[dependabot]

Bumps the docs-dependencies group in /docs with 3 updates: @astrojs/markdown-satteri, @astrojs/starlight and astro.

Updates @astrojs/markdown-satteri from 0.4.5 to 0.4.6

Release notes

Sourced from @​astrojs/markdown-satteri's releases.

@​astrojs/markdown-satteri@​0.4.6

Patch Changes

• edfbf4a Thanks @​matthewp! - Fixes Prism code blocks for languages Prism doesn't support, such as vue or svelte. Their code is now displayed as plain text instead of being rendered as HTML. Also correctly escapes the code block language in the generated class and data-language attributes.
• Updated dependencies [edfbf4a]:
  • @​astrojs/prism@​4.1.2

Changelog

Sourced from @​astrojs/markdown-satteri's changelog.

0.4.6

Patch Changes

• edfbf4a Thanks @​matthewp! - Fixes Prism code blocks for languages Prism doesn't support, such as vue or svelte. Their code is now displayed as plain text instead of being rendered as HTML. Also correctly escapes the code block language in the generated class and data-language attributes.
• Updated dependencies [edfbf4a]:
  • @​astrojs/prism@​4.1.2

Commits

• fda754d [ci] release (#18478)
• edfbf4a Merge commit from fork
• See full diff in compare view

Updates @astrojs/starlight from 0.42.7 to 0.42.8

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.8

Patch Changes

• #4309 3490c80 Thanks @​athulsreekumar! - Fixes autogenerated sidebar groups omitting directories whose names match Object.prototype properties, such as constructor or toString

• #4290 bf93823 Thanks @​RaphaelFakhri! - Fixes missing last-updated dates in production builds for pages whose file path contains special characters

• #4295 af9557e Thanks @​delucis! - Fixes a formatting issue in some error messages impacting projects with Zod ≥4.5 installed

• #4299 a103f38 Thanks @​clean99! - Fixes empty sidebars when autogenerating entries from the docs root directory using directory: ''

Changelog

Sourced from @​astrojs/starlight's changelog.

0.42.8

Patch Changes

• #4309 3490c80 Thanks @​athulsreekumar! - Fixes autogenerated sidebar groups omitting directories whose names match Object.prototype properties, such as constructor or toString

• #4290 bf93823 Thanks @​RaphaelFakhri! - Fixes missing last-updated dates in production builds for pages whose file path contains special characters

• #4295 af9557e Thanks @​delucis! - Fixes a formatting issue in some error messages impacting projects with Zod ≥4.5 installed

• #4299 a103f38 Thanks @​clean99! - Fixes empty sidebars when autogenerating entries from the docs root directory using directory: ''

Commits

• 6c9ca43 [ci] release (#4298)
• 3490c80 Fix Object.prototype property names in autogenerated sidebars (#4309)
• bf93823 Fix last updated dates for file paths containing special characters (#4290)
• a103f38 Fix sidebar autogeneration from the docs root directory (#4299)
• af9557e Fix error map issue with Zod ≥4.5 (#4295)
• See full diff in compare view

Updates astro from 7.4.2 to 7.4.4

Release notes

Sourced from astro's releases.

astro@7.4.4

Patch Changes

• #18344 df838da Thanks @​edmundhung! - Allows astro add to configure tagged versions of official adapters

astro@7.4.4-beta.0

Patch Changes

• #18539 db62f3b Thanks @​matthewp! - Allows astro add to configure tagged versions of official adapters

astro@7.4.3

Patch Changes

• #18488 e4e25fa Thanks @​umeraamir69! - CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into script-src and style-src.

• #18500 e5a3a1b Thanks @​astro-factory! - Fixes <Image> and <Picture> emitting duplicate srcset candidates when densities contains equivalent values such as 1 and '1x'

• #18517 c3185b7 Thanks @​okxint! - Fix unhandled AbortError rejection when ClientRouter skips a pending view transition

• #18497 c712113 Thanks @​astro-factory! - Fixes an uncaught TypeError in the browser when a server:defer island request fails due to a network error. The fallback content is kept, as it is for non-200 responses.

• #18525 d0240b9 Thanks @​astro-factory! - Fixes a DEP0190 deprecation warning printed by astro info on Node.js 24 and later

• #18522 776b9a6 Thanks @​astro-factory! - Fixes memoryCache() serving an empty body for cached pages that return an empty 404 or 500 response. These responses now render the 404 or 500 error page on every request.

• #18511 d060ff9 Thanks @​astro-factory! - Fixes transition:name styles missing in dev when the element is inside a component that is only rendered through another component with no styles or scripts

• #18494 5fe699c Thanks @​astro-factory! - Fixes the astro CLI refusing to run on StackBlitz by allowing Node.js >=22.22.0 inside WebContainers, whose Node.js version users cannot change

• #18506 bf43a60 Thanks @​astro-factory! - Fixes <ClientRouter /> animating scroll restoration on back/forward navigation when scroll-behavior: smooth is set. Saved scroll positions are now restored instantly, matching the browser's native behavior.

• #18476 8ea79a2 Thanks @​astro-factory! - Fixes a DataCloneError crash when building pages that render SVG imports with <Image /> or getImage() while experimental.parallelPrerender is enabled.

• #18504 6dbd737 Thanks @​astro-factory! - Fixes <Picture> emitting a duplicate 1x candidate in <source> srcset when densities includes 1

• #18524 7524889 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Image />, <Picture />, <Code />, <Debug /> and <ClientRouter /> components when type-checking a project that extends astro/tsconfigs/strictest with tsc and @astrojs/ts-content-mapper

• #18493 3773941 Thanks @​astro-factory! - Fixes scoped styles of unused Astro components being included in the build when those components are re-exported from a barrel file

• #18512 1151b9e Thanks @​jp-knj! - Fixes CSP hashes added with Astro.csp from components rendered inside <body> being left out of the CSP <meta> element in static builds, including MDX pages

• Updated dependencies [6cf3423, edfbf4a]:

  • @​astrojs/telemetry@​3.4.2
  • @​astrojs/markdown-satteri@​0.4.6

Changelog

Sourced from astro's changelog.

7.4.4

Patch Changes

• #18344 df838da Thanks @​edmundhung! - Allows astro add to configure tagged versions of official adapters

7.4.3

Patch Changes

• #18488 e4e25fa Thanks @​umeraamir69! - CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into script-src and style-src.

• #18500 e5a3a1b Thanks @​astro-factory! - Fixes <Image> and <Picture> emitting duplicate srcset candidates when densities contains equivalent values such as 1 and '1x'

• #18517 c3185b7 Thanks @​okxint! - Fix unhandled AbortError rejection when ClientRouter skips a pending view transition

• #18497 c712113 Thanks @​astro-factory! - Fixes an uncaught TypeError in the browser when a server:defer island request fails due to a network error. The fallback content is kept, as it is for non-200 responses.

• #18525 d0240b9 Thanks @​astro-factory! - Fixes a DEP0190 deprecation warning printed by astro info on Node.js 24 and later

• #18522 776b9a6 Thanks @​astro-factory! - Fixes memoryCache() serving an empty body for cached pages that return an empty 404 or 500 response. These responses now render the 404 or 500 error page on every request.

• #18511 d060ff9 Thanks @​astro-factory! - Fixes transition:name styles missing in dev when the element is inside a component that is only rendered through another component with no styles or scripts

• #18494 5fe699c Thanks @​astro-factory! - Fixes the astro CLI refusing to run on StackBlitz by allowing Node.js >=22.22.0 inside WebContainers, whose Node.js version users cannot change

• #18506 bf43a60 Thanks @​astro-factory! - Fixes <ClientRouter /> animating scroll restoration on back/forward navigation when scroll-behavior: smooth is set. Saved scroll positions are now restored instantly, matching the browser's native behavior.

• #18476 8ea79a2 Thanks @​astro-factory! - Fixes a DataCloneError crash when building pages that render SVG imports with <Image /> or getImage() while experimental.parallelPrerender is enabled.

• #18504 6dbd737 Thanks @​astro-factory! - Fixes <Picture> emitting a duplicate 1x candidate in <source> srcset when densities includes 1

• #18524 7524889 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Image />, <Picture />, <Code />, <Debug /> and <ClientRouter /> components when type-checking a project that extends astro/tsconfigs/strictest with tsc and @astrojs/ts-content-mapper

• #18493 3773941 Thanks @​astro-factory! - Fixes scoped styles of unused Astro components being included in the build when those components are re-exported from a barrel file

• #18512 1151b9e Thanks @​jp-knj! - Fixes CSP hashes added with Astro.csp from components rendered inside <body> being left out of the CSP <meta> element in static builds, including MDX pages

• Updated dependencies [6cf3423, edfbf4a]:

  • @​astrojs/telemetry@​3.4.2
  • @​astrojs/markdown-satteri@​0.4.6

Commits

• 883e672 [ci] release (#18540)
• df838da astro add: configure tagged official adapters (#18344)
• fda754d [ci] release (#18478)
• 776b9a6 Prevent memory cache from storing empty 404/500 responses that would be rerou...
• d060ff9 Fix transition:name styles silently dropped in dev when component is nested u...
• 290b196 Merge commit from fork
• d0240b9 fix(cli): drop shell: true from astro info package manager calls to avoid DEP...
• 7524889 Fix type errors in shipped components under the strictest TypeScript preset...
• d53d823 [ci] format
• 6dbd737 fix(assets): avoid duplicate 1x candidate in Picture source srcset when densi...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: c3221dc7-a7c2-4769-825f-a6e9050dca53

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[cursor]

Docs-only Dependabot group bump. Diff is docs/package.json + docs/pnpm-lock.yaml.

Updates (all patches, past the 7-day gate):

• @astrojs/markdown-satteri 0.4.5 → 0.4.6 (2026-10-28) — Prism fallback/escaping for unsupported languages; this site uses Starlight/expressive-code, no svelte/vue fences
• @astrojs/starlight 0.42.7 → 0.42.8 (2026-10-30) — autogenerated-sidebar / last-updated / Zod error-format fixes; this site uses an explicit sidebar and does not enable lastUpdated
• astro 7.4.2 → 7.4.4 (2026-10-28) — 7.4.3 bugfixes (CSP empty-hash, Picture srcset, memoryCache, astro info DEP0190, WebContainer engines) plus 7.4.4 astro add tagged adapters. engines.node stays >=22.23.4. Transitives: @astrojs/prism 4.1.1 → 4.1.2, @astrojs/telemetry 3.4.1 → 3.4.2. starlight-llms-txt 0.12.0 peer range (starlight >=0.41.0, astro ^7) still satisfied.

Newer patches (astro 7.4.5–7.4.7, Starlight 0.42.9–0.42.10, satteri 0.4.7) are still inside the 7-day cooldown and correctly omitted.

Verification

• Frozen docs install OK (Node 22.23.4, pnpm 11.28.7)
• Production build: 54 pages, 47 images
• scripts/check-links.py: 0 problems across 54 pages
• Custom {#id} anchors still emit (id="requirements" on CLI, id="_top" from PageTitle.astro + default Starlight title)
• pnpm audit --prod in /docs: 0
• GitHub CI: Test, Build + Lint, Docs, CodeQL (both languages), Dependency Review, PR Title green

Plugin runtime is untouched. Title is build: without (deps), so this will not cut a release. Customizations (astro.config.mjs Sätteri headingAttributes, explicit sidebar, PageTitle / MarkdownContent overrides, theme-only custom.css) are unaffected.

Approving and squash-merging.

  

_{Sent by Cursor Automation: Dependabot PRs}