Skip to content

fix(deps): update all non-major dependencies - #326

Merged
paoloricciuti merged 1 commit into
mainfrom
renovate/all-minor-patch
Jun 20, 2025
Merged

fix(deps): update all non-major dependencies#326
paoloricciuti merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jun 13, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@astrojs/netlify (source) 6.3.4 -> 6.4.0 age adoption passing confidence
@astrojs/starlight (source) 0.34.3 -> 0.34.4 age adoption passing confidence
@eslint/js (source) 9.28.0 -> 9.29.0 age adoption passing confidence
@fontsource/calistoga (source) 5.2.5 -> 5.2.6 age adoption passing confidence
@fontsource/pt-sans (source) 5.2.5 -> 5.2.6 age adoption passing confidence
@playwright/test (source) 1.52.0 -> 1.53.1 age adoption passing confidence
@sveltejs/kit (source) 2.21.1 -> 2.22.0 age adoption passing confidence
@sveltejs/vite-plugin-svelte (source) 5.0.3 -> 5.1.0 age adoption passing confidence
@types/node (source) 22.15.21 -> 22.15.32 age adoption passing confidence
@vitest/coverage-v8 (source) 3.1.4 -> 3.2.4 age adoption passing confidence
@vitest/ui (source) 3.1.4 -> 3.2.4 age adoption passing confidence
acorn 8.14.1 -> 8.15.0 age adoption passing confidence
astro (source) 5.8.0 -> 5.10.0 age adoption passing confidence
eslint (source) 9.27.0 -> 9.29.0 age adoption passing confidence
eslint-plugin-svelte (source) 3.9.1 -> 3.9.3 age adoption passing confidence
esrap 1.4.6 -> 1.4.9 age adoption passing confidence
execa 9.5.3 -> 9.6.0 age adoption passing confidence
globals 16.1.0 -> 16.2.0 age adoption passing confidence
happy-dom 17.4.7 -> 17.6.3 age adoption passing confidence
pnpm (source) 10.11.1 -> 10.12.1 age adoption passing confidence
release-plan ^0.16.0 -> ^0.17.0 age adoption passing confidence
svelte (source) 5.33.1 -> 5.34.7 age adoption passing confidence
svelte-check 4.2.1 -> 4.2.2 age adoption passing confidence
typescript-eslint (source) 8.32.1 -> 8.34.1 age adoption passing confidence
typescript-eslint (source) 8.33.1 -> 8.34.1 age adoption passing confidence
vitest (source) 3.1.4 -> 3.2.4 age adoption passing confidence

Release Notes

withastro/astro (@​astrojs/netlify)

v6.4.0

Compare Source

Minor Changes

  • #​13952 de82ef2 Thanks @​ematipico! - Adds support for the experimental static headers Astro feature.

    When the feature is enabled via option experimentalStaticHeaders, and experimental Content Security Policy is enabled, the adapter will generate Response headers for static pages, which allows support for CSP directives that are not supported inside a <meta> tag (e.g. frame-ancestors).

    import { defineConfig } from 'astro/config';
import netlify from '@&#8203;astrojs/netlify';

export default defineConfig({
  adapter: netlify({
    experimentalStaticHeaders: true,
  }),
  experimental: {
    cps: true,
  },
});
Patch Changes
withastro/starlight (@​astrojs/starlight)

v0.34.4

Compare Source

Patch Changes
eslint/eslint (@​eslint/js)

v9.29.0

Compare Source

fontsource/font-files (@​fontsource/calistoga)

v5.2.6

Compare Source

fontsource/font-files (@​fontsource/pt-sans)

v5.2.6

Compare Source

microsoft/playwright (@​playwright/test)

v1.53.1

Compare Source

v1.53.0

Compare Source

Trace Viewer and HTML Reporter Updates

  • New Steps in Trace Viewer and HTML reporter: New Trace Viewer Steps

  • New option in 'html' reporter to set the title of a specific test run:

    import { defineConfig } from '@&#8203;playwright/test';

export default defineConfig({
  reporter: [['html', { title: 'Custom test run #&#8203;1028' }]]
});

Miscellaneous

  • New option kind in testInfo.snapshotPath() controls which snapshot path template is used.

  • New method locator.describe() to describe a locator. Used for trace viewer and reports.

    const button = page.getByTestId('btn-sub').describe('Subscribe button');
await button.click();

  • npx playwright install --list will now list all installed browsers, versions and locations.

Browser Versions

  • Chromium 138.0.7204.4
  • Mozilla Firefox 139.0
  • WebKit 18.5

This version was also tested against the following stable channels:

  • Google Chrome 137
  • Microsoft Edge 137
sveltejs/kit (@​sveltejs/kit)

v2.22.0

Compare Source

Minor Changes

v2.21.5

Compare Source

Patch Changes

  • fix: correctly set the sequential focus navigation point when using hash routing (#​13884)

  • fix: regression when resetting focus and the URL hash contains selector combinators or separators (#​13884)

v2.21.4

Compare Source

Patch Changes
  • fix: correctly access transport decoders on the client when building for a single or inline output app (#​13871)

v2.21.3

Compare Source

Patch Changes

  • fix: correctly invalidate static analysis cache of child nodes when modifying a universal +layout file during dev (#​13793)

  • fix: correctly set sequential focus navigation starting point after navigation (#​10856)

  • fix: suppress console spam for chrome devtools requests (#​13830)

  • fix: avoid externalising packages that depend on @sveltejs/kit so that libraries can also use redirect and error helpers (#​13843)

  • fix: correctly run deserialize on the server (#​13686)

  • fix: handle non-semver-style dependency versions (#​13850)

  • fix: correctly inline stylesheets of components dynamically imported in a universal load function if they are below the configured inlineStyleThreshold (#​13723)

v2.21.2

Compare Source

Patch Changes
  • fix: omit stack when logging 404 errors (#​13848)
sveltejs/vite-plugin-svelte (@​sveltejs/vite-plugin-svelte)

v5.1.0

Compare Source

Minor Changes
  • scope css to js module to enable treeshaking scoped css from unused components. Requires vite 6.2 and svelte 5.26 (#​1092)
Patch Changes
  • add svelte > clsx to optimizeDeps.include to avoid page reload when using vite6 and npm (#​1124)
vitest-dev/vitest (@​vitest/coverage-v8)

v3.2.4

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.2.3

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.2.2

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.2.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v3.2.0

Compare Source

acornjs/acorn (acorn)

v8.15.0

Compare Source

withastro/astro (astro)

v5.10.0

Compare Source

Minor Changes

  • #​13917 e615216 Thanks @​ascorbic! - Adds a new priority attribute for Astro's image components.

    This change introduces a new priority option for the <Image /> and <Picture /> components, which automatically sets the loading, decoding, and fetchpriority attributes to their optimal values for above-the-fold images which should be loaded immediately.

    It is a boolean prop, and you can use the shorthand syntax by simply adding priority as a prop to the <Image /> or <Picture /> component. When set, it will apply the following attributes:

    • loading="eager"
    • decoding="sync"
    • fetchpriority="high"

    The individual attributes can still be set manually if you need to customize your images further.

    By default, the Astro <Image /> component generates <img> tags that lazy-load their content by setting loading="lazy" and decoding="async". This improves performance by deferring the loading of images that are not immediately visible in the viewport, and gives the best scores in performance audits like Lighthouse.

    The new priority attribute will override those defaults and automatically add the best settings for your high-priority assets.

    This option was previously available for experimental responsive images, but now it is a standard feature for all images.

v5.9.4

Compare Source

Patch Changes

v5.9.3

Compare Source

Patch Changes

  • #​13923 a9ac5ed Thanks @​ematipico! - BREAKING CHANGE to the experimental Content Security Policy (CSP) only

    Changes the behavior of experimental Content Security Policy (CSP) to now serve hashes differently depending on whether or not a page is prerendered:

    • Via the <meta> element for static pages.
    • Via the Response header content-security-policy for on-demand rendered pages.

    This new strategy allows you to add CSP content that is not supported in a <meta> element (e.g. report-uri, frame-ancestors, and sandbox directives) to on-demand rendered pages.

    No change to your project code is required as this is an implementation detail. However, this will result in a different HTML output for pages that are rendered on demand. Please check your production site to verify that CSP is working as intended.

    To keep up to date with this developing feature, or to leave feedback, visit the CSP Roadmap proposal.

  • #​13926 953a249 Thanks @​ematipico! - Adds a new Astro Adapter Feature called experimentalStaticHeaders to allow your adapter to receive the Headers for rendered static pages.

    Adapters that enable support for this feature can access header values directly, affecting their handling of some Astro features such as Content Security Policy (CSP). For example, Astro will no longer serve the CSP <meta http-equiv="content-security-policy"> element in static pages to adapters with this support.

    Astro will serve the value of the header inside a map that can be retrieved from the hook astro:build:generated. Adapters can read this mapping and use their hosting headers capabilities to create a configuration file.

    A new field called experimentalRouteToHeaders will contain a map of Map<IntegrationResolvedRoute, Headers> where the Headers type contains the headers emitted by the rendered static route.

    To enable support for this experimental Astro Adapter Feature, add it to your adapterFeatures in your adapter config:

    // my-adapter.mjs
export default function createIntegration() {
  return {
    name: '@&#8203;example/my-adapter',
    hooks: {
      'astro:config:done': ({ setAdapter }) => {
        setAdapter({
          name: '@&#8203;example/my-adapter',
          serverEntrypoint: '@&#8203;example/my-adapter/server.js',
          adapterFeatures: {
            experimentalStaticHeaders: true,
          },
        });
      },
    },
  };
}

    See the Adapter API docs for more information about providing adapter features.

  • #​13697 af83b85 Thanks @​benosmac! - Fixes issues with fallback route pattern matching when i18n.routing.fallbackType is rewrite.

    • Adds conditions for route matching in generatePath when building fallback routes and checking for existing translated pages

    Now for a route to be matched it needs to be inside a named [locale] folder. This fixes an issue where route.pattern.test() incorrectly matched dynamic routes, causing the page to be skipped.

    • Adds conditions for route matching in findRouteToRewrite

    Now the requested pathname must exist in route.distURL for a dynamic route to match. This fixes an issue where route.pattern.test() incorrectly matched dynamic routes, causing the build to fail.

  • #​13924 1cd8c3b Thanks @​qw-in! - Fixes an edge case where isPrerendered was incorrectly set to false for static redirects.

  • #​13926 953a249 Thanks @​ematipico! - Fixes an issue where the experimental CSP meta element wasn't placed in the <head> element as early as possible, causing these policies to not apply to styles and scripts that came before the meta element.

v5.9.2

Compare Source

Patch Changes

  • #​13919 423fe60 Thanks @​ematipico! - Fixes a bug where Astro added quotes to the CSP resources.

    Only certain resources require quotes (e.g. 'self' but not https://cdn.example.com), so Astro no longer adds quotes to any resources. You must now provide the quotes yourself for resources such as 'self' when necessary:

    export default defineConfig({
  experimental: {
    csp: {
      styleDirective: {
        resources: [
-          "self",
+          "'self'",
          "https://cdn.example.com"
        ]
      }
    }
  }
})

  • #​13914 76c5480 Thanks @​ematipico! - BREAKING CHANGE to the experimental Content Security Policy feature only

    Removes support for experimental Content Security Policy (CSP) when using the <ClientRouter /> component for view transitions.

    It is no longer possible to enable experimental CSP while using Astro's view transitions. Support was already unstable with the <ClientRouter /> because CSP required making its underlying implementation asynchronous. This caused breaking changes for several users and therefore, this PR removes support completely.

    If you are currently using the component for view transitions, please remove the experimental CSP flag as they cannot be used together.

    import { defineConfig } from 'astro/config';

export default defineConfig({
  experimental: {
-   csp: true
   }
});

    Alternatively, to continue using experimental CSP in your project, you can consider migrating to the browser native View Transition API and remove the <ClientRouter /> from your project. You may be able to achieve similar results if you are not using Astro's enhancements to the native View Transitions and Navigation APIs.

    Support might be reintroduced in future releases. You can follow this experimental feature's development in the CSP RFC.

v5.9.1

Compare Source

Patch Changes

v5.9.0

Compare Source

Minor Changes

  • #​13802 0eafe14 Thanks @​ematipico! - Adds experimental Content Security Policy (CSP) support

    CSP is an important feature to provide fine-grained control over resources that can or cannot be downloaded and executed by a document. In particular, it can help protect against cross-site scripting (XSS) attacks.

    Enabling this feature adds additional security to Astro's handling of processed and bundled scripts and styles by default, and allows you to further configure these, and additional, content types. This new experimental feature has been designed to work in every Astro rendering environment (static pages, dynamic pages and single page applications), while giving you maximum flexibility and with type-safety in mind.

    It is compatible with most of Astro's features such as client islands, and server islands, although Astro's view transitions using the <ClientRouter /> are not yet fully supported. Inline scripts are not supported out of the box, but you can provide your own hashes for external and inline scripts.

    To enable this feature, add the experimental flag in your Astro config:

    // astro.config.mjs
import { defineConfig } from 'astro/config';

export default defineConfig({
  experimental: {
    csp: true,
  },
});

    For more information on enabling and using this feature in your project, see the Experimental CSP docs.

    For a complete overview, and to give feedback on this experimental API, see the Content Security Policy RFC.

  • #​13850 [`1766d22

Configuration

📅 Schedule: Branch creation - "before 7am on friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the internal label Jun 13, 2025
@netlify

netlify Bot commented Jun 13, 2025 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for sheepdog ready!

Name Link
🔨 Latest commit 91be25c
🔍 Latest deploy log https://app.netlify.com/projects/sheepdog/deploys/685514bf2095c900086fa56d
😎 Deploy Preview https://deploy-preview-326--sheepdog.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@pkg-pr-new

pkg-pr-new Bot commented Jun 13, 2025 •
edited
Loading

Copy link
Copy Markdown 
npm i https://pkg.pr.new/@sheepdog/core@326

npm i https://pkg.pr.new/@sheepdog/svelte@326

npm i https://pkg.pr.new/@sheepdog/vanilla@326

commit: bcba66c

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 1902f31 to 91be25c Compare June 20, 2025 07:58
@paoloricciuti
paoloricciuti merged commit abccc23 into main Jun 20, 2025
12 checks passed
@paoloricciuti
paoloricciuti deleted the renovate/all-minor-patch branch June 20, 2025 08:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@paoloricciuti paoloricciuti paoloricciuti approved these changes

Assignees

No one assigned

Labels

internal

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@paoloricciuti