chore(deps): update astro & starlight packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@astrojs/markdown-satteri (source)	0.3.5 → 0.3.8
@astrojs/starlight (source)	0.41.7 → 0.41.10
astro (source)	7.2.2 → 7.2.9
starlight-blog (source)	^0.28.0 → ^0.29.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

withastro/astro (@​astrojs/markdown-satteri)

v0.3.8

Compare Source

Patch Changes

• #​17766 0762a83 Thanks @​HiDeoo! - Fixes Sätteri processor option types to accept all plugin entries supported by Sätteri v0.10.3.

• #​17314 0c99615 Thanks @​barry166! - Fixes the editor tooltip for smartPunctuation claiming it defaults to false when Astro enables it by default.

v0.3.7

Compare Source

Patch Changes

• #​17731 bc171af Thanks @​Princesseuh! - Updates Sätteri processor to v0.10.3. See its changelog for details on bugs fixed and features added.

• Updated dependencies [05763a0]:

  • @​astrojs/internal-helpers@​0.10.4

v0.3.6

Compare Source

Patch Changes

• Updated dependencies [8c193f6]:
  • @​astrojs/internal-helpers@​0.10.3

withastro/starlight (@​astrojs/starlight)

v0.41.10

Compare Source

Patch Changes

• #​4160 88442c3 Thanks @​ArmandPhilippot! - Adds the missing translations for Expressive Code in the following locales: ar, hi, it, ja, ko, pt, zh-CN, and zh-TW.

• #​4156 57af92d Thanks @​pyxelr! - Adds 1 new icon: hypothesis

• #​4159 a0e0ba2 Thanks @​trueberryless! - Adds 1 new icon: npmx

v0.41.9

Compare Source

Patch Changes

• #​4145 1c90d69 Thanks @​pyxelr! - Adds 1 new icon: goodreads

v0.41.8

Compare Source

Patch Changes

• #​4142 cacbc9f Thanks @​alebelcor! - Adds 1 new icon: whatsApp

• #​4133 3944311 Thanks @​delucis! - Internal refactor: numbered id attributes in the <Tabs> component are now page-specific instead of using a global counter

• #​4138 cd4b665 Thanks @​delucis! - Fixes localisation of code block UI elements when using the Sätteri Markdown processor

withastro/astro (astro)

v7.2.9

Compare Source

Patch Changes

• #​17846 b441180 Thanks @​Princesseuh! - Fixes importing .html files not being typed outside of .astro files

• #​17831 32e8b44 Thanks @​astro-factory! - Fixes a crash when requesting /index.html against a dynamic page route like [slug].astro

• #​17841 c35448e Thanks @​astro-factory! - Fixes SSR manifest containing stale entryModules references to prerender-only chunks that no longer exist in the final build output

• #​17847 eb87a23 Thanks @​matthewp! - Fixes set:text escaping in MDX script and style elements

v7.2.8

Compare Source

Patch Changes

• #​17837 ecb4082 Thanks @​matthewp! - Updates the minimum supported version of Sharp to 0.35.4

• #​17786 db7c53b Thanks @​gameroman! - Replaces the internal find-process dependency with a smaller, lighter alternative

v7.2.7

Compare Source

Patch Changes

• #​17415 55d38c8 Thanks @​iseraph-dev! - Deserializes each route once when loading the SSR manifest

• #​17772 023b48b Thanks @​matthewp! - Fixes route selection for normalized request paths in adapter and development request handling

• #​17819 633855b Thanks @​matthewp! - Updates generated and default Cloudflare compatibility_date values to match the installed runtime and requires Wrangler ^4.125.0

• #​17813 ae26d18 Thanks @​matthewp! - Fixes rewrite() and next(payload) for GET and HEAD requests with host-provided bodies

• #​17816 a0d2fe3 Thanks @​astro-factory! - Fixes the experimental svgOptimizer not generating unique per-file ID prefixes when using SVGO's prefixIds plugin

v7.2.6

Compare Source

Patch Changes

• #​17812 29af6da Thanks @​matthewp! - Fixes a bug where new FetchState(request) could fail in development when server dependencies were optimized

v7.2.5

Compare Source

Patch Changes

• #​17758 5f419e2 Thanks @​astro-factory! - Fixes a bug where experimental_getFontFileURL() rejected valid font URLs when using the Cloudflare adapter

• #​17416 493796b Thanks @​iseraph-dev! - Skips no-op pathname writes when normalizing SSR request URLs

• #​17712 bd374b7 Thanks @​fkatsuhiro! - Updates deprecation messages target from Astro 7 to 8

• #​17719 dac1768 Thanks @​astrobot-houston! - Fixes session ID validation to reject non-UUID cookie values before using them as storage keys

• #​17770 84eb7e7 Thanks @​astro-factory! - Fixes --mode, --site, --base, --out-dir, --verbose, --silent, and --open flags being silently dropped when using astro dev --background or astro preview --background

• #​17713 d035290 Thanks @​wakqasahmed! - Fixes content-modules.mjs not removing entries for deleted or renamed content files, which could cause Vite to attempt to resolve non-existent modules

  As part of this fix, #moduleImports is now fully rebuilt from deferredRender entries before every write, so a module import added only through the public addModuleImport() API without a corresponding deferredRender entry in the store will no longer be preserved across writes.

• #​17743 adc750f Thanks @​contactjawad! - Fixes Astro.preferredLocale and Astro.preferredLocaleList ignoring Accept-Language quality values when they are absent or 0. An entry without an explicit q= now correctly counts as quality 1.0 (per RFC 7231) and an entry with q=0 is treated as not acceptable, so the highest-quality locale is selected regardless of header order.

• #​17757 660991c Thanks @​astro-factory! - Fixes build errors showing wrong file location, missing line:col, and misleading hints when a plugin error (e.g. from MDX) is wrapped by Vite's build error

• #​17783 60b14ff Thanks @​matthewp! - Fixes a type error when passing an image from a content collection image() schema to a component or <Image />. The schema returned by image() was missing the apng format, so it no longer matched the type of an imported image.

• #​17664 d483125 Thanks @​astrobot-houston! - Fixes an issue where Astro CSP support didn't correctly handle cases "unsafe-inline" resource. Now when "unsafe-inline", Astro won't emit hashes for the directive specified.

• #​17810 0fc5f65 Thanks @​florian-lefebvre! - Fixes a regression in the content collections that could cause images to not be resolved

• #​17781 aa33b44 Thanks @​matthewp! - Fixes memoryCache() storing responses that set cookies through Astro.cookies or Astro.session

• #​17787 6661fbe Thanks @​astro-factory! - Fixes server:defer crashing the dev server with "undefined is not a function" when a deferred component imports from astro:i18n

• #​17750 dd0e3ac Thanks @​dobrodob! - Fixes a regression where transition:persist stopped working for <audio> and <video> elements.

• #​17774 fe1d16d Thanks @​astro-factory! - Adds support for importing .apng files as image metadata for use with standard <img> elements. Astro's image components reject APNG files to avoid removing their animation

• #​17799 8797754 Thanks @​astro-factory! - Fixes i18n fallbackType: "rewrite" returning 500 instead of 404 when the fallback locale also has no matching static path for a prerendered dynamic route

• #​17741 99d3d3d Thanks @​ericswpark! - Bumps the Astro compiler to the latest version. Changelog.

• #​17782 3578d45 Thanks @​Princesseuh! - Improves the performance of the Astro CLI in local by enabling Node's module compilation cache.

• #​17705 2043e4f Thanks @​astrobot-houston! - Fixes incremental builds serving cached HTML that references stale CSS filenames after a stylesheet-only edit

• #​17754 3d50dfd Thanks @​astro-factory! - Fixes the dev server refusing to start in Docker containers after a restart due to PID reuse in the lock file check

• #​17769 bbda94d Thanks @​astro-factory! - Fixes a build failure when defining vite.environments.ssr in the Astro config. User-provided environment config for ssr, prerender, or client is now properly deep-merged with Astro's internal environment settings instead of silently breaking the server entry naming.

• #​17776 0874da8 Thanks @​astro-factory! - Fixes the glob() content loader failing to load files with colons in their names (e.g., Guide: Architecture.md)

• Updated dependencies [0762a83, 0c99615]:

  • @​astrojs/markdown-satteri@​0.3.8

v7.2.4

Compare Source

Patch Changes

• #​17747 a90ff66 Thanks @​Princesseuh! - Fixes builds hanging when an image file is malformed

• #​17701 05763a0 Thanks @​matthewp! - Fixes base path stripping to respect path-segment boundaries. With a configured base such as /docs, a request like /docs-archive/page is no longer treated as being under the base, so routing and context.url.pathname now agree on the same pathname.

• #​17742 70b449d Thanks @​Kjubikstronk! - Fixes astro build throwing TypeError: Missing parameter for dynamic routes when build.format: 'preserve' and trailingSlash: 'always' are used together. Stripping the framework-injected .html suffix dropped the trailing slash that the compiled route pattern requires, so the route no longer matched itself and its params resolved as empty.

• #​17703 771b0a9 Thanks @​astrobot-houston! - Fixes Astro.site always being undefined when rendering components via the Container API, even when site is set in astroConfig

• Updated dependencies [05763a0, bc171af]:

  • @​astrojs/internal-helpers@​0.10.4
  • @​astrojs/markdown-satteri@​0.3.7
  • @​astrojs/markdown-remark@​7.2.4

v7.2.3

Compare Source

Patch Changes

• #​17724 97140b2 Thanks @​ematipico! - Fixes an issue where Astro could run out of memory when experimental.collectionStorage is set to chunked and there are multiple concurrent updates to the same collection.

• #​17636 51723b1 Thanks @​matthewp! - Fixes the dev server sometimes matching against stale routes after pages were added, removed, or renamed, requiring a dev server restart to pick up the change

• #​17636 51723b1 Thanks @​matthewp! - Fixes the composable request helpers (astro/fetch) throwing an error when used on a request that had been rewritten with Astro.rewrite() or next()

• #​17636 51723b1 Thanks @​matthewp! - Refactors Astro's internal server-side request handling. This is an internal change: all documented public APIs, including App and NodeApp, keep their existing signatures and behavior.

  The undocumented internal app.pipeline property and the AppPipeline export from astro/app have been removed. Adapters that used app.pipeline.getLogger() to wait for the configured log destination can call the new app.getLogger() instead.

  As a result of this refactor, new FetchState(request) from astro/fetch now works anywhere inside a built Astro server — including custom src/fetch.ts entrypoints — without the request needing to first pass through app.render(). Previously this threw an error, breaking patterns like the Cloudflare adapter's advanced custom-worker setup.

• #​17723 c3b9aed Thanks @​florian-lefebvre! - Fixes a link in font providers JSDoc annotations

• #​17699 e28d227 Thanks @​ArmandPhilippot! - Fixes several documentation issues related to the JSDoc for configuration options.

  • When hovering over the server and fonts options, the JSDoc for the nested options was displayed instead of the JSDoc for the top-level property.
  • Two i18n configuration options were being used incorrectly in the examples.
  • The indentation of some code blocks was broken on hover.

• #​17572 2066f39 Thanks @​matthewp! - Fixes a crash when a request arrives with a malformed port in the Host header (for example example.com:65536 or example.com:8080:8080). Such a host made the constructed request URL invalid, and the fallback that was meant to recover reused the same invalid host and threw again. The request URL now degrades to a host the server controls when the incoming host cannot be parsed, so the request is handled instead of erroring.

• #​17685 9f15609 Thanks @​astrobot-houston! - Fixes a dev server error where an SSR full reload triggered by a third-party Vite plugin (such as @tailwindcss/vite) could fail with Failed to load url astro:server-app.js

• #​17636 51723b1 Thanks @​matthewp! - Improves error handling for custom log destinations. When the configured logger fails to load, Astro now reports the error and continues with the default console logger instead of failing the first request.

• #​17631 cf29bec Thanks @​matthewp! - Fixes getCollection() and getEntry() throwing DataCloneError when a collection schema transform returns a Temporal.PlainDate or other class instance.

• Updated dependencies [8c193f6]:

  • @​astrojs/internal-helpers@​0.10.3
  • @​astrojs/markdown-remark@​7.2.3
  • @​astrojs/markdown-satteri@​0.3.6

HiDeoo/starlight-blog (starlight-blog)

v0.29.0

Compare Source

Minor Changes

• #​225 6449901 Thanks @​HiDeoo! - Improves the generated blog markup to provide more consistent CSS selectors for custom styling and theming.

  ⚠️ Potentially breaking change: If you have custom CSS targeting generated blog markup, you may want to double check the visual appearance of the generated pages when updating.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

❌ Deploy Preview for tauri-v2 failed.

Name	Link
🔨 Latest commit	80f889f
🔍 Latest deploy log	https://app.netlify.com/projects/tauri-v2/deploys/6a95cf27e8276300085010af

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​astrojs/​markdown-satteri@​0.3.5 ⏵ 0.3.8	+1		+1
	@​astrojs/​starlight@​0.41.7 ⏵ 0.41.10	+1		+1
	astro@​7.2.2 ⏵ 7.2.9	+1		+1	+1
	sharp@​0.35.3 ⏵ 0.35.4	+1		+1	+1

View full report

[vasfvitor]

broken