Skip to content

deps: bump the all-js-deps group across 1 directory with 8 updates - #103

Merged
FumingPower3925 merged 2 commits into
mainfrom
dependabot/bun/all-js-deps-d0ce9fe244
Oct 19, 2026
Merged

FumingPower3925 merged 2 commits into
mainfrom
dependabot/bun/all-js-deps-d0ce9fe244

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the all-js-deps group with 8 updates in the / directory:

Package From To
@astrojs/mdx 8.0.2 8.1.0
@astrojs/preact 6.0.5 6.1.0
@preact/signals 2.11.2 2.11.3
astro 7.3.5 7.4.0
preact 10.29.8 11.0.1
bun-types 1.4.2 1.4.3
sharp 0.35.4 0.35.5
wrangler 4.139.0 4.151.1

Updates @astrojs/mdx from 8.0.2 to 8.1.0

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​8.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0
    • @​astrojs/markdown-satteri@​0.4.4

@​astrojs/mdx@​8.0.3

Patch Changes

  • #18099 6987261 Thanks @​renovate! - Adds YAML parsing with timestamp and merge key support, and formats YAML errors consistently across Astro, Markdown, MDX, and Markdoc.
  • Updated dependencies [6987261, 62b13ba]:
    • @​astrojs/internal-helpers@​0.12.0
    • @​astrojs/markdown-satteri@​0.4.3

@​astrojs/mdx@​8.0.3-beta.0

Patch Changes

Changelog

Sourced from @​astrojs/mdx's changelog.

8.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0
    • @​astrojs/markdown-satteri@​0.4.4

8.0.3

Patch Changes

  • #18099 6987261 Thanks @​renovate! - Adds YAML parsing with timestamp and merge key support, and formats YAML errors consistently across Astro, Markdown, MDX, and Markdoc.
  • Updated dependencies [6987261, 62b13ba]:
    • @​astrojs/internal-helpers@​0.12.0
    • @​astrojs/markdown-satteri@​0.4.3
Commits

Updates @astrojs/preact from 6.0.5 to 6.1.0

Release notes

Sourced from @​astrojs/preact's releases.

@​astrojs/preact@​6.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0

@​astrojs/preact@​6.0.6

Patch Changes

Changelog

Sourced from @​astrojs/preact's changelog.

6.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0

6.0.6

Patch Changes

Commits

Updates @preact/signals from 2.11.2 to 2.11.3

Release notes

Sourced from @​preact/signals's releases.

@​preact/signals@​2.11.3

Patch Changes

  • #991 04445ba Thanks @​JoviDeCroock! - Don't re-run a useSignalEffect for a component that was unmounted by the same update. Preact 11 disposes it after paint, so the effect could otherwise run once more against an unmounted component.
Changelog

Sourced from @​preact/signals's changelog.

2.11.3

Patch Changes

  • #991 04445ba Thanks @​JoviDeCroock! - Don't re-run a useSignalEffect for a component that was unmounted by the same update. Preact 11 disposes it after paint, so the effect could otherwise run once more against an unmounted component.
Commits

Updates astro from 7.3.5 to 7.4.0

Release notes

Sourced from astro's releases.

astro@7.4.0

Minor Changes

  • #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

    When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

    astro build --timings

    This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

    Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

    All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

    import type { FontProvider } from 'astro';
    const provider: FontProvider = {
    name: 'my-provider',
    resolveFont: ({ familyName }) => {
    // ...
    },
    getFontProperties: ({ familyName }) => ({
    weights: ['400', '700'],
    styles: ['normal', 'italic'],
    subsets: ['latin'],
    formats: ['woff2'],
    }),
    };

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

    This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

    import type { FontProvider } from 'astro';
    import type { InitializedProvider } from 'unifont';
    import { acmeProvider } from '@acme/unifont-provider';
    export function acmeFontProvider(): FontProvider {
    const provider = acmeProvider();
    let initializedProvider: InitializedProvider | undefined;
    return {
    name: provider._name,

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.0

Minor Changes

  • #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

    When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

    astro build --timings

    This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

    Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

    All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

    import type { FontProvider } from 'astro';
    const provider: FontProvider = {
    name: 'my-provider',
    resolveFont: ({ familyName }) => {
    // ...
    },
    getFontProperties: ({ familyName }) => ({
    weights: ['400', '700'],
    styles: ['normal', 'italic'],
    subsets: ['latin'],
    formats: ['woff2'],
    }),
    };

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

    This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

    import type { FontProvider } from 'astro';
    import type { InitializedProvider } from 'unifont';
    import { acmeProvider } from '@acme/unifont-provider';
    export function acmeFontProvider(): FontProvider {
    const provider = acmeProvider();
    let initializedProvider: InitializedProvider | undefined;
    return {

... (truncated)

Commits

Updates preact from 10.29.8 to 11.0.1

Release notes

Sourced from preact's releases.

11.0.1

Fixes

DX

Performance

Maintenance

11.0.0

https://preactjs.com/blog/preact-11

Read the upgrade-guide over at https://preactjs.com/guide/v11/upgrade-guide

All other release notes can be seen at

Fixes

Performance

... (truncated)

Commits
  • 04074e2 Merge pull request #5302 from preactjs/11.0.1
  • 231d163 11.0.1
  • f6c09df Merge pull request #5300 from preactjs/JoviDeCroock/suspense-hydration-siblin...
  • 67a88d5 Keep suspended hydration within a component's own $s range
  • f9facd3 Merge pull request #5297 from preactjs/JoviDeCroock/debug-uncaught-component-...
  • e984524 Merge branch 'main' into JoviDeCroock/debug-uncaught-component-stack
  • 5fd81d2 Merge pull request #5272 from preactjs/perf/event-listener-keys
  • 66f38b7 Keep listener attach times outside _listeners
  • 74e6239 Stamp the attach time per listener instead of per handler
  • 7ed4fac Skip event name normalization when swapping handlers
  • Additional commits viewable in compare view

Updates bun-types from 1.4.2 to 1.4.3

Release notes

Sourced from bun-types's releases.

Bun v1.4.3

To install Bun v1.4.3

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.4.3:

bun upgrade

Read Bun v1.4.3's release notes on Bun's blog

Thanks to 8 contributors!

Commits
  • e655c58 Fix every type error in test/ (#44614)
  • bbdc5a5 bun check - a TypeScript type checker builtin to Bun (#44361)
  • f4281d1 Do not auto-install a bare name that is a runtime plugin's own (#44492)
  • 272ff43 Resolve a module specifier once: fix a segfault in require() of an ES module,...
  • 3b7ee8e sql: treat a BunFile tls option as the CA certificate to verify the server ...
  • 3bdec20 bun-types: declare the undici-types dependency (#43668)
  • 37da174 bundler(splitting): one edge rule for both walks; no chunk imports an unhashe...
  • fda6445 fetch: reject a non-function tls.checkServerIdentity and any truthy return va...
  • 4227e46 compile: bytecode order files (--bytecode-order, BUN_BYTECODE_ORDER_OUT, byte...
  • 849da93 Bun.Image: decode JPEGs that libjpeg-turbo finishes with only a warning (#43812)
  • Additional commits viewable in compare view

Updates sharp from 0.35.4 to 0.35.5

Release notes

Sourced from sharp's releases.

v0.35.5

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4

  • Add upper bounds check on length of linear and GIF delay arrays.

  • Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

  • TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

  • TypeScript: Remove non-existent named export. #4604

  • Increase accepted dimensions when extending an image. #4605

  • Improve gain map support for extract and rotate operations. #4606

  • Tests: Ensure composite tests pass on big endian platforms. #4609

v0.35.5-rc.1

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1

  • Add upper bounds check on length of linear and GIF delay arrays.

  • Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

  • TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

  • TypeScript: Remove non-existent named export. #4604

  • Increase accepted dimensions when extending an image. #4605

  • Improve gain map support for extract operation. #4606

... (truncated)

Commits
  • 51a990f Release v0.35.5
  • 96de105 Upgrade to sharp-libvips v1.3.4
  • 3a61390 CI: Configure Dependabot with all package.json locations
  • 4940c50 Improve gain map support for rotate/flip/flop ops
  • 20654aa Prerelease v0.35.5-rc.1
  • ef4f934 CI: Upgrade to Ubuntu 26.04
  • 358df95 Upgrade to libvips v8.18.7
  • 49f4903 Improve gain map support for rotate-then-extract #4606
  • 0e2e55e Silence a couple of compiler/static analysis warnings
  • cef3b8c Improve gain map support for extract operation #4606
  • Additional commits viewable in compare view

Updates wrangler from 4.139.0 to 4.151.1

Release notes

Sourced from wrangler's releases.

wrangler@4.151.1

Patch Changes

  • #15541 e13d5cc Thanks @​mack-erel! - Keep remote dev sessions alive through transient network failures

    wrangler dev --remote and getPlatformProxy() refresh their preview token before it expires, but a single failed refresh — for example while the network was briefly down — stopped refreshing for good, leaving the session broken until restart. A failed refresh now retries every minute until it succeeds. Rebuilds also no longer push the refresh past the session's expiry.

  • #16284 42c6912 Thanks @​karloper! - Fix wrangler rollback reporting success after the changed secrets confirmation is declined

    Previously, declining the "The following secrets have changed…" confirmation printed "Aborting rollback..." and then also printed a success message and the target version as the "Current Version ID", even though no deployment was made and the original version was still live. Wrangler now stops after aborting, so the output matches what is actually deployed.

  • #13742 4a5377f Thanks @​edmundhung! - Hide the wrangler dev hotkey bar when Turborepo does not forward input

  • Updated dependencies [e1d1b77]:

wrangler@4.151.0

Minor Changes

  • #16245 d6b1c82 Thanks @​WalshyDev! - Include source maps by default in wrangler build --experimental-cf-build-output

    Build Output now matches wrangler deploy and wrangler versions upload, which upload source maps by default, so Workers built for tools like cf get stack traces that point at the original source. Source maps that can't be resolved are skipped rather than failing the build. Set upload_source_maps = false to opt out.

Patch Changes

  • #16220 97b2fb1 Thanks @​FlorentCollin! - Support local D1 queries through the experimental d1_binding_jsrpc compatibility flag

    Local D1 bindings now implement the RPC query backend used by D1Database.query() and prepared-statement methods when the flag is enabled. Queries reuse local SQLite execution, including transactional batches, execution metadata, and session bookmarks, while bindings without the flag continue to use HTTP. Update the bundled workerd runtime to 1.20261012.1 and align the default compatibility date with that release.

  • Updated dependencies [f360829, 97b2fb1, 97b2fb1, acd2822]:

wrangler@4.150.0

Minor Changes

  • #16231 091e5ec Thanks @​WalshyDev! - Upload source maps by default for wrangler deploy, wrangler versions upload and wrangler preview

    When upload_source_maps isn't set in config or via --upload-source-maps, Wrangler now generates and uploads source maps so stack traces in logs and wrangler tail point at your original source without extra setup. In this default mode, source maps that can't be resolved (for example inline data: maps or missing .map files from a custom build) are skipped rather than failing the upload. Setting upload_source_maps = true keeps the existing strict behaviour, and upload_source_maps = false (or --no-upload-source-maps for deploy and versions upload) opts out.

    wrangler build --experimental-cf-build-output is unchanged and still only includes source maps when upload_source_maps = true.

  • #16128 daae435 Thanks @​redsteadz! - Stop wrangler deploy, wrangler versions upload and wrangler preview in projects that build for the Cloudflare CLI (cf)

    If your project builds through cf, deploying it with Wrangler reads a different configuration, so it could update the wrong Worker or fail without explaining why. These commands now stop before uploading anything, name the .cloudflare/output directory they found, and tell you to run cf deploy instead. If that directory is just left over from an earlier build, deleting it restores the Wrangler workflow.

    Ordinary Wrangler projects are unaffected, and --dry-run still works on deploy and versions upload. This is a new guard for the experimental Build Output Specification rather than a fix, and it gives three stable commands a failure mode they did not have before, so it is a minor.

Patch Changes

... (truncated)

Commits
  • e7f9e4e Version Packages (#16287)
  • 4a5377f [wrangler] Hide unusable dev hotkeys under Turborepo (#13742)
  • 42c6912 [wrangler] Don't report rollback success after declining changed secrets conf...
  • e13d5cc [remote-bindings] Retry proactive preview token refresh after a transient fai...
  • b81efbc Version Packages (#16241)
  • d6b1c82 Generate source maps by default for Vite plugin Workers and Build Output (#16...
  • fb3d9c8 Version Packages (#16162)
  • 091e5ec [wrangler] Upload source maps by default (#16231)
  • ea64ec4 [wrangler] Preserve D1 migration paths during redirected provisioning (#15517)
  • d232454 [wrangler] Preserve public HTTPS response URLs behind TLS-terminating proxies...
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from FumingPower3925 as a code owner October 19, 2026 01:46
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026
@coderabbitai

coderabbitai Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: goceleris/docs/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 244f087e-a75e-4f7e-9035-fb848e6e878d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
goceleris-docs f9e02b6 Commit Preview URL

Branch Preview URL
Oct 19 2026, 01:48 PM

@FumingPower3925 FumingPower3925 added this to the v1.6.0 milestone Oct 19, 2026
FumingPower3925 added a commit that referenced this pull request Oct 19, 2026
…act 10 and 11 (#107)

JSX.CSSProperties is removed from the JSX namespace in preact 11 (CSSProperties moves to the package root), which fails astro check in the dependabot all-js-deps group bump. IntrinsicElements["div"]["style"] resolves on both majors. Refs #103
@FumingPower3925

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps the all-js-deps group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `8.0.2` | `8.1.0` |
| [@astrojs/preact](https://github.com/withastro/astro/tree/HEAD/packages/integrations/preact) | `6.0.5` | `6.1.0` |
| [@preact/signals](https://github.com/preactjs/signals/tree/HEAD/packages/preact) | `2.11.2` | `2.11.3` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.5` | `7.4.0` |
| [preact](https://github.com/preactjs/preact) | `10.29.8` | `11.0.1` |
| [bun-types](https://github.com/oven-sh/bun/tree/HEAD/packages/bun-types) | `1.4.2` | `1.4.3` |
| [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.139.0` | `4.151.1` |



Updates `@astrojs/mdx` from 8.0.2 to 8.1.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.1.0/packages/integrations/mdx)

Updates `@astrojs/preact` from 6.0.5 to 6.1.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/preact/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/preact@6.1.0/packages/integrations/preact)

Updates `@preact/signals` from 2.11.2 to 2.11.3
- [Release notes](https://github.com/preactjs/signals/releases)
- [Changelog](https://github.com/preactjs/signals/blob/main/packages/preact/CHANGELOG.md)
- [Commits](https://github.com/preactjs/signals/commits/@preact/signals@2.11.3/packages/preact)

Updates `astro` from 7.3.5 to 7.4.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.4.0/packages/astro)

Updates `preact` from 10.29.8 to 11.0.1
- [Release notes](https://github.com/preactjs/preact/releases)
- [Commits](preactjs/preact@10.29.8...11.0.1)

Updates `bun-types` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/oven-sh/bun/releases)
- [Commits](https://github.com/oven-sh/bun/commits/bun-v1.4.3/packages/bun-types)

Updates `sharp` from 0.35.4 to 0.35.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.4...v0.35.5)

Updates `wrangler` from 4.139.0 to 4.151.1
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.151.1/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@astrojs/mdx"
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-js-deps
- dependency-name: "@astrojs/preact"
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-js-deps
- dependency-name: "@preact/signals"
  dependency-version: 2.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-js-deps
- dependency-name: astro
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-js-deps
- dependency-name: bun-types
  dependency-version: 1.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-js-deps
- dependency-name: preact
  dependency-version: 11.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-js-deps
- dependency-name: sharp
  dependency-version: 0.35.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-js-deps
- dependency-name: wrangler
  dependency-version: 4.151.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-js-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/all-js-deps-d0ce9fe244 branch from a8e1044 to c1842f3 Compare October 19, 2026 10:34
@FumingPower3925

Copy link
Copy Markdown
Contributor

Merging with every required check green (build, coverage, CodeQL, codecov/patch, Workers Builds). The CodeRabbit review is advisory and had not finished.

@FumingPower3925
FumingPower3925 merged commit 0046dd5 into main Oct 19, 2026
7 checks passed
@FumingPower3925
FumingPower3925 deleted the dependabot/bun/all-js-deps-d0ce9fe244 branch October 19, 2026 13:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant