Skip to content

chore(deps): bump the astro group across 1 directory with 7 updates - #2518

Merged
bjohansebas merged 2 commits into
mainfrom
dependabot/npm_and_yarn/astro-5f48aa97bd
Oct 2, 2026
Merged

bjohansebas merged 2 commits into
mainfrom
dependabot/npm_and_yarn/astro-5f48aa97bd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the astro group with 7 updates in the / directory:

Package From To
@astrojs/markdown-remark 7.2.4 7.3.1
@astrojs/mdx 7.0.8 8.0.2
@astrojs/react 6.0.4 7.0.0
@astrojs/sitemap 3.7.3 3.7.4
astro 7.2.9 7.3.5
astro-expressive-code 0.44.1 0.44.2
prettier-plugin-astro 0.14.1 1.1.0

Updates @astrojs/markdown-remark from 7.2.4 to 7.3.1

Release notes

Sourced from @​astrojs/markdown-remark's releases.

@​astrojs/markdown-remark@​7.3.1

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

@​astrojs/markdown-remark@​7.3.0

Minor Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds MDX rendering to the unified() and satteri() processors.

    Both processors now compile .mdx files themselves. You still need to install @astrojs/mdx to add MDX support to your project.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a recmaPlugins option to unified() for adding recma (estree/JSX) plugins to the MDX compiler.

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0
Changelog

Sourced from @​astrojs/markdown-remark's changelog.

7.3.1

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

7.3.0

Minor Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds MDX rendering to the unified() and satteri() processors.

    Both processors now compile .mdx files themselves. You still need to install @astrojs/mdx to add MDX support to your project.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a recmaPlugins option to unified() for adding recma (estree/JSX) plugins to the MDX compiler.

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0
Commits

Updates @astrojs/mdx from 7.0.8 to 8.0.2

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​8.0.2

Patch Changes

  • #18036 f4444eb Thanks @​astro-factory! - Fixes an incompatibility where @astrojs/mdx v8 could be installed with astro versions that bundle an older @astrojs/markdown-satteri lacking MDX support. Also improves the error message when the processor is too old to suggest updating astro itself.
  • Updated dependencies [3fd16ee, 8358d59]:
    • @​astrojs/markdown-satteri@​0.4.2

@​astrojs/mdx@​8.0.1

Patch Changes

  • Updated dependencies [a548223]:
    • @​astrojs/markdown-satteri@​0.4.1

@​astrojs/mdx@​8.0.0

Major Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Moves MDX file processing to the Markdown processors.

    '@​astrojs/mdx' is still required to add MDX support to your project. However, it now delegates the MDX files processing to Markdown processors.

    What should I do?

    If you haven't explicitly installed a Markdown processor, you don't need to do anything.

    Otherwise, ensure that your configured Markdown processor uses the following version:

    • @astrojs/markdown-satteri 0.4.0 or later if you use satteri()
    • @astrojs/markdown-remark 7.3.0 or later if you use unified()

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes .mdx files still using markdown.processor when extendMarkdownConfig is false. They now use a clean default processor instead; pass mdx({ processor }) to choose one explicitly.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a warning when the deprecated remarkPlugins, rehypePlugins, recmaPlugins and remarkRehype options are ignored because your Markdown processor does not run them. They still apply when your processor is unified(), and were previously dropped silently otherwise.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0
Changelog

Sourced from @​astrojs/mdx's changelog.

8.0.2

Patch Changes

  • #18036 f4444eb Thanks @​astro-factory! - Fixes an incompatibility where @astrojs/mdx v8 could be installed with astro versions that bundle an older @astrojs/markdown-satteri lacking MDX support. Also improves the error message when the processor is too old to suggest updating astro itself.
  • Updated dependencies [3fd16ee, 8358d59]:
    • @​astrojs/markdown-satteri@​0.4.2

8.0.1

Patch Changes

  • Updated dependencies [a548223]:
    • @​astrojs/markdown-satteri@​0.4.1

8.0.0

Major Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Moves MDX file processing to the Markdown processors.

    '@​astrojs/mdx' is still required to add MDX support to your project. However, it now delegates the MDX files processing to Markdown processors.

    What should I do?

    If you haven't explicitly installed a Markdown processor, you don't need to do anything.

    Otherwise, ensure that your configured Markdown processor uses the following version:

    • @astrojs/markdown-satteri 0.4.0 or later if you use satteri()
    • @astrojs/markdown-remark 7.3.0 or later if you use unified()

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes .mdx files still using markdown.processor when extendMarkdownConfig is false. They now use a clean default processor instead; pass mdx({ processor }) to choose one explicitly.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a warning when the deprecated remarkPlugins, rehypePlugins, recmaPlugins and remarkRehype options are ignored because your Markdown processor does not run them. They still apply when your processor is unified(), and were previously dropped silently otherwise.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0
Commits

Updates @astrojs/react from 6.0.4 to 7.0.0

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​7.0.0

Major Changes

  • #17951 e5b0ac4 Thanks @​hanford! - Migrates the React integration to @vitejs/plugin-react v6, using Oxc for JSX and Fast Refresh. Removes the babel integration option; projects with custom Babel transforms must configure @rolldown/plugin-babel under vite.plugins instead.

    Adds an opt-in compiler option for the Oxc-based React Compiler. Install oxc-transform-react and enable it in your Astro config:

    import react from '@astrojs/react';
    export default {
    integrations: [react({ compiler: true })],
    };

    The compiler memoizes client components and hooks. Server rendering is not compiled. The target defaults to the installed React major version; React 17 and 18 projects also need react-compiler-runtime installed. Pass an options object to configure the compiler, for example compiler: { compilationMode: 'annotation' }. The integration's include and exclude options apply, and dependencies and Astro files are excluded.

    Migrating custom Babel transforms

    The integration uses @vitejs/plugin-react v6 and Oxc for JSX and Fast Refresh. The babel integration option has been removed in this major release.

    If you use custom Babel transforms, install @rolldown/plugin-babel and @babel/core, keeping your existing Babel plugins and presets installed:

    pnpm add -D @rolldown/plugin-babel @babel/core

    Move your Babel plugins and presets from react({ babel: ... }) to babel() in vite.plugins. For example, migrate a project using babel-plugin-styled-components from:

    import react from '@astrojs/react';
    import { defineConfig } from 'astro/config';
    export default defineConfig({
    integrations: [react({ babel: { plugins: ['babel-plugin-styled-components'] } })],
    });

    To:

    import react from '@astrojs/react';
    import babel from '@rolldown/plugin-babel';
    import { defineConfig } from 'astro/config';
    export default defineConfig({
    integrations: [react()],
    vite: {
    plugins: [
    babel({

... (truncated)

Changelog

Sourced from @​astrojs/react's changelog.

7.0.0

Major Changes

  • #17951 e5b0ac4 Thanks @​hanford! - Migrates the React integration to @vitejs/plugin-react v6, using Oxc for JSX and Fast Refresh. Removes the babel integration option; projects with custom Babel transforms must configure @rolldown/plugin-babel under vite.plugins instead.

    Adds an opt-in compiler option for the Oxc-based React Compiler. Install oxc-transform-react and enable it in your Astro config:

    import react from '@astrojs/react';
    export default {
    integrations: [react({ compiler: true })],
    };

    The compiler memoizes client components and hooks. Server rendering is not compiled. The target defaults to the installed React major version; React 17 and 18 projects also need react-compiler-runtime installed. Pass an options object to configure the compiler, for example compiler: { compilationMode: 'annotation' }. The integration's include and exclude options apply, and dependencies and Astro files are excluded.

    Migrating custom Babel transforms

    The integration uses @vitejs/plugin-react v6 and Oxc for JSX and Fast Refresh. The babel integration option has been removed in this major release.

    If you use custom Babel transforms, install @rolldown/plugin-babel and @babel/core, keeping your existing Babel plugins and presets installed:

    pnpm add -D @rolldown/plugin-babel @babel/core

    Move your Babel plugins and presets from react({ babel: ... }) to babel() in vite.plugins. For example, migrate a project using babel-plugin-styled-components from:

    import react from '@astrojs/react';
    import { defineConfig } from 'astro/config';
    export default defineConfig({
    integrations: [react({ babel: { plugins: ['babel-plugin-styled-components'] } })],
    });

    To:

    import react from '@astrojs/react';
    import babel from '@rolldown/plugin-babel';
    import { defineConfig } from 'astro/config';
    export default defineConfig({
    integrations: [react()],
    vite: {
    plugins: [

... (truncated)

Commits

Updates @astrojs/sitemap from 3.7.3 to 3.7.4

Release notes

Sourced from @​astrojs/sitemap's releases.

@​astrojs/sitemap@​3.7.4

Patch Changes

  • #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"
Changelog

Sourced from @​astrojs/sitemap's changelog.

3.7.4

Patch Changes

  • #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"
Commits

Updates astro from 7.2.9 to 7.3.5

Release notes

Sourced from astro's releases.

astro@7.3.5

Patch Changes

  • #17736 2b8b2e8 Thanks @​ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

    Users must import the component with the new ?container query string:

    import { experimental_AstroContainer } from "astro/container";
    import TodoList from "../components/TodoList.astro?container";
    const container = await experimental_AstroContainer.create();
    const _string = container.renderComponent(TodoList);

astro@7.3.4

Patch Changes

  • #18063 40896ac Thanks @​adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

  • #18053 cf5d72f Thanks @​Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

  • #18086 795a7e4 Thanks @​ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&#x26;) and named (&amp;) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

  • #18074 0429805 Thanks @​SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

  • #18007 2245837 Thanks @​L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

  • #18096 43657c4 Thanks @​matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

  • #18043 8a53a8b Thanks @​astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

  • #18029 c08252d Thanks @​matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

  • Updated dependencies [3fd16ee, 8358d59]:

    • @​astrojs/markdown-satteri@​0.4.2

astro@7.3.3

Patch Changes

  • #17651 504333c Thanks @​sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

  • #17942 0bc5715 Thanks @​matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

  • #17700 b2222fc Thanks @​winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

  • #17941 394ff79 Thanks @​matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

  • #17928 3277927 Thanks @​ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.5

Patch Changes

  • #17736 2b8b2e8 Thanks @​ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

    Users must import the component with the new ?container query string:

    import { experimental_AstroContainer } from "astro/container";
    import TodoList from "../components/TodoList.astro?container";
    const container = await experimental_AstroContainer.create();
    const _string = container.renderComponent(TodoList);

7.3.4

Patch Changes

  • #18063 40896ac Thanks @​adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

  • #18053 cf5d72f Thanks @​Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

  • #18086 795a7e4 Thanks @​ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&#x26;) and named (&amp;) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

  • #18074 0429805 Thanks @​SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

  • #18007 2245837 Thanks @​L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

  • #18096 43657c4 Thanks @​matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

  • #18043 8a53a8b Thanks @​astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

  • #18029 c08252d Thanks @​matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

  • Updated dependencies [3fd16ee, 8358d59]:

    • @​astrojs/markdown-satteri@​0.4.2

7.3.3

Patch Changes

  • #17651 504333c Thanks @​sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

  • #17942 0bc5715 Thanks @​matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

  • #17700 b2222fc Thanks @​winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

  • #17941 394ff79 Thanks @​matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

... (truncated)

Commits

Updates astro-expressive-code from 0.44.1 to 0.44.2

Release notes

Sourced from astro-expressive-code's releases.

astro-expressive-code@0.44.2

Patch Changes

  • rehype-expressive-code@0.44.2
Changelog

Sourced from astro-expressive-code's changelog.

0.44.2

Patch Changes

  • rehype-expressive-code@0.44.2
Commits

Updates prettier-plugin-astro from 0.14.1 to 1.1.0

Release notes

Sourced from prettier-plugin-astro's releases.

v1.1.0

Minor Changes

  • bfbb6c5: Adds support for three astroAllowShorthand formatting modes:

    • When unset / undefined, the attributes stay as written, i.e <Comp value={value} /> and <Comp {value} /> can co-exist in the same file.
    • When set to true, attributes that can be written in the shorthand form will automatically be transformed. <Comp value={value} /> will become <Comp {value} />
    • When set to false, attributes will always be expanded to their full form.

Patch Changes

  • 4b3547e: Fix non-idempotent indentation of multiline comments nested inside CSS rules.
  • edfb35f: Fixes raw elements being forcefully paired up when self-closed.

v1.0.1

Patch Changes

  • 5b5a735: Publish TypeScript declarations for Astro plugin options.
  • 6154471: Fixes an error when a JavaScript comment appears before a raw or custom-printed element, such as a <script> in the alternate branch of a conditional expression.
  • fabb28f: Fix non-idempotent CSS <style> block formatting with astroCompressHTML set to 'html' or 'none'.

v1.0.0

Major Changes

  • a8bf1a3: Raises the minimum supported Node version to 22.12.0.

  • 595d47f: The plugin has been fully rewritten on top of Astro 7's new Rust compiler. This rewrite fixes many long-standing issues, such as certain elements not being handled properly inside expressions.

    Whitespace formatting now matches Astro’s whitespace handling, and a new astroCompressHTML option has been added to match Astro's compressHTML setting. If you set compressHTML in your Astro config, also set astroCompressHTML in your Prettier config to match.

    In addition, this rewrite has allowed us to more closely match Prettier's built-in JSX and HTML formatting, leading to less cosmetic differences between the different files in your repo.

v1.0.0-beta.2

Patch Changes

  • cc30d24: Fixes various formatting issues when using astroCompressHTML: 'html' or 'none':

    • Fixes a stray > being added after an empty or ignored element that is followed by a sibling.
    • Fixes closing tags being split from trailing void elements like <img>.
    • Fixes whitespace being added inside tables, lists, and captions under htmlWhitespaceSensitivity: 'strict'.
    • Fixes line breaks around inline elements being replaced by spaces.
    • Allows inline elements to wrap at the print width without adding rendered whitespace.
    • Keeps inline elements written on one line on that line.
    • Fixes components with dotted names like <Astro.self> losing their closing tags or failing to format.
    • Fixes whitespace around inline-block elements and reflowing markup written on one line.
    • Fixes quotes in style attribute values being written unescaped, corrupting the attribute and breaking the next format.
    • Fixes children hugging the closing bracket when an element's attributes span multiple lines.
    • Fixes whitespace being added around a lone <slot />, which stopped :empty from matching the container.
    • Fixes srcset values being mangled when a URL contains a comma, such as a data: URI or query string.
    • Lays out block-level elements like HTML.
    • Fixes whitespace being removed around a lone <slot />, which allowed :empty to start matching the container.

... (truncated)

Changelog

Sourced from prettier-plugin-astro's changelog.

1.1.0

Minor Changes

  • bfbb6c5: Adds support for three astroAllowShorthand formatting modes:

    • When unset / undefined, the attributes stay as written, i.e <Comp value={value} /> and <Comp {value} /> can co-exist in the same file.
    • When set to true, attributes that can be written in the shorthand form will automatically be transformed. <Comp value={value} /> will become <Comp {value} />
    • When set to false, attributes will always be expanded to their full form.

Patch Changes

  • 4b3547e: Fix non-idempotent indentation of multiline comments nested inside CSS rules.
  • edfb35f: Fixes raw elements being forcefully paired up when self-closed.

1.0.1

Patch Changes

  • 5b5a735: Publish TypeScript declarations for Astro plugin options.
  • 6154471: Fixes an error when a JavaScript comment appears before a raw or custom-printed element, such as a <script> in the alternate branch of a conditional expression.
  • fabb28f: Fix non-idempotent CSS <style> block formatting with astroCompressHTML set to 'html' or 'none'.

1.0.0

Major Changes

  • a8bf1a3: Raises the minimum supported Node version to 22.12.0.

  • 595d47f: The plugin has been fully rewritten on top of Astro 7's new Rust compiler. This rewrite fixes many long-standing issues, such as certain elements not being handled properly inside expressions.

    Whitespace formatting now matches Astro’s whitespace handling, and a new astroCompressHTML option has been added to match Astro's compressHTML setting. If you set compressHTML in your Astro config, also set astroCompressHTML in your Prettier config to match.

    In addition, this rewrite has allowed us to more closely match Prettier's built-in JSX and HTML formatting, leading to less cosmetic differences between the different files in your repo.

1.0.0-beta.2

Patch Changes

  • cc30d24: Fixes various formatting issues when using astroCompressHTML: 'html' or 'none':

    • Fixes a stray > being added after an empty or ignored element that is followed by a sibling.
    • Fixes closing tags being split from trailing void elements like <img>.
    • Fixes whitespace being added inside tables, lists, and captions under htmlWhitespaceSensitivity: 'strict'.
    • Fixes line breaks around inline elements being replaced by spaces.
    • Allows inline elements to wrap at the print width without adding rendered whitespace.
    • Keeps inline elements written on one line on that line.
    • Fixes components with dotted names like <Astro.self> losing their closing tags or failing to format.
    • Fixes whitespace around inline-block elements and reflowing markup written on one line.
    • Fixes quotes in style attribute values being written unescaped, corrupting the attribute and breaking the next format.
    • Fixes children hugging the closing bracket when an element's attributes span multiple lines.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prettier-plugin-astro since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 1, 2026 16:58
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026
@netlify

netlify Bot commented Oct 1, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for expressjscom-preview ready!

Name Link
🔨 Latest commit 9c4d7ba
🔍 Latest deploy log https://app.netlify.com/projects/expressjscom-preview/deploys/6abfd6b92ab6910007a45630
😎 Deploy Preview https://deploy-preview-2518--expressjscom-preview.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 93 (🔴 down 4 from production)
Accessibility: 100 (no change from production)
Best Practices: 100 (no change from production)
SEO: 100 (no change from production)
PWA: 80 (no change from production)
View the detailed breakdown and full score reports
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@socket-security

socket-security Bot commented Oct 1, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​astrojs/​markdown-remark@​7.2.4 ⏵ 7.3.19810071 +395100
Updatedastro-expressive-code@​0.44.1 ⏵ 0.44.21001007491 +3100
Updated@​astrojs/​sitemap@​3.7.3 ⏵ 3.7.4100 +11008288 -1100
Updated@​astrojs/​mdx@​7.0.8 ⏵ 8.0.2100 +110082 -197 +1100
Updatedastro@​7.2.9 ⏵ 7.3.598 +110088 +198 +1100
Updatedprettier-plugin-astro@​0.14.1 ⏵ 1.1.0100100100 +194 +14100
Updated@​astrojs/​react@​6.0.4 ⏵ 7.0.099100100 +1997 +1100

View full report

@bjohansebas

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps the astro group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) | `7.2.4` | `7.3.1` |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `7.0.8` | `8.0.2` |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `6.0.4` | `7.0.0` |
| [@astrojs/sitemap](https://github.com/withastro/astro/tree/HEAD/packages/integrations/sitemap) | `3.7.3` | `3.7.4` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.9` | `7.3.5` |
| [astro-expressive-code](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/astro-expressive-code) | `0.44.1` | `0.44.2` |
| [prettier-plugin-astro](https://github.com/withastro/prettier-plugin-astro) | `0.14.1` | `1.1.0` |



Updates `@astrojs/markdown-remark` from 7.2.4 to 7.3.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.3.1/packages/markdown/remark)

Updates `@astrojs/mdx` from 7.0.8 to 8.0.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.0.2/packages/integrations/mdx)

Updates `@astrojs/react` from 6.0.4 to 7.0.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/react@7.0.0/packages/integrations/react)

Updates `@astrojs/sitemap` from 3.7.3 to 3.7.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/sitemap/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/sitemap@3.7.4/packages/integrations/sitemap)

Updates `astro` from 7.2.9 to 7.3.5
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.5/packages/astro)

Updates `astro-expressive-code` from 0.44.1 to 0.44.2
- [Release notes](https://github.com/expressive-code/expressive-code/releases)
- [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/astro-expressive-code/CHANGELOG.md)
- [Commits](https://github.com/expressive-code/expressive-code/commits/astro-expressive-code@0.44.2/packages/astro-expressive-code)

Updates `prettier-plugin-astro` from 0.14.1 to 1.1.0
- [Release notes](https://github.com/withastro/prettier-plugin-astro/releases)
- [Changelog](https://github.com/withastro/prettier-plugin-astro/blob/main/CHANGELOG.md)
- [Commits](withastro/prettier-plugin-astro@v0.14.1...v1.1.0)

---
updated-dependencies:
- dependency-name: "@astrojs/markdown-remark"
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: astro
- dependency-name: "@astrojs/mdx"
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: astro
- dependency-name: "@astrojs/react"
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: astro
- dependency-name: "@astrojs/sitemap"
  dependency-version: 3.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: astro
- dependency-name: astro
  dependency-version: 7.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: astro
- dependency-name: astro-expressive-code
  dependency-version: 0.44.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: astro
- dependency-name: prettier-plugin-astro
  dependency-version: 1.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: astro
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the astro group with 7 updates chore(deps): bump the astro group across 1 directory with 7 updates Oct 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/astro-5f48aa97bd branch from c2f5a22 to 4ab92fc Compare October 2, 2026 15:08
@bjohansebas
bjohansebas merged commit 7435c35 into main Oct 2, 2026
13 of 14 checks passed
@bjohansebas
bjohansebas deleted the dependabot/npm_and_yarn/astro-5f48aa97bd branch October 2, 2026 16:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant