Skip to content

Bump the major group across 3 directories with 6 updates#422

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/major-bd86cc4352
Closed

Bump the major group across 3 directories with 6 updates#422
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/major-bd86cc4352

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 17, 2026 •
edited
Loading

Bumps the major group with 6 updates in the / directory:

Package From To
ai 5.0.154 6.0.116
@astrojs/mdx 4.3.14 5.0.1
@astrojs/vue 5.1.4 6.0.1
astro 5.18.1 6.0.5
vite 7.3.1 8.0.0
@infisical/sdk 4.0.6 5.0.0

Bumps the major group with 1 update in the /packages/integrations/vite directory: vite.
Bumps the major group with 3 updates in the /packages/varlock-website directory: @astrojs/mdx, @astrojs/vue and astro.

Updates ai from 5.0.154 to 6.0.116

Commits

Updates @astrojs/mdx from 4.3.14 to 5.0.1

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​5.0.1

Patch Changes

@​astrojs/mdx@​5.0.0

Major Changes

Patch Changes

@​astrojs/mdx@​5.0.0-beta.12

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​7.0.0-beta.11

@​astrojs/mdx@​5.0.0-beta.11

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​7.0.0-beta.10

@​astrojs/mdx@​5.0.0-beta.10

Patch Changes

@​astrojs/mdx@​5.0.0-beta.9

Patch Changes

  • Updated dependencies [1fa4177]:
    • @​astrojs/markdown-remark@​7.0.0-beta.8
Changelog

Sourced from @​astrojs/mdx's changelog.

5.0.1

Patch Changes

5.0.0

Major Changes

Patch Changes

5.0.0-beta.12

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​7.0.0-beta.11

5.0.0-beta.11

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​7.0.0-beta.10

5.0.0-beta.10

Patch Changes

5.0.0-beta.9

... (truncated)

Commits

Updates @astrojs/vue from 5.1.4 to 6.0.1

Release notes

Sourced from @​astrojs/vue's releases.

@​astrojs/vue@​6.0.1

Patch Changes

@​astrojs/vue@​6.0.0

Major Changes

Minor Changes

  • #15425 0317e99 Thanks @​ocavue! - Updates @vitejs/plugin-vue to v6, @vitejs/plugin-vue-jsx to v5, and vite-plugin-vue-devtools to v8. No changes are needed from users.

Patch Changes

Changelog

Sourced from @​astrojs/vue's changelog.

6.0.1

Patch Changes

6.0.0

Major Changes

Minor Changes

  • #15425 0317e99 Thanks @​ocavue! - Updates @vitejs/plugin-vue to v6, @vitejs/plugin-vue-jsx to v5, and vite-plugin-vue-devtools to v8. No changes are needed from users.

Patch Changes

6.0.0-beta.1

Minor Changes

  • #15425 0317e99 Thanks @​ocavue! - Updates @vitejs/plugin-vue to v6, @vitejs/plugin-vue-jsx to v5, and vite-plugin-vue-devtools to v8. No changes are needed from users.

6.0.0-beta.0

Patch Changes

6.0.0-alpha.1

Patch Changes

  • #15045 31074fc Thanks @​ematipico! - Fixes an issue where using the Vue integration with the Cloudflare adapter resulted in some runtime errors.

6.0.0-alpha.0

Major Changes

Patch Changes

Commits

Updates astro from 5.18.1 to 6.0.5

Release notes

Sourced from astro's releases.

astro@6.0.5

Patch Changes

  • #15891 b889231 Thanks @​matthewp! - Fix dev routing for server:defer islands when adapters opt into handling prerendered routes in Astro core. Server island requests are now treated as prerender-handler eligible so prerendered pages using prerenderEnvironment: 'node' can load island content without 400 errors.

  • #15890 765a887 Thanks @​matthewp! - Fixes astro:actions validation to check resolved routes, so projects using default static output with at least one prerender = false page or endpoint no longer fail during startup.

  • #15884 dcd2c8e Thanks @​matthewp! - Avoid a MaxListenersExceededWarning during astro dev startup by increasing the shared Vite watcher listener limit when attaching content server listeners.

  • #15904 23d5244 Thanks @​jlukic! - Emit the before-hydration script chunk for the client Vite environment. The chunk was only emitted for prerender and ssr environments, causing a 404 when browsers tried to load it. This broke hydration for any integration using injectScript('before-hydration', ...), including Lit SSR.

  • #15933 325901e Thanks @​ematipico! - Fixes an issue where <style> tags inside SVG components weren't correctly tracked when enabling CSP.

  • #15875 c43ef8a Thanks @​matthewp! - Ensure custom prerenderers are always torn down during build, even when getStaticPaths() throws.

  • #15887 1861fed Thanks @​ematipico! - Fixes an issue where the build incorrectly leaked server entrypoint into the client environment, causing adapters to emit warnings during the build.

  • #15888 925252e Thanks @​matthewp! - Fix a bug where server:defer could fail at runtime in prerendered pages for some adapters (including Cloudflare), causing errors like serverIslandMap?.get is not a function.

  • #15901 07c1002 Thanks @​delucis! - Fixes JSON schema generation for content collection schemas that have differences between their input and output shapes.

  • #15882 759f946 Thanks @​matthewp! - Fix Astro.url.pathname for the root page when using build.format: "file" so it resolves to /index.html instead of /.html during builds.

astro@6.0.4

Patch Changes

  • #15870 920f10b Thanks @​matthewp! - Prebundle astro/toolbar in dev when custom dev toolbar apps are registered, preventing re-optimization reloads that can hide or break the toolbar.

  • #15876 f47ac53 Thanks @​ematipico! - Fixes redirectToDefaultLocale producing a protocol-relative URL (//locale) instead of an absolute path (/locale) when base is '/'.

  • #15767 e0042f7 Thanks @​matthewp! - Fixes server islands (server:defer) not working when only used in prerendered pages with output: 'server'.

  • #15873 35841ed Thanks @​matthewp! - Fix a dev server bug where newly created pages could miss layout-imported CSS until restart.

  • #15874 ce0669d Thanks @​ematipico! - Fixes a warning when using prefetchAll

  • #15754 58f1d63 Thanks @​rururux! - Fixes a bug where a directory at the project root sharing the same name as a page route would cause the dev server to return a 404 instead of serving the page.

  • #15869 76b3a5e Thanks @​matthewp! - Update the unknown file extension error hint to recommend vite.resolve.noExternal, which is the correct Vite 7 config key.

astro@6.0.3

Patch Changes

  • #15711 b2bd27b Thanks @​OliverSpeir! - Improves Astro core's dev environment handling for prerendered routes by ensuring route/CSS updates and prerender middleware behavior work correctly across both SSR and prerender environments.

    This enables integrations that use Astro's prerender dev environment (such as Cloudflare with prerenderEnvironment: 'node') to get consistent route matching and HMR behavior during development.

  • #15852 1cdaf9f Thanks @​ematipico! - Fixes a regression where the the routes emitted by the astro:build:done hook didn't have the distURL array correctly populated.

  • #15765 ca76ff1 Thanks @​matthewp! - Hardens server island POST endpoint validation to use own-property checks for improved consistency

... (truncated)

Changelog

Sourced from astro's changelog.

6.0.5

Patch Changes

  • #15891 b889231 Thanks @​matthewp! - Fix dev routing for server:defer islands when adapters opt into handling prerendered routes in Astro core. Server island requests are now treated as prerender-handler eligible so prerendered pages using prerenderEnvironment: 'node' can load island content without 400 errors.

  • #15890 765a887 Thanks @​matthewp! - Fixes astro:actions validation to check resolved routes, so projects using default static output with at least one prerender = false page or endpoint no longer fail during startup.

  • #15884 dcd2c8e Thanks @​matthewp! - Avoid a MaxListenersExceededWarning during astro dev startup by increasing the shared Vite watcher listener limit when attaching content server listeners.

  • #15904 23d5244 Thanks @​jlukic! - Emit the before-hydration script chunk for the client Vite environment. The chunk was only emitted for prerender and ssr environments, causing a 404 when browsers tried to load it. This broke hydration for any integration using injectScript('before-hydration', ...), including Lit SSR.

  • #15933 325901e Thanks @​ematipico! - Fixes an issue where <style> tags inside SVG components weren't correctly tracked when enabling CSP.

  • #15875 c43ef8a Thanks @​matthewp! - Ensure custom prerenderers are always torn down during build, even when getStaticPaths() throws.

  • #15887 1861fed Thanks @​ematipico! - Fixes an issue where the build incorrectly leaked server entrypoint into the client environment, causing adapters to emit warnings during the build.

  • #15888 925252e Thanks @​matthewp! - Fix a bug where server:defer could fail at runtime in prerendered pages for some adapters (including Cloudflare), causing errors like serverIslandMap?.get is not a function.

  • #15901 07c1002 Thanks @​delucis! - Fixes JSON schema generation for content collection schemas that have differences between their input and output shapes.

  • #15882 759f946 Thanks @​matthewp! - Fix Astro.url.pathname for the root page when using build.format: "file" so it resolves to /index.html instead of /.html during builds.

6.0.4

Patch Changes

  • #15870 920f10b Thanks @​matthewp! - Prebundle astro/toolbar in dev when custom dev toolbar apps are registered, preventing re-optimization reloads that can hide or break the toolbar.

  • #15876 f47ac53 Thanks @​ematipico! - Fixes redirectToDefaultLocale producing a protocol-relative URL (//locale) instead of an absolute path (/locale) when base is '/'.

  • #15767 e0042f7 Thanks @​matthewp! - Fixes server islands (server:defer) not working when only used in prerendered pages with output: 'server'.

  • #15873 35841ed Thanks @​matthewp! - Fix a dev server bug where newly created pages could miss layout-imported CSS until restart.

  • #15874 ce0669d Thanks @​ematipico! - Fixes a warning when using prefetchAll

  • #15754 58f1d63 Thanks @​rururux! - Fixes a bug where a directory at the project root sharing the same name as a page route would cause the dev server to return a 404 instead of serving the page.

  • #15869 76b3a5e Thanks @​matthewp! - Update the unknown file extension error hint to recommend vite.resolve.noExternal, which is the correct Vite 7 config key.

6.0.3

Patch Changes

  • #15711 b2bd27b Thanks @​OliverSpeir! - Improves Astro core's dev environment handling for prerendered routes by ensuring route/CSS updates and prerender middleware behavior work correctly across both SSR and prerender environments.

    This enables integrations that use Astro's prerender dev environment (such as Cloudflare with prerenderEnvironment: 'node') to get consistent route matching and HMR behavior during development.

... (truncated)

Commits

Updates vite from 7.3.1 to 8.0.0

Release notes

Sourced from vite's releases.

create-vite@8.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0-beta.18

Please refer to CHANGELOG.md for details.

v8.0.0-beta.17

Please refer to CHANGELOG.md for details.

v8.0.0-beta.16

Please refer to CHANGELOG.md for details.

v8.0.0-beta.15

Please refer to CHANGELOG.md for details.

v8.0.0-beta.14

Please refer to CHANGELOG.md for details.

v8.0.0-beta.13

Please refer to CHANGELOG.md for details.

v8.0.0-beta.12

Please refer to CHANGELOG.md for details.

v8.0.0-beta.11

Please refer to CHANGELOG.md for details.

v8.0.0-beta.10

Please refer to CHANGELOG.md for details.

v8.0.0-beta.9

Please refer to CHANGELOG.md for details.

v8.0.0-beta.8

Please refer to CHANGELOG.md for details.

v8.0.0-beta.7

Please refer to CHANGELOG.md for details.

v8.0.0-beta.6

Please refer to CHANGELOG.md for details.

v8.0.0-beta.5

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.0 (2026-03-12)

Vite 8 is here!

Today, we're thrilled to announce the release of the next Vite major:

⚠ BREAKING CHANGES

  • remove import.meta.hot.accept resolution fallback (#21382)
  • update default browser target (#21193)
  • the epic rolldown-vite merge (#21189)

Features

... (truncated)

Commits
  • ea68a88 chore(deps): update rolldown-related dependencies (#20810)
  • 693d255 release: v7.1.7
  • 98a3484 fix(hmr): wait for import.meta.hot.prune callbacks to complete before runni...
  • 9f32b1d fix(hmr): trigger prune event when import is removed from non hmr module (#20...
  • 9f2247c fix(deps): update all non-major dependencies (#20811)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 17, 2026
@changeset-bot
Copy link

changeset-bot bot commented Mar 17, 2026 •
edited
Loading

⚠️ No Changeset found

Latest commit: 8834d66

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Mar 17, 2026

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
🔵 In progress
View logs		 varlock-docs-mcp f72dcec Mar 17 2026, 02:04 AM

@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Mar 17, 2026 •
edited
Loading

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs		 varlock-docs-mcp 8834d66 Mar 18 2026, 10:07 PM

@socket-security
Copy link

socket-security bot commented Mar 17, 2026 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedtypescript-eslint@​8.57.11001007498100
Addedturbo@​2.8.181001008598100
Added@​infisical/​sdk@​5.0.0931008794100

View full report

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/major-bd86cc4352 branch from f72dcec to 7e724cf Compare March 17, 2026 21:45
@socket-security
Copy link

socket-security bot commented Mar 17, 2026 •
edited
Loading

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/major-bd86cc4352 branch from 7e724cf to edf19a1 Compare March 18, 2026 07:21
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/major-bd86cc4352 branch from edf19a1 to 6f80a60 Compare March 18, 2026 21:55
@dependabot
Bump the major group across 3 directories with 6 updates
8834d66 
Bumps the major group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ai](https://github.com/vercel/ai) | `5.0.154` | `6.0.116` |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `4.3.14` | `5.0.1` |
| [@astrojs/vue](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vue) | `5.1.4` | `6.0.1` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.18.1` | `6.0.5` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.1` | `8.0.0` |
| [@infisical/sdk](https://github.com/infisical/infisical-node-sdk) | `4.0.6` | `5.0.0` |

Bumps the major group with 1 update in the /packages/integrations/vite directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).
Bumps the major group with 3 updates in the /packages/varlock-website directory: [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx), [@astrojs/vue](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vue) and [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro).


Updates `ai` from 5.0.154 to 6.0.116
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@5.0.154...ai@6.0.116)

Updates `@astrojs/mdx` from 4.3.14 to 5.0.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@5.0.1/packages/integrations/mdx)

Updates `@astrojs/vue` from 5.1.4 to 6.0.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vue/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/vue@6.0.1/packages/integrations/vue)

Updates `astro` from 5.18.1 to 6.0.5
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@6.0.5/packages/astro)

Updates `vite` from 7.3.1 to 8.0.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.0/packages/vite)

Updates `@infisical/sdk` from 4.0.6 to 5.0.0
- [Release notes](https://github.com/infisical/infisical-node-sdk/releases)
- [Commits](Infisical/node-sdk-v2@4.0.6...5.0.0)

Updates `vite` from 7.3.1 to 8.0.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.0/packages/vite)

Updates `@astrojs/mdx` from 4.3.14 to 5.0.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@5.0.1/packages/integrations/mdx)

Updates `@astrojs/vue` from 5.1.4 to 6.0.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vue/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/vue@6.0.1/packages/integrations/vue)

Updates `astro` from 5.18.1 to 6.0.5
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@6.0.5/packages/astro)

---
updated-dependencies:
- dependency-name: ai
  dependency-version: 6.0.116
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@astrojs/mdx"
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@astrojs/vue"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: astro
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: vite
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@infisical/sdk"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: vite
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@astrojs/mdx"
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@astrojs/vue"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: astro
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/major-bd86cc4352 branch from 6f80a60 to 8834d66 Compare March 18, 2026 22:06
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 19, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Mar 19, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/major-bd86cc4352 branch March 19, 2026 07:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

community core:docs-mcp core:website dependencies Pull requests that update a dependency file docs integration:vite javascript Pull requests that update javascript code plugin:infisical

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@theoephraim