Skip to content

Update all non-major dependencies - #435

Merged
Jamesking56 merged 1 commit into
mainfrom
renovate/all-minor-patch
Oct 11, 2026
Merged

Jamesking56 merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 11, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending OpenSSF
astro (source) dependencies patch 7.3.6 → 7.3.8 OpenSSF Scorecard
docx (source) devDependencies minor 9.8.1 → 9.9.0 9.10.0 OpenSSF Scorecard
github/codeql-action action patch v4.38.2 → v4.38.3 OpenSSF Scorecard

Release Notes

withastro/astro (astro)

v7.3.8

Compare Source

Patch Changes
  • #​18293 28e7410 Thanks @​astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

  • #​18298 0e9e857 Thanks @​matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

  • #​18263 882dd98 Thanks @​florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

  • #​18290 31f13c3 Thanks @​astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

v7.3.7

Compare Source

Patch Changes
  • #​18266 cba76cc Thanks @​astro-factory! - Fixes a build error when a Markdown content collection entry loaded with glob({ deferRender: true }) has a layout frontmatter property. layout is now ignored for content collection entries, as documented.

  • #​18287 38f6793 Thanks @​astro-factory! - Fixes astro add cloudflare failing to install dependencies with pnpm v11+ by approving the workerd build script, and shows the package manager's error output when astro add fails to install dependencies

  • #​18222 fcf6ed6 Thanks @​mingjunlu! - Fixes an issue where AVIF images were served as image/heif instead of image/avif in the dev server.

  • #​18240 de4df06 Thanks @​astro-factory! - Fixes the cache() handler from astro/hono and astro/fetch throwing a TypeError when a cache provider is configured. It now registers the cache provider before rendering, so Astro.cache is available to downstream handlers like pages().

  • #​18268 547b572 Thanks @​astro-factory! - Fixes security.checkOrigin rejecting cross-origin requests with non-form content types such as application/json. As documented, the check only applies to unsafe requests that have no content-type header or one of application/x-www-form-urlencoded, multipart/form-data, or text/plain.

dolanmiu/docx (docx)

v9.9.0

Compare Source

What's Changed

New: docx/layout — lay out documents as Word does

A new docx/layout entry point that works out where everything lands on the page, the way Word does. It writes the page numbers of tables of contents, page references (including \p and their own formats), PAGE/SECTION fields and caption numbers (SEQ) "clean", so Word opens the document without asking to update fields. It can read an existing .docx (to fill in a template's page numbers or check Word's own pages), and it returns the pages of a document and what is on each. Where it meets something it doesn't follow yet, it stops and says so, or it makes a best guess if you ask it to.

What it covers:

  • Text measurement: measures text with Pretext in the page's fonts, using Word's width tables, the font files you give it, fonts the document embeds and Office's own fonts. Handles italics, the bold Word makes itself, kerning, ligatures, and letters a font lacks. Supports Greek, Cyrillic, Vietnamese, Latin Extended, Chinese, Japanese, Korean, Thai, Arabic and right-to-left text, plus East Asian font hints and high ANSI fonts.
  • Lines and paragraphs: makes each line as tall as its fonts' ascents and descents, with pictures on the baseline. Squeezes the spaces of justified and distributed lines, and covers paragraph borders, auto and contextual spacing, and indents in characters and lines. Also covers tabs (decimal tabs and tabs past the margin), soft hyphens, hyphenation, hidden text and marks, tracked changes, superscript, small caps, emphasis marks, run borders, fitted text, phonetic guides and drop caps.
  • Lists: numbers lists and places their numbers as Word does, including bordered and Word 6 list numbers and list styles.
  • Tables: sizes tables given no widths (autofit), widens columns for long words, and handles merged cells and tables inside cells. Breaks rows across pages, repeats header rows, and covers set row heights, borders that meet and space between cells. Also covers table style parts, text running up or down cells, deleted rows, floating tables, and tables a share of the page wide.
  • Sections, columns and page numbers: lays out columns of different widths and evens them out before continuous section breaks. Covers next-column sections, kept paragraphs taller than a column, gutters and booklets, and page numbers in every format, with chapter numbers and restarts.
  • Footnotes and endnotes: numbers and places them, continues them across pages, and lays them out in columns, table rows and kept paragraphs. Also covers separators and continuation separators, and endnote pages.
  • Drawings and frames: wraps text around pictures, shapes and floating tables, including drawings that overlap. Covers text frames, VML text boxes, shapes, objects and pictures, and header pictures.
  • Equations: lays out linear and built-up equations and follows the document's math settings. Covers accents, limits, brackets, scripts and pre-scripts, phantoms, boxes and equation arrays.
  • East Asian layout and compatibility: covers document grids, text running down the page, Japanese line rules, compressed punctuation and grid indents. Supports compatibility modes 11, 12 and 14, suppressTopSpacing, useFELayout, HTML divisions, and imported documents (w:altChunk).
  • Verified against Word: layout probes and Word's PDFs of them are kept in scripts/layout-probes, and every line of each demo is checked against Word's own output.
All layout PRs

#​3591, #​3592, #​3593, #​3595, #​3596, #​3600, #​3602, #​3603, #​3604, #​3605, #​3606, #​3607, #​3608, #​3609, #​3610, #​3611, #​3612, #​3613, #​3614, #​3615, #​3616, #​3617, #​3618, #​3619, #​3620, #​3621, #​3622, #​3625, #​3626, #​3627, #​3628, #​3629, #​3630, #​3631, #​3632, #​3633, #​3634, #​3635, #​3636, #​3637, #​3638, #​3639, #​3640, #​3641, #​3648, #​3649, #​3650, #​3651, #​3652, #​3653, #​3654, #​3655, #​3656, #​3658, #​3659, #​3660, #​3661, #​3662, #​3663, #​3664, #​3665, #​3666, #​3667, #​3668, #​3669, #​3670, #​3671, #​3672, #​3673, #​3674, #​3675, #​3676, #​3677, #​3678, #​3679, #​3680, #​3681, #​3682, #​3683, #​3684, #​3685, #​3686, #​3687, #​3688, #​3689, #​3690, #​3700, #​3701, #​3702, #​3703, #​3704, #​3705, #​3706, #​3707, #​3708, #​3709, #​3710, #​3711, #​3712, #​3723, #​3724, #​3725, #​3726, #​3727, #​3728, #​3729, #​3730

Other changes

New Contributors

Full Changelog: dolanmiu/docx@9.8.1...9.9.0

github/codeql-action (github/codeql-action)

v4.38.3

Compare Source

  • Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #​4188
  • Update default CodeQL bundle version to 2.27.2. #​4203
  • Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #​4184

Configuration

📅 Schedule: (in timezone Europe/London)

  • Branch creation
    • Between 06:00 PM and 11:59 PM (* 18-23 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from Jamesking56 as a code owner October 11, 2026 21:19
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Oct 11, 2026
@renovate
renovate Bot enabled auto-merge (squash) October 11, 2026 21:19
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedastro@​7.3.6 ⏵ 7.3.89810088 +198 +1100
Updateddocx@​9.8.1 ⏵ 9.9.0100 +110010093 +1100

View full report

@Jamesking56
Jamesking56 merged commit 23187d7 into main Oct 11, 2026
10 checks passed
@Jamesking56
Jamesking56 deleted the renovate/all-minor-patch branch October 11, 2026 22:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant