chore(deps): bump the all-dependencies group with 6 updates by dependabot[bot] · Pull Request #8 · 1mb-dev/gistapp

dependabot · 2026-03-30T16:56:01Z

Bumps the all-dependencies group with 6 updates:

Package	From	To
@astrojs/sitemap	`3.7.1`	`3.7.2`
astro	`6.0.5`	`6.1.2`
typescript	`5.9.3`	`6.0.2`
@cloudflare/workers-types	`4.20260316.1`	`4.20260329.1`
vitest	`4.1.0`	`4.1.2`
wrangler	`4.74.0`	`4.78.0`

Updates @astrojs/sitemap from 3.7.1 to 3.7.2

Release notes

Sourced from @astrojs/sitemap's releases.

@astrojs/sitemap@3.7.2

Patch Changes

#15455 babf57f Thanks @AhmadYasser1! - Fixes i18n fallback pages missing from the generated sitemap when using fallbackType: 'rewrite'.

Changelog

Sourced from @astrojs/sitemap's changelog.

3.7.2

Patch Changes

#15455 babf57f Thanks @AhmadYasser1! - Fixes i18n fallback pages missing from the generated sitemap when using fallbackType: 'rewrite'.

Commits

4a6ff2a [ci] release (#16020)
28079e9 [ci] format
babf57f feat(astro): Add fallbackRoutes to astro:routes:resolved's return type and ...
See full diff in compare view

Updates astro from 6.0.5 to 6.1.2

Release notes

Sourced from astro's releases.

astro@6.1.2

Patch Changes

#16104 47a394d Thanks @matthewp! - Fixes astro preview ignoring vite.preview.allowedHosts set in astro.config.mjs

#16047 711f837 Thanks @matthewp! - Fixes catch-all routes incorrectly intercepting requests for static assets when using the @astrojs/node adapter in middleware mode.

#15981 a60cbb6 Thanks @moktamd! - Fix Zod v4 validation error formatting to show human-readable messages instead of raw JSON

astro@6.1.1

Patch Changes

#16105 23d60de Thanks @matthewp! - Fix dev toolbar audit crash when encountering the image ARIA role

#16089 999c875 Thanks @martrapp! - Fixes an issue with the client router where Vue's :deep() notation was ignored in dev mode.

astro@6.1.0

Minor Changes
#15804 a5e7232 Thanks @merlinnot! - Allows setting codec-specific defaults for Astro's built-in Sharp image service via image.service.config.

You can now configure encoder-level options such as jpeg.mozjpeg, webp.effort, webp.alphaQuality, avif.effort, avif.chromaSubsampling, and png.compressionLevel when using astro/assets/services/sharp for compile-time image generation.

These settings apply as defaults for the built-in Sharp pipeline, while per-image quality still takes precedence when set on <Image />, <Picture />, or getImage().
#15455 babf57f Thanks @AhmadYasser1! - Adds fallbackRoutes to the IntegrationResolvedRoute type, exposing i18n fallback routes to integrations via the astro:routes:resolved hook for projects using fallbackType: 'rewrite'.

This allows integrations such as the sitemap integration to properly include generated fallback routes in their output.
{
  'astro:routes:resolved': ({ routes }) => {
    for (const route of routes) {
      for (const fallback of route.fallbackRoutes) {
        console.log(fallback.pathname) // e.g. /fr/about/
      }
    }
  }
}
#15340 10a1a5a Thanks @trueberryless! - Adds support for advanced configuration of SmartyPants in Markdown.

You can now pass an options object to markdown.smartypants in your Astro configuration to fine-tune how punctuation, dashes, and quotes are transformed.

This is helpful for projects that require specific typographic standards, such as "oldschool" dash handling or localized quotation marks.
// astro.config.mjs
export default defineConfig({

... (truncated)

Changelog

Sourced from astro's changelog.

6.1.2

Patch Changes

#16104 47a394d Thanks @matthewp! - Fixes astro preview ignoring vite.preview.allowedHosts set in astro.config.mjs

#16047 711f837 Thanks @matthewp! - Fixes catch-all routes incorrectly intercepting requests for static assets when using the @astrojs/node adapter in middleware mode.

#15981 a60cbb6 Thanks @moktamd! - Fix Zod v4 validation error formatting to show human-readable messages instead of raw JSON

6.1.1

Patch Changes

#16105 23d60de Thanks @matthewp! - Fix dev toolbar audit crash when encountering the image ARIA role

#16089 999c875 Thanks @martrapp! - Fixes an issue with the client router where Vue's :deep() notation was ignored in dev mode.

6.1.0

Minor Changes
#15804 a5e7232 Thanks @merlinnot! - Allows setting codec-specific defaults for Astro's built-in Sharp image service via image.service.config.

You can now configure encoder-level options such as jpeg.mozjpeg, webp.effort, webp.alphaQuality, avif.effort, avif.chromaSubsampling, and png.compressionLevel when using astro/assets/services/sharp for compile-time image generation.

These settings apply as defaults for the built-in Sharp pipeline, while per-image quality still takes precedence when set on <Image />, <Picture />, or getImage().
#15455 babf57f Thanks @AhmadYasser1! - Adds fallbackRoutes to the IntegrationResolvedRoute type, exposing i18n fallback routes to integrations via the astro:routes:resolved hook for projects using fallbackType: 'rewrite'.

This allows integrations such as the sitemap integration to properly include generated fallback routes in their output.
{
  'astro:routes:resolved': ({ routes }) => {
    for (const route of routes) {
      for (const fallback of route.fallbackRoutes) {
        console.log(fallback.pathname) // e.g. /fr/about/
      }
    }
  }
}
#15340 10a1a5a Thanks @trueberryless! - Adds support for advanced configuration of SmartyPants in Markdown.

You can now pass an options object to markdown.smartypants in your Astro configuration to fine-tune how punctuation, dashes, and quotes are transformed.

This is helpful for projects that require specific typographic standards, such as "oldschool" dash handling or localized quotation marks.

... (truncated)

Commits

15f1649 [ci] release (#16111)
47a394d Fix astro preview ignoring vite.preview.allowedHosts from astro.config.mjs (#...
711f837 Prevent static assets from being caught by catch-all routes (#16047)
6464425 Add diagnostic summaries to testing in CI (#15699)
4198232 test(shiki): move integration tests to unit tests (#16121)
1768ad5 Fix integration test package scripts (#16123)
efb2e4b feat: run ts tests (#16102)
9117cac test: strengthen test coverage (#16099)
a60cbb6 Fix content collection validation errors showing raw JSON (#15981)
f649ae0 [ci] release (#16108)
Additional commits viewable in compare view

Updates typescript from 5.9.3 to 6.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

npm

Commits

607a22a Bump version to 6.0.2 and LKG
9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
e175b69 Bump version to 6.0.1-rc and LKG
af4caac Update LKG
8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
206ed1a Deprecate assert in import() (#63172)
e688ac8 Update dependencies (#63156)
29b300d Bump the github-actions group across 1 directory with 2 updates (#63205)
0c2c7a3 DOM update (#63183)
Additional commits viewable in compare view

Updates @cloudflare/workers-types from 4.20260316.1 to 4.20260329.1

Commits

See full diff in compare view

Updates vitest from 4.1.0 to 4.1.2

Release notes

Sourced from vitest's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

Don't resolve setupFiles from parent directory - by @hi-ogawa in vitest-dev/vitest#9960 (7aa93)

Ensure sequential mock/unmock resolution - by @hi-ogawa and Claude Opus 4.6 in vitest-dev/vitest#9830 (7c065)

browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot - by @macarie in vitest-dev/vitest#9847 (faace)

coverage: Correct coverageConfigDefaults values and types - by @Arthie in vitest-dev/vitest#9940 (b3c99)

pretty-format: Fix output limit over counting - by @hi-ogawa in vitest-dev/vitest#9965 (d3b7a)

Disable colors if agent is detected - by @sheremet-va and @AriPerkkio in vitest-dev/vitest#9851 (6f97b)

    View changes on GitHub

v4.1.1

   🚀 Features

experimental:

Expose matchesTags to test if the current filter matches tags - by @sheremet-va in vitest-dev/vitest#9913 (eec53)

Introduce experimental.vcsProvider - by @sheremet-va in vitest-dev/vitest#9928 (56115)

   🐞 Bug Fixes

Mark TestProject.testFilesList internal properly - by @sapphi-red in vitest-dev/vitest#9867 (54f26)

Detect fixture that returns without calling use - by @oilater in vitest-dev/vitest#9831 and vitest-dev/vitest#9861 (633ae)

Drop vite 8.beta support - by @AriPerkkio in vitest-dev/vitest#9862 (b78f5)

Type regression in vi.mocked() static class methods - by @purepear and @hi-ogawa in vitest-dev/vitest#9857 (90926)

Properly re-evaluate actual modules of mocked external - by @hi-ogawa in vitest-dev/vitest#9898 (ae5ec)

Preserve coverage report when html reporter overlaps - by @hi-ogawa in vitest-dev/vitest#9889 (2d81a)

Provide vi.advanceTimers to the preview provider - by @sheremet-va in vitest-dev/vitest#9891 (1bc3e)

Don't leak event listener in playwright provider - by @sheremet-va in vitest-dev/vitest#9910 (d9355)

Open browser in --standalone mode without running tests - by @sheremet-va in vitest-dev/vitest#9911 (e78ad)

Guard disposable and optional body - by @sheremet-va in vitest-dev/vitest#9912 (6fdb2)

Resolve retry.condition RegExp serialization issue - by @nstepien and @hi-ogawa in vitest-dev/vitest#9942 (7b605)

collect:

Don't treat extra props on test return as tests - by @sheremet-va in vitest-dev/vitest#9871 (141e7)

coverage:

Simplify provider types - by @AriPerkkio in vitest-dev/vitest#9931 (aaf9f)

Load built-in provider without module runner - by @AriPerkkio in vitest-dev/vitest#9939 (bf892)

expect:

Soft assertions continue after .resolves/.rejects promise errors - by @mixelburg, Maks Pikov, Claude Opus 4.6 (1M context) and @hi-ogawa in vitest-dev/vitest#9843 (6d74b)

Fix sinon-chai style API - by @hi-ogawa in vitest-dev/vitest#9943 (0f08d)

pretty-format:

Limit output for large object - by @hi-ogawa and Claude Opus 4.6 (1M context) in vitest-dev/vitest#9949 (0d5f9)

    View changes on GitHub

Commits

fc6f482 chore: release v4.1.2
6f97b55 feat: disable colors if agent is detected (#9851)
b3c992c fix(coverage): correct coverageConfigDefaults values and types (#9940)
7c06598 fix: ensure sequential mock/unmock resolution (#9830)
f54abad chore: add typo-checker skill and fix typos (#9963)
7aa9377 fix: don't resolve setupFiles from parent directory (#9960)
1f2d318 chore: release v4.1.1
ebfde79 refactor: rename matchesTagsFilter to matchesTags (#9956)
5611500 feat(experimental): introduce experimental.vcsProvider (#9928)
eec53d9 feat(experimental): expose matchesTagsFilter to test if the current filter ...
Additional commits viewable in compare view

Updates wrangler from 4.74.0 to 4.78.0

Release notes

Sourced from wrangler's releases.

wrangler@4.78.0

Minor Changes
#13031 eeaa473 Thanks @WalshyDev! - Add support for Cloudflare Access Service Token authentication via environment variables

When running wrangler dev with remote bindings behind a Cloudflare Access-protected domain, Wrangler previously required cloudflared access login which opens a browser for interactive authentication. This does not work in CI/CD environments.

You can now set the CLOUDFLARE_ACCESS_CLIENT_ID and CLOUDFLARE_ACCESS_CLIENT_SECRET environment variables to authenticate using an Access Service Token instead:
export CLOUDFLARE_ACCESS_CLIENT_ID="<your-client-id>.access"
export CLOUDFLARE_ACCESS_CLIENT_SECRET="<your-client-secret>"
wrangler dev
Additionally, when running in a non-interactive environment (CI) without these credentials, Wrangler now throws a clear, actionable error instead of hanging on cloudflared access login.
#13027 9fcdfca Thanks @G4brym! - feat: Add ai_search_namespaces and ai_search binding types

Two new binding types for AI Search:

ai_search_namespaces: Namespace binding — namespace is required and auto-provisioned at deploy time if it doesn't exist (like R2 buckets)

ai_search: Single instance binding bound directly to a pre-existing instance in the default namespace

Both are remote-only in local dev.
#12874 53ed15a Thanks @xortive! - Add Workers VPC service support for Hyperdrive origins

Hyperdrive configs can now connect to databases through Workers VPC services using the --service-id option:
wrangler hyperdrive create my-config --service-id <vpc-service-uuid> --database mydb --user myuser --password mypassword
This enables Hyperdrive to connect to databases hosted in private networks that are accessible through Workers VPC TCP services.
#12852 6b50bfa Thanks @Carolx715! - Add interactive data catalog validation to R2 object and lifecycle commands.

When performing R2 operations that could affect data catalog state (object put, object delete, lifecycle add, lifecycle set), Wrangler now validates with the API and prompts users for confirmation if a conflict is detected. For bulk put operations, Wrangler prompts upfront before starting the batch. Users can bypass prompts with --force (-y). In non-interactive/CI environments, the operation proceeds automatically.

#13030 0386553 Thanks @natewong1313! - Add local mode support for Stream bindings

Miniflare and wrangler dev now support using Cloudflare Stream bindings locally.

Supported operations:

upload() — upload video via URL

video(id).details(), .update(), .delete(), .generateToken()

videos.list()

captions.generate(), .list(), .delete()

... (truncated)

Commits

81b2b9b Version Packages (#13038)
9fcdfca feat: add ai_search_namespaces and ai_search binding types (#13027)
53ed15a Add support for WVPC TCP services, and using them as Hyperdrive origins (#12874)
9c5ebf5 [wrangler] Only allow "worker" queue consumer type in wrangler config (#13018)
535582d [wrangler] fix: resolve secondary worker types when environment overrides wor...
8c08b3f [wrangler] Fix R2 e2e snapshot for data catalog confirmation prompt (#13059)
25cb184 [wrangler] fix e2e flakiness: use waitForLong to verify response body after d...
6b50bfa [wrangler] add validation to actions that could affect r2 data catalog state ...
0386553 [Stream] Add Stream binding local mode (#13030)
f6cdab2 [wrangler] Support source phase imports (#12996)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [@astrojs/sitemap](https://github.com/withastro/astro/tree/HEAD/packages/integrations/sitemap) | `3.7.1` | `3.7.2` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `6.0.5` | `6.1.2` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.2` | | [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `4.20260316.1` | `4.20260329.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.0` | `4.1.2` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.74.0` | `4.78.0` | Updates `@astrojs/sitemap` from 3.7.1 to 3.7.2 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/sitemap/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/sitemap@3.7.2/packages/integrations/sitemap) Updates `astro` from 6.0.5 to 6.1.2 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.2/packages/astro) Updates `typescript` from 5.9.3 to 6.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.2) Updates `@cloudflare/workers-types` from 4.20260316.1 to 4.20260329.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](https://github.com/cloudflare/workerd/commits) Updates `vitest` from 4.1.0 to 4.1.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/vitest) Updates `wrangler` from 4.74.0 to 4.78.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.78.0/packages/wrangler) --- updated-dependencies: - dependency-name: "@astrojs/sitemap" dependency-version: 3.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: astro dependency-version: 6.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: typescript dependency-version: 6.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@cloudflare/workers-types" dependency-version: 4.20260329.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: vitest dependency-version: 4.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: wrangler dependency-version: 4.78.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 30, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the all-dependencies group with 6 updates#8

chore(deps): bump the all-dependencies group with 6 updates#8
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-dependencies-422d2143c7

dependabot bot commented on behalf of github Mar 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 30, 2026

@​astrojs/sitemap@​3.7.2

Patch Changes

3.7.2

Patch Changes

astro@6.1.2

Patch Changes

astro@6.1.1

Patch Changes

astro@6.1.0

Minor Changes

6.1.2

Patch Changes

6.1.1

Patch Changes

6.1.0

Minor Changes

TypeScript 6.0

TypeScript 6.0 Beta

v4.1.2

🐞 Bug Fixes

View changes on GitHub

v4.1.1

🚀 Features

🐞 Bug Fixes

View changes on GitHub

wrangler@4.78.0

Minor Changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@astrojs/sitemap@3`.7.2