Skip to content

Bump the npm-dependencies group across 1 directory with 17 updates - #651

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-c53b53df34
Closed

Bump the npm-dependencies group across 1 directory with 17 updates#651
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-c53b53df34

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 16 updates in the / directory:

Package From To
@astrojs/compiler-rs 0.1.6 0.1.7
@axe-core/playwright 4.11.1 4.11.2
@sentry/astro 10.48.0 10.49.0
astro 6.1.6 6.1.8
astro-og-canvas 0.11.0 0.11.1
eslint 10.2.0 10.2.1
mjml 4.18.0 5.0.1
nanostores 1.2.0 1.3.0
postcss 8.5.9 8.5.10
prettier 3.8.2 3.8.3
puppeteer 24.40.0 24.41.0
resend 6.11.0 6.12.0
sanitize-html 2.17.2 2.17.3
stylelint 17.7.0 17.8.0
typescript 6.0.2 6.0.3
vercel 51.2.1 51.7.0

Updates @astrojs/compiler-rs from 0.1.6 to 0.1.7

Release notes

Sourced from @​astrojs/compiler-rs's releases.

@​astrojs/compiler-rs@​0.1.7

Patch Changes

  • 4c9a9ed: Fixes edge cases where certain niche types of expressions wouldn't properly compile
  • 1b17201: Fixes slots not working inside parenthesized conditional slots
  • cace524: Fixes the compiler sometimes adding extra whitespace between root elements when one of the root elements would be hoisted (e.g. style tags, scripts etc.)
  • 4ebb68d: Fixes slots not being collected inside optional chain expressions
  • dc9cbe4: Fixes scripts inside template elements not being rendered as-is
  • Updated dependencies [4c9a9ed]
  • Updated dependencies [1b17201]
  • Updated dependencies [cace524]
  • Updated dependencies [4ebb68d]
  • Updated dependencies [dc9cbe4]
    • @​astrojs/compiler-binding@​0.1.7
Commits
  • a316310 Version Packages (#23)
  • cace524 fix: don't print whitespace between elements that will be removed anyway (#24)
  • 4c9a9ed feat: handle more types of expressions correctly
  • 4ebb68d collect slots inside optional chain expressions (#16)
  • 1b17201 handle parenthesized conditional slots (#15)
  • dc9cbe4 fix(scripts): Render scripts inside template elements as-is
  • f54b744 fix(ci): add -x to x86_64-unknown-linux-gnu build for glibc compat (#22)
  • See full diff in compare view

Updates @axe-core/playwright from 4.11.1 to 4.11.2

Release notes

Sourced from @​axe-core/playwright's releases.

Release 4.11.2

Bug Fixes

Changelog

Sourced from @​axe-core/playwright's changelog.

4.11.2 (2026-04-14)

Bug Fixes

Commits
  • 310de0a chore: Release 4.11.2 (#1323)
  • 39d9967 chore: RC v4.11.2 (#1317)
  • 7eb0bf2 chore: RC v4.11.2
  • 71c4179 fix: Update axe-core to v4.11.3 (#1306)
  • 4689273 fix(wdio): support v9 wdio switchFrame and switchWindow (#1302)
  • 6d6dd29 chore: update dependabot config to ignore @​types/node major versions (#1295)
  • 49dd6ce chore: bump the npm-low-risk group across 1 directory with 21 updates (#1296)
  • 6d41ff4 refactor: move tyepscript, @​types/node, and ts-node to root (#1299)
  • 22ddeaf refactor: have all packages extend tsconfig from root (#1297)
  • e1dd13a chore: bump basic-ftp from 5.0.4 to 5.2.0 (#1282)
  • Additional commits viewable in compare view

Updates @sentry/astro from 10.48.0 to 10.49.0

Release notes

Sourced from @​sentry/astro's releases.

10.49.0

Important Changes

  • feat(browser): Add View Hierarchy integration (#14981)

    A new viewHierarchyIntegration captures the DOM structure when an error occurs, providing a snapshot of the page state for debugging. Enable it in your Sentry configuration:

    import * as Sentry from '@sentry/browser';
Sentry.init({
dsn: 'DSN',
integrations: [Sentry.viewHierarchyIntegration()],
});

  • feat(cloudflare): Split alarms into multiple traces and link them (#19373)

    Durable Object alarms now create separate traces for each alarm invocation, with proper linking between related alarms for better observability.

  • feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation (#19991, #20345)

    A new enableRpcTracePropagation option enables automatic trace propagation for Cloudflare RPC calls via .fetch(), ensuring distributed traces flow correctly across service bindings.

  • feat(core): Add enableTruncation option to AI integrations (#20167, #20181, #20182, #20183, #20184)

    All AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, LangGraph) now support an enableTruncation option to control whether large AI inputs/outputs are truncated.

  • feat(opentelemetry): Vendor AsyncLocalStorageContextManager (#20243)

    The OpenTelemetry context manager is now vendored internally, reducing external dependencies and ensuring consistent behavior across environments.

Other Changes

  • feat(core): Export a reusable function to add tracing headers (#20076)
  • feat(core): Expose rewriteSources top level option (#20142)
  • feat(deps): bump defu from 6.1.4 to 6.1.6 (#20104)
  • feat(node-native): Add support for V8 v14 (Node v25+) (#20125)
  • feat(node): Include global scope for eventLoopBlockIntegration (#20108)
  • fix(core, node): Support loading Express options lazily (#20211)
  • fix(core): Set conversation_id only on gen_ai spans (#20274)
  • fix(core): Use ai.operationId for Vercel AI V6 operation name mapping (#20285)
  • fix(deno): Avoid inferring invalid span op from Deno tracer (#20128)
  • fix(deno): Handle reader.closed rejection from releaseLock() in streaming (#20187)
  • fix(nextjs): Preserve directive prologues in turbopack loaders (#20103)
  • fix(nextjs): Skip custom browser tracing setup for bot user agents (#20263)
  • fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory leak (#20328)
  • fix(replay): Use live click attributes in breadcrumbs (#20262)

... (truncated)

Changelog

Sourced from @​sentry/astro's changelog.

10.49.0

Important Changes

  • feat(browser): Add View Hierarchy integration (#14981)

    A new viewHierarchyIntegration captures the DOM structure when an error occurs, providing a snapshot of the page state for debugging. Enable it in your Sentry configuration:

    import * as Sentry from '@sentry/browser';
Sentry.init({
dsn: 'DSN',
integrations: [Sentry.viewHierarchyIntegration()],
});

  • feat(cloudflare): Split alarms into multiple traces and link them (#19373)

    Durable Object alarms now create separate traces for each alarm invocation, with proper linking between related alarms for better observability.

  • feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation (#19991, #20345)

    A new enableRpcTracePropagation option enables automatic trace propagation for Cloudflare RPC calls via .fetch(), ensuring distributed traces flow correctly across service bindings.

  • feat(core): Add enableTruncation option to AI integrations (#20167, #20181, #20182, #20183, #20184)

    All AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, LangGraph) now support an enableTruncation option to control whether large AI inputs/outputs are truncated.

  • feat(opentelemetry): Vendor AsyncLocalStorageContextManager (#20243)

    The OpenTelemetry context manager is now vendored internally, reducing external dependencies and ensuring consistent behavior across environments.

Other Changes

  • feat(core): Export a reusable function to add tracing headers (#20076)
  • feat(core): Expose rewriteSources top level option (#20142)
  • feat(deps): bump defu from 6.1.4 to 6.1.6 (#20104)
  • feat(node-native): Add support for V8 v14 (Node v25+) (#20125)
  • feat(node): Include global scope for eventLoopBlockIntegration (#20108)
  • fix(core, node): Support loading Express options lazily (#20211)
  • fix(core): Set conversation_id only on gen_ai spans (#20274)
  • fix(core): Use ai.operationId for Vercel AI V6 operation name mapping (#20285)
  • fix(deno): Avoid inferring invalid span op from Deno tracer (#20128)
  • fix(deno): Handle reader.closed rejection from releaseLock() in streaming (#20187)
  • fix(nextjs): Preserve directive prologues in turbopack loaders (#20103)
  • fix(nextjs): Skip custom browser tracing setup for bot user agents (#20263)
  • fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory leak (#20328)
  • fix(replay): Use live click attributes in breadcrumbs (#20262)

... (truncated)

Commits
  • 745af79 release: 10.49.0
  • 46dcef1 Merge pull request #20348 from getsentry/prepare-release/10.49.0
  • bf4e188 meta(changelog): Update changelog for 10.49.0
  • 5f72df5 feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation...
  • 50438f9 feat(browser): Emit web vitals as streamed spans (#19827)
  • 3332fec fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory...
  • 684a41f ref(opentelemetry): Replace @opentelemetry/resources with inline `getSentry...
  • 8b2a9dc ci: Remove Docker container for Verdaccio package publishing (#20329)
  • 0007c7b ci: Extract test names for flaky test issues (#20298)
  • 9b9d65c chore(ci): Bump actions/cache to v5 and actions/download-artifact to v7 (#20249)
  • Additional commits viewable in compare view

Updates @sentry/browser from 10.48.0 to 10.49.0

Release notes

Sourced from @​sentry/browser's releases.

10.49.0

Important Changes

  • feat(browser): Add View Hierarchy integration (#14981)

    A new viewHierarchyIntegration captures the DOM structure when an error occurs, providing a snapshot of the page state for debugging. Enable it in your Sentry configuration:

    import * as Sentry from '@sentry/browser';
Sentry.init({
dsn: 'DSN',
integrations: [Sentry.viewHierarchyIntegration()],
});

  • feat(cloudflare): Split alarms into multiple traces and link them (#19373)

    Durable Object alarms now create separate traces for each alarm invocation, with proper linking between related alarms for better observability.

  • feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation (#19991, #20345)

    A new enableRpcTracePropagation option enables automatic trace propagation for Cloudflare RPC calls via .fetch(), ensuring distributed traces flow correctly across service bindings.

  • feat(core): Add enableTruncation option to AI integrations (#20167, #20181, #20182, #20183, #20184)

    All AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, LangGraph) now support an enableTruncation option to control whether large AI inputs/outputs are truncated.

  • feat(opentelemetry): Vendor AsyncLocalStorageContextManager (#20243)

    The OpenTelemetry context manager is now vendored internally, reducing external dependencies and ensuring consistent behavior across environments.

Other Changes

  • feat(core): Export a reusable function to add tracing headers (#20076)
  • feat(core): Expose rewriteSources top level option (#20142)
  • feat(deps): bump defu from 6.1.4 to 6.1.6 (#20104)
  • feat(node-native): Add support for V8 v14 (Node v25+) (#20125)
  • feat(node): Include global scope for eventLoopBlockIntegration (#20108)
  • fix(core, node): Support loading Express options lazily (#20211)
  • fix(core): Set conversation_id only on gen_ai spans (#20274)
  • fix(core): Use ai.operationId for Vercel AI V6 operation name mapping (#20285)
  • fix(deno): Avoid inferring invalid span op from Deno tracer (#20128)
  • fix(deno): Handle reader.closed rejection from releaseLock() in streaming (#20187)
  • fix(nextjs): Preserve directive prologues in turbopack loaders (#20103)
  • fix(nextjs): Skip custom browser tracing setup for bot user agents (#20263)
  • fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory leak (#20328)
  • fix(replay): Use live click attributes in breadcrumbs (#20262)

... (truncated)

Changelog

Sourced from @​sentry/browser's changelog.

10.49.0

Important Changes

  • feat(browser): Add View Hierarchy integration (#14981)

    A new viewHierarchyIntegration captures the DOM structure when an error occurs, providing a snapshot of the page state for debugging. Enable it in your Sentry configuration:

    import * as Sentry from '@sentry/browser';
Sentry.init({
dsn: 'DSN',
integrations: [Sentry.viewHierarchyIntegration()],
});

  • feat(cloudflare): Split alarms into multiple traces and link them (#19373)

    Durable Object alarms now create separate traces for each alarm invocation, with proper linking between related alarms for better observability.

  • feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation (#19991, #20345)

    A new enableRpcTracePropagation option enables automatic trace propagation for Cloudflare RPC calls via .fetch(), ensuring distributed traces flow correctly across service bindings.

  • feat(core): Add enableTruncation option to AI integrations (#20167, #20181, #20182, #20183, #20184)

    All AI integrations (OpenAI, Anthropic, Google GenAI, LangChain, LangGraph) now support an enableTruncation option to control whether large AI inputs/outputs are truncated.

  • feat(opentelemetry): Vendor AsyncLocalStorageContextManager (#20243)

    The OpenTelemetry context manager is now vendored internally, reducing external dependencies and ensuring consistent behavior across environments.

Other Changes

  • feat(core): Export a reusable function to add tracing headers (#20076)
  • feat(core): Expose rewriteSources top level option (#20142)
  • feat(deps): bump defu from 6.1.4 to 6.1.6 (#20104)
  • feat(node-native): Add support for V8 v14 (Node v25+) (#20125)
  • feat(node): Include global scope for eventLoopBlockIntegration (#20108)
  • fix(core, node): Support loading Express options lazily (#20211)
  • fix(core): Set conversation_id only on gen_ai spans (#20274)
  • fix(core): Use ai.operationId for Vercel AI V6 operation name mapping (#20285)
  • fix(deno): Avoid inferring invalid span op from Deno tracer (#20128)
  • fix(deno): Handle reader.closed rejection from releaseLock() in streaming (#20187)
  • fix(nextjs): Preserve directive prologues in turbopack loaders (#20103)
  • fix(nextjs): Skip custom browser tracing setup for bot user agents (#20263)
  • fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory leak (#20328)
  • fix(replay): Use live click attributes in breadcrumbs (#20262)

... (truncated)

Commits
  • 745af79 release: 10.49.0
  • 46dcef1 Merge pull request #20348 from getsentry/prepare-release/10.49.0
  • bf4e188 meta(changelog): Update changelog for 10.49.0
  • 5f72df5 feat(cloudflare): Enable RPC trace propagation with enableRpcTracePropagation...
  • 50438f9 feat(browser): Emit web vitals as streamed spans (#19827)
  • 3332fec fix(opentelemetry): Use WeakRef for context stored on scope to prevent memory...
  • 684a41f ref(opentelemetry): Replace @opentelemetry/resources with inline `getSentry...
  • 8b2a9dc ci: Remove Docker container for Verdaccio package publishing (#20329)
  • 0007c7b ci: Extract test names for flaky test issues (#20298)
  • 9b9d65c chore(ci): Bump actions/cache to v5 and actions/download-artifact to v7 (#20249)
  • Additional commits viewable in compare view

Updates astro from 6.1.6 to 6.1.8

Release notes

Sourced from astro's releases.

astro@6.1.8

Patch Changes

  • #16367 a6866a7 Thanks @​ematipico! - Fixes an issue where build output files could contain special characters (!, ~, {, }) in their names, causing deploy failures on platforms like Netlify.

  • #16381 217c5b3 Thanks @​ematipico! - Slightly improved the performance of the dev server by caching the internal crawling of the dependencies of a project.

  • #16348 7d26cd7 Thanks @​ocavue! - Fixes a bug where emitted assets during a client build would contain always fresh, new hashes in their name. Now the build should be more stable.

  • #16317 d012bfe Thanks @​das-peter! - Fixes a bug where allowedDomains weren't correctly propagated when using the development server.

  • #16379 5a84551 Thanks @​martrapp! - Improves Vue scoped style handling in DEV mode during client router navigation.

  • #16317 d012bfe Thanks @​das-peter! - Adds tests to verify settings are properly propagated when using the development server.

  • #16282 5b0fdaa Thanks @​jmurty! - Fixes build errors on platforms with skew protection enabled (e.g. Vercel, Netlify) for inter-chunk Javascript using dynamic imports

  • Updated dependencies [e0b240e]:

    • @​astrojs/telemetry@​3.3.1

astro@6.1.7

Patch Changes

  • #16027 c62516b Thanks @​fkatsuhiro! - Fixes a bug where remote image dimensions were not validated during static builds on Netlify.

  • #16311 94048f2 Thanks @​Arecsu! - Fixes --port flag being ignored after a Vite-triggered server restart (e.g. when a .env file changes)

  • #16316 0fcd04c Thanks @​ematipico! - Fixes the /_image endpoint accepting an arbitrary f=svg query parameter and serving non-SVG content as image/svg+xml. The endpoint now validates that the source is actually SVG before honoring f=svg, matching the same guard already enforced on the <Image> component path.

Changelog

Sourced from astro's changelog.

6.1.8

Patch Changes

  • #16367 a6866a7 Thanks @​ematipico! - Fixes an issue where build output files could contain special characters (!, ~, {, }) in their names, causing deploy failures on platforms like Netlify.

  • #16381 217c5b3 Thanks @​ematipico! - Slightly improved the performance of the dev server by caching the internal crawling of the dependencies of a project.

  • #16348 7d26cd7 Thanks @​ocavue! - Fixes a bug where emitted assets during a client build would contain always fresh, new hashes in their name. Now the build should be more stable.

  • #16317 d012bfe Thanks @​das-peter! - Fixes a bug where allowedDomains weren't correctly propagated when using the development server.

  • #16379 5a84551 Thanks @​martrapp! - Improves Vue scoped style handling in DEV mode during client router navigation.

  • #16317 d012bfe Thanks @​das-peter! - Adds tests to verify settings are properly propagated when using the development server.

  • #16282 5b0fdaa Thanks @​jmurty! - Fixes build errors on platforms with skew protection enabled (e.g. Vercel, Netlify) for inter-chunk Javascript using dynamic imports

  • Updated dependencies [e0b240e]:

    • @​astrojs/telemetry@​3.3.1

6.1.7

Patch Changes

  • #16027 c62516b Thanks @​fkatsuhiro! - Fixes a bug where remote image dimensions were not validated during static builds on Netlify.

  • #16311 94048f2 Thanks @​Arecsu! - Fixes --port flag being ignored after a Vite-triggered server restart (e.g. when a .env file changes)

  • #16316 0fcd04c Thanks @​ematipico! - Fixes the /_image endpoint accepting an arbitrary f=svg query parameter and serving non-SVG content as image/svg+xml. The endpoint now validates that the source is actually SVG before honoring f=svg, matching the same guard already enforced on the <Image> component path.

Commits

Updates astro-og-canvas from 0.11.0 to 0.11.1

Release notes

Sourced from astro-og-canvas's releases.

astro-og-canvas@0.11.1

Patch Changes

Changelog

Sourced from astro-og-canvas's changelog.

0.11.1

Patch Changes

Commits

Updates eslint from 10.2.0 to 10.2.1

Release notes

Sourced from eslint's releases.

v10.2.1

Bug Fixes

  • 14be92b fix: model generator yield resumption paths in code path analysis (#20665) (sethamus)
  • 84a19d2 fix: no-async-promise-executor false positives for shadowed Promise (#20740) (xbinaryx)
  • af764af fix: clarify language and processor validation errors (#20729) (Pixel998)
  • e251b89 fix: update eslint (#20715) (renovate[bot])

Documentation

  • ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768) (Amaresh S M)
  • 57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767) (Amaresh S M)
  • c1621b9 docs: fix typos in code-path-analyzer.js (#20700) (Ayush Shukla)
  • 1418d52 docs: Update README (GitHub Actions Bot)
  • 39771e6 docs: Update README (GitHub Actions Bot)
  • 71e0469 docs: fix incomplete JSDoc param description in no-shadow rule (#20728) (kuldeep kumar)
  • 22119ce docs: clarify scope of for-direction rule with dead code examples (#20723) (Amaresh S M)
  • 8f3fb77 docs: document meta.docs.dialects (#20718) (Pixel998)

Chores

  • 7ddfea9 chore: update dependency prettier to v3.8.2 (#20770) (renovate[bot])
  • fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763) (dependabot[bot])
  • 7246f92 test: add tests for SuppressionsService.load() error handling (#20734) (kuldeep kumar)
  • 4f34b1e chore: update pnpm/action-setup action to v5 (#20762) (renovate[bot])
  • 51080eb test: processor service (#20731) (kuldeep kumar)
  • e7e1889 chore: remove stale babel-eslint10 fixture and test (#20727) (kuldeep kumar)
  • 4e1a87c test: remove redundant async/await in flat config array tests (#20722) (Pixel998)
  • 066eabb test: add rule metadata coverage for languages and docs.dialects (#20717) (Pixel998)
Commits

Updates mjml from 4.18.0 to 5.0.1

Release notes

Sourced from mjml's releases.

v5.0.1

What's Changed

Documentation

Full Changelog: mjmlio/mjml@v5.0.0...v5.0.1

v5.0.0

Upgrade Guide

These are the changes users need to actively consider when upgrading to MJML 5.x.x from MJML 4.x (and early MJML 5 alphas):

Highlights

  • Replaced legacy html-minifier and js-beautify with htmlnano + cssnano. [breaking change]
  • Added templating syntax sanitization (runs before PostCSS and is restored afterwards)
  • Safer, stricter handling of mj-include and ignoreIncludes [breaking change]
  • Restructured outer HTML: the <body> tag is now driven by mj-body, not the global skeleton. [breaking change]
  • mjml-browser build/minification pipeline updated
  • Better attribute consistency across components (including more flexible border-radius). [breaking change]
  • Migration helper removed [breaking change]
  • Updated toolchain: Node 20/22/24 in CI. Removed Node 16/18 [breaking change]

HTML/CSS minification & formatting

What changed

  • HTML minification now uses htmlnano instead of html-minifier.
  • CSS minification now uses cssnano presets wired via mjml-core.
  • Minification options can be added via .mjmlconfig.js

Impact [potential breaking changes]

  • Generated HTML is more aggressively minified. If you rely on exact formatting (e.g. diffing raw HTML, parsing by regex, or checking snapshots), you may see changes.
  • Some obscure html-minifier specific options used in custom tooling will no longer apply; options are now expressed as htmlnano/cssnano configs.
  • Template tags may error in PostCSS (see Template syntax handling and sanitization below)
  • Fixes this issue: mjmlio/mjml#2589

What to do

  • Review any automation that assumes pretty‑printed HTML (tests, diffs, CI snapshot comparisons).
  • If you previously passed minify/beautify flags or custom minifier options, re‑map them to the new htmlnano/cssnano config.

Notes

  • cssnano uses lite preset by default. Due to this issue: mjmlio/mjml#2919. default preset can be used if your fonts don’t contain numerals

More detail: (mjmlio/mjml#2858)

... (truncated)

Commits
  • 4311f6c v5.0.1
  • 6657224 docs(mjml): updated README.md
  • ddb2335 v5.0.0
  • 9aac8c6 v5.0.0-beta.2
  • 1dfbc95 v5.0.0-beta.1
  • 65e81da v5.0.0-alpha.11
  • 74f3577 Merge pull request #3045 from mjmlio/bugfix/3018-mjml5-ignoreIncludes-allowIn...
  • b8e6a60 Merge pull request #3044 from mjmlio/bugfix/attributes-adding-updating-for-co...
  • 2eb56d7 feature(includes): implemented tighter controls
  • 591fd1e bugfix(ignoreIncludes): updated test files
  • Additional commits viewable in compare view

Updates nanostores from 1.2.0 to 1.3.0

Release notes

Sourced from nanostores's releases.

1.3.0

  • Added globalThis.nanostoresGlobal to sync stores in JS bundles (by @​afurm).
Changelog

Sourced from nanostores's changelog.

1.3.0

  • Added globalThis.nanostoresGlobal to sync stores in JS bundles (by @​afurm).
Commits

@dependabot @github

dependabot Bot commented on behalf of github Apr 18, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automerge 🤞, type: dependencies 🔗. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Apr 18, 2026 •
edited
Loading

Copy link
Copy Markdown

Dependency Review

The following issues were found:

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 3 package(s) with unknown licenses.
  • ⚠️ 2 packages with OpenSSF Scorecard issues.

View full job summary

@dependabot
Bump the npm-dependencies group across 1 directory with 17 updates
5a90d9a 
Bumps the npm-dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/compiler-rs](https://github.com/withastro/compiler-rs) | `0.1.6` | `0.1.7` |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.11.1` | `4.11.2` |
| [@sentry/astro](https://github.com/getsentry/sentry-javascript) | `10.48.0` | `10.49.0` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `6.1.6` | `6.1.8` |
| [astro-og-canvas](https://github.com/delucis/astro-og-canvas/tree/HEAD/packages/astro-og-canvas) | `0.11.0` | `0.11.1` |
| [eslint](https://github.com/eslint/eslint) | `10.2.0` | `10.2.1` |
| [mjml](https://github.com/mjmlio/mjml/tree/HEAD/packages/mjml) | `4.18.0` | `5.0.1` |
| [nanostores](https://github.com/nanostores/nanostores) | `1.2.0` | `1.3.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.9` | `8.5.10` |
| [prettier](https://github.com/prettier/prettier) | `3.8.2` | `3.8.3` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.40.0` | `24.41.0` |
| [resend](https://github.com/resend/resend-node) | `6.11.0` | `6.12.0` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.2` | `2.17.3` |
| [stylelint](https://github.com/stylelint/stylelint) | `17.7.0` | `17.8.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.2` | `6.0.3` |
| [vercel](https://github.com/vercel/vercel/tree/HEAD/packages/cli) | `51.2.1` | `51.7.0` |



Updates `@astrojs/compiler-rs` from 0.1.6 to 0.1.7
- [Release notes](https://github.com/withastro/compiler-rs/releases)
- [Commits](https://github.com/withastro/compiler-rs/compare/@astrojs/compiler-rs@0.1.6...@astrojs/compiler-rs@0.1.7)

Updates `@axe-core/playwright` from 4.11.1 to 4.11.2
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/v4.11.2/CHANGELOG.md)
- [Commits](dequelabs/axe-core-npm@v4.11.1...v4.11.2)

Updates `@sentry/astro` from 10.48.0 to 10.49.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.48.0...10.49.0)

Updates `@sentry/browser` from 10.48.0 to 10.49.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.48.0...10.49.0)

Updates `astro` from 6.1.6 to 6.1.8
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@6.1.8/packages/astro)

Updates `astro-og-canvas` from 0.11.0 to 0.11.1
- [Release notes](https://github.com/delucis/astro-og-canvas/releases)
- [Changelog](https://github.com/delucis/astro-og-canvas/blob/latest/packages/astro-og-canvas/CHANGELOG.md)
- [Commits](https://github.com/delucis/astro-og-canvas/commits/astro-og-canvas@0.11.1/packages/astro-og-canvas)

Updates `eslint` from 10.2.0 to 10.2.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.2.0...v10.2.1)

Updates `mjml` from 4.18.0 to 5.0.1
- [Release notes](https://github.com/mjmlio/mjml/releases)
- [Commits](https://github.com/mjmlio/mjml/commits/v5.0.1/packages/mjml)

Updates `nanostores` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/nanostores/nanostores/releases)
- [Changelog](https://github.com/nanostores/nanostores/blob/main/CHANGELOG.md)
- [Commits](nanostores/nanostores@1.2.0...1.3.0)

Updates `postcss` from 8.5.9 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.9...8.5.10)

Updates `prettier` from 3.8.2 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.2...3.8.3)

Updates `puppeteer` from 24.40.0 to 24.41.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.40.0...puppeteer-v24.41.0)

Updates `resend` from 6.11.0 to 6.12.0
- [Release notes](https://github.com/resend/resend-node/releases)
- [Commits](resend/resend-node@v6.11.0...v6.12.0)

Updates `sanitize-html` from 2.17.2 to 2.17.3
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.17.3/packages/sanitize-html)

Updates `stylelint` from 17.7.0 to 17.8.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@17.7.0...17.8.0)

Updates `typescript` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.2...v6.0.3)

Updates `vercel` from 51.2.1 to 51.7.0
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/vercel@51.7.0/packages/cli)

---
updated-dependencies:
- dependency-name: "@astrojs/compiler-rs"
  dependency-version: 0.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@sentry/astro"
  dependency-version: 10.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@sentry/browser"
  dependency-version: 10.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: astro
  dependency-version: 6.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: astro-og-canvas
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: eslint
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: mjml
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: nanostores
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: puppeteer
  dependency-version: 24.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: resend
  dependency-version: 6.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: sanitize-html
  dependency-version: 2.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: stylelint
  dependency-version: 17.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: vercel
  dependency-version: 51.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-c53b53df34 branch from 36d2a33 to 5a90d9a Compare April 18, 2026 12:27
@dependabot @github

dependabot Bot commented on behalf of github Apr 18, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 18, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-c53b53df34 branch April 18, 2026 12:47
@github-actions

github-actions Bot commented Apr 18, 2026

Copy link
Copy Markdown

This pull request has been deployed to Vercel.

Latest commit: 40d44a3
✅ Preview: https://astro-webstackbuilders-1vn78gqgw-kevin-browns-projects-dd474f73.vercel.app
🔍 Inspect: https://vercel.com/kevin-browns-projects-dd474f73/astro-webstackbuilders-com/B16YPdSX2dw732Za2APGX33Z2sjM

View Workflow Logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

deployed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@webstackdev