chore(deps): update all digest updates #152

Merged
renovate[bot] merged 1 commits from renovate/all-digest into master 2026-10-22 04:11:55 +04:00
Collaborator

This PR contains the following updates:

Package Change Age Confidence
@astrojs/check (source) 0.9.11 → 0.9.12 age confidence
@astrojs/markdown-remark (source) 7.3.3 → 7.3.4 age confidence
astro (source) 7.4.1 → 7.4.2 age confidence
npm (source) 12.2.0 → 12.2.1 age confidence
sass 1.105.2 → 1.106.1 age confidence

Release Notes

withastro/astro (@​astrojs/check)

v0.9.12

Compare Source

Patch Changes
  • #​18455 7af66fc Thanks @​astro-factory! - Fixes the astro-check binary ignoring its first two command-line arguments, so flags such as --help, --root, --watch, and --tsconfig are respected again. If your scripts padded the arguments to work around this (for example, astro-check -- -- --tsconfig ./tsconfig.app.json), remove the padding.
  • Updated dependencies [044148d]:
withastro/astro (@​astrojs/markdown-remark)

v7.3.4

Compare Source

Patch Changes
withastro/astro (astro)

v7.4.2

Compare Source

Patch Changes
  • #​18430 dda9ec3 Thanks @​Abhirup-99! - Speeds up content sync with experimental.collectionStorage: "chunked" by computing each character's UTF-8 width from its code point instead of encoding every character through TextEncoder. On a store of ~44k entries this cuts the chunking step from about 60 seconds to well under a second, with byte-identical output.

  • #​18438 5e0eaa4 Thanks @​astro-factory! - Fixes astro dev with @astrojs/cloudflare failing with Calling `require` for "node-fetch" when a server dependency such as cross-fetch requires node-fetch

  • #​18376 a4e201d Thanks @​okxint! - Fixes astro dev treating a stale lock file containing a Linux thread ID as a running Astro server. A successful process lookup with no matching PID now marks the lock as stale, preventing astro dev stop and astro dev --force from killing the unrelated process that owns the thread.

  • #​18467 d1fb7d3 Thanks @​astro-factory! - Fixes the defineConfig() types for i18n.defaultLocale, i18n.fallback, and i18n.domains so they accept a custom locale's path instead of its codes, matching how Astro validates and uses these values

  • #​18475 cf27e70 Thanks @​ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

    This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

  • #​18451 7a0ba6f Thanks @​DenisCDev! - Fixes astro sync, astro check and astro build replacing the optimized dependencies of a dev server running in the same project, which broke framework islands in that dev server until it was restarted with --force

  • #​18336 e943003 Thanks @​astro-factory! - Fixes inline styles in dev so that framework-transformed CSS is used, such as scoped styles and v-bind() in Vue single-file components

  • #​18399 829fc00 Thanks @​astro-factory! - Fixes a dev server error (Could not find server component name) for a server:defer island that imports astro:actions or astro:config/server, when its page was not the first island page loaded after starting the server

  • #​18330 4db9e0d Thanks @​Samuteg! - Fixes the astro:env/server virtual module being generated with invalid JS in dev when any environment variable contains $ replacement patterns ($`, $&, $', $1, …). The inlined env JSON was passed as a string to String.replace, so e.g. the KITTY_PUBLIC_KEY value set by default in Kitty terminals corrupted the module and broke dev with Failed to parse source for import analysis

  • Updated dependencies [cf27e70]:

npm/cli (npm)

v12.2.1

Compare Source

Bug Fixes
Dependencies
sass/dart-sass (sass)

v1.106.1

Compare Source

  • Fix a bug where an attribute selector with an empty value (such as
    [class=""]) would crash when serializing.

  • Don't crash when serializing a number with an empty unit. This is only
    possible through the JavaScript and Dart APIs or the embedded protocol.

Embedded Dart Sass
  • More robustly convert invalid value errors into PARAMS errors.

v1.106.0

Compare Source

  • Don't normalize CSS escapes in statement contexts that can contain
    interpolation. For example, @f\6Fo is now emitted as written rather than
    normalized to @foo.

  • Fix a bug where quotes would be removed from attribute selector values that
    contained backslashes.

  • Fix invalid source spans that could cause crashes when encountering a syntax
    error in selectors or media queries that also contain escape sequences.

  • Fix a bug where the indented syntax parser would crash when parsing a file
    where the first statement was indented and appeared after the first line.

  • Fix a bug that could cause crashes when encountering errors or warnings in
    interpolations that contain patterns like // */.

  • Potentially breaking compatibility fix: CSS escape codes whose values are
    0, for Unicode surrogates, or greater than the maximum allowed code point are
    now consistently normalized to U+FFFD REPLACEMENT CHARACTER in expression
    contexts. Previously, in some cases these were instead normalized to the
    normalized form of the original escape sequence, which violates the principle
    that all escape sequences for identical values should be normalized the same
    way. In other cases, these would simply throw errors.

    As a special case, \0 on its own will continue to be normalized to \0 to
    support historical CSS hacks.

  • Potentially breaking bug fix: Throw an error for mixins and functions that
    have rest parameters which are the same as normal parameters. Previously, the
    positional parameters wouldn't be accessible and calling such a mixin or
    function with a named argument would crash the compiler.

  • Potentially breaking bug fix: Fix various cases where using a CSS escape
    code at the beginning of an identifier would change parsing behavior versus
    using the character directly.

  • Potentially breaking bug fix: When a number's unit is ambiguous with a
    numeric exponent, the unit is now serialized as an escape code rather than a
    literal e to avoid being interpreted as an exponent by CSS.

  • Potentially breaking bug fix: Don't parse a CSS escape code for U+45 LATIN
    CAPITAL LETTER E or U+65 LATIN LOWERCASE LETTER E as an exponent in
    @keyframes percentage selectors.

  • Potentially breaking bug fix: Properly normalize underscores written as
    CSS escape codes in variable, mixin, and function names.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@astrojs/check](https://github.com/withastro/astro/tree/main/packages/language-tools/astro-check) ([source](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check)) | [`0.9.11` → `0.9.12`](https://renovatebot.com/diffs/npm/@astrojs%2fcheck/0.9.11/0.9.12) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@astrojs%2fcheck/0.9.12?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@astrojs%2fcheck/0.9.11/0.9.12?slim=true) | | [@astrojs/markdown-remark](https://astro.build) ([source](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark)) | [`7.3.3` → `7.3.4`](https://renovatebot.com/diffs/npm/@astrojs%2fmarkdown-remark/7.3.3/7.3.4) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@astrojs%2fmarkdown-remark/7.3.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@astrojs%2fmarkdown-remark/7.3.3/7.3.4?slim=true) | | [astro](https://astro.build) ([source](https://github.com/withastro/astro/tree/HEAD/packages/astro)) | [`7.4.1` → `7.4.2`](https://renovatebot.com/diffs/npm/astro/7.4.1/7.4.2) | ![age](https://developer.mend.io/api/mc/badges/age/npm/astro/7.4.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/astro/7.4.1/7.4.2?slim=true) | | [npm](https://docs.npmjs.com/) ([source](https://github.com/npm/cli)) | [`12.2.0` → `12.2.1`](https://renovatebot.com/diffs/npm/npm/12.2.0/12.2.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/npm/12.2.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/npm/12.2.0/12.2.1?slim=true) | | [sass](https://github.com/sass/dart-sass) | [`1.105.2` → `1.106.1`](https://renovatebot.com/diffs/npm/sass/1.105.2/1.106.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/sass/1.106.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/sass/1.105.2/1.106.1?slim=true) | --- ### Release Notes <details> <summary>withastro/astro (@&#8203;astrojs/check)</summary> ### [`v0.9.12`](https://github.com/withastro/astro/blob/HEAD/packages/language-tools/astro-check/CHANGELOG.md#0912) [Compare Source](https://github.com/withastro/astro/compare/@astrojs/check@0.9.11...@astrojs/check@0.9.12) ##### Patch Changes - [#&#8203;18455](https://github.com/withastro/astro/pull/18455) [`7af66fc`](https://github.com/withastro/astro/commit/7af66fc785d85b1df1f98e7123a52b2306250985) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes the `astro-check` binary ignoring its first two command-line arguments, so flags such as `--help`, `--root`, `--watch`, and `--tsconfig` are respected again. If your scripts padded the arguments to work around this (for example, `astro-check -- -- --tsconfig ./tsconfig.app.json`), remove the padding. - Updated dependencies \[[`044148d`](https://github.com/withastro/astro/commit/044148d5cfbc90e0277b3205a52ec73bc452bb7e)]: - [@&#8203;astrojs/language-server](https://github.com/astrojs/language-server)@2.17.3 </details> <details> <summary>withastro/astro (@&#8203;astrojs/markdown-remark)</summary> ### [`v7.3.4`](https://github.com/withastro/astro/blob/HEAD/packages/markdown/remark/CHANGELOG.md#734) [Compare Source](https://github.com/withastro/astro/compare/@astrojs/markdown-remark@7.3.3...@astrojs/markdown-remark@7.3.4) ##### Patch Changes - Updated dependencies \[[`cf27e70`](https://github.com/withastro/astro/commit/cf27e70a9057ce29ade2a8a843bd9275a696e9ab)]: - [@&#8203;astrojs/prism](https://github.com/astrojs/prism)@4.1.1 </details> <details> <summary>withastro/astro (astro)</summary> ### [`v7.4.2`](https://github.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#742) [Compare Source](https://github.com/withastro/astro/compare/astro@7.4.1...astro@7.4.2) ##### Patch Changes - [#&#8203;18430](https://github.com/withastro/astro/pull/18430) [`dda9ec3`](https://github.com/withastro/astro/commit/dda9ec395c89a1420abb3b8f88b5c7f1f385f82e) Thanks [@&#8203;Abhirup-99](https://github.com/Abhirup-99)! - Speeds up content sync with `experimental.collectionStorage: "chunked"` by computing each character's UTF-8 width from its code point instead of encoding every character through `TextEncoder`. On a store of \~44k entries this cuts the chunking step from about 60 seconds to well under a second, with byte-identical output. - [#&#8203;18438](https://github.com/withastro/astro/pull/18438) [`5e0eaa4`](https://github.com/withastro/astro/commit/5e0eaa4415a9081efdaeb3d9af3717ce3226ad18) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes `astro dev` with `@astrojs/cloudflare` failing with ``Calling `require` for "node-fetch"`` when a server dependency such as `cross-fetch` requires `node-fetch` - [#&#8203;18376](https://github.com/withastro/astro/pull/18376) [`a4e201d`](https://github.com/withastro/astro/commit/a4e201d79f19caa6bf4222f42167aeb602c066e6) Thanks [@&#8203;okxint](https://github.com/okxint)! - Fixes `astro dev` treating a stale lock file containing a Linux thread ID as a running Astro server. A successful process lookup with no matching PID now marks the lock as stale, preventing `astro dev stop` and `astro dev --force` from killing the unrelated process that owns the thread. - [#&#8203;18467](https://github.com/withastro/astro/pull/18467) [`d1fb7d3`](https://github.com/withastro/astro/commit/d1fb7d36dad440c57d62b071e752ae220cca2baa) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes the `defineConfig()` types for `i18n.defaultLocale`, `i18n.fallback`, and `i18n.domains` so they accept a custom locale's `path` instead of its `codes`, matching how Astro validates and uses these values - [#&#8203;18475](https://github.com/withastro/astro/pull/18475) [`cf27e70`](https://github.com/withastro/astro/commit/cf27e70a9057ce29ade2a8a843bd9275a696e9ab) Thanks [@&#8203;ematipico](https://github.com/ematipico)! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the [October 2026 Node.js security releases](https://nodejs.org/en/blog/vulnerability/october-2026-security-releases) This is a patch release because the [Node.js support and upgrade policy](https://docs.astro.build/en/upgrade-astro/#nodejs-support-and-upgrade-policies) allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro. - [#&#8203;18451](https://github.com/withastro/astro/pull/18451) [`7a0ba6f`](https://github.com/withastro/astro/commit/7a0ba6f48ebae256a1ce49de4f1c62c009ff94e2) Thanks [@&#8203;DenisCDev](https://github.com/DenisCDev)! - Fixes `astro sync`, `astro check` and `astro build` replacing the optimized dependencies of a dev server running in the same project, which broke framework islands in that dev server until it was restarted with `--force` - [#&#8203;18336](https://github.com/withastro/astro/pull/18336) [`e943003`](https://github.com/withastro/astro/commit/e943003259c3bb4d528d3d49c8ccd3eb8f84b8b5) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes inline styles in dev so that framework-transformed CSS is used, such as scoped styles and `v-bind()` in Vue single-file components - [#&#8203;18399](https://github.com/withastro/astro/pull/18399) [`829fc00`](https://github.com/withastro/astro/commit/829fc00629ef715fc606b89c6e684ca93f9253b9) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes a dev server error (`Could not find server component name`) for a `server:defer` island that imports `astro:actions` or `astro:config/server`, when its page was not the first island page loaded after starting the server - [#&#8203;18330](https://github.com/withastro/astro/pull/18330) [`4db9e0d`](https://github.com/withastro/astro/commit/4db9e0d1e6a54c2300b96a0ff0cfaf5c188cecda) Thanks [@&#8203;Samuteg](https://github.com/Samuteg)! - Fixes the `astro:env/server` virtual module being generated with invalid JS in dev when any environment variable contains `$` replacement patterns (`` $` ``, `$&`, `$'`, `$1`, …). The inlined env JSON was passed as a string to `String.replace`, so e.g. the `KITTY_PUBLIC_KEY` value set by default in Kitty terminals corrupted the module and broke dev with `Failed to parse source for import analysis` - Updated dependencies \[[`cf27e70`](https://github.com/withastro/astro/commit/cf27e70a9057ce29ade2a8a843bd9275a696e9ab)]: - [@&#8203;astrojs/telemetry](https://github.com/astrojs/telemetry)@3.4.1 - [@&#8203;astrojs/markdown-satteri](https://github.com/astrojs/markdown-satteri)@0.4.5 </details> <details> <summary>npm/cli (npm)</summary> ### [`v12.2.1`](https://github.com/npm/cli/blob/HEAD/CHANGELOG.md#1221-2026-10-14) [Compare Source](https://github.com/npm/cli/compare/v12.2.0...v12.2.1) ##### Bug Fixes - [`b317f16`](https://github.com/npm/cli/commit/b317f16c80df02ea3628cfa77170d5ae9b59720c) [#&#8203;9941](https://github.com/npm/cli/pull/9941) write registry allowScripts keys under install-strategy=linked ([#&#8203;9941](https://github.com/npm/cli/issues/9941)) ([@&#8203;manzoorwanijk](https://github.com/manzoorwanijk)) ##### Dependencies - [`7b0c2e8`](https://github.com/npm/cli/commit/7b0c2e8f7fe6dd9f28237d8d50690eb8ebc33743) [#&#8203;10088](https://github.com/npm/cli/pull/10088) `http-cache-semantics@4.3.0` ([@&#8203;reggi](https://github.com/reggi)) - [`e9e99b4`](https://github.com/npm/cli/commit/e9e99b41b6bc73a0024a820640074a46887bf41a) [#&#8203;10088](https://github.com/npm/cli/pull/10088) `undici@6.29.0` ([@&#8203;reggi](https://github.com/reggi)) - [`857d7df`](https://github.com/npm/cli/commit/857d7df459d668b6a85eda842457cde667097656) [#&#8203;10088](https://github.com/npm/cli/pull/10088) `postcss-selector-parser@7.1.6` ([@&#8203;reggi](https://github.com/reggi)) - [`bc7bb3a`](https://github.com/npm/cli/commit/bc7bb3aed84e381893f4e4c4d7e7ccb4f2d1b4d5) [#&#8203;10088](https://github.com/npm/cli/pull/10088) `ip-address@10.7.2` ([@&#8203;reggi](https://github.com/reggi)) - [`7614360`](https://github.com/npm/cli/commit/761436020d63ee47adeff1aa365a498e917b9ddc) [#&#8203;10088](https://github.com/npm/cli/pull/10088) `brace-expansion@5.0.12` ([@&#8203;reggi](https://github.com/reggi)) - [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.4): `@npmcli/arborist@10.0.4` - [workspace](https://github.com/npm/cli/releases/tag/libnpmdiff-v9.0.4): `libnpmdiff@9.0.4` - [workspace](https://github.com/npm/cli/releases/tag/libnpmexec-v11.0.4): `libnpmexec@11.0.4` - [workspace](https://github.com/npm/cli/releases/tag/libnpmfund-v8.0.4): `libnpmfund@8.0.4` - [workspace](https://github.com/npm/cli/releases/tag/libnpmpack-v10.0.4): `libnpmpack@10.0.4` </details> <details> <summary>sass/dart-sass (sass)</summary> ### [`v1.106.1`](https://github.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#11061) [Compare Source](https://github.com/sass/dart-sass/compare/1.106.0...1.106.1) - Fix a bug where an attribute selector with an empty value (such as `[class=""]`) would crash when serializing. - Don't crash when serializing a number with an empty unit. This is only possible through the JavaScript and Dart APIs or the embedded protocol. ##### Embedded Dart Sass - More robustly convert invalid value errors into `PARAMS` errors. ### [`v1.106.0`](https://github.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#11060) [Compare Source](https://github.com/sass/dart-sass/compare/1.105.2...1.106.0) - Don't normalize CSS escapes in statement contexts that can contain interpolation. For example, `@f\6Fo` is now emitted as written rather than normalized to `@foo`. - Fix a bug where quotes would be removed from attribute selector values that contained backslashes. - Fix invalid source spans that could cause crashes when encountering a syntax error in selectors or media queries that also contain escape sequences. - Fix a bug where the indented syntax parser would crash when parsing a file where the first statement was indented *and* appeared after the first line. - Fix a bug that could cause crashes when encountering errors or warnings in interpolations that contain patterns like `// */`. - **Potentially breaking compatibility fix:** CSS escape codes whose values are 0, for Unicode surrogates, or greater than the maximum allowed code point are now consistently normalized to U+FFFD REPLACEMENT CHARACTER in expression contexts. Previously, in some cases these were instead normalized to the normalized form of the original escape sequence, which violates the principle that all escape sequences for identical values should be normalized the same way. In other cases, these would simply throw errors. As a special case, `\0` on its own will continue to be normalized to `\0 ` to support historical CSS hacks. - **Potentially breaking bug fix:** Throw an error for mixins and functions that have rest parameters which are the same as normal parameters. Previously, the positional parameters wouldn't be accessible and calling such a mixin or function with a named argument would crash the compiler. - **Potentially breaking bug fix:** Fix various cases where using a CSS escape code at the beginning of an identifier would change parsing behavior versus using the character directly. - **Potentially breaking bug fix:** When a number's unit is ambiguous with a numeric exponent, the unit is now serialized as an escape code rather than a literal `e` to avoid being interpreted as an exponent by CSS. - **Potentially breaking bug fix:** Don't parse a CSS escape code for U+45 LATIN CAPITAL LETTER E or U+65 LATIN LOWERCASE LETTER E as an exponent in `@keyframes` percentage selectors. - **Potentially breaking bug fix:** Properly normalize underscores written as CSS escape codes in variable, mixin, and function names. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzYuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3Ni4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tYXRlZCIsImRlcGVuZGVuY2llcyJdfQ==-->
renovate[bot] added 1 commit 2026-10-22 04:11:53 +04:00
chore(deps): update all digest updates
Test / npm test (pull_request) Successful in 38s
RenovateBot / renovate (push) Successful in 31s
Test / npm test (push) Successful in 39s
29c70d9eea
renovate[bot] scheduled this pull request to auto merge when all checks succeed 2026-10-22 04:11:54 +04:00
renovate[bot] merged commit 29c70d9eea into master 2026-10-22 04:11:55 +04:00
renovate[bot] deleted branch renovate/all-digest 2026-10-22 04:11:55 +04:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: valentineus/popov.link#152