Skip to content

build(deps): bump the minor-updates group across 1 directory with 8 updates#2

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot-npm_and_yarn-minor-updates-a48b68c017
Open

build(deps): bump the minor-updates group across 1 directory with 8 updates#2
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot-npm_and_yarn-minor-updates-a48b68c017

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the minor-updates group with 8 updates in the / directory:

Package From To
@expressive-code/core 0.41.7 0.44.0
@expressive-code/plugin-collapsible-sections 0.41.7 0.44.0
@expressive-code/plugin-line-numbers 0.41.7 0.44.0
astro 5.13.10 5.18.2
astro-expressive-code 0.41.7 0.44.0
katex 0.16.47 0.17.0
sharp 0.34.5 0.35.3
@biomejs/biome 2.2.5 2.5.2

Updates @expressive-code/core from 0.41.7 to 0.44.0

Release notes

Sourced from @​expressive-code/core's releases.

@​expressive-code/core@​0.44.0

No release notes provided.

@​expressive-code/core@​0.43.1

No release notes provided.

@​expressive-code/core@​0.43.0

No release notes provided.

@​expressive-code/core@​0.42.0

No release notes provided.

Changelog

Sourced from @​expressive-code/core's changelog.

0.44.0

0.43.1

0.43.0

0.42.0

Commits

Updates @expressive-code/plugin-collapsible-sections from 0.41.7 to 0.44.0

Release notes

Sourced from @​expressive-code/plugin-collapsible-sections's releases.

@​expressive-code/plugin-collapsible-sections@​0.44.0

Patch Changes

  • @​expressive-code/core@​0.44.0

@​expressive-code/plugin-collapsible-sections@​0.43.1

Patch Changes

  • @​expressive-code/core@​0.43.1

@​expressive-code/plugin-collapsible-sections@​0.43.0

Patch Changes

  • @​expressive-code/core@​0.43.0

@​expressive-code/plugin-collapsible-sections@​0.42.0

Patch Changes

  • @​expressive-code/core@​0.42.0
Changelog

Sourced from @​expressive-code/plugin-collapsible-sections's changelog.

0.44.0

Patch Changes

  • @​expressive-code/core@​0.44.0

0.43.1

Patch Changes

  • @​expressive-code/core@​0.43.1

0.43.0

Patch Changes

  • @​expressive-code/core@​0.43.0

0.42.0

Patch Changes

  • @​expressive-code/core@​0.42.0
Commits

Updates @expressive-code/plugin-line-numbers from 0.41.7 to 0.44.0

Release notes

Sourced from @​expressive-code/plugin-line-numbers's releases.

@​expressive-code/plugin-line-numbers@​0.44.0

Patch Changes

  • @​expressive-code/core@​0.44.0

@​expressive-code/plugin-line-numbers@​0.43.1

Patch Changes

  • @​expressive-code/core@​0.43.1

@​expressive-code/plugin-line-numbers@​0.43.0

Patch Changes

  • @​expressive-code/core@​0.43.0

@​expressive-code/plugin-line-numbers@​0.42.0

Patch Changes

  • @​expressive-code/core@​0.42.0
Changelog

Sourced from @​expressive-code/plugin-line-numbers's changelog.

0.44.0

Patch Changes

  • @​expressive-code/core@​0.44.0

0.43.1

Patch Changes

  • @​expressive-code/core@​0.43.1

0.43.0

Patch Changes

  • @​expressive-code/core@​0.43.0

0.42.0

Patch Changes

  • @​expressive-code/core@​0.42.0
Commits

Updates astro from 5.13.10 to 5.18.2

Changelog

Sourced from astro's changelog.

5.18.2

Patch Changes

  • #16813 8f7d8c4 Thanks @​matthewp! - Populates styles in the SSR manifest for prerendered routes. Previously, prerendered routes had styles: [] in the manifest, making it impossible for workers or middleware to discover which CSS files a prerendered page uses.

5.18.1

Patch Changes

  • Updated dependencies [c2cd371]:
    • @​astrojs/internal-helpers@​0.7.6
    • @​astrojs/markdown-remark@​6.3.11

5.18.0

Minor Changes

  • #15589 b7dd447 Thanks @​qzio! - Adds a new security.actionBodySizeLimit option to configure the maximum size of Astro Actions request bodies.

    This lets you increase the default 1 MB limit when your actions need to accept larger payloads. For example, actions that handle file uploads or large JSON payloads can now opt in to a higher limit.

    If you do not set this option, Astro continues to enforce the 1 MB default to help prevent abuse.

    // astro.config.mjs
export default defineConfig({
  security: {
    actionBodySizeLimit: 10 * 1024 * 1024, // set to 10 MB
  },
});

Patch Changes

  • #15594 efae11c Thanks @​qzio! - Fix X-Forwarded-Proto validation when allowedDomains includes both protocol and hostname fields. The protocol check no longer fails due to hostname mismatch against the hardcoded test URL.

5.17.3

Patch Changes

  • #15564 522f880 Thanks @​matthewp! - Add a default body size limit for server actions to prevent oversized requests from exhausting memory.

  • #15569 e01e98b Thanks @​matthewp! - Respect image allowlists when inferring remote image sizes and reject remote redirects.

5.17.2

Patch Changes

  • c13b536 Thanks @​matthewp! - Improves Host header handling for SSR deployments behind proxies

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.


Updates astro-expressive-code from 0.41.7 to 0.44.0

Release notes

Sourced from astro-expressive-code's releases.

astro-expressive-code@0.44.0

Minor Changes

  • 9169010: Adds support for Astro v7 and Sätteri v0.9

Patch Changes

  • rehype-expressive-code@0.44.0

astro-expressive-code@0.43.1

Patch Changes

  • d9a3942: Avoids Astro 6.4 deprecation warnings by registering Expressive Code with the Unified Markdown processor when available.
    • rehype-expressive-code@0.43.1

astro-expressive-code@0.43.0

Minor Changes

  • ce8d751: Adds support for the Sätteri Markdown processor introduced in Astro 6.4.

    When your Astro config sets markdown.processor to satteri() (from @astrojs/markdown-satteri), code blocks are now processed by Expressive Code through an equivalent Sätteri HAST plugin instead of the rehype plugin, which Sätteri does not run. The default unified pipeline keeps working exactly as before, and no configuration changes are required to benefit from this.

    Thank you @​Princesseuh!

Patch Changes

  • rehype-expressive-code@0.43.0

astro-expressive-code@0.42.0

Patch Changes

  • rehype-expressive-code@0.42.0
Changelog

Sourced from astro-expressive-code's changelog.

0.44.0

Minor Changes

  • 9169010: Adds support for Astro v7 and Sätteri v0.9

Patch Changes

  • rehype-expressive-code@0.44.0

0.43.1

Patch Changes

  • d9a3942: Avoids Astro 6.4 deprecation warnings by registering Expressive Code with the Unified Markdown processor when available.
    • rehype-expressive-code@0.43.1

0.43.0

Minor Changes

  • ce8d751: Adds support for the Sätteri Markdown processor introduced in Astro 6.4.

    When your Astro config sets markdown.processor to satteri() (from @astrojs/markdown-satteri), code blocks are now processed by Expressive Code through an equivalent Sätteri HAST plugin instead of the rehype plugin, which Sätteri does not run. The default unified pipeline keeps working exactly as before, and no configuration changes are required to benefit from this.

    Thank you @​Princesseuh!

Patch Changes

  • rehype-expressive-code@0.43.0

0.42.0

Patch Changes

  • rehype-expressive-code@0.42.0
Commits

Updates katex from 0.16.47 to 0.17.0

Release notes

Sourced from katex's releases.

v0.17.0

0.17.0 (2026-05-22)

Performance Improvements

  • simplify defineFunction to avoid destructuring, improve typing (#4222) (fb604e6)

BREAKING CHANGES

  • The internal API for __defineFunction changed: you should no longer wrap properties in props.
Changelog

Sourced from katex's changelog.

0.17.0 (2026-05-22)

Performance Improvements

  • simplify defineFunction to avoid destructuring, improve typing (#4222) (fb604e6)

BREAKING CHANGES

  • The internal API for __defineFunction changed: you should no longer wrap properties in props.
Commits
  • 3dec549 chore(release): 0.17.0 [ci skip]
  • fb604e6 perf: simplify defineFunction to avoid destructuring, improve typing (#4222)
  • 6caa636 refactor: tighten ParseNode types (#4219)
  • afed784 docs: make first supportive organizations logos bigger (#4216)
  • b02d9ac chore(deps): update dependency webpack-dev-server to v5.2.4 [security] (#4220)
  • See full diff in compare view

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

  • Improve code bundler support by resolving path to libvips binary.

  • Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

  • Emit warning about binaries provided by Electron for use on Linux.

  • Add hasAlpha property to output info. #4500

  • TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @​Andarist

  • Bound clahe width and height to avoid signed overflow. #4551 @​metsw24-max

  • Bound trim margin to avoid signed overflow. #4552 @​metsw24-max

  • Reject infinite values when validating numbers. #4553 @​metsw24-max

  • Bound extract region to libvips coordinate limit. #4555 @​metsw24-max

  • Verify background colour values are numbers. #4556 @​metsw24-max

  • Bound create and raw input dimensions to coordinate limit. #4558 @​metsw24-max

  • Tighten recomb and affine matrix verification. #4560 @​chatman-media

  • Verify cache memory limit to avoid overflow. #4561 @​metsw24-max

v0.35.3-rc.2

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits
  • 1018449 Release v0.35.3
  • ba303a7 Prerelease v0.35.3-rc.2
  • 4f94fc5 Upgrade to sharp-libvips v1.3.2
  • c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
  • 9a8d002 Docs: Add changelog entry and note about transferable #4520
  • 8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
  • e000d0b Prerelease v0.35.3-rc.1
  • 9554ca9 Prerelease v0.35.3-rc.0
  • 6a29fd5 Emit warning about native binaries on Linux Electron
  • 540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
  • Additional commits viewable in compare view

Updates @biomejs/biome from 2.2.5 to 2.5.2

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.2

2.5.2

Patch Changes

  • #10595 f458028 Thanks @​pkallos! - Added the option ignoreBooleanCoercion to useNullishCoalescing. When enabled, Biome ignores || and ||= used inside a Boolean() call, where coalescing on falsy values is intentional.

  • #10798 4a32b63 Thanks @​pkallos! - Added the option ignorePrimitives to useNullishCoalescing. When enabled, Biome ignores ||, ||=, and ternary expressions whose non-nullish operands are all primitives the option opts out of. Use true to ignore all primitives, or an object selecting string, number, boolean, or bigint.

  • #10545 f3d4c00 Thanks @​Mokto! - Added the new nursery rule noSvelteUnnecessaryStateWrap, which reports unnecessary $state() wrapping of classes from svelte/reactivity that are already reactive.

    <script>
import { SvelteMap } from "svelte/reactivity";
const map = $state(new SvelteMap()); // redundant
</script>

  • #10752 f62fb8b Thanks @​ematipico! - Fixed #10739. Now the rule useValidAutocomplete correctly flags the autoComplete attribute.

  • #10796 f1b3ab2 Thanks @​ematipico! - Fixed #10768. Improved the performance of the Biome Language Server by cancelling certain in-flight operations when there are fast updates.

  • #10719 aa649b5 Thanks @​minseong0324! - Fixed noMisleadingReturnType false positive on returns that use a widening type assertion: "a" as string is no longer reported as misleading. The rule now also reports a literal-pinning assertion such as false as false, matching the existing as const behavior.

    // No longer flagged (returns are `string`):
function getValue(b: boolean): string {
  if (b) return "a" as string;
  return "b" as string;
}
// Now also reported, like as const (returns false):
function isReady(): boolean {
return false as false;
}

  • #10678 8f073a7 Thanks @​PranavAchar01! - Fixed #7718: Biome now correctly parses CSS nesting selectors when & appears as a trailing sub-selector after a type selector, e.g. h1& { color: red; }.

  • #10756 5ec965a Thanks @​denbezrukov! - Fixed CSS formatter output for selector lists with allowWrongLineComments and // comments after a selector comma. Biome now keeps the selector before the line comment inline instead of breaking it across descendant combinators.

    -.powerPathNavigator
-  .helm
-  button.pressedButton, // pressed
+.powerPathNavigator .helm button.pressedButton, // pressed
 .powerPathNavigator .helm button:active:not(.disabledButton) {
 }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.2

Patch Changes

  • #10595 f458028 Thanks @​pkallos! - Added the option ignoreBooleanCoercion to useNullishCoalescing. When enabled, Biome ignores || and ||= used inside a Boolean() call, where coalescing on falsy values is intentional.

  • #10798 4a32b63 Thanks @​pkallos! - Added the option ignorePrimitives to useNullishCoalescing. When enabled, Biome ignores ||, ||=, and ternary expressions whose non-nullish operands are all primitives the option opts out of. Use true to ignore all primitives, or an object selecting string, number, boolean, or bigint.

  • #10545 f3d4c00 Thanks @​Mokto! - Added the new nursery rule noSvelteUnnecessaryStateWrap, which reports unnecessary $state() wrapping of classes from svelte/reactivity that are already reactive.

    <script>
import { SvelteMap } from "svelte/reactivity";
const map = $state(new SvelteMap()); // redundant
</script>

  • #10752 f62fb8b Thanks @​ematipico! - Fixed #10739. Now the rule useValidAutocomplete correctly flags the autoComplete attribute.

  • #10796 f1b3ab2 Thanks @​ematipico! - Fixed #10768. Improved the performance of the Biome Language Server by cancelling certain in-flight operations when there are fast updates.

  • #10719 aa649b5 Thanks @​minseong0324! - Fixed noMisleadingReturnType false positive on returns that use a widening type assertion: "a" as string is no longer reported as misleading. The rule now also reports a literal-pinning assertion such as false as false, matching the existing as const behavior.

    // No longer flagged (returns are `string`):
function getValue(b: boolean): string {
  if (b) return "a" as string;
  return "b" as string;
}
// Now also reported, like as const (returns false):
function isReady(): boolean {
return false as false;
}

  • #10678 8f073a7 Thanks @​PranavAchar01! - Fixed #7718: Biome now correctly parses CSS nesting selectors when & appears as a trailing sub-selector after a type selector, e.g. h1& { color: red; }.

  • #10756 5ec965a Thanks @​denbezrukov! - Fixed CSS formatter output for selector lists with allowWrongLineComments and // comments after a selector comma. Biome now keeps the selector before the line comment inline instead of breaking it across descendant combinators.

    -.powerPathNavigator
-  .helm
-  button.pressedButton, // pressed
+.powerPathNavigator .helm button.pressedButton, // pressed
 .powerPathNavigator .helm button:active:not(.disabledButton) {
 }

  • #10757 6232fcd Thanks @​PranavAchar01! - Fixed #8269: the CSS parser now accepts Tailwind @variant and @utility names that start with a digit, such as the 2xl breakpoint.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​biomejs/biome since your current version.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 5, 2026
@dependabot dependabot Bot changed the title Bump the minor-updates group with 8 updates build(deps): bump the minor-updates group across 1 directory with 8 updates Jul 6, 2026
@dependabot dependabot Bot force-pushed the dependabot-npm_and_yarn-minor-updates-a48b68c017 branch from af0d304 to af9fe03 Compare July 6, 2026 23:38
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 6, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying blog with  Cloudflare Pages  Cloudflare Pages

Latest commit: ff6d330
Status: ✅  Deploy successful!
Preview URL: https://733b1784.blog-45q.pages.dev
Branch Preview URL: https://dependabot-npm-and-yarn-mino.blog-45q.pages.dev

View logs

@dependabot
build(deps): bump the minor-updates group across 1 directory with 8 u…
ff6d330 
…pdates

Bumps the minor-updates group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@expressive-code/core](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/@expressive-code/core) | `0.41.7` | `0.44.0` |
| [@expressive-code/plugin-collapsible-sections](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/@expressive-code/plugin-collapsible-sections) | `0.41.7` | `0.44.0` |
| [@expressive-code/plugin-line-numbers](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/@expressive-code/plugin-line-numbers) | `0.41.7` | `0.44.0` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.13.10` | `5.18.2` |
| [astro-expressive-code](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/astro-expressive-code) | `0.41.7` | `0.44.0` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.17.0` |
| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.3` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.2.5` | `2.5.2` |



Updates `@expressive-code/core` from 0.41.7 to 0.44.0
- [Release notes](https://github.com/expressive-code/expressive-code/releases)
- [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/@expressive-code/core/CHANGELOG.md)
- [Commits](https://github.com/expressive-code/expressive-code/commits/@expressive-code/core@0.44.0/packages/@expressive-code/core)

Updates `@expressive-code/plugin-collapsible-sections` from 0.41.7 to 0.44.0
- [Release notes](https://github.com/expressive-code/expressive-code/releases)
- [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/@expressive-code/plugin-collapsible-sections/CHANGELOG.md)
- [Commits](https://github.com/expressive-code/expressive-code/commits/@expressive-code/plugin-collapsible-sections@0.44.0/packages/@expressive-code/plugin-collapsible-sections)

Updates `@expressive-code/plugin-line-numbers` from 0.41.7 to 0.44.0
- [Release notes](https://github.com/expressive-code/expressive-code/releases)
- [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/@expressive-code/plugin-line-numbers/CHANGELOG.md)
- [Commits](https://github.com/expressive-code/expressive-code/commits/@expressive-code/plugin-line-numbers@0.44.0/packages/@expressive-code/plugin-line-numbers)

Updates `astro` from 5.13.10 to 5.18.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/astro@5.18.2/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@5.18.2/packages/astro)

Updates `astro-expressive-code` from 0.41.7 to 0.44.0
- [Release notes](https://github.com/expressive-code/expressive-code/releases)
- [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/astro-expressive-code/CHANGELOG.md)
- [Commits](https://github.com/expressive-code/expressive-code/commits/astro-expressive-code@0.44.0/packages/astro-expressive-code)

Updates `katex` from 0.16.47 to 0.17.0
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.17.0)

Updates `sharp` from 0.34.5 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.3)

Updates `@biomejs/biome` from 2.2.5 to 2.5.2
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.2/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: "@expressive-code/core"
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: "@expressive-code/plugin-collapsible-sections"
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: "@expressive-code/plugin-line-numbers"
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: astro
  dependency-version: 5.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: astro-expressive-code
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: katex
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: sharp
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot-npm_and_yarn-minor-updates-a48b68c017 branch from af9fe03 to ff6d330 Compare July 7, 2026 23:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants