chore(deps): bump the all-docs-site-dependencies group in /docs-site with 5 updates by dependabot[bot] · Pull Request #3349 · github/gh-aw-firewall

dependabot · 2026-05-18T19:40:58Z

Bumps the all-docs-site-dependencies group in /docs-site with 5 updates:

Package	From	To
@astrojs/check	`0.9.7`	`0.9.9`
@astrojs/starlight	`0.37.7`	`0.39.2`
astro	`5.18.1`	`6.3.5`
astro-mermaid	`1.1.0`	`2.0.1`
mermaid	`11.13.0`	`11.15.0`

Updates @astrojs/check from 0.9.7 to 0.9.9

Release notes

Sourced from @astrojs/check's releases.

@astrojs/check@0.9.9

Patch Changes

#16471 f56bb3f Thanks @delucis! - Adds support for TypeScript v6 to peer dependencies range

Updated dependencies [8c62159]:

@astrojs/language-server@2.16.7

Changelog

Sourced from @astrojs/check's changelog.

0.9.9

Patch Changes

#16471 f56bb3f Thanks @delucis! - Adds support for TypeScript v6 to peer dependencies range

Updated dependencies [8c62159]:

@astrojs/language-server@2.16.7

0.9.8

Patch Changes

#15892 a2f597d Thanks @Princesseuh! - Fixes Astro not being able to find astro check sometimes

Updated dependencies [7b4b254]:

@astrojs/language-server@2.16.5

Commits

c1f2e4f [ci] release (#16467)
f56bb3f Widen typescript peer dependency range to allow v6 (#16471)
184700c fix(deps): update language tools (#16230)
88fcc98 fix integrations links across docs (#16098)
b9e96da fix(deps): update dependency vitest to v4 (#15372)
09ecdd7 [ci] release (#15889)
a2f597d fix(check): Revert publint lint fix (#15892)
See full diff in compare view

Updates @astrojs/starlight from 0.37.7 to 0.39.2

Release notes

Sourced from @astrojs/starlight's releases.

@astrojs/starlight@0.39.2

Patch Changes

#3890 2d05e18 Thanks @tats-u! - Fixes CSS selector for text-autospace styles in Chromium browsers

@astrojs/starlight@0.39.1

Patch Changes

#3885 010eed1 Thanks @ArmandPhilippot! - Fixes the version mentioned in an error message related to autogenerated sidebar groups support.

#3887 b3c6990 Thanks @delucis! - Adds 13 new icons: clock, desktop, mobile-android, window, database, server, code-branch, notes, question, question-circle, analytics, padlock, and solidjs.

@astrojs/starlight@0.39.0

Minor Changes
#3618 dcf6d09 Thanks @HiDeoo! - ⚠️ BREAKING CHANGE: This release changes how autogenerated links work in Starlight’s sidebar configuration.

If you have sidebar groups using the autogenerate key, you must now wrap that configuration in an items array:
{
    label: 'My group',
-   autogenerate: { directory: 'some-dir' },
+   items: [{ autogenerate: { directory: 'some-dir' } }],
}
This change unlocks the possibility to mix autogenerated links and other links in a single group, for example:
{
  label: 'Mixed group',
  items: [
    'example-page',
    { autogenerate: { directory: 'examples' } },
    { label: 'More examples', link: 'https://example.com' },
  ],
}
This release also updates the shape of autogenerated sidebar entries in route data. Autogenerated links and groups in Astro.locals.starlightRoute.sidebar now include an autogenerate object with the configured directory value:
{
  type: 'link',
  label: 'Example',
  href: '/examples/example/',
  isCurrent: false,
  autogenerate: { directory: 'examples' }
}

... (truncated)

Changelog

Sourced from @astrojs/starlight's changelog.

0.39.2

Patch Changes

#3890 2d05e18 Thanks @tats-u! - Fixes CSS selector for text-autospace styles in Chromium browsers

0.39.1

Patch Changes

#3885 010eed1 Thanks @ArmandPhilippot! - Fixes the version mentioned in an error message related to autogenerated sidebar groups support.

#3887 b3c6990 Thanks @delucis! - Adds 13 new icons: clock, desktop, mobile-android, window, database, server, code-branch, notes, question, question-circle, analytics, padlock, and solidjs.

0.39.0

Minor Changes
#3618 dcf6d09 Thanks @HiDeoo! - ⚠️ BREAKING CHANGE: This release changes how autogenerated links work in Starlight’s sidebar configuration.

If you have sidebar groups using the autogenerate key, you must now wrap that configuration in an items array:
{
    label: 'My group',
-   autogenerate: { directory: 'some-dir' },
+   items: [{ autogenerate: { directory: 'some-dir' } }],
}
This change unlocks the possibility to mix autogenerated links and other links in a single group, for example:
{
  label: 'Mixed group',
  items: [
    'example-page',
    { autogenerate: { directory: 'examples' } },
    { label: 'More examples', link: 'https://example.com' },
  ],
}
This release also updates the shape of autogenerated sidebar entries in route data. Autogenerated links and groups in Astro.locals.starlightRoute.sidebar now include an autogenerate object with the configured directory value:
{
  type: 'link',
  label: 'Example',
  href: '/examples/example/',

... (truncated)

Commits

76ff51e [ci] release (#3891)
2d05e18 Make sure to enable text-autospace even in non-Firefox browsers (#3890)
0c0acc0 [ci] release (#3886)
b3c6990 Add new icons to Starlight’s built-in set (#3887)
010eed1 fix: update the version mentioned in autogenerate error message (#3885)
c89c144 [ci] release (#3883)
dcf6d09 Refactor autogenerated sidebar groups (#3618)
6672c35 Update i18next (#3858)
6b18976 [ci] format
417a66c Enable text-autospace in Chinese and Japanese documents (#3872)
Additional commits viewable in compare view

Updates astro from 5.18.1 to 6.3.5

Release notes

Sourced from astro's releases.

astro@6.3.5

Patch Changes

#16771 07c8805 Thanks @ematipico! - Fixes position prop on <Image> and <Picture> components breaking Content Security Policy (CSP).

#16593 50924ce Thanks @yanthomasdev! - Improves error messages with more consistent and correct writing.

#16757 5d661cd Thanks @astrobot-houston! - Fixes dev server serving stale content when SSR-only modules change (e.g. .astro files outside the project root in a monorepo, or dynamically imported components).

Previously, the astro:hmr-reload plugin returned an empty array after detecting SSR-only module changes, which prevented Vite's updateModules from propagating the invalidation to the SSR module runner. The runner's evaluated module cache stayed stale, so subsequent requests continued returning old content.

Now the plugin returns the SSR-only modules so Vite can process them through updateModules, which properly invalidates the module runner's cache and ensures fresh content on the next request.

astro@6.3.4

Patch Changes
#16723 0f10bfe Thanks @matthewp! - Adds fetchFile option to experimental.advancedRouting to customize or disable the entrypoint file
export default defineConfig({
  experimental: {
    advancedRouting: {
      fetchFile: 'fetch.ts',
    },
  },
});
#16723 0f10bfe Thanks @matthewp! - Fixes Hono cache() middleware to follow the standard wrapper pattern
#16723 0f10bfe Thanks @matthewp! - Adds App.Providers interface for typing custom context providers on Astro and ctx
declare namespace App {
  interface Providers {
    oauth: import('./lib/oauth').OAuthSession;
  }
}
#16723 0f10bfe Thanks @matthewp! - Adds FetchState.response property, set automatically after pages() or middleware() completes
const response = await middleware(state, (s) => pages(s));
console.log(state.response === response); // true
#16723 0f10bfe Thanks @matthewp! - Adds Fetchable type export for typing the advanced routing entrypoint

... (truncated)

Changelog

Sourced from astro's changelog.

6.3.5

Patch Changes

#16771 07c8805 Thanks @ematipico! - Fixes position prop on <Image> and <Picture> components breaking Content Security Policy (CSP).

#16593 50924ce Thanks @yanthomasdev! - Improves error messages with more consistent and correct writing.

#16757 5d661cd Thanks @astrobot-houston! - Fixes dev server serving stale content when SSR-only modules change (e.g. .astro files outside the project root in a monorepo, or dynamically imported components).

Previously, the astro:hmr-reload plugin returned an empty array after detecting SSR-only module changes, which prevented Vite's updateModules from propagating the invalidation to the SSR module runner. The runner's evaluated module cache stayed stale, so subsequent requests continued returning old content.

Now the plugin returns the SSR-only modules so Vite can process them through updateModules, which properly invalidates the module runner's cache and ensures fresh content on the next request.

6.3.4

Patch Changes
#16723 0f10bfe Thanks @matthewp! - Adds fetchFile option to experimental.advancedRouting to customize or disable the entrypoint file
export default defineConfig({
  experimental: {
    advancedRouting: {
      fetchFile: 'fetch.ts',
    },
  },
});
#16723 0f10bfe Thanks @matthewp! - Fixes Hono cache() middleware to follow the standard wrapper pattern
#16723 0f10bfe Thanks @matthewp! - Adds App.Providers interface for typing custom context providers on Astro and ctx
declare namespace App {
  interface Providers {
    oauth: import('./lib/oauth').OAuthSession;
  }
}
#16723 0f10bfe Thanks @matthewp! - Adds FetchState.response property, set automatically after pages() or middleware() completes
const response = await middleware(state, (s) => pages(s));
console.log(state.response === response); // true
#16723 0f10bfe Thanks @matthewp! - Adds Fetchable type export for typing the advanced routing entrypoint

... (truncated)

Commits

5b4122e [ci] release (#16772)
5d661cd Fix dev server serving stale content for files outside project root (#16757)
be5ad21 [ci] format
50924ce Overhaul errors for consistency and correctness (#16593)
23c0bda [ci] format
07c8805 fix: position prop with CSP (#16771)
45b7fa9 [ci] release (#16742)
67a1016 [ci] format
0f10bfe feat: advanced routing types and config gaps (#16723)
904d19a Fix actions and server islands in dev mode with prerendered catch-all routes ...
Additional commits viewable in compare view

Updates astro-mermaid from 1.1.0 to 2.0.1

Release notes

Sourced from astro-mermaid's releases.

v2.0.1

2.0.1 (2026-03-20)

Bug Fixes

resolve 8 npm security vulnerabilities in dependencies (#53) (eb9d9f6)

v2.0.0

2.0.0 (2026-03-20)

feat!: upgrade demos to Astro 6 (#43) (0c3f2e3)

fix!: Claude/fix security issues (#49) (5147ea6)

fix!: Claude/upgrade astro mermaid 3v e iy (#50) (19625c4)

BREAKING CHANGES

Demo projects now require Astro 6. The integration itself still supports Astro 4+ via the >=4 peer dependency.

https://claude.ai/code/session_01NywnmskRaJZtFzrQ4GcS2N

docs: add AGENTS.md, CONTRIBUTING.md and update CLAUDE.md

AGENTS.md: AI agent instructions covering architecture, commit conventions, release pipeline, and development workflow

CONTRIBUTING.md: Contributor guidelines with conventional commits format, PR workflow, and project structure reference

CLAUDE.md: Updated project structure (Astro 6 paths), added versioning/release section, added Astro 6 upgrade notes

https://claude.ai/code/session_01NywnmskRaJZtFzrQ4GcS2N

fix: regenerate lockfile for Astro 6 and bump Node to 22 in CI

Regenerate package-lock.json to match astro@^6.0.0 in devDependencies (npm ci was failing due to stale lockfile still referencing astro@5)

Bump Node.js from 20 to 22 in release workflow to satisfy semantic-release@25 engine requirement (^22.14.0 || >= 24.10.0)

https://claude.ai/code/session_01NywnmskRaJZtFzrQ4GcS2N

Icon pack configuration now uses url property instead of loader functions. Existing loader functions are supported via legacy URL extraction but direct function serialization is removed for security.

https://claude.ai/code/session_01NywnmskRaJZtFzrQ4GcS2N

ci: add --legacy-peer-deps to Netlify builds

... (truncated)

Commits

eb9d9f6 fix: resolve 8 npm security vulnerabilities in dependencies (#53)
cff3962 chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates (#51)
b43c328 ci: remove @semantic-release/git and @semantic-release/changelog (#52)
19625c4 fix!: Claude/upgrade astro mermaid 3v e iy (#50)
5147ea6 fix!: Claude/fix security issues (#49)
0c3f2e3 feat!: upgrade demos to Astro 6 (#43)
65c311e Claude/create semver release (#45)
ebe84bc chore: bump version to 1.4.0 (#44)
1623261 Chore: support Astro 6.x and above in peerDependencies (#42)
50bb768 feat: add enableLog option to control client-side logging (#38)
Additional commits viewable in compare view

Updates mermaid from 11.13.0 to 11.15.0

Release notes

Sourced from mermaid's releases.

mermaid@11.15.0

Minor Changes
#7174 0aca217 Thanks @milesspencer35! - feat(sequence): Add support for decimal start and increment values in the autonumber directive

#7512 8e17492 Thanks @aruncveli! - feat(flowchart): add datastore shape

In Data flow diagrams, a datastore/warehouse/file/database is used to represent data persistence. It is denoted by a rectangle with only top and bottom borders, and can be used in flowcharts with A@{ shape: datastore, label: "Datastore" }.

#6440 9ad8dde Thanks @yordis, @lgazo! - feat: add Event Modeling diagram

#7707 27db774 Thanks @txmxthy! - feat(architecture): expose four fcose layout knobs for architecture-beta diagrams (nodeSeparation, idealEdgeLengthMultiplier, edgeElasticity, numIter) so authors can tune layout density and spread overlapping siblings without changing diagram source
#7604 bf9502f Thanks @M-a-c! - feat(class): add nested namespace support for class diagrams via dot notation and syntactic nesting

If you have namespaces in class diagrams that use .s already and want to render them without nesting (≤v11.14.0 behaviour), you can use set class.hierarchicalNamespaces=false in your mermaid config:
config:
  class:
    hierarchicalNamespaces: false
#7272 88cdd3d Thanks @xinbenlv! - feat(sankey): add outlined label style, configurable nodeWidth/nodePadding, and custom node colors
Patch Changes

#7737 e9b0f34 Thanks @ashishjain0512! - fix: prevent unbalanced CSS styles in classDefs

#7737 37ff937 Thanks @ashishjain0512! - fix: create CSS styles using the CSSOM

This removes some invalid CSS and normalizes some CSS formatting.

#7508 bfe60cc Thanks @biiab! - fix(stateDiagram): end note now only closes a note when used on a new line

#7737 faafb5d Thanks @ashishjain0512! - fix(gantt): add iteration limit for excludes field

#7737 65f8be2 Thanks @ashishjain0512! - fix: disallow some CSS at-rules in custom CSS

#7726 1502f32 Thanks @aloisklink! - fix(wardley): fix unnecessary sanitization of text

#7578 1f98db8 Thanks @Gaston202! - fix(class): self-referential class multiplicity labels no longer rendered multiple times

Fixes #7560. Resolves an issue where cardinality labels on self-referential class relationships were rendered three times due to edge splitting in the dagre layout. The fix ensures that each sub-edge only carries its relevant label positions.

#7592 2343e38 Thanks @knsv-bot! - fix(sequence): add background box behind alt/else section title labels in sequence diagrams

#7589 7fb9509 Thanks @NYCU-Chung! - fix(block): prevent column widths from shrinking when mixing different column spans

#7632 3f9e0f1 Thanks @ekiauhce! - fix(sequence): correct messageAlign label position for right-to-left arrows in sequence diagrams

... (truncated)

Commits

41646df Merge pull request #7739 from aloisklink/ci/fix-release
2671f5c docs: fix v11.15.0 release
f4bf04b Merge pull request #7738 from mermaid-js/changeset-release/master
abfb563 Version Packages
60b289f Release Candidate 11.15.0 (#7737)
d37c0db Merge pull request #7730 from aloisklink/fix/fix-edgeLabelRightLeft-changes
5ab5a28 docs: improve nested namespace changeset
18f8b4c fix: revert endEdgeLabelLeft/endEdgeLabelRight change
504b2eb Merge pull request #7726 from aloisklink/fix/correct-unnecessary-html-escapes...
1502f32 fix(wardley): fix unnecessary sanitization of text
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-docs-site-dependencies group in /docs-site with 5 updates: | Package | From | To | | --- | --- | --- | | [@astrojs/check](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check) | `0.9.7` | `0.9.9` | | [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.37.7` | `0.39.2` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.18.1` | `6.3.5` | | [astro-mermaid](https://github.com/joesaby/astro-mermaid) | `1.1.0` | `2.0.1` | | [mermaid](https://github.com/mermaid-js/mermaid) | `11.13.0` | `11.15.0` | Updates `@astrojs/check` from 0.9.7 to 0.9.9 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/astro-check/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/check@0.9.9/packages/language-tools/astro-check) Updates `@astrojs/starlight` from 0.37.7 to 0.39.2 - [Release notes](https://github.com/withastro/starlight/releases) - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md) - [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.39.2/packages/starlight) Updates `astro` from 5.18.1 to 6.3.5 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.3.5/packages/astro) Updates `astro-mermaid` from 1.1.0 to 2.0.1 - [Release notes](https://github.com/joesaby/astro-mermaid/releases) - [Commits](joesaby/astro-mermaid@v1.1.0...v2.0.1) Updates `mermaid` from 11.13.0 to 11.15.0 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.13.0...mermaid@11.15.0) --- updated-dependencies: - dependency-name: "@astrojs/check" dependency-version: 0.9.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-docs-site-dependencies - dependency-name: "@astrojs/starlight" dependency-version: 0.39.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-docs-site-dependencies - dependency-name: astro dependency-version: 6.3.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-docs-site-dependencies - dependency-name: astro-mermaid dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-docs-site-dependencies - dependency-name: mermaid dependency-version: 11.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-docs-site-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-18T20:18:28Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 18, 2026

lpcox closed this May 18, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/docs-site/all-docs-site-dependencies-04f8506d58 branch May 18, 2026 20:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the all-docs-site-dependencies group in /docs-site with 5 updates#3349

chore(deps): bump the all-docs-site-dependencies group in /docs-site with 5 updates#3349
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/docs-site/all-docs-site-dependencies-04f8506d58

dependabot Bot commented on behalf of github May 18, 2026

Uh oh!

dependabot Bot commented on behalf of github May 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 18, 2026

@​astrojs/check@​0.9.9

Patch Changes

0.9.9

Patch Changes

0.9.8

Patch Changes

@​astrojs/starlight@​0.39.2

Patch Changes

@​astrojs/starlight@​0.39.1

Patch Changes

@​astrojs/starlight@​0.39.0

Minor Changes

0.39.2

Patch Changes

0.39.1

Patch Changes

0.39.0

Minor Changes

astro@6.3.5

Patch Changes

astro@6.3.4

Patch Changes

6.3.5

Patch Changes

6.3.4

Patch Changes

v2.0.1

2.0.1 (2026-03-20)

Bug Fixes

v2.0.0

2.0.0 (2026-03-20)

BREAKING CHANGES

mermaid@11.15.0

Minor Changes

Patch Changes

Uh oh!

dependabot Bot commented on behalf of github May 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@astrojs/check@0`.9.9

`@astrojs/starlight@0`.39.2

`@astrojs/starlight@0`.39.1

`@astrojs/starlight@0`.39.0