build(deps-dev): bump the astro group with 6 updates by dependabot[bot] · Pull Request #804 · sumup/sumup-developer

dependabot · 2026-07-03T03:14:25Z

Bumps the astro group with 6 updates:

Package	From	To
@astrojs/cloudflare	`14.1.0`	`14.1.1`
@astrojs/language-server	`2.16.10`	`2.16.11`
@astrojs/markdown-satteri	`0.3.2`	`0.3.3`
@astrojs/react	`6.0.0`	`6.0.1`
@astrojs/ts-plugin	`1.10.9`	`1.10.10`
astro	`7.0.5`	`7.0.6`

Updates @astrojs/cloudflare from 14.1.0 to 14.1.1

Release notes

Sourced from @astrojs/cloudflare's releases.

@astrojs/cloudflare@14.1.1

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

@astrojs/underscore-redirects@1.0.3

Changelog

Sourced from @astrojs/cloudflare's changelog.

14.1.1

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

@astrojs/underscore-redirects@1.0.3

Commits

a86160e [ci] release (#17256)
See full diff in compare view

Updates @astrojs/language-server from 2.16.10 to 2.16.11

Release notes

Sourced from @astrojs/language-server's releases.

@astrojs/language-server@2.16.11

Patch Changes

#17059 60cb289 Thanks @dupontcyborg! - Update volar-service-* dependencies from 0.0.70 to 0.0.71 to pull in yaml-language-server 1.23.0 and yaml 2.8.3, resolving CVE-2026-33532 (GHSA-48c2-rrv3-qjmp), a denial-of-service vulnerability in yaml <2.8.3.

Changelog

Sourced from @astrojs/language-server's changelog.

2.16.11

Patch Changes

#17059 60cb289 Thanks @dupontcyborg! - Update volar-service-* dependencies from 0.0.70 to 0.0.71 to pull in yaml-language-server 1.23.0 and yaml 2.8.3, resolving CVE-2026-33532 (GHSA-48c2-rrv3-qjmp), a denial-of-service vulnerability in yaml <2.8.3.

Commits

a86160e [ci] release (#17256)
60cb289 fix(language-server): bump volar-service-* to 0.0.71 (CVE-2026-33532) (#17059)
3652d1c chore: merge main into next
ce88423 Dedupe vite (#16787)
8d1af3b Merge remote-tracking branch 'origin/main' into chore/merge-main-into-next
ad9abdb Merge branch 'main' into chore/merge-main-into-next
78653bb chore: merge main into next (#16586)
c3072b5 more fixes
4d1ce40 avoid error
See full diff in compare view

Updates @astrojs/markdown-satteri from 0.3.2 to 0.3.3

Release notes

Sourced from @astrojs/markdown-satteri's releases.

@astrojs/markdown-satteri@0.3.3

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

Changelog

Sourced from @astrojs/markdown-satteri's changelog.

0.3.3

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

Commits

a86160e [ci] release (#17256)
See full diff in compare view

Updates @astrojs/react from 6.0.0 to 6.0.1

Release notes

Sourced from @astrojs/react's releases.

@astrojs/react@6.0.1

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

Changelog

Sourced from @astrojs/react's changelog.

6.0.1

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

Commits

a86160e [ci] release (#17256)
2bfb179 chore: simpler package.json types (#17229)
See full diff in compare view

Updates @astrojs/ts-plugin from 1.10.9 to 1.10.10

Release notes

Sourced from @astrojs/ts-plugin's releases.

@astrojs/ts-plugin@1.10.10

Patch Changes

#17269 c72d4f2 Thanks @matthewp! - Fixes "Go To References" from .ts files missing usages inside .astro files that are reached through Astro.locals. The plugin now injects Astro's ambient types so type chains like Astro.locals.utils.toUpper() resolve, matching the language server.

Changelog

Sourced from @astrojs/ts-plugin's changelog.

1.10.10

Patch Changes

#17269 c72d4f2 Thanks @matthewp! - Fixes "Go To References" from .ts files missing usages inside .astro files that are reached through Astro.locals. The plugin now injects Astro's ambient types so type chains like Astro.locals.utils.toUpper() resolve, matching the language server.

Commits

a86160e [ci] release (#17256)
c72d4f2 Find Astro.locals references from .ts files in the TypeScript plugin (#17269)
3652d1c chore: merge main into next
8062391 chore(deps): dedupe vite installations (#16788)
ce88423 Dedupe vite (#16787)
See full diff in compare view

Updates astro from 7.0.5 to 7.0.6

Release notes

Sourced from astro's releases.

astro@7.0.6

Patch Changes

#17261 79aa99c Thanks @astrobot-houston! - Fixes a false deprecation warning for markdown.gfm and markdown.smartypants when using the Container API

#17247 f94280d Thanks @chatman-media! - Fixes route generation throwing "Missing parameter" (or silently dropping the segment) when a dynamic param's value is 0. The generator used truthy checks instead of checking for undefined, so paginate(posts, { params: { categoryId: 0 } }) would crash even though 0 is a perfectly valid param value.

#17278 6f11739 Thanks @astrobot-houston! - Fixes missing CSS for virtual style modules (e.g., responsive image layout styles) in dev mode when JavaScript is disabled

#17250 0b30b35 Thanks @matthewp! - Fixes the security.checkOrigin check so it is applied consistently to Astro Actions and on-demand endpoints, regardless of how the request pipeline is composed. Previously, the origin check could be skipped in the composable astro/hono pipeline depending on the order of the middleware() primitive (or when it was omitted).

#17274 8c3579b Thanks @astrobot-houston! - Fixes missing render() type overload for live collection entries. Previously, calling render() on a LiveDataEntry produced a TypeScript error when using only live.config.ts without a content.config.ts.

#17257 4208297 Thanks @astrobot-houston! - Fixes astro check failing to find @astrojs/check and typescript when astro is installed in a directory outside the project tree (e.g. pnpm virtual store)

#17272 b428648 Thanks @matthewp! - Fixes island component paths so that extensionless imports (e.g. import { Counter } from '../components/Counter') resolve to the real file on disk, matching Vite's extension order and directory index resolution. This makes the include/exclude options of JSX renderer integrations (React, Preact, Solid) match components imported without a file extension, and removes the spurious React 19 "Invalid hook call" warning logged on every request in dev when include was set alongside another JSX renderer

#17279 2aeaa44 Thanks @astrobot-houston! - Fixes a bug where <Picture inferSize> with a remote image could fail with FailedToFetchRemoteImageDimensions when the image server rate-limits requests (e.g. HTTP 429). Remote dimensions are now resolved once per render instead of once per output format.

#17251 5240e26 Thanks @matthewp! - Hardens the handling of attribute rendering when using with custom elements.

#17248 429bd62 Thanks @astrobot-houston! - Fixes a crash when using Astro's getViteConfig with Vitest browser mode (e.g., Storybook vitest runner). Astro now skips dev server setup inside Vitest, preventing errors.

#17260 14524c0 Thanks @matthewp! - Fixes a regression where a <script> inside a component rendered through Astro.slots.render() was hoisted out of its original position instead of staying next to its component content

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

@astrojs/markdown-remark@7.2.1

@astrojs/markdown-satteri@0.3.3

Changelog

Sourced from astro's changelog.

7.0.6

Patch Changes

#17261 79aa99c Thanks @astrobot-houston! - Fixes a false deprecation warning for markdown.gfm and markdown.smartypants when using the Container API

#17247 f94280d Thanks @chatman-media! - Fixes route generation throwing "Missing parameter" (or silently dropping the segment) when a dynamic param's value is 0. The generator used truthy checks instead of checking for undefined, so paginate(posts, { params: { categoryId: 0 } }) would crash even though 0 is a perfectly valid param value.

#17278 6f11739 Thanks @astrobot-houston! - Fixes missing CSS for virtual style modules (e.g., responsive image layout styles) in dev mode when JavaScript is disabled

#17250 0b30b35 Thanks @matthewp! - Fixes the security.checkOrigin check so it is applied consistently to Astro Actions and on-demand endpoints, regardless of how the request pipeline is composed. Previously, the origin check could be skipped in the composable astro/hono pipeline depending on the order of the middleware() primitive (or when it was omitted).

#17274 8c3579b Thanks @astrobot-houston! - Fixes missing render() type overload for live collection entries. Previously, calling render() on a LiveDataEntry produced a TypeScript error when using only live.config.ts without a content.config.ts.

#17257 4208297 Thanks @astrobot-houston! - Fixes astro check failing to find @astrojs/check and typescript when astro is installed in a directory outside the project tree (e.g. pnpm virtual store)

#17272 b428648 Thanks @matthewp! - Fixes island component paths so that extensionless imports (e.g. import { Counter } from '../components/Counter') resolve to the real file on disk, matching Vite's extension order and directory index resolution. This makes the include/exclude options of JSX renderer integrations (React, Preact, Solid) match components imported without a file extension, and removes the spurious React 19 "Invalid hook call" warning logged on every request in dev when include was set alongside another JSX renderer

#17279 2aeaa44 Thanks @astrobot-houston! - Fixes a bug where <Picture inferSize> with a remote image could fail with FailedToFetchRemoteImageDimensions when the image server rate-limits requests (e.g. HTTP 429). Remote dimensions are now resolved once per render instead of once per output format.

#17251 5240e26 Thanks @matthewp! - Hardens the handling of attribute rendering when using with custom elements.

#17248 429bd62 Thanks @astrobot-houston! - Fixes a crash when using Astro's getViteConfig with Vitest browser mode (e.g., Storybook vitest runner). Astro now skips dev server setup inside Vitest, preventing errors.

#17260 14524c0 Thanks @matthewp! - Fixes a regression where a <script> inside a component rendered through Astro.slots.render() was hoisted out of its original position instead of staying next to its component content

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

@astrojs/markdown-remark@7.2.1

@astrojs/markdown-satteri@0.3.3

Commits

a86160e [ci] release (#17256)
f94280d Fix route generator throwing on a dynamic param value of 0 (#17247)
6f11739 fix(css): use raw module ID for virtual CSS cache lookup in dev mode (#17267)...
26c68f6 [ci] format
2aeaa44 Fix inferSize for remote images in the Picture component (#17279)
b428648 Resolve extensionless imports in island component paths (#17272)
14524c0 Keep component scripts in place when rendered via Astro.slots.render() (#17260)
8c3579b fix: add render() type overload for live collection entries (#16688) (#17274)
94dd2aa [ci] format
5240e26 Validate attribute names on custom HTML elements during SSR (#17251)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the astro group with 6 updates: | Package | From | To | | --- | --- | --- | | [@astrojs/cloudflare](https://github.com/withastro/astro/tree/HEAD/packages/integrations/cloudflare) | `14.1.0` | `14.1.1` | | [@astrojs/language-server](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/language-server) | `2.16.10` | `2.16.11` | | [@astrojs/markdown-satteri](https://github.com/withastro/astro/tree/HEAD/packages/markdown/satteri) | `0.3.2` | `0.3.3` | | [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `6.0.0` | `6.0.1` | | [@astrojs/ts-plugin](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/ts-plugin) | `1.10.9` | `1.10.10` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.0.5` | `7.0.6` | Updates `@astrojs/cloudflare` from 14.1.0 to 14.1.1 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/cloudflare/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/cloudflare@14.1.1/packages/integrations/cloudflare) Updates `@astrojs/language-server` from 2.16.10 to 2.16.11 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/language-server/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/language-server@2.16.11/packages/language-tools/language-server) Updates `@astrojs/markdown-satteri` from 0.3.2 to 0.3.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/satteri/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-satteri@0.3.3/packages/markdown/satteri) Updates `@astrojs/react` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/react@6.0.1/packages/integrations/react) Updates `@astrojs/ts-plugin` from 1.10.9 to 1.10.10 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/ts-plugin/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/ts-plugin@1.10.10/packages/language-tools/ts-plugin) Updates `astro` from 7.0.5 to 7.0.6 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.0.6/packages/astro) --- updated-dependencies: - dependency-name: "@astrojs/cloudflare" dependency-version: 14.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: astro - dependency-name: "@astrojs/language-server" dependency-version: 2.16.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: astro - dependency-name: "@astrojs/markdown-satteri" dependency-version: 0.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: astro - dependency-name: "@astrojs/react" dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: astro - dependency-name: "@astrojs/ts-plugin" dependency-version: 1.10.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: astro - dependency-name: astro dependency-version: 7.0.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: astro ... Signed-off-by: dependabot[bot] <support@github.com>

cloudflare-workers-and-pages · 2026-07-03T03:14:32Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	developer-sumup-com	`123b252`	Commit Preview URL Branch Preview URL	Jul 03 2026, 03:16 AM

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 3, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): bump the astro group with 6 updates#804

build(deps-dev): bump the astro group with 6 updates#804
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/astro-e34fc53395

dependabot Bot commented on behalf of github Jul 3, 2026

Uh oh!

cloudflare-workers-and-pages Bot commented Jul 3, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 3, 2026

@​astrojs/cloudflare@​14.1.1

Patch Changes

14.1.1

Patch Changes

@​astrojs/language-server@​2.16.11

Patch Changes

2.16.11

Patch Changes

@​astrojs/markdown-satteri@​0.3.3

Patch Changes

0.3.3

Patch Changes

@​astrojs/react@​6.0.1

Patch Changes

6.0.1

Patch Changes

@​astrojs/ts-plugin@​1.10.10

Patch Changes

1.10.10

Patch Changes

astro@7.0.6

Patch Changes

7.0.6

Patch Changes

Uh oh!

cloudflare-workers-and-pages Bot commented Jul 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying with Cloudflare Workers

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@astrojs/cloudflare@14`.1.1

`@astrojs/language-server@2`.16.11

`@astrojs/markdown-satteri@0`.3.3

`@astrojs/react@6`.0.1

`@astrojs/ts-plugin@1`.10.10

cloudflare-workers-and-pages Bot commented Jul 3, 2026 •

edited

Loading