chore: refresh dependency security fixes

.changeset/funny-states-rest.md

@@ -0,0 +1,16 @@
+---
+"@emdash-cms/admin": patch
+"@emdash-cms/auth-atproto": patch
+"@emdash-cms/blocks": patch
+"@emdash-cms/cloudflare": patch
+"emdash": patch
+"@emdash-cms/marketplace": patch
+"@emdash-cms/plugin-embeds": patch
+"@emdash-cms/plugin-forms": patch
+"@emdash-cms/blocks-playground": patch
+"docs": patch
+"@emdash-cms/cache-demo-site": patch
+"@emdash-cms/perf-monitor": patch
+---
+
+Refresh dependency ranges and the lockfile to clear Dependabot alerts.

docs/package.json

@@ -11,20 +11,20 @@
     "astro": "astro",
     "generate-types": "wrangler types"
   },
-  "dependencies": {
-    "@astrojs/cloudflare": "^13.1.7",
+	"dependencies": {
+		"@astrojs/cloudflare": "catalog:",
     "@astrojs/starlight": "^0.38.2",
     "@astrojs/starlight-tailwind": "^5.0.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "agents": "^0.12.0",
-    "astro": "^6.1.3",
+		"astro": "catalog:",
     "sharp": "^0.34.5",
     "starlight-utils": "^1.0.0",
     "tailwindcss": "^4.1.18",
     "wrangler": "catalog:",
     "zod": "^4.4.1"
   },
   "overrides": {
-    "vite": "^7"
-  }
-}
+		"vite": "^8.0.14"
+	}
+}

infra/cache-demo/package.json

@@ -13,13 +13,13 @@
 		"seed": "emdash seed"
 	},
 	"dependencies": {
-		"@astrojs/cloudflare": "https://pkg.pr.new/@astrojs/cloudflare@94d342d",
+		"@astrojs/cloudflare": "catalog:",
 		"@astrojs/react": "catalog:",
 		"@emdash-cms/cloudflare": "workspace:*",
 		"@emdash-cms/plugin-forms": "workspace:*",
 		"@emdash-cms/plugin-webhook-notifier": "workspace:*",
 		"@emdash-cms/plugin-cli": "workspace:*",
-		"astro": "https://pkg.pr.new/astro@94d342d",
+		"astro": "catalog:",
 		"emdash": "workspace:*",
 		"react": "catalog:",
 		"react-dom": "catalog:"

infra/perf-monitor/package.json

@@ -16,9 +16,9 @@
 		"trigger": "node scripts/trigger.mjs"
 	},
 	"devDependencies": {
-		"@cloudflare/vite-plugin": "^1.0.0",
+		"@cloudflare/vite-plugin": "catalog:",
 		"typescript": "catalog:",
-		"vite": "^6.0.0",
+		"vite": "catalog:",
 		"wrangler": "catalog:"
 	}
 }

package.json

@@ -36,7 +36,7 @@
 	"devDependencies": {
 		"@axe-core/playwright": "^4.11.1",
 		"@changesets/changelog-github": "^0.5.2",
-		"@changesets/cli": "^2.29.8",
+		"@changesets/cli": "^2.31.0",
 		"@e18e/eslint-plugin": "^0.2.0",
 		"@lunariajs/core": "https://pkg.pr.new/lunariajs/lunaria/@lunariajs/core@83617cc",
 		"@playwright/test": "^1.58.0",

packages/admin/package.json

@@ -67,7 +67,7 @@
     "@tiptap/starter-kit": "catalog:",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
-    "dompurify": "^3.3.2",
+		"dompurify": "^3.4.5",
     "marked": "^17.0.3",
     "react-hotkeys-hook": "^5.2.4",
     "tailwind-merge": "^3.3.0"
@@ -92,7 +92,7 @@
     "tailwindcss": "^4.1.10",
     "tsdown": "catalog:",
     "typescript": "catalog:",
-    "vite": "^7.0.0",
+		"vite": "catalog:",
     "vitest": "catalog:",
     "vitest-browser-react": "^2.0.5"
   },

packages/auth-atproto/package.json

@@ -33,6 +33,7 @@
 		"@atcute/lexicons": "^1.2.10",
 		"@cloudflare/kumo": "catalog:",
 		"@types/react": "^19.0.0",
+		"astro": "catalog:",
 		"vitest": "catalog:"
 	},
 	"scripts": {

packages/blocks/playground/package.json

@@ -22,9 +22,9 @@
     "@vitejs/plugin-react": "^4.6.0",
     "tailwindcss": "^4.1.11",
     "typescript": "catalog:",
-    "vite": "^6.3.5",
+		"vite": "catalog:",
     "wrangler": "^4.63.0"
   },
   "peerDependencies": {},
   "optionalDependencies": {}
-}
+}

packages/cloudflare/package.json

@@ -81,11 +81,12 @@
     "astro": ">=6.0.0-beta.0",
     "kysely": ">=0.28.17"
   },
-  "devDependencies": {
-    "@arethetypeswrong/cli": "catalog:",
-    "@cloudflare/workers-types": "catalog:",
-    "publint": "catalog:",
-    "tsdown": "catalog:",
+	"devDependencies": {
+		"@arethetypeswrong/cli": "catalog:",
+		"@cloudflare/workers-types": "catalog:",
+		"astro": "catalog:",
+		"publint": "catalog:",
+		"tsdown": "catalog:",
     "typescript": "catalog:",
     "vitest": "catalog:"
   },
@@ -107,4 +108,4 @@
   ],
   "author": "Matt Kane",
   "license": "MIT"
-}
+}

packages/core/package.json

@@ -256,14 +256,15 @@
     "@types/better-sqlite3": "^7.6.12",
     "@types/pg": "^8.16.0",
     "@types/react": "catalog:",
-    "@types/sanitize-html": "^2.16.0",
-    "@types/sax": "^1.2.7",
-    "@vitest/ui": "^4.1.5",
-    "publint": "catalog:",
-    "tsdown": "catalog:",
-    "typescript": "catalog:",
-    "vite": "^6.0.0",
-    "vitest": "catalog:",
+		"@types/sanitize-html": "^2.16.0",
+		"@types/sax": "^1.2.7",
+		"@vitest/ui": "^4.1.5",
+		"astro": "catalog:",
+		"publint": "catalog:",
+		"tsdown": "catalog:",
+		"typescript": "catalog:",
+		"vite": "catalog:",
+		"vitest": "catalog:",
     "zod-openapi": "^5.4.6"
   },
   "repository": {

packages/marketplace/package.json

@@ -12,7 +12,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "hono": "^4.12.7",
+		"hono": "^4.12.22",
     "jose": "^6.1.3",
     "modern-tar": "^0.7.5",
     "zod": "^3.25.67"

packages/plugins/embeds/package.json

@@ -31,6 +31,9 @@
 		"@emdash-cms/blocks": "workspace:*",
 		"astro-embed": "^0.12.0"
 	},
+	"devDependencies": {
+		"astro": "catalog:"
+	},
 	"scripts": {
 		"typecheck": "tsgo --noEmit"
 	},

packages/plugins/forms/package.json

@@ -32,6 +32,7 @@
 		"@cloudflare/kumo": "catalog:"
 	},
 	"devDependencies": {
+		"astro": "catalog:",
 		"vitest": "catalog:"
 	},
 	"dependencies": {