[dependabot]

Bumps the npm group with 3 updates in the / directory: astro, @astrojs/starlight and starlight-llms-txt.

Updates astro from 7.1.6 to 7.3.5

Release notes

Sourced from astro's releases.

astro@7.3.5

Patch Changes

• #17736 2b8b2e8 Thanks @​ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

  Users must import the component with the new ?container query string:

  import { experimental_AstroContainer } from "astro/container";
  import TodoList from "../components/TodoList.astro?container";
  const container = await experimental_AstroContainer.create();
  const _string = container.renderComponent(TodoList);

astro@7.3.4

Patch Changes

• #18063 40896ac Thanks @​adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

• #18053 cf5d72f Thanks @​Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

• #18086 795a7e4 Thanks @​ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&) and named (&) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

• #18074 0429805 Thanks @​SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

• #18007 2245837 Thanks @​L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

• #18096 43657c4 Thanks @​matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

• #18043 8a53a8b Thanks @​astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

• #18029 c08252d Thanks @​matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

• Updated dependencies [3fd16ee, 8358d59]:

  • @​astrojs/markdown-satteri@​0.4.2

astro@7.3.3

Patch Changes

• #17651 504333c Thanks @​sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

• #17942 0bc5715 Thanks @​matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

• #17700 b2222fc Thanks @​winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

• #17941 394ff79 Thanks @​matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

• #17928 3277927 Thanks @​ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.5

Patch Changes

• #17736 2b8b2e8 Thanks @​ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

  Users must import the component with the new ?container query string:

  import { experimental_AstroContainer } from "astro/container";
  import TodoList from "../components/TodoList.astro?container";
  const container = await experimental_AstroContainer.create();
  const _string = container.renderComponent(TodoList);

7.3.4

Patch Changes

• #18063 40896ac Thanks @​adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

• #18053 cf5d72f Thanks @​Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

• #18086 795a7e4 Thanks @​ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&) and named (&) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

• #18074 0429805 Thanks @​SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

• #18007 2245837 Thanks @​L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

• #18096 43657c4 Thanks @​matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

• #18043 8a53a8b Thanks @​astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

• #18029 c08252d Thanks @​matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

• Updated dependencies [3fd16ee, 8358d59]:

  • @​astrojs/markdown-satteri@​0.4.2

7.3.3

Patch Changes

• #17651 504333c Thanks @​sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

• #17942 0bc5715 Thanks @​matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

• #17700 b2222fc Thanks @​winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

• #17941 394ff79 Thanks @​matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

... (truncated)

Commits

• c2e0164 [ci] release (#18113)
• 2b8b2e8 feat: add render component (#17736)
• 790c6f7 [ci] release (#18035)
• 9d17bf1 Update dependency obug to v3 (#18100)
• 43657c4 Fix i18n domain host validation (#18096)
• 00393ff Update dependency vitest [SECURITY] (#18026)
• 40896ac fix(incremental): resolve asset placeholders in modules or compiled CSS (#18063)
• 0429805 fix(errors): align three error names with their documented reference (#18074)
• 3eab954 [ci] format
• 795a7e4 Fix double-escaped ampersands in Markdown image alt and title attributes (#18...
• Additional commits viewable in compare view

Updates @astrojs/starlight from 0.41.5 to 0.42.5

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.5

Patch Changes

• #4227 5ba7a70 Thanks @​I90rche! - Adds Macedonian language support

@​astrojs/starlight@​0.42.4

Patch Changes

• #4149 fa10e87 Thanks @​ematipico! - Optimizes rendering of large nested sidebars

• #4215 f791de6 Thanks @​HiDeoo! - Adds a new seti:coffee icon for CoffeeScript files in the <FileTree> component.

• #4215 f791de6 Thanks @​HiDeoo! - Fixes <FileTree> icons for .ejs and npm-debug.log files displaying the default file icon.

@​astrojs/starlight@​0.42.3

Patch Changes

• #4211 33e21ec Thanks @​HiDeoo! - Fixes a potential page freeze due to table of contents highlighting when a <PageTitle> component override does not render a heading with the required id="_top".

@​astrojs/starlight@​0.42.2

Patch Changes

• #4201 fafd989 Thanks @​linux-universe! - Add 1 new icon: fluxer

@​astrojs/starlight@​0.42.1

Patch Changes

• #4198 96a44d4 Thanks @​mayank99! - Removes the popover attribute from the sidebar pane on desktop viewports. This ensures the desktop sidebar doesn't stay in a "hidden" popover visibility state.

@​astrojs/starlight@​0.42.0

Minor Changes

• #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

• #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

  ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

  In the following example, custom styles for the menu button are updated for the new approach:

  - starlight-menu-button button {
  + .sl-menu-button {
    color: var(--sl-color-text);
  }
  
  starlight-menu-button[aria-expanded='true'] button {
  
  
  .sl-menu-button:has(~ :popover-open) {
  color: var(--sl-color-text-accent-high);
  }

... (truncated)

Changelog

Sourced from @​astrojs/starlight's changelog.

0.42.5

Patch Changes

• #4227 5ba7a70 Thanks @​I90rche! - Adds Macedonian language support

0.42.4

Patch Changes

• #4149 fa10e87 Thanks @​ematipico! - Optimizes rendering of large nested sidebars

• #4215 f791de6 Thanks @​HiDeoo! - Adds a new seti:coffee icon for CoffeeScript files in the <FileTree> component.

• #4215 f791de6 Thanks @​HiDeoo! - Fixes <FileTree> icons for .ejs and npm-debug.log files displaying the default file icon.

0.42.3

Patch Changes

• #4211 33e21ec Thanks @​HiDeoo! - Fixes a potential page freeze due to table of contents highlighting when a <PageTitle> component override does not render a heading with the required id="_top".

0.42.2

Patch Changes

• #4201 fafd989 Thanks @​linux-universe! - Add 1 new icon: fluxer

0.42.1

Patch Changes

• #4198 96a44d4 Thanks @​mayank99! - Removes the popover attribute from the sidebar pane on desktop viewports. This ensures the desktop sidebar doesn't stay in a "hidden" popover visibility state.

0.42.0

Minor Changes

• #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

• #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

  ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

  In the following example, custom styles for the menu button are updated for the new approach:

  - starlight-menu-button button {
  + .sl-menu-button {
    color: var(--sl-color-text);

... (truncated)

Commits

• b8b654c [ci] release (#4233)
• 5ba7a70 i18n(mk): Add Macedonian UI translations (#4227)
• 3ec633b [ci] release (#4217)
• f791de6 Fix file icons generator (#4215)
• fa10e87 perf: avoid repeated sidebar subtree scans (#4149)
• fafea30 Add benchmark for sidebar sublist processing (#4216)
• b0d3b8e [ci] release (#4212)
• 33e21ec Fix toc highlighting potential page freeze (#4211)
• 525590a [ci] release (#4206)
• fafd989 add Fluxer icon (#4201)
• Additional commits viewable in compare view

Updates starlight-llms-txt from 0.11.0 to 0.12.0

Release notes

Sourced from starlight-llms-txt's releases.

starlight-llms-txt@0.12.0

Minor Changes

• #166 92e4845 Thanks @​renovate! - Updates @astrojs/mdx to the latest release

Changelog

Sourced from starlight-llms-txt's changelog.

0.12.0

Minor Changes

• #166 92e4845 Thanks @​renovate! - Updates @astrojs/mdx to the latest release

Commits

• 776a901 [ci] release (#167)
• 92e4845 fix(deps): update astro (major) (#166)
• 80d6685 fix(deps): update dependency astro to ^7.3.2 (#164)
• a79bc37 fix(deps): update dependency @​astrojs/starlight to ^0.41.10 (#159)
• 22c1421 fix(deps): update astro (#155)
• 286f7cd fix(deps): update astro (#148)
• 0eb6bab fix(deps): update astro (#143)
• b928965 fix(deps): update astro (#135)
• 9f56bf1 fix(deps): update dependency @​types/hast to ^3.0.5 (#136)
• See full diff in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[zircote]

@dependabot rebase