build(deps): bump the minor-updates group with 7 updates by dependabot[bot] · Pull Request #2 · Cec1c/Mansus

dependabot · 2026-07-23T09:53:04Z

Bumps the minor-updates group with 7 updates:

Package	From	To
@fontsource-variable/jetbrains-mono	`5.2.8`	`5.3.0`
astro	`7.0.7`	`7.1.3`
katex	`0.17.0`	`0.18.1`
pako	`2.1.0`	`2.2.0`
satori	`0.26.0`	`0.28.2`
satteri	`0.8.1`	`0.9.5`
wrangler	`4.100.0`	`4.113.0`

Updates @fontsource-variable/jetbrains-mono from 5.2.8 to 5.3.0

Commits

See full diff in compare view

Updates astro from 7.0.7 to 7.1.3

Release notes

Sourced from astro's releases.

astro@7.1.3

Patch Changes

#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.

astro@7.1.2

Patch Changes

#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.

#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)

#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().

astro@7.1.1

Patch Changes

#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n

astro@7.1.0

Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader

When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.

This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.ts
import { defineCollection } from 'astro:content';
import { glob } from 'astro/loaders';
const docs = defineCollection({
loader: glob({ pattern: '**/*.md', base: 'src/content/docs', deferRender: true }),
});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store

By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:
// astro.config.mjs

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.3

Patch Changes

#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.

7.1.2

Patch Changes

#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.

#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)

#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().

7.1.1

Patch Changes

#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n

7.1.0

Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader

When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.

This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.ts
import { defineCollection } from 'astro:content';
import { glob } from 'astro/loaders';
const docs = defineCollection({
loader: glob({ pattern: '**/*.md', base: 'src/content/docs', deferRender: true }),
});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store

By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

... (truncated)

Commits

cf9ffc7 [ci] release (#17455)
630b382 Use os.availableParallelism() for image optimization queue to fix OOM in CP...
8a7f7e0 [ci] release (#17411)
ebbd793 chore(deps): update astro-embed (#17436)
311e42c [ci] format
1d62202 chore(deps): update neotraverse to v1 (#17446)
a5f7230 fix(astro): update cookie to v2 (#17445)
91992ef fix(prefetch): swallow fetch-fallback rejection to avoid unhandled 'Load fail...
a89c137 fix(astro): propagate mutated locals to custom error pages (#17402)
91c645a [ci] release (#17403)
Additional commits viewable in compare view

Updates katex from 0.17.0 to 0.18.1

Release notes

Sourced from katex's releases.

v0.18.1

0.18.1 (2026-07-19)

Bug Fixes

htmlData: allow escaped commas in \htmlData (#4236) (87a2b30), closes #4204 #4218

v0.18.0

0.18.0 (2026-07-17)

Features

prefix css classes (#4229) (6f5c44f)

BREAKING CHANGES

users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

Changelog

Sourced from katex's changelog.

0.18.1 (2026-07-19)

Bug Fixes

htmlData: allow escaped commas in \htmlData (#4236) (87a2b30), closes #4204 #4218

0.18.0 (2026-07-17)

Features

prefix css classes (#4229) (6f5c44f)

BREAKING CHANGES

users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

Commits

cdf479f chore(release): 0.18.1 [ci skip]
87a2b30 fix(htmlData): allow escaped commas in \htmlData (#4236)
2318066 chore(deps): bump codecov/codecov-action from 6 to 7 (#4227)
3b5b6a0 chore(deps): bump actions/checkout from 6 to 7 (#4232)
4e9d31a chore(deps): update dependency js-yaml to v4.2.0 [security] (#4244)
b7ca8f0 chore(deps): update dependency webpack-dev-server to v5.2.5 [security] (#4242)
bf1a59f chore: use pixel diff as fallback for byte-to-byte (#4245)
4d9d0ae chore(release): 0.18.0 [ci skip]
6f5c44f feat: prefix css classes (#4229)
2c6143a refactor: remove direct hasOwnProperty call (#4230)
Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates pako from 2.1.0 to 2.2.0

Changelog

Sourced from pako's changelog.

[2.2.0] - 2026-06-22

Added

Alternate deflate hash (ANZAC++) - for nodejs zlib compatibility. A nice bonus ~ 40% speed boost.

legacyHash (default: true) deflate option, to switch between original zlib and nodejs binary-compatible output.

Fixed

Inflate: fix window not updated after inflateReset (multistream/bgzip), #139.

Inflate: emit chunk on flush, #259.

Inflate: only continue to next stream for gzip; error on truncated input.

Commits

c743a32 2.2.0 released
3be309c dist rebuild
18cbb09 Changelog update
f48f81a Improve zlib coverage
dd7fdae Improve wrappers coverage
81d3a54 Reorganize tests layout
377845b Use old (zlib) hash by default, until new major release
57a4363 Move wrapper options to separate struct
f89d31f Remove orphaned file
edf1f60 Inflate: only continue to next stream for gzip; error on truncated input
Additional commits viewable in compare view

Updates satori from 0.26.0 to 0.28.2

Release notes

Sourced from satori's releases.

0.28.2

0.28.2 (2026-07-21)

Bug Fixes

replace Yoga build flag for browsers (#774) (dc2e1c5), closes #749

0.28.1

0.28.1 (2026-07-20)

Bug Fixes

render text matching Object.prototype property names as glyphs (#761) (504b4c9)

0.28.0

0.28.0 (2026-07-14)

Features

trigger npm publish after OIDC fix (#771) (b5c1f64)

0.27.0

0.27.0 (2026-04-29)

Bug Fixes

Fixed error when rendering React Fragments inside <svg>

Commits

dc2e1c5 fix: replace Yoga build flag for browsers (#774)
504b4c9 fix: render text matching Object.prototype property names as glyphs (#761)
b5c1f64 feat: trigger npm publish after OIDC fix (#771)
8119856 docs: fix flexWrap default from 'wrap' to 'nowrap' (#767)
2120646 ci: publish via npm trusted publishing (OIDC) (#770)
2d3af44 fix: SSRF guard for server-side image fetches + pluggable fetcher (#769)
9feec94 fix: text matching Object.prototype property names rendered as image (#768)
91ade3b ci: declare minimum permissions on PR title workflow (#756)
ab49faf chore: migrate workspace to pnpm 10 (#762)
8a0619f chore: remove pull_request_target (#755)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for satori since your current version.

Updates satteri from 0.8.1 to 0.9.5

Release notes

Sourced from satteri's releases.

satteri-v0.9.5

Patch changes

Updated dependencies: satteri-ast (Cargo)@0.4.2, satteri-mdxjs (Cargo)@0.3.8, satteri-pulldown-cmark (Cargo)@0.5.8

satteri-v0.9.4

Patch changes

Updated dependencies: satteri-ast (Cargo)@0.4.1, satteri-mdxjs (Cargo)@0.3.7, satteri-pulldown-cmark (Cargo)@0.5.7

satteri-v0.9.3

Patch changes

Updated dependencies: satteri-mdxjs (Cargo)@0.3.6, satteri-pulldown-cmark (Cargo)@0.5.6

Commits

92d01ec Release (main) (#131)
d2c33ca fix(autolink): misc improvements to autolink behavior and performance (#96)
24a4689 fix(satteri-pulldown-cmark): don't let heading attribute blocks conflict with...
54c782f chore: harden and update ci (#145)
e3f2a10 chore(deps): update pnpm to v11 (#146)
a579002 fix(satteri): set the license field in the package.json (#147)
15b0f85 feat(playground): add a share button (#84)
eaef2be docs: swap two rows for consistent order (#144)
ef3974e feat(plugins): adds ctx.sourceFormat on plugin contexts (#138)
92c006a fix(satteri): declare WASI runtime deps as optionalDependencies (#136)
Additional commits viewable in compare view

Updates wrangler from 4.100.0 to 4.113.0

Release notes

Sourced from wrangler's releases.

wrangler@4.113.0

Minor Changes
#14471 f03b108 Thanks @DiogoSantoss! - Apply Email Routing addresses during Worker trigger deployment

Worker trigger deployment now reconciles the Worker's Email Routing rules with the top-level addresses config. This runs for wrangler deploy, wrangler triggers deploy, and clients of @cloudflare/deploy-helpers. After the Worker uploads, or when wrangler triggers deploy runs after a version promotion, the deploy helper asks the Email Routing API for a plan, renders the changes grouped by zone (+ added, ~ updated, - deleted, ! conflict), prompts once for destructive changes in interactive mode, and applies accepted changes through the per-zone rule endpoints. Purely additive plans apply without a prompt, while non-interactive destructive plans fail without modifying rules.
#14679 deae171 Thanks @dario-piotrowicz! - Add exclude_packages option to dependencies_instrumentation configuration

The dependencies_instrumentation config object now accepts an optional exclude_packages field — an array of package name patterns (with glob-style * wildcards) to exclude from the dependency metadata collected during deploy and version uploads.
// wrangler.json
{
  "dependencies_instrumentation": {
    "exclude_packages": ["@internal/*", "secret-tool"]
  }
}
#14721 4e92e32 Thanks @dmmulroy! - Support Artifacts sources when creating Queue event subscriptions

wrangler queues subscription create now accepts the artifacts and artifacts.repo source types supported by the Cloudflare API.

#13352 d1d6945 Thanks @penalosa! - Expand automatic resource provisioning to Queue, Dispatch Namespace, and Flagship bindings

Deployments can now omit the resource name or ID for these bindings. Wrangler will inherit the existing binding on subsequent deploys, create a deterministically named resource automatically, or offer existing resources during an interactive deploy with automatic creation disabled.

#14688 a0c8bb1 Thanks @NuroDev! - Print Local Explorer API details for headless agent-driven wrangler dev sessions

When wrangler dev is started in a headless AI agent environment, Wrangler now prints the Local Explorer API URL and basic resource routes so agents can inspect local Workers and bindings without relying on the interactive UI.
#14724 a50f73a Thanks @jamesopstad! - Add a settings export to the experimental cloudflare.config.ts config

Account-level settings (accountId, complianceRegion) now live in a dedicated, named settings export authored via defineSettings, rather than on the Worker config. A cloudflare.config.ts can export at most one settings object; the Worker itself is the default export.
// cloudflare.config.ts
import { defineSettings, defineWorker } from "wrangler/experimental-config";
import * as entrypoint from "./src/index.ts" with { type: "cf-worker" };
export const settings = defineSettings({
accountId: "<your-account-id>",
});
export default defineWorker({
name: "my-worker",
entrypoint,
compatibilityDate: "2026-05-18",
});

... (truncated)

Commits

88f42e7 Version Packages (#14740)
9e61971 unskip agent memory remote bindings test (#14786)
0df3d43 [wrangler] Extract remote bindings into a package (#14720)
4815711 [miniflare] Report the Worker's error for HEAD requests (#14766)
af6e91d skip agent memory e2e binding test (#14782)
d83a476 [wrangler] Remove stray characters from Sites asset-key error message (#14773)
2b390d7 Add nub to recognised package managers (#14595)
a50f73a Support settings export in new config (#14724)
a0c8bb1 feat(wrangler): surface Local Explorer API to headless agents (#14688)
deae171 Add exclude_packages option to dependencies_instrumentation configuration...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-updates group with 7 updates: | Package | From | To | | --- | --- | --- | | [@fontsource-variable/jetbrains-mono](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/jetbrains-mono) | `5.2.8` | `5.3.0` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.0.7` | `7.1.3` | | [katex](https://github.com/KaTeX/KaTeX) | `0.17.0` | `0.18.1` | | [pako](https://github.com/nodeca/pako) | `2.1.0` | `2.2.0` | | [satori](https://github.com/vercel/satori) | `0.26.0` | `0.28.2` | | [satteri](https://github.com/bruits/satteri) | `0.8.1` | `0.9.5` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.100.0` | `4.113.0` | Updates `@fontsource-variable/jetbrains-mono` from 5.2.8 to 5.3.0 - [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md) - [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/jetbrains-mono) Updates `astro` from 7.0.7 to 7.1.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro) Updates `katex` from 0.17.0 to 0.18.1 - [Release notes](https://github.com/KaTeX/KaTeX/releases) - [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md) - [Commits](KaTeX/KaTeX@v0.17.0...v0.18.1) Updates `pako` from 2.1.0 to 2.2.0 - [Changelog](https://github.com/nodeca/pako/blob/master/CHANGELOG.md) - [Commits](nodeca/pako@2.1.0...2.2.0) Updates `satori` from 0.26.0 to 0.28.2 - [Release notes](https://github.com/vercel/satori/releases) - [Commits](vercel/satori@0.26.0...0.28.2) Updates `satteri` from 0.8.1 to 0.9.5 - [Release notes](https://github.com/bruits/satteri/releases) - [Commits](bruits/satteri@satteri-v0.8.1...satteri-v0.9.5) Updates `wrangler` from 4.100.0 to 4.113.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.113.0/packages/wrangler) --- updated-dependencies: - dependency-name: "@fontsource-variable/jetbrains-mono" dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: astro dependency-version: 7.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: katex dependency-version: 0.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: pako dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: satori dependency-version: 0.28.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: satteri dependency-version: 0.9.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: wrangler dependency-version: 4.113.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 23, 2026

Cec1c marked this pull request as draft July 24, 2026 08:47

Navigation Menu

build(deps): bump the minor-updates group with 7 updates - #2

build(deps): bump the minor-updates group with 7 updates#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-minor-updates-afa3e9df51

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

astro@7.1.3

Patch Changes

astro@7.1.2

Patch Changes

astro@7.1.1

Patch Changes

astro@7.1.0

Minor Changes

7.1.3

Patch Changes

7.1.2

Patch Changes

7.1.1

Patch Changes

7.1.0

Minor Changes

v0.18.1

0.18.1 (2026-07-19)

Bug Fixes

v0.18.0

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

0.18.1 (2026-07-19)

Bug Fixes

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

[2.2.0] - 2026-06-22

Added

Fixed

0.28.2

0.28.2 (2026-07-21)

Bug Fixes

0.28.1

0.28.1 (2026-07-20)

Bug Fixes

0.28.0

0.28.0 (2026-07-14)

Features

0.27.0

0.27.0 (2026-04-29)

Bug Fixes

satteri-v0.9.5

Patch changes

satteri-v0.9.4

Patch changes

satteri-v0.9.3

Patch changes

wrangler@4.113.0

Minor Changes

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited

Loading