Skip to content

chore(deps): bump the github-actions group with 6 updates#1580

Merged
julien-deramond merged 1 commit intomainfrom
dependabot/npm_and_yarn/github-actions-40ff8df953
Apr 2, 2026
Merged

chore(deps): bump the github-actions group with 6 updates#1580
julien-deramond merged 1 commit intomainfrom
dependabot/npm_and_yarn/github-actions-40ff8df953

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 2, 2026

Bumps the github-actions group with 6 updates:

Package From To
@astrojs/vercel 10.0.3 10.0.4
astro 6.1.2 6.1.3
astro-og-canvas 0.10.1 0.11.0
dotenv 17.3.1 17.4.0
parse-github-url 1.0.3 1.0.4
vercel 50.38.1 50.38.2

Updates @astrojs/vercel from 10.0.3 to 10.0.4

Release notes

Sourced from @​astrojs/vercel's releases.

@​astrojs/vercel@​10.0.4

Patch Changes

  • #16170 d0fe1ec Thanks @​bittoby! - Fixes edge middleware next() dropping the HTTP method and body when forwarding requests to the serverless function, which caused non-GET API routes (POST, PUT, PATCH, DELETE) to return 404
Changelog

Sourced from @​astrojs/vercel's changelog.

10.0.4

Patch Changes

  • #16170 d0fe1ec Thanks @​bittoby! - Fixes edge middleware next() dropping the HTTP method and body when forwarding requests to the serverless function, which caused non-GET API routes (POST, PUT, PATCH, DELETE) to return 404
Commits

Updates astro from 6.1.2 to 6.1.3

Release notes

Sourced from astro's releases.

astro@6.1.3

Patch Changes

  • #16161 b51f297 Thanks @​matthewp! - Fixes a dev rendering issue with the Cloudflare adapter where head metadata could be missing and dev CSS/scripts could be injected in the wrong place

  • #16110 de669f0 Thanks @​tmimmanuel! - Fixes skew protection query parameters not being appended to inter-chunk JavaScript imports in client bundles, which could cause version mismatches during rolling deployments on Vercel

  • #16162 a0a49e9 Thanks @​rururux! - Fixes an issue where HMR would not trigger when modifying files while using @​astrojs/cloudflare with prerenderEnvironment: 'node' enabled.

  • #16142 7454854 Thanks @​rururux! - Fixes HTML content being incorrectly escaped as plain text when rendering a MDX component using the AstroContainer APIs.

  • #16116 12602a9 Thanks @​riderx! - Fixes a bug where page-level CSS could leak between unrelated pages when traversing style parents across top-level route boundaries

  • #16178 a7e7567 Thanks @​matthewp! - Fixes SSR builds failing with "No matching renderer found" when a project only has injected routes and no src/pages/ directory

Changelog

Sourced from astro's changelog.

6.1.3

Patch Changes

  • #16161 b51f297 Thanks @​matthewp! - Fixes a dev rendering issue with the Cloudflare adapter where head metadata could be missing and dev CSS/scripts could be injected in the wrong place

  • #16110 de669f0 Thanks @​tmimmanuel! - Fixes skew protection query parameters not being appended to inter-chunk JavaScript imports in client bundles, which could cause version mismatches during rolling deployments on Vercel

  • #16162 a0a49e9 Thanks @​rururux! - Fixes an issue where HMR would not trigger when modifying files while using @​astrojs/cloudflare with prerenderEnvironment: 'node' enabled.

  • #16142 7454854 Thanks @​rururux! - Fixes HTML content being incorrectly escaped as plain text when rendering a MDX component using the AstroContainer APIs.

  • #16116 12602a9 Thanks @​riderx! - Fixes a bug where page-level CSS could leak between unrelated pages when traversing style parents across top-level route boundaries

  • #16178 a7e7567 Thanks @​matthewp! - Fixes SSR builds failing with "No matching renderer found" when a project only has injected routes and no src/pages/ directory

Commits
  • b5b8093 [ci] release (#16159)
  • 7454854 fix(astro): Fix isHTMLString check failing in multi-realm environments (#16...
  • a7e7567 Include injected routes when determining whether renderers are needed in SSR ...
  • a0a49e9 fix(cloudflare): ensure HMR works when prerenderEnvironment is set to 'node...
  • b51f297 Preserve head metadata in Cloudflare dev rendering (#16161)
  • 4eec0f1 test: don't use tmp fixtures (#16177)
  • a9138ab [ci] format
  • 34b5f13 chore: move unit tests to ts (#16157)
  • 6b6751d [ci] format
  • de669f0 fix(core): append assetQueryParams to inter-chunk JS imports (#15964) (#16110)
  • Additional commits viewable in compare view

Updates astro-og-canvas from 0.10.1 to 0.11.0

Release notes

Sourced from astro-og-canvas's releases.

astro-og-canvas@0.11.0

Minor Changes

  • #157 91ac061 Thanks @​renovate! - Updates dependency entities to v8

    ⚠️ Potentially breaking change: The minimum supported Node version is now 20.19.0

Patch Changes

Changelog

Sourced from astro-og-canvas's changelog.

0.11.0

Minor Changes

  • #157 91ac061 Thanks @​renovate! - Updates dependency entities to v8

    ⚠️ Potentially breaking change: The minimum supported Node version is now 20.19.0

Patch Changes

Commits

Updates dotenv from 17.3.1 to 17.4.0

Changelog

Sourced from dotenv's changelog.

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)
Commits

Updates parse-github-url from 1.0.3 to 1.0.4

Changelog

Sourced from parse-github-url's changelog.

v1.0.4 - 2026-04-01

Commits

  • [Fix] deprecation of url.parse 771ffeb
  • [meta] remove unused file 74a03e6
  • [actions] update workflows 2aae57b
  • [meta] switch from files to npmignore d49444c
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape 8abcf5f
  • [meta] use npm audit instead of aud 01b50da
  • [Dev Deps] update npmignore ab4f0a8
  • [readme] replace runkit CI badge with shields.io check-runs badge c2fb7a9
Commits
  • 4c9189a v1.0.4
  • ab4f0a8 [Dev Deps] update npmignore
  • 771ffeb [Fix] deprecation of url.parse
  • 74a03e6 [meta] remove unused file
  • d49444c [meta] switch from files to npmignore
  • 2aae57b [actions] update workflows
  • 8abcf5f [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape
  • 01b50da [meta] use npm audit instead of aud
  • c2fb7a9 [readme] replace runkit CI badge with shields.io check-runs badge
  • See full diff in compare view

Updates vercel from 50.38.1 to 50.38.2

Release notes

Sourced from vercel's releases.

vercel@50.38.2

Patch Changes

  • Start user fetch earlier (#15760)

  • Fix update checker running after vercel build on Vercel by reading env vars before CLI internals can unset them (#15804)

  • Updated dependencies [c98a02d87276f41b1580b78d37f9f671fd9d1f12]:

    • @​vercel/build-utils@​13.12.2
    • @​vercel/backends@​0.0.55
    • @​vercel/elysia@​0.1.57
    • @​vercel/express@​0.1.67
    • @​vercel/fastify@​0.1.60
    • @​vercel/go@​3.4.7
    • @​vercel/h3@​0.1.66
    • @​vercel/hono@​0.2.60
    • @​vercel/hydrogen@​1.3.6
    • @​vercel/koa@​0.1.40
    • @​vercel/nestjs@​0.2.61
    • @​vercel/next@​4.16.4
    • @​vercel/node@​5.6.24
    • @​vercel/python@​6.29.0
    • @​vercel/redwood@​2.4.12
    • @​vercel/remix-builder@​5.7.2
    • @​vercel/ruby@​2.3.2
    • @​vercel/rust@​1.0.6
    • @​vercel/static-build@​2.9.8
Changelog

Sourced from vercel's changelog.

50.38.2

Patch Changes

  • Start user fetch earlier (#15760)

  • Fix update checker running after vercel build on Vercel by reading env vars before CLI internals can unset them (#15804)

  • Updated dependencies [c98a02d87276f41b1580b78d37f9f671fd9d1f12]:

    • @​vercel/build-utils@​13.12.2
    • @​vercel/backends@​0.0.55
    • @​vercel/elysia@​0.1.57
    • @​vercel/express@​0.1.67
    • @​vercel/fastify@​0.1.60
    • @​vercel/go@​3.4.7
    • @​vercel/h3@​0.1.66
    • @​vercel/hono@​0.2.60
    • @​vercel/hydrogen@​1.3.6
    • @​vercel/koa@​0.1.40
    • @​vercel/nestjs@​0.2.61
    • @​vercel/next@​4.16.4
    • @​vercel/node@​5.6.24
    • @​vercel/python@​6.29.0
    • @​vercel/redwood@​2.4.12
    • @​vercel/remix-builder@​5.7.2
    • @​vercel/ruby@​2.3.2
    • @​vercel/rust@​1.0.6
    • @​vercel/static-build@​2.9.8
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/vercel](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vercel) | `10.0.3` | `10.0.4` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `6.1.2` | `6.1.3` |
| [astro-og-canvas](https://github.com/delucis/astro-og-canvas/tree/HEAD/packages/astro-og-canvas) | `0.10.1` | `0.11.0` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.3.1` | `17.4.0` |
| [parse-github-url](https://github.com/jonschlinkert/parse-github-url) | `1.0.3` | `1.0.4` |
| [vercel](https://github.com/vercel/vercel/tree/HEAD/packages/cli) | `50.38.1` | `50.38.2` |


Updates `@astrojs/vercel` from 10.0.3 to 10.0.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vercel/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/vercel@10.0.4/packages/integrations/vercel)

Updates `astro` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@6.1.3/packages/astro)

Updates `astro-og-canvas` from 0.10.1 to 0.11.0
- [Release notes](https://github.com/delucis/astro-og-canvas/releases)
- [Changelog](https://github.com/delucis/astro-og-canvas/blob/latest/packages/astro-og-canvas/CHANGELOG.md)
- [Commits](https://github.com/delucis/astro-og-canvas/commits/astro-og-canvas@0.11.0/packages/astro-og-canvas)

Updates `dotenv` from 17.3.1 to 17.4.0
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.3.1...v17.4.0)

Updates `parse-github-url` from 1.0.3 to 1.0.4
- [Changelog](https://github.com/jonschlinkert/parse-github-url/blob/master/CHANGELOG.md)
- [Commits](jonschlinkert/parse-github-url@v1.0.3...v1.0.4)

Updates `vercel` from 50.38.1 to 50.38.2
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/vercel@50.38.2/packages/cli)

---
updated-dependencies:
- dependency-name: "@astrojs/vercel"
  dependency-version: 10.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: astro
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: astro-og-canvas
  dependency-version: 0.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: dotenv
  dependency-version: 17.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: parse-github-url
  dependency-version: 1.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: vercel
  dependency-version: 50.38.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 2, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 2, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
openresource-dev Ready Ready Preview, Comment Apr 2, 2026 8:04am

@julien-deramond julien-deramond merged commit 77887ce into main Apr 2, 2026
4 checks passed
@julien-deramond julien-deramond deleted the dependabot/npm_and_yarn/github-actions-40ff8df953 branch April 2, 2026 17:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant