Skip to content

chore(deps): Bump the minor-and-patch group across 1 directory with 12 updates - #446

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/astro-site/minor-and-patch-dfdeae49d8
Open

chore(deps): Bump the minor-and-patch group across 1 directory with 12 updates#446
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/astro-site/minor-and-patch-dfdeae49d8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 12 updates in the /astro-site directory:

Package From To
@astrojs/markdown-remark 7.2.1 7.2.2
astro 7.1.3 7.2.0
remarque-tokens 0.24.0 0.26.0
satori 0.28.2 0.29.0
svelte 5.56.7 5.56.8
@astrojs/check 0.9.9 0.9.10
@typescript-eslint/parser 8.65.0 8.66.0
eslint 10.7.0 10.8.1
eslint-plugin-astro 3.0.1 3.1.0
playwright 1.61.1 1.62.1
remark-smartypants 3.0.2 3.0.3
shiki 4.1.0 4.4.2

Updates @astrojs/markdown-remark from 7.2.1 to 7.2.2

Release notes

Sourced from @​astrojs/markdown-remark's releases.

@​astrojs/markdown-remark@​7.2.2

Patch Changes

  • Updated dependencies [c895b12]:
    • @​astrojs/internal-helpers@​0.10.2
Changelog

Sourced from @​astrojs/markdown-remark's changelog.

7.2.2

Patch Changes

  • Updated dependencies [c895b12]:
    • @​astrojs/internal-helpers@​0.10.2
Commits

Updates astro from 7.1.3 to 7.2.0

Release notes

Sourced from astro's releases.

astro@7.2.0

Minor Changes

  • #17174 0224a3a Thanks @​matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

    This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.

    astro preview --background

    When a preview server is running in the background, you can inspect or stop it with new astro preview subcommands:

    astro preview status
astro preview logs
astro preview logs --follow
astro preview stop

    If Astro detects that astro preview is being run by an AI coding agent, background mode is enabled automatically. This matches the existing behavior for astro dev, allowing agents to continue working after the preview server starts while still receiving the server URL and process ID.

    To opt out of automatic background mode for preview servers, set ASTRO_PREVIEW_BACKGROUND=0 before running astro preview.

  • #17532 7f94895 Thanks @​florian-lefebvre! - Adds support for paths relative to your project root in logger.entrypoint

    Previously, pointing logger.entrypoint at a custom log handler living in your own project required building an absolute URL. You can now write the path directly:

    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
logger: {

entrypoint: new URL('./src/logger.js', import.meta.url),


entrypoint: './src/logger.js',
},
});

Paths starting with ./ or ../ are resolved against your project root. Package specifiers such as @org/astro-logger, absolute paths, and URL entrypoints keep working as before.

  • #17084 961bbe5 Thanks @​matthewp! - Widens the AstroPrerenderer render() return type so prerenderers can report incremental-build metadata

    A prerenderer's render() may now resolve to either a Response (as before) or a PrerenderResult object that pairs the response with the content entries and optimized-image transforms the page resolved. This lets prerenderers that render out of process (for example, in an adapter's runtime like workerd) report those dependencies back to the build, so incremental static builds can track and replay them for skipped pages.

    import type { AstroPrerenderer, PrerenderResult } from 'astro';
const prerenderer: AstroPrerenderer = {

    • ... (truncated)

    Changelog

    Sourced from astro's changelog.

    7.2.0

    Minor Changes

    • #17174 0224a3a Thanks @​matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

      This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.

      astro preview --background

      When a preview server is running in the background, you can inspect or stop it with new astro preview subcommands:

      astro preview status
astro preview logs
astro preview logs --follow
astro preview stop

      If Astro detects that astro preview is being run by an AI coding agent, background mode is enabled automatically. This matches the existing behavior for astro dev, allowing agents to continue working after the preview server starts while still receiving the server URL and process ID.

      To opt out of automatic background mode for preview servers, set ASTRO_PREVIEW_BACKGROUND=0 before running astro preview.

    • #17532 7f94895 Thanks @​florian-lefebvre! - Adds support for paths relative to your project root in logger.entrypoint

      Previously, pointing logger.entrypoint at a custom log handler living in your own project required building an absolute URL. You can now write the path directly:

      // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
logger: {

entrypoint: new URL('./src/logger.js', import.meta.url),


entrypoint: './src/logger.js',
},
});

    Paths starting with ./ or ../ are resolved against your project root. Package specifiers such as @org/astro-logger, absolute paths, and URL entrypoints keep working as before.

  • #17084 961bbe5 Thanks @​matthewp! - Widens the AstroPrerenderer render() return type so prerenderers can report incremental-build metadata

    A prerenderer's render() may now resolve to either a Response (as before) or a PrerenderResult object that pairs the response with the content entries and optimized-image transforms the page resolved. This lets prerenderers that render out of process (for example, in an adapter's runtime like workerd) report those dependencies back to the build, so incremental static builds can track and replay them for skipped pages.

    import type { AstroPrerenderer, PrerenderResult } from 'astro';

    • ... (truncated)

    Commits

    Updates remarque-tokens from 0.24.0 to 0.26.0

    Changelog

    Sourced from remarque-tokens's changelog.

    0.26.0 — 2026-07-23

    remarque-new-page skill (closes #108) + token-drift.yml optional audit input (closes #110) — the last two items of the skill-suite/CI program.

    Added

    • .claude/skills/remarque-new-page/SKILL.md — a third Claude Code skill, a companion to (not a restatement of) the existing remarque loader skill: five steps, each ending in a machine gate. (1) load the loader skill's three files rather than build from training-data token values; (2) pick one of REMARQUE.md's seven archetypes, never an invented eighth; (3) for module-backed pages (Essay/Broadsheet/Forms/Palette Deck) fetch the registry item — node_modules/remarque-tokens/registry/<name>.json or the served URL — and verify its sha256 against the integrity pin before applying anything (the same transcription bug issue #89 documents, a hand-copied sidenote aria-label that drifted out of DOM order); (4) wire the page per AGENT_RULES pitfalls #6 (string-form @import only)/#7 (unlayered tokens import) and the .remarque-prose/.content-reading pairing (.remarque-prose supplies typography only, never centers the column); (5) gate acceptance on remarque-audit --json reporting passed: true and the registry item's own markup-contract assertions (sidenote DOM-order, data-entry-number/attr(), label/aria-describedby pairing, data-palette/data-theme co-location — per module).
    • All three skills now ship in the npm tarball. scripts/lib/skills.mjs's shared SKILLS table gains the new skill (canonical .claude/skills/remarque-new-page/SKILL.md, packaged skills/remarque-new-page/SKILL.md) — scripts/build-skills.mjs/scripts/test-skills.mjs cover it automatically through that shared table, no separate wiring needed for the freshness/frontmatter/flag/path checks. scripts/test-pack.mjs's hardcoded tarball-listing and installed-package assertions are extended to check for the third skill explicitly (that script doesn't read the shared table). New export: remarque-tokens/skills/new-page (→ skills/remarque-new-page/SKILL.md). package.json's existing skills/ files entry already covers the new directory; no files change needed.
    • README + AGENT_RULES.md "Installing the Skills" — both updated for three skills (three cp commands instead of two) and both skill-listing bullets extended with a remarque-new-page entry.
    • .github/workflows/token-drift.yml: three new OPTIONAL workflow_call inputs — run-audit (boolean, default false), palette-path (string, default ''), src-dir (string, default '.'). When run-audit: true, a new step runs npx remarque-audit --palette <palette-path> --src <src-dir> from the consumer's own checkout, against the remarque-tokens the consumer already installed under package-dir — one workflow call now covers both the drift and audit gates instead of a caller wiring a second script step by hand. palette-path/src-dir are relative to package-dir (the audit step's working directory), matching how npx remarque-audit is normally invoked locally. The step fails fast with a clear ::error:: if run-audit: true but palette-path is left blank (workflow_call has no conditional-required-input mechanism). Backward compatible by construction: run-audit defaults to false, and both existing callers — williamzujkowski.github.io's audits.yml and tsundoku's deploy.yml, both read on their own main branches for this release — call this workflow today with only css-file/package-dir/remarque-ref, so neither is affected without opting in.
    • run-golden deliberately NOT added, despite the issue text raising it alongside run-audit. scripts/palette-golden.mjs is remarque-internal tooling: it binds THIS package's own tokens-palette.css to the remarque-light/remarque-dark reference palettes from @williamzujkowski/oklch-terminal-themes and checks remarque's own release hasn't drifted from its golden values. It ships no CLI bin (package.json's bin only exports remarque-audit/remarque-drift/remarque-theme) and takes no --palette/--src arguments a generic consumer could point at their own stylesheet — there is no consumer-facing analog to generify, unlike run-audit/remarque-audit. Documented inline in the workflow's own header comment.
    • Version-only regeneration of tokens.json/tokens.d.ts/registry.json/registry/*.json (no token, CSS, or registry-content changes this release — tokens.schema.json unchanged).

    0.25.0 — 2026-07-23

    remarque-adopt skill + skills npm export (closes #107) — ratified 3-0 (skill-suite vote, 2026-07-23), the anchor item of the skill suite. Codifies the consumer-conformance playbook run five times in one day as hand-written agent briefs (williamzujkowski.github.io#381, tsundoku#243/#237, remarque-starter#7/#8) into a procedural, machine-gated skill.

    Added

    • .claude/skills/remarque-adopt/SKILL.md — a new Claude Code skill, distinct from the existing remarque loader skill: triggers on "bump remarque-tokens" / "upgrade the design system" / "adopt remarque in an existing site" / an audit failing after a version bump, not on ordinary page work. Five steps, each ending in a machine gate: (1) bump the pin and verify the resolved version, not the range typed — 0.x caret ranges never cross a minor below 1.0, the exact trap that froze remarque-starter at 0.10.x through 0.18.0; (2) discover newly-required tokens mechanically from remarque-audit --json's failures, never by reading the CHANGELOG and guessing; (3) add missing tokens solved against the consumer's own --color-bg/--color-surface/--color-code-bg (keep-if-passing against the package default; the tsundoku#243 hue-collision case — the default viz "red" landing on top of that site's terracotta accent and its own --color-error — is the worked example for checking hue collisions as a distinct failure mode from contrast); (4) run remarque-drift --json and classify FAIL (undocumented core-tier override, fix it) / WARN (documented in DESIGN-DEVIATIONS.md/DESIGN-NOTES.md, ratified) / INFO (palette-tier personalization, expected); (5) a fixed PR-body contract (what changed, token decisions table, drift summary, gate results, anything explicitly declined). Acceptance throughout is pinned to passed: true in the JSON output, never agent judgment.
    • Both skills now ship in the npm tarball. .claude/skills/{remarque,remarque-adopt}/SKILL.md remain the ONE canonical, hand-authored copies (also what a Claude Code session working in this repo reads directly); scripts/build-skills.mjs copies them byte-for-byte into skills/remarque/SKILL.md and skills/remarque-adopt/SKILL.md for packaging — the same single-source-plus-generated-copy relationship tokens.json already has to the CSS tiers, kept fresh the same way (--check gates CI freshness; a prepack script hook runs the plain copy automatically on every npm pack/npm publish, so a stale packaged copy can't ship even if someone forgets to re-run the script by hand). New exports: remarque-tokens/skills/remarque and remarque-tokens/skills/adopt. package.json's files gains skills/, scripts/build-skills.mjs, and scripts/lib/skills.mjs.
    • README + AGENT_RULES.md: "Installing the skills" — Claude Code only discovers skills from a project's own .claude/skills/ (or ~/.claude/skills/), never node_modules, so installing the npm package alone does nothing for a consumer's Claude Code session. Both docs now give the exact cp -r node_modules/remarque-tokens/skills/<name> .claude/skills/<name> pair and note the copies are versioned with the installed package, not auto-updating — re-copy on a MAJOR bump.
    • scripts/test-skills.mjs (enforce-not-instruct applied to the skills themselves, panel condition) — asserts, per skill: frontmatter parses with a non-empty name/description; every CLI flag referenced alongside a remarque-audit/remarque-drift/remarque-theme command line is grepped straight out of scripts/audit.mjs/scripts/drift-check.mjs/scripts/theme.mjs's own arg parsing (not hand-maintained separately, so a renamed flag fails this test instead of shipping a stale doc); every backticked package-relative file path referenced (*.md/*.mjs/*.js/*.json/*.css, excluding consumer-side conventions like DESIGN-DEVIATIONS.md/DESIGN-NOTES.md and node_modules/subpath-export forms) resolves to a real file in this repo; the packaged skills/<name>/SKILL.md copy is byte-identical to the canonical file. Wired into deploy.yml alongside scripts/build-skills.mjs --check.
    • scripts/test-pack.mjs extended — the real npm-tarball smoke test now also asserts (via tar -tzf) that package/skills/remarque/SKILL.md and package/skills/remarque-adopt/SKILL.md land in the packed tarball, and that both resolve inside the scratch consumer's node_modules/remarque-tokens/skills/ after a real npm install — proving the prepack hook actually fires during a real pack/publish, not just that the files exist in the working tree.
    • Version-only regeneration of tokens.json/tokens.d.ts/tokens.schema.json and registry.json/registry/*.json (no token or registry content changes this release).
    Commits
    • 8840970 feat: remarque-new-page skill + reusable-workflow audit input (closes #108, c...
    • f3ea75b feat: remarque-adopt skill + skills npm export (closes #107) (#112)
    • See full diff in compare view

    Updates satori from 0.28.2 to 0.29.0

    Release notes

    Sourced from satori's releases.

    0.29.0

    0.29.0 (2026-07-23)

    Features

    Commits

    Updates svelte from 5.56.7 to 5.56.8

    Release notes

    Sourced from svelte's releases.

    svelte@5.56.8

    Patch Changes

    • fix: call onerror and provide a working reset when hydrating a failed boundary (#18556)

    • fix: preserve select selection when spread attributes omit value (#18561)

    Changelog

    Sourced from svelte's changelog.

    5.56.8

    Patch Changes

    • fix: call onerror and provide a working reset when hydrating a failed boundary (#18556)

    • fix: preserve select selection when spread attributes omit value (#18561)

    Commits

    Updates @astrojs/check from 0.9.9 to 0.9.10

    Release notes

    Sourced from @​astrojs/check's releases.

    @​astrojs/check@​0.9.10

    Patch Changes

    Changelog

    Sourced from @​astrojs/check's changelog.

    0.9.10

    Patch Changes

    Commits

    Updates @typescript-eslint/parser from 8.65.0 to 8.66.0

    Release notes

    Sourced from @​typescript-eslint/parser's releases.

    v8.66.0

    8.66.0 (2026-08-03)

    🚀 Features

    • typescript-estree: handle import.defer() as ImportExpression (#12609)

    🩹 Fixes

    • eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)
    • eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)
    • eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)
    • eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)
    • eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)
    • website: list onUnsupportedTypeScriptVersion in parser options (#12585)

    ❤️ Thank You

    See GitHub Releases for more information.

    You can read about our versioning strategy and releases on our website.

    Changelog

    Sourced from @​typescript-eslint/parser's changelog.

    8.66.0 (2026-08-03)

    This was a version bump only for parser to align it with other projects, there were no code changes.

    See GitHub Releases for more information.

    You can read about our versioning strategy and releases on our website.

    Commits

    Updates eslint from 10.7.0 to 10.8.1

    Release notes

    Sourced from eslint's releases.

    v10.8.1

    Bug Fixes

    • 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
    • 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
    • 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
    • 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
    • 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

    Documentation

    • 7d0cbf8 docs: Update README (GitHub Actions Bot)
    • 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
    • 678c90b docs: Update README (GitHub Actions Bot)
    • 8a10424 docs: Update README (GitHub Actions Bot)
    • 69bb948 docs: Update README (GitHub Actions Bot)

    Chores

    • 0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])
    • 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)
    • 5611035 test: add error locations info to no-void (#21185) (Lee Daeun)
    • ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])
    • f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)
    • 1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)
    • d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)
    • 65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)
    • 22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)
    • 55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])
    • 7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])
    • eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)
    • 60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)
    • f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)
    • d086293 test: add error locations to no-undef (#21147) (JIYEON)
    • cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)
    • 688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)
    • 7c1e175 test: add error locations to require-await (#21145) (Grit)
    • 588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)
    • 059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)
    • 5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)

    v10.8.0

    Features

    • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

    Bug Fixes

    • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
    • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
    • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
    • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
    • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
    • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

    ... (truncated)

    Commits

    Updates eslint-plugin-astro from 3.0.1 to 3.1.0

    Release notes

    Sourced from eslint-plugin-astro's releases.

    v3.1.0

    Minor Changes

    • #616 425aebb Thanks @​ota-meshi! - Resolve the TypeScript parser from the typescript-eslint package when @typescript-eslint/parser is not installed directly.
    Changelog

    Sourced from eslint-plugin-astro's changelog.

    3.1.0

    Minor Changes

    • #616 425aebb Thanks @​ota-meshi! - Resolve the TypeScript parser from the typescript-eslint package when @typescript-eslint/parser is not installed directly.
    Commits
    • 49c94c6 Version Packages (#615)
    • 425aebb Resolve the TypeScript parser from the typescript-eslint package when `@typ...
    • b5bae36 chore(deps): update actions/stale action to v11 (#609)
    • bff64d9 chore(deps): update dependency @​astrojs/markdown-satteri to v0.3.5 (#610)
    • 983b186 docs: add eslint-plugin-import interoperability guide (#612)
    • e1f01f9 chore(deps): update dependency c8 to v12 (#606)
    • See full diff in compare view

    Updates playwright from 1.61.1 to 1.62.1

    Release notes

    Sourced from playwright's releases.

    v1.62.1

    Bug Fixes

    • #41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)
    • #41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)
    • #41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG
    • #42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62
    • #42013 [BUG]Image-type actionable elements are not presented in the snapshot.

    v1.62.0

    🧱 New component testing model

    Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

    test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

    Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

    🛑 Cancel operations with AbortSignal

    Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

    const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

    Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

    🖼️ WebP screenshots

    expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

    // Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
</tr></table>

    ... (truncated)

    Commits
    • 26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...
    • 0a81d5d cherry-pick(#42040): docs(release-notes): mention the isolated headless clipb...
    • 8376826 cherry-pick(#42034): fix(aria): keep icon-only clickable elements in ai snaps...
    • 66c5cc9 chore: mark v1.62.1 (#42020)
    • 9672bc3 cherry-pick(#42009): fix(types): support branded primitives in evaluate argum...
    • 4325804 cherry-pick(#41988): fix(aria): preserve names from collapsed text contributors
    • 9632f8e cherry-pick(#42005): fix(tsconfig): do not throw when "extends"/"references" ...
    • e3950d9 chore: mark v1.62.0 (#41981)
    • f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
    • 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
    • Additional commits viewable in compare view

    Updates remark-smartypants from 3.0.2 to 3.0.3

    Release notes

    Sourced from remark-smartypants's releases.

    v3.0.3

    Commits
    • a7a3039 3.0.3
    • db3ec68 Approve builds
    • 77a4987 Merge pull request #103 from geraschenko/open-quotes
    • a05bb81 Fix quote direction at the start of headings and table cells
    • 9d26679 Merge pull request #97 from silvenon/dependabot/npm_and_yarn/rollup-4.59.0
    • 3beb89a Bump rollup from 4.56.0 to 4.59.0
    • 4f0ae47 Merge pull request #96 from silvenon/dependabot/npm_and_yarn/vitest-1.6.1
    • b6cab69 Bump vitest from 1.5.0 to 1.6.1
    • 807fc1e Merge pull request #95 from silvenon/dependabot/npm_and_yarn/lodash-4.17.23
    • 2b3abec Bump lodash from 4.17.21 to 4.17.23
    • Additional commits viewable in compare view

    Updates shiki from 4.1.0 to 4.4.2

    Release notes

    Sourced from shiki's releases.

    v4.4.2

       🐞 Bug Fixes

       🏎 Performance

        View changes on GitHub

    v4.4.1

       🚀 Features

        View changes on GitHub

    v4.4.0

       🚀 Features

       🐞 Bug Fixes

        View changes on GitHub

    v4.3.1

       🚀 Features

      ...

      Description has been truncated

    @dependabot
    chore(deps): Bump the minor-and-patch group across 1 directory with 1…
    34666fb 
    …2 updates

Bumps the minor-and-patch group with 12 updates in the /astro-site directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) | `7.2.1` | `7.2.2` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.3` | `7.2.0` |
| [remarque-tokens](https://github.com/williamzujkowski/remarque) | `0.24.0` | `0.26.0` |
| [satori](https://github.com/vercel/satori) | `0.28.2` | `0.29.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.7` | `5.56.8` |
| [@astrojs/check](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check) | `0.9.9` | `0.9.10` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.65.0` | `8.66.0` |
| [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.1` |
| [eslint-plugin-astro](https://github.com/ota-meshi/eslint-plugin-astro) | `3.0.1` | `3.1.0` |
| [playwright](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.1` |
| [remark-smartypants](https://github.com/silvenon/remark-smartypants) | `3.0.2` | `3.0.3` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.1.0` | `4.4.2` |



Updates `@astrojs/markdown-remark` from 7.2.1 to 7.2.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.2.2/packages/markdown/remark)

Updates `astro` from 7.1.3 to 7.2.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.2.0/packages/astro)

Updates `remarque-tokens` from 0.24.0 to 0.26.0
- [Changelog](https://github.com/williamzujkowski/remarque/blob/main/CHANGELOG.md)
- [Commits](williamzujkowski/remarque@v0.24.0...v0.26.0)

Updates `satori` from 0.28.2 to 0.29.0
- [Release notes](https://github.com/vercel/satori/releases)
- [Commits](vercel/satori@0.28.2...0.29.0)

Updates `svelte` from 5.56.7 to 5.56.8
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.8/packages/svelte)

Updates `@astrojs/check` from 0.9.9 to 0.9.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/astro-check/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/check@0.9.10/packages/language-tools/astro-check)

Updates `@typescript-eslint/parser` from 8.65.0 to 8.66.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/parser)

Updates `eslint` from 10.7.0 to 10.8.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.1)

Updates `eslint-plugin-astro` from 3.0.1 to 3.1.0
- [Release notes](https://github.com/ota-meshi/eslint-plugin-astro/releases)
- [Changelog](https://github.com/ota-meshi/eslint-plugin-astro/blob/main/CHANGELOG.md)
- [Commits](ota-meshi/eslint-plugin-astro@v3.0.1...v3.1.0)

Updates `playwright` from 1.61.1 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.62.1)

Updates `remark-smartypants` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/silvenon/remark-smartypants/releases)
- [Commits](silvenon/remark-smartypants@v3.0.2...v3.0.3)

Updates `shiki` from 4.1.0 to 4.4.2
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.4.2/packages/shiki)

---
updated-dependencies:
- dependency-name: "@astrojs/markdown-remark"
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: astro
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: remarque-tokens
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: satori
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: svelte
  dependency-version: 5.56.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@astrojs/check"
  dependency-version: 0.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint
  dependency-version: 10.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: eslint-plugin-astro
  dependency-version: 3.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: playwright
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: remark-smartypants
  dependency-version: 3.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: shiki
  dependency-version: 4.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
    @dependabot
    dependabot Bot requested a review from williamzujkowski as a code owner August 11, 2026 17:48
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 11, 2026
    @socket-security

    socket-security Bot commented Aug 11, 2026

    Copy link
    Copy Markdown

    Review the following changes in direct dependencies. Learn more about Socket for GitHub.

    Diff Package Supply Chain
    Security    		 Vulnerability Quality Maintenance License
    Addednpm/​@​astrojs/​markdown-remark@​7.2.2991006993100
    Addednpm/​satori@​0.29.0981001009870
    Addednpm/​@​typescript-eslint/​parser@​8.66.01001007298100
    Addednpm/​shiki@​4.4.21001007798100
    Addednpm/​remarque-tokens@​0.26.07810010096100
    Addednpm/​@​astrojs/​check@​0.9.101001008091100
    Addednpm/​playwright@​1.62.11001001009980
    Addednpm/​remark-smartypants@​3.0.31001008686100
    Addednpm/​svelte@​5.56.8881008797100
    Addednpm/​astro@​7.2.0971008896100
    Addednpm/​eslint-plugin-astro@​3.1.09810010093100
    Addednpm/​eslint@​10.8.19710010097100

    View full report

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    @williamzujkowski williamzujkowski Awaiting requested review from williamzujkowski williamzujkowski is a code owner

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    0 participants