Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 12 updates - #41

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4148aa0260
Open

chore(deps): bump the production-dependencies group across 1 directory with 12 updates#41
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-4148aa0260

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 12 updates in the / directory:

Package From To
picomatch 4.0.5 4.0.7
smol-toml 1.7.0 1.8.0
acorn 8.17.0 8.18.0
p-retry 8.0.0 8.0.1
satteri 0.9.4 0.10.5
astro 7.2.9 7.3.1
@fontsource-variable/inter 5.2.8 5.3.0
@fontsource-variable/jetbrains-mono 5.2.8 5.3.0
astro-og-canvas 0.13.0 0.13.1
canvaskit-wasm 0.41.1 0.42.0
sharp 0.35.3 0.35.4
shiki 4.3.1 4.4.3

Updates picomatch from 4.0.5 to 4.0.7

Release notes

Sourced from picomatch's releases.

4.0.7

What's Changed

Full Changelog: micromatch/picomatch@4.0.6...4.0.7

4.0.6

What's Changed

Full Changelog: micromatch/picomatch@4.0.5...4.0.6

Changelog

Sourced from picomatch's changelog.

4.0.7 (2026-08-24)

Fixed

  • Fixed terminal globstars in parenthesized patterns (#142, e279bd7).

4.0.6 (2026-08-24)

Fixed

  • scan() now scans the full pattern when tokens are requested, instead of merging the remaining path segments into the final token (#62, 5f5819d).
  • scan() now returns complete pattern parts, including leading and trailing empty segments, and handles nested and escaped parentheses correctly (#58, f201165).
Commits
  • 6bb4067 4.0.7
  • fdfb155 Merge pull request #198 from micromatch/issue-142
  • 38c6b7a 4.0.6
  • ada9d3f Merge pull request #199 from micromatch/issue-58
  • 9b74f6f Merge pull request #197 from micromatch/issue-62
  • f201165 fix: return complete pattern parts from scan
  • e279bd7 fix: handle terminal globstars in parenthesized patterns
  • 5f5819d fix: scan full pattern when tokens are requested
  • See full diff in compare view

Updates smol-toml from 1.7.0 to 1.8.0

Release notes

Sourced from smol-toml's releases.

v1.8.0

What's Changed

Full Changelog: squirrelchat/smol-toml@v1.7.2...v1.8.0

v1.7.2

What's Changed

Full Changelog: squirrelchat/smol-toml@v1.7.1...v1.7.2

v1.7.1

This release includes flagging internal functions as @internal to strip them from the emitted type declarations.

⚠️ Includes a fix for GHSA-7w5x-hrqm-74c2

Full Changelog: squirrelchat/smol-toml@v1.7.0...v1.7.1

Commits
  • 6d0f477 chore: bump version
  • 97e9713 docs: mention temporal api
  • 7a3068d perf: ubench opt for instanceof Date
  • 7e8c09a feat: stringify temporal
  • 19239d0 chore: bump version
  • 5f55c3a chore: revert sourcemap publishing
  • 5c26f1b chore: update benchmarks
  • 92832d2 refactor: better logic orchestration in structs
  • 2fb9ab8 refactor: ctx object instead of pointer arg + tuple returns
  • e6017c4 ci: use staged publish
  • Additional commits viewable in compare view

Updates acorn from 8.17.0 to 8.18.0

Commits
  • d788421 Mark version 8.18.0
  • b61cb9a Add startLocation option
  • c8d515c Don't compute curLine when locations are off
  • a7bd3cd Reject an unparenthesized arrow function as the left operand of **
  • b7c31b6 Fix mistake in previous patch
  • 5c4af50 Avoid scanning from start of document in loose parser's resetTo
  • See full diff in compare view

Updates p-retry from 8.0.0 to 8.0.1

Release notes

Sourced from p-retry's releases.

v8.0.1

  • Fix error for invalid fractional retry counts 3c22035

sindresorhus/p-retry@v8.0.0...v8.0.1

Commits

Updates satteri from 0.9.4 to 0.10.5

Release notes

Sourced from satteri's releases.

satteri-v0.10.5

Patch changes

  • Updated dependencies: satteri-mdxjs (Cargo)@​0.3.13

satteri-v0.10.4

Patch changes

  • Updated dependencies: satteri-mdxjs (Cargo)@​0.3.13

satteri-v0.10.3

Patch changes

  • 2cf9aef Added clobberPrefix option to footnotes, mirroring remark-rehype — Thanks @​Princesseuh!
  • Updated dependencies: satteri-ast (Cargo)@​0.5.3, satteri-mdxjs (Cargo)@​0.3.12, satteri-pulldown-cmark (Cargo)@​0.6.3

satteri-v0.10.2

Patch changes

  • Updated dependencies: satteri-ast (Cargo)@​0.5.2, satteri-mdxjs (Cargo)@​0.3.11, satteri-pulldown-cmark (Cargo)@​0.6.2

satteri-v0.10.1

Patch changes

  • Updated dependencies: satteri-ast (Cargo)@​0.5.1, satteri-mdxjs (Cargo)@​0.3.10, satteri-pulldown-cmark (Cargo)@​0.6.1

satteri-v0.10.0

Patch changes

  • 0d26ea6 Changed the minimum supported Rust version to 1.85, as these crates now build on the 2024 edition. — Thanks @​Princesseuh!
  • Updated dependencies: satteri-ast (Cargo)@​0.5.0, satteri-mdxjs (Cargo)@​0.3.9, satteri-pulldown-cmark (Cargo)@​0.6.0

satteri-v0.9.5

Patch changes

  • Updated dependencies: satteri-ast (Cargo)@​0.4.2, satteri-mdxjs (Cargo)@​0.3.8, satteri-pulldown-cmark (Cargo)@​0.5.8
Commits
  • b3d38e1 Release (main) (#276)
  • 393aed7 fix(release): fail the job when a native binding fails to publish (#275)
  • f2eb29a Release (main) (#273)
  • 72d4710 fix(mdx): key explicit JSX by node identity instead of span (#272)
  • f339a9c chore(website): update playground to satteri 0.10.3 (#269)
  • 5df21fc Release (main) (#268)
  • 1a052cf chore(changeset): collapse the pipeline performance changesets into one
  • 2cf9aef Revert "Release (main) (#267)"
  • a7132d2 Release (main) (#267)
  • d21f486 perf: cut per-call cost across the parser, renderer, and napi boundary (#257)
  • Additional commits viewable in compare view

Updates astro from 7.2.9 to 7.3.1

Release notes

Sourced from astro's releases.

astro@7.3.1

Patch Changes

astro@7.3.0

Minor Changes

  • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

    Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { LocalImageService } from 'astro';
    const service: LocalImageService = {
    // ...
    async transform(inputBuffer, transform, imageConfig, logger) {
    logger.warn(Could not optimize "${transform.src}". Passing it through unchanged.);
    return { data: inputBuffer, format: 'png' };
    },
    };

    Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

    Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { CacheProvider } from 'astro';
    const provider: CacheProvider = {
    name: 'my-cache',
    async onRequest({ request, url, logger }, next) {
    logger.warn(Skipping cache for ${url.pathname} because the response sets a cookie.);
    return next();
    },
    // ...
    };

    Astro's built-in memoryCache() provider now uses this logger for the warnings it emits when it skips caching a response that sets cookies, and when a background revalidation fails.

Patch Changes

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Updates Astro's remaining internal warnings and errors to be written through the configured logger instead of directly to the console, when possible

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.1

Patch Changes

7.3.0

Minor Changes

  • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

    Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { LocalImageService } from 'astro';
    const service: LocalImageService = {
    // ...
    async transform(inputBuffer, transform, imageConfig, logger) {
    logger.warn(Could not optimize "${transform.src}". Passing it through unchanged.);
    return { data: inputBuffer, format: 'png' };
    },
    };

    Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

    Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { CacheProvider } from 'astro';
    const provider: CacheProvider = {
    name: 'my-cache',
    async onRequest({ request, url, logger }, next) {
    logger.warn(Skipping cache for ${url.pathname} because the response sets a cookie.);
    return next();
    },
    // ...
    };

    Astro's built-in memoryCache() provider now uses this logger for the warnings it emits when it skips caching a response that sets cookies, and when a background revalidation fails.

Patch Changes

... (truncated)

Commits

Updates @fontsource-variable/inter from 5.2.8 to 5.3.0

Commits

Updates @fontsource-variable/jetbrains-mono from 5.2.8 to 5.3.0

Commits

Updates astro-og-canvas from 0.13.0 to 0.13.1

Release notes

Sourced from astro-og-canvas's releases.

astro-og-canvas@0.13.1

Patch Changes

Changelog

Sourced from astro-og-canvas's changelog.

0.13.1

Patch Changes

Commits

Updates canvaskit-wasm from 0.41.1 to 0.42.0

Commits

Updates sharp from 0.35.3 to 0.35.4

Release notes

Sourced from sharp's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

v0.35.4-rc.0

Commits
  • 7f1a0a2 Release v0.35.4
  • f927818 Upgrade to sharp-libvips v1.3.3
  • e802092 Prerelease v0.35.4-rc.0
  • e13eb2f CI: Fix wasm32 build (#4589)
  • a82a0b3 Upgrade to libvips v8.18.6
  • 8044fe4 Bound resize dimensions to coordinate limit
  • 147f859 Docs: changelog entries for #4578 #4584
  • ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
  • 7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
  • ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
  • Additional commits viewable in compare view

Updates shiki from 4.3.1 to 4.4.3

Release notes

Sourced from shiki's releases.

v4.4.3

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v4.4.2

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.4.1

   🚀 Features

    View changes on GitHub

v4.4.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 6, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Sep 6, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
polystella-docs b10fe86 Commit Preview URL

Branch Preview URL
Sep 07 2026, 02:16 PM

@github-actions github-actions Bot added area/docs Documentation area/parsing File parsing and adapters area/translation Translation pipeline and providers bot Opened by automation size/XL 500+ changed lines labels Sep 6, 2026
@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

Scope check

This PR changes 1,377 lines across 6 files. PolyStella is maintained by a small team, so smaller focused PRs are more likely to be reviewed.

If this scope is intentional, no action is required.

@pkg-pr-new

pkg-pr-new Bot commented Sep 6, 2026

Copy link
Copy Markdown

Open in StackBlitz

@cloudflare/polystella-adapters

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella-adapters@b10fe86

@cloudflare/polystella-astro

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella-astro@b10fe86

@cloudflare/polystella-cli

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella-cli@b10fe86

@cloudflare/polystella-core

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella-core@b10fe86

@cloudflare/polystella-emdash

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella-emdash@b10fe86

@cloudflare/polystella

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella@b10fe86

@cloudflare/polystella-providers

npm i https://pkg.pr.new/cloudflare/polystella/@cloudflare/polystella-providers@b10fe86

commit: b10fe86

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Sep 6, 2026

Copy link
Copy Markdown

🚀 Deploying Preview to Cloudflare 🚀

Preview Deployments by commit

Status Deployment URL Commit Updated (UTC) See this deployment's details
  • Build: Failed ❌

View logs ↗
b10fe86 2026-09-07T14:16:57.315Z View logs ↗
  • Build: Failed ❌

View logs ↗
46e365e 2026-09-06T01:29:36.536Z View logs ↗

…y with 12 updates

Bumps the production-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [picomatch](https://github.com/micromatch/picomatch) | `4.0.5` | `4.0.7` |
| [smol-toml](https://github.com/squirrelchat/smol-toml) | `1.7.0` | `1.8.0` |
| [acorn](https://github.com/acornjs/acorn) | `8.17.0` | `8.18.0` |
| [p-retry](https://github.com/sindresorhus/p-retry) | `8.0.0` | `8.0.1` |
| [satteri](https://github.com/bruits/satteri) | `0.9.4` | `0.10.5` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.9` | `7.3.1` |
| [@fontsource-variable/inter](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/inter) | `5.2.8` | `5.3.0` |
| [@fontsource-variable/jetbrains-mono](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/jetbrains-mono) | `5.2.8` | `5.3.0` |
| [astro-og-canvas](https://github.com/delucis/astro-og-canvas/tree/HEAD/packages/astro-og-canvas) | `0.13.0` | `0.13.1` |
| [canvaskit-wasm](https://github.com/google/skia) | `0.41.1` | `0.42.0` |
| [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.4` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.3.1` | `4.4.3` |



Updates `picomatch` from 4.0.5 to 4.0.7
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@4.0.5...4.0.7)

Updates `smol-toml` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.7.0...v1.8.0)

Updates `acorn` from 8.17.0 to 8.18.0
- [Commits](acornjs/acorn@8.17.0...8.18.0)

Updates `p-retry` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/sindresorhus/p-retry/releases)
- [Commits](sindresorhus/p-retry@v8.0.0...v8.0.1)

Updates `satteri` from 0.9.4 to 0.10.5
- [Release notes](https://github.com/bruits/satteri/releases)
- [Commits](bruits/satteri@satteri-v0.9.4...satteri-v0.10.5)

Updates `astro` from 7.2.9 to 7.3.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.1/packages/astro)

Updates `@fontsource-variable/inter` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/inter)

Updates `@fontsource-variable/jetbrains-mono` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/jetbrains-mono)

Updates `astro-og-canvas` from 0.13.0 to 0.13.1
- [Release notes](https://github.com/delucis/astro-og-canvas/releases)
- [Changelog](https://github.com/delucis/astro-og-canvas/blob/latest/packages/astro-og-canvas/CHANGELOG.md)
- [Commits](https://github.com/delucis/astro-og-canvas/commits/astro-og-canvas@0.13.1/packages/astro-og-canvas)

Updates `canvaskit-wasm` from 0.41.1 to 0.42.0
- [Changelog](https://github.com/google/skia/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/google/skia/commits/canvaskit/0.42.0)

Updates `sharp` from 0.35.3 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.3...v0.35.4)

Updates `shiki` from 4.3.1 to 4.4.3
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.4.3/packages/shiki)

---
updated-dependencies:
- dependency-name: "@fontsource-variable/inter"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@fontsource-variable/jetbrains-mono"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: acorn
  dependency-version: 8.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: astro
  dependency-version: 7.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: astro-og-canvas
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: canvaskit-wasm
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: p-retry
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: picomatch
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: satteri
  dependency-version: 0.10.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: shiki
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: smol-toml
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-4148aa0260 branch from 46e365e to b10fe86 Compare September 7, 2026 14:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/docs Documentation area/parsing File parsing and adapters area/translation Translation pipeline and providers bot Opened by automation dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code size/XL 500+ changed lines

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants