Skip to content

chore(deps): bump the npm-deps group with 12 updates - #667

Merged
AbhishekDoshi26 merged 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-deps-846a7a20d3
Sep 16, 2026
Merged

chore(deps): bump the npm-deps group with 12 updates#667
AbhishekDoshi26 merged 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-deps-846a7a20d3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-deps group with 12 updates:

Package From To
@astrojs/markdown-remark 7.3.0 7.3.1
@astrojs/mdx 7.0.5 8.0.1
astro 7.3.1 7.3.2
mermaid 11.17.2 12.0.0
typescript 6.0.3 7.0.2
@cloudflare/workers-types 5.20260910.1 5.20260911.1
@vvago/vale 3.17.1 3.21.0
cspell 10.2.1 10.3.0
js-yaml 4.3.2 5.4.1
prettier-plugin-astro 0.14.1 1.0.0
react 19.2.8 19.3.0
@types/react 19.2.18 19.3.0

Updates @astrojs/markdown-remark from 7.3.0 to 7.3.1

Release notes

Sourced from @​astrojs/markdown-remark's releases.

@​astrojs/markdown-remark@​7.3.1

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.
Changelog

Sourced from @​astrojs/markdown-remark's changelog.

7.3.1

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.
Commits

Updates @astrojs/mdx from 7.0.5 to 8.0.1

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​8.0.1

Patch Changes

  • Updated dependencies [a548223]:
    • @​astrojs/markdown-satteri@​0.4.1

@​astrojs/mdx@​8.0.0

Major Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Moves MDX file processing to the Markdown processors.

    '@​astrojs/mdx' is still required to add MDX support to your project. However, it now delegates the MDX files processing to Markdown processors.

    What should I do?

    If you haven't explicitly installed a Markdown processor, you don't need to do anything.

    Otherwise, ensure that your configured Markdown processor uses the following version:

    • @astrojs/markdown-satteri 0.4.0 or later if you use satteri()
    • @astrojs/markdown-remark 7.3.0 or later if you use unified()

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes .mdx files still using markdown.processor when extendMarkdownConfig is false. They now use a clean default processor instead; pass mdx({ processor }) to choose one explicitly.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a warning when the deprecated remarkPlugins, rehypePlugins, recmaPlugins and remarkRehype options are ignored because your Markdown processor does not run them. They still apply when your processor is unified(), and were previously dropped silently otherwise.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0

@​astrojs/mdx@​7.0.8

Patch Changes

  • #17757 660991c Thanks @​astro-factory! - Fixes build errors showing wrong file location, missing line:col, and misleading hints when a plugin error (e.g. from MDX) is wrapped by Vite's build error

  • #17766 0762a83 Thanks @​HiDeoo! - Fixes Sätteri processor option types to accept all plugin entries supported by Sätteri v0.10.3.

@​astrojs/mdx@​7.0.7

Patch Changes

@​astrojs/mdx@​7.0.6

Patch Changes

... (truncated)

Changelog

Sourced from @​astrojs/mdx's changelog.

8.0.1

Patch Changes

  • Updated dependencies [a548223]:
    • @​astrojs/markdown-satteri@​0.4.1

8.0.0

Major Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Moves MDX file processing to the Markdown processors.

    '@​astrojs/mdx' is still required to add MDX support to your project. However, it now delegates the MDX files processing to Markdown processors.

    What should I do?

    If you haven't explicitly installed a Markdown processor, you don't need to do anything.

    Otherwise, ensure that your configured Markdown processor uses the following version:

    • @astrojs/markdown-satteri 0.4.0 or later if you use satteri()
    • @astrojs/markdown-remark 7.3.0 or later if you use unified()

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes .mdx files still using markdown.processor when extendMarkdownConfig is false. They now use a clean default processor instead; pass mdx({ processor }) to choose one explicitly.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a warning when the deprecated remarkPlugins, rehypePlugins, recmaPlugins and remarkRehype options are ignored because your Markdown processor does not run them. They still apply when your processor is unified(), and were previously dropped silently otherwise.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0

7.0.8

Patch Changes

  • #17757 660991c Thanks @​astro-factory! - Fixes build errors showing wrong file location, missing line:col, and misleading hints when a plugin error (e.g. from MDX) is wrapped by Vite's build error

  • #17766 0762a83 Thanks @​HiDeoo! - Fixes Sätteri processor option types to accept all plugin entries supported by Sätteri v0.10.3.

7.0.7

Patch Changes

... (truncated)

Commits

Updates astro from 7.3.1 to 7.3.2

Release notes

Sourced from astro's releases.

astro@7.3.2

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

  • #17931 c1a6a89 Thanks @​astro-factory! - Fixes the dev toolbar returning a 504 "Outdated Optimize Dep" error when a workspace-linked package imports a dependency that Vite's initial scan did not discover

  • #17908 42e9188 Thanks @​astro-factory! - Fixes i18n fallback routing replacing the first substring match instead of the actual locale segment, which mangled paths like /energy/en/about into /esergy/en/about

  • #17936 4b92ddc Thanks @​astro-factory! - Fixes sessions breaking in dev mode with the Cloudflare adapter when middleware is present

  • Updated dependencies [a548223]:

    • @​astrojs/markdown-satteri@​0.4.1
Changelog

Sourced from astro's changelog.

7.3.2

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

  • #17931 c1a6a89 Thanks @​astro-factory! - Fixes the dev toolbar returning a 504 "Outdated Optimize Dep" error when a workspace-linked package imports a dependency that Vite's initial scan did not discover

  • #17908 42e9188 Thanks @​astro-factory! - Fixes i18n fallback routing replacing the first substring match instead of the actual locale segment, which mangled paths like /energy/en/about into /esergy/en/about

  • #17936 4b92ddc Thanks @​astro-factory! - Fixes sessions breaking in dev mode with the Cloudflare adapter when middleware is present

  • Updated dependencies [a548223]:

    • @​astrojs/markdown-satteri@​0.4.1
Commits
  • aa4949e [ci] release (#17915)
  • 42e9188 fix(i18n): replace locale segment by index in fallback routing (#17907) (#17908)
  • 4b92ddc Guard setFetchHandler call in non-runnable dev entrypoint to fix sessions + m...
  • c1a6a89 fix: include .astro files in client optimizeDeps entries to prevent 504 on la...
  • a548223 Only treat literal script/style content as raw in MDX rendering (#17896)
  • See full diff in compare view

Updates mermaid from 11.17.2 to 12.0.0

Release notes

Sourced from mermaid's releases.

mermaid@12.0.0

Mermaid 12.0.0 ships ELK as the bundled default layout engine, a new redux-color / neo default appearance, and two new diagram types: UML use case diagrams.

This is a breaking release (ES2024, Safari 17.4+, Node 22.12+). Existing flowcharts, state and class diagrams will re-lay out and recolour; add layout: dagre, theme: default and look: classic to your config to keep the old look. Full changelog below.

Major Changes

  • #8213 33442fd Thanks @​aloisklink! - chore!: require ES2024, Safari 17.4+, Node.JS v22.12+

    Mermaid is now built to target Safari 17.4+ and ES2024. If you need to support older browsers, you may need to polyfill or transpile mermaid.

    Safari 17.4+ has been chosen as the floor, as unlike Firefox/Chrome, older iOS devices don't get major Safari updates.

    Node.JS v22.12+ is also declared as requirement in our package.json files, but as mermaid requires a browser, this is mainly so we can use dependencies that also declare a Node.JS v22.12+ requirement, without causing issues for users when running npm install.

  • #8155 810893c Thanks @​ashishjain0512! - feat!: ELK is now bundled with mermaid and is the default layout algorithm.

    ELK previously shipped as a separate @mermaid-js/layout-elk package that sites had to install and register. It is now part of mermaid itself and registered automatically, so layout: elk — and the elk.stress, elk.force, elk.mrtree, elk.sporeOverlap, elk.box and elk.rectpacking variants — work with no setup.

    This changes how existing diagrams look. Flowchart, state, class, entity-relationship, requirement, use-case diagrams that do not specify a layout are now laid out by ELK instead of dagre. To keep the previous layout, set dagre explicitly:

    ---
config:
  layout: dagre
---

    or globally, mermaid.initialize({ layout: 'dagre' }).

    Mindmap is unchanged: it keeps laying out with cose-bilkent unless a layout is explicitly requested (in the tiny build, which ships neither ELK nor cose-bilkent, it falls back to dagre).

    Other notes:

    • ELK is loaded as a separate chunk in the ESM builds, so it is only fetched when a diagram actually uses it. The single-file IIFE build (mermaid.min.js) inlines it and grows by roughly 500 kB gzipped.
    • The tiny build deliberately omits ELK to stay small, and falls back to dagre for diagrams that ask for an ELK layout. Its size is unchanged.
    • @mermaid-js/layout-elk is no longer needed on normal builds — existing mermaid.registerLayoutLoaders(elkLayouts) calls keep working and can be removed. It is still published, and remains the way to add ELK to the tiny build.
    • dist/mermaid.esm.min.mjs now contains syntax that es-module-lexer (used by Vite) rejects with content contains invalid JS syntax. Bundler users are unaffected as long as they import the mermaid package specifier, which resolves to the core build; only builds that point Vite directly at that dist file need to switch to the package specifier or the core build.
    • State diagrams now resolve their layout through the same registration check as every other diagram, so an unavailable layout falls back instead of failing to render.

    An unrecognised theme name now resolves to the default theme in name as well as in variables; previously the invalid name stayed in place while the default's variables were loaded, and every palette-aware stylesheet gates on the name. theme: 'null', the documented way to disable the pre-defined themes, is unaffected. Note that neo paints node strokes with a gradient when the theme sets useGradient, which base does; setting a custom nodeBorder on base turns the gradient off.

  • #8211 a19bd08 Thanks @​ashishjain0512! - Removed: the defaultRenderer option of the flowchart, class and state config sections.

    Use the top-level layout option instead:

... (truncated)

Commits
  • 98a0945 Merge pull request #8237 from mermaid-js/changeset-release/master
  • 96be564 Version Packages
  • dd65cfd Merge pull request #8239 from mermaid-js/bug/appearance-docs-release-version-...
  • e1cc7c2 fix(tests): accept a released version in the appearance docs marker
  • 8382837 Merge pull request #8211 from mermaid-js/release/12.0.0
  • 8a90389 ci: trigger a preview publish
  • 01b8590 ci: attempt every preview package before failing the publish step
  • 1997a23 ci: record why the preview publish of layout-elk and tiny is refused
  • 0304007 ci: drop --access public from the preview publish of layout-elk and tiny
  • 223be92 docs: capitalize Markdown in README tagline
  • Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates @cloudflare/workers-types from 5.20260910.1 to 5.20260911.1

Commits

Updates @vvago/vale from 3.17.1 to 3.21.0

Commits
Install script changes

This version modifies postinstall script that runs during installation. Review the package contents before updating.


Updates cspell from 10.2.1 to 10.3.0

Release notes

Sourced from cspell's releases.

v10.3.0

Features

feat: Add an option to set the kind of dictionary file (#9178)

This pull request introduces support for the new kind property in dictionary definitions, enabling explicit specification of dictionary types such as words, flag-words, and ignore-words.

{
  "version": "0.2",
  "language": "en-US",
  "caseSensitive": false,
  "dictionaryDefinitions": [
    {
      "name": "forbidden-spelling",
      "path": "./forbidden-spelling.txt",
      "kind": "flag-words"
    }
  ],
  "dictionaries": ["forbidden-spelling"]
}

forbidden-spelling.txt

# Add forbidden words below.
# Words starting with `!` are exceptions.
# cspell:disable
english:English # Do not allow `english` and suggest `English`
!English # needed to allow `English`
!ENGLISH # needed to allow `ENGLISH`

forbidden_word # All variants of forbidden_word are not allowed.


Mixed case words:


cSpell # only cSpell is flagged. cspell will not be.

It updates the JSON schema, dictionary loading logic, and adds new APIs and tests to handle these kinds, including support for loading forbidden (flag) words from trie files.

Schema and API Enhancements:

  • Added a kind property to dictionary definitions in the cspell.schema.json schema, allowing configuration of dictionary type as words, flag-words, or ignore-words [1] [2] [3] [4] [5].
  • Updated the internal dictionary settings and loader logic to recognize and handle the new kind property, ensuring correct dictionary instantiation based on its value [1] [2] [3] [4].

Flag Words Dictionary Support:

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.3.0 (2026-09-08)

Features

feat: Add an option to set the kind of dictionary file (#9178)

This pull request introduces support for the new kind property in dictionary definitions, enabling explicit specification of dictionary types such as words, flag-words, and ignore-words.

{
  "version": "0.2",
  "language": "en-US",
  "caseSensitive": false,
  "dictionaryDefinitions": [
    {
      "name": "forbidden-spelling",
      "path": "./forbidden-spelling.txt",
      "kind": "flag-words"
    }
  ],
  "dictionaries": ["forbidden-spelling"]
}

forbidden-spelling.txt

# Add forbidden words below.
# Words starting with `!` are exceptions.
# cspell:disable
english:English # Do not allow `english` and suggest `English`
!English # needed to allow `English`
!ENGLISH # needed to allow `ENGLISH`

forbidden_word # All variants of forbidden_word are not allowed.


Mixed case words:


cSpell # only cSpell is flagged. cspell will not be.

It updates the JSON schema, dictionary loading logic, and adds new APIs and tests to handle these kinds, including support for loading forbidden (flag) words from trie files.

Schema and API Enhancements:

  • Added a kind property to dictionary definitions in the cspell.schema.json schema, allowing configuration of dictionary type as words, flag-words, or ignore-words [1] [2] [3] [4] [5].
  • Updated the internal dictionary settings and loader logic to recognize and handle the new kind property, ensuring correct dictionary instantiation based on its value [1] [2] [3] [4].

... (truncated)

Commits

Updates js-yaml from 4.3.2 to 5.4.1

Changelog

Sourced from js-yaml's changelog.

[5.4.1] - 2026-08-26

Changed

  • Hard-limit merge sequence size to 100.

Security

  • Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

[5.4.0] - 2026-08-25

Added

  • Added the scalarStyleRules dumper option to customize string formatting. See Scalar styling for details.

Changed

  • [breaking] Flattened the low-level AST node style representation. Scalar and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values; explicit tags use the separate tagged property. Alias nodes now contain only kind and anchor. This only affects code that directly constructs or edits AST nodes.
  • [breaking] The sortKeys option was rewritten using AST mutation to avoid side effects.
  • Reworked scalar style selection. This can change formatting without changing loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

  • Accept a byte order mark at the start of each document in a stream, #791.
  • Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace, including alias and property-only keys, #786.
  • Preserve empty scalar items when converting block sequences to flow style.
  • Do not apply the 1024-character simple-key limit to flow mapping keys.
  • Count Unicode code points, rather than UTF-16 code units, for the 1024-character simple-key limit.
  • Add an explicit document-end marker after keep-chomped block scalars when needed to preserve trailing newlines.

[5.3.0] - 2026-08-14

This release focuses on reworking the documentation and making small architectural improvements before moving forward.

Added

  • Added completely new documentation.
  • Exported DUMP_SCHEMA, the default schema used by the dumper.
  • Added YAMLException.throwAt() for throwing an error at a source position.

Changed

... (truncated)

Commits

Updates prettier-plugin-astro from 0.14.1 to 1.0.0

Release notes

Sourced from prettier-plugin-astro's releases.

v1.0.0

Major Changes

  • a8bf1a3: Raises the minimum supported Node version to 22.12.0.

  • 595d47f: The plugin has been fully rewritten on top of Astro 7's new Rust compiler. This rewrite fixes many long-standing issues, such as certain elements not being handled properly inside expressions.

    Whitespace formatting now matches Astro’s whitespace handling, and a new astroCompressHTML option has been added to match Astro's compressHTML setting. If you set compressHTML in your Astro config, also set astroCompressHTML in your Prettier config to match.

    In addition, this rewrite has allowed us to more closely match Prettier's built-in JSX and HTML formatting, leading to less cosmetic differences between the different files in your repo.

v1.0.0-beta.2

Patch Changes

  • cc30d24: Fixes various formatting issues when using astroCompressHTML: 'html' or 'none':

    • Fixes a stray > being added after an empty or ignored element that is followed by a sibling.
    • Fixes closing tags being split from trailing void elements like <img>.
    • Fixes whitespace being added inside tables, lists, and captions under htmlWhitespaceSensitivity: 'strict'.
    • Fixes line breaks around inline elements being replaced by spaces.
    • Allows inline elements to wrap at the print width without adding rendered whitespace.
    • Keeps inline elements written on one line on that line.
    • Fixes components with dotted names like <Astro.self> losing their closing tags or failing to format.
    • Fixes whitespace around inline-block elements and reflowing markup written on one line.
    • Fixes quotes in style attribute values being written unescaped, corrupting the attribute and breaking the next format.
    • Fixes children hugging the closing bracket when an element's attributes span multiple lines.
    • Fixes whitespace being added around a lone <slot />, which stopped :empty from matching the container.
    • Fixes srcset values being mangled when a URL contains a comma, such as a data: URI or query string.
    • Lays out block-level elements like HTML.
    • Fixes whitespace being removed around a lone <slot />, which allowed :empty to start matching the container.
    • Fixes children hugging the closing bracket when an element's attributes wrap and allows a lone long attribute to wrap.
    • Formats style and srcset attributes.
    • Allows runs of adjacent inline elements to wrap at the print width without adding rendered whitespace.
    • Lays out graphical SVG contents one element per line.
    • Fixes nested markup being kept on one line.
    • Fixes spaces being removed from text directly inside <body>.
    • Fixes nested elements being collapsed onto a single line.
    • Fixes a blank line being left inside an opening tag whose attributes break.

v1.0.0-beta.1

Major Changes

  • a8bf1a3: Raises the minimum supported Node version to 22.12.0.

Patch Changes

  • b0ec799: Fixes <script> tags being formatted as JavaScript instead of TypeScript
  • 04ecfe2: Fixes a crash on parenthesized types in template expressions

v1.0.0-beta.0

Major Changes

... (truncated)

Changelog

Sourced from prettier-plugin-astro's changelog.

1.0.0

Major Changes

  • a8bf1a3: Raises the minimum supported Node version to 22.12.0.

  • 595d47f: The plugin has been fully rewritten on top of Astro 7's new Rust compiler. This rewrite fixes many long-standing issues, such as certain elements not being handled properly inside expressions.

    Whitespace formatting now matches Astro’s whitespace handling, and a new astroCompressHTML option has been added to match Astro's compressHTML setting. If you set compressHTML in your Astro config, also set astroCompressHTML in your Prettier config to match.

    In addition, this rewrite has allowed us to more closely match Prettier's built-in JSX and HTML formatting, leading to less cosmetic differences between the different files in your repo.

1.0.0-beta.2

Patch Changes

  • cc30d24: Fixes various formatting issues when using astroCompressHTML: 'html' or 'none':

    • Fixes a stray > being added after an empty or ignored element that is followed by a sibling.
    • Fixes closing tags being split from trailing void elements like <img>.
    • Fixes whitespace being added inside tables, lists, and captions under htmlWhitespaceSensitivity: 'strict'.
    • Fixes line breaks around inline elements being replaced by spaces.
    • Allows inline elements to wrap at the print width without adding rendered whitespace.
    • Keeps inline elements written on one line on that line.
    • Fixes components with dotted names like <Astro.self> losing their closing tags or failing to format.
    • Fixes whitespace around inline-block elements and reflowing markup written on one line.
    • Fixes quotes in style attribute values being written unescaped, corrupting the attribute and breaking the next format.
    • Fixes children hugging the closing bracket when an element's attributes span multiple lines.
    • Fixes whitespace being added around a lone <slot />, which stopped :empty from matching the container.
    • Fixes srcset values being mangled when a URL contains a comma, such as a data: URI or query string.
    • Lays out block-level elements like HTML.
    • Fixes whitespace being removed around a lone <slot />, which allowed :empty to start matching the container.
    • Fixes children hugging the closing bracket when an element's attributes wrap and allows a lone long attribute to wrap.
    • Formats style and srcset attributes.
    • Allows runs of adjacent inline elements to wrap at the print width without adding rendered whitespace.
    • Lays out graphical SVG contents one element per line.
    • Fixes nested markup being kept on one line.
    • Fixes spaces being removed from text directly inside <body>.
    • Fixes nested elements being collapsed onto a single line.
    • Fixes a blank line being left inside an opening tag whose attributes break.

1.0.0-beta.1

Major Changes

  • a8bf1a3: Raises the minimum supported Node version to 22.12.0.

Patch Changes

  • b0ec799: Fixes <script> tags being formatted as JavaScript instead of TypeScript
  • 04ecfe2: Fixes a crash on parenthesized types in template expressions

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prettier-plugin-astro since your current version.


Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

@dependabot
chore(deps): bump the npm-deps group with 12 updates
100b4c2 
Bumps the npm-deps group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) | `7.3.0` | `7.3.1` |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `7.0.5` | `8.0.1` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.1` | `7.3.2` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.17.2` | `12.0.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260910.1` | `5.20260911.1` |
| [@vvago/vale](https://github.com/zeropaper/vale) | `3.17.1` | `3.21.0` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.2.1` | `10.3.0` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.3.2` | `5.4.1` |
| [prettier-plugin-astro](https://github.com/withastro/prettier-plugin-astro) | `0.14.1` | `1.0.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` |


Updates `@astrojs/markdown-remark` from 7.3.0 to 7.3.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.3.1/packages/markdown/remark)

Updates `@astrojs/mdx` from 7.0.5 to 8.0.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.0.1/packages/integrations/mdx)

Updates `astro` from 7.3.1 to 7.3.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.2/packages/astro)

Updates `mermaid` from 11.17.2 to 12.0.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.2...mermaid@12.0.0)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `@cloudflare/workers-types` from 5.20260910.1 to 5.20260911.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@vvago/vale` from 3.17.1 to 3.21.0
- [Commits](https://github.com/zeropaper/vale/commits)

Updates `cspell` from 10.2.1 to 10.3.0
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.3.0/packages/cspell)

Updates `js-yaml` from 4.3.2 to 5.4.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.2...5.4.1)

Updates `prettier-plugin-astro` from 0.14.1 to 1.0.0
- [Release notes](https://github.com/withastro/prettier-plugin-astro/releases)
- [Changelog](https://github.com/withastro/prettier-plugin-astro/blob/main/CHANGELOG.md)
- [Commits](withastro/prettier-plugin-astro@v0.14.1...v1.0.0)

Updates `react` from 19.2.8 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.18 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: "@astrojs/markdown-remark"
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@astrojs/mdx"
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: astro
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: mermaid
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260911.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@vvago/vale"
  dependency-version: 3.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: cspell
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: js-yaml
  dependency-version: 5.4.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: prettier-plugin-astro
  dependency-version: 1.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026
@AbhishekDoshi26
fix: hold back breaking majors and update vale allowlist
0d7af7e 
- Update the lavamoat allowScripts entry to @vvago/vale#3.21.0; the
  version-scoped 3.17.1 entry made `npx allow-scripts` fail in CI.
- Keep typescript on 6.x: TypeScript 7 removed the JS API (ts.sys),
  breaking twoslash and `astro check`.
- Keep js-yaml on 4.x: v5 has no default export, which breaks astro's
  prerender step.
- Keep mermaid on 11.x: astro-mermaid@2 supports mermaid 10/11 only, and
  mermaid 12 re-lays out existing diagrams with ELK by default.
- Add Dependabot ignore rules for major updates of those three packages.
@AbhishekDoshi26
Merge branch 'main' into dependabot/npm_and_yarn/npm-deps-846a7a20d3
fcbafc0
@AbhishekDoshi26
AbhishekDoshi26 enabled auto-merge (squash) September 16, 2026 09:01
@AbhishekDoshi26
AbhishekDoshi26 merged commit e0de0cb into main Sep 16, 2026
10 of 13 checks passed
@AbhishekDoshi26
AbhishekDoshi26 deleted the dependabot/npm_and_yarn/npm-deps-846a7a20d3 branch September 16, 2026 10:57
@AbhishekDoshi26 AbhishekDoshi26 mentioned this pull request Sep 16, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@AbhishekDoshi26 AbhishekDoshi26 AbhishekDoshi26 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@AbhishekDoshi26