Skip to content

chore(deps-dev): bump astro, @astrojs/starlight, astro-embed, starlight-blog and starlight-llms-txt in /docs - #311

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/multi-ef3332bfcb
Open

chore(deps-dev): bump astro, @astrojs/starlight, astro-embed, starlight-blog and starlight-llms-txt in /docs#311
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/multi-ef3332bfcb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 13, 2026

Copy link
Copy Markdown
Contributor

Bumps astro, @astrojs/starlight, astro-embed, starlight-blog and starlight-llms-txt. These dependencies needed to be updated together.
Updates astro from 5.17.1 to 7.4.12

Release notes

Sourced from astro's releases.

astro@7.4.12

Patch Changes

  • #18409 2917650 Thanks @​matthewp! - Fixes a typo in the error message shown when a font cssVariable is invalid

  • #18709 6f1a2a8 Thanks @​ematipico! - Reduces memory usage during astro build by releasing content collection entries from memory once the content layer sync is complete.

  • #18713 59052e7 Thanks @​delucis! - Unpins @astrojs/* dependencies to allow versions matching the ^ range to be installed

  • Updated dependencies [59052e7]:

    • @​astrojs/markdown-satteri@​0.4.10
    • @​astrojs/vite-plugin-astro@​0.1.3

astro@7.4.11

Patch Changes

  • #18641 08e2cee Thanks @​astro-factory! - Validates the protocol, host and port from X-Forwarded-Proto, X-Forwarded-Host and X-Forwarded-Port together against each security.allowedDomains entry, instead of one at a time:

    • A forwarded protocol is only applied when an entry allows it for the host in use.
    • A forwarded port is only applied when the entry for that host lists it.
    • A forwarded host without a forwarded protocol is validated with the protocol of the server.
    • An entry with port: '443' (or '80' for http) now matches a host that doesn't include a port.

  • #18651 93a9057 Thanks @​umeraamir69! - Returns 400 Bad Request for malformed percent-encoded paths in the dev server and static preview instead of bubbling into a 500

  • #18672 e901468 Thanks @​astro-factory! - Fixes astro check reporting @astrojs/check as missing when the package is installed but throws while loading. The original error is now shown instead of an install prompt.

  • #18641 08e2cee Thanks @​astro-factory! - Fixes security.allowedDomains accepting non-HTTP(S) X-Forwarded-Proto values (such as ftp or ws) when the list mixes patterns with and without a protocol

  • #18686 62bb716 Thanks @​astro-factory! - Fixes astro build deleting the license file generated by Vite's build.license option. Astro now removes only its own Vite manifest from the .vite/ output folder.

  • #18629 e9916e1 Thanks @​decrek! - Fixes spreading an object onto an element with scoped styles changing that object. When the same object was spread on every render, for example a constant imported from another module, its class grew with every request.

  • #18641 08e2cee Thanks @​astro-factory! - Tightens how security.allowedDomains validates the Host and X-Forwarded-Host headers. Only a plain hostname with an optional port is accepted, and the validated host is applied to Astro.url exactly as it was matched.

  • Updated dependencies [d13beeb, e9916e1]:

    • @​astrojs/markdown-satteri@​0.4.9
    • @​astrojs/runtime@​0.1.1
    • @​astrojs/vite-plugin-astro@​0.1.2

astro@7.4.10

Patch Changes

  • #18621 8a61493 Thanks @​marcalexiei! - Fixes the dev toolbar's audit freezing an image's CSS animations in Safari, by reading the image's size from the request that loaded it instead of fetching it again

  • #18691 f787792 Thanks @​ematipico! - Improves startup time of astro commands by loading SVGO only when svgoOptimizer() optimizes an SVG, instead of whenever astro/config is imported

  • #18678 ea63d76 Thanks @​astro-factory! - Fixes duplicate CSS loading for hydrated islands that share modules or are imported through a path alias. The client build no longer emits and preloads stylesheets that are already linked on the page by the server build.

  • Updated dependencies [57137ed]:

    • @​astrojs/internal-helpers@​0.13.2
    • @​astrojs/markdown-satteri@​0.4.8
    • @​astrojs/vite-plugin-astro@​0.1.1

... (truncated)

Commits
  • 5b7c327 [ci] release (#18714)
  • 6f1a2a8 fix(content): release the content layer after sync in builds (#18709)
  • f9a1062 docs: correct build.client and build.server @​default to include trailing slas...
  • 59052e7 Use workspace:^ for monorepo deps (#18713)
  • d68e4f6 [ci] release (#18699)
  • 2e83637 [ci] format
  • 93a9057 fix(astro): return 400 for malformed paths in dev and static preview (#18651)
  • 08e2cee Mixed allowedDomains patterns no longer accept non-http(s) X-Forwarded-Proto ...
  • e9916e1 fix: don't mutate objects spread onto elements with scoped styles (#18629)
  • e901468 Show real import errors instead of a false missing-package prompt in `astro c...
  • Additional commits viewable in compare view

Updates @astrojs/starlight from 0.37.6 to 0.43.1

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.43.1

Patch Changes

  • #4396 46a5020 Thanks @​trueberryless! - Fixes a regression where the icon of the <Aside> component was rendered smaller than the icon of Markdown asides.

@​astrojs/starlight@​0.43.0

Minor Changes

  • #4190 3f2336b Thanks @​delucis! - ⚠️ BREAKING CHANGE: Adds support for any Astro scopedStyleStrategy configuration.

    Previously, Starlight forced the "where" strategy, resulting in CSS selectors like :where(.astro-HASH). Starlight now respects the strategy set in astro.config.mjs and will default to Astro’s default "attribute" strategy, resulting in attribute selectors like [data-astro-cid-HASH].

    The new default can change some styling behaviour, so we recommend checking for visual changes in your site when updating. In particular, note the following:

    • Attribute selectors have a higher specificity than :where() selectors. Check to ensure styles still apply and no CSS changes are needed to ensure the relative specificity of declarations remains the same.

    • Astro’s "attribute" strategy does not automatically pass along a parent component’s scope when passing a class down to a child component. If you have components that depended on this, you will need to update the child component to spread the parent’s data attribute where you are reusing the class name, for example:

      ---
// Parent.astro
---
<Child class="special-case" />
<style>
.special-case {
--accent-color: red;
}
</style>

      ---
// Child.astro
-const { class: className } = Astro.props;
+const { class: className, ...attributes } = Astro.props;
---
-<div class={className}>
+<div class={className} {...attributes}>
<!-- ... -->
</div>

      See “Passing a class to a child component” in the Astro docs for more details.

    Alternatively, if you wish to continue using the previous scoping strategy in your site, set it explicitly in your Astro configuration file:

    // astro.config.mjs

... (truncated)

Changelog

Sourced from @​astrojs/starlight's changelog.

0.43.1

Patch Changes

  • #4396 46a5020 Thanks @​trueberryless! - Fixes a regression where the icon of the <Aside> component was rendered smaller than the icon of Markdown asides.

0.43.0

Minor Changes

  • #4190 3f2336b Thanks @​delucis! - ⚠️ BREAKING CHANGE: Adds support for any Astro scopedStyleStrategy configuration.

    Previously, Starlight forced the "where" strategy, resulting in CSS selectors like :where(.astro-HASH). Starlight now respects the strategy set in astro.config.mjs and will default to Astro’s default "attribute" strategy, resulting in attribute selectors like [data-astro-cid-HASH].

    The new default can change some styling behaviour, so we recommend checking for visual changes in your site when updating. In particular, note the following:

    • Attribute selectors have a higher specificity than :where() selectors. Check to ensure styles still apply and no CSS changes are needed to ensure the relative specificity of declarations remains the same.

    • Astro’s "attribute" strategy does not automatically pass along a parent component’s scope when passing a class down to a child component. If you have components that depended on this, you will need to update the child component to spread the parent’s data attribute where you are reusing the class name, for example:

      ---
// Parent.astro
---
<Child class="special-case" />
<style>
.special-case {
--accent-color: red;
}
</style>

      ---
// Child.astro
-const { class: className } = Astro.props;
+const { class: className, ...attributes } = Astro.props;
---
-<div class={className}>
+<div class={className} {...attributes}>
<!-- ... -->
</div>

      See “Passing a class to a child component” in the Astro docs for more details.

    Alternatively, if you wish to continue using the previous scoping strategy in your site, set it explicitly in your Astro configuration file:

... (truncated)

Commits

Updates astro-embed from 0.12.0 to 0.14.0

Release notes

Sourced from astro-embed's releases.

astro-embed@0.14.0

Minor Changes

  • #461 a307a83 Thanks @​delucis! - Adds support for automatic embeds in MDX when using Astro’s Sätteri processor

    ⚠️ BREAKING CHANGE: astro-embed now requires v7.2.4 or higher of Astro

Patch Changes

  • Updated dependencies [a307a83]:
    • @​astro-community/astro-embed-integration@​0.13.0

astro-embed@0.13.1

Patch Changes

astro-embed@0.13.0

Minor Changes

  • #261 eb53671 Thanks @​delucis! - Reduces install size of @astro-community/astro-embed-bluesky by ~60%

    The <Bluesky> component now uses atcute instead of @atproto/api internally. Because of this, the Post TypeScript type has changed slightly. If you were passing Bluesky data directly to the component (instead of a post URL), it should still work, but in some circumstances you may see type errors and need to adjust things slightly. Let us know if you run into issues upgrading.

Patch Changes

  • Updated dependencies [eb53671]:
    • @​astro-community/astro-embed-bluesky@​0.2.0
    • @​astro-community/astro-embed-integration@​0.12.0
Changelog

Sourced from astro-embed's changelog.

0.14.0

Minor Changes

  • #461 a307a83 Thanks @​delucis! - Adds support for automatic embeds in MDX when using Astro’s Sätteri processor

    ⚠️ BREAKING CHANGE: astro-embed now requires v7.2.4 or higher of Astro

Patch Changes

  • Updated dependencies [a307a83]:
    • @​astro-community/astro-embed-integration@​0.13.0

0.13.1

Patch Changes

0.13.0

Minor Changes

  • #261 eb53671 Thanks @​delucis! - Reduces install size of @astro-community/astro-embed-bluesky by ~60%

    The <Bluesky> component now uses atcute instead of @atproto/api internally. Because of this, the Post TypeScript type has changed slightly. If you were passing Bluesky data directly to the component (instead of a post URL), it should still work, but in some circumstances you may see type errors and need to adjust things slightly. Let us know if you run into issues upgrading.

Patch Changes

  • Updated dependencies [eb53671]:
    • @​astro-community/astro-embed-bluesky@​0.2.0
    • @​astro-community/astro-embed-integration@​0.12.0
Commits
  • cad308b Version Packages (#462)
  • 30dc993 fix(deps): update dependency @​astro-community/astro-embed-bluesky to ^0.2.3 (...
  • a6f8aba fix(deps): update dependency @​astro-community/astro-embed-bluesky to ^0.2.2 (...
  • 5362731 Version Packages (#425)
  • 9940e77 fix(deps): update astro (major) (#423)
  • 4bedaba fix(deps): update dependency @​astro-community/astro-embed-bluesky to ^0.2.1 (...
  • f890955 Version Packages (#360)
  • f3b668b fix(deps): update dependency @​astro-community/astro-embed-mastodon to ^0.1.1 ...
  • a0adb33 fix(deps): update astro-embed (#283)
  • See full diff in compare view

Updates starlight-blog from 0.25.2 to 0.30.2

Release notes

Sourced from starlight-blog's releases.

starlight-blog@0.30.2

Patch Changes

  • #235 973d110 Thanks @​HiDeoo! - Fixes Starlight pagination links displayed on blog posts included in the docs sidebar.

starlight-blog@0.30.1

Patch Changes

starlight-blog@0.30.0

Minor Changes

  • #228 e4abbc2 Thanks @​cbliu1127! - Fixes a potential build error when generating RSS feeds or structured data for blog posts with an excerpt.

    ⚠️ BREAKING CHANGE: The minimum supported version of Starlight is now 0.42.0.

    Please follow the upgrade guide to update your project.

starlight-blog@0.29.0

Minor Changes

  • #225 6449901 Thanks @​HiDeoo! - Improves the generated blog markup to provide more consistent CSS selectors for custom styling and theming.

    ⚠️ Potentially breaking change: If you have custom CSS targeting generated blog markup, you may want to double check the visual appearance of the generated pages when updating.

starlight-blog@0.28.0

Minor Changes

Patch Changes

starlight-blog@0.27.0

Minor Changes

... (truncated)

Changelog

Sourced from starlight-blog's changelog.

0.30.2

Patch Changes

  • #235 973d110 Thanks @​HiDeoo! - Fixes Starlight pagination links displayed on blog posts included in the docs sidebar.

0.30.1

Patch Changes

0.30.0

Minor Changes

  • #228 e4abbc2 Thanks @​cbliu1127! - Fixes a potential build error when generating RSS feeds or structured data for blog posts with an excerpt.

    ⚠️ BREAKING CHANGE: The minimum supported version of Starlight is now 0.42.0.

    Please follow the upgrade guide to update your project.

0.29.0

Minor Changes

  • #225 6449901 Thanks @​HiDeoo! - Improves the generated blog markup to provide more consistent CSS selectors for custom styling and theming.

    ⚠️ Potentially breaking change: If you have custom CSS targeting generated blog markup, you may want to double check the visual appearance of the generated pages when updating.

0.28.0

Minor Changes

Patch Changes

... (truncated)

Commits

Updates starlight-llms-txt from 0.7.0 to 0.12.0

Release notes

Sourced from starlight-llms-txt's releases.

starlight-llms-txt@0.12.0

Minor Changes

starlight-llms-txt@0.11.0

Minor Changes

  • #127 bf986de Thanks @​funkadelic! - Updates to support Astro 7. The astro peer dependency is now ^7.0.0 and the @astrojs/starlight peer dependency is now >=0.41.0.

    Support for Astro 6 and Starlight versions below 0.41 has been dropped. Existing projects on Astro 6 can continue using the previous release until they are ready to upgrade to Astro 7.

starlight-llms-txt@0.10.0

Minor Changes

  • #105 aa7f8cf Thanks @​IEvangelist! - Extend the customSelectors option to support per-output control.

    The option is now exposed at the top level of the plugin configuration and accepts either of two shapes:

    • Array (legacy) — selectors apply to llms-small.txt only, matching the existing scope of minify.customSelectors.
    • Object with optional small, full, and all arrays — small applies to llms-small.txt, full applies to llms-full.txt and any customSets outputs, and all applies to both (merged with small and full).

    The deprecated minify.customSelectors option keeps working: selectors listed there are merged additively into the small bucket so existing configurations are unaffected.

    Use the new object shape to strip transient HTML injected by docs-site rendering plugins (for example, hover popovers from expressive-code-twoslash) from every generated output:

    starlightLlmsTxt({
  customSelectors: {
    all: ['.twoslash-popup-container', '.twoslash-error-box'],
  },
}),

starlight-llms-txt@0.9.0

Minor Changes

  • #104 3f6c45b Thanks @​davidfowl! - Preserves the contents of code blocks when collapsing whitespace in llms-small.txt.

    Previously, the minify.whitespace option collapsed every whitespace run — including newlines inside fenced code blocks — into a single space, so multi-line code samples ended up on one line. Now, fenced code blocks keep their original newlines and indentation while whitespace in prose still collapses for token efficiency.

    A new minify.collapseCodeBlocks option controls this behavior. Set it to true to restore the previous flatten-everything output.

starlight-llms-txt@0.8.1

Patch Changes

  • 29e5efb Thanks @​mvanhorn! - Strips HTML comments from llms.txt files. <!-- ... --> style comments in .md files are no longer emitted in the generated files.

starlight-llms-txt@0.8.0

Minor Changes

... (truncated)

Changelog

Sourced from starlight-llms-txt's changelog.

0.12.0

Minor Changes

0.11.0

Minor Changes

  • #127 bf986de Thanks @​funkadelic! - Updates to support Astro 7. The astro peer dependency is now ^7.0.0 and the @astrojs/starlight peer dependency is now >=0.41.0.

    Support for Astro 6 and Starlight versions below 0.41 has been dropped. Existing projects on Astro 6 can continue using the previous release until they are ready to upgrade to Astro 7.

0.10.0

Minor Changes

  • #105 aa7f8cf Thanks @​IEvangelist! - Extend the customSelectors option to support per-output control.

    The option is now exposed at the top level of the plugin configuration and accepts either of two shapes:

    • Array (legacy) — selectors apply to llms-small.txt only, matching the existing scope of minify.customSelectors.
    • Object with optional small, full, and all arrays — small applies to llms-small.txt, full applies to llms-full.txt and any customSets outputs, and all applies to both (merged with small and full).

    The deprecated minify.customSelectors option keeps working: selectors listed there are merged additively into the small bucket so existing configurations are unaffected.

    Use the new object shape to strip transient HTML injected by docs-site rendering plugins (for example, hover popovers from expressive-code-twoslash) from every generated output:

    starlightLlmsTxt({
  customSelectors: {
    all: ['.twoslash-popup-container', '.twoslash-error-box'],
  },
}),

0.9.0

Minor Changes

  • #104 3f6c45b Thanks @​davidfowl! - Preserves the contents of code blocks when collapsing whitespace in llms-small.txt.

    Previously, the minify.whitespace option collapsed every whitespace run — including newlines inside fenced code blocks — into a single space, so multi-line code samples ended up on one line. Now, fenced code blocks keep their original newlines and indentation while whitespace in prose still collapses for token efficiency.

    A new minify.collapseCodeBlocks option controls this behavior. Set it to true to restore the previous flatten-everything output.

0.8.1

Patch Changes

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps-dev): bump astro, @astrojs/starlight, astro-embed, starlig…
d330639 
…ht-blog and starlight-llms-txt

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro), [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight), [astro-embed](https://github.com/delucis/astro-embed/tree/HEAD/packages/astro-embed), [starlight-blog](https://github.com/HiDeoo/starlight-blog/tree/HEAD/packages/starlight-blog) and [starlight-llms-txt](https://github.com/delucis/starlight-llms-txt/tree/HEAD/packages/starlight-llms-txt). These dependencies needed to be updated together.

Updates `astro` from 5.17.1 to 7.4.12
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v5.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.4.12/packages/astro)

Updates `@astrojs/starlight` from 0.37.6 to 0.43.1
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.43.1/packages/starlight)

Updates `astro-embed` from 0.12.0 to 0.14.0
- [Release notes](https://github.com/delucis/astro-embed/releases)
- [Changelog](https://github.com/delucis/astro-embed/blob/main/packages/astro-embed/CHANGELOG.md)
- [Commits](https://github.com/delucis/astro-embed/commits/astro-embed@0.14.0/packages/astro-embed)

Updates `starlight-blog` from 0.25.2 to 0.30.2
- [Release notes](https://github.com/HiDeoo/starlight-blog/releases)
- [Changelog](https://github.com/HiDeoo/starlight-blog/blob/main/packages/starlight-blog/CHANGELOG.md)
- [Commits](https://github.com/HiDeoo/starlight-blog/commits/starlight-blog@0.30.2/packages/starlight-blog)

Updates `starlight-llms-txt` from 0.7.0 to 0.12.0
- [Release notes](https://github.com/delucis/starlight-llms-txt/releases)
- [Changelog](https://github.com/delucis/starlight-llms-txt/blob/main/packages/starlight-llms-txt/CHANGELOG.md)
- [Commits](https://github.com/delucis/starlight-llms-txt/commits/starlight-llms-txt@0.12.0/packages/starlight-llms-txt)

---
updated-dependencies:
- dependency-name: astro
  dependency-version: 7.4.12
  dependency-type: direct:development
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.43.1
  dependency-type: direct:development
- dependency-name: astro-embed
  dependency-version: 0.14.0
  dependency-type: direct:development
- dependency-name: starlight-blog
  dependency-version: 0.30.2
  dependency-type: direct:development
- dependency-name: starlight-llms-txt
  dependency-version: 0.12.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 13, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants