Skip to content

build(deps): bump the astro group with 2 updates - #256

Merged
jdevalk merged 3 commits into
mainfrom
dependabot/npm_and_yarn/astro-ef0ecb9c04
Oct 15, 2026
Merged

jdevalk merged 3 commits into
mainfrom
dependabot/npm_and_yarn/astro-ef0ecb9c04

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Updates Astro from 7.3.5 to 7.3.8 and @astrojs/mdx from 8.0.2 to 8.0.3, with their associated lockfile dependencies.

Includes the shared lockfile security refresh (71ef352) used by the other open PRs: sharp, http-cache-semantics, smol-toml and source-map-js, including sharp in the MCP package, within the existing package requirements. Both dependency audits now report zero vulnerabilities.

Validation: clean installs, lint, formatting and Agent Skill integrity pass for this branch. The combined result of all nine PRs passes production build, Astro and MCP type-checks, adoption tests and MCP protocol assertions locally; the credential-dependent BigQuery fixture test remains skipped. Fresh GitHub checks were triggered.

Bumps the astro group with 2 updates: [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) and [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro).


Updates `@astrojs/mdx` from 8.0.2 to 8.0.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.0.3/packages/integrations/mdx)

Updates `astro` from 7.3.5 to 7.3.8
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.8/packages/astro)

---
updated-dependencies:
- dependency-name: "@astrojs/mdx"
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: astro
- dependency-name: astro
  dependency-version: 7.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: astro
...

Signed-off-by: dependabot[bot] <support@github.com>
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 12, 2026 •

Copy link
Copy Markdown

Deploying specification-website with  Cloudflare Pages  Cloudflare Pages

Latest commit: 25aab15
Status: ✅  Deploy successful!
Preview URL: https://10d3481c.specification-website.pages.dev
Branch Preview URL: https://dependabot-npm-and-yarn-astr-jabb.specification-website.pages.dev

View logs

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 12, 2026
@jdevalk
jdevalk merged commit 261fb9e into main Oct 15, 2026
9 checks passed
@jdevalk
jdevalk deleted the dependabot/npm_and_yarn/astro-ef0ecb9c04 branch October 15, 2026 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant