Skip to content

build(deps): bump sharp, @astrojs/starlight, astro, astro-mermaid and starlight-llms-txt in /website - #7

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/website/multi-789c04f36f
Open

build(deps): bump sharp, @astrojs/starlight, astro, astro-mermaid and starlight-llms-txt in /website#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/website/multi-789c04f36f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown

Bumps sharp, @astrojs/starlight, astro, astro-mermaid and starlight-llms-txt. These dependencies needed to be updated together.
Updates sharp from 0.34.3 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

  • Improve code bundler support by resolving path to libvips binary.

  • Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

  • Emit warning about binaries provided by Electron for use on Linux.

  • Add hasAlpha property to output info. #4500

  • TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @​Andarist

  • Bound clahe width and height to avoid signed overflow. #4551 @​metsw24-max

  • Bound trim margin to avoid signed overflow. #4552 @​metsw24-max

  • Reject infinite values when validating numbers. #4553 @​metsw24-max

  • Bound extract region to libvips coordinate limit. #4555 @​metsw24-max

  • Verify background colour values are numbers. #4556 @​metsw24-max

  • Bound create and raw input dimensions to coordinate limit. #4558 @​metsw24-max

  • Tighten recomb and affine matrix verification. #4560 @​chatman-media

  • Verify cache memory limit to avoid overflow. #4561 @​metsw24-max

v0.35.3-rc.2

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits
  • 1018449 Release v0.35.3
  • ba303a7 Prerelease v0.35.3-rc.2
  • 4f94fc5 Upgrade to sharp-libvips v1.3.2
  • c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
  • 9a8d002 Docs: Add changelog entry and note about transferable #4520
  • 8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
  • e000d0b Prerelease v0.35.3-rc.1
  • 9554ca9 Prerelease v0.35.3-rc.0
  • 6a29fd5 Emit warning about native binaries on Linux Electron
  • 540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for sharp since your current version.


Updates @astrojs/starlight from 0.35.2 to 0.41.4

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.41.4

Patch Changes

@​astrojs/starlight@​0.41.3

Patch Changes

  • #3911 1686ecc Thanks @​timothyjordan! - Keeps keyboard focus inside the mobile menu while it is open, preventing focus moving to hidden interactive elements in page content.

@​astrojs/starlight@​0.41.2

Patch Changes

  • #4008 58a3520 Thanks @​FrancoKaddour! - Fixes the table of contents overflowing the right edge of the viewport when a custom --sl-content-width value exceeds available space

  • #4015 bdbfffc Thanks @​delucis! - Fixes an issue where aside icons were rendered incorrectly in projects where Astro’s MDX integration had optimization disabled

@​astrojs/starlight@​0.41.1

Patch Changes

@​astrojs/starlight@​0.41.0

Minor Changes

  • #3951 1202dd4 Thanks @​HiDeoo! - Adds support for Astro v7, drops support for Astro v6.

    Upgrade Astro and dependencies

    ⚠️ BREAKING CHANGE: Astro v6 is no longer supported. Make sure you update Astro and any other official integrations at the same time as updating Starlight:

    npx @astrojs/upgrade

    Community Starlight plugins and Astro integrations may also need to be manually updated to work with Astro v7. If you encounter any issues, please reach out to the plugin or integration author to see if it is a known issue or if an updated version is being worked on.

    ⚠️ BREAKING CHANGE: This release drops official support for Chromium-based browsers prior to version 111 (released 07 March 2023) and Safari-based browsers prior to version 16.4 (released 27 March 2023). You can find a list of currently supported browsers and their versions using this browserslist query.

Patch Changes

  • #3953 a935d33 Thanks @​HiDeoo! - Fixes Starlight Markdown processing being potentially applied to files that should not be processed.

... (truncated)

Changelog

Sourced from @​astrojs/starlight's changelog.

0.41.4

Patch Changes

0.41.3

Patch Changes

  • #3911 1686ecc Thanks @​timothyjordan! - Keeps keyboard focus inside the mobile menu while it is open, preventing focus moving to hidden interactive elements in page content.

0.41.2

Patch Changes

  • #4008 58a3520 Thanks @​FrancoKaddour! - Fixes the table of contents overflowing the right edge of the viewport when a custom --sl-content-width value exceeds available space

  • #4015 bdbfffc Thanks @​delucis! - Fixes an issue where aside icons were rendered incorrectly in projects where Astro’s MDX integration had optimization disabled

0.41.1

Patch Changes

0.41.0

Minor Changes

  • #3951 1202dd4 Thanks @​HiDeoo! - Adds support for Astro v7, drops support for Astro v6.

    Upgrade Astro and dependencies

    ⚠️ BREAKING CHANGE: Astro v6 is no longer supported. Make sure you update Astro and any other official integrations at the same time as updating Starlight:

    npx @astrojs/upgrade

    Community Starlight plugins and Astro integrations may also need to be manually updated to work with Astro v7. If you encounter any issues, please reach out to the plugin or integration author to see if it is a known issue or if an updated version is being worked on.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​astrojs/starlight since your current version.


Updates astro from 5.17.1 to 7.1.3

Release notes

Sourced from astro's releases.

astro@7.1.3

Patch Changes

  • #17427 630b382 Thanks @​astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.

astro@7.1.2

Patch Changes

  • #17445 a5f7230 Thanks @​ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.

  • #17402 a89c137 Thanks @​farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)

  • #17405 91992ef Thanks @​Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().

astro@7.1.1

Patch Changes

astro@7.1.0

Minor Changes

  • #17302 5f4dc03 Thanks @​astrobot-houston! - Adds a new deferRender option to the glob() content loader

    When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.

    This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.

    // src/content.config.ts
import { defineCollection } from 'astro:content';
import { glob } from 'astro/loaders';
const docs = defineCollection({
loader: glob({ pattern: '**/*.md', base: 'src/content/docs', deferRender: true }),
});

    By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.

  • #17296 30698a2 Thanks @​ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store

    By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

    Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:

    // astro.config.mjs

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.3

Patch Changes

  • #17427 630b382 Thanks @​astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.

7.1.2

Patch Changes

  • #17445 a5f7230 Thanks @​ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.

  • #17402 a89c137 Thanks @​farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)

  • #17405 91992ef Thanks @​Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().

7.1.1

Patch Changes

7.1.0

Minor Changes

  • #17302 5f4dc03 Thanks @​astrobot-houston! - Adds a new deferRender option to the glob() content loader

    When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.

    This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.

    // src/content.config.ts
import { defineCollection } from 'astro:content';
import { glob } from 'astro/loaders';
const docs = defineCollection({
loader: glob({ pattern: '**/*.md', base: 'src/content/docs', deferRender: true }),
});

    By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.

  • #17296 30698a2 Thanks @​ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store

    By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

... (truncated)

Commits

Updates astro-mermaid from 1.0.4 to 1.4.0

Release notes

Sourced from astro-mermaid's releases.

v1.4.0

What's Changed

  • chore: bump version to 1.4.0 (#44)
  • Chore: support Astro 6.x and above in peerDependencies (#42)
  • feat: add enableLog option to control client-side logging (#38)
  • Update README.md
  • Update demo dependency to 1.3.1

Full Changelog: joesaby/astro-mermaid@v1.3.1...v1.4.0

v1.3.1 - Security Updates and Bug Fixes

What's Changed

Security

  • 🔒 Resolved 35+ Dependabot security alerts by updating dependencies

Improvements

  • ♻️ Refactored mermaid.js loading and initialization (#22)
  • ⬆️ Fixed lockfile dependencies (#29)
  • 🧹 Removed anthropic dev dependency

Commits

  • fix: update dependencies to resolve 35+ Dependabot security alerts
  • Refactor mermaid.js loading and initialization (#22)
  • Fix lockfile dependencies (#29)
  • Update demo dependency and remove anthropic dev dependency

Full Changelog: joesaby/astro-mermaid@v1.2.1...v1.3.1

Changelog

Sourced from astro-mermaid's changelog.

Changelog

All notable changes to astro-mermaid will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

  • Astro 7 / Sätteri Support: When the active markdown processor is Sätteri (@astrojs/markdown-satteri, the Astro 7 default), the integration registers its transform as a Sätteri mdast plugin so mermaid blocks render without forcing sites back onto unified(). Astro 6.4+ (unified) and pre-6.4 (legacy plugin arrays) continue to work unchanged — the path is chosen by detecting the processor at build time (#71)

Fixed

  • Markdown Processor Deprecation: On Astro 6.4+, the integration now registers its remark/rehype plugins via markdown.processor (unified({...})) instead of the deprecated markdown.remarkPlugins / markdown.rehypePlugins arrays, eliminating the deprecation warning. Older Astro versions transparently fall back to the legacy plugin arrays (#62)
  • Icon Pack Serialization: Added icons property to iconPacks configuration to allow direct data passing, fixing serialization issues with external references (#18)

[1.1.0] - 2025-10-18

Added

  • Universal Theme Detection: Enhanced theme detection to work with both html[data-theme] and body[data-theme] attributes
  • Dual Plugin System: Added remark plugin alongside existing rehype plugin for comprehensive markdown processing
  • Professional Standalone Demo: Created complete astro-demo with modern UI and template-ready structure
  • Enhanced Documentation: Reconciled documentation between demos with ELK layout examples
  • Type Safety: Comprehensive TypeScript checking across all demos

Changed

  • Dependency Optimization: Cleaned up package dependencies for better maintainability
  • Build Process: Improved build optimization and chunk splitting

Fixed

  • Theme Switching: Fixed mutation observers to watch both html and body elements
  • Documentation Consistency: Synchronized examples between starlight-demo and astro-demo
Commits
  • ebe84bc chore: bump version to 1.4.0 (#44)
  • 1623261 Chore: support Astro 6.x and above in peerDependencies (#42)
  • 50bb768 feat: add enableLog option to control client-side logging (#38)
  • d3b1b07 Update README.md
  • 88e6ea9 Update demo dependency to 1.3.1
  • 77fe2ff chore: bump version to 1.3.1
  • 94c0d84 fix: update dependencies to resolve 35+ Dependabot security alerts
  • 4e35af0 Update demo dependency to 1.3.0 and also remove anthropic dev depdenency
  • fc7ed08 chore: bump version to 1.3.0
  • f22f28e Refactor mermaid.js loading and initialization (#22)
  • Additional commits viewable in compare view

Updates starlight-llms-txt from 0.5.1 to 0.11.0

Release notes

Sourced from starlight-llms-txt's releases.

starlight-llms-txt@0.11.0

Minor Changes

  • #127 bf986de Thanks @​funkadelic! - Updates to support Astro 7. The astro peer dependency is now ^7.0.0 and the @astrojs/starlight peer dependency is now >=0.41.0.

    Support for Astro 6 and Starlight versions below 0.41 has been dropped. Existing projects on Astro 6 can continue using the previous release until they are ready to upgrade to Astro 7.

starlight-llms-txt@0.10.0

Minor Changes

  • #105 aa7f8cf Thanks @​IEvangelist! - Extend the customSelectors option to support per-output control.

    The option is now exposed at the top level of the plugin configuration and accepts either of two shapes:

    • Array (legacy) — selectors apply to llms-small.txt only, matching the existing scope of minify.customSelectors.
    • Object with optional small, full, and all arrays — small applies to llms-small.txt, full applies to llms-full.txt and any customSets outputs, and all applies to both (merged with small and full).

    The deprecated minify.customSelectors option keeps working: selectors listed there are merged additively into the small bucket so existing configurations are unaffected.

    Use the new object shape to strip transient HTML injected by docs-site rendering plugins (for example, hover popovers from expressive-code-twoslash) from every generated output:

    starlightLlmsTxt({
  customSelectors: {
    all: ['.twoslash-popup-container', '.twoslash-error-box'],
  },
}),

starlight-llms-txt@0.9.0

Minor Changes

  • #104 3f6c45b Thanks @​davidfowl! - Preserves the contents of code blocks when collapsing whitespace in llms-small.txt.

    Previously, the minify.whitespace option collapsed every whitespace run — including newlines inside fenced code blocks — into a single space, so multi-line code samples ended up on one line. Now, fenced code blocks keep their original newlines and indentation while whitespace in prose still collapses for token efficiency.

    A new minify.collapseCodeBlocks option controls this behavior. Set it to true to restore the previous flatten-everything output.

starlight-llms-txt@0.8.1

Patch Changes

  • 29e5efb Thanks @​mvanhorn! - Strips HTML comments from llms.txt files. <!-- ... --> style comments in .md files are no longer emitted in the generated files.

starlight-llms-txt@0.8.0

Minor Changes

  • #80 dea7b22 Thanks @​nonoakij! - Adds support for Astro v6 and Starlight v0.38, drops support for lower versions.

starlight-llms-txt@0.7.0

Minor Changes

... (truncated)

Changelog

Sourced from starlight-llms-txt's changelog.

0.11.0

Minor Changes

  • #127 bf986de Thanks @​funkadelic! - Updates to support Astro 7. The astro peer dependency is now ^7.0.0 and the @astrojs/starlight peer dependency is now >=0.41.0.

    Support for Astro 6 and Starlight versions below 0.41 has been dropped. Existing projects on Astro 6 can continue using the previous release until they are ready to upgrade to Astro 7.

0.10.0

Minor Changes

  • #105 aa7f8cf Thanks @​IEvangelist! - Extend the customSelectors option to support per-output control.

    The option is now exposed at the top level of the plugin configuration and accepts either of two shapes:

    • Array (legacy) — selectors apply to llms-small.txt only, matching the existing scope of minify.customSelectors.
    • Object with optional small, full, and all arrays — small applies to llms-small.txt, full applies to llms-full.txt and any customSets outputs, and all applies to both (merged with small and full).

    The deprecated minify.customSelectors option keeps working: selectors listed there are merged additively into the small bucket so existing configurations are unaffected.

    Use the new object shape to strip transient HTML injected by docs-site rendering plugins (for example, hover popovers from expressive-code-twoslash) from every generated output:

    starlightLlmsTxt({
  customSelectors: {
    all: ['.twoslash-popup-container', '.twoslash-error-box'],
  },
}),

0.9.0

Minor Changes

  • #104 3f6c45b Thanks @​davidfowl! - Preserves the contents of code blocks when collapsing whitespace in llms-small.txt.

    Previously, the minify.whitespace option collapsed every whitespace run — including newlines inside fenced code blocks — into a single space, so multi-line code samples ended up on one line. Now, fenced code blocks keep their original newlines and indentation while whitespace in prose still collapses for token efficiency.

    A new minify.collapseCodeBlocks option controls this behavior. Set it to true to restore the previous flatten-everything output.

0.8.1

Patch Changes

  • 29e5efb Thanks @​mvanhorn! - Strips HTML comments from llms.txt files. <!-- ... --> style comments in .md files are no longer emitted in the generated files.

0.8.0

Minor Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for starlight-llms-txt since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
build(deps): bump sharp, @astrojs/starlight, astro, astro-mermaid and…
85d99ea 
… starlight-llms-txt

Bumps [sharp](https://github.com/lovell/sharp), [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight), [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro), [astro-mermaid](https://github.com/joesaby/astro-mermaid) and [starlight-llms-txt](https://github.com/delucis/starlight-llms-txt/tree/HEAD/packages/starlight-llms-txt). These dependencies needed to be updated together.

Updates `sharp` from 0.34.3 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.3...v0.35.3)

Updates `@astrojs/starlight` from 0.35.2 to 0.41.4
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.41.4/packages/starlight)

Updates `astro` from 5.17.1 to 7.1.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro)

Updates `astro-mermaid` from 1.0.4 to 1.4.0
- [Release notes](https://github.com/joesaby/astro-mermaid/releases)
- [Changelog](https://github.com/joesaby/astro-mermaid/blob/main/CHANGELOG.md)
- [Commits](joesaby/astro-mermaid@v1.0.4...v1.4.0)

Updates `starlight-llms-txt` from 0.5.1 to 0.11.0
- [Release notes](https://github.com/delucis/starlight-llms-txt/releases)
- [Changelog](https://github.com/delucis/starlight-llms-txt/blob/main/packages/starlight-llms-txt/CHANGELOG.md)
- [Commits](https://github.com/delucis/starlight-llms-txt/commits/starlight-llms-txt@0.11.0/packages/starlight-llms-txt)

---
updated-dependencies:
- dependency-name: sharp
  dependency-version: 0.35.3
  dependency-type: direct:production
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.41.4
  dependency-type: direct:production
- dependency-name: astro
  dependency-version: 7.1.3
  dependency-type: direct:production
- dependency-name: astro-mermaid
  dependency-version: 1.4.0
  dependency-type: direct:production
- dependency-name: starlight-llms-txt
  dependency-version: 0.11.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 25, 2026
@dependabot dependabot Bot mentioned this pull request Jul 25, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants