chore(deps): bump the npm group with 5 updates by dependabot[bot] · Pull Request #1271 · html2rss/html2rss.github.io

dependabot · 2026-09-30T07:13:09Z

Bumps the npm group with 5 updates:

Package	From	To
@astrojs/starlight	`0.42.2`	`0.42.4`
astro	`7.3.3`	`7.3.5`
prettier	`3.9.8`	`3.9.9`
prettier-plugin-astro	`1.0.1`	`1.1.0`
vitest	`5.0.1`	`5.0.2`

Updates @astrojs/starlight from 0.42.2 to 0.42.4

Release notes

Sourced from @astrojs/starlight's releases.

@astrojs/starlight@0.42.4

Patch Changes

#4149 fa10e87 Thanks @ematipico! - Optimizes rendering of large nested sidebars

#4215 f791de6 Thanks @HiDeoo! - Adds a new seti:coffee icon for CoffeeScript files in the <FileTree> component.

#4215 f791de6 Thanks @HiDeoo! - Fixes <FileTree> icons for .ejs and npm-debug.log files displaying the default file icon.

@astrojs/starlight@0.42.3

Patch Changes

#4211 33e21ec Thanks @HiDeoo! - Fixes a potential page freeze due to table of contents highlighting when a <PageTitle> component override does not render a heading with the required id="_top".

Changelog

Sourced from @astrojs/starlight's changelog.

0.42.4

Patch Changes

#4149 fa10e87 Thanks @ematipico! - Optimizes rendering of large nested sidebars

#4215 f791de6 Thanks @HiDeoo! - Adds a new seti:coffee icon for CoffeeScript files in the <FileTree> component.

#4215 f791de6 Thanks @HiDeoo! - Fixes <FileTree> icons for .ejs and npm-debug.log files displaying the default file icon.

0.42.3

Patch Changes

#4211 33e21ec Thanks @HiDeoo! - Fixes a potential page freeze due to table of contents highlighting when a <PageTitle> component override does not render a heading with the required id="_top".

Commits

3ec633b [ci] release (#4217)
f791de6 Fix file icons generator (#4215)
fa10e87 perf: avoid repeated sidebar subtree scans (#4149)
fafea30 Add benchmark for sidebar sublist processing (#4216)
b0d3b8e [ci] release (#4212)
33e21ec Fix toc highlighting potential page freeze (#4211)
See full diff in compare view

Updates astro from 7.3.3 to 7.3.5

Release notes

Sourced from astro's releases.

astro@7.3.5

Patch Changes
#17736 2b8b2e8 Thanks @ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

Users must import the component with the new ?container query string:
import { experimental_AstroContainer } from "astro/container";
import TodoList from "../components/TodoList.astro?container";
const container = await experimental_AstroContainer.create();
const _string = container.renderComponent(TodoList);
astro@7.3.4

Patch Changes

#18063 40896ac Thanks @adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

#18053 cf5d72f Thanks @Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

#18086 795a7e4 Thanks @ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&) and named (&) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

#18074 0429805 Thanks @SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

#18007 2245837 Thanks @L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

#18096 43657c4 Thanks @matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

#18043 8a53a8b Thanks @astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

#18029 c08252d Thanks @matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

Updated dependencies [3fd16ee, 8358d59]:

@astrojs/markdown-satteri@0.4.2

Changelog

Sourced from astro's changelog.

7.3.5

Patch Changes
#17736 2b8b2e8 Thanks @ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

Users must import the component with the new ?container query string:
import { experimental_AstroContainer } from "astro/container";
import TodoList from "../components/TodoList.astro?container";
const container = await experimental_AstroContainer.create();
const _string = container.renderComponent(TodoList);
7.3.4

Patch Changes

#18063 40896ac Thanks @adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

#18053 cf5d72f Thanks @Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

#18086 795a7e4 Thanks @ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&) and named (&) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

#18074 0429805 Thanks @SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

#18007 2245837 Thanks @L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

#18096 43657c4 Thanks @matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

#18043 8a53a8b Thanks @astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

#18029 c08252d Thanks @matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

Updated dependencies [3fd16ee, 8358d59]:

@astrojs/markdown-satteri@0.4.2

Commits

c2e0164 [ci] release (#18113)
2b8b2e8 feat: add render component (#17736)
790c6f7 [ci] release (#18035)
9d17bf1 Update dependency obug to v3 (#18100)
43657c4 Fix i18n domain host validation (#18096)
00393ff Update dependency vitest [SECURITY] (#18026)
40896ac fix(incremental): resolve asset placeholders in modules or compiled CSS (#18063)
0429805 fix(errors): align three error names with their documented reference (#18074)
3eab954 [ci] format
795a7e4 Fix double-escaped ampersands in Markdown image alt and title attributes (#18...
Additional commits viewable in compare view

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

cdd17f2 Release 3.9.9
dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
f9be58f Git blame ignore 3.9.8
88470cb Bump Prettier dependency to 3.9.8
9559cab Clean changelog_unreleased
4fc8ee8 Update dependents count
See full diff in compare view

Updates prettier-plugin-astro from 1.0.1 to 1.1.0

Release notes

Sourced from prettier-plugin-astro's releases.

v1.1.0

Minor Changes

bfbb6c5: Adds support for three astroAllowShorthand formatting modes:

When unset / undefined, the attributes stay as written, i.e <Comp value={value} /> and <Comp {value} /> can co-exist in the same file.

When set to true, attributes that can be written in the shorthand form will automatically be transformed. <Comp value={value} /> will become <Comp {value} />

When set to false, attributes will always be expanded to their full form.

Patch Changes

4b3547e: Fix non-idempotent indentation of multiline comments nested inside CSS rules.

edfb35f: Fixes raw elements being forcefully paired up when self-closed.

Changelog

Sourced from prettier-plugin-astro's changelog.

1.1.0

Minor Changes

bfbb6c5: Adds support for three astroAllowShorthand formatting modes:

When unset / undefined, the attributes stay as written, i.e <Comp value={value} /> and <Comp {value} /> can co-exist in the same file.

When set to true, attributes that can be written in the shorthand form will automatically be transformed. <Comp value={value} /> will become <Comp {value} />

When set to false, attributes will always be expanded to their full form.

Patch Changes

4b3547e: Fix non-idempotent indentation of multiline comments nested inside CSS rules.

edfb35f: Fixes raw elements being forcefully paired up when self-closed.

Commits

12c5a89 Version Packages (#491)
bfbb6c5 fix: make astroAllowShorthand more intuitive (#493)
edfb35f fix: prevent self-closed raw elements from being forcefully paired (#490)
4b3547e fix: preserve multiline CSS comment indentation (#488)
See full diff in compare view

Updates vitest from 5.0.1 to 5.0.2

Release notes

Sourced from vitest's releases.

v5.0.2

🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vitest-dev/vitest#11295 (d1c3e)

reporter:

agent to respect --silent - by @Raj4478 and @AriPerkkio in vitest-dev/vitest#11271 (5b95e)

reporters:

Handle concurrent createReport calls - by @7rulnik in vitest-dev/vitest#11278 (e8e55)

hanging-process to use ESM entrypoint - by @AriPerkkio in vitest-dev/vitest#11316 (4e91e)

spy:

Fix stack overflow when spying Set.prototype.add - by @fengmk2 in vitest-dev/vitest#11299 (a0a93)

ui:

Persist authentication cookie beyond current browser session - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11066 (f8819)

View changes on GitHub

Commits

428e2e5 chore: release v5.0.2 (#11357)
0b79231 fix: bind process in case global is overwritten (#11343)
597df56 docs: correct stale config defaults (#11354)
ea1c44f docs: sequence.setupFiles default is 'list' (#11351)
0fd6b97 fix(detect-async-leaks): ignore process.stdio handles (#11333)
4e91e56 fix(reporters): hanging-process to use ESM entrypoint (#11316)
1a57929 docs(browser): fix locators.exact default (#11338)
5b95efb fix(reporter): agent to respect --silent (#11271)
f58a209 docs: correct benchmark.exclude and watch defaults (#11268)
d1c3ecc fix(jsdom): fix Request with Blob body on jsdom 28+ (#11295)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 5 updates: | Package | From | To | | --- | --- | --- | | [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.42.2` | `0.42.4` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.3` | `7.3.5` | | [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.9` | | [prettier-plugin-astro](https://github.com/withastro/prettier-plugin-astro) | `1.0.1` | `1.1.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.1` | `5.0.2` | Updates `@astrojs/starlight` from 0.42.2 to 0.42.4 - [Release notes](https://github.com/withastro/starlight/releases) - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md) - [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.4/packages/starlight) Updates `astro` from 7.3.3 to 7.3.5 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.3.5/packages/astro) Updates `prettier` from 3.9.8 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.8...3.9.9) Updates `prettier-plugin-astro` from 1.0.1 to 1.1.0 - [Release notes](https://github.com/withastro/prettier-plugin-astro/releases) - [Changelog](https://github.com/withastro/prettier-plugin-astro/blob/main/CHANGELOG.md) - [Commits](withastro/prettier-plugin-astro@v1.0.1...v1.1.0) Updates `vitest` from 5.0.1 to 5.0.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest) --- updated-dependencies: - dependency-name: "@astrojs/starlight" dependency-version: 0.42.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: astro dependency-version: 7.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: prettier-plugin-astro dependency-version: 1.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: vitest dependency-version: 5.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>

mergify · 2026-09-30T07:13:49Z

Merge Queue Status

✅ Entered queue — 2026-09-30 07:13 UTC · Rule: dependabot · triggered by rule refactored queue action rule
✅ Checks passed · on draft merge queue: checking #1271 on main (d6a8090) #1272
✅ Merged — 2026-09-30 07:16 UTC · at 1e4766dc639f02628cc6b5e739928fa7d8a08cf2 · squash

This pull request spent 2 minutes 20 seconds in the queue, including 1 minute 58 seconds running CI.

Required conditions to merge

author=dependabot[bot]
- chore(deps): bump the npm group with 5 updates #1271
base=main
github-review-approved [🛡 GitHub repository ruleset rule main]
- chore(deps): bump the npm group with 5 updates #1271
status-success=build
any of [🛡 GitHub repository ruleset rule main]:
- check-success = @github-actions/build
- check-neutral = @github-actions/build
- check-skipped = @github-actions/build

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 30, 2026

mergify Bot added the queued label Sep 30, 2026

mergify Bot mentioned this pull request Sep 30, 2026

merge queue: checking #1271 on main (d6a8090) #1272

Closed

10 of 14 tasks

mergify Bot merged commit 1e4766d into main Sep 30, 2026
6 checks passed

mergify Bot deleted the dependabot/npm_and_yarn/npm-a42391293d branch September 30, 2026 07:16

mergify Bot removed the queued label Sep 30, 2026

Navigation Menu

chore(deps): bump the npm group with 5 updates - #1271

chore(deps): bump the npm group with 5 updates#1271
mergify[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-a42391293d

dependabot Bot commented on behalf of github Sep 30, 2026

Uh oh!

mergify Bot commented Sep 30, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 30, 2026

@​astrojs/starlight@​0.42.4

Patch Changes

@​astrojs/starlight@​0.42.3

Patch Changes

0.42.4

Patch Changes

0.42.3

Patch Changes

astro@7.3.5

Patch Changes

astro@7.3.4

Patch Changes

7.3.5

Patch Changes

7.3.4

Patch Changes

3.9.9

3.9.9

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

v1.1.0

Minor Changes

Patch Changes

1.1.0

Minor Changes

Patch Changes

v5.0.2

🐞 Bug Fixes

View changes on GitHub

Uh oh!

mergify Bot commented Sep 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge Queue Status

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@astrojs/starlight@0`.42.4

`@astrojs/starlight@0`.42.3

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by `@fisker`)

mergify Bot commented Sep 30, 2026 •

edited

Loading