fix(deps): update all non-major dependencies#588
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ❌ Deployment failed View logs |
seren-dev | 6bc430f | Jun 16 2026, 12:00 AM |
4510369
c27667f to
4510369
Compare
4510369 to
ee28cfc
Compare
f8a2d08
ee28cfc to
f8a2d08
Compare
8071003
f8a2d08 to
8071003
Compare
59b4fd3
8071003 to
59b4fd3
Compare
29851da
59b4fd3 to
29851da
Compare
dc40418 to
f0512b6
Compare
11f3247
f0512b6 to
11f3247
Compare
1d33d8c
11f3247 to
1d33d8c
Compare
b838b95
1d33d8c to
b838b95
Compare
09484b3
b838b95 to
09484b3
Compare
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
6bc430f
09484b3 to
6bc430f
Compare
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.



This PR contains the following updates:
13.5.5→13.7.05.0.5→5.0.721.0.1→21.0.221.0.1→21.0.24.3.0→4.3.119.2.15→19.2.17^6.3.8→^6.4.6^1.17.0→^1.18.03.8.3→3.8.4^1.4.3→^1.5.0^19.2.6→^19.2.7^19.2.6→^19.2.74.3.0→4.3.18.3.0→8.4.14.95.0→4.100.04.15.0→4.16.0Release Notes
withastro/astro (@astrojs/cloudflare)
v13.7.0Compare Source
Minor Changes
#16571
d4b0cd1Thanks @MA2153! - Sets immutable cache headers for static assetsStatic assets under
_astrocan be cached to improve performance. The adapter now automatically injects aCache-Controlheader at build time when possible.Patch Changes
#16968
7a5c001Thanks @astrobot-houston! - Fixes a build crash when usingexperimental.advancedRoutingwith a customfetchFilethat statically importscffrom@astrojs/cloudflare/fetch. The circular dependency between@astrojs/cloudflare/fetchandastro/app/entrypointcausedcreateApporcreateGetEnvto beundefinedat module evaluation time. Initialization is now deferred to the firstcf()call, breaking the cycle.Updated dependencies []:
v13.6.1Compare Source
Patch Changes
#16914
4bdd240Thanks @matthewp! - Fixesastro/fetchandastro/honobeing discovered at runtime during dev instead of pre-bundled#16693
9e6edc2Thanks @ArmandPhilippot! - Fixes a link in the documentation specifying where to open an issue for the adapter.Updated dependencies []:
v13.6.0Compare Source
Minor Changes
01aa164Thanks @matthewp! - Adds@astrojs/cloudflare/fetchand@astrojs/cloudflare/honoexports for composing Cloudflare-specific setup with Astro's advanced routing handlers.@astrojs/cloudflare/fetchFor use with
astro/fetchin a custom fetch handler:@astrojs/cloudflare/honoFor use with
astro/honoas Hono middleware:Both handlers configure SESSION KV bindings, static asset serving via the ASSETS binding,
locals.cfContext, client address,waitUntil, and prerendered error page fetch.Patch Changes
#16868
f9bae95Thanks @helio-cf! - Fixes user options passed tocloudflare({...})(remoteBindings,inspectorPort,persistState,configPath,auxiliaryWorkers) being silently ignored duringastro preview. The adapter now resolves the full@cloudflare/vite-pluginconfig once at integration setup time and reuses that single resolved value across the dev/build plugin, the prerenderer's preview server, and theastro previewentrypoint, so user options can no longer be dropped at one of the call sites.#16468
4cff3a1Thanks @matthewp! - Fixes static Cloudflare builds with server islands or image endpoints that failed at preview time due to mismatched output directories.Updated dependencies [
f732f3c]:withastro/astro (@astrojs/react)
v5.0.7Compare Source
Patch Changes
17a0fbdThanks @ocavue! - Bumpsdevaluedependency to v5.8.1v5.0.6Compare Source
Patch Changes
f732f3c]:conventional-changelog/commitlint (@commitlint/cli)
v21.0.2Compare Source
Bug Fixes
conventional-changelog/commitlint (@commitlint/config-conventional)
v21.0.2Compare Source
Note: Version bump only for package @commitlint/config-conventional
tailwindlabs/tailwindcss (@tailwindcss/vite)
v4.3.1Compare Source
Added
--silentoption to suppress output in@tailwindcss/cli(#20100)Fixed
Module#registerHooksinstead ofModule#registeron Node 26+ (#20028)@applyto be used with CSS mixins (#19427)not-*correctly negates@containerqueries, includingstyle(…)queries (#20059)drop-shadow-*color utilities work with custom shadow values containingcalc(…)(#20080)@tailwindcss/vite(#20103)@tailwindcss/webpackcan be installed in Rspack projects without requiringwebpackas a peer dependency (#20027)calc(…)expressions (e.g.px-[calc(1rem+0px)]→px-[calc(1rem+0)]) (#20127)left-[99999px]→left-[99999px], notleft-24999.75) (#20130)@tailwindcss/cliin--watchmode recovers when a tracked dependency is deleted and restored (#20137)@tailwindcss/clibinaries are ignored when scanning for class candidates (#20139)addClass(…)andremoveClass(…)calls (#20198)@variantto be used insideaddBase(#19480)@sourceglobs with symlinks are preserved (#20203)@sourcerules can re-include files excluded by earlier@source notrules (#20203)@utilityrules (#20205)inset-shadow-noneand other inset shadows work correctly (#20208)@sourcedirectories are scanned even when ignored by git (#20214)@sourceglobs ending in**/*preserve dynamic path segments to avoid scanning too many files (#20217)calc(…)divisions when the result would require high precision (e.g.w-[calc(100%/3.5)]→w-[calc(100%/3.5)], notw-[28.571428571428573%]) (#20221)@tailwindcss/postcss(#20228)Changed
0instead ofcalc(var(--spacing) * 0)for spacing utilities likem-0andleft-0(#20196)var(--spacing)instead ofcalc(var(--spacing) * 1)for spacing utilities likem-1andleft-1(#20196)withastro/astro (astro)
v6.4.6Compare Source
Patch Changes
#16765
b10e86eThanks @fkatsuhiro! - Fixes an issue where renaming an image file while the dev server is running triggers a build error. Now Astro correctly hot-reloads the image without crashing.#17026
add3df1Thanks @matthewp! - HardensaddAttributeto drop attribute names containing characters that are invalid per the HTML spec (",',>,/,=, whitespace)#17033
ffda27bThanks @matthewp! - Validates the request origin againstallowedDomainsbefore fetching prerendered error pages. WhenallowedDomainsis configured and the Host header matches, the original origin is used. Otherwise, the fetch falls back tolocalhost.v6.4.5Compare Source
Patch Changes
#16985
4ecff32Thanks @maximslo! - Fixes theexperimental.loggerdestination not being used for the "Server listening on..." startup message. The logger is now resolved before the server starts listening, andadapterLoggerre-creates itself when the underlying logger changes so the startup message uses the correct destination.#16947
e0703a6Thanks @ematipico! - FixesAstro.request.urlnot reflecting validatedX-Forwarded-Proto/X-Forwarded-Hostheaders whensecurity.allowedDomainsis configured. Previously, onlyAstro.urlwas updated with the forwarded origin whileAstro.request.urlretained the socket-derived URL, causing the two to diverge behind TLS-terminating proxies.#16997
dc45246Thanks @matthewp! - Reverts a change toisNoderuntime detection that caused a significant build time regression for Cloudflare adapter users with large prerendered sitesv6.4.4Compare Source
Patch Changes
#16926
1b39ae8Thanks @narendraio! - PreventsApp.match()from throwing on request paths that contain an invalid percent-sequence.#16924
2c0bc94Thanks @astrobot-houston! - Fixes an issue where editing a client-side component (e.g. withclient:idle,client:load, etc.) caused an unnecessary full program reload of the backend during development.#16958
2c1d50fThanks @fkatsuhiro! - Fixes a bug where static file endpoints usinggetStaticPathswith.htmlin dynamic param values (e.g.{ path: 'file.html' }) would fail with aNoMatchingStaticPathFounderror during build. The.htmlsuffix is no longer incorrectly stripped from endpoint route pathnames.#16855
c610cdaThanks @astrobot-houston! - Fixes dynamic routes returning 500 "TypeError: Missing parameter" when using domain-based i18n routing in SSR.#16946
606c37bThanks @ematipico! - FixesAstro.routePatternto preserve original casing of dynamic parameter names from filenames. Previously, a file atsrc/pages/blog/[postId].astrowould return/blog/[postid]forAstro.routePatterndue to an internal.toLowerCase()call. It now correctly returns/blog/[postId].#16720
16d49b6Thanks @thomas-callahan-collibra! - Fix an issue where dynamic routes would return the string[object Object]instead of the expected content, in certain runtimes.#16703
17390a6Thanks @henrybrewer00-dotcom! - Fixes styles being stripped when the project root is started with a path whose case differs from the actual filesystem case (e.g. runningastro devfromd:\dev\appwhile the folder on disk isD:\dev\app).#16855
c610cdaThanks @astrobot-houston! - FixesAstro.currentLocalereturning the default locale instead of the domain's locale on dynamic routes served from a mapped domain.v6.4.3Compare Source
Patch Changes
#16900
17a0fbdThanks @ocavue! - Bumpsdevaluedependency to v5.8.1#16016
0d85e1bThanks @felmonon! - Fix a false positive in the dev toolbar accessibility audit for anchors with text inside closed<details>elements.#16911
79c6c46Thanks @astrobot-houston! - Fixes a bug whereexperimental.advancedRoutingwithastro/honohandlers threwTypeError: Cannot read properties of undefined (reading 'route')for unmatched routes instead of rendering the custom 404 page.#16899
239c469Thanks @matthewp! - Fixes a false "does not call the middleware() handler" warning when usingastro()in a customsrc/app.tsand the first request is a redirect route.#16887
493acdbThanks @astrobot-houston! - FixesredirectToDefaultLocalenot working after the Advanced Routing refactoring.#16908
ef53ab9Thanks @florian-lefebvre! - Improves optimized fallbacks generation when using the Fonts API by using better metrics for bold variantslucide-icons/lucide (lucide-react)
v1.18.0: Version 1.18.0Compare Source
What's Changed
play-officon by @Ahmed-Dghaies in #4412@nextfrom installation instructions for@lucide/svelteby @alecglassford in #4432webcam-officon by @jordan-burnett in #4242New Contributors
Full Changelog: lucide-icons/lucide@1.17.0...1.18.0
prettier/prettier (prettier)
v3.8.4Compare Source
radix-ui/primitives (radix-ui)
v1.5.0Context Menu
Added support for a controlled
openprop onContextMenu.Root. This is intended for reading the open state and closing the menu programmatically, though we discourage opening the menu programmatically since opening the menu depends on user interaction to position the menu.Fixed a bug in where submenus remained expanded after re-opening on long-press touch events.
Dialog
One-Time Password Field
"Text"clipboard format by reading the pasted value as"text/plain".Popper
data-sideanddata-alignonPopperAnchorelementPresence
Presencewas given a child with an unstable ref.Radio Group
Added unstable
RadioGroupItemProvider,RadioGroupItemTriggerandRadioGroupItemBubbleInputparts. These expose the previously internal composition of a radio item that included a visually hiddeninputso consumers can directly access and recompose them. TheRadioGroupItemcomponent continues to render them by default.Select
Added unstable
ProviderandBubbleInputparts to Select. These expose the previously internal composition that included a visually hiddenselectso consumers can directly access and recompose them.Selectcontinues to render them by default.Added support for presence-based exit animations.
Fixed the bubble hidden input so that submits an empty string when no value is selected.
Fixed select closing unexpectedly after touch-scrolling its content when rendered inside an open shadow DOM.
Fixed
SelectValuelogging invalid prop errors when used with bothasChildand a placeholderSlider
Added unstable
ThumbProvider,ThumbTrigger, andBubbleInputparts to Slider.SliderThumbwas previously a single component that implicitly rendered a hidden native input for form submission. It is now composed from these new parts, which are exposed so consumers can decouple the visually hidden input from the thumb.SliderThumbcontinues to render them by default.Added
focusVisiblefor non-keyboard interactions with slider thumbs for progressively enabling styles using:focus-visiblealongside programmatic focus management.Fixed a Slider bug where very small
stepvalues made the thumbs unresponsive.Fixed focus bugs for sliders in a scrollable context.
Slot
Slottableitems via a render prop. This allows a slotted element to be wrapped while still merging Slot props and refs onto it.Slotcreating a new ref callback on every render.Switch
Added unstable
Provider,TriggerandBubbleInputparts to Switch. These expose the previously internal composition that included a visually hiddeninputso consumers can directly access and recompose them. TheSwitchcomponent continues to render them by default.Tooltip
skipDelayDuration={0}works as expected. Previously, the open delay could still be skipped when moving between triggers.Other changes
useSyncExternalStore(React 18+) instead of importing the CJS-onlyuse-sync-external-store/shim, with a fallback for React < 18. The shim calledrequire("react")at module-evaluation time, which crashed ESM-only browser bundles when importing some components from theradix-uipackage.aria-controlswhen their content is removed from the DOM (credit to @dodomorandi for the original PR).use clientdirectives to modules causing errors in RSC modules.alignprop toMenu.SubContent.data-stateattribute for Scroll Area scrollbars.Toast.Announce.facebook/react (react)
v19.2.7Compare Source
facebook/react (react-dom)
v19.2.7Compare Source
nodejs/undici (undici)
v8.4.1Compare Source
What's Changed
New Contributors
Full Changelog: nodejs/undici@v8.4.0...v8.4.1
v8.4.0Compare Source
What's Changed
npm ciinstead ofnpm installby @aduh95 in #5315addAbortListenerutil by @aduh95 in #5317kEnumerablePropertyatomically by @aduh95 in #5332regex.execinstead ofstring.matchby @aduh95 in #5331preferH2connector option to offer h2 first in ALPN by @Antamansid in #5327New Contributors
Full Changelog: nodejs/undici@v8.3.0...v8.4.0
cloudflare/workers-sdk (wrangler)
v4.100.0Compare Source
Minor Changes
#14119
2047a32Thanks @tahmid-23! - Serve local R2 bucket objects publicly via the dev serverWhen running
wrangler devlocally, objects in each local R2 binding are now reachable under/cdn-cgi/local/r2/public/<bucket-id>/<key>on the existing dev server, simulating a public bucket. The<bucket-id>is the bucket'sbucket_namewhen set, otherwise itsbinding. Bindings configured withremote: trueare not exposed.#14202
e8561c2Thanks @jamesopstad! - Add experimental--x-new-configflag for authoring config in TypeScriptThis is an experimental, opt-in feature. When enabled,
wrangler dev,wrangler build,wrangler deploy,wrangler versions upload, andwrangler versions deployload the Worker's configuration from acloudflare.config.tsfile instead ofwrangler.json/wrangler.jsonc/wrangler.toml. Additionally, an optionalwrangler.config.tsfile can be provided for Wrangler-specific dev/build configuration.cloudflare.config.ts(required) — Worker runtime configuration (bindings, triggers, observability, placement, limits, compatibility, routes, etc.). Authored viadefineWorkerfromwrangler/experimental-config.wrangler.config.ts(optional) — Tooling / bundling / dev-server configuration (noBundle,minify,alias,define,rules,tsconfig,build,dev,assetsDirectory, etc.). Authored viadefineWranglerConfigfromwrangler/experimental-config.Per-environment configuration is via
ctx.modebranching inside the function form of either file.Example
cloudflare.config.ts:Example
wrangler.config.ts:Because this is experimental, the flag, the config formats, and the
wrangler/experimental-configexports may change in any release.Patch Changes
#14185
98c9afeThanks @penalosa! - Use the shared env-credential resolver from@cloudflare/workers-authNo user-facing behaviour change. Credential resolution order (global API key + email →
CLOUDFLARE_API_TOKEN→ stored OAuth token) is preserved.#14184
e305126Thanks @penalosa! - Add an experimentalcf-wranglerdelegate entrypoint for projects that can't use@cloudflare/vite-plugin(service workers, old compatibility dates, Python, Rust, etc.).cf-wrangler devstarts the same local dev server aswrangler dev— it sits directly on wrangler's internal dev server, so the bundling and runtime behaviour are identical — but exposes a deliberately narrow CLI surface (--mode,--port,--host,--local) for a parent CLI to delegate to, and other dev server config options are read from the wrangler config file.This replaces the separate
@cloudflare/wrangler-bundlerpackage. This is an internal integration point and is not intended to be run directly by users.#14246
f3990b2Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#14256
4597f08Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#14243
25722acThanks @com6056! - FiConfiguration
📅 Schedule: (UTC)
* * * * 0,6)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.