Skip to content

chore(deps):(deps-dev): bump the development-dependencies group across 1 directory with 21 updates - #6419

Closed
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/npm_and_yarn/development-dependencies-e62d3ddbc8
Closed

chore(deps):(deps-dev): bump the development-dependencies group across 1 directory with 21 updates#6419
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/npm_and_yarn/development-dependencies-e62d3ddbc8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 21 updates in the / directory:

Package From To
@astrojs/markdoc 2.0.11 2.1.1
@astrojs/react 7.0.1 7.1.1
@axe-core/playwright 4.13.0 4.14.0
@composio/vercel 0.12.1 0.13.0
@graphql-codegen/typescript-operations 6.1.10 6.2.0
agents 0.28.1 0.30.1
astro 7.4.4 7.4.2
dependency-cruiser 18.6.0 18.7.0
eslint 10.12.0 10.13.0
eslint-plugin-n 18.4.1 18.5.0
headroom-ai 0.40.0 0.42.0
knip 6.41.0 6.43.0
markdownlint 0.41.1 0.42.0
markdownlint-cli 0.49.1 0.50.0
mcp-remote 0.14.5 0.15.2
oxc-parser 0.151.0 0.155.0
oxfmt 0.72.0 0.74.0
oxlint 1.88.0 1.89.0
rollup 4.64.9 4.65.1
satori 0.47.1 0.63.2
wrangler 4.151.1 4.153.0

Updates @astrojs/markdoc from 2.0.11 to 2.1.1

Release notes

Sourced from @​astrojs/markdoc's releases.

@​astrojs/markdoc@​2.1.1

Patch Changes

@​astrojs/markdoc@​2.1.0

Minor Changes

Patch Changes

Changelog

Sourced from @​astrojs/markdoc's changelog.

2.1.1

Patch Changes

2.1.0

Minor Changes

Patch Changes

Commits

Updates @astrojs/react from 7.0.1 to 7.1.1

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​7.1.1

Patch Changes

@​astrojs/react@​7.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0
Changelog

Sourced from @​astrojs/react's changelog.

7.1.1

Patch Changes

7.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0
Commits

Updates @axe-core/playwright from 4.13.0 to 4.14.0

Release notes

Sourced from @​axe-core/playwright's releases.

Release 4.14.0

What's Changed

New Contributors

Full Changelog: dequelabs/axe-core-npm@v4.13.0...v4.14.0

Changelog

Sourced from @​axe-core/playwright's changelog.

4.14.0 (2026-10-06)

Bug Fixes

Features

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @composio/vercel from 0.12.1 to 0.13.0

Release notes

Sourced from @​composio/vercel's releases.

@​composio/vercel@​0.13.0

Minor Changes

  • adf6b02: Show the model each tool's JSON Schema as is. The provider now passes the schema to the AI SDK with jsonSchema(), so keywords a Zod schema cannot carry, such as format: "binary", contentEncoding, contentMediaType, title, default, and examples, reach the model. Internal $refs are still inlined first. Tool-call arguments are validated with the same Zod schema as before, so the values a tool accepts and rejects are unchanged.

    In strict mode the model now sees the output of the strict rewrite itself rather than a Zod rendering of it. Zod adds a pattern next to formats such as email, and strict structured outputs reject the one it adds for email, so a strict request with an email parameter would have failed once Zod forwarded more of the schema.

    tool.inputSchema is now an AI SDK Schema instead of a Zod schema. Code that called inputSchema.safeParse() directly can validate with asSchema(tool.inputSchema).validate(value) from ai.

Changelog

Sourced from @​composio/vercel's changelog.

0.13.0

Minor Changes

  • adf6b02: Show the model each tool's JSON Schema as is. The provider now passes the schema to the AI SDK with jsonSchema(), so keywords a Zod schema cannot carry, such as format: "binary", contentEncoding, contentMediaType, title, default, and examples, reach the model. Internal $refs are still inlined first. Tool-call arguments are validated with the same Zod schema as before, so the values a tool accepts and rejects are unchanged.

    In strict mode the model now sees the output of the strict rewrite itself rather than a Zod rendering of it. Zod adds a pattern next to formats such as email, and strict structured outputs reject the one it adds for email, so a strict request with an email parameter would have failed once Zod forwarded more of the schema.

    tool.inputSchema is now an AI SDK Schema instead of a Zod schema. Code that called inputSchema.safeParse() directly can validate with asSchema(tool.inputSchema).validate(value) from ai.

Commits
  • a15956a Release: update version (#4928)
  • cf6343b docs(vercel): state that strict mode does not turn on schema enforcement (#5028)
  • adf6b02 feat: show the model each tool's own JSON Schema in the Vercel, LlamaIndex, a...
  • 517725b test: remove low-value tests without reducing coverage (#4630)
  • See full diff in compare view

Updates @graphql-codegen/typescript-operations from 6.1.10 to 6.2.0

Changelog

Sourced from @​graphql-codegen/typescript-operations's changelog.

6.2.0

Minor Changes

  • #11062 48ebd5d Thanks @​eddeee888! - Add enumType: 'native-with-string-values'. Enums are declared as native enums, and operation variables and input object fields accept either the enum member or its string value (E | `${E}` ).

Patch Changes

  • Updated dependencies [48ebd5d]:
    • @​graphql-codegen/visitor-plugin-common@​7.5.0
Commits
  • fc18179 chore(release): update monorepo packages versions (#11077)
  • 48ebd5d [typescript-operations] feat: add native-with-string-values enumType (#7295) ...
  • 710d415 chore: type-check spec files with a solution-style root tsconfig (#11053)
  • See full diff in compare view

Updates agents from 0.28.1 to 0.30.1

Release notes

Sourced from agents's releases.

[email protected]

Patch Changes

[email protected]

This release adds support for Pi 1.4 and makes PiHarness recover more reliably from evictions, crashes and storage errors.

Highlights

  • Pi 1.4 support: agents/harness/pi now runs on Pi 1.4.
  • Hibernation while Pi's tasks sleep: PiHarness passes Pi's onWake through your harness factory, so a Durable Object sleeps until Pi's next task is due instead of staying in memory.
  • One wake job per object: PiHarness wakes from Pi's wake(), so a task stopped by Pi's restart limit no longer keeps the object awake.
  • Parked tasks: tasks stopped by Pi's restart limit show as parked in pending(), and retry() runs them again.
  • Recovery: Pi reopens after a storage error instead of failing every call until the object restarts, and the wake job survives failed steps with backoff.
  • Fixes: Lifecycle no longer keeps evicted Durable Objects in memory, and it arms a fallback alarm when startup fails. pi-ai now reports cut-off model streams with wording Pi treats as transient, so Pi retries them.

Upgrading

  1. Update Pi to ~1.4.0 (@earendil-works/pi-durable, pi-ai, pi-agent-core) and install @earendil-works/chord alongside them. Pi 1.4 migrates session storage to a schema Pi 1.3 cannot open, so a deployment cannot roll back past this release.

  2. Check pi-durable's 1.4.0 changelog for its breaking changes, such as the removal of TaskRuntime.sleep(), the new sleeping task status, and the restart limit that parks a crash-looping task after 5 restarts.

  3. Pass onWake to Harness.open, as in the diff below. Without it, the harness still works but logs a warning, and the object stays in memory while Pi's tasks sleep.

  4. If you create Pi's registry at module scope, move it into your class, as a field or in the factory. Our tool examples showed module scope before this release. Pi keeps every Harness subscribed to its registry until it closes, and an evicted object never closes it, so a module-level registry keeps every evicted object's harness in memory.

    - const registry = createRegistry();
  export class Assistant extends Agent<Env> {
+   registry = createRegistry();
    harness = new PiHarness({
      harness: ({ storage, context, onWake }) =>
-       Harness.open(storage, { models, registry }, context)
+       Harness.open(storage, { models, registry: this.registry, onWake }, context)
    });
  }

  5. Keep the harness factory safe to run more than once. It now runs again when Pi reopens after a storage error.

  6. Handle the new parked status if you switch on PiPendingOperation.status.

Existing objects need no migration step. Wake jobs left by earlier releases are handed over to the new wake job on first start.

Minor Changes

  • #2617 cfe9d0f Thanks @​ben-reitz! - Support Pi 1.4: the Pi peer range is now ~1.4.0. Pi 1.4 migrates SQLite session storage to a schema that Pi 1.3 cannot open, so a deployment cannot roll back past this release. See Pi harness.

  • #2619 4b535dc Thanks @​ben-reitz! - PiHarness hands its factory an onWake to pass to Harness.open, so the Durable Object can hibernate while Pi's tasks sleep. Add it to your factory: harness: ({ storage, context, onWake }) => Harness.open(storage, { ...options, onWake }, context). Without it the harness still works and logs a warning. See Pi harness.

... (truncated)

Changelog

Sourced from agents's changelog.

0.30.1

Patch Changes

0.30.0

This release adds support for Pi 1.4 and makes PiHarness recover more reliably from evictions, crashes and storage errors.

Highlights

  • Pi 1.4 support: agents/harness/pi now runs on Pi 1.4.
  • Hibernation while Pi's tasks sleep: PiHarness passes Pi's onWake through your harness factory, so a Durable Object sleeps until Pi's next task is due instead of staying in memory.
  • One wake job per object: PiHarness wakes from Pi's wake(), so a task stopped by Pi's restart limit no longer keeps the object awake.
  • Parked tasks: tasks stopped by Pi's restart limit show as parked in pending(), and retry() runs them again.
  • Recovery: Pi reopens after a storage error instead of failing every call until the object restarts, and the wake job survives failed steps with backoff.
  • Fixes: Lifecycle no longer keeps evicted Durable Objects in memory, and it arms a fallback alarm when startup fails. pi-ai now reports cut-off model streams with wording Pi treats as transient, so Pi retries them.

Upgrading

  1. Update Pi to ~1.4.0 (@earendil-works/pi-durable, pi-ai, pi-agent-core) and install @earendil-works/chord alongside them. Pi 1.4 migrates session storage to a schema Pi 1.3 cannot open, so a deployment cannot roll back past this release.

  2. Check pi-durable's 1.4.0 changelog for its breaking changes, such as the removal of TaskRuntime.sleep(), the new sleeping task status, and the restart limit that parks a crash-looping task after 5 restarts.

  3. Pass onWake to Harness.open, as in the diff below. Without it, the harness still works but logs a warning, and the object stays in memory while Pi's tasks sleep.

  4. If you create Pi's registry at module scope, move it into your class, as a field or in the factory. Our tool examples showed module scope before this release. Pi keeps every Harness subscribed to its registry until it closes, and an evicted object never closes it, so a module-level registry keeps every evicted object's harness in memory.

    - const registry = createRegistry();
  export class Assistant extends Agent<Env> {
+   registry = createRegistry();
    harness = new PiHarness({
      harness: ({ storage, context, onWake }) =>
-       Harness.open(storage, { models, registry }, context)
+       Harness.open(storage, { models, registry: this.registry, onWake }, context)
    });
  }

  5. Keep the harness factory safe to run more than once. It now runs again when Pi reopens after a storage error.

  6. Handle the new parked status if you switch on PiPendingOperation.status.

Existing objects need no migration step. Wake jobs left by earlier releases are handed over to the new wake job on first start.

Minor Changes

  • #2617 cfe9d0f Thanks @​ben-reitz! - Support Pi 1.4: the Pi peer range is now ~1.4.0. Pi 1.4 migrates SQLite session storage to a schema that Pi 1.3 cannot open, so a deployment cannot roll back past this release. See Pi harness.

  • #2619 4b535dc Thanks @​ben-reitz! - PiHarness hands its factory an onWake to pass to Harness.open, so the Durable Object can hibernate while Pi's tasks sleep. Add it to your factory: harness: ({ storage, context, onWake }) => Harness.open(storage, { ...options, onWake }, context). Without it the harness still works and logs a warning. See Pi harness.

  • #2624 3954859 Thanks @​ben-reitz! - PiHarness shows operations stopped by Pi's restart limit as parked in pending(), and retry() runs them again. See Pi harness.

... (truncated)

Commits
  • a40b8b4 Version Packages (#2685)
  • 9c79ba1 fix(agents): resume a due Pi sleep while other work keeps PiHarness active (#...
  • e29d776 docs(mcp): document servers with createMcpHandler only (#2654)
  • e18c094 Version Packages (#2652)
  • fc4cd24 fix(agents): stop Lifecycle's startup scope keeping evicted objects alive (#2...
  • 8af09a0 docs(agents): document Pi's afterFailedRun setting for PiHarness (#2651)
  • 91a8f61 fix(agents): keep the Pi harness wake job through failed steps (#2649)
  • 000fcaf fix(agents): reopen pi after a storage error fails its session (#2648)
  • 3954859 feat(agents): show and retry tasks parked by pi's restart limit in PiHarness ...
  • 4b535dc feat(agents): pass pi's onWake through the PiHarness factory (#2619)
  • Additional commits viewable in compare view

Updates astro from 7.4.4 to 7.4.2

Changelog

Sourced from astro's changelog.

7.4.4

Patch Changes

7.4.3

Patch Changes

  • #18488 e4e25fa Thanks @​umeraamir69! - CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into script-src and style-src.

  • #18500 e5a3a1b Thanks @​astro-factory! - Fixes <Image> and <Picture> emitting duplicate srcset candidates when densities contains equivalent values such as 1 and '1x'

  • #18517 c3185b7 Thanks @​okxint! - Fix unhandled AbortError rejection when ClientRouter skips a pending view transition

  • #18497 c712113 Thanks @​astro-factory! - Fixes an uncaught TypeError in the browser when a server:defer island request fails due to a network error. The fallback content is kept, as it is for non-200 responses.

  • #18525 d0240b9 Thanks @​astro-factory! - Fixes a DEP0190 deprecation warning printed by astro info on Node.js 24 and later

  • #18522 776b9a6 Thanks @​astro-factory! - Fixes memoryCache() serving an empty body for cached pages that return an empty 404 or 500 response. These responses now render the 404 or 500 error page on every request.

  • #18511 d060ff9 Thanks @​astro-factory! - Fixes transition:name styles missing in dev when the element is inside a component that is only rendered through another component with no styles or scripts

  • #18494 5fe699c Thanks @​astro-factory! - Fixes the astro CLI refusing to run on StackBlitz by allowing Node.js >=22.22.0 inside WebContainers, whose Node.js version users cannot change

  • #18506 bf43a60 Thanks @​astro-factory! - Fixes <ClientRouter /> animating scroll restoration on back/forward navigation when scroll-behavior: smooth is set. Saved scroll positions are now restored instantly, matching the browser's native behavior.

  • #18476 8ea79a2 Thanks @​astro-factory! - Fixes a DataCloneError crash when building pages that render SVG imports with <Image /> or getImage() while experimental.parallelPrerender is enabled.

  • #18504 6dbd737 Thanks @​astro-factory! - Fixes <Picture> emitting a duplicate 1x candidate in <source> srcset when densities includes 1

  • #18524 7524889 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Image />, <Picture />, <Code />, <Debug /> and <ClientRouter /> components when type-checking a project that extends astro/tsconfigs/strictest with tsc and @astrojs/ts-content-mapper

  • #18493 3773941 Thanks @​astro-factory! - Fixes scoped styles of unused Astro components being included in the build when those components are re-exported from a barrel file

  • #18512 1151b9e Thanks @​jp-knj! - Fixes CSP hashes added with Astro.csp from components rendered inside <body> being left out of the CSP <meta> element in static builds, including MDX pages

  • Updated dependencies [6cf3423, edfbf4a]:

    • @​astrojs/telemetry@​3.4.2
    • @​astrojs/markdown-satteri@​0.4.6

7.4.2

Patch Changes

  • #18430 dda9ec3 Thanks @​Abhirup-99! - Speeds up content sync with experimental.collectionStorage: "chunked" by computing each character's UTF-8 width from its code point instead of encoding every character through TextEncoder. On a store of ~44k entries this cuts the chunking step from about 60 seconds to well under a second, with byte-identical output.

  • #18438 5e0eaa4 Thanks @​astro-factory! - Fixes astro dev with @astrojs/cloudflare failing with Calling `require` for "node-fetch" when a server dependency such as cross-fetch requires node-fetch

  • #18376 a4e201d Thanks @​okxint! - Fixes astro dev treating a stale lock file containing a Linux thread ID as a running Astro server. A successful process lookup with no matching PID now marks the lock as stale, preventing astro dev stop and astro dev --force from killing the unrelated process that owns the thread.

... (truncated)

Commits
  • 829fc00 Skip server island manifest in CSS ensureModulesLoaded to fix late-discovery ...
  • 4a10ff4 fix(deps): update vitest monorepo to v5 (#18403)
  • e943003 Fix inlined Vue styles in dev serving untransformed (unscoped, raw v-bind) CS...
  • 0e04b14 [ci] format
  • 4db9e0d Fix corrupted astro:env/server module when env vars contain $ replacement...
  • e990df8 [ci] release (#18405)
  • 70834bb fix(astro): reduce memory retained across dev server restarts (#18274)
  • 40e7d54 fix(css): defer client CSS deletion so conditionally rendered component style...
  • 908f167 fix(server-islands): only replace island map placeholders in the manifest chu...
  • 6fdc36e fix(build): preserve last modified time when copying cached files to output (...
  • Additional commits viewable in compare view

Updates dependency-cruiser from 18.6.0 to 18.7.0

Release notes

Sourced from dependency-cruiser's releases.

v18.7.0

✨ features

  • 6ae13a39 feat(summarize): makes the missing compiler warnings more precise (#1111) This a.o. makes dependency-cruiser stop reporting a missing typescript compiler even when swc was installed (and swc was sufficient for the configured features). Thanks @​duvillierA for raising the issue!

🐛 fixes

  • da0efbb4 fix(extract/resolve): disregards peerDependenciesMeta and similar actual non-dependencies keys to prevent false positives (#1110). Thanks @​arvidtorbjoernsen for reporting the issue that led to this fix!
  • c580daf6 fix(extract/swc): expands extensions swc can handle to all ts* variants (#1105) Thanks @​duvillierA for raising the issue and for providing the fix that landed in the PR!
  • 9d53b95a fix(extract/swc): adds recognition of type-only-ness of exports (#1106). Thanks @​duvillierA for raising the issue and for providing the fix that landed in the PR!

📖 documentation

Commits
  • 60f8a7e 18.7.0
  • 6ae13a3 feat(summarize): makes the missing compiler warnings more precise (

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 28, 2026
@dependabot
dependabot Bot requested a review from daggerstuff as a code owner October 28, 2026 14:34
@dependabot dependabot Bot added the pnpm Pull requests that update pnpm dependencies label Oct 28, 2026
@vercel

vercel Bot commented Oct 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
pixelated Ignored Ignored Preview Oct 30, 2026 3:14am UTC

Request Review

@github-actions

github-actions Bot commented Oct 28, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • Report files not found (see artifacts)

Reports are also available as workflow artifacts

@github-actions

github-actions Bot commented Oct 28, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@daggerstuff

daggerstuff commented Oct 28, 2026

Copy link
Copy Markdown
Owner

Heads-up: this group is blocked on the vite/astro pairing, not on CI flakiness.

  1. patches/astro.patch does not apply to astro 7.4.2 — upstream reformatted dist/core/build/plugins/plugin-manifest.js, so install fails with ERR_PNPM_PATCH_FAILED. The regenerated patch + refreshed lockfile patch_hash are in the closed chore(deps):(deps-dev): bump the development-dependencies group across 1 directory with 20 updates #6408 if useful.
  2. Even with the patch refreshed, astro 7.4.2 needs vite 8 (transformWithOxc import), while pnpm-workspace.yaml pins overrides.vite: ^7. The group cannot land before the vite 8 migration.

Leaving this open as an intentional hold; not merging red.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-e62d3ddbc8 branch from 491a109 to e6a8d71 Compare October 28, 2026 15:13
@github-actions

github-actions Bot commented Oct 28, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@github-actions

github-actions Bot commented Oct 28, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • Report files not found (see artifacts)

Reports are also available as workflow artifacts

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-e62d3ddbc8 branch from e6a8d71 to 9e622fc Compare October 29, 2026 05:09
@github-actions

github-actions Bot commented Oct 29, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@github-actions

github-actions Bot commented Oct 29, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • Report files not found (see artifacts)

Reports are also available as workflow artifacts

@daggerstuff

daggerstuff commented Oct 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

Held by the churn run (2026-10-29) — this group cannot be made green in-band.

Evidence (build-test job log, head 9e622fc, run 40821736115):

  • Fails at setup-node-pnpm with ERR_PNPM_PATCH_FAILED — patches/astro.patch hunk chore(deps):(deps): bump the security-patches group with 2 updates #1 no longer applies to astro 7.4.2 (dist/core/build/plugins/plugin-manifest.js was reformatted upstream). The patch must be regenerated for 7.4.2 before anything else in this group can be validated.
  • astro 7.4.2 additionally imports transformWithOxc from vite, which only exists in vite 8; pnpm-workspace.yaml still pins overrides.vite: ^7 (plus @foresight/core>vite: 6.4.2, @vitejs/plugin-react: ^5.2.0), so the group dies at vitest.config.ts load even with a fixed patch (JOURNAL §15 rule 81).
  • satori 0.47.1 → 0.63.2 is a two-major jump carried in the same group and needs its own review.

Why held, not fixed: the fix is the vite 8 migration (a dedicated change, not a dependency bump), and committing to a dependabot branch is forbidden — dependabot closes the PR on foreign commits. The vite 8 work-in-progress lives on wip/vite8-astro738.

Unblock: land the vite 8 migration, then reissue this group — or add dependabot ignore entries for astro and satori majors so the other 19 updates can land now (owner decision).

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-e62d3ddbc8 branch from 9e622fc to 4f18299 Compare October 29, 2026 06:53
@github-actions

github-actions Bot commented Oct 29, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@github-actions

github-actions Bot commented Oct 29, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • Report files not found (see artifacts)

Reports are also available as workflow artifacts

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-e62d3ddbc8 branch from 4f18299 to b1d3740 Compare October 29, 2026 12:28
@github-actions

github-actions Bot commented Oct 29, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@github-actions

github-actions Bot commented Oct 29, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • Report files not found (see artifacts)

Reports are also available as workflow artifacts

This was referenced Oct 30, 2026
Merged
Merged
@daggerstuff

daggerstuff commented Oct 30, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-e62d3ddbc8 branch from b1d3740 to 4339900 Compare October 30, 2026 03:04
@daggerstuff

daggerstuff commented Oct 30, 2026

Copy link
Copy Markdown
Owner

@dependabot recreate

@daggerstuff daggerstuff mentioned this pull request Oct 30, 2026
Merged
@daggerstuff

daggerstuff commented Oct 30, 2026

Copy link
Copy Markdown
Owner

Superseded by #6438. This branch still carries the pre-7.4 patches/astro.patch (lockfile hash 2571b359) while astro 7.4.x needs the rebuilt patch (74950e75) from #6435, so pnpm install fails at ERR_PNPM_PATCH_FAILED; the last rebase also landed one commit behind staging. The same 20 bumps (minus astro, already on staging) were re-issued in #6438 with a regenerated lockfile. Will close this PR once #6438 lands.

@dependabot
chore(deps):(deps-dev): bump the development-dependencies group acros…
b8675be 
…s 1 directory with 21 updates

Bumps the development-dependencies group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/markdoc](https://github.com/withastro/astro/tree/HEAD/packages/integrations/markdoc) | `2.0.11` | `2.1.1` |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `7.0.1` | `7.1.1` |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.13.0` | `4.14.0` |
| [@composio/vercel](https://github.com/ComposioHQ/composio/tree/HEAD/ts/packages/providers/vercel) | `0.12.1` | `0.13.0` |
| [@graphql-codegen/typescript-operations](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/plugins/typescript/operations) | `6.1.10` | `6.2.0` |
| [agents](https://github.com/cloudflare/agents/tree/HEAD/packages/agents) | `0.28.1` | `0.30.1` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.4.4` | `7.4.2` |
| [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) | `18.6.0` | `18.7.0` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `18.4.1` | `18.5.0` |
| headroom-ai | `0.40.0` | `0.42.0` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.41.0` | `6.43.0` |
| [markdownlint](https://github.com/DavidAnson/markdownlint) | `0.41.1` | `0.42.0` |
| [markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli) | `0.49.1` | `0.50.0` |
| [mcp-remote](https://github.com/punkpeye/mcp-remote) | `0.14.5` | `0.15.2` |
| [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.151.0` | `0.155.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.72.0` | `0.74.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.88.0` | `1.89.0` |
| [rollup](https://github.com/rollup/rollup) | `4.64.9` | `4.65.1` |
| [satori](https://github.com/vercel/satori) | `0.47.1` | `0.63.2` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.151.1` | `4.153.0` |



Updates `@astrojs/markdoc` from 2.0.11 to 2.1.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/markdoc/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/integrations/markdoc)

Updates `@astrojs/react` from 7.0.1 to 7.1.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/integrations/react)

Updates `@axe-core/playwright` from 4.13.0 to 4.14.0
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core-npm@v4.13.0...v4.14.0)

Updates `@composio/vercel` from 0.12.1 to 0.13.0
- [Release notes](https://github.com/ComposioHQ/composio/releases)
- [Changelog](https://github.com/ComposioHQ/composio/blob/next/ts/packages/providers/vercel/CHANGELOG.md)
- [Commits](https://github.com/ComposioHQ/composio/commits/@composio/[email protected]/ts/packages/providers/vercel)

Updates `@graphql-codegen/typescript-operations` from 6.1.10 to 6.2.0
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/plugins/typescript/operations/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/[email protected]/packages/plugins/typescript/operations)

Updates `agents` from 0.28.1 to 0.30.1
- [Release notes](https://github.com/cloudflare/agents/releases)
- [Changelog](https://github.com/cloudflare/agents/blob/main/packages/agents/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/agents/commits/[email protected]/packages/agents)

Updates `astro` from 7.4.4 to 7.4.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/[email protected]/packages/astro)

Updates `dependency-cruiser` from 18.6.0 to 18.7.0
- [Release notes](https://github.com/sverweij/dependency-cruiser/releases)
- [Changelog](https://github.com/sverweij/dependency-cruiser/blob/main/CHANGELOG.md)
- [Commits](sverweij/dependency-cruiser@v18.6.0...v18.7.0)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `eslint-plugin-n` from 18.4.1 to 18.5.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@v18.4.1...v18.5.0)

Updates `headroom-ai` from 0.40.0 to 0.42.0

Updates `knip` from 6.41.0 to 6.43.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/[email protected]/packages/knip)

Updates `markdownlint` from 0.41.1 to 0.42.0
- [Changelog](https://github.com/DavidAnson/markdownlint/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint@v0.41.1...v0.42.0)

Updates `markdownlint-cli` from 0.49.1 to 0.50.0
- [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases)
- [Commits](igorshubovych/markdownlint-cli@v0.49.1...v0.50.0)

Updates `mcp-remote` from 0.14.5 to 0.15.2
- [Release notes](https://github.com/punkpeye/mcp-remote/releases)
- [Commits](punkpeye/mcp-remote@v0.14.5...v0.15.2)

Updates `oxc-parser` from 0.151.0 to 0.155.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/parser/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.155.0/napi/parser)

Updates `oxfmt` from 0.72.0 to 0.74.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.74.0/npm/oxfmt)

Updates `oxlint` from 1.88.0 to 1.89.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.89.0/npm/oxlint)

Updates `rollup` from 4.64.9 to 4.65.1
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.64.9...v4.65.1)

Updates `satori` from 0.47.1 to 0.63.2
- [Release notes](https://github.com/vercel/satori/releases)
- [Commits](vercel/satori@0.47.1...0.63.2)

Updates `wrangler` from 4.151.1 to 4.153.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/[email protected]/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@astrojs/markdoc"
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@astrojs/react"
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@composio/vercel"
  dependency-version: 0.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@graphql-codegen/typescript-operations"
  dependency-version: 6.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: agents
  dependency-version: 0.30.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: astro
  dependency-version: 7.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: dependency-cruiser
  dependency-version: 18.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-n
  dependency-version: 18.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: headroom-ai
  dependency-version: 0.41.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: knip
  dependency-version: 6.43.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: markdownlint
  dependency-version: 0.42.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: markdownlint-cli
  dependency-version: 0.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: mcp-remote
  dependency-version: 0.15.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxc-parser
  dependency-version: 0.155.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxfmt
  dependency-version: 0.74.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxlint
  dependency-version: 1.89.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: rollup
  dependency-version: 4.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: satori
  dependency-version: 0.63.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: wrangler
  dependency-version: 4.152.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-e62d3ddbc8 branch from 4339900 to b8675be Compare October 30, 2026 03:14
@github-actions

github-actions Bot commented Oct 30, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@github-actions

github-actions Bot commented Oct 30, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • lhr-1793330227948
  • lhr-1793330240652
  • lhr-1793330252810
  • lhr-1793330264231
  • lhr-1793330275616
  • lhr-1793330287078
  • lhr-1793330298377
  • lhr-1793330309691
  • lhr-1793330321056

Reports are also available as workflow artifacts

@daggerstuff

daggerstuff commented Oct 30, 2026

Copy link
Copy Markdown
Owner

Superseded: the same 20 bumps landed in #6438 (squash 976b474fc). The recreated branch was correct after #6435, but #6438 was already green, so it went first. Closing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@daggerstuff daggerstuff Awaiting requested review from daggerstuff daggerstuff is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file pnpm Pull requests that update pnpm dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@daggerstuff