Skip to content

build(deps): bump the site-minor-patch group in /pages with 2 updates - #308

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pages/site-minor-patch-91ed881508
Closed

build(deps): bump the site-minor-patch group in /pages with 2 updates#308
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pages/site-minor-patch-91ed881508

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the site-minor-patch group in /pages with 2 updates: @astrojs/markdown-satteri and astro.

Updates @astrojs/markdown-satteri from 0.3.6 to 0.3.7

Release notes

Sourced from @​astrojs/markdown-satteri's releases.

@​astrojs/markdown-satteri@​0.3.7

Patch Changes

Changelog

Sourced from @​astrojs/markdown-satteri's changelog.

0.3.7

Patch Changes

Commits

Updates astro from 7.2.3 to 7.2.4

Release notes

Sourced from astro's releases.

astro@7.2.4

Patch Changes

  • #17747 a90ff66 Thanks @​Princesseuh! - Fixes builds hanging when an image file is malformed

  • #17701 05763a0 Thanks @​matthewp! - Fixes base path stripping to respect path-segment boundaries. With a configured base such as /docs, a request like /docs-archive/page is no longer treated as being under the base, so routing and context.url.pathname now agree on the same pathname.

  • #17742 70b449d Thanks @​Kjubikstronk! - Fixes astro build throwing TypeError: Missing parameter for dynamic routes when build.format: 'preserve' and trailingSlash: 'always' are used together. Stripping the framework-injected .html suffix dropped the trailing slash that the compiled route pattern requires, so the route no longer matched itself and its params resolved as empty.

  • #17703 771b0a9 Thanks @​astrobot-houston! - Fixes Astro.site always being undefined when rendering components via the Container API, even when site is set in astroConfig

  • Updated dependencies [05763a0, bc171af]:

    • @​astrojs/internal-helpers@​0.10.4
    • @​astrojs/markdown-satteri@​0.3.7
    • @​astrojs/markdown-remark@​7.2.4
Changelog

Sourced from astro's changelog.

7.2.4

Patch Changes

  • #17747 a90ff66 Thanks @​Princesseuh! - Fixes builds hanging when an image file is malformed

  • #17701 05763a0 Thanks @​matthewp! - Fixes base path stripping to respect path-segment boundaries. With a configured base such as /docs, a request like /docs-archive/page is no longer treated as being under the base, so routing and context.url.pathname now agree on the same pathname.

  • #17742 70b449d Thanks @​Kjubikstronk! - Fixes astro build throwing TypeError: Missing parameter for dynamic routes when build.format: 'preserve' and trailingSlash: 'always' are used together. Stripping the framework-injected .html suffix dropped the trailing slash that the compiled route pattern requires, so the route no longer matched itself and its params resolved as empty.

  • #17703 771b0a9 Thanks @​astrobot-houston! - Fixes Astro.site always being undefined when rendering components via the Container API, even when site is set in astroConfig

  • Updated dependencies [05763a0, bc171af]:

    • @​astrojs/internal-helpers@​0.10.4
    • @​astrojs/markdown-satteri@​0.3.7
    • @​astrojs/markdown-remark@​7.2.4
Commits
  • 8a31cba [ci] release (#17739)
  • aeda810 [ci] format
  • a90ff66 fix(assets): harden vendored image-size box and entry checks (#17747)
  • 05763a0 Respect path-segment boundaries when stripping the configured base (#17701)
  • 70b449d fix(routing): keep the trailing slash when stripping an injected .html (#17742)
  • 771b0a9 fix(container): wire astroConfig.site through to the SSR manifest so Astro.si...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the site-minor-patch group in /pages with 2 updates
fdaddc7 
Bumps the site-minor-patch group in /pages with 2 updates: [@astrojs/markdown-satteri](https://github.com/withastro/astro/tree/HEAD/packages/markdown/satteri) and [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro).


Updates `@astrojs/markdown-satteri` from 0.3.6 to 0.3.7
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/satteri/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-satteri@0.3.7/packages/markdown/satteri)

Updates `astro` from 7.2.3 to 7.2.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.2.4/packages/astro)

---
updated-dependencies:
- dependency-name: "@astrojs/markdown-satteri"
  dependency-version: 0.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: site-minor-patch
- dependency-name: astro
  dependency-version: 7.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: site-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the ready-for-human Requires human implementation label Aug 25, 2026
@socket-security

socket-security Bot commented Aug 25, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednpm/​@​astrojs/​markdown-satteri@​0.3.71001006795100
Addednpm/​astro@​7.2.4981008898100

View full report

@mschieller

mschieller commented Aug 25, 2026

Copy link
Copy Markdown
Collaborator

Closing: this group cannot land until Starlight moves to Sätteri 0.10.

astro@7.2.4 depends on @astrojs/markdown-satteri at an exact 0.3.7, and 0.3.7 moved from Sätteri 0.9 to 0.10. Starlight has not followed — 0.41.8, the newest release, still declares satteri: ^0.9.1 as a direct dependency. So the tree carries both satteri@0.9.5 and satteri@0.10.5, and pnpm check typechecks Starlight's integrations/markdown-plugins.ts against the two of them. That is the six TS2345s in the site job.

The two updates cannot be split. Holding @astrojs/markdown-satteri at 0.3.6 while taking astro 7.2.4 only gives astro its own 0.3.7 copy, which is worse than the duplicate it was meant to remove.

Forcing one version does not help either. With a pnpm override pinning satteri: 0.10.5, Starlight 0.41.7 still does not compile:

markdown-plugins.ts(31,39): error TS2345: Argument of type 'MdastPluginEntry'
  is not assignable to parameter of type 'MdastPluginDefinition'.
  Type 'undefined' is not assignable to type 'MdastPluginDefinition'.

That is API drift rather than duplicate-copy noise, and it is what withastro/starlight#4134 is for — still open, and wanting astro 7.2.5 by its own description.

Perch's own pages/src/plugins/guide-links.ts typechecks clean against Sätteri 0.10. The block is entirely Starlight's.

Reopened by hand, or by dependabot, once Starlight ships a release carrying #4134.

@mschieller mschieller closed this Aug 25, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/pages/site-minor-patch-91ed881508 branch August 25, 2026 15:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

ready-for-human Requires human implementation

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mschieller