Skip to content

chore(deps): bump the minor group across 4 directories with 7 updates#697

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-ff18461d59
Closed

chore(deps): bump the minor group across 4 directories with 7 updates#697
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-ff18461d59

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 11, 2026 •
edited
Loading

Bumps the minor group with 7 updates in the / directory:

Package From To
gunshi 0.28.2 0.29.5
@modelcontextprotocol/sdk 1.23.0 1.29.0
agents 0.2.35 0.12.3
@astrojs/starlight 0.37.7 0.39.2
astro-og-canvas 0.7.2 0.11.1
canvaskit-wasm 0.40.0 0.41.1
starlight-llms-txt 0.6.1 0.8.1

Bumps the minor group with 1 update in the /packages/varlock directory: gunshi.
Bumps the minor group with 2 updates in the /packages/varlock-docs-mcp directory: @modelcontextprotocol/sdk and agents.
Bumps the minor group with 4 updates in the /packages/varlock-website directory: @astrojs/starlight, astro-og-canvas, canvaskit-wasm and starlight-llms-txt.

Updates gunshi from 0.28.2 to 0.29.5

Release notes

Sourced from gunshi's releases.

v0.29.5

What's Changed

🐛 Bug Fixes

Full Changelog: kazupon/gunshi@v0.29.4...v0.29.5

v0.29.4

What's Changed

🐛 Bug Fixes

Full Changelog: kazupon/gunshi@v0.29.3...v0.29.4

v0.29.3

Full Changelog: kazupon/gunshi@v0.29.2...v0.29.3

v0.29.2

Full Changelog: kazupon/gunshi@v0.29.1...v0.29.2

v0.29.1

Full Changelog: kazupon/gunshi@v0.29.0...v0.29.1

v0.29.0

What's Changed

🌟 Features

Full Changelog: kazupon/gunshi@v0.28.2...v0.29.0

Changelog

Sourced from gunshi's changelog.

v0.29.5 (2026-05-01T02:35:37Z)

This changelog is generated by GitHub Releases

What's Changed

🐛 Bug Fixes

Full Changelog: kazupon/gunshi@v0.29.4...v0.29.5

v0.29.4 (2026-04-09T06:58:18Z)

This changelog is generated by GitHub Releases

What's Changed

🐛 Bug Fixes

Full Changelog: kazupon/gunshi@v0.29.3...v0.29.4

v0.29.3 (2026-03-11T08:53:31Z)

This changelog is generated by GitHub Releases

Full Changelog: kazupon/gunshi@v0.29.2...v0.29.3

v0.29.2 (2026-02-21T14:05:58Z)

This changelog is generated by GitHub Releases

Full Changelog: kazupon/gunshi@v0.29.1...v0.29.2

v0.29.1 (2026-02-21T14:00:47Z)

This changelog is generated by GitHub Releases

... (truncated)

Commits

Updates @modelcontextprotocol/sdk from 1.23.0 to 1.29.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.29.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.28.0...v1.29.0

v1.28.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0

v1.27.1

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.0...v1.27.1

v1.27.0

What's Changed

... (truncated)

Commits

Updates agents from 0.2.35 to 0.12.3

Release notes

Sourced from agents's releases.

agents@0.12.3

Patch Changes

agents@0.12.2

Patch Changes

  • 2fffa02 Thanks @​threepointone! - Raise the minimum internal peer dependency versions for Agents chat packages so agents, @cloudflare/ai-chat, and @cloudflare/think require versions at least as recent as the current repo packages.

agents@0.12.1

Patch Changes

  • #1443 e7d225b Thanks @​threepointone! - Fix sub-agent WebSockets on deployed Workers by keeping the browser WebSocket owned by the parent Agent and forwarding connect/message/close events to child facets over RPC.

    Fix resumed chat streams so a partially hydrated assistant response is rebuilt from replay chunks instead of rendering replayed text as a second assistant text part.

    Fix a resume ACK race where drill-in chat connections could miss the terminal stream frame if the helper completed between the resume notification and client acknowledgement.

agents@0.12.0

Minor Changes

  • #1421 1b65ff5 Thanks @​threepointone! - Add agent tool orchestration for running Think and AIChatAgent sub-agents as retained, streaming tools from a parent agent. The new surface includes runAgentTool, agentTool, parent-side run replay and cleanup, Think and AIChatAgent child adapter support, and headless React/client event state helpers.

Patch Changes

  • #1418 8de0ce3 Thanks @​threepointone! - Allow sub-agents to use alarm-backed APIs by delegating the physical Durable Object alarm to the top-level parent while executing logical work inside the owning sub-agent. This enables schedule(), scheduleEvery(), cancelSchedule(), getScheduleById(), listSchedules(), keepAlive(), keepAliveWhile(), runFiber(), and Think chat recovery inside sub-agents.

    Sub-agent schedules are scoped to the calling child, so sibling sub-agents cannot cancel each other's schedules by id. The deprecated synchronous getSchedule() and getSchedules() APIs now throw inside sub-agents; use the async alternatives instead. Destroying a sub-agent now delegates cleanup through the parent so parent-owned schedules and descendant fiber recovery leases are removed consistently.

  • #1425 6471cbd Thanks @​threepointone! - Clear request, WebSocket, and email native context handles when switching Agent instances and suppress protocol broadcasts during sub-agent facet bootstrap.

agents@0.11.9

Patch Changes

  • #1412 8fb7c03 Thanks @​threepointone! - Make applyChunkToParts idempotent against an existing tool part with the same toolCallId, and add isReplayChunk(parts, chunk) for stream broadcasters that want to drop provider replay chunks (#1404).

    Some providers (notably the OpenAI Responses API) re-emit a prior tool call in continuation streams. The previous tool-input-start handler unconditionally pushed a fresh tool part, which produced duplicate parts in the message; tool-input-delta and tool-input-available overwrote a fully resolved input/state if a chunk happened to arrive for an already-known toolCallId. The new behavior:

    • tool-input-start for a toolCallId that already exists in parts is a no-op (it does not push a duplicate or regress state).
    • tool-input-delta only mutates input while the existing part is still input-streaming.
    • tool-input-available only advances from input-streaming to input-available; replays against parts that have already moved past input-streaming (including approval-requested/approval-responded and any terminal state) are no-ops.

    isReplayChunk(parts, chunk) is exported from agents/chat for stream broadcasters (e.g. AIChatAgent._streamSSEReply) that want to detect "this chunk is a replay of an already-known tool call" and skip re-broadcasting it. AI SDK v6's updateToolPart on the client mutates an existing tool part in place when the toolCallId matches, so re-broadcasting these replay chunks would visibly regress an output-available part to input-streaming on connected clients. tool-output-available is not treated as a replay because its in-place update is safe when the output already matches.

    Tool calls that the model genuinely wants to re-issue always carry a new toolCallId, so an existing match is never a legitimate "start over".

... (truncated)

Changelog

Sourced from agents's changelog.

0.12.3

Patch Changes

0.12.2

Patch Changes

  • 2fffa02 Thanks @​threepointone! - Raise the minimum internal peer dependency versions for Agents chat packages so agents, @cloudflare/ai-chat, and @cloudflare/think require versions at least as recent as the current repo packages.

0.12.1

Patch Changes

  • #1443 e7d225b Thanks @​threepointone! - Fix sub-agent WebSockets on deployed Workers by keeping the browser WebSocket owned by the parent Agent and forwarding connect/message/close events to child facets over RPC.

    Fix resumed chat streams so a partially hydrated assistant response is rebuilt from replay chunks instead of rendering replayed text as a second assistant text part.

    Fix a resume ACK race where drill-in chat connections could miss the terminal stream frame if the helper completed between the resume notification and client acknowledgement.

0.12.0

Minor Changes

  • #1421 1b65ff5 Thanks @​threepointone! - Add agent tool orchestration for running Think and AIChatAgent sub-agents as retained, streaming tools from a parent agent. The new surface includes runAgentTool, agentTool, parent-side run replay and cleanup, Think and AIChatAgent child adapter support, and headless React/client event state helpers.

Patch Changes

  • #1418 8de0ce3 Thanks @​threepointone! - Allow sub-agents to use alarm-backed APIs by delegating the physical Durable Object alarm to the top-level parent while executing logical work inside the owning sub-agent. This enables schedule(), scheduleEvery(), cancelSchedule(), getScheduleById(), listSchedules(), keepAlive(), keepAliveWhile(), runFiber(), and Think chat recovery inside sub-agents.

    Sub-agent schedules are scoped to the calling child, so sibling sub-agents cannot cancel each other's schedules by id. The deprecated synchronous getSchedule() and getSchedules() APIs now throw inside sub-agents; use the async alternatives instead. Destroying a sub-agent now delegates cleanup through the parent so parent-owned schedules and descendant fiber recovery leases are removed consistently.

  • #1425 6471cbd Thanks @​threepointone! - Clear request, WebSocket, and email native context handles when switching Agent instances and suppress protocol broadcasts during sub-agent facet bootstrap.

0.11.9

Patch Changes

  • #1412 8fb7c03 Thanks @​threepointone! - Make applyChunkToParts idempotent against an existing tool part with the same toolCallId, and add isReplayChunk(parts, chunk) for stream broadcasters that want to drop provider replay chunks (#1404).

    Some providers (notably the OpenAI Responses API) re-emit a prior tool call in continuation streams. The previous tool-input-start handler unconditionally pushed a fresh tool part, which produced duplicate parts in the message; tool-input-delta and tool-input-available overwrote a fully resolved input/state if a chunk happened to arrive for an already-known toolCallId. The new behavior:

    • tool-input-start for a toolCallId that already exists in parts is a no-op (it does not push a duplicate or regress state).
    • tool-input-delta only mutates input while the existing part is still input-streaming.

... (truncated)

Commits

Updates @astrojs/starlight from 0.37.7 to 0.39.2

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.39.2

Patch Changes

@​astrojs/starlight@​0.39.1

Patch Changes

  • #3885 010eed1 Thanks @​ArmandPhilippot! - Fixes the version mentioned in an error message related to autogenerated sidebar groups support.

  • #3887 b3c6990 Thanks @​delucis! - Adds 13 new icons: clock, desktop, mobile-android, window, database, server, code-branch, notes, question, question-circle, analytics, padlock, and solidjs.

@​astrojs/starlight@​0.39.0

Minor Changes

  • #3618 dcf6d09 Thanks @​HiDeoo! - ⚠️ BREAKING CHANGE: This release changes how autogenerated links work in Starlight’s sidebar configuration.

    If you have sidebar groups using the autogenerate key, you must now wrap that configuration in an items array:

    {
    label: 'My group',
-   autogenerate: { directory: 'some-dir' },
+   items: [{ autogenerate: { directory: 'some-dir' } }],
}

    This change unlocks the possibility to mix autogenerated links and other links in a single group, for example:

    {
  label: 'Mixed group',
  items: [
    'example-page',
    { autogenerate: { directory: 'examples' } },
    { label: 'More examples', link: 'https://example.com' },
  ],
}

    This release also updates the shape of autogenerated sidebar entries in route data. Autogenerated links and groups in Astro.locals.starlightRoute.sidebar now include an autogenerate object with the configured directory value:

    {
  type: 'link',
  label: 'Example',
  href: '/examples/example/',
  isCurrent: false,
  autogenerate: { directory: 'examples' }
}

... (truncated)

Changelog

Sourced from @​astrojs/starlight's changelog.

0.39.2

Patch Changes

0.39.1

Patch Changes

  • #3885 010eed1 Thanks @​ArmandPhilippot! - Fixes the version mentioned in an error message related to autogenerated sidebar groups support.

  • #3887 b3c6990 Thanks @​delucis! - Adds 13 new icons: clock, desktop, mobile-android, window, database, server, code-branch, notes, question, question-circle, analytics, padlock, and solidjs.

0.39.0

Minor Changes

  • #3618 dcf6d09 Thanks @​HiDeoo! - ⚠️ BREAKING CHANGE: This release changes how autogenerated links work in Starlight’s sidebar configuration.

    If you have sidebar groups using the autogenerate key, you must now wrap that configuration in an items array:

    {
    label: 'My group',
-   autogenerate: { directory: 'some-dir' },
+   items: [{ autogenerate: { directory: 'some-dir' } }],
}

    This change unlocks the possibility to mix autogenerated links and other links in a single group, for example:

    {
  label: 'Mixed group',
  items: [
    'example-page',
    { autogenerate: { directory: 'examples' } },
    { label: 'More examples', link: 'https://example.com' },
  ],
}

    This release also updates the shape of autogenerated sidebar entries in route data. Autogenerated links and groups in Astro.locals.starlightRoute.sidebar now include an autogenerate object with the configured directory value:

    {
  type: 'link',
  label: 'Example',
  href: '/examples/example/',

... (truncated)

Commits

Updates astro-og-canvas from 0.7.2 to 0.11.1

Release notes

Sourced from astro-og-canvas's releases.

astro-og-canvas@0.11.1

Patch Changes

astro-og-canvas@0.11.0

Minor Changes

  • #157 91ac061 Thanks @​renovate! - Updates dependency entities to v8

    ⚠️ Potentially breaking change: The minimum supported Node version is now 20.19.0

Patch Changes

astro-og-canvas@0.10.1

Patch Changes

astro-og-canvas@0.10.0

Minor Changes

  • #119 151edd2 Thanks @​delucis! - Makes OGImageRoute() asynchronous.

    ⚠️ BREAKING CHANGE: You must now await the result of OGImageRoute():

    import { OGImageRoute } from 'astro-og-canvas';

export const { getStaticPaths, GET } = OGImageRoute({


export const { getStaticPaths, GET } = await OGImageRoute({

Patch Changes

  • #119 151edd2 Thanks @​delucis! - Fixes using the built-in getSlug() for OG images with format: "JPEG" or format: "WEBP"

astro-og-canvas@0.9.0

Minor Changes

  • #117 b94a123 Thanks @​delucis! - Adds type safety to OGImageRoute. The page parameter in getSlug() and getImageOptions() is now correctly inferred from the value passed to pages instead of being typed as any.

    OGImageRoute({
  pages: {
    example: {
      title: 'Example Page',
      description: 'Description of this page shown in smaller text',

... (truncated)

Changelog

Sourced from astro-og-canvas's changelog.

0.11.1

Patch Changes

0.11.0

Minor Changes

  • #157 91ac061 Thanks @​renovate! - Updates dependency entities to v8

    ⚠️ Potentially breaking change: The minimum supported Node version is now 20.19.0

Patch Changes

0.10.1

Patch Changes

0.10.0

Minor Changes

  • #119 151edd2 Thanks @​delucis! - Makes OGImageRoute() asynchronous.

    ⚠️ BREAKING CHANGE: You must now await the result of OGImageRoute():

    import { OGImageRoute } from 'astro-og-canvas';

export const { getStaticPaths, GET } = OGImageRoute({


export const { getStaticPaths, GET } = await OGImageRoute({

Patch Changes

  • #119 151edd2 Thanks @​delucis! - Fixes using the built-in getSlug() for OG images with format: "JPEG" or format: "WEBP"

0.9.0

Minor Changes

  • #117 b94a123 Thanks @​delucis! - Adds type safety to OGImageRoute. The page parameter in getSlug() and getImageOptions() is now correctly inferred from the value passed to pages instead of being typed as any.

    

    • 






... (truncated)





Commits






Updates canvaskit-wasm from 0.40.0 to 0.41.1



Commits






Updates starlight-llms-txt from 0.6.1 to 0.8.1



Release notes

Sourced from starlight-llms-txt's releases.




starlight-llms-txt@0.8.1


Patch Changes


    

  • 29e5efb Thanks @​mvanhorn! - Strips HTML comments from llms.txt files. <!-- ...  --> style comments in .md files are no longer emitted in the generated files.
    • 



starlight-llms-txt@0.8.0


Minor Changes


    

  • #80 dea7b22 Thanks @​nonoakij! - Adds support for Astro v6 and Starlight v0.38, drops support for lower versions.
    • 



starlight-llms-txt@0.7.0


Minor Changes


    

  • 

    #43 1db4591 Thanks @​sanscontext! - Enforces llms.txt files to be prerendered at build time.
Previously, sites using Astro’s output: server configuration would generate llms.txt files on-demand, which can be slow, and additionally was incompatible with the custom sets feature.
This change means that llms.txt files are statically generated even for sites using output: server.
    

    ⚠️ Potentially breaking change: If you were relying on on-demand rendered llms.txt files, for example by using middleware to gate access, this may be a breaking change. Please share your use case to let us know if you need this.
    

    • 








Changelog

Sourced from starlight-llms-txt's changelog.




0.8.1


Patch Changes


    

  • 29e5efb Thanks @​mvanhorn! - Strips HTML comments from llms.txt files. <!-- ...  --> style comments in .md files are no longer emitted in the generated files.
    • 



0.8.0


Minor Changes


    

  • #80 dea7b22 Thanks @​nonoakij! - Adds support for Astro v6 and Starlight v0.38, drops support for lower versions.
    • 



0.7.0


Minor Changes


    

  • 

    #43 1db4591 Thanks @​sanscontext! - Enforces llms.txt files to be prerendered at build time.
Previously, sites using Astro’s output: server configuration would generate llms.txt files on-demand, which can be slow, and additionally was incompatible with the custom sets feature.
This change means that llms.txt files are statically generated even for sites using output: server.
    

    ⚠️ Potentially breaking change: If you were relying on on-demand rendered llms.txt files, for example by using middleware to gate access, this may be a breaking change. Please share your use case to let us know if you need this.
    

    • 








Commits






Updates @modelcontextprotocol/sdk from 1.23.0 to 1.29.0



Release notes

Sourced from @​modelcontextprotocol/sdk's releases.




v1.29.0


What's Changed



    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

      
        @dependabot
  




      

        
          chore(deps): bump the minor group across 4 directories with 7 updates
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          3aacb57
        
      

    

  

    

      
Bumps the minor group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [gunshi](https://github.com/kazupon/gunshi/tree/HEAD/packages/gunshi) | `0.28.2` | `0.29.5` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.23.0` | `1.29.0` |
| [agents](https://github.com/cloudflare/agents/tree/HEAD/packages/agents) | `0.2.35` | `0.12.3` |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.37.7` | `0.39.2` |
| [astro-og-canvas](https://github.com/delucis/astro-og-canvas/tree/HEAD/packages/astro-og-canvas) | `0.7.2` | `0.11.1` |
| [canvaskit-wasm](https://github.com/google/skia) | `0.40.0` | `0.41.1` |
| [starlight-llms-txt](https://github.com/delucis/starlight-llms-txt/tree/HEAD/packages/starlight-llms-txt) | `0.6.1` | `0.8.1` |

Bumps the minor group with 1 update in the /packages/varlock directory: [gunshi](https://github.com/kazupon/gunshi/tree/HEAD/packages/gunshi).
Bumps the minor group with 2 updates in the /packages/varlock-docs-mcp directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) and [agents](https://github.com/cloudflare/agents/tree/HEAD/packages/agents).
Bumps the minor group with 4 updates in the /packages/varlock-website directory: [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight), [astro-og-canvas](https://github.com/delucis/astro-og-canvas/tree/HEAD/packages/astro-og-canvas), [canvaskit-wasm](https://github.com/google/skia) and [starlight-llms-txt](https://github.com/delucis/starlight-llms-txt/tree/HEAD/packages/starlight-llms-txt).


Updates `gunshi` from 0.28.2 to 0.29.5
- [Release notes](https://github.com/kazupon/gunshi/releases)
- [Changelog](https://github.com/kazupon/gunshi/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kazupon/gunshi/commits/v0.29.5/packages/gunshi)

Updates `@modelcontextprotocol/sdk` from 1.23.0 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.23.0...v1.29.0)

Updates `agents` from 0.2.35 to 0.12.3
- [Release notes](https://github.com/cloudflare/agents/releases)
- [Changelog](https://github.com/cloudflare/agents/blob/main/packages/agents/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/agents/commits/agents@0.12.3/packages/agents)

Updates `@astrojs/starlight` from 0.37.7 to 0.39.2
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.39.2/packages/starlight)

Updates `astro-og-canvas` from 0.7.2 to 0.11.1
- [Release notes](https://github.com/delucis/astro-og-canvas/releases)
- [Changelog](https://github.com/delucis/astro-og-canvas/blob/latest/packages/astro-og-canvas/CHANGELOG.md)
- [Commits](https://github.com/delucis/astro-og-canvas/commits/astro-og-canvas@0.11.1/packages/astro-og-canvas)

Updates `canvaskit-wasm` from 0.40.0 to 0.41.1
- [Changelog](https://github.com/google/skia/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/google/skia/commits)

Updates `starlight-llms-txt` from 0.6.1 to 0.8.1
- [Release notes](https://github.com/delucis/starlight-llms-txt/releases)
- [Changelog](https://github.com/delucis/starlight-llms-txt/blob/main/packages/starlight-llms-txt/CHANGELOG.md)
- [Commits](https://github.com/delucis/starlight-llms-txt/commits/starlight-llms-txt@0.8.1/packages/starlight-llms-txt)

Updates `@modelcontextprotocol/sdk` from 1.23.0 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.23.0...v1.29.0)

Updates `gunshi` from 0.28.2 to 0.29.5
- [Release notes](https://github.com/kazupon/gunshi/releases)
- [Changelog](https://github.com/kazupon/gunshi/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kazupon/gunshi/commits/v0.29.5/packages/gunshi)

Updates `@modelcontextprotocol/sdk` from 1.23.0 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.23.0...v1.29.0)

Updates `agents` from 0.2.35 to 0.12.3
- [Release notes](https://github.com/cloudflare/agents/releases)
- [Changelog](https://github.com/cloudflare/agents/blob/main/packages/agents/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/agents/commits/agents@0.12.3/packages/agents)

Updates `@modelcontextprotocol/sdk` from 1.23.0 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.23.0...v1.29.0)

Updates `@astrojs/starlight` from 0.37.7 to 0.39.2
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.39.2/packages/starlight)

Updates `astro-og-canvas` from 0.7.2 to 0.11.1
- [Release notes](https://github.com/delucis/astro-og-canvas/releases)
- [Changelog](https://github.com/delucis/astro-og-canvas/blob/latest/packages/astro-og-canvas/CHANGELOG.md)
- [Commits](https://github.com/delucis/astro-og-canvas/commits/astro-og-canvas@0.11.1/packages/astro-og-canvas)

Updates `canvaskit-wasm` from 0.40.0 to 0.41.1
- [Changelog](https://github.com/google/skia/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/google/skia/commits)

Updates `starlight-llms-txt` from 0.6.1 to 0.8.1
- [Release notes](https://github.com/delucis/starlight-llms-txt/releases)
- [Changelog](https://github.com/delucis/starlight-llms-txt/blob/main/packages/starlight-llms-txt/CHANGELOG.md)
- [Commits](https://github.com/delucis/starlight-llms-txt/commits/starlight-llms-txt@0.8.1/packages/starlight-llms-txt)

---
updated-dependencies:
- dependency-name: gunshi
  dependency-version: 0.29.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: agents
  dependency-version: 0.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: astro-og-canvas
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: canvaskit-wasm
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: starlight-llms-txt
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: gunshi
  dependency-version: 0.29.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: agents
  dependency-version: 0.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: astro-og-canvas
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: canvaskit-wasm
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: starlight-llms-txt
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  javascript

  Pull requests that update javascript code

  labels


      May 11, 2026

    

  



  

  

    
  


  

      


    @dependabot
dependabot
Bot


    mentioned this pull request
    
      May 11, 2026
    





  


  

      
   Closed

  







  









      

  
      



  

  @cloudflare-workers-and-pages






  



    

      

  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        



        

    

  


  

    

      
          
      

      
            cloudflare-workers-and-pages
  Bot

      

      

      commented


        May 11, 2026


      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  





      


        



  
    

      
          
Deploying with  Cloudflare Workers  Cloudflare Workers


The latest updates on your project. Learn more about integrating Git with Workers.






Status
Name
Latest Commit
Updated (UTC)






❌ Deployment failed 
View logs		
varlock-website
3aacb57
May 11 2026, 08:37 PM






      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
      



  

  @cloudflare-workers-and-pages






  



    

      

  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        



        

    

  


  

    

      
          
      

      
            cloudflare-workers-and-pages
  Bot

      

      

      commented


        May 11, 2026


      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  





      


        



  
    

      
          
Deploying with  Cloudflare Workers  Cloudflare Workers


The latest updates on your project. Learn more about integrating Git with Workers.






Status
Name
Latest Commit
Updated (UTC)






❌ Deployment failed 
View logs		
varlock-docs-mcp
3aacb57
May 11 2026, 08:37 PM






      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
            







      

  
      



  

  @github-actions






  



    

      

  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        

  
    Contributor


        

    

  


  

    

      
          
      

      
            github-actions
  Bot

      

      

      commented


        May 11, 2026


      
    


  





      


        



  
    

      
          

bumpy-frog


Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a bump file.




You can add a bump file by running:


bunx bumpy add


Or click here to add a bump file directly on GitHub.




This comment is maintained by bumpy.


      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
      



  

  @socket-security






  



    

      

  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        



        

    

  


  

    

      
          
      

      
            socket-security
  Bot

      

      

      commented


        May 11, 2026


      
    


  





      


        



  
    

      
          
Review the following changes in direct dependencies. Learn more about Socket for GitHub.






Diff
Package
Supply Chain
Security		
Vulnerability
Quality
Maintenance
License





Updatednpm/​starlight-llms-txt@​0.6.1 ⏵ 0.8.184 +110074 +188 -3100


Updatednpm/​gunshi@​0.28.2 ⏵ 0.29.584 +1100100 +195100


Updatednpm/​@​astrojs/​starlight@​0.37.7 ⏵ 0.39.29810085 +197100


Updatednpm/​canvaskit-wasm@​0.40.0 ⏵ 0.41.1100 +110010090100


Updatednpm/​astro-og-canvas@​0.7.2 ⏵ 0.11.193 -210010091 +4100


Updatednpm/​@​modelcontextprotocol/​sdk@​1.23.0 ⏵ 1.29.099100 +3110095100


Updatednpm/​agents@​0.2.35 ⏵ 0.12.399 +1100 +4100 +197 -1100





View full report



      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
            

    







      

  
      



  

  @dependabot


    @github




  



    

      

  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        

  
    Contributor


        

  Author


    

  


  

    

      
          
      

      
            dependabot
  Bot

      

      

      commented

        on behalf of github

        May 21, 2026


      
    


  





      


        



  
    

      
          
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.


To ignore these dependencies, configure ignore rules in dependabot.yml


      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
          

  
  

  
      @dependabot
  dependabot
Bot

    
    deleted the
    
      
        dependabot/npm_and_yarn/minor-ff18461d59
    
    branch

    May 21, 2026 18:10    
    













  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    

    No reviews






    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    community

  

    core:docs-mcp

  

    core:varlock

  

    core:website

  

    dependencies

  Pull requests that update a dependency file
  

    javascript

  Pull requests that update javascript code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      1 participant
    

    

        
          @theoephraim