Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 8, 2025

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
lockFileMaintenance All locks refreshed
@astrojs/mdx (source) dependencies patch ^4.3.11 -> ^4.3.12 age confidence
@eslint/eslintrc devDependencies patch ^3.3.1 -> ^3.3.3 age confidence
@eslint/js (source) devDependencies minor ^9.38.0 -> ^9.39.1 age confidence
@lucide/astro (source) dependencies minor ^0.548.0 -> ^0.556.0 age confidence
@rollup/rollup-linux-arm64-gnu (source) optionalDependencies minor 4.52.5 -> 4.53.3 age confidence
@tailwindcss/vite (source) dependencies patch ^4.1.16 -> ^4.1.17 age confidence
@types/node (source) devDependencies minor ^24.9.1 -> ^24.10.2 age confidence
@typescript-eslint/eslint-plugin (source) devDependencies minor ^8.46.2 -> ^8.49.0 age confidence
@typescript-eslint/parser (source) devDependencies minor ^8.46.2 -> ^8.49.0 age confidence
alpinejs (source) dependencies patch ^3.15.1 -> ^3.15.2 age confidence
astro (source) dependencies minor ^5.15.9 -> ^5.16.4 age confidence
eslint (source) devDependencies minor ^9.38.0 -> ^9.39.1 age confidence
eslint-plugin-astro (source) devDependencies minor ^1.3.1 -> ^1.5.0 age confidence
globals devDependencies minor ^16.4.0 -> ^16.5.0 age confidence
lenis dependencies patch ^1.3.13 -> ^1.3.15 age confidence
lint-staged devDependencies patch ^16.2.6 -> ^16.2.7 age confidence
lucide-astro (source) dependencies minor ^0.548.0 -> ^0.556.0 age confidence
markdownlint-cli devDependencies minor ^0.45.0 -> ^0.46.0 age confidence
mermaid dependencies patch ^11.12.0 -> ^11.12.2 age confidence
octokit dependencies patch ^5.0.4 -> ^5.0.5 age confidence
prettier (source) devDependencies minor ^3.6.2 -> ^3.7.4 age confidence
prettier-plugin-tailwindcss devDependencies patch ^0.7.1 -> ^0.7.2 age confidence
tailwindcss (source) dependencies patch ^4.1.16 -> ^4.1.17 age confidence
zod (source) dependencies patch ^4.1.12 -> ^4.1.13 age confidence

🔧 This Pull Request updates lock files to use the latest dependency versions.


Release Notes

withastro/astro (@​astrojs/mdx)

v4.3.12

Compare Source

Patch Changes
eslint/eslintrc (@​eslint/eslintrc)

v3.3.3

Compare Source

Bug Fixes
eslint/eslint (@​eslint/js)

v9.39.1

Compare Source

v9.39.0

Compare Source

lucide-icons/lucide (@​lucide/astro)

v0.556.0: Version 0.556.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.555.0...0.556.0

v0.555.0: Version 0.555.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@0.554.0...0.555.0

v0.554.0: Version 0.554.0

Compare Source

What's Changed

Breaking change

For lucide-react and lucide-solid, imports for Fingerprint icon are changed to FingerprintPattern.

Lucide React
- import { Fingerprint } from "lucide-react";
+ import { FingerprintPattern } from "lucide-react";
Lucide Solid
- import { Fingerprint } from "lucide/solid";
+ import { FingerprintPattern } from "lucide/solid";

// Or

- import Fingerprint from "lucide/solid/icons/fingerprint";
+ import FingerprintPattern from "lucide/solid/icons/fingerprint-pattern";

New Contributors

Full Changelog: lucide-icons/lucide@0.553.0...0.554.0

v0.553.0: Version 0.553.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.552.0...0.553.0

v0.552.0: Version 0.552.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@0.551.0...0.552.0

v0.551.0: Version 0.551.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@0.550.0...0.551.0

v0.550.0: Version 0.550.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.549.0...0.550.0

v0.549.0: Version 0.549.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.548.0...0.549.0

rollup/rollup (@​rollup/rollup-linux-arm64-gnu)

v4.53.3

Compare Source

2025-11-19

Bug Fixes
  • Fix an error where too many modules where flagged for having an unused external import (#​6182)
  • Fix an error where an assignment was wrongly tree-shaken when mutating it (#​6183)
Pull Requests

v4.53.2

Compare Source

2025-11-10

Bug Fixes
  • Do not throw when using invalid escape sequences in template literals (#​6177)
Pull Requests

v4.53.1

Compare Source

2025-11-07

Bug Fixes
Pull Requests

v4.53.0

Compare Source

2025-11-07

Features
  • Improve rendering performance by caching generated variable names (#​5947)
Pull Requests
tailwindlabs/tailwindcss (@​tailwindcss/vite)

v4.1.17

Compare Source

Fixed
  • Substitute @variant inside legacy JS APIs (#​19263)
  • Prevent occasional crash on Windows when loaded into a worker thread (#​19242)
typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.49.0

Compare Source

🚀 Features
  • eslint-plugin: use Intl.Segmenter instead of graphemer (#​11804)
🩹 Fixes
  • deps: update dependency prettier to v3.7.2 (#​11820)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.48.1

Compare Source

🩹 Fixes
  • eslint-plugin: [restrict-template-expressions] check base types in allow list (#​11764, #​11759)
  • eslint-plugin: honor ignored base types on generic classes (#​11767)
  • eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#​11769)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.48.0

Compare Source

🚀 Features
  • eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#​10744)
🩹 Fixes
  • typescript-estree: disallow binding patterns in parameter properties (#​11760)
  • eslint-plugin: [consistent-generic-constructors] ignore when constructor is typed array (#​10477)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.47.0

Compare Source

🚀 Features
  • eslint-plugin: [no-unused-private-class-members] new extension rule (#​10913)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.46.4

Compare Source

🩹 Fixes
  • parser: error when both projectService and project are set (#​11333)
  • eslint-plugin: handle override modifier in promise-function-async fixer (#​11730)
  • eslint-plugin: [no-deprecated] fix double-report on computed literal identifiers (#​11006, #​10958)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.46.3

Compare Source

🩹 Fixes
  • eslint-plugin: [no-duplicate-enum-values] support signed numbers (#​11722, #​11723)
  • eslint-plugin: [no-misused-promises] expand union type to retrieve target property (#​11706)
❤️ Thank You

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.49.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.48.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.48.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.47.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.46.4

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.46.3

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

alpinejs/alpine (alpinejs)

v3.15.2

Compare Source

Changes

withastro/astro (astro)

v5.16.4

Compare Source

Patch Changes
  • #​14940 2cf79c2 Thanks @​ematipico! - Fixes a bug where Astro didn't properly combine CSP resources from the csp configuration with those added using the runtime API (Astro.csp.insertDirective()) to form grammatically correct CSP headers

    Now Astro correctly deduplicate CSP resources. For example, if you have a global resource in the configuration file, and then you add a
    a new one using the runtime APIs.

v5.16.3

Compare Source

Patch Changes
  • #​14889 4bceeb0 Thanks @​florian-lefebvre! - Fixes actions types when using specific TypeScript configurations

  • #​14929 e0f277d Thanks @​matthewp! - Fixes authentication bypass via double URL encoding in middleware

    Prevents attackers from bypassing path-based authentication checks using multi-level URL encoding (e.g., /%2561dmin instead of /%61dmin). Pathnames are now validated after decoding to ensure no additional encoding remains.

v5.16.2

Compare Source

Patch Changes

v5.16.1

Compare Source

Patch Changes

v5.16.0

Compare Source

Minor Changes
  • #​13880 1a2ed01 Thanks @​azat-io! - Adds experimental SVGO optimization support for SVG assets

    Astro now supports automatic SVG optimization using SVGO during build time. This experimental feature helps reduce SVG file sizes while maintaining visual quality, improving your site's performance.

    To enable SVG optimization with default settings, add the following to your astro.config.mjs:

    import { defineConfig } from 'astro/config';
    
    export default defineConfig({
      experimental: {
        svgo: true,
      },
    });

    To customize optimization, pass a SVGO configuration object:

    export default defineConfig({
      experimental: {
        svgo: {
          plugins: [
            'preset-default',
            {
              name: 'removeViewBox',
              active: false,
            },
          ],
        },
      },
    });

    For more information on enabling and using this feature in your project, see the experimental SVG optimization docs.

  • #​14810 2e845fe Thanks @​ascorbic! - Adds a hint for code agents to use the --yes flag to skip prompts when running astro add

  • #​14698 f42ff9b Thanks @​mauriciabad! - Adds the ActionInputSchema utility type to automatically infer the TypeScript type of an action's input based on its Zod schema

    For example, this type can be used to retrieve the input type of a form action:

    import { type ActionInputSchema, defineAction } from 'astro:actions';
    import { z } from 'astro/zod';
    
    const action = defineAction({
      accept: 'form',
      input: z.object({ name: z.string() }),
      handler: ({ name }) => ({ message: `Welcome, ${name}!` }),
    });
    
    type Schema = ActionInputSchema<typeof action>;
    // typeof z.object({ name: z.string() })
    
    type Input = z.input<Schema>;
    // { name: string }
  • #​14574 4356485 Thanks @​jacobdalamb! - Adds new CLI shortcuts available when running astro preview:

    • o + enter: open the site in your browser
    • q + enter: quit the preview
    • h + enter: print all available shortcuts
Patch Changes
  • #​14813 e1dd377 Thanks @​ematipico! - Removes picocolors as dependency in favor of the fork piccolore.

  • #​14609 d774306 Thanks @​florian-lefebvre! - Improves astro info

  • #​14796 c29a785 Thanks @​florian-lefebvre! - BREAKING CHANGE to the experimental Fonts API only

    Updates the default subsets to ["latin"]

    Subsets have been a common source of confusion: they caused a lot of files to be downloaded by default. You now have to manually pick extra subsets.

    Review your Astro config and update subsets if you need, for example if you need greek characters:

    import { defineConfig, fontProviders } from "astro/config"
    
    export default defineConfig({
        experimental: {
            fonts: [{
                name: "Roboto",
                cssVariable: "--font-roboto",
                provider: fontProviders.google(),
    +            subsets: ["latin", "greek"]
            }]
        }
    })
eslint/eslint (eslint)

v9.39.1

Compare Source

v9.39.0

Compare Source

ota-meshi/eslint-plugin-astro (eslint-plugin-astro)

v1.5.0

Compare Source

Minor Changes

v1.4.0

Compare Source

Minor Changes
Patch Changes
sindresorhus/globals (globals)

v16.5.0

Compare Source


darkroomengineering/lenis (lenis)

v1.3.15

Compare Source

  • snap: addElements supports NodeList

v1.3.14

Compare Source

  • fix lenis/vue warning
  • better pnpm workspace config
lint-staged/lint-staged (lint-staged)

v16.2.7

Compare Source

Patch Changes
  • #​1711 ef74c8d Thanks @​iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.
dzeiocom/lucide-astro (lucide-astro)

v0.556.0

Compare Source

v0.555.0

Compare Source

v0.554.0

Compare Source

v0.553.0

Compare Source

[v0.552.0](https://redirect.github.com/d


Configuration

📅 Schedule: Branch creation - "before 4am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/bun-dependencies branch from 3ed5135 to 7029fcc Compare December 8, 2025 23:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant