[dependabot]

Bumps the npm-deps group with 8 updates:

Package	From	To
@astrojs/mdx	8.0.3	8.1.0
@astrojs/react	7.0.1	7.1.0
@radix-ui/react-dialog	1.2.0	1.3.1
@radix-ui/react-slot	1.4.0	1.5.0
astro	7.3.8	7.4.0
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
cspell	10.3.6	10.4.0

Updates @astrojs/mdx from 8.0.3 to 8.1.0

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​8.1.0

Minor Changes

• #18277 2715958 Thanks @​florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

  The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Patch Changes

• Updated dependencies [b7a1bd9]:
  • @​astrojs/internal-helpers@​0.13.0
  • @​astrojs/markdown-satteri@​0.4.4

Changelog

Sourced from @​astrojs/mdx's changelog.

8.1.0

Minor Changes

• #18277 2715958 Thanks @​florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

  The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Patch Changes

• Updated dependencies [b7a1bd9]:
  • @​astrojs/internal-helpers@​0.13.0
  • @​astrojs/markdown-satteri@​0.4.4

Commits

• c2c43a9 [ci] release (#18354)
• 83f5f4d Update dependency vite to ^8.3.4 (#18393)
• c96d07e Update dependency preact to v11 (#18389)
• 2715958 feat: increase minimum Node.js version to 22.22.0 (#18277)
• 5646f43 Update dependency vite to ^8.3.3 (#18321)
• eee0d19 Update markdown (#18302)
• e5eae02 Update markdown (#18280)
• See full diff in compare view

Updates @astrojs/react from 7.0.1 to 7.1.0

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​7.1.0

Minor Changes

• #18277 2715958 Thanks @​florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

  The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Patch Changes

• Updated dependencies [b7a1bd9]:
  • @​astrojs/internal-helpers@​0.13.0

Changelog

Sourced from @​astrojs/react's changelog.

7.1.0

Minor Changes

• #18277 2715958 Thanks @​florian-lefebvre! - Increases the minimum Node.js version to 22.22.0

  The minimum supported Node.js version is now 22.22.0, the latest Node.js 22 release supported by StackBlitz. This change is in line with Astro's Node.js support policy.

Patch Changes

• Updated dependencies [b7a1bd9]:
  • @​astrojs/internal-helpers@​0.13.0

Commits

• c2c43a9 [ci] release (#18354)
• 83f5f4d Update dependency vite to ^8.3.4 (#18393)
• 5c48d3b Update dependency devalue to v6 (#18385)
• 2715958 feat: increase minimum Node.js version to 22.22.0 (#18277)
• a542a1e Update dependency @​babel/core to ^8.0.7 (#18373)
• 5646f43 Update dependency vite to ^8.3.3 (#18321)
• 5f8082b Update react monorepo to v19 (#18315)
• 41b04f4 Update @​astrojs/react (#18308)
• See full diff in compare view

Updates @radix-ui/react-dialog from 1.2.0 to 1.3.1

Changelog

Sourced from @​radix-ui/react-dialog's changelog.

1.3.1

• Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.
• Updated dependencies: @radix-ui/react-dismissable-layer@1.2.1, @radix-ui/react-focus-scope@1.3.1

1.3.0

• Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.
• Updated dependencies: @radix-ui/primitive@1.2.0, @radix-ui/react-context@1.3.0, @radix-ui/react-dismissable-layer@1.2.0, @radix-ui/react-focus-guards@1.2.0, @radix-ui/react-focus-scope@1.3.0, @radix-ui/react-portal@1.2.0, @radix-ui/react-primitive@2.2.0, @radix-ui/react-slot@1.5.0, @radix-ui/react-use-controllable-state@1.3.0

Commits

• See full diff in compare view

Updates @radix-ui/react-slot from 1.4.0 to 1.5.0

Changelog

Sourced from @​radix-ui/react-slot's changelog.

1.5.0

• Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.
• Fixed Slot throwing when an asChild child is a lazy reference whose resolved value is itself a lazy reference.

Commits

• See full diff in compare view

Updates astro from 7.3.8 to 7.4.0

Release notes

Sourced from astro's releases.

astro@7.4.0

Minor Changes

• #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

  When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

  astro build --timings

  This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

  Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

  All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

  import type { FontProvider } from 'astro';
  const provider: FontProvider = {
  name: 'my-provider',
  resolveFont: ({ familyName }) => {
  // ...
  },
  getFontProperties: ({ familyName }) => ({
  weights: ['400', '700'],
  styles: ['normal', 'italic'],
  subsets: ['latin'],
  formats: ['woff2'],
  }),
  };

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

  This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

  import type { FontProvider } from 'astro';
  import type { InitializedProvider } from 'unifont';
  import { acmeProvider } from '@acme/unifont-provider';
  export function acmeFontProvider(): FontProvider {
  const provider = acmeProvider();
  let initializedProvider: InitializedProvider | undefined;
  return {
  name: provider._name,

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.0

Minor Changes

• #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

  When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

  astro build --timings

  This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

  Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

  All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

  import type { FontProvider } from 'astro';
  const provider: FontProvider = {
  name: 'my-provider',
  resolveFont: ({ familyName }) => {
  // ...
  },
  getFontProperties: ({ familyName }) => ({
  weights: ['400', '700'],
  styles: ['normal', 'italic'],
  subsets: ['latin'],
  formats: ['woff2'],
  }),
  };

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

  This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

  import type { FontProvider } from 'astro';
  import type { InitializedProvider } from 'unifont';
  import { acmeProvider } from '@acme/unifont-provider';
  export function acmeFontProvider(): FontProvider {
  const provider = acmeProvider();
  let initializedProvider: InitializedProvider | undefined;
  return {

... (truncated)

Commits

• c2c43a9 [ci] release (#18354)
• f698e18 fix(astro): ignore image.service overrides with only undefined values (#18383)
• 83f5f4d Update dependency vite to ^8.3.4 (#18393)
• 858938a Update astro (#18390)
• 1f04637 feat: use tinyps for process finding (#18368)
• c96d07e Update dependency preact to v11 (#18389)
• f8cf143 Update dependency rolldown to ^1.2.13 (#18388)
• 5c48d3b Update dependency devalue to v6 (#18385)
• 71e2b24 feat: treat Vite's resolved outDir values as the source of truth for build ou...
• a937b0d feat(fonts): warn on invalid properties (#17830)
• Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

Commits

• 61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
• See full diff in compare view

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

Commits

• 61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
• See full diff in compare view

Updates cspell from 10.3.6 to 10.4.0

Release notes

Sourced from cspell's releases.

v10.4.0

Features

feat: Add --glob-symlinks to follow symbolic links when matching globs (#9342)

Summary

cspell lint can now follow symbolic links in glob searches, with --glob-symlinks. Glob searches skip linked files and linked directories by default, so a tree made of links, such as Bazel runfiles, found nothing to check.

Closes #7700.

Feature

cspell lint --glob-symlinks "**"

• --glob-symlinks follows symbolic links, and searches linked directories, when matching globs. Links are followed wherever they point.
• CSPELL_GLOB_SYMLINKS=true does the same for a whole job. --no-glob-symlinks overrides it.
• API: globSymlinks in the lint options.
• It can't be set in a configuration file.
• Files are reported by the path through the link. A file reached by two paths is checked under both.
• It applies only to glob searches. For --file, --files, and --file-list documents, use --follow-symlinks.

• The design decisions are recorded in docs/ADRs/glob-symlinks/.
• Link loops, such as a link to a parent directory, are stopped by the glob search after one level.

---

feat: Respect COLUMNS for help and table width (#9358)

Summary

Help, and the tables from cspell trace and cspell dictionaries, now follow the COLUMNS environment variable. That lets you choose a narrower width, which helps with large fonts and screen magnifiers. The help in the cspell README now fits on npmjs.com without scrolling sideways.

Feature

Set COLUMNS to pick the output width:

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.4.0 (2026-10-14)

Features

feat: Add --glob-symlinks to follow symbolic links when matching globs (#9342)

Summary

cspell lint can now follow symbolic links in glob searches, with --glob-symlinks. Glob searches skip linked files and linked directories by default, so a tree made of links, such as Bazel runfiles, found nothing to check.

Closes #7700.

Feature

cspell lint --glob-symlinks "**"

• --glob-symlinks follows symbolic links, and searches linked directories, when matching globs. Links are followed wherever they point.
• CSPELL_GLOB_SYMLINKS=true does the same for a whole job. --no-glob-symlinks overrides it.
• API: globSymlinks in the lint options.
• It can't be set in a configuration file.
• Files are reported by the path through the link. A file reached by two paths is checked under both.
• It applies only to glob searches. For --file, --files, and --file-list documents, use --follow-symlinks.

• The design decisions are recorded in docs/ADRs/glob-symlinks/.
• Link loops, such as a link to a parent directory, are stopped by the glob search after one level.

---

feat: Respect COLUMNS for help and table width (#9358)

Summary

Help, and the tables from cspell trace and cspell dictionaries, now follow the COLUMNS environment variable. That lets you choose a narrower width, which helps with large fonts and screen magnifiers. The help in the cspell README now fits on npmjs.com without scrolling sideways.

Feature

... (truncated)

Commits

• 7e2bbb5 v10.4.0
• d2dce3f chore: Prepare Release v10.4.0 (auto-deploy) (#9380)
• a1509fe chore: Fix the README build after the inject-markdown 6 upgrade (#9429)
• ab3ae04 fix: Workflow Bot -- Update Dictionaries (main) (#9405)
• 55c0fbd fix: Show hidden lint options and issue template help in cspell --help (#9387)
• 628768a v10.4.0-alpha.1
• 998957b chore: Prepare Release v10.4.0-alpha.1 (auto-deploy) (#9378)
• 4c287f5 fix: Deprecate cspell-lib/rpc; import from @cspell/rpc (#9376)
• 7be53ce chore: Prepare Release v10.4.0-alpha.0 (auto-deploy) (#9332)
• e3b5887 chore: Update README.md (#9368)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

🐦 Preview of b4d2901: https://shorebird-website--pr-425-zwnz1fuw.web.app (expires in 7 days)

[AbhishekDoshi26]

Reviewed. No blocking issues.

• astro 7.4.0, @astrojs/mdx 8.1.0 and @astrojs/react 7.1.0 raise the minimum Node.js to 22.22.0. CI uses Node 24.x, the Dockerfile uses node:lts, and Firebase Hosting serves static files only, so every environment already meets it.
• The release notes show no other breaking changes that affect this repo. The custom font provider callback and cspell-lib/rpc changes don't apply here.
• Checked locally: npm ci, format:check, cspell, build (92 pages, firebase.json unchanged) and check:links all pass.
• npm audit: this removes the high-severity http-cache-semantics advisory.