Skip to content

Chore(deps-dev): Bump the development-dependencies group across 1 directory with 14 updates - #43124

Merged
julien-deramond merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-8cd5a51727
Oct 20, 2026
Merged

Chore(deps-dev): Bump the development-dependencies group across 1 directory with 14 updates#43124
julien-deramond merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-8cd5a51727

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 14 updates in the / directory:

Package From To
@twbs/bui 0.1.1 0.1.4
@vitest/browser 5.0.3 5.0.4
@vitest/browser-playwright 5.0.3 5.0.4
@vitest/coverage-istanbul 5.0.3 5.0.4
astro 7.3.6 7.3.8
lockfile-lint 5.0.1 5.1.0
mime 4.1.0 4.1.1
playwright 1.63.0 1.64.0
postcss 8.5.29 8.5.30
prettier 3.9.9 3.9.10
stylelint-order 8.1.1 8.1.2
typescript-eslint 8.71.1 8.71.2
vitest 5.0.3 5.0.4
zod 4.6.5 4.6.7

Updates @twbs/bui from 0.1.1 to 0.1.4

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​twbs/bui since your current version.


Updates @vitest/browser from 5.0.3 to 5.0.4

Release notes

Sourced from @​vitest/browser's releases.

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates @vitest/browser-playwright from 5.0.3 to 5.0.4

Release notes

Sourced from @​vitest/browser-playwright's releases.

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates @vitest/coverage-istanbul from 5.0.3 to 5.0.4

Release notes

Sourced from @​vitest/coverage-istanbul's releases.

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates astro from 7.3.6 to 7.3.8

Release notes

Sourced from astro's releases.

astro@7.3.8

Patch Changes

  • #18293 28e7410 Thanks @​astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

  • #18298 0e9e857 Thanks @​matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

  • #18263 882dd98 Thanks @​florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

  • #18290 31f13c3 Thanks @​astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

astro@7.3.7

Patch Changes

  • #18266 cba76cc Thanks @​astro-factory! - Fixes a build error when a Markdown content collection entry loaded with glob({ deferRender: true }) has a layout frontmatter property. layout is now ignored for content collection entries, as documented.

  • #18287 38f6793 Thanks @​astro-factory! - Fixes astro add cloudflare failing to install dependencies with pnpm v11+ by approving the workerd build script, and shows the package manager's error output when astro add fails to install dependencies

  • #18222 fcf6ed6 Thanks @​mingjunlu! - Fixes an issue where AVIF images were served as image/heif instead of image/avif in the dev server.

  • #18240 de4df06 Thanks @​astro-factory! - Fixes the cache() handler from astro/hono and astro/fetch throwing a TypeError when a cache provider is configured. It now registers the cache provider before rendering, so Astro.cache is available to downstream handlers like pages().

  • #18268 547b572 Thanks @​astro-factory! - Fixes security.checkOrigin rejecting cross-origin requests with non-form content types such as application/json. As documented, the check only applies to unsafe requests that have no content-type header or one of application/x-www-form-urlencoded, multipart/form-data, or text/plain.

Changelog

Sourced from astro's changelog.

7.3.8

Patch Changes

  • #18293 28e7410 Thanks @​astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

  • #18298 0e9e857 Thanks @​matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

  • #18263 882dd98 Thanks @​florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

  • #18290 31f13c3 Thanks @​astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

7.3.7

Patch Changes

  • #18266 cba76cc Thanks @​astro-factory! - Fixes a build error when a Markdown content collection entry loaded with glob({ deferRender: true }) has a layout frontmatter property. layout is now ignored for content collection entries, as documented.

  • #18287 38f6793 Thanks @​astro-factory! - Fixes astro add cloudflare failing to install dependencies with pnpm v11+ by approving the workerd build script, and shows the package manager's error output when astro add fails to install dependencies

  • #18222 fcf6ed6 Thanks @​mingjunlu! - Fixes an issue where AVIF images were served as image/heif instead of image/avif in the dev server.

  • #18240 de4df06 Thanks @​astro-factory! - Fixes the cache() handler from astro/hono and astro/fetch throwing a TypeError when a cache provider is configured. It now registers the cache provider before rendering, so Astro.cache is available to downstream handlers like pages().

  • #18268 547b572 Thanks @​astro-factory! - Fixes security.checkOrigin rejecting cross-origin requests with non-form content types such as application/json. As documented, the check only applies to unsafe requests that have no content-type header or one of application/x-www-form-urlencoded, multipart/form-data, or text/plain.

Commits
  • 3571e2d [ci] release (#18292)
  • 0e9e857 Keep existing pnpm allowBuilds approvals in astro add (#18298)
  • 882dd98 Replace esbuild with Vite and Rolldown APIs (#18263)
  • 28e7410 fix(astro): provide Astro.cache when rendering error pages (#18293)
  • 31f13c3 Fix glob() loader watcher ignoring patterns starting with an extglob like `!(...
  • 25c19fa [ci] release (#18272)
  • 38f6793 fix(astro): approve workerd builds in astro add cloudflare for pnpm v11+ an...
  • 547b572 Restore content-type gate in security.checkOrigin so JSON requests are not bl...
  • fcf6ed6 fix(assets): return requested format from Sharp transform (#18222)
  • bec7d18 Ignore layout frontmatter in Markdown content collection entries with `defe...
  • Additional commits viewable in compare view

Updates lockfile-lint from 5.0.1 to 5.1.0

Changelog

Sourced from lockfile-lint's changelog.

5.1.0

Minor Changes

  • #222 578511e580a4c3c398ba7f26fc0465e449f39516 Thanks @​deveshsinghal09! - Add opt-in strict SHA-512 integrity validation that detects missing or malformed hashes while allowing Git, local directory, linked workspace and bundled dependencies.

    Exempt Yarn Classic GitHub codeload archives only when pinned to a full 40-hex commit. Resolve npm bundled dependencies against their nearest non-bundled ancestor before flattening: v2/v3 require a non-empty bundleDependencies declaration and an ancestor with valid SHA-512 integrity or an independent source exemption. npm v1 verifies the ancestor b...

    Description has been truncated

@dependabot dependabot Bot added dependencies Dependency updates (set by Dependabot) v6 v6, the main branch labels Oct 20, 2026
@julien-deramond

julien-deramond commented Oct 20, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
Chore(deps-dev): Bump the development-dependencies group across 1 dir…
197ef37 
…ectory with 14 updates

Bumps the development-dependencies group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@twbs/bui](https://github.com/twbs/bui) | `0.1.1` | `0.1.4` |
| [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) | `5.0.3` | `5.0.4` |
| [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `5.0.3` | `5.0.4` |
| [@vitest/coverage-istanbul](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-istanbul) | `5.0.3` | `5.0.4` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.6` | `7.3.8` |
| [lockfile-lint](https://github.com/lirantal/lockfile-lint/tree/HEAD/packages/lockfile-lint) | `5.0.1` | `5.1.0` |
| [mime](https://github.com/broofa/mime) | `4.1.0` | `4.1.1` |
| [playwright](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.29` | `8.5.30` |
| [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` |
| [stylelint-order](https://github.com/hudochenkov/stylelint-order) | `8.1.1` | `8.1.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.1` | `8.71.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.4` |
| [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` |



Updates `@twbs/bui` from 0.1.1 to 0.1.4
- [Commits](https://github.com/twbs/bui/commits)

Updates `@vitest/browser` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/browser)

Updates `@vitest/browser-playwright` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/browser-playwright)

Updates `@vitest/coverage-istanbul` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/coverage-istanbul)

Updates `astro` from 7.3.6 to 7.3.8
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.8/packages/astro)

Updates `lockfile-lint` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/lirantal/lockfile-lint/releases)
- [Changelog](https://github.com/lirantal/lockfile-lint/blob/main/packages/lockfile-lint/CHANGELOG.md)
- [Commits](https://github.com/lirantal/lockfile-lint/commits/lockfile-lint-api@5.1.0/packages/lockfile-lint)

Updates `mime` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/broofa/mime/releases)
- [Changelog](https://github.com/broofa/mime/blob/main/CHANGELOG.md)
- [Commits](broofa/mime@v4.1.0...v4.1.1)

Updates `playwright` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.0)

Updates `postcss` from 8.5.29 to 8.5.30
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.29...8.5.30)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

Updates `stylelint-order` from 8.1.1 to 8.1.2
- [Release notes](https://github.com/hudochenkov/stylelint-order/releases)
- [Changelog](https://github.com/hudochenkov/stylelint-order/blob/master/CHANGELOG.md)
- [Commits](hudochenkov/stylelint-order@8.1.1...8.1.2)

Updates `typescript-eslint` from 8.71.1 to 8.71.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint)

Updates `vitest` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/vitest)

Updates `zod` from 4.6.5 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.5...v4.6.7)

---
updated-dependencies:
- dependency-name: "@twbs/bui"
  dependency-version: 0.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@vitest/browser"
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@vitest/browser-playwright"
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@vitest/coverage-istanbul"
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: astro
  dependency-version: 7.3.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: lockfile-lint
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: mime
  dependency-version: 4.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: playwright
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: postcss
  dependency-version: 8.5.30
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: stylelint-order
  dependency-version: 8.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.71.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Chore(deps-dev): Bump the development-dependencies group with 14 updates Chore(deps-dev): Bump the development-dependencies group across 1 directory with 14 updates Oct 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-8cd5a51727 branch from ff17345 to 197ef37 Compare October 20, 2026 18:49
@julien-deramond
julien-deramond merged commit b2ecd59 into main Oct 20, 2026
10 of 11 checks passed
@julien-deramond
julien-deramond deleted the dependabot/npm_and_yarn/development-dependencies-8cd5a51727 branch October 20, 2026 18:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@julien-deramond julien-deramond julien-deramond approved these changes

Assignees

No one assigned

Labels

dependencies Dependency updates (set by Dependabot) v6 v6, the main branch

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@julien-deramond