Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 12 updates - #41

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4148aa0260
Open

chore(deps): bump the production-dependencies group across 1 directory with 12 updates#41
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4148aa0260

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 12 updates in the / directory:

Package From To
picomatch 4.0.5 4.0.7
smol-toml 1.7.0 1.8.0
acorn 8.17.0 8.18.0
p-retry 8.0.0 8.0.1
satteri 0.9.4 0.10.5
astro 7.2.9 7.2.10
@fontsource-variable/inter 5.2.8 5.3.0
@fontsource-variable/jetbrains-mono 5.2.8 5.3.0
astro-og-canvas 0.13.0 0.13.1
canvaskit-wasm 0.41.1 0.42.0
sharp 0.35.3 0.35.4
shiki 4.3.1 4.4.3

Updates picomatch from 4.0.5 to 4.0.7

Release notes

Sourced from picomatch's releases.

4.0.7

What's Changed

Full Changelog: micromatch/picomatch@4.0.6...4.0.7

4.0.6

What's Changed

Full Changelog: micromatch/picomatch@4.0.5...4.0.6

Changelog

Sourced from picomatch's changelog.

4.0.7 (2026-08-24)

Fixed

  • Fixed terminal globstars in parenthesized patterns (#142, e279bd7).

4.0.6 (2026-08-24)

Fixed

  • scan() now scans the full pattern when tokens are requested, instead of merging the remaining path segments into the final token (#62, 5f5819d).
  • scan() now returns complete pattern parts, including leading and trailing empty segments, and handles nested and escaped parentheses correctly (#58, f201165).
Commits
  • 6bb4067 4.0.7
  • fdfb155 Merge pull request #198 from micromatch/issue-142
  • 38c6b7a 4.0.6
  • ada9d3f Merge pull request #199 from micromatch/issue-58
  • 9b74f6f Merge pull request #197 from micromatch/issue-62
  • f201165 fix: return complete pattern parts from scan
  • e279bd7 fix: handle terminal globstars in parenthesized patterns
  • 5f5819d fix: scan full pattern when tokens are requested
  • See full diff in compare view

Updates smol-toml from 1.7.0 to 1.8.0

Release notes

Sourced from smol-toml's releases.

v1.8.0

What's Changed

Full Changelog: squirrelchat/smol-toml@v1.7.2...v1.8.0

v1.7.2

What's Changed

Full Changelog: squirrelchat/smol-toml@v1.7.1...v1.7.2

v1.7.1

This release includes flagging internal functions as @internal to strip them from the emitted type declarations.

⚠️ Includes a fix for GHSA-7w5x-hrqm-74c2

Full Changelog: squirrelchat/smol-toml@v1.7.0...v1.7.1

Commits
  • 6d0f477 chore: bump version
  • 97e9713 docs: mention temporal api
  • 7a3068d perf: ubench opt for instanceof Date
  • 7e8c09a feat: stringify temporal
  • 19239d0 chore: bump version
  • 5f55c3a chore: revert sourcemap publishing
  • 5c26f1b chore: update benchmarks
  • 92832d2 refactor: better logic orchestration in structs
  • 2fb9ab8 refactor: ctx object instead of pointer arg + tuple returns
  • e6017c4 ci: use staged publish
  • Additional commits viewable in compare view

Updates acorn from 8.17.0 to 8.18.0

Commits
  • d788421 Mark version 8.18.0
  • b61cb9a Add startLocation option
  • c8d515c Don't compute curLine when locations are off
  • a7bd3cd Reject an unparenthesized arrow function as the left operand of **
  • b7c31b6 Fix mistake in previous patch
  • 5c4af50 Avoid scanning from start of document in loose parser's resetTo
  • See full diff in compare view

Updates p-retry from 8.0.0 to 8.0.1

Release notes

Sourced from p-retry's releases.

v8.0.1

  • Fix error for invalid fractional retry counts 3c22035

sindresorhus/p-retry@v8.0.0...v8.0.1

Commits

Updates satteri from 0.9.4 to 0.10.5

Release notes

Sourced from satteri's releases.

satteri-v0.10.5

Patch changes

  • Updated dependencies: satteri-mdxjs (Cargo)@​0.3.13

satteri-v0.10.4

Patch changes

  • Updated dependencies: satteri-mdxjs (Cargo)@​0.3.13

satteri-v0.10.3

Patch changes

  • 2cf9aef Added clobberPrefix option to footnotes, mirroring remark-rehype — Thanks @​Princesseuh!
  • Updated dependencies: satteri-ast (Cargo)@​0.5.3, satteri-mdxjs (Cargo)@​0.3.12, satteri-pulldown-cmark (Cargo)@​0.6.3

satteri-v0.10.2

Patch changes

  • Updated dependencies: satteri-ast (Cargo)@​0.5.2, satteri-mdxjs (Cargo)@​0.3.11, satteri-pulldown-cmark (Cargo)@​0.6.2

satteri-v0.10.1

Patch changes

  • Updated dependencies: satteri-ast (Cargo)@​0.5.1, satteri-mdxjs (Cargo)@​0.3.10, satteri-pulldown-cmark (Cargo)@​0.6.1

satteri-v0.10.0

Patch changes

  • 0d26ea6 Changed the minimum supported Rust version to 1.85, as these crates now build on the 2024 edition. — Thanks @​Princesseuh!
  • Updated dependencies: satteri-ast (Cargo)@​0.5.0, satteri-mdxjs (Cargo)@​0.3.9, satteri-pulldown-cmark (Cargo)@​0.6.0

satteri-v0.9.5

Patch changes

  • Updated dependencies: satteri-ast (Cargo)@​0.4.2, satteri-mdxjs (Cargo)@​0.3.8, satteri-pulldown-cmark (Cargo)@​0.5.8
Commits
  • b3d38e1 Release (main) (#276)
  • 393aed7 fix(release): fail the job when a native binding fails to publish (#275)
  • f2eb29a Release (main) (#273)
  • 72d4710 fix(mdx): key explicit JSX by node identity instead of span (#272)
  • f339a9c chore(website): update playground to satteri 0.10.3 (#269)
  • 5df21fc Release (main) (#268)
  • 1a052cf chore(changeset): collapse the pipeline performance changesets into one
  • 2cf9aef Revert "Release (main) (#267)"
  • a7132d2 Release (main) (#267)
  • d21f486 perf: cut per-call cost across the parser, renderer, and napi boundary (#257)
  • Additional commits viewable in compare view

Updates astro from 7.2.9 to 7.2.10

Release notes

Sourced from astro's releases.

astro@7.2.10

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes @astrojs/markdown-remark being pinned to an exact version.

  • #17874 10c7e63 Thanks @​astro-factory! - Fixes SSR manifest placeholder not being replaced when the server build is minified, which caused a runtime Invalid URL crash at server boot

  • #17869 2548abf Thanks @​ematipico! - Fixes a case where the logger was improperly initialized at runtime in dev.

  • #17878 76eff3d Thanks @​ematipico! - Fixes browser heuristic caching for cached responses that include Last-Modified or ETag validators

  • #17833 413a6e7 Thanks @​astro-factory! - Fixes prerender conflict warnings to correctly identify the route that first rendered a duplicate pathname, instead of misattributing the conflict to an unrelated route that merely matches the URL pattern

  • #17872 f7191cc Thanks @​jx-grxf! - Fixes Markdown images in content collections rendering an empty srcset attribute when no responsive candidates are generated.

  • #17755 157c500 Thanks @​matthewp! - Fixes a bug where editing a content collection entry during astro dev on Windows kept serving stale content until the dev server was restarted. The data store now notifies the dev server directly after each write instead of relying only on the file watcher, which can miss the atomic rename that commits the write on some platforms.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0
Changelog

Sourced from astro's changelog.

7.2.10

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes @astrojs/markdown-remark being pinned to an exact version.

  • #17874 10c7e63 Thanks @​astro-factory! - Fixes SSR manifest placeholder not being replaced when the server build is minified, which caused a runtime Invalid URL crash at server boot

  • #17869 2548abf Thanks @​ematipico! - Fixes a case where the logger was improperly initialized at runtime in dev.

  • #17878 76eff3d Thanks @​ematipico! - Fixes browser heuristic caching for cached responses that include Last-Modified or ETag validators

  • #17833 413a6e7 Thanks @​astro-factory! - Fixes prerender conflict warnings to correctly identify the route that first rendered a duplicate pathname, instead of misattributing the conflict to an unrelated route that merely matches the URL pattern

  • #17872 f7191cc Thanks @​jx-grxf! - Fixes Markdown images in content collections rendering an empty srcset attribute when no responsive candidates are generated.

  • #17755 157c500 Thanks @​matthewp! - Fixes a bug where editing a content collection entry during astro dev on Windows kept serving stale content until the dev server was restarted. The data store now notifies the dev server directly after each write instead of relying only on the file watcher, which can miss the atomic rename that commits the write on some platforms.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0
Commits

Updates @fontsource-variable/inter from 5.2.8 to 5.3.0

Commits

Updates @fontsource-variable/jetbrains-mono from 5.2.8 to 5.3.0

Commits

Updates astro-og-canvas from 0.13.0 to 0.13.1

Release notes

Sourced from astro-og-canvas's releases.

astro-og-canvas@0.13.1

Patch Changes

Changelog

Sourced from astro-og-canvas's changelog.

0.13.1

Patch Changes

Commits

Updates canvaskit-wasm from 0.41.1 to 0.42.0

Commits

Updates sharp from 0.35.3 to 0.35.4

Release notes

Sourced from sharp's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

v0.35.4-rc.0

Commits
  • 7f1a0a2 Release v0.35.4
  • f927818 Upgrade to sharp-libvips v1.3.3
  • e802092 Prerelease v0.35.4-rc.0
  • e13eb2f CI: Fix wasm32 build (#4589)
  • a82a0b3 Upgrade to libvips v8.18.6
  • 8044fe4 Bound resize dimensions to coordinate limit
  • 147f859 Docs: changelog entries for #4578 #4584
  • ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
  • 7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
  • ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
  • Additional commits viewable in compare view

Updates shiki from 4.3.1 to 4.4.3

Release notes

Sourced from shiki's releases.

v4.4.3

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v4.4.2

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.4.1

   🚀 Features

    View changes on GitHub

v4.4.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 12 updates

Bumps the production-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [picomatch](https://github.com/micromatch/picomatch) | `4.0.5` | `4.0.7` |
| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.7.0` | `1.8.0` |
| [acorn](https://github.com/acornjs/acorn) | `8.17.0` | `8.18.0` |
| [p-retry](https://github.com/sindresorhus/p-retry) | `8.0.0` | `8.0.1` |
| [satteri](https://github.com/bruits/satteri) | `0.9.4` | `0.10.5` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.9` | `7.2.10` |
| [@fontsource-variable/inter](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/inter) | `5.2.8` | `5.3.0` |
| [@fontsource-variable/jetbrains-mono](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/jetbrains-mono) | `5.2.8` | `5.3.0` |
| [astro-og-canvas](https://github.com/delucis/astro-og-canvas/tree/HEAD/packages/astro-og-canvas) | `0.13.0` | `0.13.1` |
| [canvaskit-wasm](https://github.com/google/skia) | `0.41.1` | `0.42.0` |
| [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.4` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.3.1` | `4.4.3` |



Updates `picomatch` from 4.0.5 to 4.0.7
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.5...4.0.7)

Updates `smol-toml` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.7.0...v1.8.0)

Updates `acorn` from 8.17.0 to 8.18.0
- [Commits](acornjs/acorn@8.17.0...8.18.0)

Updates `p-retry` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/sindresorhus/p-retry/releases)
- [Commits](sindresorhus/p-retry@v8.0.0...v8.0.1)

Updates `satteri` from 0.9.4 to 0.10.5
- [Release notes](https://github.com/bruits/satteri/releases)
- [Commits](bruits/satteri@satteri-v0.9.4...satteri-v0.10.5)

Updates `astro` from 7.2.9 to 7.2.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.2.10/packages/astro)

Updates `@fontsource-variable/inter` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/inter)

Updates `@fontsource-variable/jetbrains-mono` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/jetbrains-mono)

Updates `astro-og-canvas` from 0.13.0 to 0.13.1
- [Release notes](https://github.com/delucis/astro-og-canvas/releases)
- [Changelog](https://github.com/delucis/astro-og-canvas/blob/latest/packages/astro-og-canvas/CHANGELOG.md)
- [Commits](https://github.com/delucis/astro-og-canvas/commits/astro-og-canvas@0.13.1/packages/astro-og-canvas)

Updates `canvaskit-wasm` from 0.41.1 to 0.42.0
- [Changelog](https://github.com/google/skia/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/google/skia/commits/canvaskit/0.42.0)

Updates `sharp` from 0.35.3 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.3...v0.35.4)

Updates `shiki` from 4.3.1 to 4.4.3
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.4.3/packages/shiki)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: smol-toml
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: acorn
  dependency-version: 8.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: p-retry
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: satteri
  dependency-version: 0.10.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: astro
  dependency-version: 7.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@fontsource-variable/inter"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@fontsource-variable/jetbrains-mono"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: astro-og-canvas
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: canvaskit-wasm
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: shiki
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 6, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Sep 6, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
polystella-docs 46e365e Commit Preview URL

Branch Preview URL
Sep 06 2026, 01:29 AM

@github-actions github-actions Bot added area/docs Documentation area/parsing File parsing and adapters area/translation Translation pipeline and providers bot Opened by automation size/XL 500+ changed lines labels Sep 6, 2026
@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

Scope check

This PR changes 1,377 lines across 6 files. PolyStella is maintained by a small team, so smaller focused PRs are more likely to be reviewed.

If this scope is intentional, no action is required.

@pkg-pr-new

pkg-pr-new Bot commented Sep 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

@cloudflare/polystella-adapters

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella-adapters@46e365e

@cloudflare/polystella-astro

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella-astro@46e365e

@cloudflare/polystella-core

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella-core@46e365e

@cloudflare/polystella

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella@46e365e

@cloudflare/polystella-providers

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella-providers@46e365e

commit: 46e365e

@cloudflare-workers-and-pages

Copy link
Copy Markdown

🚀 Deploying Preview to Cloudflare 🚀

Preview Deployments by commit

Status Deployment URL Commit Updated (UTC) See this deployment's details
  • Build: Failed ❌

View logs ↗
46e365e 2026-09-06T01:29:36.536Z View logs ↗

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/docs Documentation area/parsing File parsing and adapters area/translation Translation pipeline and providers bot Opened by automation dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code size/XL 500+ changed lines

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants