.0.3

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​8.0.3

Patch Changes

  • #18099 6987261 Thanks @​renovate! - Adds YAML parsing with timestamp and merge key support, and formats YAML errors consistently across Astro, Markdown, MDX, and Markdoc.
  • Updated dependencies [6987261, 62b13ba]:
    • @​astrojs/internal-helpers@​0.12.0
    • @​astrojs/markdown-satteri@​0.4.3

@​astrojs/mdx@​8.0.3-beta.0

Patch Changes

@​astrojs/mdx@​8.0.2

Patch Changes

  • #18036 f4444eb Thanks @​astro-factory! - Fixes an incompatibility where @astrojs/mdx v8 could be installed with astro versions that bundle an older @astrojs/markdown-satteri lacking MDX support. Also improves the error message when the processor is too old to suggest updating astro itself.
  • Updated dependencies [3fd16ee, 8358d59]:
    • @​astrojs/markdown-satteri@​0.4.2
Changelog

Sourced from @​astrojs/mdx's changelog.

8.0.3

Patch Changes

  • #18099 6987261 Thanks @​renovate! - Adds YAML parsing with timestamp and merge key support, and formats YAML errors consistently across Astro, Markdown, MDX, and Markdoc.
  • Updated dependencies [6987261, 62b13ba]:
    • @​astrojs/internal-helpers@​0.12.0
    • @​astrojs/markdown-satteri@​0.4.3

8.0.2

Patch Changes

  • #18036 f4444eb Thanks @​astro-factory! - Fixes an incompatibility where @astrojs/mdx v8 could be installed with astro versions that bundle an older @astrojs/markdown-satteri lacking MDX support. Also improves the error message when the processor is too old to suggest updating astro itself.
  • Updated dependencies [3fd16ee, 8358d59]:
    • @​astrojs/markdown-satteri@​0.4.2
Commits

Updates @fancyapps/ui from 6.1.14 to 6.1.15

Release notes

Sourced from @​fancyapps/ui's releases.

v6.1.15

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​fancyapps/ui's changelog.

6.1.15 (2026-09-08)

Bug Fixes

  • Carousel Fix external controls (data-carousel-target) when the button is nested inside a carousel or wraps child elements
  • Carousel Fix custom Toolbar items being skipped when their name matches a built-in Object property
  • Fancybox Prevent the instance from closing when a text-selection drag started inside the content is released over the backdrop
  • Fancybox Preserve slide alt text when opening through a delegated trigger

Features

  • Fancybox Allow the dragToClose option to be changed while an instance is open
  • Gestures Add enable() and disable() methods to stop and resume gesture recognition
  • Add translations into Brazilian, Portuguese and Traditional Chinese
Commits

Updates @iconify-json/material-symbols from 1.2.91 to 1.2.95

Commits

Updates @iconify-json/simple-icons from 1.2.95 to 1.2.99

Commits

Updates @napi-rs/wasm-runtime from 1.2.3 to 1.2.5

Changelog

Sourced from @​napi-rs/wasm-runtime's changelog.

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

1.2.4 (2026-09-10)

Bug Fixes

Commits
  • 023a9f0 chore(release): publish
  • 0029e3d feat(cli, async-runtime): preload the threaded WASI worker pool from the load...
  • a53f334 chore(deps): lock file maintenance (#3554)
  • 7e3f293 chore(release): publish
  • f772ee0 fix(cli): align generated file formats (#3501)
  • 58fb862 chore(deps): upgrade oxlint, fix warnings (#3487)
  • See full diff in compare view

Updates astro from 7.3.2 to 7.3.8

Release notes

Sourced from astro's releases.

astro@7.3.8

Patch Changes

  • #18293 28e7410 Thanks @​astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

  • #18298 0e9e857 Thanks @​matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

  • #18263 882dd98 Thanks @​florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

  • #18290 31f13c3 Thanks @​astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

astro@7.3.7

Patch Changes

  • #18266 cba76cc Thanks @​astro-factory! - Fixes a build error when a Markdown content collection entry loaded with glob({ deferRender: true }) has a layout frontmatter property. layout is now ignored for content collection entries, as documented.

  • #18287 38f6793 Thanks @​astro-factory! - Fixes astro add cloudflare failing to install dependencies with pnpm v11+ by approving the workerd build script, and shows the package manager's error output when astro add fails to install dependencies

  • #18222 fcf6ed6 Thanks @​mingjunlu! - Fixes an issue where AVIF images were served as image/heif instead of image/avif in the dev server.

  • #18240 de4df06 Thanks @​astro-factory! - Fixes the cache() handler from astro/hono and astro/fetch throwing a TypeError when a cache provider is configured. It now registers the cache provider before rendering, so Astro.cache is available to downstream handlers like pages().

  • #18268 547b572 Thanks @​astro-factory! - Fixes security.checkOrigin rejecting cross-origin requests with non-form content types such as application/json. As documented, the check only applies to unsafe requests that have no content-type header or one of application/x-www-form-urlencoded, multipart/form-data, or text/plain.

astro@7.3.6

Patch Changes

  • #18166 5134d0f Thanks @​astro-factory! - Fixes an intermittent dev server crash when using astro:actions inside a server island with adapters that use a pre-bundled SSR environment (e.g. @astrojs/cloudflare)

  • #18076 8a2df66 Thanks @​astro-factory! - Fixes stale scoped styles during HMR when both markup and <style> are changed in a single save

  • #18252 2d29e7e Thanks @​astro-factory! - Fixes CSS from other pages leaking into a page's <head> in dev when the page imports a module such as astro:config/server.

  • #18000 6724575 Thanks @​barclayd! - Fixes a bug where server islands containing framework components rendered empty in the dev server when using a custom src/fetch.ts

  • #18241 7c5fd6f Thanks @​astro-factory! - Fixes the composable i18n() handler from astro/fetch and astro/hono returning an empty 404 for paths without a locale prefix. It now renders the custom 404 page, matching astro().

  • #18164 1a6997f Thanks @​astro-factory! - Fixes CSS Module HMR in dev when a component is rendered both with and without hydration on the same page. Astro now uses path-based class name hashing in dev mode so that editing CSS declarations no longer changes the generated selectors, allowing Vite's CSS HMR to update styles without a full page reload.

  • #18243 dd29d62 Thanks @​astro-factory! - Fixes context.props being null in middleware and endpoints when the composable astro/hono or astro/fetch actions() handler runs before middleware(), or when pages() runs without middleware()

  • #18193 95d5d16 Thanks @​astro-factory! - Fixes astro build failing on Windows with Node.js 25+ with ERR_INVALID_ARG_VALUE when clearing the output directory hits a transient EPERM error

  • #18220 d6c13a4 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Picture /> and <Font /> components when type-checking a project with tsc and @astrojs/ts-content-mapper

  • #18133 faac481 Thanks @​astro-factory! - Fixes lost request state when Vite discovers server dependencies during a request in Cloudflare dev mode

  • #18146 2af4516 Thanks @​astro-factory! - Fixes CSS imported from an injectScript('page') script being dropped during build

  • #18159 e5f8fe0 Thanks @​astro-factory! - Fixes a hang when a server:defer component is inside a slot of another component in an MDX content collection entry

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.8

Patch Changes

  • #18293 28e7410 Thanks @​astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

  • #18298 0e9e857 Thanks @​matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

  • #18263 882dd98 Thanks @​florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

  • #18290 31f13c3 Thanks @​astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

7.3.7

Patch Changes

  • #18266 cba76cc Thanks @​astro-factory! - Fixes a build error when a Markdown content collection entry loaded with glob({ deferRender: true }) has a layout frontmatter property. layout is now ignored for content collection entries, as documented.

  • #18287 38f6793 Thanks @​astro-factory! - Fixes astro add cloudflare failing to install dependencies with pnpm v11+ by approving the workerd build script, and shows the package manager's error output when astro add fails to install dependencies

  • #18222 fcf6ed6 Thanks @​mingjunlu! - Fixes an issue where AVIF images were served as image/heif instead of image/avif in the dev server.

  • #18240 de4df06 Thanks @​astro-factory! - Fixes the cache() handler from astro/hono and astro/fetch throwing a TypeError when a cache provider is configured. It now registers the cache provider before rendering, so Astro.cache is available to downstream handlers like pages().

  • #18268 547b572 Thanks @​astro-factory! - Fixes security.checkOrigin rejecting cross-origin requests with non-form content types such as application/json. As documented, the check only applies to unsafe requests that have no content-type header or one of application/x-www-form-urlencoded, multipart/form-data, or text/plain.

7.3.6

Patch Changes

  • #18166 5134d0f Thanks @​astro-factory! - Fixes an intermittent dev server crash when using astro:actions inside a server island with adapters that use a pre-bundled SSR environment (e.g. @astrojs/cloudflare)

  • #18076 8a2df66 Thanks @​astro-factory! - Fixes stale scoped styles during HMR when both markup and <style> are changed in a single save

  • #18252 2d29e7e Thanks @​astro-factory! - Fixes CSS from other pages leaking into a page's <head> in dev when the page imports a module such as astro:config/server.

  • #18000 6724575 Thanks @​barclayd! - Fixes a bug where server islands containing framework components rendered empty in the dev server when using a custom src/fetch.ts

  • #18241 7c5fd6f Thanks @​astro-factory! - Fixes the composable i18n() handler from astro/fetch and astro/hono returning an empty 404 for paths without a locale prefix. It now renders the custom 404 page, matching astro().

  • #18164 1a6997f Thanks @​astro-factory! - Fixes CSS Module HMR in dev when a component is rendered both with and without hydration on the same page. Astro now uses path-based class name hashing in dev mode so that editing CSS declarations no longer changes the generated selectors, allowing Vite's CSS HMR to update styles without a full page reload.

  • #18243 dd29d62 Thanks @​astro-factory! - Fixes context.props being null in middleware and endpoints when the composable astro/hono or astro/fetch actions() handler runs before middleware(), or when pages() runs without middleware()

  • #18193 95d5d16 Thanks @​astro-factory! - Fixes astro build failing on Windows with Node.js 25+ with ERR_INVALID_ARG_VALUE when clearing the output directory hits a transient EPERM error

  • #18220 d6c13a4 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Picture /> and <Font /> components when type-checking a project with tsc and @astrojs/ts-content-mapper

  • #18133 faac481 Thanks @​astro-factory! - Fixes lost request state when Vite discovers server dependencies during a request in Cloudflare dev mode

... (truncated)

Commits
  • 3571e2d [ci] release (#18292)
  • 0e9e857 Keep existing pnpm allowBuilds approvals in astro add (#18298)
  • 882dd98 Replace esbuild with Vite and Rolldown APIs (#18263)
  • 28e7410 fix(astro): provide Astro.cache when rendering error pages (#18293)
  • 31f13c3 Fix glob() loader watcher ignoring patterns starting with an extglob like `!(...
  • 25c19fa [ci] release (#18272)
  • 38f6793 fix(astro): approve workerd builds in astro add cloudflare for pnpm v11+ an...
  • 547b572 Restore content-type gate in security.checkOrigin so JSON requests are not bl...
  • fcf6ed6 fix(assets): return requested format from Sharp transform (#18222)
  • bec7d18 Ignore layout frontmatter in Markdown content collection entries with `defe...
  • Additional commits viewable in compare view

Updates pako from 3.0.1 to 3.0.2

Changelog

Sourced from pako's changelog.

3.0.2 - 2026-09-12

Fixed

@dependabot
chore(deps): bump the patch-updates group with 17 updates
aca8129 
Bumps the patch-updates group with 17 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/cloudflare](https://github.com/withastro/astro/tree/HEAD/packages/integrations/cloudflare) | `14.3.1` | `14.3.4` |
| [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) | `7.3.1` | `7.3.2` |
| [@astrojs/markdown-satteri](https://github.com/withastro/astro/tree/HEAD/packages/markdown/satteri) | `0.4.1` | `0.4.3` |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `8.0.1` | `8.0.3` |
| [@fancyapps/ui](https://github.com/fancyapps/ui) | `6.1.14` | `6.1.15` |
| [@iconify-json/material-symbols](https://github.com/iconify/icon-sets) | `1.2.91` | `1.2.95` |
| [@iconify-json/simple-icons](https://github.com/iconify/icon-sets) | `1.2.95` | `1.2.99` |
| [@napi-rs/wasm-runtime](https://github.com/napi-rs/napi-rs/tree/HEAD/wasm-runtime) | `1.2.3` | `1.2.5` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.2` | `7.3.8` |
| [pako](https://github.com/nodeca/pako) | `3.0.1` | `3.0.2` |
| [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.57.0` | `5.57.2` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` |
| [@astrojs/ts-plugin](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/ts-plugin) | `1.10.11` | `1.10.12` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.12` | `2.5.15` |
| [pinyin-pro](https://github.com/zh-lx/pinyin-pro/tree/HEAD/packages/pinyin-pro) | `3.29.3` | `3.29.4` |
| [postcss-nesting](https://github.com/csstools/postcss-plugins/tree/HEAD/plugins/postcss-nesting) | `14.0.1` | `14.0.3` |


Updates `@astrojs/cloudflare` from 14.3.1 to 14.3.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/cloudflare/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/cloudflare@14.3.4/packages/integrations/cloudflare)

Updates `@astrojs/markdown-remark` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.3.2/packages/markdown/remark)

Updates `@astrojs/markdown-satteri` from 0.4.1 to 0.4.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/satteri/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-satteri@0.4.3/packages/markdown/satteri)

Updates `@astrojs/mdx` from 8.0.1 to 8.0.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.0.3/packages/integrations/mdx)

Updates `@fancyapps/ui` from 6.1.14 to 6.1.15
- [Release notes](https://github.com/fancyapps/ui/releases)
- [Changelog](https://github.com/fancyapps/ui/blob/main/CHANGELOG.md)
- [Commits](fancyapps/ui@v6.1.14...v6.1.15)

Updates `@iconify-json/material-symbols` from 1.2.91 to 1.2.95
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@iconify-json/simple-icons` from 1.2.95 to 1.2.99
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@napi-rs/wasm-runtime` from 1.2.3 to 1.2.5
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Changelog](https://github.com/napi-rs/napi-rs/blob/main/wasm-runtime/CHANGELOG.md)
- [Commits](https://github.com/napi-rs/napi-rs/commits/@napi-rs/wasm-runtime@1.2.5/wasm-runtime)

Updates `astro` from 7.3.2 to 7.3.8
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.8/packages/astro)

Updates `pako` from 3.0.1 to 3.0.2
- [Changelog](https://github.com/nodeca/pako/blob/master/CHANGELOG.md)
- [Commits](nodeca/pako@3.0.1...3.0.2)

Updates `sharp` from 0.35.4 to 0.35.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.4...v0.35.5)

Updates `svelte` from 5.57.0 to 5.57.2
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.2/packages/svelte)

Updates `tsx` from 4.23.13 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.13...v4.23.15)

Updates `@astrojs/ts-plugin` from 1.10.11 to 1.10.12
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/ts-plugin/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/ts-plugin@1.10.12/packages/language-tools/ts-plugin)

Updates `@biomejs/biome` from 2.5.12 to 2.5.15
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.15/packages/@biomejs/biome)

Updates `pinyin-pro` from 3.29.3 to 3.29.4
- [Release notes](https://github.com/zh-lx/pinyin-pro/releases)
- [Changelog](https://github.com/zh-lx/pinyin-pro/blob/main/CHANGELOG.md)
- [Commits](https://github.com/zh-lx/pinyin-pro/commits/3.29.4/packages/pinyin-pro)

Updates `postcss-nesting` from 14.0.1 to 14.0.3
- [Changelog](https://github.com/csstools/postcss-plugins/blob/main/plugins/postcss-nesting/CHANGELOG.md)
- [Commits](https://github.com/csstools/postcss-plugins/commits/HEAD/plugins/postcss-nesting)

---
updated-dependencies:
- dependency-name: "@astrojs/cloudflare"
  dependency-version: 14.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@astrojs/markdown-remark"
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@astrojs/markdown-satteri"
  dependency-version: 0.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@astrojs/mdx"
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@fancyapps/ui"
  dependency-version: 6.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@iconify-json/material-symbols"
  dependency-version: 1.2.95
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@iconify-json/simple-icons"
  dependency-version: 1.2.99
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@napi-rs/wasm-runtime"
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: astro
  dependency-version: 7.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: pako
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: sharp
  dependency-version: 0.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: svelte
  dependency-version: 5.57.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@astrojs/ts-plugin"
  dependency-version: 1.10.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: pinyin-pro
  dependency-version: 3.29.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: postcss-nesting
  dependency-version: 14.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying firefly with  Cloudflare Pages  Cloudflare Pages

Latest commit: aca8129
Status:🚫  Build failed.

View logs

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 12, 2026
@netlify

netlify Bot commented Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown

❌ Deploy Preview for demo-firefly failed. Why did it fail? →

Name Link
🔨 Latest commit aca8129
🔍 Latest deploy log https://app.netlify.com/projects/demo-firefly/deploys/6acd1a476882e13f4b988b5d

@dependabot @github

dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 14, 2026
@dependabot
dependabot Bot deleted the dependabot-npm_and_yarn-patch-updates-4a836ce343 branch October 14, 2026 16:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants