chore(deps): bump the all-docs-site-dependencies group in /docs-site with 4 updates by dependabot[bot] · Pull Request #1323 · github/gh-aw-firewall

dependabot · 2026-03-16T18:01:41Z

Bumps the all-docs-site-dependencies group in /docs-site with 4 updates: @astrojs/check, @astrojs/starlight, astro and astro-mermaid.

Updates @astrojs/check from 0.9.7 to 0.9.8

Release notes

Sourced from @astrojs/check's releases.

@astrojs/check@0.9.8

Patch Changes

#15892 a2f597d Thanks @Princesseuh! - Fixes Astro not being able to find astro check sometimes

Updated dependencies [7b4b254]:

@astrojs/language-server@2.16.5

Changelog

Sourced from @astrojs/check's changelog.

0.9.8

Patch Changes

#15892 a2f597d Thanks @Princesseuh! - Fixes Astro not being able to find astro check sometimes

Updated dependencies [7b4b254]:

@astrojs/language-server@2.16.5

Commits

09ecdd7 [ci] release (#15889)
a2f597d fix(check): Revert publint lint fix (#15892)
See full diff in compare view

Updates @astrojs/starlight from 0.37.7 to 0.38.1

Release notes

Sourced from @astrojs/starlight's releases.

@astrojs/starlight@0.38.1

Patch Changes

#3751 fb955ff Thanks @pyxelr! - Fixes a regression causing global tableOfContents config to be ignored

@astrojs/starlight@0.38.0

Minor Changes
#3644 0d2e7ed Thanks @HiDeoo! - Adds support for Astro v6, drops support for Astro v5.

Upgrade Astro and dependencies

⚠️ BREAKING CHANGE: Astro v5 is no longer supported. Make sure you update Astro and any other official integrations at the same time as updating Starlight:
npx @astrojs/upgrade
Community Starlight plugins and Astro integrations may also need to be manually updated to work with Astro v6. If you encounter any issues, please reach out to the plugin or integration author to see if it is a known issue or if an updated version is being worked on.

Update your collections

⚠️ BREAKING CHANGE: Drops support for content collections backwards compatibility.

In Astro 5.x, projects could delay upgrading to the new Content Layer API introduced for content collections because of some existing automatic backwards compatibility that was not previously behind a flag. This meant that it was possible to upgrade from Astro 4 to Astro 5 without updating your content collections, even if you had not enabled the legacy.collections flag. Projects would continue to build, and no errors or warnings would be displayed.

Astro v6.0 now removes this automatic legacy content collections support, along with the legacy.collections flag.

If you experience content collections errors after updating to v6, check your project for any removed legacy features that may need updating to the Content Layer API. See the Starlight v0.30.0 upgrade guide for detailed instructions on upgrading legacy collections to the new Content Layer API.

If you are unable to make any changes to your collections at this time, including Starlight's default docs and i18n collections, you can enable the legacy.collectionsBackwardsCompat flag to upgrade to v6 without updating your collections. This temporary flag preserves some legacy v4 content collections features, and will allow you to keep your collections in their current state until the legacy flag is no longer supported.
#3704 375edcc Thanks @florian-lefebvre! - Fixes autocomplete for components exported from @astrojs/starlight/components/*

⚠️ Potentially breaking change: This change moves some files used in Starlight’s component internals out of the components/ directory. Direct use of these files was not and is not officially supported. If you previously imported TableOfContents/starlight-toc.ts, TableOfContents/TableOfContentsList.astro, Icons.ts, or SidebarPersistState.ts, please review your code when updating.
#3729 3642625 Thanks @delucis! - Improves Starlight’s default body font stack to better support languages such as Chinese, Japanese, and Korean on Windows. For most users there should be no visible change.

If you would prefer to keep the previous font stack, you can add the following custom CSS to your site:
:root {
  --sl-font-system: ui-sans-serif, system-ui, 'Segoe UI', Roboto,
    'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji',
    'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';
}
#3598 fff38d5 Thanks @HiDeoo! - Makes hover styles consistent in Starlight’s navigation bar

... (truncated)

Changelog

Sourced from @astrojs/starlight's changelog.

0.38.1

Patch Changes

#3751 fb955ff Thanks @pyxelr! - Fixes a regression causing global tableOfContents config to be ignored

0.38.0

Minor Changes
#3644 0d2e7ed Thanks @HiDeoo! - Adds support for Astro v6, drops support for Astro v5.

Upgrade Astro and dependencies

⚠️ BREAKING CHANGE: Astro v5 is no longer supported. Make sure you update Astro and any other official integrations at the same time as updating Starlight:
npx @astrojs/upgrade
Community Starlight plugins and Astro integrations may also need to be manually updated to work with Astro v6. If you encounter any issues, please reach out to the plugin or integration author to see if it is a known issue or if an updated version is being worked on.

Update your collections

⚠️ BREAKING CHANGE: Drops support for content collections backwards compatibility.

In Astro 5.x, projects could delay upgrading to the new Content Layer API introduced for content collections because of some existing automatic backwards compatibility that was not previously behind a flag. This meant that it was possible to upgrade from Astro 4 to Astro 5 without updating your content collections, even if you had not enabled the legacy.collections flag. Projects would continue to build, and no errors or warnings would be displayed.

Astro v6.0 now removes this automatic legacy content collections support, along with the legacy.collections flag.

If you experience content collections errors after updating to v6, check your project for any removed legacy features that may need updating to the Content Layer API. See the Starlight v0.30.0 upgrade guide for detailed instructions on upgrading legacy collections to the new Content Layer API.

If you are unable to make any changes to your collections at this time, including Starlight's default docs and i18n collections, you can enable the legacy.collectionsBackwardsCompat flag to upgrade to v6 without updating your collections. This temporary flag preserves some legacy v4 content collections features, and will allow you to keep your collections in their current state until the legacy flag is no longer supported.
#3704 375edcc Thanks @florian-lefebvre! - Fixes autocomplete for components exported from @astrojs/starlight/components/*

⚠️ Potentially breaking change: This change moves some files used in Starlight’s component internals out of the components/ directory. Direct use of these files was not and is not officially supported. If you previously imported TableOfContents/starlight-toc.ts, TableOfContents/TableOfContentsList.astro, Icons.ts, or SidebarPersistState.ts, please review your code when updating.
#3729 3642625 Thanks @delucis! - Improves Starlight’s default body font stack to better support languages such as Chinese, Japanese, and Korean on Windows. For most users there should be no visible change.

If you would prefer to keep the previous font stack, you can add the following custom CSS to your site:
:root {
  --sl-font-system: ui-sans-serif, system-ui, 'Segoe UI', Roboto,
    'Helvetica Neue', Arial, 'Noto Sans', sans-serif, 'Apple Color Emoji',
    'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';
}

... (truncated)

Commits

ac64c72 [ci] release (#3752)
fb955ff fix: respect global tableOfContents config with zod v4 (#3751)
eb7abe2 [ci] release (#3745)
fff38d5 Tweak header hover effects (#3598)
375edcc feat: improve components exports with wildcard (#3704)
047dd32 [ci] format
3642625 Update default system font stack to better handle CJK locales on Windows (#3729)
924070d Pin to old Prettier version to unblock release (#3747)
a43ee44 [ci] format
0d2e7ed Astro 6 support (#3644)
See full diff in compare view

Updates astro from 5.18.1 to 6.0.5

Release notes

Sourced from astro's releases.

astro@6.0.5

Patch Changes

#15891 b889231 Thanks @matthewp! - Fix dev routing for server:defer islands when adapters opt into handling prerendered routes in Astro core. Server island requests are now treated as prerender-handler eligible so prerendered pages using prerenderEnvironment: 'node' can load island content without 400 errors.

#15890 765a887 Thanks @matthewp! - Fixes astro:actions validation to check resolved routes, so projects using default static output with at least one prerender = false page or endpoint no longer fail during startup.

#15884 dcd2c8e Thanks @matthewp! - Avoid a MaxListenersExceededWarning during astro dev startup by increasing the shared Vite watcher listener limit when attaching content server listeners.

#15904 23d5244 Thanks @jlukic! - Emit the before-hydration script chunk for the client Vite environment. The chunk was only emitted for prerender and ssr environments, causing a 404 when browsers tried to load it. This broke hydration for any integration using injectScript('before-hydration', ...), including Lit SSR.

#15933 325901e Thanks @ematipico! - Fixes an issue where <style> tags inside SVG components weren't correctly tracked when enabling CSP.

#15875 c43ef8a Thanks @matthewp! - Ensure custom prerenderers are always torn down during build, even when getStaticPaths() throws.

#15887 1861fed Thanks @ematipico! - Fixes an issue where the build incorrectly leaked server entrypoint into the client environment, causing adapters to emit warnings during the build.

#15888 925252e Thanks @matthewp! - Fix a bug where server:defer could fail at runtime in prerendered pages for some adapters (including Cloudflare), causing errors like serverIslandMap?.get is not a function.

#15901 07c1002 Thanks @delucis! - Fixes JSON schema generation for content collection schemas that have differences between their input and output shapes.

#15882 759f946 Thanks @matthewp! - Fix Astro.url.pathname for the root page when using build.format: "file" so it resolves to /index.html instead of /.html during builds.

astro@6.0.4

Patch Changes

#15870 920f10b Thanks @matthewp! - Prebundle astro/toolbar in dev when custom dev toolbar apps are registered, preventing re-optimization reloads that can hide or break the toolbar.

#15876 f47ac53 Thanks @ematipico! - Fixes redirectToDefaultLocale producing a protocol-relative URL (//locale) instead of an absolute path (/locale) when base is '/'.

#15767 e0042f7 Thanks @matthewp! - Fixes server islands (server:defer) not working when only used in prerendered pages with output: 'server'.

#15873 35841ed Thanks @matthewp! - Fix a dev server bug where newly created pages could miss layout-imported CSS until restart.

#15874 ce0669d Thanks @ematipico! - Fixes a warning when using prefetchAll

#15754 58f1d63 Thanks @rururux! - Fixes a bug where a directory at the project root sharing the same name as a page route would cause the dev server to return a 404 instead of serving the page.

#15869 76b3a5e Thanks @matthewp! - Update the unknown file extension error hint to recommend vite.resolve.noExternal, which is the correct Vite 7 config key.

astro@6.0.3

Patch Changes

#15711 b2bd27b Thanks @OliverSpeir! - Improves Astro core's dev environment handling for prerendered routes by ensuring route/CSS updates and prerender middleware behavior work correctly across both SSR and prerender environments.

This enables integrations that use Astro's prerender dev environment (such as Cloudflare with prerenderEnvironment: 'node') to get consistent route matching and HMR behavior during development.

#15852 1cdaf9f Thanks @ematipico! - Fixes a regression where the the routes emitted by the astro:build:done hook didn't have the distURL array correctly populated.

#15765 ca76ff1 Thanks @matthewp! - Hardens server island POST endpoint validation to use own-property checks for improved consistency

... (truncated)

Changelog

Sourced from astro's changelog.

6.0.5

Patch Changes

#15891 b889231 Thanks @matthewp! - Fix dev routing for server:defer islands when adapters opt into handling prerendered routes in Astro core. Server island requests are now treated as prerender-handler eligible so prerendered pages using prerenderEnvironment: 'node' can load island content without 400 errors.

#15890 765a887 Thanks @matthewp! - Fixes astro:actions validation to check resolved routes, so projects using default static output with at least one prerender = false page or endpoint no longer fail during startup.

#15884 dcd2c8e Thanks @matthewp! - Avoid a MaxListenersExceededWarning during astro dev startup by increasing the shared Vite watcher listener limit when attaching content server listeners.

#15904 23d5244 Thanks @jlukic! - Emit the before-hydration script chunk for the client Vite environment. The chunk was only emitted for prerender and ssr environments, causing a 404 when browsers tried to load it. This broke hydration for any integration using injectScript('before-hydration', ...), including Lit SSR.

#15933 325901e Thanks @ematipico! - Fixes an issue where <style> tags inside SVG components weren't correctly tracked when enabling CSP.

#15875 c43ef8a Thanks @matthewp! - Ensure custom prerenderers are always torn down during build, even when getStaticPaths() throws.

#15887 1861fed Thanks @ematipico! - Fixes an issue where the build incorrectly leaked server entrypoint into the client environment, causing adapters to emit warnings during the build.

#15888 925252e Thanks @matthewp! - Fix a bug where server:defer could fail at runtime in prerendered pages for some adapters (including Cloudflare), causing errors like serverIslandMap?.get is not a function.

#15901 07c1002 Thanks @delucis! - Fixes JSON schema generation for content collection schemas that have differences between their input and output shapes.

#15882 759f946 Thanks @matthewp! - Fix Astro.url.pathname for the root page when using build.format: "file" so it resolves to /index.html instead of /.html during builds.

6.0.4

Patch Changes

#15870 920f10b Thanks @matthewp! - Prebundle astro/toolbar in dev when custom dev toolbar apps are registered, preventing re-optimization reloads that can hide or break the toolbar.

#15876 f47ac53 Thanks @ematipico! - Fixes redirectToDefaultLocale producing a protocol-relative URL (//locale) instead of an absolute path (/locale) when base is '/'.

#15767 e0042f7 Thanks @matthewp! - Fixes server islands (server:defer) not working when only used in prerendered pages with output: 'server'.

#15873 35841ed Thanks @matthewp! - Fix a dev server bug where newly created pages could miss layout-imported CSS until restart.

#15874 ce0669d Thanks @ematipico! - Fixes a warning when using prefetchAll

#15754 58f1d63 Thanks @rururux! - Fixes a bug where a directory at the project root sharing the same name as a page route would cause the dev server to return a 404 instead of serving the page.

#15869 76b3a5e Thanks @matthewp! - Update the unknown file extension error hint to recommend vite.resolve.noExternal, which is the correct Vite 7 config key.

6.0.3

Patch Changes

#15711 b2bd27b Thanks @OliverSpeir! - Improves Astro core's dev environment handling for prerendered routes by ensuring route/CSS updates and prerender middleware behavior work correctly across both SSR and prerender environments.

This enables integrations that use Astro's prerender dev environment (such as Cloudflare with prerenderEnvironment: 'node') to get consistent route matching and HMR behavior during development.

... (truncated)

Commits

09ecdd7 [ci] release (#15889)
325901e fix(svg): track inline styles for CSP (#15933)
925252e Fix server island build error (#15888)
23d5244 fix(build): emit before-hydration chunk for client environment (#15904)
759f946 fix(astro): fix root Astro.url pathname for file format (#15882)
07c1002 Fix content collection JSON schema generation (#15901)
765a887 Validate non-prerendered routes after resolution (#15890)
c43ef8a Surface prerender errors and ensure teardown (#15875)
1861fed fix(build): entrypoint leak (#15887)
b889231 fix(dev): route server islands through prerender handler (#15891)
Additional commits viewable in compare view

Updates astro-mermaid from 1.1.0 to 1.3.1

Release notes

Sourced from astro-mermaid's releases.

v1.3.1 - Security Updates and Bug Fixes

What's Changed

Security

🔒 Resolved 35+ Dependabot security alerts by updating dependencies

Improvements

♻️ Refactored mermaid.js loading and initialization (#22)

⬆️ Fixed lockfile dependencies (#29)

🧹 Removed anthropic dev dependency

Commits

fix: update dependencies to resolve 35+ Dependabot security alerts

Refactor mermaid.js loading and initialization (#22)

Fix lockfile dependencies (#29)

Update demo dependency and remove anthropic dev dependency

Full Changelog: joesaby/astro-mermaid@v1.2.1...v1.3.1

Commits

77fe2ff chore: bump version to 1.3.1
94c0d84 fix: update dependencies to resolve 35+ Dependabot security alerts
4e35af0 Update demo dependency to 1.3.0 and also remove anthropic dev depdenency
fc7ed08 chore: bump version to 1.3.0
f22f28e Refactor mermaid.js loading and initialization (#22)
24e5609 ⬆️ Fix lockfile dependencies (#29)
863d900 chore: bump version to 1.2.1 (#32)
7e7ce49 Update README.md (update latest version)
08bbf09 fix: update @anthropic-ai/claude-code to fix securities report (#25)
c5aef0b chore: bump version to 1.2.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-docs-site-dependencies group in /docs-site with 4 updates: [@astrojs/check](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check), [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight), [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) and [astro-mermaid](https://github.com/joesaby/astro-mermaid). Updates `@astrojs/check` from 0.9.7 to 0.9.8 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/astro-check/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/check@0.9.8/packages/language-tools/astro-check) Updates `@astrojs/starlight` from 0.37.7 to 0.38.1 - [Release notes](https://github.com/withastro/starlight/releases) - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md) - [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.38.1/packages/starlight) Updates `astro` from 5.18.1 to 6.0.5 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.0.5/packages/astro) Updates `astro-mermaid` from 1.1.0 to 1.3.1 - [Release notes](https://github.com/joesaby/astro-mermaid/releases) - [Commits](joesaby/astro-mermaid@v1.1.0...v1.3.1) --- updated-dependencies: - dependency-name: "@astrojs/check" dependency-version: 0.9.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-docs-site-dependencies - dependency-name: "@astrojs/starlight" dependency-version: 0.38.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-docs-site-dependencies - dependency-name: astro dependency-version: 6.0.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-docs-site-dependencies - dependency-name: astro-mermaid dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-docs-site-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-03-16T18:02:44Z

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	86.03%	86.15%	📈 +0.12%
Statements	85.96%	86.08%	📈 +0.12%
Functions	86.13%	86.13%	➡️ +0.00%
Branches	79.21%	79.28%	📈 +0.07%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
`src/docker-manager.ts`	87.4% → 87.9% (+0.49%)	86.8% → 87.2% (+0.46%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

dependabot · 2026-03-17T17:42:15Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 16, 2026

dependabot Bot requested a review from Mossaka as a code owner March 16, 2026 18:01

Mossaka closed this Mar 17, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/docs-site/all-docs-site-dependencies-6775b44d59 branch March 17, 2026 17:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the all-docs-site-dependencies group in /docs-site with 4 updates#1323

chore(deps): bump the all-docs-site-dependencies group in /docs-site with 4 updates#1323
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/docs-site/all-docs-site-dependencies-6775b44d59

dependabot Bot commented on behalf of github Mar 16, 2026

Upgrade Astro and dependencies

Update your collections

Upgrade Astro and dependencies

Update your collections

Uh oh!

github-actions Bot commented Mar 16, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Mar 16, 2026

@​astrojs/check@​0.9.8

Patch Changes

0.9.8

Patch Changes

@​astrojs/starlight@​0.38.1

Patch Changes

@​astrojs/starlight@​0.38.0

Minor Changes

Upgrade Astro and dependencies

Update your collections

0.38.1

Patch Changes

0.38.0

Minor Changes

Upgrade Astro and dependencies

Update your collections

astro@6.0.5

Patch Changes

astro@6.0.4

Patch Changes

astro@6.0.3

Patch Changes

6.0.5

Patch Changes

6.0.4

Patch Changes

6.0.3

Patch Changes

v1.3.1 - Security Updates and Bug Fixes

What's Changed

Security

Improvements

Commits

Uh oh!

github-actions Bot commented Mar 16, 2026

✅ Coverage Check Passed

Overall Coverage

Uh oh!

dependabot Bot commented on behalf of github Mar 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@astrojs/check@0`.9.8

`@astrojs/starlight@0`.38.1

`@astrojs/starlight@0`.38.0