Skip to content

chore(deps): bump the minor group across 5 directories with 8 updates#605

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-d768704324
Closed

chore(deps): bump the minor group across 5 directories with 8 updates#605
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-d768704324

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 13, 2026 •
edited
Loading

Bumps the minor group with 8 updates in the / directory:

Package From To
@changesets/get-github-info 0.7.0 0.8.0
gunshi 0.28.2 0.29.4
@modelcontextprotocol/sdk 1.23.0 1.29.0
agents 0.2.35 0.10.1
@astrojs/starlight 0.37.7 0.38.3
astro-og-canvas 0.7.2 0.11.0
canvaskit-wasm 0.40.0 0.41.1
starlight-llms-txt 0.6.1 0.8.0

Bumps the minor group with 1 update in the /packages/changeset-changelog directory: @changesets/get-github-info.
Bumps the minor group with 1 update in the /packages/varlock directory: gunshi.
Bumps the minor group with 2 updates in the /packages/varlock-docs-mcp directory: @modelcontextprotocol/sdk and agents.
Bumps the minor group with 4 updates in the /packages/varlock-website directory: @astrojs/starlight, astro-og-canvas, canvaskit-wasm and starlight-llms-txt.

Updates @changesets/get-github-info from 0.7.0 to 0.8.0

Release notes

Sourced from @​changesets/get-github-info's releases.

@​changesets/get-github-info@​0.8.0

Minor Changes

  • #1758 e462d89 Thanks @​jdeniau! - Add scopes automatically in the GitHub new token link in the printed error message

Patch Changes

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​changesets/get-github-info since your current version.


Updates gunshi from 0.28.2 to 0.29.4

Release notes

Sourced from gunshi's releases.

v0.29.4

What's Changed

🐛 Bug Fixes

Full Changelog: kazupon/gunshi@v0.29.3...v0.29.4

v0.29.3

Full Changelog: kazupon/gunshi@v0.29.2...v0.29.3

v0.29.2

Full Changelog: kazupon/gunshi@v0.29.1...v0.29.2

v0.29.1

Full Changelog: kazupon/gunshi@v0.29.0...v0.29.1

v0.29.0

What's Changed

🌟 Features

Full Changelog: kazupon/gunshi@v0.28.2...v0.29.0

Changelog

Sourced from gunshi's changelog.

v0.29.4 (2026-04-09T06:58:18Z)

This changelog is generated by GitHub Releases

What's Changed

🐛 Bug Fixes

Full Changelog: kazupon/gunshi@v0.29.3...v0.29.4

v0.29.3 (2026-03-11T08:53:31Z)

This changelog is generated by GitHub Releases

Full Changelog: kazupon/gunshi@v0.29.2...v0.29.3

v0.29.2 (2026-02-21T14:05:58Z)

This changelog is generated by GitHub Releases

Full Changelog: kazupon/gunshi@v0.29.1...v0.29.2

v0.29.1 (2026-02-21T14:00:47Z)

This changelog is generated by GitHub Releases

Full Changelog: kazupon/gunshi@v0.29.0...v0.29.1

v0.29.0 (2026-02-21T13:53:41Z)

This changelog is generated by GitHub Releases

What's Changed

🌟 Features

... (truncated)

Commits

Updates @modelcontextprotocol/sdk from 1.23.0 to 1.29.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

v1.29.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.28.0...v1.29.0

v1.28.0

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0

v1.27.1

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.0...v1.27.1

v1.27.0

What's Changed

... (truncated)

Commits

Updates agents from 0.2.35 to 0.10.1

Release notes

Sourced from agents's releases.

agents@0.10.1

Patch Changes

  • #1286 d76f8b9 Thanks @​threepointone! - Fix McpAgent.handleMcpMessage crashing with "Attempting to read .name before it was set" when the Durable Object wakes from hibernation via native DO RPC. The method now calls __unsafe_ensureInitialized() to hydrate this.name from storage and run onStart() before processing messages, matching the pattern used by _workflow_* RPC methods and alarm().

  • #1278 8c7caab Thanks @​threepointone! - Think now owns the inference loop with lifecycle hooks at every stage.

    Breaking: onChatMessage(), assembleContext(), and getMaxSteps() are removed. Use lifecycle hooks and the maxSteps property instead. If you need full custom inference, extend Agent directly.

    New lifecycle hooks: beforeTurn, beforeToolCall, afterToolCall, onStepFinish, onChunk — fire on every turn from all entry paths (WebSocket, chat(), saveMessages, auto-continuation).

    beforeTurn(ctx) receives the assembled system prompt, messages, tools, and model. Return a TurnConfig to override any part — model, system prompt, messages, tools, activeTools, toolChoice, maxSteps, providerOptions.

    maxSteps is now a property (default 10) instead of a method. Override per-turn via TurnConfig.maxSteps.

    MCP tools auto-merged — no need to manually merge this.mcp.getAITools() in getTools().

    Dynamic context blocks: Session.addContext() and Session.removeContext() allow adding/removing context blocks after session initialization (e.g., from extensions).

    Extension manifest expanded with context (namespaced context block declarations) and hooks fields.

agents@0.10.0

Minor Changes

  • #1256 dfab937 Thanks @​threepointone! - Add durable fiber execution to the Agent base class.

    runFiber(name, fn) registers work in SQLite, holds a keepAlive ref, and enables recovery via onFiberRecovered after DO eviction. ctx.stash() and this.stash() checkpoint progress that survives eviction.

    AIChatAgent gains unstable_chatRecovery — when enabled, each chat turn is wrapped in a fiber. onChatRecovery provides provider-specific recovery (Workers AI continuation, OpenAI response retrieval, Anthropic synthetic message). continueLastTurn() appends to the interrupted assistant message seamlessly.

    Think now extends Agent directly (no mixin). Fiber support is inherited from the base class.

    Breaking (experimental APIs only):

    • Removed withFibers mixin (agents/experimental/forever)
    • Removed withDurableChat mixin (@cloudflare/ai-chat/experimental/forever)
    • Removed ./experimental/forever export from both packages
    • Think no longer has a fibers flag — recovery is automatic via alarm housekeeping

Patch Changes

  • #1259 1933eb4 Thanks @​threepointone! - Run fiber recovery eagerly in onStart() instead of deferring to the next alarm. Interrupted fibers are now detected immediately on the first request after DO wake, with the alarm path as a fallback. A re-entrancy guard prevents double recovery.

  • #1263 e3ceb82 Thanks @​threepointone! - Fix routeAgentEmail() keeping the target DO non-hibernatable for ~100-120s after onEmail() returns. Replaces bare closure RPC targets with a single RpcTarget bridge (EmailBridge) that has explicit Symbol.dispose lifecycle, allowing the runtime to tear down the bidirectional RPC session promptly instead of tying it to the caller's execution context lifetime.

  • c5ca556 Thanks @​threepointone! - Cap vite peer dependency at >=6.0.0 <9.0.0 to avoid silently accepting untested future major versions.

  • #1271 0cc2dae Thanks @​threepointone! - Add optional MCPServerFilter parameter to getAITools(), listTools(), listPrompts(), listResources(), and listResourceTemplates() for scoping results to specific MCP servers by ID, name, or connection state.

  • #1267 d1ee61a Thanks @​dmmulroy! - Fix MCP streamable HTTP client session lifecycle so closing connections explicitly terminates active sessions and persists session IDs across reconnects/restores.

... (truncated)

Changelog

Sourced from agents's changelog.

0.10.1

Patch Changes

  • #1286 d76f8b9 Thanks @​threepointone! - Fix McpAgent.handleMcpMessage crashing with "Attempting to read .name before it was set" when the Durable Object wakes from hibernation via native DO RPC. The method now calls __unsafe_ensureInitialized() to hydrate this.name from storage and run onStart() before processing messages, matching the pattern used by _workflow_* RPC methods and alarm().

  • #1278 8c7caab Thanks @​threepointone! - Think now owns the inference loop with lifecycle hooks at every stage.

    Breaking: onChatMessage(), assembleContext(), and getMaxSteps() are removed. Use lifecycle hooks and the maxSteps property instead. If you need full custom inference, extend Agent directly.

    New lifecycle hooks: beforeTurn, beforeToolCall, afterToolCall, onStepFinish, onChunk — fire on every turn from all entry paths (WebSocket, chat(), saveMessages, auto-continuation).

    beforeTurn(ctx) receives the assembled system prompt, messages, tools, and model. Return a TurnConfig to override any part — model, system prompt, messages, tools, activeTools, toolChoice, maxSteps, providerOptions.

    maxSteps is now a property (default 10) instead of a method. Override per-turn via TurnConfig.maxSteps.

    MCP tools auto-merged — no need to manually merge this.mcp.getAITools() in getTools().

    Dynamic context blocks: Session.addContext() and Session.removeContext() allow adding/removing context blocks after session initialization (e.g., from extensions).

    Extension manifest expanded with context (namespaced context block declarations) and hooks fields.

0.10.0

Minor Changes

  • #1256 dfab937 Thanks @​threepointone! - Add durable fiber execution to the Agent base class.

    runFiber(name, fn) registers work in SQLite, holds a keepAlive ref, and enables recovery via onFiberRecovered after DO eviction. ctx.stash() and this.stash() checkpoint progress that survives eviction.

    AIChatAgent gains unstable_chatRecovery — when enabled, each chat turn is wrapped in a fiber. onChatRecovery provides provider-specific recovery (Workers AI continuation, OpenAI response retrieval, Anthropic synthetic message). continueLastTurn() appends to the interrupted assistant message seamlessly.

    Think now extends Agent directly (no mixin). Fiber support is inherited from the base class.

    Breaking (experimental APIs only):

    • Removed withFibers mixin (agents/experimental/forever)
    • Removed withDurableChat mixin (@cloudflare/ai-chat/experimental/forever)
    • Removed ./experimental/forever export from both packages
    • Think no longer has a fibers flag — recovery is automatic via alarm housekeeping

Patch Changes

  • #1259 1933eb4 Thanks @​threepointone! - Run fiber recovery eagerly in onStart() instead of deferring to the next alarm. Interrupted fibers are now detected immediately on the first request after DO wake, with the alarm path as a fallback. A re-entrancy guard prevents double recovery.

  • #1263 e3ceb82 Thanks @​threepointone! - Fix routeAgentEmail() keeping the target DO non-hibernatable for ~100-120s after onEmail() returns. Replaces bare closure RPC targets with a single RpcTarget bridge (EmailBridge) that has explicit Symbol.dispose lifecycle, allowing the runtime to tear down the bidirectional RPC session promptly instead of tying it to the caller's execution context lifetime.

  • c5ca556 Thanks @​threepointone! - Cap vite peer dependency at >=6.0.0 <9.0.0 to avoid silently accepting untested future major versions.

  • #1271 0cc2dae Thanks @​threepointone! - Add optional MCPServerFilter parameter to getAITools(), listTools(), listPrompts(), listResources(), and listResourceTemplates() for scoping results to specific MCP servers by ID, name, or connection state.

... (truncated)

Commits
  • cacea7f Version Packages (#1273)
  • fdafa43 docs + refactor: Session API documentation and AI SDK decoupling (#1280)
  • d9344a0 Unskip SubAgent test (#1287)
  • d76f8b9 Fix MCP RPC cold-wake initialization (#1286)
  • b8450b2 feat(think): host bridge, permissions, sandboxed hook dispatch (Phase 3+4) (#...
  • 8c7caab feat(think): lifecycle hooks, dynamic context, extension manifest (#1278)
  • 5380223 Add unload_context tool and skill unload tracking
  • b035ff1 Version Packages (#1258)
  • 0cc2dae feat: add MCPServerFilter to scope getAITools and list methods (#1271)
  • c5ca556 Update deps and fix peer dependency ranges
  • Additional commits viewable in compare view

Updates @astrojs/starlight from 0.37.7 to 0.38.3

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.38.3

Patch Changes

@​astrojs/starlight@​0.38.2

Patch Changes

  • #3759 f24ce99 Thanks @​MilesChou! - Fixes an issue where monolingual sites using a region-specific locale (e.g., zh-TW) as the default would incorrectly display base language translations (e.g., zh Simplified Chinese) instead of the region-specific ones (e.g., zh-TW Traditional Chinese).

  • #3768 a4c6c20 Thanks @​delucis! - Improves performance of sidebar generation for sites with very large sidebars

@​astrojs/starlight@​0.38.1

Patch Changes

@​astrojs/starlight@​0.38.0

Minor Changes

  • #3644 0d2e7ed Thanks @​HiDeoo! - Adds support for Astro v6, drops support for Astro v5.

    Upgrade Astro and dependencies

    ⚠️ BREAKING CHANGE: Astro v5 is no longer supported. Make sure you update Astro and any other official integrations at the same time as updating Starlight:

    npx @astrojs/upgrade

    Community Starlight plugins and Astro integrations may also need to be manually updated to work with Astro v6. If you encounter any issues, please reach out to the plugin or integration author to see if it is a known issue or if an updated version is being worked on.

    Update your collections

    ⚠️ BREAKING CHANGE: Drops support for content collections backwards compatibility.

    In Astro 5.x, projects could delay upgrading to the new Content Layer API introduced for content collections because of some existing automatic backwards compatibility that was not previously behind a flag. This meant that it was possible to upgrade from Astro 4 to Astro 5 without updating your content collections, even if you had not enabled the legacy.collections flag. Projects would continue to build, and no errors or warnings would be displayed.

    Astro v6.0 now removes this automatic legacy content collections support, along with the legacy.collections flag.

    If you experience content collections errors after updating to v6, check your project for any removed legacy features that may need updating to the Content Layer API. See the Starlight v0.30.0 upgrade guide for detailed instructions on upgrading legacy collections to the new Content Layer API.

    If you are unable to make any changes to your collections at this time, including Starlight's default docs and i18n collections, you can enable the legacy.collectionsBackwardsCompat flag to upgrade to v6 without updating your collections. This temporary flag preserves some legacy v4 content collections features, and will allow you to keep your collections in their current state until the legacy flag is no longer supported.

  • #3704 375edcc Thanks @​florian-lefebvre! - Fixes autocomplete for components exported from @astrojs/starlight/components/*

... (truncated)

Changelog

Sourced from @​astrojs/starlight's changelog.

0.38.3

Patch Changes

0.38.2

Patch Changes

  • #3759 f24ce99 Thanks @​MilesChou! - Fixes an issue where monolingual sites using a region-specific locale (e.g., zh-TW) as the default would incorrectly display base language translations (e.g., zh Simplified Chinese) instead of the region-specific ones (e.g., zh-TW Traditional Chinese).

  • #3768 a4c6c20 Thanks @​delucis! - Improves performance of sidebar generation for sites with very large sidebars

0.38.1

Patch Changes

0.38.0

Minor Changes

  • #3644 0d2e7ed Thanks @​HiDeoo! - Adds support for Astro v6, drops support for Astro v5.

    Upgrade Astro and dependencies

    ⚠️ BREAKING CHANGE: Astro v5 is no longer supported. Make sure you update Astro and any other official integrations at the same time as updating Starlight:

    npx @astrojs/upgrade

    Community Starlight plugins and Astro integrations may also need to be manually updated to work with Astro v6. If you encounter any issues, please reach out to the plugin or integration author to see if it is a known issue or if an updated version is being worked on.

    Update your collections

    ⚠️ BREAKING CHANGE: Drops support for content collections backwards compatibility.

    In Astro 5.x, projects could delay upgrading to the new Content Layer API introduced for content collections because of some existing automatic backwards compatibility that was not previously behind a flag. This meant that it was possible to upgrade from Astro 4 to Astro 5 without updating your content collections, even if you had not enabled the legacy.collections flag. Projects would continue to build, and no errors or warnings would be displayed.

    Astro v6.0 now removes this automatic legacy content collections support, along with the legacy.collections flag.

    If you experience content collections errors after updating to v6, check your project for any removed legacy features that may need updating to the Content Layer API. See the Starlight v0.30.0 upgrade guide for detailed instructions on upgrading legacy collections to the new Content Layer API.

... (truncated)

Commits

Updates astro-og-canvas from 0.7.2 to 0.11.0

Release notes

Sourced from astro-og-canvas's releases.

astro-og-canvas@0.11.0

Minor Changes

  • #157 91ac061 Thanks @​renovate! - Updates dependency entities to v8

    ⚠️ Potentially breaking change: The minimum supported Node version is now 20.19.0

Patch Changes

astro-og-canvas@0.10.1

Patch Changes

astro-og-canvas@0.10.0

Minor Changes

  • #119 151edd2 Thanks @​delucis! - Makes OGImageRoute() asynchronous.

    ⚠️ BREAKING CHANGE: You must now await the result of OGImageRoute():

    import { OGImageRoute } from 'astro-og-canvas';

export const { getStaticPaths, GET } = OGImageRoute({


export const { getStaticPaths, GET } = await OGImageRoute({

Patch Changes

  • #119 151edd2 Thanks @​delucis! - Fixes using the built-in getSlug() for OG images with format: "JPEG" or format: "WEBP"

astro-og-canvas@0.9.0

Minor Changes

  • #117 b94a123 Thanks @​delucis! - Adds type safety to OGImageRoute. The page parameter in getSlug() and getImageOptions() is now correctly inferred from the value passed to pages instead of being typed as any.

    OGImageRoute({
  pages: {
    example: {
      title: 'Example Page',
      description: 'Description of this page shown in smaller text',
    },
  },
  getImageOptions: (path, page) => {
    page;
    // ^? { title: string; description: string }

... (truncated)

Changelog

Sourced from astro-og-canvas's changelog.

0.11.0

Minor Changes

  • #157 91ac061 Thanks @​renovate! - Updates dependency entities to v8

    ⚠️ Potentially breaking change: The minimum supported Node version is now 20.19.0

Patch Changes

0.10.1

Patch Changes

0.10.0

Minor Changes

  • #119 151edd2 Thanks @​delucis! - Makes OGImageRoute() asynchronous.

    ⚠️ BREAKING CHANGE: You must now await the result of OGImageRoute():

    import { OGImageRoute } from 'astro-og-canvas';

export const { getStaticPaths, GET } = OGImageRoute({


export const { getStaticPaths, GET } = await OGImageRoute({

Patch Changes

  • #119 151edd2 Thanks @​delucis! - Fixes using the built-in getSlug() for OG images with format: "JPEG" or format: "WEBP"

0.9.0

Minor Changes

  • #117 b94a123 Thanks @​delucis! - Adds type safety to OGImageRoute. The page parameter in getSlug() and getImageOptions() is now correctly inferred from the value passed to pages instead of being typed as any.

    OGImageRoute({
  pages: {
    example: {
      title: 'Example Page',
      description: 'Description of this page shown in smaller text',
    },

... (truncated)

Commits

Updates canvaskit-wasm from 0.40.0 to 0.41.1

Commits

Updates starlight-llms-txt from 0.6.1 to 0.8.0

Release notes

Sourced from starlight-llms-txt's releases.

starlight-llms-txt@0.8.0

Minor Changes

  • #80 dea7b22 Thanks @​nonoakij! - Adds support for Astro v6 and Starlight v0.38, drops support for lower versions.

starlight-llms-txt@0.7.0

Minor Changes

  • #43 1db4591 Thanks @​sanscontext! - Enforces llms.txt files to be prerendered at build time. Previously, sites using Astro’s output: server configuration would generate llms.txt files on-demand, which can be slow, and additionally was incompatible with the custom sets feature. This change means that llms.txt files are statically generated even for sites using output: server.

    ⚠️ Potentially breaking change: If you were relying on on-demand rendered llms.txt files, for example by using middleware to gate access, this may be a breaking change. Please share your use case to let us know if you need this.

Changelog

Sourced from starlight-llms-txt's changelog.

0.8.0

Minor Changes

  • #80 dea7b22 Thanks @​nonoakij! - Adds support for Astro v6 and Starlight v0.38, drops support for lower versions.

0.7.0

Minor Changes

@dependabot
chore(deps): bump the minor group across 5 directories with 8 updates
6e2c14f 
Bumps the minor group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/get-github-info](https://github.com/changesets/changesets) | `0.7.0` | `0.8.0` |
| [gunshi](https://github.com/kazupon/gunshi/tree/HEAD/packages/gunshi) | `0.28.2` | `0.29.4` |
| [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.23.0` | `1.29.0` |
| [agents](https://github.com/cloudflare/agents/tree/HEAD/packages/agents) | `0.2.35` | `0.10.1` |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.37.7` | `0.38.3` |
| [astro-og-canvas](https://github.com/delucis/astro-og-canvas/tree/HEAD/packages/astro-og-canvas) | `0.7.2` | `0.11.0` |
| [canvaskit-wasm](https://github.com/google/skia) | `0.40.0` | `0.41.1` |
| [starlight-llms-txt](https://github.com/delucis/starlight-llms-txt/tree/HEAD/packages/starlight-llms-txt) | `0.6.1` | `0.8.0` |

Bumps the minor group with 1 update in the /packages/changeset-changelog directory: [@changesets/get-github-info](https://github.com/changesets/changesets).
Bumps the minor group with 1 update in the /packages/varlock directory: [gunshi](https://github.com/kazupon/gunshi/tree/HEAD/packages/gunshi).
Bumps the minor group with 2 updates in the /packages/varlock-docs-mcp directory: [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) and [agents](https://github.com/cloudflare/agents/tree/HEAD/packages/agents).
Bumps the minor group with 4 updates in the /packages/varlock-website directory: [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight), [astro-og-canvas](https://github.com/delucis/astro-og-canvas/tree/HEAD/packages/astro-og-canvas), [canvaskit-wasm](https://github.com/google/skia) and [starlight-llms-txt](https://github.com/delucis/starlight-llms-txt/tree/HEAD/packages/starlight-llms-txt).


Updates `@changesets/get-github-info` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/get-github-info@0.8.0)

Updates `gunshi` from 0.28.2 to 0.29.4
- [Release notes](https://github.com/kazupon/gunshi/releases)
- [Changelog](https://github.com/kazupon/gunshi/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kazupon/gunshi/commits/v0.29.4/packages/gunshi)

Updates `@modelcontextprotocol/sdk` from 1.23.0 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.23.0...v1.29.0)

Updates `agents` from 0.2.35 to 0.10.1
- [Release notes](https://github.com/cloudflare/agents/releases)
- [Changelog](https://github.com/cloudflare/agents/blob/main/packages/agents/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/agents/commits/agents@0.10.1/packages/agents)

Updates `@astrojs/starlight` from 0.37.7 to 0.38.3
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.38.3/packages/starlight)

Updates `astro-og-canvas` from 0.7.2 to 0.11.0
- [Release notes](https://github.com/delucis/astro-og-canvas/releases)
- [Changelog](https://github.com/delucis/astro-og-canvas/blob/latest/packages/astro-og-canvas/CHANGELOG.md)
- [Commits](https://github.com/delucis/astro-og-canvas/commits/astro-og-canvas@0.11.0/packages/astro-og-canvas)

Updates `canvaskit-wasm` from 0.40.0 to 0.41.1
- [Changelog](https://github.com/google/skia/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/google/skia/commits)

Updates `starlight-llms-txt` from 0.6.1 to 0.8.0
- [Release notes](https://github.com/delucis/starlight-llms-txt/releases)
- [Changelog](https://github.com/delucis/starlight-llms-txt/blob/main/packages/starlight-llms-txt/CHANGELOG.md)
- [Commits](https://github.com/delucis/starlight-llms-txt/commits/starlight-llms-txt@0.8.0/packages/starlight-llms-txt)

Updates `@changesets/get-github-info` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/changesets/changesets/releases)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/get-github-info@0.8.0)

Updates `gunshi` from 0.28.2 to 0.29.4
- [Release notes](https://github.com/kazupon/gunshi/releases)
- [Changelog](https://github.com/kazupon/gunshi/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kazupon/gunshi/commits/v0.29.4/packages/gunshi)

Updates `@modelcontextprotocol/sdk` from 1.23.0 to 1.29.0
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.23.0...v1.29.0)

Updates `agents` from 0.2.35 to 0.10.1
- [Release notes](https://github.com/cloudflare/agents/releases)
- [Changelog](https://github.com/cloudflare/agents/blob/main/packages/agents/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/agents/commits/agents@0.10.1/packages/agents)

Updates `@astrojs/starlight` from 0.37.7 to 0.38.3
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.38.3/packages/starlight)

Updates `astro-og-canvas` from 0.7.2 to 0.11.0
- [Release notes](https://github.com/delucis/astro-og-canvas/releases)
- [Changelog](https://github.com/delucis/astro-og-canvas/blob/latest/packages/astro-og-canvas/CHANGELOG.md)
- [Commits](https://github.com/delucis/astro-og-canvas/commits/astro-og-canvas@0.11.0/packages/astro-og-canvas)

Updates `canvaskit-wasm` from 0.40.0 to 0.41.1
- [Changelog](https://github.com/google/skia/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/google/skia/commits)

Updates `starlight-llms-txt` from 0.6.1 to 0.8.0
- [Release notes](https://github.com/delucis/starlight-llms-txt/releases)
- [Changelog](https://github.com/delucis/starlight-llms-txt/blob/main/packages/starlight-llms-txt/CHANGELOG.md)
- [Commits](https://github.com/delucis/starlight-llms-txt/commits/starlight-llms-txt@0.8.0/packages/starlight-llms-txt)

---
updated-dependencies:
- dependency-name: "@changesets/get-github-info"
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: gunshi
  dependency-version: 0.29.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: agents
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.38.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: astro-og-canvas
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: canvaskit-wasm
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: starlight-llms-txt
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@changesets/get-github-info"
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: gunshi
  dependency-version: 0.29.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: agents
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.38.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: astro-og-canvas
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: canvaskit-wasm
  dependency-version: 0.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: starlight-llms-txt
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 13, 2026
@dependabot dependabot bot mentioned this pull request Apr 13, 2026
Closed
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages bot commented Apr 13, 2026 •
edited
Loading

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs		 varlock-website 6e2c14f Apr 13 2026, 02:38 PM

@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Apr 13, 2026

⚠️ No Changeset found

Latest commit: 6e2c14f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security
Copy link
Copy Markdown

socket-security bot commented Apr 13, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedstarlight-llms-txt@​0.6.1 ⏵ 0.8.084 +110074 +188 -2100
Updatedgunshi@​0.28.2 ⏵ 0.29.484 +1100100 +196100
Updated@​astrojs/​starlight@​0.37.7 ⏵ 0.38.399 +110085 +196 +1100
Updatedastro-og-canvas@​0.7.2 ⏵ 0.11.093 -210010089 +2100
Updated@​changesets/​get-github-info@​0.7.0 ⏵ 0.8.099 +110099 +190100
Updatedcanvaskit-wasm@​0.40.0 ⏵ 0.41.1100 +110010093 +8100
Updated@​modelcontextprotocol/​sdk@​1.23.0 ⏵ 1.29.099100 +3110098 +1100
Updatedagents@​0.2.35 ⏵ 0.10.199100 +4100 +198 +1100

View full report

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new bot commented Apr 13, 2026 •
edited
Loading

Open in StackBlitz

varlock

npm i https://pkg.pr.new/varlock@605

@varlock/astro-integration

npm i https://pkg.pr.new/@varlock/astro-integration@605

@varlock/cloudflare-integration

npm i https://pkg.pr.new/@varlock/cloudflare-integration@605

@varlock/expo-integration

npm i https://pkg.pr.new/@varlock/expo-integration@605

@varlock/nextjs-integration

npm i https://pkg.pr.new/@varlock/nextjs-integration@605

@varlock/vite-integration

npm i https://pkg.pr.new/@varlock/vite-integration@605

@varlock/1password-plugin

npm i https://pkg.pr.new/@varlock/1password-plugin@605

@varlock/aws-secrets-plugin

npm i https://pkg.pr.new/@varlock/aws-secrets-plugin@605

@varlock/azure-key-vault-plugin

npm i https://pkg.pr.new/@varlock/azure-key-vault-plugin@605

@varlock/bitwarden-plugin

npm i https://pkg.pr.new/@varlock/bitwarden-plugin@605

@varlock/dashlane-plugin

npm i https://pkg.pr.new/@varlock/dashlane-plugin@605

@varlock/google-secret-manager-plugin

npm i https://pkg.pr.new/@varlock/google-secret-manager-plugin@605

@varlock/hashicorp-vault-plugin

npm i https://pkg.pr.new/@varlock/hashicorp-vault-plugin@605

@varlock/infisical-plugin

npm i https://pkg.pr.new/@varlock/infisical-plugin@605

@varlock/keepass-plugin

npm i https://pkg.pr.new/@varlock/keepass-plugin@605

@varlock/pass-plugin

npm i https://pkg.pr.new/@varlock/pass-plugin@605

@varlock/passbolt-plugin

npm i https://pkg.pr.new/@varlock/passbolt-plugin@605

@varlock/proton-pass-plugin

npm i https://pkg.pr.new/@varlock/proton-pass-plugin@605

commit: 6e2c14f

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 14, 2026

Superseded by #609.

@dependabot dependabot bot closed this Apr 14, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/minor-d768704324 branch April 14, 2026 06:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

community core:docs-mcp core:varlock core:website dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants