Skip to content

chore(deps): bump the minor-and-patch group with 14 updates - #168

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-41820a35f4
Open

chore(deps): bump the minor-and-patch group with 14 updates#168
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-41820a35f4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 14 updates:

Package From To
@astrojs/check 0.9.9 0.9.10
@astrojs/sitemap 3.7.3 3.7.4
@expressive-code/core 0.44.1 0.44.2
@expressive-code/plugin-collapsible-sections 0.44.1 0.44.2
@expressive-code/plugin-line-numbers 0.44.1 0.44.2
@iconify-json/material-symbols 1.2.87 1.2.90
astro-expressive-code 0.44.1 0.44.2
astro-icon 1.1.5 1.2.0
katex 0.18.1 0.18.5
sanitize-html 2.17.6 2.17.7
sharp 0.35.3 0.35.4
svelte 5.56.8 5.57.0
@astrojs/ts-plugin 1.10.10 1.10.11
@biomejs/biome 2.5.5 2.5.12

Updates @astrojs/check from 0.9.9 to 0.9.10

Release notes

Sourced from @​astrojs/check's releases.

@​astrojs/check@​0.9.10

Patch Changes

Changelog

Sourced from @​astrojs/check's changelog.

0.9.10

Patch Changes

Commits

Updates @astrojs/sitemap from 3.7.3 to 3.7.4

Release notes

Sourced from @​astrojs/sitemap's releases.

@​astrojs/sitemap@​3.7.4

Patch Changes

  • #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"
Changelog

Sourced from @​astrojs/sitemap's changelog.

3.7.4

Patch Changes

  • #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"
Commits

Updates @expressive-code/core from 0.44.1 to 0.44.2

Release notes

Sourced from @​expressive-code/core's releases.

@​expressive-code/core@​0.44.2

No release notes provided.

Changelog

Sourced from @​expressive-code/core's changelog.

0.44.2

Commits

Updates @expressive-code/plugin-collapsible-sections from 0.44.1 to 0.44.2

Release notes

Sourced from @​expressive-code/plugin-collapsible-sections's releases.

@​expressive-code/plugin-collapsible-sections@​0.44.2

Patch Changes

  • @​expressive-code/core@​0.44.2
Changelog

Sourced from @​expressive-code/plugin-collapsible-sections's changelog.

0.44.2

Patch Changes

  • @​expressive-code/core@​0.44.2
Commits

Updates @expressive-code/plugin-line-numbers from 0.44.1 to 0.44.2

Release notes

Sourced from @​expressive-code/plugin-line-numbers's releases.

@​expressive-code/plugin-line-numbers@​0.44.2

Patch Changes

  • @​expressive-code/core@​0.44.2
Changelog

Sourced from @​expressive-code/plugin-line-numbers's changelog.

0.44.2

Patch Changes

  • @​expressive-code/core@​0.44.2
Commits

Updates @iconify-json/material-symbols from 1.2.87 to 1.2.90

Commits

Updates astro-expressive-code from 0.44.1 to 0.44.2

Release notes

Sourced from astro-expressive-code's releases.

astro-expressive-code@0.44.2

Patch Changes

  • rehype-expressive-code@0.44.2
Changelog

Sourced from astro-expressive-code's changelog.

0.44.2

Patch Changes

  • rehype-expressive-code@0.44.2
Commits

Updates astro-icon from 1.1.5 to 1.2.0

Release notes

Sourced from astro-icon's releases.

astro-icon@1.2.0

Minor Changes

  • #290 956817e Thanks @​stramel! - Bump @iconify/tools to v5 and @iconify/utils to v3, removing the transitive extract-zip dependency that was flagged for a symlink path-traversal vulnerability (GHSA-jmr9-qjv8-65gv).

    Requires Node ≥22.12 — @iconify/utils v3 uses node:util's styleText, which needs Node ≥20.12/21.7, but the toolchain now also builds against Astro 7 (which itself requires Node ≥22.12). Node 20 reached end-of-life in April 2026, so astro-icon's engines field is raised to the currently-supported floor rather than the bare minimum.

  • #285 2e83ca0 Thanks @​stramel! - title/desc props now accept { id, value } in addition to a plain string, so consumers can set id attributes on the generated <title>/<desc> elements for aria-labelledby referencing.

Patch Changes

  • #291 3db45a5 Thanks @​stramel! - Strip the lastModified timestamp from the generated local icon collection so its output is deterministic across builds, allowing Astro's incremental build cache to work as expected.

  • #288 adb18cf Thanks @​stramel! - Log a warning instead of silently swallowing errors when the local icon collection fails to load, so failures during dev/build are visible instead of hidden.

  • #287 fd5d522 Thanks @​stramel! - Fix icon dir watcher so newly added local icons (including files inside subfolders) are picked up without restarting the dev server

  • #282 8904693 Thanks @​stramel! - Update @iconify/tools and @iconify/utils to resolve axios and undici vulnerabilities pulled in transitively.

  • #286 6af6fcf Thanks @​stramel! - Fix viewBox being inconsistently present on <svg> elements across repeated uses of the same icon. The viewBox is now always kept on the <svg> element, so attributes that depend on it (such as preserveAspectRatio) continue to work. Icons whose viewBox has a non-zero min-x/min-y keep a viewBox on their shared <symbol> and anchor their <use> element, so they stay positioned correctly and a per-instance viewBox override no longer leaks onto other instances of the same icon.

  • #281 df57ce6 Thanks @​stramel! - Fix duplicate/incorrect icons rendering in Chromium-based browsers by rewriting internal SVG ids (e.g. gradients, clip paths) to be unique per rendered icon.

  • #284 09177dd Thanks @​stramel! - Fixes Astro.request.headers warning on prerendered pages by keying the internal per-render icon cache off Astro.locals instead of Astro.request

Changelog

Sourced from astro-icon's changelog.

1.2.0

Minor Changes

  • #290 956817e Thanks @​stramel! - Bump @iconify/tools to v5 and @iconify/utils to v3, removing the transitive extract-zip dependency that was flagged for a symlink path-traversal vulnerability (GHSA-jmr9-qjv8-65gv).

    Requires Node ≥22.12 — @iconify/utils v3 uses node:util's styleText, which needs Node ≥20.12/21.7, but the toolchain now also builds against Astro 7 (which itself requires Node ≥22.12). Node 20 reached end-of-life in April 2026, so astro-icon's engines field is raised to the currently-supported floor rather than the bare minimum.

  • #285 2e83ca0 Thanks @​stramel! - title/desc props now accept { id, value } in addition to a plain string, so consumers can set id attributes on the generated <title>/<desc> elements for aria-labelledby referencing.

Patch Changes

  • #291 3db45a5 Thanks @​stramel! - Strip the lastModified timestamp from the generated local icon collection so its output is deterministic across builds, allowing Astro's incremental build cache to work as expected.

  • #288 adb18cf Thanks @​stramel! - Log a warning instead of silently swallowing errors when the local icon collection fails to load, so failures during dev/build are visible instead of hidden.

  • #287 fd5d522 Thanks @​stramel! - Fix icon dir watcher so newly added local icons (including files inside subfolders) are picked up without restarting the dev server

  • #282 8904693 Thanks @​stramel! - Update @iconify/tools and @iconify/utils to resolve axios and undici vulnerabilities pulled in transitively.

  • #286 6af6fcf Thanks @​stramel! - Fix viewBox being inconsistently present on <svg> elements across repeated uses of the same icon. The viewBox is now always kept on the <svg> element, so attributes that depend on it (such as preserveAspectRatio) continue to work. Icons whose viewBox has a non-zero min-x/min-y keep a viewBox on their shared <symbol> and anchor their <use> element, so they stay positioned correctly and a per-instance viewBox override no longer leaks onto other instances of the same icon.

  • #281 df57ce6 Thanks @​stramel! - Fix duplicate/incorrect icons rendering in Chromium-based browsers by rewriting internal SVG ids (e.g. gradients, clip paths) to be unique per rendered icon.

  • #284 09177dd Thanks @​stramel! - Fixes Astro.request.headers warning on prerendered pages by keying the internal per-render icon cache off Astro.locals instead of Astro.request

Commits
  • c079583 chore: release (#283)
  • eb0663b fix: keep viewBox on the svg wrapper instead of stripping it (#298)
  • d90facd chore: raise Node engines floor to >=22.12 (#296)
  • bb9e07e chore: format .astro files with prettier-plugin-astro (#295)
  • 9a2964b chore: bump dependencies to resolve pnpm audit vulnerabilities (#294)
  • 2e83ca0 feat: allow setting id on title/desc elements (#285)
  • 5f94dfc chore: require Node >=20.12 and mark @​iconify/tools v5 bump as minor (#293)
  • 3db45a5 fix: strip lastModified from local icon collection for deterministic output (...
  • 956817e fix: bump @​iconify/tools to v5 to remove vulnerable extract-zip dependency (#...
  • adb18cf fix: warn instead of silently swallowing local collection load errors (#288)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro-icon since your current version.


Updates katex from 0.18.1 to 0.18.5

Release notes

Sourced from katex's releases.

v0.18.5

0.18.5 (2026-08-31)

Bug Fixes

v0.18.4

0.18.4 (2026-08-10)

Bug Fixes

v0.18.3

0.18.3 (2026-08-09)

Bug Fixes

v0.18.2

0.18.2 (2026-08-08)

Bug Fixes

Changelog

Sourced from katex's changelog.

0.18.5 (2026-08-31)

Bug Fixes

0.18.4 (2026-08-10)

Bug Fixes

0.18.3 (2026-08-09)

Bug Fixes

0.18.2 (2026-08-08)

Bug Fixes

Commits
  • 7f46076 chore(release): 0.18.5 [ci skip]
  • 6805538 fix(char): accept U+10FFFF (#4265)
  • 0df23bb chore(deps): bump github/codeql-action from 4.37.7 to 4.37.8 (#4273)
  • bd78fad chore(deps): update dependency commander to v15 (#4271)
  • 87d99bb chore(deps): bump github/codeql-action from 4.37.6 to 4.37.7 (#4268)
  • a6646b2 chore(deps): bump github/codeql-action from 4.37.4 to 4.37.6 (#4264)
  • 49dc3d9 chore(release): 0.18.4 [ci skip]
  • e507f75 fix(environment): report invalid environment names as ParseError (#4256)
  • f0f46a8 chore(release): 0.18.3 [ci skip]
  • 1c973ae fix: allow braced arguments for delimsizing (#4255)
  • Additional commits viewable in compare view

Updates sanitize-html from 2.17.6 to 2.17.7

Changelog

Sourced from sanitize-html's changelog.

2.17.7 (2026-08-13)

Security

  • Fixed an XSS / URL scheme policy bypass affecting configurations that allow the SVG animation elements (animate, animateColor, animateMotion, animateTransform or set) together with attributeName and one of the animation value attributes. The default configuration was not affected, as these elements are not in the default allowedTags. apostrophecms was not affected. Thanks to koyokr for responsibly disclosing the vulnerability (GHSA-g8qq-57p8-ggw5).
Commits

Updates sharp from 0.35.3 to 0.35.4

Release notes

Sourced from sharp's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

v0.35.4-rc.0

Commits
  • 7f1a0a2 Release v0.35.4
  • f927818 Upgrade to sharp-libvips v1.3.3
  • e802092 Prerelease v0.35.4-rc.0
  • e13eb2f CI: Fix wasm32 build (#4589)
  • a82a0b3 Upgrade to libvips v8.18.6
  • 8044fe4 Bound resize dimensions to coordinate limit
  • 147f859 Docs: changelog entries for #4578 #4584
  • ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
  • 7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
  • ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
  • Additional commits viewable in compare view

Updates svelte from 5.56.8 to 5.57.0

Release notes

Sourced from svelte's releases.

svelte@5.57.0

Minor Changes

  • feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

  • feat: add has function to createContext (#18472)

  • feat: support defaultValue on <select> (#18591)

  • feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

  • fix: block template store subscriptions on the promise that assigns the store (#18582)

  • fix: route $derived teardown errors through invoke_error_boundary (#18486)

  • fix: track SvelteDate snapshots in reactions (#18700)

  • fix: remove <svelte:head> anchors on unmount (#18697)

  • fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

  • perf: reuse the cached value in the <option>/<select> value guard (#18713)

  • fix: prevent malformed AST output for <select> with static value attribute (#18449)

  • fix: apply ownership mutation ignores to binding assignments (#18718)

  • fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

  • fix: preserve whitespace after inline elements when printing (#18685)

  • perf: fold SSR block-open markers into the branch's first push (#18712)

  • fix: run onDestroy callbacks when a server render throws (#18585)

  • fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

  • fix: never apply class hash to elements inside <svelte:head> (#18160)

  • fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

  • fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

  • perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

  • fix: distinct memoizer on style/class directives (#18466)

  • fix: measure nested transitions before applying their starting styles (#18647)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.57.0

Minor Changes

  • feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

  • feat: add has function to createContext (#18472)

  • feat: support defaultValue on <select> (#18591)

  • feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

  • fix: block template store subscriptions on the promise that assigns the store (#18582)

  • fix: route $derived teardown errors through invoke_error_boundary (#18486)

  • fix: track SvelteDate snapshots in reactions (#18700)

  • fix: remove <svelte:head> anchors on unmount (#18697)

  • fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

  • perf: reuse the cached value in the <option>/<select> value guard (#18713)

  • fix: prevent malformed AST output for <select> with static value attribute (#18449)

  • fix: apply ownership mutation ignores to binding assignments (#18718)

  • fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

  • fix: preserve whitespace after inline elements when printing (#18685)

  • perf: fold SSR block-open markers into the branch's first push (#18712)

  • fix: run onDestroy callbacks when a server render throws (#18585)

  • fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

  • fix: never apply class hash to elements inside <svelte:head> (#18160)

  • fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

  • fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

  • perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

  • fix: distinct memoizer on style/class directives (#18466)

... (truncated)

Commits
  • 7bc0a70 Version Packages (#18682)
  • 6374a2a chore: move @types/trusted-types to devDependencies (#18730)
  • 4ae5eb3 feat: add has function to createContext (#18472)
  • 5034b59 chore: bump playwright (#18729)
  • 74197cc feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)
  • edbe11e fix: properly apply static textarea value attribute during CSR (#18727)
  • 05b6916 fix: omit bind:focused from SSR output (#18724)
  • 7c6f36a fix: keep boolean attributes with an empty string value when rendering attrib...
  • 2e8b57b fix: render selected options for \<select multiple> with an array value ...
  • 864de81 fix: keep the current selection of a \<select> when its defaultValue is ap...
  • Additional commits viewable in compare view

Updates @astrojs/ts-plugin from 1.10.10 to 1.10.11

Release notes

Sourced from @​astrojs/ts-plugin's releases.

@​astrojs/ts-plugin@​1.10.11

Patch Changes

  • #17668 bef9db5 Thanks @​lazerg! - Fixes Astro's ambient types leaking into unrelated TypeScript projects. In a monorepo with hoisted node_modules, the plugin found the shared astro install from any project and injected env.d.ts and astro-jsx.d.ts into it, which pulled @types/node into projects that never asked for it. The plugin now only injects those types when the project actually depends on astro or has an astro.config.* file.
Changelog

Sourced from @​astrojs/ts-plugin's changelog.

1.10.11

Patch Changes

  • #17668 bef9db5 Thanks @​lazerg! - Fixes Astro's ambient types leaking into unrelated TypeScript projects. In a monorepo with hoisted node_modules, the plugin found the shared astro install from any project and injected env.d.ts and astro-jsx.d.ts into it, which pulled @types/node into projects that never asked for it. The plugin now only injects those types when the project actually depends on astro or has an astro.config.* file.
Commits

Updates @biomejs/biome from 2.5.5 to 2.5.12

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.12

2.5.12

Patch Changes

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed Astro attribute expressions rejecting TypeScript and JSX syntax that is accepted in text expressions.

    <Component icon={<Icon />} count={total as number} onSelect={(e: Event) => e} />

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed Astro attribute names being split on : and . inside an expression, such as {x && <button x-on:keyup.enter={go} client:load.foo />}.

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed a bare > in the children of an Astro expression being treated as markup, such as {x && <div>a > b</div>}.

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed HTML comments inside an Astro expression failing to parse. They are now read as trivia, wherever they appear among the children.

    {x && <div><!-- first -->text<!-- last --></div>}
{cond && <a></a><!-- c --><b></b>}

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed is:raw children inside an Astro expression being read as JSX, such as {x && <div is:raw>{not js} < & text</div>}.

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed an apostrophe or quote in the text of a JSX element inside an Astro expression ending the expression early, such as {items.map((i) => <li>it's {i}</li>)}.

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed the children of a <script> or <style> inside an Astro expression being read as JSX. Their contents are text, so braces and comparisons no longer have to be escaped.

    {cond && <style>a { color: red }</style>}
{cond && <script>let x = {a: 1};</script>}

  • #11440 b88f1ea Thanks @​Princesseuh! - Added support for template literal attribute values inside an Astro expression, such as {x && <C data-x=`t${x}` />}.

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed unquoted attribute values being rejected inside an Astro expression, such as {x && <a class=foo maxlength=255 href=/about>go</a>}.

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed a template literal nested inside ${} breaking the rest of an Astro file, such as const href = `/blog${page === 0 ? '' : `/${page + 1}`}`;.

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed a quote inside a regex character class breaking the rest of an Astro file, such as const unsafe = /[/"]/;.

  • #11508 54f3a2e Thanks @​dyc3! - Added the nursery rule useFlatMathMinMax. Because Math.min() and Math.max() accept any number of arguments, the rule reports unnecessary nested calls to the same method:

    Math.max(Math.max(a, b), c);

    The fix flattens this expression to Math.max(a, b, c).

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.12

Patch Changes

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed Astro attribute expressions rejecting TypeScript and JSX syntax that is accepted in text expressions.

    <Component icon={<Icon />} count={total as number} onSelect={(e: Event) => e} />

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed Astro attribute names being split on : and . inside an expression, such as {x && <button x-on:keyup.enter={go} client:load.foo />}.

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed a bare > in the children of an Astro expression being treated as markup, such as {x && <div>a > b</div>}.

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed HTML comments inside an Astro expression failing to parse. They are now read as trivia, wherever they appear among the children.

    {x && <div><!-- first -->text<!-- last --></div>}
{cond && <a></a><!-- c --><b></b>}

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed is:raw children inside an Astro expression being read as JSX, such as {x && <div is:raw>{not js} < & text</div>}.

  • #11440 b88f1ea Thanks @​Princesseuh! - Fixed an apostrophe or quote in the text of a JSX element inside an Astro expression ending the expression early, such as {items.map((i) => <li>it's {i}</li>)}.

  • #11440 b88f1ea Thanks Description has been truncated

@dependabot
chore(deps): bump the minor-and-patch group with 14 updates
acde138 
Bumps the minor-and-patch group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/check](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check) | `0.9.9` | `0.9.10` |
| [@astrojs/sitemap](https://github.com/withastro/astro/tree/HEAD/packages/integrations/sitemap) | `3.7.3` | `3.7.4` |
| [@expressive-code/core](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/@expressive-code/core) | `0.44.1` | `0.44.2` |
| [@expressive-code/plugin-collapsible-sections](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/@expressive-code/plugin-collapsible-sections) | `0.44.1` | `0.44.2` |
| [@expressive-code/plugin-line-numbers](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/@expressive-code/plugin-line-numbers) | `0.44.1` | `0.44.2` |
| [@iconify-json/material-symbols](https://github.com/iconify/icon-sets) | `1.2.87` | `1.2.90` |
| [astro-expressive-code](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/astro-expressive-code) | `0.44.1` | `0.44.2` |
| [astro-icon](https://github.com/natemoo-re/astro-icon/tree/HEAD/packages/core) | `1.1.5` | `1.2.0` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.18.1` | `0.18.5` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.6` | `2.17.7` |
| [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.4` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.8` | `5.57.0` |
| [@astrojs/ts-plugin](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/ts-plugin) | `1.10.10` | `1.10.11` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.5` | `2.5.12` |


Updates `@astrojs/check` from 0.9.9 to 0.9.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/astro-check/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/check@0.9.10/packages/language-tools/astro-check)

Updates `@astrojs/sitemap` from 3.7.3 to 3.7.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/sitemap/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/sitemap@3.7.4/packages/integrations/sitemap)

Updates `@expressive-code/core` from 0.44.1 to 0.44.2
- [Release notes](https://github.com/expressive-code/expressive-code/releases)
- [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/@expressive-code/core/CHANGELOG.md)
- [Commits](https://github.com/expressive-code/expressive-code/commits/@expressive-code/core@0.44.2/packages/@expressive-code/core)

Updates `@expressive-code/plugin-collapsible-sections` from 0.44.1 to 0.44.2
- [Release notes](https://github.com/expressive-code/expressive-code/releases)
- [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/@expressive-code/plugin-collapsible-sections/CHANGELOG.md)
- [Commits](https://github.com/expressive-code/expressive-code/commits/@expressive-code/plugin-collapsible-sections@0.44.2/packages/@expressive-code/plugin-collapsible-sections)

Updates `@expressive-code/plugin-line-numbers` from 0.44.1 to 0.44.2
- [Release notes](https://github.com/expressive-code/expressive-code/releases)
- [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/@expressive-code/plugin-line-numbers/CHANGELOG.md)
- [Commits](https://github.com/expressive-code/expressive-code/commits/@expressive-code/plugin-line-numbers@0.44.2/packages/@expressive-code/plugin-line-numbers)

Updates `@iconify-json/material-symbols` from 1.2.87 to 1.2.90
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `astro-expressive-code` from 0.44.1 to 0.44.2
- [Release notes](https://github.com/expressive-code/expressive-code/releases)
- [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/astro-expressive-code/CHANGELOG.md)
- [Commits](https://github.com/expressive-code/expressive-code/commits/astro-expressive-code@0.44.2/packages/astro-expressive-code)

Updates `astro-icon` from 1.1.5 to 1.2.0
- [Release notes](https://github.com/natemoo-re/astro-icon/releases)
- [Changelog](https://github.com/natemoo-re/astro-icon/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/natemoo-re/astro-icon/commits/astro-icon@1.2.0/packages/core)

Updates `katex` from 0.18.1 to 0.18.5
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.18.1...v0.18.5)

Updates `sanitize-html` from 2.17.6 to 2.17.7
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.17.7/packages/sanitize-html)

Updates `sharp` from 0.35.3 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.3...v0.35.4)

Updates `svelte` from 5.56.8 to 5.57.0
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.0/packages/svelte)

Updates `@astrojs/ts-plugin` from 1.10.10 to 1.10.11
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/ts-plugin/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/ts-plugin@1.10.11/packages/language-tools/ts-plugin)

Updates `@biomejs/biome` from 2.5.5 to 2.5.12
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.12/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@astrojs/check"
  dependency-version: 0.9.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@astrojs/sitemap"
  dependency-version: 3.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@expressive-code/core"
  dependency-version: 0.44.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@expressive-code/plugin-collapsible-sections"
  dependency-version: 0.44.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@expressive-code/plugin-line-numbers"
  dependency-version: 0.44.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@iconify-json/material-symbols"
  dependency-version: 1.2.90
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: astro-expressive-code
  dependency-version: 0.44.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: astro-icon
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: katex
  dependency-version: 0.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sanitize-html
  dependency-version: 2.17.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: svelte
  dependency-version: 5.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@astrojs/ts-plugin"
  dependency-version: 1.10.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants