Skip to content

chore(deps):(deps-dev): bump the development-dependencies group across 1 directory with 16 updates - #6368

Closed
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/npm_and_yarn/development-dependencies-419b3dd754
Closed

chore(deps):(deps-dev): bump the development-dependencies group across 1 directory with 16 updates#6368
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/npm_and_yarn/development-dependencies-419b3dd754

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 16 updates in the / directory:

Package From To
@astrojs/markdoc 2.0.11 2.1.0
@astrojs/react 7.0.1 7.1.0
@axe-core/playwright 4.13.0 4.14.0
@composio/core 0.22.0 0.25.0
astro 7.3.5 7.4.1
dependency-cruiser 18.6.0 18.7.0
eslint 10.12.0 10.13.0
eslint-plugin-n 18.4.1 18.5.0
headroom-ai 0.40.0 0.41.0
knip 6.41.0 6.42.1
markdownlint 0.41.1 0.42.0
mcp-remote 0.14.5 0.15.1
oxc-parser 0.151.0 0.155.0
oxfmt 0.72.0 0.74.0
oxlint 1.88.0 1.89.0
satori 0.47.1 0.63.0

Updates @astrojs/markdoc from 2.0.11 to 2.1.0

Release notes

Sourced from @​astrojs/markdoc's releases.

@​astrojs/markdoc@​2.1.0

Minor Changes

Patch Changes

Changelog

Sourced from @​astrojs/markdoc's changelog.

2.1.0

Minor Changes

Patch Changes

Commits

Updates @astrojs/react from 7.0.1 to 7.1.0

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​7.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0
Changelog

Sourced from @​astrojs/react's changelog.

7.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0
Commits

Updates @axe-core/playwright from 4.13.0 to 4.14.0

Release notes

Sourced from @​axe-core/playwright's releases.

Release 4.14.0

What's Changed

New Contributors

Full Changelog: dequelabs/axe-core-npm@v4.13.0...v4.14.0

Changelog

Sourced from @​axe-core/playwright's changelog.

4.14.0 (2026-10-06)

Bug Fixes

Features

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @composio/core from 0.22.0 to 0.25.0

Release notes

Sourced from @​composio/core's releases.

@​composio/core@​0.25.0

Minor Changes

  • 79c2d1d: Requires @composio/client 2.0.0-rc.17. The SDK now reports itself to the API client through the client's identity option instead of default headers. The headers sent with each request are unchanged, with one exception: on Cloudflare Workers and Vercel Edge with Node.js compatibility enabled, x-client-runtime now names that runtime instead of nodejs, and the polyfilled Node.js version is no longer sent as x-runtime-version. A createSession() clone no longer copies these headers into its defaultHeaders.

    The API client owns these headers, so defaultHeaders and createSession({ headers }) now reject x-client-provenance, x-client-version, x-client-library, x-client-library-version, x-client-language, x-client-runtime, x-sdk-version, x-source, x-framework, x-runtime and x-runtime-version with a ComposioError from @composio/client. The SDK used to overwrite such entries silently.

    A custom provider whose name cannot be sent as a header value (anything other than printable ASCII with no leading or trailing whitespace) is reported as unknown in x-framework.

  • 40546c3: Add experimental support for tool calls that need the user's approval.

    Sessions accept a requireApproval list next to the toolkits, tools and tags filters on create() and update(). A call to a matching tool doesn't run: session.execute() and session.executeMeta() throw ComposioToolInputRequiredError with the questions on inputRequests. To answer, repeat the same call with the user's answers in inputResponses and the error's requestState:

    const session = await composio.create('user_123', {
  tools: { gmail: { requireApproval: ['GMAIL_SEND_EMAIL'] } },
});
try {
await session.execute('GMAIL_SEND_EMAIL', args);
} catch (error) {
if (!(error instanceof ComposioToolInputRequiredError)) throw error;
const inputResponses = await promptUser(error.inputRequests);
await session.execute('GMAIL_SEND_EMAIL', args, {
inputResponses,
requestState: error.requestState,
});
}

    promptUser is a placeholder for your application's consent UI. Display each request, wait for the user's response, and return the answers keyed by request ID. Forward decline and cancel responses unchanged.

    experimental.noElicitationSupportFallback ('deny' or 'allow') sets what happens to such a call when the session's MCP client can't ask the user.

    session.executeMeta() now takes these answers as its third argument, so its request options move to the fourth.

    The Python SDK gains the same require_approval lists, experimental.no_elicitation_support_fallback, and input_responses and request_state on session.execute() and session.execute_meta().

Patch Changes

  • f9a972b: Update the owned API client to @composio/[email protected]. The SDK's public API and runtime behavior are unchanged.

  • 04cd5c4: Fix the trigger subscription lifecycle and contain errors from trigger handlers.

    • triggers.unsubscribe() now closes the realtime connection, so a Node process can exit once it has unsubscribed. A later triggers.subscribe() opens a new connection.
    • triggers.unsubscribe() before any subscribe() no longer fetches realtime credentials or creates a client.
    • Concurrent subscribe() calls share one connection, and unsubscribe() cancels a subscription that is still connecting, so it never opens a connection or delivers events afterwards.
    • A rejected promise from an async trigger handler is logged like a synchronous throw instead of escaping as an unhandled rejection that ends the process. Handler failures log the error's message rather than {}.

@​composio/core@​0.24.0

Minor Changes

... (truncated)

Changelog

Sourced from @​composio/core's changelog.

0.25.0

Minor Changes

  • 79c2d1d: Requires @composio/client 2.0.0-rc.17. The SDK now reports itself to the API client through the client's identity option instead of default headers. The headers sent with each request are unchanged, with one exception: on Cloudflare Workers and Vercel Edge with Node.js compatibility enabled, x-client-runtime now names that runtime instead of nodejs, and the polyfilled Node.js version is no longer sent as x-runtime-version. A createSession() clone no longer copies these headers into its defaultHeaders.

    The API client owns these headers, so defaultHeaders and createSession({ headers }) now reject x-client-provenance, x-client-version, x-client-library, x-client-library-version, x-client-language, x-client-runtime, x-sdk-version, x-source, x-framework, x-runtime and x-runtime-version with a ComposioError from @composio/client. The SDK used to overwrite such entries silently.

    A custom provider whose name cannot be sent as a header value (anything other than printable ASCII with no leading or trailing whitespace) is reported as unknown in x-framework.

  • 40546c3: Add experimental support for tool calls that need the user's approval.

    Sessions accept a requireApproval list next to the toolkits, tools and tags filters on create() and update(). A call to a matching tool doesn't run: session.execute() and session.executeMeta() throw ComposioToolInputRequiredError with the questions on inputRequests. To answer, repeat the same call with the user's answers in inputResponses and the error's requestState:

    const session = await composio.create('user_123', {
  tools: { gmail: { requireApproval: ['GMAIL_SEND_EMAIL'] } },
});
try {
await session.execute('GMAIL_SEND_EMAIL', args);
} catch (error) {
if (!(error instanceof ComposioToolInputRequiredError)) throw error;
const inputResponses = await promptUser(error.inputRequests);
await session.execute('GMAIL_SEND_EMAIL', args, {
inputResponses,
requestState: error.requestState,
});
}

    promptUser is a placeholder for your application's consent UI. Display each request, wait for the user's response, and return the answers keyed by request ID. Forward decline and cancel responses unchanged.

    experimental.noElicitationSupportFallback ('deny' or 'allow') sets what happens to such a call when the session's MCP client can't ask the user.

    session.executeMeta() now takes these answers as its third argument, so its request options move to the fourth.

    The Python SDK gains the same require_approval lists, experimental.no_elicitation_support_fallback, and input_responses and request_state on session.execute() and session.execute_meta().

Patch Changes

  • f9a972b: Update the owned API client to @composio/[email protected]. The SDK's public API and runtime behavior are unchanged.

  • 04cd5c4: Fix the trigger subscription lifecycle and contain errors from trigger handlers.

    • triggers.unsubscribe() now closes the realtime connection, so a Node process can exit once it has unsubscribed. A later triggers.subscribe() opens a new connection.
    • triggers.unsubscribe() before any subscribe() no longer fetches realtime credentials or creates a client.
    • Concurrent subscribe() calls share one connection, and unsubscribe() cancels a subscription that is still connecting, so it never opens a connection or delivers events afterwards.
    • A rejected promise from an async trigger handler is logged like a synchronous throw instead of escaping as an unhandled rejection that ends the process. Handler failures log the error's message rather than {}.

0.24.0

... (truncated)

Commits
  • dad230b Release: update version (#4895)
  • 79c2d1d chore: move owned clients to 2.0.0-rc.17 (#4906)
  • 04cd5c4 fix(core): close the trigger connection on unsubscribe() and contain handle...
  • f9a972b chore: move owned clients to 2.0.0-rc.16 (#4901)
  • 40546c3 feat(core): require approval for session tools and answer input requests (PLE...
  • 9a831f6 Release: update version (#4837)
  • e305e73 feat(core): accept instant.returnPricesInSearch on sessions (#4861)
  • 79b4912 feat(core): update owned clients to 2.0.0-rc.14 (#4863)
  • 33fe3ba fix(core): restore source type names in the TS SDK reference (#4848)
  • d66e5de feat(core): accept a boolean proxyExecute shorthand on sessions
  • Additional commits viewable in compare view

Updates astro from 7.3.5 to 7.4.1

Release notes

Sourced from astro's releases.

[email protected]

Patch Changes

  • #18425 6fdc36e Thanks @​astro-factory! - Preserves the last modified date of cached optimized images and incrementally restored build output when copying them into the build output on all platforms

  • #18419 395d195 Thanks @​astro-factory! - Fixes a typo in the error message shown when a font cssVariable is invalid

  • #18401 484822f Thanks @​danielmlr! - Fixes a bug where projects whose path contains an apostrophe (') failed to load sessions, middleware, a cache provider, or a src/fetch.ts handler

  • #18407 a6e00be Thanks @​astro-factory! - Fixes a TSCONFIG_ERROR during astro build when a parent directory contains a tsconfig.json that cannot be resolved, such as one extending astro/tsconfigs/strict without installed dependencies

  • #18427 908f167 Thanks @​astro-factory! - Fixes an Unterminated string build error when application code imports from astro/config (for example, fontProviders in a shared fonts module)

  • #18428 40e7d54 Thanks @​astro-factory! - Fixes missing styles in production builds for conditionally rendered framework components (e.g. Svelte components inside {#if} blocks) imported by a hydrated island

  • #18424 617ff59 Thanks @​astro-factory! - Fixes style-only HMR in .astro components falling back to a full page reload when a PostCSS plugin (such as @unocss/postcss) lists the component as a dependency of its own style

  • #18274 70834bb Thanks @​Princesseuh! - Fixes increasing memory usage when editing the Astro configuration while the dev server is running

[email protected]

Minor Changes

  • #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

    When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

    astro build --timings

    This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

    Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

    All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

    import type { FontProvider } from 'astro';
const provider: FontProvider = {
name: 'my-provider',
resolveFont: ({ familyName }) => {
// ...
},
getFontProperties: ({ familyName }) => ({
weights: ['400', '700'],
styles: ['normal', 'italic'],
subsets: ['latin'],

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.1

Patch Changes

  • #18425 6fdc36e Thanks @​astro-factory! - Preserves the last modified date of cached optimized images and incrementally restored build output when copying them into the build output on all platforms

  • #18419 395d195 Thanks @​astro-factory! - Fixes a typo in the error message shown when a font cssVariable is invalid

  • #18401 484822f Thanks @​danielmlr! - Fixes a bug where projects whose path contains an apostrophe (') failed to load sessions, middleware, a cache provider, or a src/fetch.ts handler

  • #18407 a6e00be Thanks @​astro-factory! - Fixes a TSCONFIG_ERROR during astro build when a parent directory contains a tsconfig.json that cannot be resolved, such as one extending astro/tsconfigs/strict without installed dependencies

  • #18427 908f167 Thanks @​astro-factory! - Fixes an Unterminated string build error when application code imports from astro/config (for example, fontProviders in a shared fonts module)

  • #18428 40e7d54 Thanks @​astro-factory! - Fixes missing styles in production builds for conditionally rendered framework components (e.g. Svelte components inside {#if} blocks) imported by a hydrated island

  • #18424 617ff59 Thanks @​astro-factory! - Fixes style-only HMR in .astro components falling back to a full page reload when a PostCSS plugin (such as @unocss/postcss) lists the component as a dependency of its own style

  • #18274 70834bb Thanks @​Princesseuh! - Fixes increasing memory usage when editing the Astro configuration while the dev server is running

7.4.0

Minor Changes

  • #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

    When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

    astro build --timings

    This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

    Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

    All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

    import type { FontProvider } from 'astro';
const provider: FontProvider = {
name: 'my-provider',
resolveFont: ({ familyName }) => {
// ...
},
getFontProperties: ({ familyName }) => ({
weights: ['400', '700'],

... (truncated)

Commits
  • e990df8 [ci] release (#18405)
  • 70834bb fix(astro): reduce memory retained across dev server restarts (#18274)
  • 40e7d54 fix(css): defer client CSS deletion so conditionally rendered component style...
  • 908f167 fix(server-islands): only replace island map placeholders in the manifest chu...
  • 6fdc36e fix(build): preserve last modified time when copying cached files to output (...
  • 617ff59 Fix style-only HMR full reload when a PostCSS plugin lists the component as i...
  • 395d195 fix(astro): correct "indent" typo to "ident" in fonts cssVariable error messa...
  • a6e00be fix(env): skip tsconfig loading in import.meta.env define replacement (#18407)
  • 484822f Fix virtual module imports when the project path contains an apostrophe (#18401)
  • c2c43a9 [ci] release (#18354)
  • Additional commits viewable in compare view

Updates dependency-cruiser from 18.6.0 to 18.7.0

Release notes

Sourced from dependency-cruiser's releases.

v18.7.0

✨ features

  • 6ae13a39 feat(summarize): makes the missing compiler warnings more precise (#1111) This a.o. makes dependency-cruiser stop reporting a missing typescript compiler even when swc was installed (and swc was sufficient for the configured features). Thanks @​duvillierA for raising the issue!

🐛 fixes

  • da0efbb4 fix(extract/resolve): disregards peerDependenciesMeta and similar actual non-dependencies keys to prevent false positives (#1110). Thanks @​arvidtorbjoernsen for reporting the issue that led to this fix!
  • c580daf6 fix(extract/swc): expands extensions swc can handle to all ts* variants (#1105) Thanks @​duvillierA for raising the issue and for providing the fix that landed in the PR!
  • 9d53b95a fix(extract/swc): adds recognition of type-only-ness of exports (#1106). Thanks @​duvillierA for raising the issue and for providing the fix that landed in the PR!

📖 documentation

Commits
  • 60f8a7e 18.7.0
  • 6ae13a3 feat(summarize): makes the missing compiler warnings more precise (#1111)
  • 8b4dbde docs: fix typo in no-duplicate-dep-types comment (#1108)
  • da0efbb fix(extract/resolve): disregards peerDependenciesMeta and similar actual non-...
  • c580daf fix(extract/swc): expands extensions swc can handle to all ts* variants (#1105)
  • 9d53b95 fix(extract/swc): adds recognition of type-only-ness of exports (#1106)
  • See full diff in compare view

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits

Updates eslint-plugin-n from 18.4.1 to 18.5.0

Release notes

Sourced from eslint-plugin-n's releases.

v18.5.0

18.5.0 (2026-10-18)

🌟 Features

  • node-builtins: ✨ support 20.20, 22.23, 24.22 and 26.12 (#578) (2fa0069)

🩹 Fixes

  • no-mixed-requires: classify modern Node built-ins (#580) (58c5d56)
  • no-unsupported-features/es-syntax: Promise.withResolvers is supported since Node.js 22.0.0 (#577) (4a6dee1)

📚 Documentation

  • explain module aliases for no-missing-require (#579) (fcf1256)
Changelog

Sourced from eslint-plugin-n's changelog.

18.5.0 (2026-10-18)

🌟 Features

  • node-builtins: ✨ support 20.20, 22.23, 24.22 and 26.12 (#578) (2fa0069)

🩹 Fixes

  • no-mixed-requires: classify modern Node built-ins (#580) (58c5d56)
  • no-unsupported-features/es-syntax: Promise.withResolvers is supported since Node.js 22.0.0 (#577) (4a6dee1)

📚 Documentation

  • explain module aliases for no-missing-require (#579) (fcf1256)
Commits
  • 5bbe603 chore(master): release 18.5.0 (#581)
  • 2fa0069 feat(node-builtins): ✨ support 20.20, 22.23, 24.22 and 26.12 (#578)
  • fcf1256 docs: explain module aliases for no-missing-require (#579)
  • 58c5d56 fix(no-mixed-requires): classify modern Node built-ins (#580)
  • 4a6dee1 fix(no-unsupported-features/es-syntax): Promise.withResolvers is supported si...
  • See full diff in compare view

Updates headroom-ai from 0.40.0 to 0.41.0

Updates knip from 6.41.0 to 6.42.1

Release notes

Sourced from knip's releases.

Release 6.42.1

@dependabot
chore(deps):(deps-dev): bump the development-dependencies group acros…
bbde11f 
…s 1 directory with 16 updates

Bumps the development-dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/markdoc](https://github.com/withastro/astro/tree/HEAD/packages/integrations/markdoc) | `2.0.11` | `2.1.0` |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `7.0.1` | `7.1.0` |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.13.0` | `4.14.0` |
| [@composio/core](https://github.com/ComposioHQ/composio/tree/HEAD/ts/packages/core) | `0.22.0` | `0.25.0` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.5` | `7.4.1` |
| [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) | `18.6.0` | `18.7.0` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `18.4.1` | `18.5.0` |
| headroom-ai | `0.40.0` | `0.41.0` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.41.0` | `6.42.1` |
| [markdownlint](https://github.com/DavidAnson/markdownlint) | `0.41.1` | `0.42.0` |
| [mcp-remote](https://github.com/punkpeye/mcp-remote) | `0.14.5` | `0.15.1` |
| [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.151.0` | `0.155.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.72.0` | `0.74.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.88.0` | `1.89.0` |
| [satori](https://github.com/vercel/satori) | `0.47.1` | `0.63.0` |



Updates `@astrojs/markdoc` from 2.0.11 to 2.1.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/markdoc/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/integrations/markdoc)

Updates `@astrojs/react` from 7.0.1 to 7.1.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/integrations/react)

Updates `@axe-core/playwright` from 4.13.0 to 4.14.0
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core-npm@v4.13.0...v4.14.0)

Updates `@composio/core` from 0.22.0 to 0.25.0
- [Release notes](https://github.com/ComposioHQ/composio/releases)
- [Changelog](https://github.com/ComposioHQ/composio/blob/next/ts/packages/core/CHANGELOG.md)
- [Commits](https://github.com/ComposioHQ/composio/commits/@composio/[email protected]/ts/packages/core)

Updates `astro` from 7.3.5 to 7.4.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/[email protected]/packages/astro)

Updates `dependency-cruiser` from 18.6.0 to 18.7.0
- [Release notes](https://github.com/sverweij/dependency-cruiser/releases)
- [Changelog](https://github.com/sverweij/dependency-cruiser/blob/main/CHANGELOG.md)
- [Commits](sverweij/dependency-cruiser@v18.6.0...v18.7.0)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `eslint-plugin-n` from 18.4.1 to 18.5.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@v18.4.1...v18.5.0)

Updates `headroom-ai` from 0.40.0 to 0.41.0

Updates `knip` from 6.41.0 to 6.42.1
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/[email protected]/packages/knip)

Updates `markdownlint` from 0.41.1 to 0.42.0
- [Changelog](https://github.com/DavidAnson/markdownlint/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint@v0.41.1...v0.42.0)

Updates `mcp-remote` from 0.14.5 to 0.15.1
- [Release notes](https://github.com/punkpeye/mcp-remote/releases)
- [Commits](punkpeye/mcp-remote@v0.14.5...v0.15.1)

Updates `oxc-parser` from 0.151.0 to 0.155.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/parser/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.155.0/napi/parser)

Updates `oxfmt` from 0.72.0 to 0.74.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.74.0/npm/oxfmt)

Updates `oxlint` from 1.88.0 to 1.89.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.89.0/npm/oxlint)

Updates `satori` from 0.47.1 to 0.63.0
- [Release notes](https://github.com/vercel/satori/releases)
- [Commits](vercel/satori@0.47.1...0.63.0)

---
updated-dependencies:
- dependency-name: "@astrojs/markdoc"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@astrojs/react"
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@composio/core"
  dependency-version: 0.25.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: astro
  dependency-version: 7.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: dependency-cruiser
  dependency-version: 18.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-n
  dependency-version: 18.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: headroom-ai
  dependency-version: 0.41.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: knip
  dependency-version: 6.42.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: markdownlint
  dependency-version: 0.42.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: mcp-remote
  dependency-version: 0.15.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxc-parser
  dependency-version: 0.155.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxfmt
  dependency-version: 0.74.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxlint
  dependency-version: 1.89.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: satori
  dependency-version: 0.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot requested a review from daggerstuff as a code owner October 23, 2026 03:11
@vercel

vercel Bot commented Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
pixelated Ignored Ignored Preview Oct 23, 2026 3:11am UTC

Request Review

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pnpm Pull requests that update pnpm dependencies labels Oct 23, 2026
@github-actions

github-actions Bot commented Oct 23, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • Report files not found (see artifacts)

Reports are also available as workflow artifacts

@github-actions

github-actions Bot commented Oct 23, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 26, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/development-dependencies-419b3dd754 branch October 26, 2026 03:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@daggerstuff daggerstuff Awaiting requested review from daggerstuff daggerstuff is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file pnpm Pull requests that update pnpm dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants