Repository navigation
chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates - #133
Conversation
…dates Bumps the npm_and_yarn group with 3 updates in the /docs-site directory: [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro), [undici](https://github.com/nodejs/undici) and [zod](https://github.com/colinhacks/zod). Updates `astro` from 7.2.8 to 7.3.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.3.3/packages/astro) Updates `undici` from 8.10.2 to 8.12.3 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.10.2...v8.12.3) Updates `zod` from 4.4.3 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.6.7) --- updated-dependencies: - dependency-name: astro dependency-version: 7.3.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 8.12.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: zod dependency-version: 4.6.7 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
ECC Tools / Security EvidenceCommit: Security evidence gate passed (success) No security-sensitive scanner-evidence gap detected. Mode: enforce Scanned 2 changed file(s). No missing scanner-evidence signal was detected. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / PR Risk TaxonomyCommit: PR taxonomy review recommended (neutral) Detected 2 PR taxonomy bucket(s): Install Manifest Integrity, CI/CD Recommendation. Scanned 2 changed file(s). Roadmap taxonomy buckets: Install Manifest IntegrityInstall manifests, plugin metadata, and shipped skills should stay synchronized with user-facing setup guidance. Signals:
Paths:
CI/CD RecommendationCI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work. Signals:
Paths:
Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / Reference Set ReadinessCommit: Reference set readiness gaps detected (neutral) Reference evidence present for 0/7 areas (0%) across 2 changed file(s). This check is based on files changed in this PR. Repository-level readiness is still reported by
Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / Hosted Promotion ReadinessCommit: Hosted promotion readiness passed (success) No hosted promotion evidence gaps detected across 2 changed file(s); 0 corpus scenarios had matching evidence. This check compares PR file changes against the evaluator/RAG promotion corpus in No evaluator corpus scenarios matched this PR. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
|
📖 Docs preview deployed: https://js-validation.js.org/preview-pr-133/ |
Bumps the npm_and_yarn group with 3 updates in the /docs-site directory: astro, undici and zod.
Updates
astrofrom 7.2.8 to 7.3.3Release notes
Sourced from astro's releases.
... (truncated)
Changelog
Sourced from astro's changelog.
... (truncated)
Commits
8a3106e[ci] release (#17939)5efea1bAdd a version field to the astro-client-only fixture80f9f1dHash compiled CSS output in incremental build to detect Sass partial changes ...bc6572fRevert "Forward user class to Picture's outer element" (#18004) (#18030)0e5478dNormalize CRLF line endings before computing CSP hashes (#17998)30ef3cbfix: invalidate prerender environment in invalidateDataStore (#17991) (#17999)312ab49Fix redirect targets when a param value contains a$replacement pattern (#...1b5a234Fix trailing-slash redirect body to match the Location header target (#18018)558b301Fix prerendered Cloudflare pages rendering as [object Object] with nodejs_com...4464b3afix(assets): forward class to picture element in Picture component (#18003) (...Updates
undicifrom 8.10.2 to 8.12.3Release notes
Sourced from undici's releases.
... (truncated)
Commits
ff9cc5eBumped v8.12.3 (#6053)0bbf614fix(pool): keep caller async context for queued requests (#5982)aa1eef1fix(h2): replace a connection that stops responding after a stream timeout (#...e34b872docs: document the options of interceptors.cache() (#6050)e8f3423build(deps-dev): bump eslint from 9.39.4 to 10.12.0 (#5967)b777e40build(deps-dev): bump neostandard from 0.13.0 to 0.14.0 (#6006)43700ffci: use Python 3.14 for the WPT server on macOS (#6029)bb6cc0aBumped v8.12.2 (#6021)b217373fix(websocket): bound automatic PONG writes under backpressure789ef26fix(eventsource): bound retained SSE parser stateUpdates
zodfrom 4.4.3 to 4.6.7Release notes
Sourced from zod's releases.
... (truncated)
Commits
b500a2e4.6.79c21983ci: stage at verbose so a failed OIDC token exchange says why529f78d4.6.6a0ebf97fix(v4): check array, set and map size bounds before parsing elements (#6652)a2ba4a6fix(types): declare record output and input as members, not base type argumen...c42596brelease: hold the run on the release-approval environment until the staged ve...bacad51docs: square the Code for Japan logo to match the other bronze tiles8fb2fafdocs: crop the Code for Japan logo and list it first in bronzeb2ef983docs: add Code for Japan to bronze sponsors74304cerelease: stage npm versions instead of publishing them (#6622)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.