onerepo icon indicating copy to clipboard operation
onerepo copied to clipboard

Published 20 hours ago • verified publisher icon paularmstrong

chore(deps): bump the production-dependencies group across 1 directory with 32 updates

Open dependabot[bot] opened this issue 1 month ago • 1 comments

Bumps the production-dependencies group with 32 updates in the / directory:

Package From To
jiti 2.4.2 2.6.1
glob 10.4.5 11.0.3
typescript 5.8.3 5.9.3
typescript-eslint 8.33.0 8.46.2
@astrojs/markdown-remark 6.3.2 6.3.8
@astrojs/mdx 4.3.0 4.3.9
@astrojs/starlight 0.34.3 0.36.2
@expressive-code/plugin-collapsible-sections 0.41.2 0.41.3
astro 5.8.1 5.15.3
astro-meta-tags 0.3.2 0.4.0
astro-og-canvas 0.7.0 0.7.2
dagre-d3-es 7.0.11 7.0.13
graph-data-structure 3.5.0 4.5.0
js-base64 3.7.7 3.7.8
mermaid 11.4.1 11.12.1
starlight-links-validator 0.13.4 0.19.0
@eslint/js 9.28.0 9.39.0
@typescript-eslint/eslint-plugin 8.33.0 8.46.2
@typescript-eslint/parser 8.33.0 8.46.2
eslint-import-resolver-typescript 4.4.2 4.4.4
eslint-plugin-import 2.31.0 2.32.0
eslint-plugin-jest 28.12.0 29.0.1
eslint-plugin-unused-imports 4.1.4 4.3.0
@jest/globals 30.1.2 30.2.0
@types/node 20.17.50 24.9.2
@vitest/coverage-v8 3.1.4 4.0.6
minimatch 9.0.5 10.1.1
log-update 5.0.1 7.0.1
cliui 8.0.1 9.0.1
ignore 5.3.2 7.0.5
inquirer 9.3.7 12.10.0
semver 7.7.2 7.7.3

Updates jiti from 2.4.2 to 2.6.1

Release notes

Sourced from jiti's releases.

v2.6.1

compare changes

🩹 Fixes

  • interop: Only passthrough default if it is not a promise (#408)

📦 Build

  • Revert to terser-webpack-plugin (#407)

❤️ Contributors

v2.6.0

compare changes

🌟 What is new?

This release fixes minor issues, migrates to Rspack for dist, and lazily imports the Babel transformer only when needed, which should noticeably improve startup times.

  • Install size reduced from 2.03MB to 1.67MB
  • Loading times improved 150ms => 22ms (full transform: 180ms => 115ms)

🔥 Performance

  • Lazy load transformer (#405)

🩹 Fixes

  • cjs-interop: Handle function default exports (#396)
  • Always use native require/import for node: specifiers (#392)

📦 Build

  • Migrate to rspack (#404)
  • Updated bundled dependencies (diff)

✅ Tests

  • Update deno and bun native test coverage (df844f8)

❤️ Contributors

v2.5.1

... (truncated)

Changelog

Sourced from jiti's changelog.

v2.6.1

compare changes

🩹 Fixes

  • interop: Only passthrough default if it is not a promise (#408)

📦 Build

  • Revert to terser-webpack-plugin (#407)

🏡 Chore

❤️ Contributors

v2.6.0

compare changes

🔥 Performance

  • Lazy load babel transform (#405)

🩹 Fixes

  • cjs-interop: Handle function default exports (#396)
  • Always use native for node: specifiers (#392)

📦 Build

  • Migrate to rspack (#404)

🏡 Chore

✅ Tests

  • Update deno and bun native test ignores (df844f8)
  • New bench script (6404427)

❤️ Contributors

... (truncated)

Commits

Updates glob from 10.4.5 to 11.0.3

Changelog

Sourced from glob's changelog.

changeglob

11.0

  • Drop support for node before v20

10.4

  • Add includeChildMatches: false option
  • Export the Ignore class

10.3

  • Add --default -p flag to provide a default pattern
  • exclude symbolic links to directories when follow and nodir are both set

10.2

  • Add glob cli

10.1

  • Return '.' instead of the empty string '' when the current working directory is returned as a match.
  • Add posix: true option to return / delimited paths, even on Windows.

10.0.0

  • No default exports, only named exports

9.3.3

  • Upgraded minimatch to v8, adding support for any degree of nested extglob patterns.

9.3

  • Add aliases for methods. glob.sync, glob.stream, glob.stream.sync, etc.

9.2

  • Support using a custom fs object, which is passed to PathScurry
  • add maxDepth option
  • add stat option
  • add custom Ignore support

9.1

... (truncated)

Commits

Updates typescript from 5.8.3 to 5.9.3

Release notes

Sourced from typescript's releases.

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9 RC

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

Downloads are available on:

TypeScript 5.9 Beta

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • c63de15 Bump version to 5.9.3 and LKG
  • 8428ca4 🤖 Pick PR #62438 (Fix incorrectly ignored dts file fr...) into release-5.9 (#...
  • a131cac 🤖 Pick PR #62351 (Add missing Float16Array constructo...) into release-5.9 (#...
  • 0424333 🤖 Pick PR #62423 (Revert PR 61928) into release-5.9 (#62425)
  • bdb641a 🤖 Pick PR #62311 (Fix parenthesizer rules for manuall...) into release-5.9 (#...
  • 0d9b9b9 🤖 Pick PR #61978 (Restructure CI to prepare for requi...) into release-5.9 (#...
  • 2dce0c5 Intentionally regress one buggy declaration output to an older version (#62163)
  • 5be3346 Bump version to 5.9.2 and LKG
  • ad825f2 Bump version to 5.9.1-rc and LKG
  • 463a5bf Update LKG
  • Additional commits viewable in compare view

Updates typescript-eslint from 8.33.0 to 8.46.2

Release notes

Sourced from typescript-eslint's releases.

v8.46.2

8.46.2 (2025-10-20)

🩹 Fixes

  • eslint-plugin: [prefer-optional-chain] skip optional chaining when it could change the result (#11702)
  • typescript-estree: forbid invalid modifiers in object methods (#11689)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.46.1

8.46.1 (2025-10-13)

🩹 Fixes

  • ast-spec: cleanup TSLiteralType (#11624)
  • eslint-plugin: [prefer-optional-chain] include mixed "nullish comparison style" chains in checks (#11533)
  • eslint-plugin: [no-misused-promises] special-case .finally not to report when a promise returning function is provided as an argument (#11667)

❤️ Thank You

  • Abraham Guo
  • mdm317
  • Ronen Amiel

You can read about our versioning strategy and releases on our website.

v8.46.0

8.46.0 (2025-10-06)

🚀 Features

  • eslint-plugin: [no-unsafe-member-access] add allowOptionalChaining option (#11659)
  • eslint-plugin-internal: [no-dynamic-tests] new internal Lint rule to ban dynamic syntax in generating tests (#11323)
  • rule-schema-to-typescript-types: clean up and make public (#11633)
  • typescript-eslint: export util types (#10848, #10849)
  • typescript-estree: mention file specifics in project service allowDefaultProject error (#11635)
  • typescript-estree: private identifiers can only appear on LHS of in expressions (#9232)

🩹 Fixes

  • eslint-plugin: [no-floating-promises] remove excess parentheses in suggestions (#11487)
  • eslint-plugin: [unbound-method] improve wording around this: void and binding (#11634)
  • eslint-plugin: [no-deprecated] ignore deprecated export imports (#11603)
  • eslint-plugin: removed error type previously deprecated (#11674)

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.46.2 (2025-10-20)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.46.1 (2025-10-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.46.0 (2025-10-06)

🚀 Features

❤️ Thank You

You can read about our versioning strategy and releases on our website.

8.45.0 (2025-09-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.44.1 (2025-09-22)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.44.0 (2025-09-15)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.43.0 (2025-09-08)

🩹 Fixes

  • eslint-plugin: [no-deprecated] should report deprecated exports and reexports (#11359)

❤️ Thank You

... (truncated)

Commits
  • 55ca033 chore(release): publish 8.46.2
  • 3f5fbf6 chore(release): publish 8.46.1
  • aec785e chore(release): publish 8.46.0
  • 5c1a159 feat(typescript-eslint): export util types (close #10848) (#10849)
  • 255e9e2 chore(release): publish 8.45.0
  • c198052 chore(release): publish 8.44.1
  • 77056f7 chore(release): publish 8.44.0
  • ef9173c chore(release): publish 8.43.0
  • d8ca5ef fix(eslint-plugin): [no-deprecated] should report deprecated exports and reex...
  • d135909 chore(release): publish 8.42.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for typescript-eslint since your current version.


Updates @astrojs/markdown-remark from 6.3.2 to 6.3.8

Release notes

Sourced from @​astrojs/markdown-remark's releases.

@​astrojs/markdown-remark@​6.3.8

Patch Changes

  • Updated dependencies [b8ca69b]:
    • @​astrojs/internal-helpers@​0.7.4

@​astrojs/markdown-remark@​6.3.7

Patch Changes

  • Updated dependencies [1e2499e]:
    • @​astrojs/internal-helpers@​0.7.3

@​astrojs/markdown-remark@​6.3.6

Patch Changes

  • Updated dependencies [4d16de7]:
    • @​astrojs/internal-helpers@​0.7.2
Changelog

Sourced from @​astrojs/markdown-remark's changelog.

6.3.8

Patch Changes

  • Updated dependencies [b8ca69b]:
    • @​astrojs/internal-helpers@​0.7.4

6.3.7

Patch Changes

  • Updated dependencies [1e2499e]:
    • @​astrojs/internal-helpers@​0.7.3

6.3.6

Patch Changes

  • Updated dependencies [4d16de7]:
    • @​astrojs/internal-helpers@​0.7.2

6.3.5

Patch Changes

  • Updated dependencies [0567fb7]:
    • @​astrojs/internal-helpers@​0.7.1

6.3.4

Patch Changes

  • Updated dependencies [f4e8889]:
    • @​astrojs/internal-helpers@​0.7.0

6.3.3

Patch Changes

  • #13941 6bd5f75 Thanks @​aditsachde! - Adds support for TOML files to Astro's built-in glob() and file() content loaders.

    In Astro 5.2, Astro added support for using TOML frontmatter in Markdown files instead of YAML. However, if you wanted to use TOML files as local content collection entries themselves, you needed to write your own loader.

    Astro 5.12 now directly supports loading data from TOML files in content collections in both the glob() and the file() loaders.

    If you had added your own TOML content parser for the file() loader, you can now remove it as this functionality is now included:

    // src/content.config.ts
import { defineCollection } from "astro:content";

... (truncated)

Commits

Updates @astrojs/mdx from 4.3.0 to 4.3.9

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​4.3.9

Patch Changes

@​astrojs/mdx@​4.3.7

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.8

@​astrojs/mdx@​4.3.6

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.7

@​astrojs/mdx@​4.3.5

Patch Changes

@​astrojs/mdx@​4.3.4

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.6
Changelog

Sourced from @​astrojs/mdx's changelog.

4.3.9

Patch Changes

4.3.8

Patch Changes

  • #14591 3e887ec Thanks @​matthewp! - Adds TypeScript support for the components prop on MDX Content component when using await render(). Developers now get proper IntelliSense and type checking when passing custom components to override default MDX element rendering.

  • #14598 7b45c65 Thanks @​delucis! - Reduces terminal text styling dependency size by switching from kleur to picocolors

4.3.7

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.8

4.3.6

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.7

4.3.5

Patch Changes

4.3.4

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.6

4.3.3

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.5

4.3.2

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​astrojs/mdx since your current version.


Updates @astrojs/starlight from 0.34.3 to 0.36.2

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.36.2

Patch Changes

@​astrojs/starlight@​0.36.1

Patch Changes

@​astrojs/starlight@​0.36.0

Minor Changes

  • #3427 c3b2d0f Thanks @​delucis! - Fixes styling of labels that wrap across multiple lines in <Tabs> component

    ⚠️ Potentially breaking change: Tab labels now have a narrower line-height and additional vertical padding. If you have custom CSS targetting the <Tabs> component, you may want to double check the visual appearance of your tabs when updating.

    If you want to preserve the previous styling, you can add the following custom CSS to your site:

    .tab > [role='tab'] {
  line-height: var(--sl-line-height);
  padding-block: 0;
}

  • #3380 3364af3 Thanks @​HiDeoo! - Makes head entry parsing stricter in Starlight config and content frontmatter.

    ⚠️ Potentially breaking change: Previously Starlight would accept a head entry for a meta tag defining some content which generates invalid HTML as <meta> is a void element which cannot have any child nodes. Now, it is an error to define a meta tag including some content.

    If you see errors after updating, look for head entries in the Starlight configuration in the astro.config.mjs file or in the frontmatter of your content files that include a content property for a meta tag. To fix the error, move the content property to the attrs object with at least an additional attribute to identify the kind of metadata it represents:

    head: {
  tag: 'meta',
- content: 'foo',
  attrs: {
    name: 'my-meta',

... (truncated)

Changelog

Sourced from @​astrojs/starlight's changelog.

0.36.2

Patch Changes

0.36.1

Patch Changes

0.36.0

Minor Changes

  • #3427 c3b2d0f Thanks @​delucis! - Fixes styling of labels that wrap across multiple lines in <Tabs> component

    ⚠️ Potentially breaking change: Tab labels now have a narrower line-height and additional vertical padding. If you have custom CSS targetting the <Tabs> component, you may want to double check the visual appearance of your tabs when updating.

    If you want to preserve the previous styling, you can add the following custom CSS to your site:

    .tab > [role='tab'] {
  line-height: var(--sl-line-height);
  padding-block: 0;
}

  • #3380 3364af3 Thanks @​HiDeoo! - Makes head entry parsing stricter in Starlight config and content frontmatter.

    ⚠️ Potentially breaking change: Previously Starlight would accept a head entry for a meta tag defining some content which generates invalid HTML as <meta> is a void element which cannot have any child nodes. Now, it is an error to define a meta tag including some content.

    If you see errors after updating, look for head entries in the Starlight configuration in the astro.config.mjs file or in the frontmatter of your content files that include a content property for a meta tag. To fix the error, move the content property to the attrs object with at least an additional attribute to identify the kind of metadata it represents:

    head: {
  tag: 'meta',

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​astrojs/starlight since your current version.


Updates @expressive-code/plugin-collapsible-sections from 0.41.2 to 0.41.3

Release notes

Sourced from @​expressive-code/plugin-collapsible-sections's releases.

@​expressive-code/plugin-collapsible-sections@​0.41.3

Patch Changes

  • Updated dependencies [eb82591]
    • @​expressive-code/core@​0.41.3
Changelog

Sourced from @​expressive-code/plugin-collapsible-sections's changelog.

0.41.3

Patch Changes

  • Updated dependencies [eb82591]
    • @​expressive-code/core@​0.41.3
Commits

Updates astro from 5.8.1 to 5.15.3

Release notes

Sourced from astro's releases.

[email protected]

Patch Changes

  • #14627 b368de0 Thanks @​matthewp! - Fixes skew protection support for images and font URLs

    Adapter-level query parameters (assetQueryParams) are now applied to all image and font asset URLs, including:

    • Dynamic optimized images via /_image endpoint
    • Static optimized image files
    • Font preload tags and font requests when using the experimental Fonts API

  • #14631 3ad33f9 Thanks @​KurtGokhan! - Adds the astro/jsx-dev-runtime export as an alias for astro/jsx-runtime

[email protected]

Patch Changes

  • #14623 c5fe295 Thanks @​delucis! - Fixes a leak of server runtime code when importing SVGs in client-side code. Previously, when importing an SVG file in client code, Astro could end up adding code for rendering SVGs on the server to the client bundle.

  • #14621 e3175d9 Thanks @​GameRoMan! - Updates vite version to fix CVE

[email protected]

Patch Changes

  • #14612 18552c7 Thanks @​ematipico! - Fixes a regression introduced in Astro v5.14.7 that caused ?url imports to not work correctly. This release reverts #14142.

[email protected]

Minor Changes

  • #14543 9b3241d Thanks @​matthewp! - Adds two new adapter configuration options assetQueryParams and internalFetchHeaders to the Adapter API.

    Official and community-built adapters can now use client.assetQueryParams to specify query parameters that should be appended to asset URLs (CSS, JavaScript, images, fonts, etc.). The query parameters are automatically appended to all generated asset URLs during the build process.

    Adapters can also use client.internalFetchHeaders to specify headers that should be included in Astro's internal fetch calls (Actions, View Transitions, Server Islands, Prefetch).

    This enables features like Netlify's skew protection, which requires the deploy ID to be sent with both internal requests and asset URLs to ensure client and server versions match during deployments.

  • #14489 add4277 Thanks @​dev-shetty! - Adds a new Copy ...

    Description has been truncated

dependabot[bot] avatar Nov 01 '25 10:11 dependabot[bot]

Deploy Preview for onerepo failed.

Name Link
Latest commit 37cf5ba1503908c38ac7d1df831dd7351b1ff29c
Latest deploy log https://app.netlify.com/projects/onerepo/deploys/6905de1c96cc5500084e5ce7

netlify[bot] avatar Nov 01 '25 10:11 netlify[bot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot[bot] avatar Dec 01 '25 13:12 dependabot[bot]