Skip to content

chore(deps-dev): bump the astro group with 2 updates#6041

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/astro-33c757ce4b
Closed

chore(deps-dev): bump the astro group with 2 updates#6041
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/astro-33c757ce4b

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026

Bumps the astro group with 2 updates: @astrojs/mdx and astro.

Updates @astrojs/mdx from 6.0.0 to 6.0.1

Changelog

Sourced from @​astrojs/mdx's changelog.

6.0.1

Patch Changes

  • Updated dependencies [eeb064c]:
    • @​astrojs/markdown-satteri@​0.2.1
Commits

Updates astro from 6.4.0 to 6.4.2

Release notes

Sourced from astro's releases.

astro@6.4.2

Patch Changes

  • #16889 b94bcfd Thanks @​Princesseuh! - Fixes a plugins is not iterable crash when using a pre-6.0 @astrojs/mdx alongside integrations (e.g. Starlight) that set markdown.remarkPlugins, markdown.rehypePlugins, or markdown.remarkRehype.

  • #16878 b9f6bb9 Thanks @​fkatsuhiro! - Fixes an issue where on-demand (SSR) dynamic routes would return 404 when a prerendered dynamic route with the same URL pattern was sorted first alphabetically. In production builds with @astrojs/node adapter, if [a_prebuild].astro (prerender=true) came before [b_ssr].astro alphabetically, requests to URLs not in the prerendered route's static paths would 404 instead of falling through to the SSR route. The fix adds fallthrough logic so that when a prerendered dynamic route matches but can't serve the request, Astro tries subsequent matching routes.

Changelog

Sourced from astro's changelog.

6.4.2

Patch Changes

  • #16889 b94bcfd Thanks @​Princesseuh! - Fixes a plugins is not iterable crash when using a pre-6.0 @astrojs/mdx alongside integrations (e.g. Starlight) that set markdown.remarkPlugins, markdown.rehypePlugins, or markdown.remarkRehype.

  • #16878 b9f6bb9 Thanks @​fkatsuhiro! - Fixes an issue where on-demand (SSR) dynamic routes would return 404 when a prerendered dynamic route with the same URL pattern was sorted first alphabetically. In production builds with @astrojs/node adapter, if [a_prebuild].astro (prerender=true) came before [b_ssr].astro alphabetically, requests to URLs not in the prerendered route's static paths would 404 instead of falling through to the SSR route. The fix adds fallthrough logic so that when a prerendered dynamic route matches but can't serve the request, Astro tries subsequent matching routes.

6.4.1

Patch Changes

  • #16883 eeb064c Thanks @​Princesseuh! - Restores the astro/jsx/rehype.js entry point so that older versions of @astrojs/mdx continue to work when used with Astro 6.x. This entry point will be removed in Astro 7.0.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the astro group with 2 updates: [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) and [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro).


Updates `@astrojs/mdx` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@6.0.1/packages/integrations/mdx)

Updates `astro` from 6.4.0 to 6.4.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@6.4.2/packages/astro)

---
updated-dependencies:
- dependency-name: "@astrojs/mdx"
  dependency-version: 6.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: astro
- dependency-name: astro
  dependency-version: 6.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: astro
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies javascript Pull requests that update Javascript code labels Jun 1, 2026
@netlify
Copy link
Copy Markdown

netlify Bot commented Jun 1, 2026

Deploy Preview for adminlte-v4 ready!

Name Link
🔨 Latest commit 542937c
🔍 Latest deploy log https://app.netlify.com/projects/adminlte-v4/deploys/6a1d13fcd9667c000820dc43
😎 Deploy Preview https://deploy-preview-6041--adminlte-v4.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

puikinsh added a commit that referenced this pull request Jun 5, 2026
Routine refresh; all bumps are patch/minor within the current major and
dev-only. Build output (dist/js, dist/css) is byte-identical.

- astro 6.4.0 -> 6.4.4
- @astrojs/mdx 6.0.0 -> 6.0.2
- eslint 10.4.0 -> 10.4.1
- @typescript-eslint/eslint-plugin + parser + typescript-eslint
  8.60.0 -> 8.60.1
- concurrently 10.0.0 -> 10.0.3
- rollup 4.60.4 -> 4.61.1

Add an axios override to 0.32.0: bundlewatch pins the unmaintained
axios ^0.31.1, which carries 2 advisories (NO_PROXY bypass and a
prototype-pollution DoS). 0.32.0 is the patched 0.x release and stays
API-compatible, so npm audit now reports 0 vulnerabilities.

Supersedes Dependabot PRs #6040, #6041, #6042 (those target versions
older than current latest). Lint + full production build pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Jun 5, 2026

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 5, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/astro-33c757ce4b branch June 5, 2026 11:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants