Skip to content

chore(deps): bump the github-actions group with 5 updates#1556

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/github-actions-c08a612338
Closed

chore(deps): bump the github-actions group with 5 updates#1556
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/github-actions-c08a612338

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 11, 2026 •
edited
Loading

Bumps the github-actions group with 5 updates:

Package From To
@astrojs/check 0.9.6 0.9.7
@astrojs/vercel 9.0.4 10.0.0
@vercel/analytics 1.6.1 2.0.0
astro 5.18.0 6.0.2
vercel 50.29.0 50.31.1

Updates @astrojs/check from 0.9.6 to 0.9.7

Release notes

Sourced from @​astrojs/check's releases.

@​astrojs/check@​0.9.7

Patch Changes

Changelog

Sourced from @​astrojs/check's changelog.

0.9.7

Patch Changes

0.9.7-beta.1

Patch Changes

0.9.6-beta.1

Patch Changes

0.9.6-alpha.0

Patch Changes

  • Updated dependencies [df6d2d7]:
    • @​astrojs/language-server@​2.16.1-alpha.0
Commits

Updates @astrojs/vercel from 9.0.4 to 10.0.0

Release notes

Sourced from @​astrojs/vercel's releases.

@​astrojs/vercel@​10.0.0

Major Changes

  • #15413 736216b Thanks @​florian-lefebvre! - Removes the deprecated @astrojs/vercel/serverless and @astrojs/vercel/static exports. Use the @astrojs/vercel export instead

Minor Changes

  • #15258 d339a18 Thanks @​ematipico! - Stabilizes the adapter feature experimentalStatiHeaders. If you were using this feature in any of the supported adapters, you'll need to change the name of the flag:

    export default defineConfig({
  adapter: netlify({
-    experimentalStaticHeaders: true
+    staticHeaders: true
  })
})

  • #15413 736216b Thanks @​florian-lefebvre! - Updates the implementation to use the new Adapter API

  • #15495 5b99e90 Thanks @​leekeh! - Adds new middlewareMode adapter feature and deprecates edgeMiddleware option

    The edgeMiddleware option is now deprecated and will be removed in a future release, so users should transition to using the new middlewareMode feature as soon as possible.

    export default defineConfig({
  adapter: vercel({
-    edgeMiddleware: true
+    middlewareMode: 'edge'
  })
})

  • #14946 95c40f7 Thanks @​ematipico! - Removes the experimental.csp flag and replaces it with a new configuration option security.csp - (v6 upgrade guidance)

Patch Changes

  • #15781 2de969d Thanks @​ematipico! - Adds a new clientAddress option to the createContext() function

    Providing this value gives adapter and middleware authors explicit control over the client IP address. When not provided, accessing clientAddress throws an error consistent with other contexts where it is not set by the adapter.

    Additionally, both of the official Netlify and Vercel adapters have been updated to provide this information in their edge middleware.

    import { createContext } from 'astro/middleware';
createContext({
clientAddress: context.headers.get('x-real-ip'),
});

... (truncated)

Changelog

Sourced from @​astrojs/vercel's changelog.

10.0.0

Major Changes

  • #15413 736216b Thanks @​florian-lefebvre! - Removes the deprecated @astrojs/vercel/serverless and @astrojs/vercel/static exports. Use the @astrojs/vercel export instead

Minor Changes

  • #15258 d339a18 Thanks @​ematipico! - Stabilizes the adapter feature experimentalStatiHeaders. If you were using this feature in any of the supported adapters, you'll need to change the name of the flag:

    export default defineConfig({
  adapter: netlify({
-    experimentalStaticHeaders: true
+    staticHeaders: true
  })
})

  • #15413 736216b Thanks @​florian-lefebvre! - Updates the implementation to use the new Adapter API

  • #15495 5b99e90 Thanks @​leekeh! - Adds new middlewareMode adapter feature and deprecates edgeMiddleware option

    The edgeMiddleware option is now deprecated and will be removed in a future release, so users should transition to using the new middlewareMode feature as soon as possible.

    export default defineConfig({
  adapter: vercel({
-    edgeMiddleware: true
+    middlewareMode: 'edge'
  })
})

  • #14946 95c40f7 Thanks @​ematipico! - Removes the experimental.csp flag and replaces it with a new configuration option security.csp - (v6 upgrade guidance)

Patch Changes

  • #15781 2de969d Thanks @​ematipico! - Adds a new clientAddress option to the createContext() function

    Providing this value gives adapter and middleware authors explicit control over the client IP address. When not provided, accessing clientAddress throws an error consistent with other contexts where it is not set by the adapter.

    Additionally, both of the official Netlify and Vercel adapters have been updated to provide this information in their edge middleware.

    import { createContext } from 'astro/middleware';
createContext({
clientAddress: context.headers.get('x-real-ip'),
});

... (truncated)

Commits

Updates @vercel/analytics from 1.6.1 to 2.0.0

Release notes

Sourced from @​vercel/analytics's releases.

v2.0.0

What's Changed

Breaking Changes

  • License changed from MPL-2.0 to MIT (#170)
  • Nuxt: introduce module support. If you need to configure it, load injectAnalytics() from @vercel/analytics/nuxt/runtime (#183)

Features

  • feat: load dynamic configuration (#184) — analytics config can now be loaded dynamically

Bug Fixes

  • fix: src and endpoint paths do not work when relative (#186)

Full Changelog: vercel/speed-insights@1.6.1...2.0.0

v2.0.0-canary.1

Canary release for testing 2.0.0 changes

Commits
  • c3e3805 chore: bump version to v2.0.0
  • 425a797 chore: bump version to v2.0.0-canary.1
  • 22888e3 fix: src and endpoint paths do not work when relative (#186)
  • 3879f57 feat: load dynamic configuration (#184)
  • 95f8914 feat(nuxt)!: Add support for injectAnalytics() and Nuxt module (#183)
  • e407489 feat!: change license to MIT (#170)
  • See full diff in compare view

Updates astro from 5.18.0 to 6.0.2

Release notes

Sourced from astro's releases.

[email protected]

Patch Changes

[email protected]

Patch Changes

  • #15827 a4c0d0b Thanks @​matthewp! - Fixes astro add so the tsconfig preview shows the actual pending changes before confirmation

[email protected]

Major Changes

  • #14446 ece667a Thanks @​florian-lefebvre! - Removes entryPoints on astro:build:ssr hook (Integration API) - (v6 upgrade guidance)

  • #15535 dfe2e22 Thanks @​florian-lefebvre! - Deprecates loadManifest() and loadApp() from astro/app/node (Adapter API) - (v6 upgrade guidance)

  • #15006 f361730 Thanks @​florian-lefebvre! - Removes session test driver - (v6 upgrade guidance)

  • #15461 9f21b24 Thanks @​florian-lefebvre! - BREAKING CHANGE to the v6 beta Adapter API only: renames entryType to entrypointResolution and updates possible values

    Astro 6 introduced a way to let adapters have more control over the entrypoint by passing entryType: 'self' to setAdapter(). However during beta development, the name was unclear and confusing.

    entryType is now renamed to entrypointResolution and its possible values are updated:

    • legacy-dynamic becomes explicit.
    • self becomes auto.

    If you are building an adapter with v6 beta and specifying entryType, update it:

    setAdapter({
    // ...
-    entryType: 'legacy-dynamic'
+    entrypointResolution: 'explicit'
})
setAdapter({
// ...

entryType: 'self'


entrypointResolution: 'auto'
})

  • #14426 861b9cc Thanks @​florian-lefebvre! - Removes the deprecated emitESMImage() function - (v6 upgrade guidance)

  • #15006 f361730 Thanks @​florian-lefebvre! - Deprecates session driver string signature - (v6 upgrade guidance)

  • #15180 8780ff2 Thanks @​Princesseuh! - Adds support for converting SVGs to raster images (PNGs, WebP, etc) to the default Sharp image service - (v6 upgrade guidance)

    • ... (truncated)

    Changelog

    Sourced from astro's changelog.

    6.0.2

    Patch Changes

    6.0.1

    Patch Changes

    • #15827 a4c0d0b Thanks @​matthewp! - Fixes astro add so the tsconfig preview shows the actual pending changes before confirmation

    6.0.0

    Major Changes

    • #14446 ece667a Thanks @​florian-lefebvre! - Removes entryPoints on astro:build:ssr hook (Integration API) - (v6 upgrade guidance)

    • #15535 dfe2e22 Thanks @​florian-lefebvre! - Deprecates loadManifest() and loadApp() from astro/app/node (Adapter API) - (v6 upgrade guidance)

    • #15006 f361730 Thanks @​florian-lefebvre! - Removes session test driver - (v6 upgrade guidance)

    • #15461 9f21b24 Thanks @​florian-lefebvre! - BREAKING CHANGE to the v6 beta Adapter API only: renames entryType to entrypointResolution and updates possible values

      Astro 6 introduced a way to let adapters have more control over the entrypoint by passing entryType: 'self' to setAdapter(). However during beta development, the name was unclear and confusing.

      entryType is now renamed to entrypointResolution and its possible values are updated:

      • legacy-dynamic becomes explicit.
      • self becomes auto.

      If you are building an adapter with v6 beta and specifying entryType, update it:

      setAdapter({
    // ...
-    entryType: 'legacy-dynamic'
+    entrypointResolution: 'explicit'
})
setAdapter({
// ...

entryType: 'self'


entrypointResolution: 'auto'
})

  • #14426 861b9cc Thanks @​florian-lefebvre! - Removes the deprecated emitESMImage() function - (v6 upgrade guidance)

  • #15006 f361730 Thanks @​florian-lefebvre! - Deprecates session driver string signature - (v6 upgrade guidance)

    • ... (truncated)

    Commits

    Updates vercel from 50.29.0 to 50.31.1

    Release notes

    Sourced from vercel's releases.

    [email protected]

    Patch Changes

    • [cli] Add missing help snapshot test for integration remove subcommand (#15447)

    • Improve vercel env pull so local-only environment variables are preserved and planned changes are previewed before confirmation. (#15420)

    • Add cleanup and new marketplace evals: resource cleanup via afterAll hooks, simplified experiment config, and three new evals (find-postgres-integration, multi-product-install, metadata-discovery) (#15425)

    • Updated dependencies [5be46133da69676de8ae9fda71948767b945cdfc, 57258b16ce76eac2b595c1bc249863feaa4587da]:

      • @​vercel/detect-agent@​1.2.0
      • @​vercel/next@​4.16.1
      • @​vercel/static-build@​2.9.0

    [email protected]

    Minor Changes

    • Support maxDuration: 'max' to allow the backend to resolve the maximum duration based on account plan type (#15217)

    Patch Changes

    Changelog

    Sourced from vercel's changelog.

    50.31.1

    Patch Changes

    • [cli] Add missing help snapshot test for integration remove subcommand (#15447)

    • Improve vercel env pull so local-only environment variables are preserved and planned changes are previewed before confirmation. (#15420)

    • Add cleanup and new marketplace evals: resource cleanup via afterAll hooks, simplified experiment config, and three new evals (find-postgres-integration, multi-product-install, metadata-discovery) (#15425)

    • Updated dependencies [5be46133da69676de8ae9fda71948767b945cdfc, 57258b16ce76eac2b595c1bc249863feaa4587da]:

      • @​vercel/detect-agent@​1.2.0
      • @​vercel/next@​4.16.1
      • @​vercel/static-build@​2.9.0

    50.31.0

    Minor Changes

    • Support maxDuration: 'max' to allow the backend to resolve the maximum duration based on account plan type (#15217)

    Patch Changes

    50.30.1

    Patch Changes

    • Detect Claude Code in vercel agent init and write to CLAUDE.md instead of AGENTS.md; update best practices content (#15423)

    ... (truncated)

    Commits

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

    @dependabot
    chore(deps): bump the github-actions group with 5 updates
    3a14729 
    Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/check](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check) | `0.9.6` | `0.9.7` |
| [@astrojs/vercel](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vercel) | `9.0.4` | `10.0.0` |
| [@vercel/analytics](https://github.com/vercel/analytics/tree/HEAD/packages/web) | `1.6.1` | `2.0.0` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.18.0` | `6.0.2` |
| [vercel](https://github.com/vercel/vercel/tree/HEAD/packages/cli) | `50.29.0` | `50.31.1` |


Updates `@astrojs/check` from 0.9.6 to 0.9.7
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/astro-check/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/language-tools/astro-check)

Updates `@astrojs/vercel` from 9.0.4 to 10.0.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vercel/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/integrations/vercel)

Updates `@vercel/analytics` from 1.6.1 to 2.0.0
- [Release notes](https://github.com/vercel/analytics/releases)
- [Commits](https://github.com/vercel/analytics/commits/v2.0.0/packages/web)

Updates `astro` from 5.18.0 to 6.0.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/[email protected]/packages/astro)

Updates `vercel` from 50.29.0 to 50.31.1
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/[email protected]/packages/cli)

---
updated-dependencies:
- dependency-name: "@astrojs/check"
  dependency-version: 0.9.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: "@astrojs/vercel"
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: "@vercel/analytics"
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: astro
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: vercel
  dependency-version: 50.31.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 11, 2026
    @vercel
    Copy link
    Copy Markdown

    vercel Bot commented Mar 11, 2026 •
    edited
    Loading

    The latest updates on your projects. Learn more about Vercel for GitHub.

    Project Deployment Actions Updated (UTC)
    openresource-dev Error Error Mar 11, 2026 7:24am

    @dependabot @github
    Copy link
    Copy Markdown
    Contributor Author

    dependabot Bot commented on behalf of github Mar 12, 2026

    Looks like these dependencies are updatable in another way, so this is no longer needed.

    @dependabot dependabot Bot closed this Mar 12, 2026
    @dependabot dependabot Bot deleted the dependabot/npm_and_yarn/github-actions-c08a612338 branch March 12, 2026 07:24
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    No reviews

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    0 participants