Repository navigation
chore(deps): bump the npm-deps group with 8 updates - #424
Conversation
Bumps the npm-deps group with 8 updates: | Package | From | To | | --- | --- | --- | | [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `8.0.2` | `8.0.3` | | [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `7.0.0` | `7.0.1` | | [@lavamoat/preinstall-always-fail](https://github.com/LavaMoat/LavaMoat/tree/HEAD/packages/preinstall-always-fail) | `3.0.0` | `3.0.1` | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.23` | `1.2.0` | | [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.3.3` | `1.4.0` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.5` | `7.3.8` | | [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` | | [prettier-plugin-astro](https://github.com/withastro/prettier-plugin-astro) | `1.1.0` | `1.1.1` | Updates `@astrojs/mdx` from 8.0.2 to 8.0.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.0.3/packages/integrations/mdx) Updates `@astrojs/react` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/react@7.0.1/packages/integrations/react) Updates `@lavamoat/preinstall-always-fail` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/LavaMoat/LavaMoat/releases) - [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/preinstall-always-fail/CHANGELOG.md) - [Commits](https://github.com/LavaMoat/LavaMoat/commits/webpack-v3.0.1/packages/preinstall-always-fail) Updates `@radix-ui/react-dialog` from 1.1.23 to 1.2.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-slot` from 1.3.3 to 1.4.0 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot) Updates `astro` from 7.3.5 to 7.3.8 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.3.8/packages/astro) Updates `prettier` from 3.9.9 to 3.9.10 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.9...3.9.10) Updates `prettier-plugin-astro` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/withastro/prettier-plugin-astro/releases) - [Changelog](https://github.com/withastro/prettier-plugin-astro/blob/main/CHANGELOG.md) - [Commits](withastro/prettier-plugin-astro@v1.1.0...v1.1.1) --- updated-dependencies: - dependency-name: "@astrojs/mdx" dependency-version: 8.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: "@astrojs/react" dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: "@lavamoat/preinstall-always-fail" dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: "@radix-ui/react-slot" dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: astro dependency-version: 7.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: prettier dependency-version: 3.9.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: prettier-plugin-astro dependency-version: 1.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <support@github.com>
|
🐦 Preview of 6f5059e: https://shorebird-website--pr-424-r50v2keh.web.app (expires in 7 days) |
AbhishekDoshi26
left a comment
There was a problem hiding this comment.
Reviewed the bump. Everything here is a patch/minor update; @radix-ui/react-slot 1.4.0 is a lockfile-only change since package.json keeps ^1.2.4. No packages were added, and none of them have install scripts. I also ran npm ci, allow-scripts, format:check and build locally on the branch, and all pass (92 pages).
One thing to fix:
- Stale lavamoat allowlist entry. astro 7.3.8 no longer depends on
esbuild(the lockfile dropsesbuild, all 26@esbuild/*binaries,js-yamlandargparse), so"astro>esbuild": falseinpackage.json→lavamoat.allowScriptsnow matches nothing. Runningnpx allow-scripts autoremoves it ("Removing allowlist entry "astro>esbuild" since it no longer matches dependencies"). I'll push that.
AbhishekDoshi26
left a comment
There was a problem hiding this comment.
Re-reviewed at 6f5059e with a fresh pass. package.json and the lockfile agree (npm ls --all is clean). allow-scripts list shows no unconfigured or stale entries, and no new packages have install scripts. Radix use in sheet.tsx/button.tsx is unaffected, and build, prettier and CI are green. LGTM.
Bumps the npm-deps group with 8 updates:
8.0.28.0.37.0.07.0.13.0.03.0.11.1.231.2.01.3.31.4.07.3.57.3.83.9.93.9.101.1.01.1.1Updates
@astrojs/mdxfrom 8.0.2 to 8.0.3Release notes
Sourced from @astrojs/mdx's releases.
Changelog
Sourced from @astrojs/mdx's changelog.
Commits
e4f8f46[ci] release (#18120)404014aUpdate dependency es-module-lexer to v3 (#18129)6987261Switch from js-yaml to yaml (#18099)Updates
@astrojs/reactfrom 7.0.0 to 7.0.1Release notes
Sourced from @astrojs/react's releases.
Changelog
Sourced from @astrojs/react's changelog.
Commits
e4f8f46[ci] release (#18120)f603c21Update dependency@babel/coreto v8 (#18106)Updates
@lavamoat/preinstall-always-failfrom 3.0.0 to 3.0.1Release notes
Sourced from @lavamoat/preinstall-always-fail's releases.
Changelog
Sourced from @lavamoat/preinstall-always-fail's changelog.
Commits
bb413d3chore: release main (#2123)faa08b9fix: update message on preinstall-always-fail (#2124)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@lavamoat/preinstall-always-failsince your current version.Install script changes
This version modifies
preinstallscript that runs during installation. Review the package contents before updating.Updates
@radix-ui/react-dialogfrom 1.1.23 to 1.2.0Changelog
Sourced from @radix-ui/react-dialog's changelog.
Commits
Updates
@radix-ui/react-slotfrom 1.3.3 to 1.4.0Changelog
Sourced from @radix-ui/react-slot's changelog.
Commits
Updates
astrofrom 7.3.5 to 7.3.8Release notes
Sourced from astro's releases.
... (truncated)
Changelog
Sourced from astro's changelog.
... (truncated)
Commits
3571e2d[ci] release (#18292)0e9e857Keep existing pnpm allowBuilds approvals in astro add (#18298)882dd98Replace esbuild with Vite and Rolldown APIs (#18263)28e7410fix(astro): provide Astro.cache when rendering error pages (#18293)31f13c3Fix glob() loader watcher ignoring patterns starting with an extglob like `!(...25c19fa[ci] release (#18272)38f6793fix(astro): approve workerd builds inastro add cloudflarefor pnpm v11+ an...547b572Restore content-type gate in security.checkOrigin so JSON requests are not bl...fcf6ed6fix(assets): return requested format from Sharp transform (#18222)bec7d18Ignorelayoutfrontmatter in Markdown content collection entries with `defe...Updates
prettierfrom 3.9.9 to 3.9.10Release notes
Sourced from prettier's releases.
Changelog
Sourced from prettier's changelog.
Commits
1172b82Release 3.9.10d014227Updatemicromark-extension-gfm-tableto fix the table parse issue on perfor...953b908Bump Prettier dependency to 3.9.9ad8a6bfClean changelog_unreleasedUpdates
prettier-plugin-astrofrom 1.1.0 to 1.1.1Release notes
Sourced from prettier-plugin-astro's releases.
Changelog
Sourced from prettier-plugin-astro's changelog.
Commits
27ad3efVersion Packages (#495)ee01a5dfix: Pass options to estree willPrintOwnComments (#494)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions