Bump the dependencies group with 5 updates by dependabot[bot] · Pull Request #216 · laymonage/isle

dependabot · 2026-05-16T07:53:20Z

Bumps the dependencies group with 5 updates:

Package	From	To
@astrojs/mdx	`5.0.4`	`5.0.6`
@astrojs/react	`5.0.4`	`5.0.5`
@astrojs/vercel	`10.0.6`	`10.0.7`
astro	`6.3.1`	`6.3.3`
@biomejs/biome	`2.4.14`	`2.4.15`

Updates @astrojs/mdx from 5.0.4 to 5.0.6

Release notes

Sourced from @astrojs/mdx's releases.

@astrojs/mdx@5.0.6

Patch Changes

#16579 49e10e3 Thanks @igor-koop! - Fixes an issue where the smartypants option was ignored.

@astrojs/mdx@5.0.5

Patch Changes

Updated dependencies [9256345]:

@astrojs/markdown-remark@7.1.2

Changelog

Sourced from @astrojs/mdx's changelog.

5.0.6

Patch Changes

#16579 49e10e3 Thanks @igor-koop! - Fixes an issue where the smartypants option was ignored.

5.0.5

Patch Changes

Updated dependencies [9256345]:

@astrojs/markdown-remark@7.1.2

Commits

5ec95d0 [ci] release (#16736)
0f868b0 chore: remove redundant server assertions (#16721)
49e10e3 fix(mdx): support smartypants option objects (#16579)
e345bcd [ci] release (#16653)
5a8cd09 refactor: update tsconfig to use TypeScript project references (#16505)
28fb3e1 feat: experimental logger (#16477)
5c543c5 refactor(astro): add internal entry points for test (#16473)
f1fb559 refactor(astro): migrate test helpers to TypeScript (#16474)
See full diff in compare view

Updates @astrojs/react from 5.0.4 to 5.0.5

Release notes

Sourced from @astrojs/react's releases.

@astrojs/react@5.0.5

Patch Changes

Updated dependencies [d365c97]:

@astrojs/internal-helpers@0.9.1

Changelog

Sourced from @astrojs/react's changelog.

5.0.5

Patch Changes

Updated dependencies [d365c97]:

@astrojs/internal-helpers@0.9.1

Commits

e345bcd [ci] release (#16653)
5a8cd09 refactor: update tsconfig to use TypeScript project references (#16505)
5c543c5 refactor(astro): add internal entry points for test (#16473)
See full diff in compare view

Updates @astrojs/vercel from 10.0.6 to 10.0.7

Release notes

Sourced from @astrojs/vercel's releases.

@astrojs/vercel@10.0.7

Patch Changes

Updated dependencies [d365c97]:

@astrojs/internal-helpers@0.9.1

Changelog

Sourced from @astrojs/vercel's changelog.

10.0.7

Patch Changes

Updated dependencies [d365c97]:

@astrojs/internal-helpers@0.9.1

Commits

e345bcd [ci] release (#16653)
5a8cd09 refactor: update tsconfig to use TypeScript project references (#16505)
See full diff in compare view

Updates astro from 6.3.1 to 6.3.3

Release notes

Sourced from astro's releases.

astro@6.3.3

Patch Changes

#16737 bd84f33 Thanks @matthewp! - Fixes a reflected XSS vulnerability where slot names on hydrated components were not HTML-escaped in SSR output

astro@6.3.2

Patch Changes

#16675 11d4592 Thanks @ascorbic! - Fixes a regression where Astro.cache was undefined when experimental.cache was not configured.

The previous documented behavior is for Astro.cache to always be defined as a no-op shim: cache.set() warns once, cache.invalidate() throws and cache.enabled can be used to gate. This allows library and user code can call cache methods without conditional checks. The cache provider registration was being gated at the call site on experimental.cache being configured, which meant the disabled shim branch inside the provider was unreachable and the Astro.cache getter was never attached to the context.

#16691 0f0a4ce Thanks @matthewp! - Fixes HTMLElement is not defined error during HMR when using components with client-side scripts (e.g. Starlight <Tabs>) and the Cloudflare adapter

#16562 07529ec Thanks @matthewp! - Fixes non-prerendered routes failing when a dynamic prerendered route exists in the same project with prerenderEnvironment: 'node'

#16638 272185b Thanks @ematipico! - Fixes a bug where the Astro compiler wasn't freed at the end of the build. After the fix, the memory used by the compiler is now correctly freed at the end of the build.

#16544 d365c97 Thanks @matthewp! - Tightens isRemotePath() to reject control characters after a leading slash and fixes the dev image endpoint origin check

#16685 889e748 Thanks @farrosfr! - Improve validation messages for security.csp.directives when script-src or style-src are incorrectly placed in the directives array.

#16605 772f13a Thanks @rururux! - Fixes assetsPrefix not being available on build from astro:config/server.

#16556 f38dec7 Thanks @matthewp! - Rejects double-encoded URL paths with a 400 response instead of silently falling back to partial decoding

#16659 38bcb25 Thanks @jsparkdev! - Fixes & characters appearing as raw entity strings (e.g. &[#38](https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/38);) in <meta> tags when viewed in link previews or raw HTML.

Updated dependencies [d365c97, 9256345]:

@astrojs/internal-helpers@0.9.1

@astrojs/markdown-remark@7.1.2

Changelog

Sourced from astro's changelog.

6.3.3

Patch Changes

#16737 bd84f33 Thanks @matthewp! - Fixes a reflected XSS vulnerability where slot names on hydrated components were not HTML-escaped in SSR output

6.3.2

Patch Changes

#16675 11d4592 Thanks @ascorbic! - Fixes a regression where Astro.cache was undefined when experimental.cache was not configured.

The previous documented behavior is for Astro.cache to always be defined as a no-op shim: cache.set() warns once, cache.invalidate() throws and cache.enabled can be used to gate. This allows library and user code can call cache methods without conditional checks. The cache provider registration was being gated at the call site on experimental.cache being configured, which meant the disabled shim branch inside the provider was unreachable and the Astro.cache getter was never attached to the context.

#16691 0f0a4ce Thanks @matthewp! - Fixes HTMLElement is not defined error during HMR when using components with client-side scripts (e.g. Starlight <Tabs>) and the Cloudflare adapter

#16562 07529ec Thanks @matthewp! - Fixes non-prerendered routes failing when a dynamic prerendered route exists in the same project with prerenderEnvironment: 'node'

#16638 272185b Thanks @ematipico! - Fixes a bug where the Astro compiler wasn't freed at the end of the build. After the fix, the memory used by the compiler is now correctly freed at the end of the build.

#16544 d365c97 Thanks @matthewp! - Tightens isRemotePath() to reject control characters after a leading slash and fixes the dev image endpoint origin check

#16685 889e748 Thanks @farrosfr! - Improve validation messages for security.csp.directives when script-src or style-src are incorrectly placed in the directives array.

#16605 772f13a Thanks @rururux! - Fixes assetsPrefix not being available on build from astro:config/server.

#16556 f38dec7 Thanks @matthewp! - Rejects double-encoded URL paths with a 400 response instead of silently falling back to partial decoding

#16659 38bcb25 Thanks @jsparkdev! - Fixes & characters appearing as raw entity strings (e.g. &[#38](https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/38);) in <meta> tags when viewed in link previews or raw HTML.

Updated dependencies [d365c97, 9256345]:

@astrojs/internal-helpers@0.9.1

@astrojs/markdown-remark@7.1.2

Commits

5ec95d0 [ci] release (#16736)
bce5c34 [ci] format
bd84f33 fix(security): escape slot names in hydration template attributes to prevent ...
42e7eec refactor: fix flaky view-transitions e2e test (#16735)
33b54c4 [ci] format
0f868b0 chore: remove redundant server assertions (#16721)
e345bcd [ci] release (#16653)
04fdbb2 Update pnpm to v11 (#16716)
772f13a fix(astro): correctly export build.assetsPrefix from astro:config/server ...
d1c258a test: isolate fixture cache dirs for shared fixtures (#16689)
Additional commits viewable in compare view

Updates @biomejs/biome from 2.4.14 to 2.4.15

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.4.15

2.4.15

Patch Changes
#9394 ba3480e Thanks @dyc3! - Added the nursery rule useTestHooksInOrder in the test domain. The rule enforces that Jest/Vitest lifecycle hooks (beforeAll, beforeEach, afterEach, afterAll) are declared in the order they execute, making test setup and teardown easier to reason about.
#10254 e0a54cc Thanks @dyc3! - Added a new nursery rule useVueNextTickPromise, which enforces Promise syntax when using Vue nextTick.

For example, the following snippet triggers the rule:
import { nextTick } from "vue";
nextTick(() => {
updateDom();
});
#10219 64aee45 Thanks @dyc3! - Added a new nursery rule noVueVOnNumberValues, that disallows deprecated number modifiers on Vue v-on directives.

For example, the following snippet triggers the rule:
<input @keyup.13="submit" />
#10195 7b8d4e1 Thanks @dyc3! - Added the new nursery rule useVueValidVFor, which validates Vue v-for directives and reports invalid aliases, missing component keys, and keys that do not use iteration variables.

#10238 1110256 Thanks @dyc3! - Added the recommended nursery rule noVueImportCompilerMacros, which disallows importing Vue compiler macros such as defineProps from vue because they are automatically available.

#10201 1a08f89 Thanks @realknove! - Fixed #10193: style/useReadonlyClassProperties no longer reports class properties as readonly-able when they are assigned inside arrow callbacks nested in class property initializers.

#9574 3bd2b6a Thanks @Conaclos! - Fixed #9530. The diagnostics of organizeImports are now more detailed and more precise. They are also better at localizing where the issue is.
#10205 a704a6c Thanks @Conaclos! - Fixed #10185. `organizeImports now errors when it encounters an unknown predefined group.

The following configuration is now reported as invalid because :INEXISTENT: is an unknown predefined group.
{
  "assist": {
    "actions": {
      "source": {
        "organizeImports": { "options": { "groups": [":INEXISTENT:"] } }
      }
    }
  }
}

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.4.15

Patch Changes
#9394 ba3480e Thanks @dyc3! - Added the nursery rule useTestHooksInOrder in the test domain. The rule enforces that Jest/Vitest lifecycle hooks (beforeAll, beforeEach, afterEach, afterAll) are declared in the order they execute, making test setup and teardown easier to reason about.
#10254 e0a54cc Thanks @dyc3! - Added a new nursery rule useVueNextTickPromise, which enforces Promise syntax when using Vue nextTick.

For example, the following snippet triggers the rule:
import { nextTick } from "vue";
nextTick(() => {
updateDom();
});
#10219 64aee45 Thanks @dyc3! - Added a new nursery rule noVueVOnNumberValues, that disallows deprecated number modifiers on Vue v-on directives.

For example, the following snippet triggers the rule:
<input @keyup.13="submit" />
#10195 7b8d4e1 Thanks @dyc3! - Added the new nursery rule useVueValidVFor, which validates Vue v-for directives and reports invalid aliases, missing component keys, and keys that do not use iteration variables.

#10238 1110256 Thanks @dyc3! - Added the recommended nursery rule noVueImportCompilerMacros, which disallows importing Vue compiler macros such as defineProps from vue because they are automatically available.

#10201 1a08f89 Thanks @realknove! - Fixed #10193: style/useReadonlyClassProperties no longer reports class properties as readonly-able when they are assigned inside arrow callbacks nested in class property initializers.

#9574 3bd2b6a Thanks @Conaclos! - Fixed #9530. The diagnostics of organizeImports are now more detailed and more precise. They are also better at localizing where the issue is.
#10205 a704a6c Thanks @Conaclos! - Fixed #10185. `organizeImports now errors when it encounters an unknown predefined group.

The following configuration is now reported as invalid because :INEXISTENT: is an unknown predefined group.
{
  "assist": {
    "actions": {
      "source": {
        "organizeImports": { "options": { "groups": [":INEXISTENT:"] } }
      }
    }
  }
}

... (truncated)

Commits

9dd3271 ci: release (#10210)
7b8d4e1 feat(lint/html/vue): add useVueValidVFor (#10195)
ba3480e feat(lint/js): add useTestHooksInOrder (#9394)
e0a54cc feat(lint/js/vue): add useVueNextTickPromise (#10254)
1110256 feat(lint/vue): add noVueImportCompilerMacros (#10238)
7f7419c fix: grammar in extends docstring (#10263)
0ae5840 feat(lint/js): add useThisForClassMethods (#9807)
83f7385 feat(lint/js): add noBaseToString (#9838)
64aee45 feat(lint/html/vue): add noVueVOnNumberValues (#10219)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `5.0.4` | `5.0.6` | | [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `5.0.4` | `5.0.5` | | [@astrojs/vercel](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vercel) | `10.0.6` | `10.0.7` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `6.3.1` | `6.3.3` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.14` | `2.4.15` | Updates `@astrojs/mdx` from 5.0.4 to 5.0.6 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@5.0.6/packages/integrations/mdx) Updates `@astrojs/react` from 5.0.4 to 5.0.5 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/react@5.0.5/packages/integrations/react) Updates `@astrojs/vercel` from 10.0.6 to 10.0.7 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vercel/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/vercel@10.0.7/packages/integrations/vercel) Updates `astro` from 6.3.1 to 6.3.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.3.3/packages/astro) Updates `@biomejs/biome` from 2.4.14 to 2.4.15 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.15/packages/@biomejs/biome) --- updated-dependencies: - dependency-name: "@astrojs/mdx" dependency-version: 5.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@astrojs/react" dependency-version: 5.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@astrojs/vercel" dependency-version: 10.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: astro dependency-version: 6.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@biomejs/biome" dependency-version: 2.4.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-05-16T07:53:23Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
isle	Ready	Preview, Comment	May 16, 2026 7:54am

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 16, 2026

vercel Bot deployed to Preview May 16, 2026 07:54 View deployment

laymonage approved these changes May 16, 2026

View reviewed changes

laymonage merged commit a28e815 into main May 16, 2026
3 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-94509449e9 branch May 16, 2026 09:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group with 5 updates#216

Bump the dependencies group with 5 updates#216
laymonage merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-94509449e9

dependabot Bot commented on behalf of github May 16, 2026

Uh oh!

vercel Bot commented May 16, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 16, 2026

@​astrojs/mdx@​5.0.6

Patch Changes

@​astrojs/mdx@​5.0.5

Patch Changes

5.0.6

Patch Changes

5.0.5

Patch Changes

@​astrojs/react@​5.0.5

Patch Changes

5.0.5

Patch Changes

@​astrojs/vercel@​10.0.7

Patch Changes

10.0.7

Patch Changes

astro@6.3.3

Patch Changes

astro@6.3.2

Patch Changes

6.3.3

Patch Changes

6.3.2

Patch Changes

Biome CLI v2.4.15

2.4.15

Patch Changes

2.4.15

Patch Changes

Uh oh!

vercel Bot commented May 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@astrojs/mdx@5`.0.6

`@astrojs/mdx@5`.0.5

`@astrojs/react@5`.0.5

`@astrojs/vercel@10`.0.7

vercel Bot commented May 16, 2026 •

edited

Loading