Skip to content

chore(deps): bump the major group across 4 directories with 7 updates#509

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/major-e10dc9c5a3
Closed

chore(deps): bump the major group across 4 directories with 7 updates#509
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/major-e10dc9c5a3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026 •
edited
Loading

Bumps the major group with 7 updates in the / directory:

Package From To
eslint-stylistic-airbnb 2.0.1 3.0.2
ai 5.0.161 6.0.141
typescript 5.9.3 6.0.2
@astrojs/mdx 4.3.14 5.0.3
@astrojs/vue 5.1.4 6.0.1
astro 5.18.1 6.1.1
vite 7.3.1 8.0.3

Bumps the major group with 2 updates in the /packages/varlock-docs-mcp directory: ai and typescript.
Bumps the major group with 3 updates in the /packages/varlock-website directory: @astrojs/mdx, @astrojs/vue and astro.
Bumps the major group with 1 update in the /packages/integrations/vite directory: vite.

Updates eslint-stylistic-airbnb from 2.0.1 to 3.0.2

Release notes

Sourced from eslint-stylistic-airbnb's releases.

v3.0.2

compare changes

🩹 Fixes

  • Remove missing config type definitions (4c3e05a)

📖 Documentation

  • Add flat/addon-vue-ts config for vuejs+ts example (2878501)
  • Add global ignores config to templates (707c609)
  • Add IDE configuration and formatting sections (06c0fd9)

❤️ Contributors

v3.0.1

compare changes

🤖 CI

  • Use latest pnpm 10 for publish action (acb6c3e)

❤️ Contributors

v3.0.0

compare changes

🩹 Fixes

  • Remove missing module entries (6078c8e)

📖 Documentation

🤖 CI

❤️ Contributors

v3.0.0-rc.3

... (truncated)

Changelog

Sourced from eslint-stylistic-airbnb's changelog.

v3.0.2

compare changes

🩹 Fixes

  • Remove missing config type definitions (4c3e05a)

📖 Documentation

  • Add flat/addon-vue-ts config for vuejs+ts example (2878501)
  • Add global ignores config to templates (707c609)
  • Add IDE configuration and formatting sections (06c0fd9)

❤️ Contributors

v3.0.1

compare changes

🤖 CI

  • Use latest pnpm 10 for publish action (acb6c3e)

❤️ Contributors

v3.0.0

compare changes

🩹 Fixes

  • Remove missing module entries (6078c8e)

📖 Documentation

🤖 CI

❤️ Contributors

... (truncated)

Commits
  • 709d3e6 chore(release): v3.0.2
  • 06c0fd9 docs: add IDE configuration and formatting sections
  • 4c3e05a fix: remove missing config type definitions
  • 707c609 docs: add global ignores config to templates
  • 2878501 docs: add flat/addon-vue-ts config for vuejs+ts example
  • 7c82a87 chore(release): v3.0.1
  • acb6c3e ci: use latest pnpm 10 for publish action
  • 8c7de0f chore(release): v3.0.0
  • 2d639df ci: add publish action
  • 05b2f85 docs: fix typos
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for eslint-stylistic-airbnb since your current version.


Updates ai from 5.0.161 to 6.0.141

Release notes

Sourced from ai's releases.

ai@6.0.141

Patch Changes

  • Updated dependencies [768a9d6]
    • @​ai-sdk/gateway@​3.0.83

ai@6.0.140

Patch Changes

  • Updated dependencies [95fedf0]
    • @​ai-sdk/gateway@​3.0.82

ai@6.0.139

Patch Changes

  • Updated dependencies [e69062d]
    • @​ai-sdk/gateway@​3.0.81

ai@6.0.138

Patch Changes

  • Updated dependencies [0db5cd8]
    • @​ai-sdk/gateway@​3.0.80
Commits

Updates typescript from 5.9.3 to 6.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits

Updates @astrojs/mdx from 4.3.14 to 5.0.3

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​5.0.3

Patch Changes

  • Updated dependencies [10a1a5a]:
    • @​astrojs/markdown-remark@​7.1.0

@​astrojs/mdx@​5.0.2

Patch Changes

  • #15864 d3c7de9 Thanks @​florian-lefebvre! - Removes temporary support for Node >=20.19.1 because Stackblitz now uses Node 22 by default

  • Updated dependencies []:

    • @​astrojs/markdown-remark@​7.0.1

@​astrojs/mdx@​5.0.1

Patch Changes

@​astrojs/mdx@​5.0.0

Major Changes

Patch Changes

Changelog

Sourced from @​astrojs/mdx's changelog.

5.0.3

Patch Changes

  • Updated dependencies [10a1a5a]:
    • @​astrojs/markdown-remark@​7.1.0

5.0.2

Patch Changes

  • #15864 d3c7de9 Thanks @​florian-lefebvre! - Removes temporary support for Node >=20.19.1 because Stackblitz now uses Node 22 by default

  • Updated dependencies []:

    • @​astrojs/markdown-remark@​7.0.1

5.0.1

Patch Changes

5.0.0

Major Changes

Patch Changes

5.0.0-beta.12

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​7.0.0-beta.11

... (truncated)

Commits

Updates @astrojs/vue from 5.1.4 to 6.0.1

Release notes

Sourced from @​astrojs/vue's releases.

@​astrojs/vue@​6.0.1

Patch Changes

@​astrojs/vue@​6.0.0

Major Changes

Minor Changes

  • #15425 0317e99 Thanks @​ocavue! - Updates @vitejs/plugin-vue to v6, @vitejs/plugin-vue-jsx to v5, and vite-plugin-vue-devtools to v8. No changes are needed from users.

Patch Changes

Changelog

Sourced from @​astrojs/vue's changelog.

6.0.1

Patch Changes

6.0.0

Major Changes

Minor Changes

  • #15425 0317e99 Thanks @​ocavue! - Updates @vitejs/plugin-vue to v6, @vitejs/plugin-vue-jsx to v5, and vite-plugin-vue-devtools to v8. No changes are needed from users.

Patch Changes

6.0.0-beta.1

Minor Changes

  • #15425 0317e99 Thanks @​ocavue! - Updates @vitejs/plugin-vue to v6, @vitejs/plugin-vue-jsx to v5, and vite-plugin-vue-devtools to v8. No changes are needed from users.

6.0.0-beta.0

Patch Changes

6.0.0-alpha.1

Patch Changes

  • #15045 31074fc Thanks @​ematipico! - Fixes an issue where using the Vue integration with the Cloudflare adapter resulted in some runtime errors.

6.0.0-alpha.0

Major Changes

Patch Changes

Commits

Updates astro from 5.18.1 to 6.1.1

Release notes

Sourced from astro's releases.

astro@6.1.1

Patch Changes

astro@6.1.0

Minor Changes

  • #15804 a5e7232 Thanks @​merlinnot! - Allows setting codec-specific defaults for Astro's built-in Sharp image service via image.service.config.

    You can now configure encoder-level options such as jpeg.mozjpeg, webp.effort, webp.alphaQuality, avif.effort, avif.chromaSubsampling, and png.compressionLevel when using astro/assets/services/sharp for compile-time image generation.

    These settings apply as defaults for the built-in Sharp pipeline, while per-image quality still takes precedence when set on <Image />, <Picture />, or getImage().

  • #15455 babf57f Thanks @​AhmadYasser1! - Adds fallbackRoutes to the IntegrationResolvedRoute type, exposing i18n fallback routes to integrations via the astro:routes:resolved hook for projects using fallbackType: 'rewrite'.

    This allows integrations such as the sitemap integration to properly include generated fallback routes in their output.

    {
  'astro:routes:resolved': ({ routes }) => {
    for (const route of routes) {
      for (const fallback of route.fallbackRoutes) {
        console.log(fallback.pathname) // e.g. /fr/about/
      }
    }
  }
}

  • #15340 10a1a5a Thanks @​trueberryless! - Adds support for advanced configuration of SmartyPants in Markdown.

    You can now pass an options object to markdown.smartypants in your Astro configuration to fine-tune how punctuation, dashes, and quotes are transformed.

    This is helpful for projects that require specific typographic standards, such as "oldschool" dash handling or localized quotation marks.

    // astro.config.mjs
export default defineConfig({
  markdown: {
    smartypants: {
      backticks: 'all',
      dashes: 'oldschool',
      ellipses: 'unspaced',
      openingQuotes: { double: '«', single: '‹' },
      closingQuotes: { double: '»', single: '›' },
      quotes: false,
    },

... (truncated)

Changelog

Sourced from astro's changelog.

6.1.1

Patch Changes

6.1.0

Minor Changes

  • #15804 a5e7232 Thanks @​merlinnot! - Allows setting codec-specific defaults for Astro's built-in Sharp image service via image.service.config.

    You can now configure encoder-level options such as jpeg.mozjpeg, webp.effort, webp.alphaQuality, avif.effort, avif.chromaSubsampling, and png.compressionLevel when using astro/assets/services/sharp for compile-time image generation.

    These settings apply as defaults for the built-in Sharp pipeline, while per-image quality still takes precedence when set on <Image />, <Picture />, or getImage().

  • #15455 babf57f Thanks @​AhmadYasser1! - Adds fallbackRoutes to the IntegrationResolvedRoute type, exposing i18n fallback routes to integrations via the astro:routes:resolved hook for projects using fallbackType: 'rewrite'.

    This allows integrations such as the sitemap integration to properly include generated fallback routes in their output.

    {
  'astro:routes:resolved': ({ routes }) => {
    for (const route of routes) {
      for (const fallback of route.fallbackRoutes) {
        console.log(fallback.pathname) // e.g. /fr/about/
      }
    }
  }
}

  • #15340 10a1a5a Thanks @​trueberryless! - Adds support for advanced configuration of SmartyPants in Markdown.

    You can now pass an options object to markdown.smartypants in your Astro configuration to fine-tune how punctuation, dashes, and quotes are transformed.

    This is helpful for projects that require specific typographic standards, such as "oldschool" dash handling or localized quotation marks.

    // astro.config.mjs
export default defineConfig({
  markdown: {
    smartypants: {
      backticks: 'all',
      dashes: 'oldschool',
      ellipses: 'unspaced',
      openingQuotes: { double: '«', single: '‹' },
      closingQuotes: { double: '»', single: '›' },

... (truncated)

Commits

Updates vite from 7.3.1 to 8.0.3

Release notes

Sourced from vite's releases.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

create-vite@8.0.2

Please refer to CHANGELOG.md for details.

v8.0.2

Please refer to CHANGELOG.md for details.

create-vite@8.0.1

Please refer to CHANGELOG.md for details.

v8.0.1

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.1

Please refer to CHANGELOG.md for details.

create-vite@8.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0-beta.18

Please refer to CHANGELOG.md for details.

v8.0.0-beta.17

Please refer to CHANGELOG.md for details.

v8.0.0-beta.16

Please refer to CHANGELOG.md for details.

v8.0.0-beta.15

Please refer to CHANGELOG.md for details.

v8.0.0-beta.14

Please refer to CHANGELOG.md for details.

v8.0.0-beta.13

Please refer to CHANGELOG.md for details.

v8.0.0-beta.12

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.3 (2026-03-26)

Features

Bug Fixes

  • html: cache unfiltered CSS list to prevent missing styles across entries (#22017) (5464190)
  • module-runner: handle non-ascii characters in base64 sourcemaps (#21985) (77c95bf)
  • module-runner: skip re-import if the runner is closed (#22020) (ee2c2cd)
  • optimizer: scan is not resolving sub path import if used in a glob import (#22018) (ddfe20d)
  • ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#22019) (cff5f0c)

Miscellaneous Chores

Tests

8.0.2 (2026-03-23)

Features

Bug Fixes

Miscellaneous Chores

  • deps: update dependency @​vitejs/devtools to ^0.1.5 (#21992) (b2dd65b)

8.0.1 (2026-03-19)

Features

Bug Fixes

  • bundled-dev: properly disable inlineConst optimization (#21865) (6d97142)
  • css: lightningcss minify failed when build.target: 'es6' (#21933) (5fcce46)
  • deps: update all non-major dependencies (#21878) (6dbbd7f)
  • dev: always use ESM Oxc runtime (#21829) (d323ed7)
  • dev: handle concurrent restarts in _createServer (#21810) (40bc729)
  • handle + symbol in package subpath exports during dep optimization (#21886) (86db93d)
  • improve no-cors request block error (#21902) (5ba688b)
  • use precise regexes for transform filter to avoid backtracking (#21800) (dbe41bd)
  • worker: require(json) result should not be wrapped (#21847) (0672fd2)

... (truncated)

Commits
  • f83264f refactor(build): rename indexOfMatchInSlice to findPreloadMarker (#21054)
  • 8293de0 release: v7.2.0
  • 2833c55 fix(types): add undefined to optional properties for exactOptionalProperties ...
  • e3a6a83 chore(deps): update rolldown-related dependencies (#21047)
  • b1fd616 fix(css): fallback to sass when sass-embedded platform binary is missing (#21...
  • ad5b3bf fix(module-runner): make getBuiltins response JSON serializable (#21029)
  • 793baa2 release: v7.2.0-beta.1
  • e5af352 fix(optimizer): externalize virtual modules for html like files (#21001)
  • 4f44f22 fix: increase stream reset rate limit for HTTP2 (#21024)
  • a2df778 refactor: use fs.cpSync (#21019)
  • Additional commits viewable in ...

    Description has been truncated

@dependabot
chore(deps): bump the major group across 4 directories with 7 updates
71cbc61 
Bumps the major group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [eslint-stylistic-airbnb](https://github.com/Solant/eslint-stylistic-airbnb) | `2.0.1` | `3.0.2` |
| [ai](https://github.com/vercel/ai) | `5.0.161` | `6.0.141` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.2` |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `4.3.14` | `5.0.3` |
| [@astrojs/vue](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vue) | `5.1.4` | `6.0.1` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.18.1` | `6.1.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.1` | `8.0.3` |

Bumps the major group with 2 updates in the /packages/varlock-docs-mcp directory: [ai](https://github.com/vercel/ai) and [typescript](https://github.com/microsoft/TypeScript).
Bumps the major group with 3 updates in the /packages/varlock-website directory: [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx), [@astrojs/vue](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vue) and [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro).
Bumps the major group with 1 update in the /packages/integrations/vite directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `eslint-stylistic-airbnb` from 2.0.1 to 3.0.2
- [Release notes](https://github.com/Solant/eslint-stylistic-airbnb/releases)
- [Changelog](https://github.com/Solant/eslint-stylistic-airbnb/blob/master/CHANGELOG.md)
- [Commits](Solant/eslint-stylistic-airbnb@v2.0.1...v3.0.2)

Updates `ai` from 5.0.161 to 6.0.141
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@5.0.161...ai@6.0.141)

Updates `typescript` from 5.9.3 to 6.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.2)

Updates `@astrojs/mdx` from 4.3.14 to 5.0.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@5.0.3/packages/integrations/mdx)

Updates `@astrojs/vue` from 5.1.4 to 6.0.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vue/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/vue@6.0.1/packages/integrations/vue)

Updates `astro` from 5.18.1 to 6.1.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@6.1.1/packages/astro)

Updates `vite` from 7.3.1 to 8.0.3
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.3/packages/vite)

Updates `ai` from 5.0.161 to 6.0.141
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@5.0.161...ai@6.0.141)

Updates `typescript` from 5.9.3 to 6.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.2)

Updates `@astrojs/mdx` from 4.3.14 to 5.0.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@5.0.3/packages/integrations/mdx)

Updates `@astrojs/vue` from 5.1.4 to 6.0.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vue/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/vue@6.0.1/packages/integrations/vue)

Updates `astro` from 5.18.1 to 6.1.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@6.1.1/packages/astro)

Updates `vite` from 7.3.1 to 8.0.3
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.3/packages/vite)

---
updated-dependencies:
- dependency-name: eslint-stylistic-airbnb
  dependency-version: 3.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: ai
  dependency-version: 6.0.141
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: typescript
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@astrojs/mdx"
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@astrojs/vue"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: astro
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: vite
  dependency-version: 8.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: ai
  dependency-version: 6.0.141
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: typescript
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@astrojs/mdx"
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@astrojs/vue"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: astro
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: vite
  dependency-version: 8.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 30, 2026
@dependabot dependabot bot mentioned this pull request Mar 30, 2026
Closed
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Mar 30, 2026

⚠️ No Changeset found

Latest commit: 71cbc61

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages bot commented Mar 30, 2026

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
🔵 In progress
View logs		 varlock-docs-mcp 71cbc61 Mar 30 2026, 02:42 PM

@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages bot commented Mar 30, 2026 •
edited
Loading

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs		 varlock-website 71cbc61 Mar 30 2026, 02:42 PM

@socket-security
Copy link
Copy Markdown

socket-security bot commented Mar 30, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addedremark-custom-header-id@​1.0.0701008476100
Addedstarlight-llms-txt@​0.6.1841007491100
Addedastro-iconify@​1.2.07610010080100
Addedast-matcher@​1.2.07710010080100
Addedastro-robots-txt@​1.0.09610010080100
Added@​astrojs/​partytown@​2.1.61001008090100
Added@​astrojs/​vue@​6.0.11001008195100
Added@​astrojs/​sitemap@​3.7.21001008295100
Addedvite@​8.0.3941008299100
Added@​astrojs/​mdx@​5.0.3991008397100
Added@​astrojs/​starlight@​0.37.7991008596100
Addedcanvaskit-wasm@​0.40.010010010086100
Addedastro-og-canvas@​0.7.29610010087100
Addedvue@​3.5.311001009197100

View full report

@socket-security
Copy link
Copy Markdown

socket-security bot commented Mar 30, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm svgo is 91.0% likely obfuscated

Confidence: 0.91

Location: Package overview

From: ? → npm/astro-iconify@1.2.0 → npm/svgo@3.3.3

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/svgo@3.3.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm vite is 91.0% likely obfuscated

Confidence: 0.91

Location: Package overview

From: ? → npm/starlight-llms-txt@0.6.1 → npm/@astrojs/starlight@0.37.7 → npm/@astrojs/vue@6.0.1 → npm/astro@6.1.1 → npm/astro-og-canvas@0.7.2 → npm/vite@6.4.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/vite@6.4.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm vite is 91.0% likely obfuscated

Confidence: 0.91

Location: Package overview

From: packages/integrations/vite/package.json → npm/vite@8.0.3

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/vite@8.0.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 30, 2026

Superseded by #514.

@dependabot dependabot bot closed this Mar 30, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/major-e10dc9c5a3 branch March 30, 2026 20:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

community core:docs-mcp core:website dependencies Pull requests that update a dependency file integration:vite javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants