Skip to content

chore(deps): bump the github-actions group across 1 directory with 5 updates#1575

Merged
julien-deramond merged 1 commit intomainfrom
dependabot/npm_and_yarn/github-actions-86cf09aedc
Mar 30, 2026
Merged

chore(deps): bump the github-actions group across 1 directory with 5 updates#1575
julien-deramond merged 1 commit intomainfrom
dependabot/npm_and_yarn/github-actions-86cf09aedc

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 30, 2026

Bumps the github-actions group with 5 updates in the / directory:

Package From To
@astrojs/vercel 10.0.2 10.0.3
astro 6.0.8 6.1.1
starlight-links-validator 0.20.1 0.21.0
vercel 50.37.0 50.37.3
vitest 4.1.1 4.1.2

Updates @astrojs/vercel from 10.0.2 to 10.0.3

Release notes

Sourced from @​astrojs/vercel's releases.

@​astrojs/vercel@​10.0.3

Patch Changes

Changelog

Sourced from @​astrojs/vercel's changelog.

10.0.3

Patch Changes

Commits

Updates astro from 6.0.8 to 6.1.1

Release notes

Sourced from astro's releases.

[email protected]

Patch Changes

[email protected]

Minor Changes

  • #15804 a5e7232 Thanks @​merlinnot! - Allows setting codec-specific defaults for Astro's built-in Sharp image service via image.service.config.

    You can now configure encoder-level options such as jpeg.mozjpeg, webp.effort, webp.alphaQuality, avif.effort, avif.chromaSubsampling, and png.compressionLevel when using astro/assets/services/sharp for compile-time image generation.

    These settings apply as defaults for the built-in Sharp pipeline, while per-image quality still takes precedence when set on <Image />, <Picture />, or getImage().

  • #15455 babf57f Thanks @​AhmadYasser1! - Adds fallbackRoutes to the IntegrationResolvedRoute type, exposing i18n fallback routes to integrations via the astro:routes:resolved hook for projects using fallbackType: 'rewrite'.

    This allows integrations such as the sitemap integration to properly include generated fallback routes in their output.

    {
  'astro:routes:resolved': ({ routes }) => {
    for (const route of routes) {
      for (const fallback of route.fallbackRoutes) {
        console.log(fallback.pathname) // e.g. /fr/about/
      }
    }
  }
}

  • #15340 10a1a5a Thanks @​trueberryless! - Adds support for advanced configuration of SmartyPants in Markdown.

    You can now pass an options object to markdown.smartypants in your Astro configuration to fine-tune how punctuation, dashes, and quotes are transformed.

    This is helpful for projects that require specific typographic standards, such as "oldschool" dash handling or localized quotation marks.

    // astro.config.mjs
export default defineConfig({
  markdown: {
    smartypants: {
      backticks: 'all',
      dashes: 'oldschool',
      ellipses: 'unspaced',
      openingQuotes: { double: '«', single: '‹' },
      closingQuotes: { double: '»', single: '›' },
      quotes: false,
    },

... (truncated)

Changelog

Sourced from astro's changelog.

6.1.1

Patch Changes

6.1.0

Minor Changes

  • #15804 a5e7232 Thanks @​merlinnot! - Allows setting codec-specific defaults for Astro's built-in Sharp image service via image.service.config.

    You can now configure encoder-level options such as jpeg.mozjpeg, webp.effort, webp.alphaQuality, avif.effort, avif.chromaSubsampling, and png.compressionLevel when using astro/assets/services/sharp for compile-time image generation.

    These settings apply as defaults for the built-in Sharp pipeline, while per-image quality still takes precedence when set on <Image />, <Picture />, or getImage().

  • #15455 babf57f Thanks @​AhmadYasser1! - Adds fallbackRoutes to the IntegrationResolvedRoute type, exposing i18n fallback routes to integrations via the astro:routes:resolved hook for projects using fallbackType: 'rewrite'.

    This allows integrations such as the sitemap integration to properly include generated fallback routes in their output.

    {
  'astro:routes:resolved': ({ routes }) => {
    for (const route of routes) {
      for (const fallback of route.fallbackRoutes) {
        console.log(fallback.pathname) // e.g. /fr/about/
      }
    }
  }
}

  • #15340 10a1a5a Thanks @​trueberryless! - Adds support for advanced configuration of SmartyPants in Markdown.

    You can now pass an options object to markdown.smartypants in your Astro configuration to fine-tune how punctuation, dashes, and quotes are transformed.

    This is helpful for projects that require specific typographic standards, such as "oldschool" dash handling or localized quotation marks.

    // astro.config.mjs
export default defineConfig({
  markdown: {
    smartypants: {
      backticks: 'all',
      dashes: 'oldschool',
      ellipses: 'unspaced',
      openingQuotes: { double: '«', single: '‹' },
      closingQuotes: { double: '»', single: '›' },

... (truncated)

Commits

Updates starlight-links-validator from 0.20.1 to 0.21.0

Release notes

Sourced from starlight-links-validator's releases.

[email protected]

Minor Changes

  • #142 9ee77ad Thanks @​HiDeoo! - Refactors internal logic from a remark to a rehype plugin.

    This is an internal update and should not cause any user-facing changes, but it improves plugin performance and fixes some edge-case validation issues.

  • #144 b30aa17 Thanks @​HiDeoo! - Redesigns link validation error reporting to be more user-friendly and actionable.

    Most notably, error reporting now includes the following improvements:

    • Errors now include source line numbers.
    • In supported terminals and editors, links can open the source file at the relevant error location.
    • In supported terminals, error messages link to dedicated documentation pages with explanations and suggested fixes.

  • #145 82cb4d Thanks @​HiDeoo! - Adds support for a GitHub Actions reporter.

    When enabled and the plugin runs in GitHub Actions, validation errors are written to the job summary as a Markdown table.

  • #142 9ee77ad Thanks @​HiDeoo! - Adds support for validating links transformed by remark and rehype plugins.

    This change allows users to use portable Markdown links, author links that can be followed in an IDE and that are transformed by remark or rehype plugins into proper URLs at build time, while still being validated.

  • #144 b30aa17 Thanks @​HiDeoo! - Reduces terminal text styling dependency size by switching to Node.js built-in util.styleText().

Patch Changes

Changelog

Sourced from starlight-links-validator's changelog.

0.21.0

Minor Changes

  • #142 9ee77ad Thanks @​HiDeoo! - Refactors internal logic from a remark to a rehype plugin.

    This is an internal update and should not cause any user-facing changes, but it improves plugin performance and fixes some edge-case validation issues.

  • #144 b30aa17 Thanks @​HiDeoo! - Redesigns link validation error reporting to be more user-friendly and actionable.

    Most notably, error reporting now includes the following improvements:

    • Errors now include source line numbers.
    • In supported terminals and editors, links can open the source file at the relevant error location.
    • In supported terminals, error messages link to dedicated documentation pages with explanations and suggested fixes.

  • #145 82cb4d Thanks @​HiDeoo! - Adds support for a GitHub Actions reporter.

    When enabled and the plugin runs in GitHub Actions, validation errors are written to the job summary as a Markdown table.

  • #142 9ee77ad Thanks @​HiDeoo! - Adds support for validating links transformed by remark and rehype plugins.

    This change allows users to use portable Markdown links, author links that can be followed in an IDE and that are transformed by remark or rehype plugins into proper URLs at build time, while still being validated.

  • #144 b30aa17 Thanks @​HiDeoo! - Reduces terminal text styling dependency size by switching to Node.js built-in util.styleText().

Patch Changes

Commits

Updates vercel from 50.37.0 to 50.37.3

Release notes

Sourced from vercel's releases.

[email protected]

Patch Changes

  • Improve plugin install flow: handle Ctrl+C to cancel install, only install for detected agent harness, add description before plugin prompt, and remove CLAUDE.md/AGENTS.md prompt from link/login flows. (#15733)

[email protected]

Patch Changes

[email protected]

Patch Changes

  • Improve agent plugin install flow: agents now receive structured JSON prompts for plugin installation instead of auto-approving silently. Preferences are persisted to avoid repeat prompts. On deploy, shows a non-blocking tip if the plugin is not installed. (#15707)

  • Auto-install agent tooling on vercel login, vercel link, and vercel deploy. When a supported agent platform (Claude Code, Cursor) is detected or the user has ~/.claude/~/.cursor directories, prompts to install the Vercel plugin. On vercel link, also prompts to add Vercel best practices to AGENTS.md/CLAUDE.md. On vercel deploy, shows a non-blocking tip if the plugin is not installed. User preferences are persisted to avoid repeat prompts. (#15692)

  • Add --archive support to deploy continue command. (#15197)

  • Updated dependencies [a54b8f246ac6b43ac8f1674093402e3fe145fd64]:

    • @​vercel/build-utils@​13.11.0
    • @​vercel/backends@​0.0.52
    • @​vercel/elysia@​0.1.54
    • @​vercel/express@​0.1.64
    • @​vercel/fastify@​0.1.57
    • @​vercel/go@​3.4.6
    • @​vercel/h3@​0.1.63
    • @​vercel/hono@​0.2.57
    • @​vercel/hydrogen@​1.3.6

... (truncated)

Changelog

Sourced from vercel's changelog.

50.37.3

Patch Changes

  • Improve plugin install flow: handle Ctrl+C to cancel install, only install for detected agent harness, add description before plugin prompt, and remove CLAUDE.md/AGENTS.md prompt from link/login flows. (#15733)

50.37.2

Patch Changes

50.37.1

Patch Changes

  • Improve agent plugin install flow: agents now receive structured JSON prompts for plugin installation instead of auto-approving silently. Preferences are persisted to avoid repeat prompts. On deploy, shows a non-blocking tip if the plugin is not installed. (#15707)

  • Auto-install agent tooling on vercel login, vercel link, and vercel deploy. When a supported agent platform (Claude Code, Cursor) is detected or the user has ~/.claude/~/.cursor directories, prompts to install the Vercel plugin. On vercel link, also prompts to add Vercel best practices to AGENTS.md/CLAUDE.md. On vercel deploy, shows a non-blocking tip if the plugin is not installed. User preferences are persisted to avoid repeat prompts. (#15692)

  • Add --archive support to deploy continue command. (#15197)

  • Updated dependencies [a54b8f246ac6b43ac8f1674093402e3fe145fd64]:

    • @​vercel/build-utils@​13.11.0
    • @​vercel/backends@​0.0.52
    • @​vercel/elysia@​0.1.54
    • @​vercel/express@​0.1.64
    • @​vercel/fastify@​0.1.57
    • @​vercel/go@​3.4.6

... (truncated)

Commits

Updates vitest from 4.1.1 to 4.1.2

Release notes

Sourced from vitest's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

    View changes on GitHub
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the github-actions group across 1 directory with 5 …
f4027f5 
…updates

Bumps the github-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/vercel](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vercel) | `10.0.2` | `10.0.3` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `6.0.8` | `6.1.1` |
| [starlight-links-validator](https://github.com/HiDeoo/starlight-links-validator/tree/HEAD/packages/starlight-links-validator) | `0.20.1` | `0.21.0` |
| [vercel](https://github.com/vercel/vercel/tree/HEAD/packages/cli) | `50.37.0` | `50.37.3` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.1` | `4.1.2` |



Updates `@astrojs/vercel` from 10.0.2 to 10.0.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vercel/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/integrations/vercel)

Updates `astro` from 6.0.8 to 6.1.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/[email protected]/packages/astro)

Updates `starlight-links-validator` from 0.20.1 to 0.21.0
- [Release notes](https://github.com/HiDeoo/starlight-links-validator/releases)
- [Changelog](https://github.com/HiDeoo/starlight-links-validator/blob/main/packages/starlight-links-validator/CHANGELOG.md)
- [Commits](https://github.com/HiDeoo/starlight-links-validator/commits/[email protected]/packages/starlight-links-validator)

Updates `vercel` from 50.37.0 to 50.37.3
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/[email protected]/packages/cli)

Updates `vitest` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/vitest)

---
updated-dependencies:
- dependency-name: "@astrojs/vercel"
  dependency-version: 10.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: astro
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: starlight-links-validator
  dependency-version: 0.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: vercel
  dependency-version: 50.37.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: vitest
  dependency-version: 4.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 30, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Mar 30, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
openresource-dev Ready Ready Preview, Comment Mar 30, 2026 7:32am

@julien-deramond julien-deramond merged commit ddbddc8 into main Mar 30, 2026
4 checks passed
@julien-deramond julien-deramond deleted the dependabot/npm_and_yarn/github-actions-86cf09aedc branch March 30, 2026 17:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@julien-deramond julien-deramond julien-deramond approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@julien-deramond