Skip to content

build(deps): bump the patch-updates group across 1 directory with 11 updates - #29

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot-npm_and_yarn-patch-updates-a3c09578e3
Closed

build(deps): bump the patch-updates group across 1 directory with 11 updates#29
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot-npm_and_yarn-patch-updates-a3c09578e3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the patch-updates group with 11 updates in the / directory:

Package From To
@astrojs/compiler-rs 0.1.5 0.1.10
@astrojs/mdx 5.0.1 5.0.4
@astrojs/rss 4.0.17 4.0.18
@astrojs/sitemap 3.7.1 3.7.2
@astrojs/svelte 8.0.1 8.0.5
@iconify-json/material-symbols 1.2.62 1.2.69
@iconify-json/simple-icons 1.2.73 1.2.79
@iconify/utils 3.1.0 3.1.1
katex 0.16.38 0.16.45
sanitize-html 2.17.1 2.17.3
@biomejs/biome 2.4.6 2.4.13

Updates @astrojs/compiler-rs from 0.1.5 to 0.1.10

Release notes

Sourced from @​astrojs/compiler-rs's releases.

@​astrojs/compiler-rs@​0.1.10

Patch Changes

  • 551f3e0: Fixed invalid CSS output when using ::part() or ::slotted() pseudo-elements in scoped styles
    • @​astrojs/compiler-binding@​0.1.10

@​astrojs/compiler-rs@​0.1.9

Patch Changes

  • 8b7a46f: Add fallback download for Webcontainers
  • Updated dependencies [8b7a46f]
    • @​astrojs/compiler-binding@​0.1.9

@​astrojs/compiler-rs@​0.1.8

Patch Changes

  • 6945d30: Fixed linux-gnu binaries requiring glibc 2.35+, which broke on Vercel, Amazon Linux 2023, and other environments with older glibc. Binaries now target glibc 2.17.
    • @​astrojs/compiler-binding@​0.1.8

@​astrojs/compiler-rs@​0.1.7

Patch Changes

  • 4c9a9ed: Fixes edge cases where certain niche types of expressions wouldn't properly compile
  • 1b17201: Fixes slots not working inside parenthesized conditional slots
  • cace524: Fixes the compiler sometimes adding extra whitespace between root elements when one of the root elements would be hoisted (e.g. style tags, scripts etc.)
  • 4ebb68d: Fixes slots not being collected inside optional chain expressions
  • dc9cbe4: Fixes scripts inside template elements not being rendered as-is
  • Updated dependencies [4c9a9ed]
  • Updated dependencies [1b17201]
  • Updated dependencies [cace524]
  • Updated dependencies [4ebb68d]
  • Updated dependencies [dc9cbe4]
    • @​astrojs/compiler-binding@​0.1.7

@​astrojs/compiler-rs@​0.1.6

Patch Changes

  • 6e274fe: Fixes dynamic slots not being collected properly
  • Updated dependencies [6e274fe]
    • @​astrojs/compiler-binding@​0.1.6
Commits

Updates @astrojs/mdx from 5.0.1 to 5.0.4

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​5.0.4

Patch Changes

  • Updated dependencies [f3485c3]:
    • @​astrojs/markdown-remark@​7.1.1

@​astrojs/mdx@​5.0.3

Patch Changes

  • Updated dependencies [10a1a5a]:
    • @​astrojs/markdown-remark@​7.1.0

@​astrojs/mdx@​5.0.2

Patch Changes

  • #15864 d3c7de9 Thanks @​florian-lefebvre! - Removes temporary support for Node >=20.19.1 because Stackblitz now uses Node 22 by default

  • Updated dependencies []:

    • @​astrojs/markdown-remark@​7.0.1
Changelog

Sourced from @​astrojs/mdx's changelog.

5.0.4

Patch Changes

  • Updated dependencies [f3485c3]:
    • @​astrojs/markdown-remark@​7.1.1

5.0.3

Patch Changes

  • Updated dependencies [10a1a5a]:
    • @​astrojs/markdown-remark@​7.1.0

5.0.2

Patch Changes

  • #15864 d3c7de9 Thanks @​florian-lefebvre! - Removes temporary support for Node >=20.19.1 because Stackblitz now uses Node 22 by default

  • Updated dependencies []:

    • @​astrojs/markdown-remark@​7.0.1
Commits

Updates @astrojs/rss from 4.0.17 to 4.0.18

Release notes

Sourced from @​astrojs/rss's releases.

@​astrojs/rss@​4.0.18

Patch Changes

Changelog

Sourced from @​astrojs/rss's changelog.

4.0.18

Patch Changes

Commits

Updates @astrojs/sitemap from 3.7.1 to 3.7.2

Release notes

Sourced from @​astrojs/sitemap's releases.

@​astrojs/sitemap@​3.7.2

Patch Changes

Changelog

Sourced from @​astrojs/sitemap's changelog.

3.7.2

Patch Changes

Commits

Updates @astrojs/svelte from 8.0.1 to 8.0.5

Release notes

Sourced from @​astrojs/svelte's releases.

@​astrojs/svelte@​8.0.5

Patch Changes

  • #16210 e030bd0 Thanks @​matthewp! - Fixes .svelte files in node_modules failing with Unknown file extension ".svelte" when using the Cloudflare adapter with prerenderEnvironment: 'node'

@​astrojs/svelte@​8.0.4

Patch Changes

@​astrojs/svelte@​8.0.3

Patch Changes

  • #15961 7e8d0ee Thanks @​matthewp! - Fix Cloudflare dev SSR dependency optimization to compile .svelte.js and .svelte.ts dependency modules that use Svelte runes.

@​astrojs/svelte@​8.0.2

Patch Changes

Changelog

Sourced from @​astrojs/svelte's changelog.

8.0.5

Patch Changes

  • #16210 e030bd0 Thanks @​matthewp! - Fixes .svelte files in node_modules failing with Unknown file extension ".svelte" when using the Cloudflare adapter with prerenderEnvironment: 'node'

8.0.4

Patch Changes

8.0.3

Patch Changes

  • #15961 7e8d0ee Thanks @​matthewp! - Fix Cloudflare dev SSR dependency optimization to compile .svelte.js and .svelte.ts dependency modules that use Svelte runes.

8.0.2

Patch Changes

Commits

Updates @iconify-json/material-symbols from 1.2.62 to 1.2.69

Commits

Updates @iconify-json/simple-icons from 1.2.73 to 1.2.79

Commits

Updates @iconify/utils from 3.1.0 to 3.1.1

Commits

Updates katex from 0.16.38 to 0.16.45

Release notes

Sourced from katex's releases.

v0.16.45

0.16.45 (2026-04-05)

Bug Fixes

v0.16.44

0.16.44 (2026-03-27)

Bug Fixes

  • remove extra \jot space at bottom of align/gather/etc. (#4184) (3870ee9)

v0.16.43

0.16.43 (2026-03-26)

Bug Fixes

  • use makeEm() consistently to truncate long CSS decimals (#4181) (0967dcc)

v0.16.42

0.16.42 (2026-03-24)

Features

v0.16.41

0.16.41 (2026-03-24)

Bug Fixes

v0.16.40

0.16.40 (2026-03-20)

Bug Fixes

  • css: specify position: relative for .katex (#4170) (020f0d8)

v0.16.39

0.16.39 (2026-03-19)

... (truncated)

Changelog

Sourced from katex's changelog.

0.16.45 (2026-04-05)

Bug Fixes

0.16.44 (2026-03-27)

Bug Fixes

  • remove extra \jot space at bottom of align/gather/etc. (#4184) (3870ee9)

0.16.43 (2026-03-26)

Bug Fixes

  • use makeEm() consistently to truncate long CSS decimals (#4181) (0967dcc)

0.16.42 (2026-03-24)

Features

0.16.41 (2026-03-24)

Bug Fixes

0.16.40 (2026-03-20)

Bug Fixes

  • css: specify position: relative for .katex (#4170) (020f0d8)

0.16.39 (2026-03-19)

Bug Fixes

Commits
  • 90de979 chore(release): 0.16.45 [ci skip]
  • ee66b78 fix: wrap vcenter mpadded in mrow for valid MathML (#4193)
  • ed12205 refactor: move inline double brushs stroke to helper (#4194)
  • 434d4b8 chore(ci): upgrade to node 24 (#4189)
  • 844a324 chore(deps): bump codecov/codecov-action from 5 to 6 (#4188)
  • 5675226 chore(deps): bump actions/github-script from 7 to 8 (#4179)
  • 34ad75e chore(deps): bump actions/setup-node from 4 to 6 (#4180)
  • 2525c20 chore(deps): bump actions/upload-artifact from 4 to 7 (#4176)
  • 0b7006e chore(release): 0.16.44 [ci skip]
  • 3870ee9 fix: remove extra \jot space at bottom of align/gather/etc. (#4184)
  • Additional commits viewable in compare view

Updates sanitize-html from 2.17.1 to 2.17.3

Changelog

Sourced from sanitize-html's changelog.

2.17.3 (2026-04-15)

Security

  • Fix vulnerability introduced in version 2.17.2 that allowed XSS attacks if the developer chose to permit option tags. There was no vulnerability when not explicitly allowing option tags.

2.17.2 (2026-03-19)

Changes

  • Upgrade htmlparser2 from 8.x to 10.1.0. This improves security by correctly decoding zero-padded numeric character references (e.g., &[#0000001](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html/issues/0000001)) that previously bypassed javascript: URL detection. Also fixes double-encoding of entities inside raw text elements like textarea and option.
Commits

Updates @biomejs/biome from 2.4.6 to 2.4.13

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.13

2.4.13

Patch Changes

  • #9969 c5eb92b Thanks @​officialasishkumar! - Added the nursery rule noUnnecessaryTemplateExpression, which disallows template literals that only contain string literal expressions. These can be replaced with a simpler string literal.

    For example, the following code triggers the rule:

    const a = `${"hello"}`; // can be 'hello'
const b = `${"prefix"}_suffix`; // can be 'prefix_suffix'
const c = `${"a"}${"b"}`; // can be 'ab'

  • #10037 f785e8c Thanks @​minseong0324! - Fixed #9810: noMisleadingReturnType no longer reports false positives on a getter with a matching setter in the same namespace.

    class Store {
  get status(): string {
    if (Math.random() > 0.5) return "loading";
    return "idle";
  }
  set status(v: string) {}
}

  • #10084 5e2f90c Thanks @​jiwon79! - Fixed #10034: noUselessEscapeInRegex no longer flags escapes of ClassSetReservedPunctuator characters (&, !, #, %, ,, :, ;, <, =, >, @, `, ~) inside v-flag character classes as useless. These characters are reserved as individual code points in v-mode, so the escape is required.

    The following pattern is now considered valid:

    /[a-z\&]/v;

  • #10063 c9ffa16 Thanks @​Netail! - Added extra rule sources from ESLint CSS. biome migrate eslint should do a bit better detecting rules in your eslint configurations.

  • #10035 946b50e Thanks @​Netail! - Fixed #10032: useIframeSandbox now flags if there's no initializer value.

  • #9865 68fb8d4 Thanks @​dyc3! - Added the new nursery rule useDomNodeTextContent, which prefers textContent over innerText for DOM node text access and destructuring.

    For example, the following snippet triggers the rule:

    const foo = node.innerText;

  • #10023 bd1e74f Thanks @​ematipico! - Added a new nursery rule noReactNativeDeepImports that disallows deep imports from the react-native package. Internal paths like react-native/Libraries/... are not part of the public API and may change between versions.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.13

Patch Changes

  • #9969 c5eb92b Thanks @​officialasishkumar! - Added the nursery rule noUnnecessaryTemplateExpression, which disallows template literals that only contain string literal expressions. These can be replaced with a simpler string literal.

    For example, the following code triggers the rule:

    const a = `${"hello"}`; // can be 'hello'
const b = `${"prefix"}_suffix`; // can be 'prefix_suffix'
const c = `${"a"}${"b"}`; // can be 'ab'

  • #10037 f785e8c Thanks @​minseong0324! - Fixed #9810: noMisleadingReturnType no longer reports false positives on a getter with a matching setter in the same namespace.

    class Store {
  get status(): string {
    if (Math.random() > 0.5) return "loading";
    return "idle";
  }
  set status(v: string) {}
}

  • #10084 5e2f90c Thanks @​jiwon79! - Fixed #10034: noUselessEscapeInRegex no longer flags escapes of ClassSetReservedPunctuator characters (&, !, #, %, ,, :, ;, <, =, >, @, `, ~) inside v-flag character classes as useless. These characters are reserved as individual code points in v-mode, so the escape is required.

    The following pattern is now considered valid:

    /[a-z\&]/v;

  • #10063 c9ffa16 Thanks @​Netail! - Added extra rule sources from ESLint CSS. biome migrate eslint should do a bit better detecting rules in your eslint configurations.

  • #10035 946b50e Thanks @​Netail! - Fixed #10032: useIframeSandbox now flags if there's no initializer value.

  • #9865 68fb8d4 Thanks @​dyc3! - Added the new nursery rule useDomNodeTextContent, which prefers textContent over innerText for DOM node text access and destructuring.

    For example, the following snippet triggers the rule:

    const foo = node.innerText;

  • #10023 bd1e74f Thanks @​ematipico! - Added a new nursery rule noReactNativeDeepImports that disallows deep imports from the react-native package. Internal paths like react-native/Libraries/... are not part of the public API and may change between versions.

    For example, the following code triggers the rule:

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the patch-updates group across 1 directory with 11 …
db79c8a 
…updates

Bumps the patch-updates group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/compiler-rs](https://github.com/withastro/compiler-rs) | `0.1.5` | `0.1.10` |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `5.0.1` | `5.0.4` |
| [@astrojs/rss](https://github.com/withastro/astro/tree/HEAD/packages/astro-rss) | `4.0.17` | `4.0.18` |
| [@astrojs/sitemap](https://github.com/withastro/astro/tree/HEAD/packages/integrations/sitemap) | `3.7.1` | `3.7.2` |
| [@astrojs/svelte](https://github.com/withastro/astro/tree/HEAD/packages/integrations/svelte) | `8.0.1` | `8.0.5` |
| [@iconify-json/material-symbols](https://github.com/iconify/icon-sets) | `1.2.62` | `1.2.69` |
| [@iconify-json/simple-icons](https://github.com/iconify/icon-sets) | `1.2.73` | `1.2.79` |
| [@iconify/utils](https://github.com/iconify/iconify/tree/HEAD/packages/utils) | `3.1.0` | `3.1.1` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.38` | `0.16.45` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.1` | `2.17.3` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.6` | `2.4.13` |



Updates `@astrojs/compiler-rs` from 0.1.5 to 0.1.10
- [Release notes](https://github.com/withastro/compiler-rs/releases)
- [Commits](https://github.com/withastro/compiler-rs/compare/@astrojs/compiler-rs@0.1.5...@astrojs/compiler-rs@0.1.10)

Updates `@astrojs/mdx` from 5.0.1 to 5.0.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@5.0.4/packages/integrations/mdx)

Updates `@astrojs/rss` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro-rss/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/rss@4.0.18/packages/astro-rss)

Updates `@astrojs/sitemap` from 3.7.1 to 3.7.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/sitemap/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/sitemap@3.7.2/packages/integrations/sitemap)

Updates `@astrojs/svelte` from 8.0.1 to 8.0.5
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/svelte/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/svelte@8.0.5/packages/integrations/svelte)

Updates `@iconify-json/material-symbols` from 1.2.62 to 1.2.69
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@iconify-json/simple-icons` from 1.2.73 to 1.2.79
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@iconify/utils` from 3.1.0 to 3.1.1
- [Commits](https://github.com/iconify/iconify/commits/HEAD/packages/utils)

Updates `katex` from 0.16.38 to 0.16.45
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.38...v0.16.45)

Updates `sanitize-html` from 2.17.1 to 2.17.3
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.17.3/packages/sanitize-html)

Updates `@biomejs/biome` from 2.4.6 to 2.4.13
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.13/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@astrojs/compiler-rs"
  dependency-version: 0.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@astrojs/mdx"
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@astrojs/rss"
  dependency-version: 4.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@astrojs/sitemap"
  dependency-version: 3.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@astrojs/svelte"
  dependency-version: 8.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@iconify-json/material-symbols"
  dependency-version: 1.2.69
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@iconify-json/simple-icons"
  dependency-version: 1.2.79
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@iconify/utils"
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: katex
  dependency-version: 0.16.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: sanitize-html
  dependency-version: 2.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 29, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 29, 2026
@dependabot
dependabot Bot deleted the dependabot-npm_and_yarn-patch-updates-a3c09578e3 branch April 29, 2026 02:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants