chore(deps)(deps): bump the runtime-deps group with 3 updates by dependabot[bot] · Pull Request #20 · Exploitacious/ivantsov.tech

dependabot · 2026-05-01T22:06:05Z

Bumps the runtime-deps group with 3 updates: @tailwindcss/vite, astro and tailwindcss.

Updates @tailwindcss/vite from 4.1.18 to 4.2.4

Release notes

Sourced from @tailwindcss/vite's releases.

v4.2.4

Fixed

Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#19947)

v4.2.3

Fixed

Canonicalization: improve canonicalizations for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tighter → tracking-wider) (#19827)

Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)

Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#19723)

Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem] → p-[1.2rem]) (#19837)

Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#19842)

Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#19842)

Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#19842)

Canonicalization: collapse overflow-{x,y}-* into overflow-* (#19842)

Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#19842)

Read from --placeholder-color instead of --background-color for placeholder-* utilities (#19843)

Upgrade: ensure files are not emptied out when killing the upgrade process while it's running (#19846)

Upgrade: use config.content when migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846)

Upgrade: never migrate files that are ignored by git (#19846)

Add .env and .env.* to default ignored content files (#19846)

Canonicalization: migrate overflow-ellipsis into text-ellipsis (#19849)

Canonicalization: migrate start-full → inset-s-full, start-auto → inset-s-auto, start-px → inset-s-px, and start-<number> → inset-s-<number> as well as negative versions (#19849)

Canonicalization: migrate end-full → inset-e-full, end-auto → inset-e-auto, end-px → inset-e-px, and end-<number> → inset-e-<number> as well as negative versions (#19849)

Canonicalization: move the - sign inside the arbitrary value -left-[9rem] → left-[-9rem] (#19858)

Canonicalization: move the - sign outside the arbitrary value ml-[calc(-1*var(--width))] → -ml-(--width) (#19858)

Improve performance when scanning JSONL / NDJSON files (#19862)

Support NODE_PATH environment variable in standalone CLI (#19617)

v4.2.2

Added

Support Vite 8 in @tailwindcss/vite (#19790)

Fixed

Don't crash when candidates contain prototype properties like row-constructor (#19725)

Canonicalize calc(var(--spacing)*…) expressions into --spacing(…) (#19769)

Fix crash in canonicalization step when handling utilities containing @property at-rules (e.g. shadow-sm border) (#19727)

Skip full reload for server only modules scanned by client CSS when using @tailwindcss/vite (#19745)

Improve canonicalization for bare values exceeding default spacing scale suggestions (e.g. w-1234 h-1234 → size-1234) (#19809)

Fix canonicalization resulting in empty list (e.g. w-5 h-5 size-5 → '' instead of size-5) (#19812)

v4.2.1

Fixed

Allow trailing dash in functional utility names for backwards compatibility (#19696)

Properly detect classes containing . characters within curly braces in MDX files (#19711)

... (truncated)

Changelog

Sourced from @tailwindcss/vite's changelog.

[4.2.4] - 2026-04-21

Fixed

Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#19947)

[4.2.3] - 2026-04-20

Fixed

Canonicalization: improve canonicalization for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tighter → tracking-wider) (#19827)

Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)

Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#19723)

Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem] → p-[1.2rem]) (#19837)

Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#19842)

Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#19842)

Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#19842)

Canonicalization: collapse overflow-{x,y}-* into overflow-* (#19842)

Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#19842)

Read from --placeholder-color instead of --background-color for placeholder-* utilities (#19843)

Upgrade: ensure files are not emptied out when killing the upgrade process while it's running (#19846)

Upgrade: use config.content when migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846)

Upgrade: never migrate files that are ignored by git (#19846)

Add .env and .env.* to default ignored content files (#19846)

Canonicalization: migrate overflow-ellipsis into text-ellipsis (#19849)

Canonicalization: migrate start-full → inset-s-full, start-auto → inset-s-auto, start-px → inset-s-px, and start-<number> → inset-s-<number> as well as negative versions (#19849)

Canonicalization: migrate end-full → inset-e-full, end-auto → inset-e-auto, end-px → inset-e-px, and end-<number> → inset-e-<number> as well as negative versions (#19849)

Canonicalization: move the - sign inside the arbitrary value -left-[9rem] → left-[-9rem] (#19858)

Canonicalization: move the - sign outside the arbitrary value ml-[calc(-1*var(--width))] → -ml-(--width) (#19858)

Improve performance when scanning JSONL / NDJSON files (#19862)

Support NODE_PATH environment variable in standalone CLI (#19617)

[4.2.2] - 2026-03-18

Fixed

Don't crash when candidates contain prototype properties like row-constructor (#19725)

Canonicalize calc(var(--spacing)*…) expressions into --spacing(…) (#19769)

Fix crash in canonicalization step when handling utilities containing @property at-rules (e.g. shadow-sm border) (#19727)

Skip full reload for server only modules scanned by client CSS when using @tailwindcss/vite (#19745)

Add support for Vite 8 in @tailwindcss/vite (#19790)

Improve canonicalization for bare values exceeding default spacing scale suggestions (e.g. w-1234 h-1234 → size-1234) (#19809)

Fix canonicalization resulting in empty list (e.g. w-5 h-5 size-5 → '' instead of size-5) (#19812)

Resolve tsconfig paths to allow for @import '@/path/to/file'; when using @tailwindcss/vite (#19803)

[4.2.1] - 2026-02-23

Fixed

Allow trailing dash in functional utility names for backwards compatibility (#19696)

... (truncated)

Commits

69ad7cc 4.2.4 (#19948)
685c19e Fix issue around resolving paths in @tailwindcss/vite (#19947)
2e3fa49 4.2.3 (#19944)
5cb1efd fix(vite): resolve tsconfig paths in CSS and JS resolvers (#19803)
d596b0c 4.2.2 (#19821)
faa5e88 Cleanup inconsistencies related to (regex) escapes (#19804)
59b0329 Add support for Vite 8 in @tailwindcss/vite (#19790)
bf441a7 fix(vite): skip full reload for server only modules scanned by client css (#1...
1dce64e 4.2.1 (#19714)
1b16411 4.2.0 (#19695)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @tailwindcss/vite since your current version.

Updates astro from 5.16.11 to 5.18.1

Changelog

Sourced from astro's changelog.

5.18.1

Patch Changes

Updated dependencies [c2cd371]:

@astrojs/internal-helpers@0.7.6

@astrojs/markdown-remark@6.3.11

5.18.0

Minor Changes
#15589 b7dd447 Thanks @qzio! - Adds a new security.actionBodySizeLimit option to configure the maximum size of Astro Actions request bodies.

This lets you increase the default 1 MB limit when your actions need to accept larger payloads. For example, actions that handle file uploads or large JSON payloads can now opt in to a higher limit.

If you do not set this option, Astro continues to enforce the 1 MB default to help prevent abuse.
// astro.config.mjs
export default defineConfig({
  security: {
    actionBodySizeLimit: 10 * 1024 * 1024, // set to 10 MB
  },
});
Patch Changes

#15594 efae11c Thanks @qzio! - Fix X-Forwarded-Proto validation when allowedDomains includes both protocol and hostname fields. The protocol check no longer fails due to hostname mismatch against the hardcoded test URL.

5.17.3

Patch Changes

#15564 522f880 Thanks @matthewp! - Add a default body size limit for server actions to prevent oversized requests from exhausting memory.

#15569 e01e98b Thanks @matthewp! - Respect image allowlists when inferring remote image sizes and reject remote redirects.

5.17.2

Patch Changes

c13b536 Thanks @matthewp! - Improves Host header handling for SSR deployments behind proxies

5.17.1

Patch Changes

#15334 d715f1f Thanks @florian-lefebvre! - BREAKING CHANGE to the experimental Fonts API only

... (truncated)

Commits

434d9cc [ci] release (#15829)
c2cd371 fix(helpers): Backport remote patterns segments fix (#15828)
011f061 [ci] release (#15597)
efae11c fix: X-Forwarded-Proto rejected when allowedDomains includes protocol… (#15594)
751ccf0 Update actionBodySizeLimit changeset and make minor (#15600)
b7dd447 make actionBodySizeLimit configurable (#15589)
e0f1a2b [ci] release (#15571)
522f880 Limit action request body size (#15564)
436962a chore: Upgrade Vite and esbuild (#15554)
e01e98b Respect remote image allowlists (#15569)
Additional commits viewable in compare view

Updates tailwindcss from 4.1.18 to 4.2.4

Release notes

Sourced from tailwindcss's releases.

v4.2.4

Fixed

Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#19947)

v4.2.3

Fixed

Canonicalization: improve canonicalizations for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tighter → tracking-wider) (#19827)

Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)

Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#19723)

Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem] → p-[1.2rem]) (#19837)

Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#19842)

Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#19842)

Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#19842)

Canonicalization: collapse overflow-{x,y}-* into overflow-* (#19842)

Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#19842)

Read from --placeholder-color instead of --background-color for placeholder-* utilities (#19843)

Upgrade: ensure files are not emptied out when killing the upgrade process while it's running (#19846)

Upgrade: use config.content when migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846)

Upgrade: never migrate files that are ignored by git (#19846)

Add .env and .env.* to default ignored content files (#19846)

Canonicalization: migrate overflow-ellipsis into text-ellipsis (#19849)

Canonicalization: migrate start-full → inset-s-full, start-auto → inset-s-auto, start-px → inset-s-px, and start-<number> → inset-s-<number> as well as negative versions (#19849)

Canonicalization: migrate end-full → inset-e-full, end-auto → inset-e-auto, end-px → inset-e-px, and end-<number> → inset-e-<number> as well as negative versions (#19849)

Canonicalization: move the - sign inside the arbitrary value -left-[9rem] → left-[-9rem] (#19858)

Canonicalization: move the - sign outside the arbitrary value ml-[calc(-1*var(--width))] → -ml-(--width) (#19858)

Improve performance when scanning JSONL / NDJSON files (#19862)

Support NODE_PATH environment variable in standalone CLI (#19617)

v4.2.2

Added

Support Vite 8 in @tailwindcss/vite (#19790)

Fixed

Don't crash when candidates contain prototype properties like row-constructor (#19725)

Canonicalize calc(var(--spacing)*…) expressions into --spacing(…) (#19769)

Fix crash in canonicalization step when handling utilities containing @property at-rules (e.g. shadow-sm border) (#19727)

Skip full reload for server only modules scanned by client CSS when using @tailwindcss/vite (#19745)

Improve canonicalization for bare values exceeding default spacing scale suggestions (e.g. w-1234 h-1234 → size-1234) (#19809)

Fix canonicalization resulting in empty list (e.g. w-5 h-5 size-5 → '' instead of size-5) (#19812)

v4.2.1

Fixed

Allow trailing dash in functional utility names for backwards compatibility (#19696)

Properly detect classes containing . characters within curly braces in MDX files (#19711)

... (truncated)

Changelog

Sourced from tailwindcss's changelog.

[4.2.4] - 2026-04-21

Fixed

Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#19947)

[4.2.3] - 2026-04-20

Fixed

Canonicalization: improve canonicalization for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tighter → tracking-wider) (#19827)

Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)

Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#19723)

Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem] → p-[1.2rem]) (#19837)

Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#19842)

Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#19842)

Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#19842)

Canonicalization: collapse overflow-{x,y}-* into overflow-* (#19842)

Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#19842)

Read from --placeholder-color instead of --background-color for placeholder-* utilities (#19843)

Upgrade: ensure files are not emptied out when killing the upgrade process while it's running (#19846)

Upgrade: use config.content when migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846)

Upgrade: never migrate files that are ignored by git (#19846)

Add .env and .env.* to default ignored content files (#19846)

Canonicalization: migrate overflow-ellipsis into text-ellipsis (#19849)

Canonicalization: migrate start-full → inset-s-full, start-auto → inset-s-auto, start-px → inset-s-px, and start-<number> → inset-s-<number> as well as negative versions (#19849)

Canonicalization: migrate end-full → inset-e-full, end-auto → inset-e-auto, end-px → inset-e-px, and end-<number> → inset-e-<number> as well as negative versions (#19849)

Canonicalization: move the - sign inside the arbitrary value -left-[9rem] → left-[-9rem] (#19858)

Canonicalization: move the - sign outside the arbitrary value ml-[calc(-1*var(--width))] → -ml-(--width) (#19858)

Improve performance when scanning JSONL / NDJSON files (#19862)

Support NODE_PATH environment variable in standalone CLI (#19617)

[4.2.2] - 2026-03-18

Fixed

Don't crash when candidates contain prototype properties like row-constructor (#19725)

Canonicalize calc(var(--spacing)*…) expressions into --spacing(…) (#19769)

Fix crash in canonicalization step when handling utilities containing @property at-rules (e.g. shadow-sm border) (#19727)

Skip full reload for server only modules scanned by client CSS when using @tailwindcss/vite (#19745)

Add support for Vite 8 in @tailwindcss/vite (#19790)

Improve canonicalization for bare values exceeding default spacing scale suggestions (e.g. w-1234 h-1234 → size-1234) (#19809)

Fix canonicalization resulting in empty list (e.g. w-5 h-5 size-5 → '' instead of size-5) (#19812)

Resolve tsconfig paths to allow for @import '@/path/to/file'; when using @tailwindcss/vite (#19803)

[4.2.1] - 2026-02-23

Fixed

Allow trailing dash in functional utility names for backwards compatibility (#19696)

... (truncated)

Commits

69ad7cc 4.2.4 (#19948)
2e3fa49 4.2.3 (#19944)
df6209a Canonicalize negative arbitrary values (#19858)
52fd421 Small refactor of canonicalization tests (#19851)
c385fd3 use test.each instead of manual loop
0d6e038 fix index in test name
88a2d22 Add more canonicalization rules for deprecated utilities (#19849)
2c1ef9e Use --placeholder-color instead of --background-color for placeholder-*...
28d5268 Collapse more utilities by expanding their declarations (#19842)
b55d960 fix(canonicalize): collapse arbitrary values into shorthand utilities (#19837)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tailwindcss since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the runtime-deps group with 3 updates: [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite), [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) and [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss). Updates `@tailwindcss/vite` from 4.1.18 to 4.2.4 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.4/packages/@tailwindcss-vite) Updates `astro` from 5.16.11 to 5.18.1 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/astro@5.18.1/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@5.18.1/packages/astro) Updates `tailwindcss` from 4.1.18 to 4.2.4 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.4/packages/tailwindcss) --- updated-dependencies: - dependency-name: "@tailwindcss/vite" dependency-version: 4.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-deps - dependency-name: astro dependency-version: 5.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-deps - dependency-name: tailwindcss dependency-version: 4.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 1, 2026

github-actions Bot merged commit e924fc0 into main May 1, 2026
1 check passed

dependabot Bot deleted the dependabot/npm_and_yarn/runtime-deps-b2453469fa branch May 1, 2026 22:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps)(deps): bump the runtime-deps group with 3 updates#20

chore(deps)(deps): bump the runtime-deps group with 3 updates#20
github-actions[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/runtime-deps-b2453469fa

dependabot Bot commented on behalf of github May 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 1, 2026

v4.2.4

Fixed

v4.2.3

Fixed

v4.2.2

Added

Fixed

v4.2.1

Fixed

[4.2.4] - 2026-04-21

Fixed

[4.2.3] - 2026-04-20

Fixed

[4.2.2] - 2026-03-18

Fixed

[4.2.1] - 2026-02-23

Fixed

5.18.1

Patch Changes

5.18.0

Minor Changes

Patch Changes

5.17.3

Patch Changes

5.17.2

Patch Changes

5.17.1

Patch Changes

v4.2.4

Fixed

v4.2.3

Fixed

v4.2.2

Added

Fixed

v4.2.1

Fixed

[4.2.4] - 2026-04-21

Fixed

[4.2.3] - 2026-04-20

Fixed

[4.2.2] - 2026-03-18

Fixed

[4.2.1] - 2026-02-23

Fixed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants