fix(deps): update @astrojs/netlify by renovate[bot] · Pull Request #17523 · withastro/astro

renovate · 2026-07-27T00:47:10Z

This PR contains the following updates:

Package	Change	Age	Confidence
@netlify/blobs (source)	`^10.7.4` → `^10.7.10`
@netlify/functions (source)	`^5.2.0` → `^5.3.0`
@netlify/vite-plugin (source)	`^2.12.3` → `^2.12.9`
@vercel/nft	`^1.3.2` → `^1.10.2`
devalue	`^5.8.1` → `^5.8.2`
tinyglobby (source)	`^0.2.15` → `^0.2.17`
vite (source)	`^8.0.13` → `^8.1.5`

Release Notes

netlify/primitives (@netlify/blobs)

`v10.7.10`

Compare Source

Dependencies

The following workspace dependencies were updated
- dependencies
  - @netlify/dev-utils bumped from 4.4.6 to 4.4.7
  - @netlify/otel bumped from ^6.0.3 to ^6.0.4

`v10.7.9`

Compare Source

Dependencies

The following workspace dependencies were updated
- dependencies
  - @netlify/dev-utils bumped from 4.4.5 to 4.4.6
  - @netlify/otel bumped from ^6.0.2 to ^6.0.3

`v10.7.8`

Compare Source

Dependencies

The following workspace dependencies were updated
- dependencies
  - @netlify/dev-utils bumped from 4.4.4 to 4.4.5
  - @netlify/otel bumped from ^6.0.1 to ^6.0.2

`v10.7.7`

Compare Source

Dependencies

The following workspace dependencies were updated
- dependencies
  - @netlify/dev-utils bumped from 4.4.3 to 4.4.4
  - @netlify/otel bumped from ^6.0.0 to ^6.0.1

`v10.7.6`

Compare Source

Bug Fixes

update readme badges to point to current repo (#594) (0e05d46)

netlify/primitives (@netlify/functions)

`v5.3.0`

Compare Source

Features

add function config properties (#696) (e43cd8f)

Dependencies

The following workspace dependencies were updated
- dependencies
  - @netlify/types bumped from 2.7.0 to 2.8.0

`v5.2.2`

Compare Source

Dependencies

The following workspace dependencies were updated
- dependencies
  - @netlify/types bumped from 2.6.0 to 2.7.0

`v5.2.1`

Compare Source

Bug Fixes

update readme badges to point to current repo (#594) (0e05d46)

netlify/framework-adapters (@netlify/vite-plugin)

`v2.12.9`

Compare Source

Bug Fixes

deps: bulk upgrade deps and dev deps (#15) (f88c812)

`v2.12.8`

Compare Source

Bug Fixes

trigger new releases with Trusted Publishing (#7) (3052ecb)

`v2.12.7`

Compare Source

Dependencies

The following workspace dependencies were updated
- dependencies
  - @netlify/dev bumped from 4.18.6 to 4.18.7
  - @netlify/dev-utils bumped from ^4.4.5 to ^4.4.6

`v2.12.6`

Compare Source

Dependencies

The following workspace dependencies were updated
- dependencies
  - @netlify/dev bumped from 4.18.5 to 4.18.6
  - @netlify/dev-utils bumped from ^4.4.4 to ^4.4.5

`v2.12.5`

Compare Source

Dependencies

The following workspace dependencies were updated
- dependencies
  - @netlify/dev bumped from 4.18.4 to 4.18.5
  - @netlify/dev-utils bumped from ^4.4.3 to ^4.4.4

`v2.12.4`

Compare Source

Dependencies

The following workspace dependencies were updated
- dependencies
  - @netlify/dev bumped from 4.18.3 to 4.18.4

vercel/nft (@vercel/nft)

`v1.10.2`

Compare Source

Bug Fixes

publish using node@24 (#591) (8673d63)

`v1.10.0`

Compare Source

Features

add module-sync catchall tracing (#584) (e2f2185)

`v1.9.0`

Compare Source

Features

refactor ffmpeg-static special case (#586) (3ea4433)
remove badge from readme (#589) (6bc496f)

`v1.5.0`

Compare Source

Features

trace pino transports in constructor and fastify patterns (#573) (a044730)

`v1.4.0`

Compare Source

Features

trace pino transport target modules (#571) (1402303)

sveltejs/devalue (devalue)

`v5.8.2`

Compare Source

Patch Changes

48cc81f: fix: serialize DataView subviews with the correct byte offset and length
cd6da94: fix: resolve circular references through custom revivers when payload is already hydrated
29a3382: fix: uneval now produces valid output for a repeated empty Map or Set
8c0db06: fix: serialize Temporal values referenced more than once in uneval
3770846: fix: emit valid JS for BigInt64Array and BigUint64Array in uneval
756265a: fix: preserve shared-reference identity for Map keys in uneval
faa8a05: fix: emit uneval reconstructions before the statements that reference them
06129ad: fix: do not grow sparse arrays by one slot in uneval

vitejs/vite (vite)

`v8.1.5`

Compare Source

Please refer to CHANGELOG.md for details.

`v8.1.4`

Compare Source

Features

legacy: prefer oxc as minifier (fix #21973) (#22468) (ab5dafa)

Bug Fixes

build: add workaround for building on stackblitz (#22840) (575c32c)
build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
deps: update all non-major dependencies (#22865) (d4295a9)
deps: update rolldown-related dependencies (#22866) (7cf07e4)
html: avoid backtracking in import-only check (#22848) (b5868c0)
optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

fix incorrect @default for server.cors (#22859) (70435b2)

Miscellaneous Chores

deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

eliminate ineffectiveDynamicImport warn (#22876) (ea22fb3)

Tests

avoid warnings (#22851) (af21ab6)

Build System

remove the custom onLog function (#22878) (2c4a217)
replace deprecated onwarn with onLog (#22741) (c581b55)

`v8.1.3`

Compare Source

Bug Fixes

css: inject inlined CSS after the shebang line (#22717) (1534d36)
deps: bump es-module-lexer to 2.3.0 (#22838) (7103c3a)
preload css for nested dynamic imports (#22759) (2c53054)
ssr: correct stacktrace column position for first line (#22828) (c4acd69)

`v8.1.2`

Compare Source

Bug Fixes

deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)
restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)
revert, "fix: escape ids with multiple null bytes (#22687)" (cccef55)
revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (cf97711)

`v8.1.1`

Compare Source

Features

update dynamic import warning to link to Vite docs (#22823) (62bd7af)

Bug Fixes

bundled-dev: avoid stack overflow on import.meta.hot.invalidate() (#22797) (709eb8e)
bundled-dev: serve assets emitted during HMR/lazy compile (#22745) (5876b2c)
bundledDev: skip plugin transform hooks for rolldown-lazy stub modules (#22778) (8f925e2)
css: preserve dollar signs in external @import urls with lightningcss (#22718) (9fa7ab4)
css: resolve tsconfig paths in CSS and Sass @import (#22775) (ef0b891)
deps: update all non-major dependencies (#22734) (e635f49)
deps: update all non-major dependencies (#22804) (8837400)
deps: update rolldown-related dependencies (#22591) (2ce6677)
escape ids with multiple null bytes (#22687) (833fc30)
hide console window when running 'net use' on Windows (#22698) (92b63f2)
ignore bundled config temp dir (#22800) (043a810)
invert esbuild.jsxSideEffects when converting to oxc.jsx.pure (#22809) (33895ba)
optimize-deps: ignore ERR_CLOSED_SERVER in scanner (#22784) (085a0ab)
optimizer: scanner should resolve input from root (#22769) (9722b07)
resolve pnpm .modules.yaml from workspace root instead of cwd (#22757) (2531ac7)
return sourcemap field from some plugins that were lacking (#22782) (7e18bf8)
server: handle malformed URI in indexHtmlMiddleware (#22781) (84f5ccc)

Miscellaneous Chores

improve dependency optimizer messages (#22549) (092cb3b)

Code Refactoring

css: remove lightningcss null byte bug workaround (#22822) (2dafd3b)
use pre-defined environments variable to avoid duplicate Object.values calls (#22790) (1113acf)

Tests

enable "manual chunk path" test and remove "worker.format error" test (#22824) (c088511)

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-07-27T00:47:14Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 521 workspace projects
✓ Lockfile passes supply-chain policies (verified 51s ago)
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 25, reused 0, downloaded 0, added 0
Progress: resolved 77, reused 0, downloaded 0, added 0
Progress: resolved 154, reused 0, downloaded 0, added 0
Progress: resolved 156, reused 0, downloaded 0, added 0
Progress: resolved 160, reused 0, downloaded 0, added 0
Progress: resolved 165, reused 1, downloaded 0, added 0
Progress: resolved 177, reused 3, downloaded 0, added 0
Progress: resolved 241, reused 3, downloaded 0, added 0
Progress: resolved 265, reused 3, downloaded 0, added 0
Progress: resolved 266, reused 3, downloaded 0, added 0
Progress: resolved 608, reused 3, downloaded 0, added 0
Progress: resolved 814, reused 3, downloaded 0, added 0
Progress: resolved 1227, reused 3, downloaded 0, added 0
Progress: resolved 1330, reused 3, downloaded 0, added 0
Progress: resolved 1407, reused 3, downloaded 0, added 0
Progress: resolved 1568, reused 3, downloaded 0, added 0
Progress: resolved 1814, reused 3, downloaded 0, added 0
/tmp/renovate/repos/github/withastro/astro/packages/integrations/netlify:
[ERR_PNPM_TRUST_DOWNGRADE] High-risk trust downgrade for "@netlify/serverless-functions-api@2.16.0" (possible package takeover)

This error happened while installing the dependencies of @netlify/vite-plugin@2.12.9
 at @netlify/dev@4.18.10
 at @netlify/functions-dev@1.3.2
 at @netlify/zip-it-and-ship-it@15.3.0

Trust checks are based solely on publish date, not semver. A package cannot be installed if any earlier-published version had stronger trust evidence. Earlier versions had provenance attestation, but this version has no trust evidence. A trust downgrade may indicate a supply chain incident.

changeset-bot · 2026-07-27T00:47:16Z

⚠️ No Changeset found

Latest commit: ac2e309

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

renovate Bot added the dependencies Pull requests that update a dependency file label Jul 27, 2026

github-actions Bot added the pkg: integration Related to any renderer integration (scope) label Jul 27, 2026

renovate Bot force-pushed the renovate/@astrojsnetlify branch from 785523f to 21111db Compare July 27, 2026 16:55

renovate Bot changed the title ~~Update @astrojs/netlify~~ fix(deps): update @astrojs/netlify Jul 28, 2026

renovate Bot changed the title ~~fix(deps): update @astrojs/netlify~~ Update @astrojs/netlify Jul 28, 2026

renovate Bot changed the title ~~Update @astrojs/netlify~~ fix(deps): update @astrojs/netlify Jul 28, 2026

renovate Bot changed the title ~~fix(deps): update @astrojs/netlify~~ Update @astrojs/netlify Jul 28, 2026

renovate Bot changed the title ~~Update @astrojs/netlify~~ fix(deps): update @astrojs/netlify Jul 28, 2026

fix(deps): update @astrojs/netlify

ac2e309

renovate Bot force-pushed the renovate/@astrojsnetlify branch from 21111db to ac2e309 Compare July 30, 2026 13:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

fix(deps): update @astrojs/netlify - #17523

fix(deps): update @astrojs/netlify#17523
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/@astrojsnetlify

renovate Bot commented Jul 27, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jul 27, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jul 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

renovate Bot commented Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Dependencies

Dependencies

Dependencies

Dependencies

Bug Fixes

Features

Dependencies

Dependencies

Bug Fixes

Bug Fixes

Bug Fixes

Dependencies

Dependencies

Dependencies

Dependencies

Bug Fixes

Features

Features

Features

Features

Patch Changes

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Build System

Bug Fixes

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

Configuration

Uh oh!

renovate Bot commented Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: pnpm-lock.yaml

Uh oh!

changeset-bot Bot commented Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 27, 2026 •

edited

Loading

renovate Bot commented Jul 27, 2026 •

edited

Loading

changeset-bot Bot commented Jul 27, 2026 •

edited

Loading