chore(deps): bump the production-dependencies group across 1 directory with 32 updates by dependabot[bot] · Pull Request #265 · spiritledsoftware/caplets

dependabot · 2026-08-24T09:44:57Z

Bumps the production-dependencies group with 32 updates in the / directory:

Package	From	To
typescript	`6.0.3`	`7.0.2`
@astrojs/cloudflare	`14.1.4`	`14.2.3`
@hugeicons/core-free-icons	`4.2.3`	`4.3.0`
@sentry/browser	`10.67.0`	`10.70.0`
@tabler/icons	`3.45.0`	`3.46.0`
@tanstack/virtual-core	`3.17.5`	`3.17.8`
astro	`7.1.3`	`7.2.4`
posthog-js	`1.405.3`	`1.418.7`
tailwind-variants	`3.2.2`	`3.3.1`
@astrojs/react	`6.0.1`	`6.0.4`
@base-ui/react	`1.6.0`	`1.7.0`
@tanstack/react-virtual	`3.14.7`	`3.14.10`
lucide-react	`1.25.0`	`1.33.0`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`
shadcn	`4.13.1`	`4.18.0`
sonner	`2.0.7`	`2.0.8`
@astrojs/starlight	`0.41.3`	`0.41.7`
@modelcontextprotocol/sdk	`1.29.0`	`1.30.0`
pg	`8.22.0`	`8.23.0`
@aws-sdk/client-s3	`3.1091.0`	`3.1115.0`
@fastify/busboy	`3.2.0`	`3.2.2`
@hono/mcp	`0.3.1`	`0.3.2`
@hono/node-server	`2.0.11`	`2.1.1`
@hono/zod-openapi	`1.5.1`	`1.6.1`
@sentry/bun	`10.67.0`	`10.70.0`
@sentry/node	`10.67.0`	`10.70.0`
add-mcp	`1.13.0`	`2.0.0`
hono	`4.12.31`	`4.13.3`
posthog-node	`5.46.0`	`5.49.2`
ws	`8.21.1`	`8.21.3`
@astrojs/language-server	`2.16.12`	`2.16.14`

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits

1e4744d Merge branch 'main' into ts7-release
a5a219cmicrosoft/typescript-go#4558
ecfe30d Update status localization
5de25b5 Hide executable name in TypeScript status
d7ce74a Show bundled TypeScript version for packaged servers
29be66a Correct TS 7 release version to 7.0.2
ed2bd1b Merge branch 'main' into ts7-release
8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
d4eaca5microsoft/typescript-go#4549
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates @astrojs/cloudflare from 14.1.4 to 14.2.3

Release notes

Sourced from @astrojs/cloudflare's releases.

@astrojs/cloudflare@14.2.3

Patch Changes

Updated dependencies [05763a0]:

@astrojs/internal-helpers@0.10.4

@astrojs/underscore-redirects@1.0.4

@astrojs/cloudflare@14.2.2

Patch Changes

Updated dependencies [8c193f6]:

@astrojs/internal-helpers@0.10.3

@astrojs/underscore-redirects@1.0.4

@astrojs/cloudflare@14.2.1

Patch Changes

#17627 ba6a9f6 Thanks @astrobot-houston! - Fixes the astro peer dependency range from ^7.0.0 to ^7.2.0. The adapter imports symbols (beginContentEntryCollection, beginImageCollection, endContentEntryCollection, endImageCollection) from astro/app that were added in Astro 7.2.0, so earlier versions fail at build time with a MISSING_EXPORT error.

Updated dependencies [0891ac9]:

@astrojs/underscore-redirects@1.0.4

@astrojs/cloudflare@14.2.0

Minor Changes
#16194 2a59663 Thanks @Daedalus-Icarus! - Adds opt-in build-time image optimization for the cloudflare-binding image service.

When enabled, the Cloudflare IMAGES binding transforms static images in the workerd prerender environment, and the optimized bytes are written directly to the output directory. If the binding fails, it falls back to Sharp.

To opt in, use the compound configuration form:
export default defineConfig({
  adapter: cloudflare({
    imageService: { build: 'cloudflare-binding', runtime: 'cloudflare-binding' },
  }),
});
The string shorthand imageService: 'cloudflare-binding' preserves the current runtime-only behavior and is unaffected.
#16871 90c98ae Thanks @adamchal! - When session: false is set in astro.config, the adapter no longer auto-wires the Cloudflare KV session driver. Combined with the matching astro change, this lets the session runtime tree-shake out of the Worker bundle.

#17084 961bbe5 Thanks @matthewp! - Supports Astro's experimental incremental static builds. When experimental.incrementalBuild is enabled, the adapter skips unchanged pages between builds.
Patch Changes

#17576 0a79753 Thanks @alexanderniebuhr! - Fixes /_image returning 500 in dev mode when using imageService: 'custom'. Astro's default dev image endpoint imports vite and node:fs, which cannot be loaded inside workerd. The custom and fallback cases now use the generic fetch-based endpoint in dev, matching the other image service modes. A user-configured image.endpoint is left untouched.

Additionally, a dev-time warning is now logged when imageService: 'custom' resolves to the Sharp service (including when no image.service is configured), since Sharp's native binding cannot run inside workerd in dev or production.

... (truncated)

Changelog

Sourced from @astrojs/cloudflare's changelog.

14.2.3

Patch Changes

Updated dependencies [05763a0]:

@astrojs/internal-helpers@0.10.4

@astrojs/underscore-redirects@1.0.4

14.2.2

Patch Changes

Updated dependencies [8c193f6]:

@astrojs/internal-helpers@0.10.3

@astrojs/underscore-redirects@1.0.4

14.2.1

Patch Changes

#17627 ba6a9f6 Thanks @astrobot-houston! - Fixes the astro peer dependency range from ^7.0.0 to ^7.2.0. The adapter imports symbols (beginContentEntryCollection, beginImageCollection, endContentEntryCollection, endImageCollection) from astro/app that were added in Astro 7.2.0, so earlier versions fail at build time with a MISSING_EXPORT error.

Updated dependencies [0891ac9]:

@astrojs/underscore-redirects@1.0.4

14.2.0

Minor Changes
#16194 2a59663 Thanks @Daedalus-Icarus! - Adds opt-in build-time image optimization for the cloudflare-binding image service.

When enabled, the Cloudflare IMAGES binding transforms static images in the workerd prerender environment, and the optimized bytes are written directly to the output directory. If the binding fails, it falls back to Sharp.

To opt in, use the compound configuration form:
export default defineConfig({
  adapter: cloudflare({
    imageService: { build: 'cloudflare-binding', runtime: 'cloudflare-binding' },
  }),
});
The string shorthand imageService: 'cloudflare-binding' preserves the current runtime-only behavior and is unaffected.
#16871 90c98ae Thanks @adamchal! - When session: false is set in astro.config, the adapter no longer auto-wires the Cloudflare KV session driver. Combined with the matching astro change, this lets the session runtime tree-shake out of the Worker bundle.

#17084 961bbe5 Thanks @matthewp! - Supports Astro's experimental incremental static builds. When experimental.incrementalBuild is enabled, the adapter skips unchanged pages between builds.
Patch Changes

... (truncated)

Commits

8a31cba [ci] release (#17739)
52e6c34 [ci] release (#17691)
51723b1 Refactor internal request handling into a functional core (#17636)
d081033 [ci] release (#17608)
7c4bf1b Add Cloudflare Actions build regression coverage (#17137)
ba6a9f6 fix(cloudflare): bump astro peer dependency to ^7.2.0 (#17627)
4328c73 Fix /_image 500 when catch-all prerendered route is combined with prerenderEn...
60e9432 [ci] release (#17558)
a2240c4 fix(test): provide experimental config in Cloudflare session-false test (#17606)
961bbe5 Experimental incremental static builds (#17084)
Additional commits viewable in compare view

Updates @hugeicons/core-free-icons from 4.2.3 to 4.3.0

Updates @sentry/browser from 10.67.0 to 10.70.0

Release notes

Sourced from @sentry/browser's releases.

10.70.0

feat(v10/core): Support stable MCP SDK v2 (#22986)

feat(v10/deps): Bump @sentry/node-cpu-profiler to 2.4.3 (#22992)

feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)

fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23189)

fix(v10/cloudflare): Get original waituntil in workflows (#23192)

fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy (#23190)

fix(v10/cloudflare): Set agent conversation id on the onRequest path (#22985)

fix(v10/cloudflare): Set conversation id independent of session name (#23193)

fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)

fix(v10/cloudflare): Use gen_ai.agent.name for class names (#22987)

fix(v10/core,browser): Handle errors from other realms (#23201)

fix(v10/core): Sample errors after beforeSend while preserving session updates (#22819)

fix(v10/hono): Include originalException in captured exception hint (#22990)

fix(v10/nextjs): meriyah issue for standalone build (#23055)

fix(v10/nextjs): Remove tracing from middleware wrappers (#22904)

fix(v10/profiling-node): Respect profileSessionSampleRate in trace profile lifecycle (#22940)

fix(v10/react-router): Preserve sourcemaps.disable when unstable_sentryVitePluginOptions is set (#22966)

fix(v10/react): Remove routes from shared set on <Routes> unmount (#22948)

fix(v10/sveltekit): Export metrics from worker entry point (#23027)

test(v10/e2e): Add missing @sentry/core dep to nextjs-16-userfeedback (#23009)

test(v10/e2e): Fix failing sveltekit-3 test (#23016)

test(v10/e2e): Fix type error in nextjs ai-error tests (#23011)

test(v10/e2e): Pin tanstackstart-react e2e deps to unblock tunnel tests (#23048)

Work in this release was contributed by @davidmurdoch, @Jxxunnn, and @kamilogorek. Thank you for your contributions!

Bundle size 📦

Path Size

@sentry/browser 27.09 KB

@sentry/browser - with treeshaking flags 25.58 KB

@sentry/browser (incl. Tracing) 45.5 KB

@sentry/browser (incl. Tracing + Span Streaming) 47.24 KB

@sentry/browser (incl. Tracing, Profiling) 50.13 KB

@sentry/browser (incl. Tracing, Replay) 83.82 KB

@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 73.7 KB

@sentry/browser (incl. Tracing, Replay with Canvas) 88.42 KB

@sentry/browser (incl. Tracing, Replay, Feedback) 100.78 KB

@sentry/browser (incl. Feedback) 43.87 KB

@sentry/browser (incl. sendFeedback) 31.78 KB

@sentry/browser (incl. FeedbackAsync) 36.79 KB

@sentry/browser (incl. Metrics) 28.16 KB

... (truncated)

Changelog

Sourced from @sentry/browser's changelog.

10.70.0

feat(v10/core): Support stable MCP SDK v2 (#22986)

feat(v10/deps): Bump @sentry/node-cpu-profiler to 2.4.3 (#22992)

feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)

fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23189)

fix(v10/cloudflare): Get original waituntil in workflows (#23192)

fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy (#23190)

fix(v10/cloudflare): Set agent conversation id on the onRequest path (#22985)

fix(v10/cloudflare): Set conversation id independent of session name (#23193)

fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)

fix(v10/cloudflare): Use gen_ai.agent.name for class names (#22987)

fix(v10/core,browser): Handle errors from other realms (#23201)

fix(v10/core): Sample errors after beforeSend while preserving session updates (#22819)

fix(v10/hono): Include originalException in captured exception hint (#22990)

fix(v10/nextjs): meriyah issue for standalone build (#23055)

fix(v10/nextjs): Remove tracing from middleware wrappers (#22904)

fix(v10/profiling-node): Respect profileSessionSampleRate in trace profile lifecycle (#22940)

fix(v10/react-router): Preserve sourcemaps.disable when unstable_sentryVitePluginOptions is set (#22966)

fix(v10/react): Remove routes from shared set on <Routes> unmount (#22948)

fix(v10/sveltekit): Export metrics from worker entry point (#23027)

test(v10/e2e): Add missing @sentry/core dep to nextjs-16-userfeedback (#23009)

test(v10/e2e): Fix failing sveltekit-3 test (#23016)

test(v10/e2e): Fix type error in nextjs ai-error tests (#23011)

test(v10/e2e): Pin tanstackstart-react e2e deps to unblock tunnel tests (#23048)

Work in this release was contributed by @davidmurdoch, @Jxxunnn, and @kamilogorek. Thank you for your contributions!

10.69.0

Important Changes

feat(v10/cloudflare): Add instrumentAgentWithSentry for Cloudflare Agents (#22786)

The Cloudflare SDK adds a new instrumentAgentWithSentry API for Cloudflare Agents. It works like instrumentDurableObjectWithSentry for Agent classes from the agents SDK and additionally creates spans for @callable RPC methods and automatically sets the conversationId based on the agent's name. When building with the Sentry Vite plugin, Agents are instrumented automatically (#22788).

Other Changes

feat(v10/cloudflare): Add Spotlight integration for local dev event forwarding (#22796)

feat(v10/cloudflare): Add wranglerConfigPath to Vite options (#22803)

feat(v10/cloudflare): Filter framework-internal Durable Object storage spans (#22770)

feat(v10/cloudflare): Instrument Agents automatically (#22788)

feat(v10/cloudflare): Rotate agent conversation id on chat clear (#22787)

fix(v10/cloudflare): Also skip cf: prefixed DOs (#22802)

... (truncated)

Commits

0356ffd release: 10.70.0
c2ac1be meta(changelog): Update changelog for 10.70.0 (#23217)
9c2f31d fix(v10/core,browser): Handle errors from other realms (#23201)
8ad6cd1 fix(v10/cloudflare): Try/catch on non-configurable prototypes (#23191)
4b5e80a fix(v10/cloudflare): Instrument DO RPC methods on the prototype, not a Proxy ...
91af62c fix(v10/cloudflare): Set conversation id independent of session name (#23193)
2096839 fix(v10/cloudflare): Get original waituntil in workflows (#23192)
0062819 fix(v10/cloudflare): Fork the isolation scope for Durable Object methods (#23...
390b05a feat(v10/core): Support stable MCP SDK v2 (#22986)
3b56ecb feat(v10/solid,solidstart): Support @solidjs/router v1 (#23163)
Additional commits viewable in compare view

Updates @tabler/icons from 3.45.0 to 3.46.0

Release notes

Sourced from @tabler/icons's releases.

Release 3.46.0

18 new icons:

outline/play-bug

outline/play-bugs

outline/remote-control

outline/rocking-chair

outline/run-sprint

outline/sparkles-2-off

outline/tabs

outline/tags-chevron-down

outline/tags-chevron-left

outline/tags-chevron-right

outline/tags-chevron-up

outline/thinking-high

outline/thinking-low

outline/thinking-medium

outline/treasure-chest

outline/twig

outline/vault

outline/yarn

Fixed icons: outline/credits, outline/currency-tether, outline/device-3d-camera, outline/device-screen, outline/home-lock, outline/map-lock, outline/notdef, outline/queue-pop-in, outline/server-bolt, outline/server, outline/sparkles-2, outline/transform-point-bottom-left, outline/transform-point-bottom-right, outline/transform-point-top-left, outline/transform-point-top-right

Commits

8ac7d81 Release 3.46.0
2727ba9 Enhance release process in package.json: add GitHub authentication check and ...
4ff4802 Add npm login check before release-it initialization in package.json
74a7690 Merge branch 'main' of https://github.com/tabler/tabler-icons
f828849 Update dependencies in package.json and pnpm-lock.yaml: remove @release-it-pl...
1a39582 Fix rect width/height swap in optimize script (#1570)
54bac86 Secure PR validation: run fork code without privileges (#1569)
eaaf32d Update Turbo package to version 2.10.7 and adjust schema reference in turbo.json
2cfcde7 Remove unused AI tag generation script and related package dependency from pr...
be0e5a8 Refactor SVG paths for several icons to improve structure and consistency: `o...
Additional commits viewable in compare view

Updates @tanstack/virtual-core from 3.17.5 to 3.17.8

Release notes

Sourced from @tanstack/virtual-core's releases.

@tanstack/virtual-core@3.17.8

Patch Changes

#1256 a0a411e - Cancel the pending isScrolling reset when a scroll observer is torn down, and reset isScrolling and scrollDirection in cleanup() so they don't stay stuck after the scroll element changes or is removed.

#1246 d2cf98b - Ignore connected measurement nodes whose indexes are outside the current item count.

@tanstack/virtual-core@3.17.7

Patch Changes

#1239 a5417b4 - Fix a one-frame viewport jump when above-viewport rows resize while scrolling up (#1227). resizeItem writes scrollTop synchronously inside the ResizeObserver callback to compensate for the size change, but then notified asynchronously — so the browser could paint a frame with the new scrollTop and the old item transforms, making the content jerk by the resize delta and snap back. When a compensation actually moves the scroll position, resizeItem now notifies synchronously so the transform commit lands in the same paint as the scroll write. Resizes that don't move the scroll position (below-fold measurements, iOS-deferred adjustments) keep the cheaper async notify.

@tanstack/virtual-core@3.17.6

Patch Changes

#1236 7ae32b5 - Stop the default scroll-adjustment heuristic from drifting the viewport when a viewport-spanning item grows. Previously any item whose top sat above the fold (itemStart < scrollOffset) had its size delta compensated on every re-measure — including a streaming chat message that spans the fold and grows at its bottom, dragging scrollTop downward token by token (#1218). Re-measurements now only compensate items that are entirely above the fold (itemStart + itemSize <= scrollOffset); growth below the anchor point leaves the scroll position untouched. First measurements (estimate→actual) still compensate any above-fold item, and a custom shouldAdjustScrollPositionOnItemSizeChange still overrides the default.

Changelog

Sourced from @tanstack/virtual-core's changelog.

3.17.8

Patch Changes

#1256 a0a411e - Cancel the pending isScrolling reset when a scroll observer is torn down, and reset isScrolling and scrollDirection in cleanup() so they don't stay stuck after the scroll element changes or is removed.

#1246 d2cf98b - Ignore connected measurement nodes whose indexes are outside the current item count.

3.17.7

Patch Changes

#1239 a5417b4 - Fix a one-frame viewport jump when above-viewport rows resize while scrolling up (#1227). resizeItem writes scrollTop synchronously inside the ResizeObserver callback to compensate for the size change, but then notified asynchronously — so the browser could paint a frame with the new scrollTop and the old item transforms, making the content jerk by the resize delta and snap back. When a compensation actually moves the scroll position, resizeItem now notifies synchronously so the transform commit lands in the same paint as the scroll write. Resizes that don't move the scroll position (below-fold measurements, iOS-deferred adjustments) keep the cheaper async notify.

3.17.6

Patch Changes

#1236 7ae32b5 - Stop the default scroll-adjustment heuristic from drifting the viewport when a viewport-spanning item grows. Previously any item whose top sat above the fold (itemStart < scrollOffset) had its size delta compensated on every re-measure — including a streaming chat message that spans the fold and grows at its bottom, dragging scrollTop downward token by token (#1218). Re-measurements now only compensate items that are entirely above the fold (itemStart + itemSize <= scrollOffset); growth below the anchor point leaves the scroll position untouched. First measurements (estimate→actual) still compensate any above-fold item, and a custom shouldAdjustScrollPositionOnItemSizeChange still overrides the default.

Commits

e9874f0 ci: Version Packages (#1247)
a0a411e fix(virtual-core): cancel the isScrolling debounce on scroll-observer cleanup...
d2cf98b fix(virtual-core): ignore stale connected measurements (#1246)
deca524 ci: Version Packages (#1240)
a5417b4 fix(virtual-core): notify synchronously after above-viewport resize compensat...
32b2f2b ci: Version Packages (#1238)
ef6e92a docs(virtual-core): clarify shouldAdjustScrollPositionOnItemSizeChange usage ...
7ae32b5 fix(virtual-core): stop viewport-spanning item growth from drifting scroll (#...
See full diff in compare view

Updates astro from 7.1.3 to 7.2.4

Release notes

Sourced from astro's releases.

astro@7.2.4

Patch Changes

#17747 a90ff66 Thanks @Princesseuh! - Fixes builds hanging when an image file is malformed

#17701 05763a0 Thanks @matthewp! - Fixes base path stripping to respect path-segment boundaries. With a configured base such as /docs, a request like /docs-archive/page is no longer treated as being under the base, so routing and context.url.pathname now agree on the same pathname.

#17742 70b449d Thanks @Kjubikstronk! - Fixes astro build throwing TypeError: Missing parameter for dynamic routes when build.format: 'preserve' and trailingSlash: 'always' are used together. Stripping the framework-injected .html suffix dropped the trailing slash that the compiled route pattern requires, so the route no longer matched itself and its params resolved as empty.

#17703 771b0a9 Thanks @astrobot-houston! - Fixes Astro.site always being undefined when rendering components via the Container API, even when site is set in astroConfig

Updated dependencies [05763a0, bc171af]:

@astrojs/internal-helpers@0.10.4

@astrojs/markdown-satteri@0.3.7

@astrojs/markdown-remark@7.2.4

astro@7.2.3

Patch Changes

#17724 97140b2 Thanks @ematipico! - Fixes an issue where Astro could run out of memory when experimental.collectionStorage is set to chunked and there are multiple concurrent updates to the same collection.

#17636 51723b1 Thanks @matthewp! - Fixes the dev server sometimes matching against stale routes after pages were added, removed, or renamed, requiring a dev server restart to pick up the change

#17636 51723b1 Thanks @matthewp! - Fixes the composable request helpers (astro/fetch) throwing an error when used on a request that had been rewritten with Astro.rewrite() or next()

#17636 51723b1 Thanks @matthewp! - Refactors Astro's internal server-side request handling. This is an internal change: all documented public APIs, including App and NodeApp, keep their existing signatures and behavior.

The undocumented internal app.pipeline property and the AppPipeline export from astro/app have been removed. Adapters that used app.pipeline.getLogger() to wait for the configured log destination can call the new app.getLogger() instead.

As a result of this refactor, new FetchState(request) from astro/fetch now works anywhere inside a built Astro server — including custom src/fetch.ts entrypoints — without the request needing to first pass through app.render(). Previously this threw an error, breaking patterns like the Cloudflare adapter's advanced custom-worker setup.

#17723 c3b9aed Thanks @florian-lefebvre! - Fixes a link in font providers JSDoc annotations

#17699 e28d227 Thanks @ArmandPhilippot! - Fixes several documentation issues related to the JSDoc for configuration options.

When hovering over the server and fonts options, the JSDoc for the nested options was displayed instead of the JSDoc for the top-level property.

Two i18n configuration options were being used incorrectly in the examples.

The indentation of some code blocks was broken on hover.

#17572 2066f39 Thanks @matthewp! - Fixes a crash when a request arrives with a malformed port in the Host header (for example example.com:65536 or example.com:8080:8080). Such a host made the constructed request URL invalid, and the fallback that was meant to recover reused the same invalid host and threw again. The request URL now degrades to a host the server controls when the incoming host cannot be parsed, so the request is handled instead of erroring.

#17685 9f15609 Thanks @astrobot-houston! - Fixes a dev server error where an SSR full reload triggered by a third-party Vite plugin (such as @tailwindcss/vite) could fail with Failed to load url astro:server-app.js

#17636 51723b1 Thanks @matthewp! - Improves error handling for custom log destinations. When the configured logger fails to load, Astro now reports the error and continues with the default console logger instead of failing the first request.

#17631 cf29bec Thanks @matthewp! - Fixes getCollection() and getEntry() throwing DataCloneError when a collection schema transform returns a Temporal.PlainDate or other class instance.

Updated dependencies [8c193f6]:

@astrojs/internal-helpers@0.10.3

@astrojs/markdown-remark@7.2.3

... (truncated)

Changelog

Sourced from astro's changelog.

7.2.4

Patch Changes

#17747 a90ff66 Thanks @Princesseuh! - Fixes builds hanging when an image file is malformed

#17701 05763a0 Thanks @matthewp! - Fixes base path stripping to respect path-segment boundaries. With a configured base such as /docs, a request like /docs-archive/page is no longer treated as being under the base, so routing and context.url.pathname now agree on the same pathname.

#17742 70b449d Thanks @Kjubikstronk! - Fixes astro build throwing TypeError: Missing parameter for dynamic routes when build.format: 'preserve' and trailingSlash: 'always' are used together. Stripping the framework-injected .html suffix dropped the trailing slash that the compiled route pattern requires, so the route no longer matched itself and its params resolved as empty.

#17703 771b0a9 Thanks @astrobot-houston! - Fixes Astro.site always being undefined when rendering components via the Container API, even when site is set in astroConfig

Updated dependencies [05763a0, bc171af]:

@astrojs/internal-helpers@0.10.4

@astrojs/markdown-satteri@0.3.7

@astrojs/markdown-remark@7.2.4

7.2.3

Patch Changes

#17724 97140b2 Thanks @ematipico! - Fixes an issue where Astro could run out of memory when experimental.collectionStorage is set to chunked and there are multiple concurrent updates to the same collection.

#17636 51723b1 Thanks @matthewp! - Fixes the dev server sometimes matching against stale routes after pages were added, removed, or renamed, requiring a dev server restart to pick up the change

#17636 51723b1 Thanks @matthewp! - Fixes the composable request helpers (astro/fetch) throwing an error when used on a request that had been rewritten with Astro.rewrite() or next()

#17636 51723b1 Thanks @matthewp! - Refactors Astro's internal server-side request handling. This is an internal change: all documented public APIs, including App and NodeApp, keep their existing signatures and behavior.

The undocumented internal app.pipeline property and the AppPipeline export from astro/app have been removed. Adapters that used app.pipeline.getLogger() to wait for the configured log destination can call the new app.getLogger() instead.

As a result of this refactor, new FetchState(request) from astro/fetch now works anywhere inside a built Astro server — including custom src/fetch.ts entrypoints — without the request needing to first pass through app.render(). Previously this threw an error, breaking patterns like the Cloudflare adapter's advanced custom-worker setup.

#17723 c3b9aed Thanks @florian-lefebvre! - Fixes a link in font providers JSDoc annotations

#17699 e28d227 Thanks @ArmandPhilippot! - Fixes several documentation issues related to the JSDoc for configuration options.

When hovering over the server and fonts options, the JSDoc for the nested options was displayed instead of the JSDoc for the top-level property.

Two i18n configuration options were being used incorrectly in the examples.

The indentation of some code blocks was broken on hover.

#17572 2066f39 Thanks @matthewp! - Fixes a crash when a request arrives with a malformed port in the Host header (for example example.com:65536 or example.com:8080:8080). Such a host made the constructed request URL invalid, and the fallback that was meant to recover reused the same invalid host and threw again. The request URL now degrades to a host the server controls when the incoming host cannot be parsed, so the request is handled instead of erroring.

#17685 9f15609 Thanks @astrobot-houston! - Fixes a dev server error where an SSR full reload triggered by a third-party Vite plugin (such as @tailwindcss/vite) could fail with Failed to load url astro:server-app.js

#17636 51723b1 Thanks @matthewp! - Improves error handling for custom log destinations. When the configured logger fails to load, Astro now reports the error and continues with the default console logger instead of failing the first request.

#17631 cf29bec Thanks @matthewp! - Fixes getCollection() and getEntry() throwi...
Description has been truncated

…y with 32 updates Bumps the production-dependencies group with 32 updates in the / directory: | Package | From | To | | --- | --- | --- | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [@astrojs/cloudflare](https://github.com/withastro/astro/tree/HEAD/packages/integrations/cloudflare) | `14.1.4` | `14.2.3` | | @hugeicons/core-free-icons | `4.2.3` | `4.3.0` | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `10.67.0` | `10.70.0` | | [@tabler/icons](https://github.com/tabler/tabler-icons) | `3.45.0` | `3.46.0` | | [@tanstack/virtual-core](https://github.com/TanStack/virtual/tree/HEAD/packages/virtual-core) | `3.17.5` | `3.17.8` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.3` | `7.2.4` | | [posthog-js](https://github.com/PostHog/posthog-js) | `1.405.3` | `1.418.7` | | [tailwind-variants](https://github.com/heroui-inc/tailwind-variants) | `3.2.2` | `3.3.1` | | [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `6.0.1` | `6.0.4` | | [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.6.0` | `1.7.0` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.7` | `3.14.10` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.33.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.13.1` | `4.18.0` | | [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` | | [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.3` | `0.41.7` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.29.0` | `1.30.0` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1091.0` | `3.1115.0` | | [@fastify/busboy](https://github.com/fastify/busboy) | `3.2.0` | `3.2.2` | | [@hono/mcp](https://github.com/honojs/middleware/tree/HEAD/packages/mcp) | `0.3.1` | `0.3.2` | | [@hono/node-server](https://github.com/honojs/node-server) | `2.0.11` | `2.1.1` | | [@hono/zod-openapi](https://github.com/honojs/middleware/tree/HEAD/packages/zod-openapi) | `1.5.1` | `1.6.1` | | [@sentry/bun](https://github.com/getsentry/sentry-javascript) | `10.67.0` | `10.70.0` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.67.0` | `10.70.0` | | [add-mcp](https://github.com/neon-solutions/add-mcp) | `1.13.0` | `2.0.0` | | [hono](https://github.com/honojs/hono) | `4.12.31` | `4.13.3` | | [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.46.0` | `5.49.2` | | [ws](https://github.com/websockets/ws) | `8.21.1` | `8.21.3` | | [@astrojs/language-server](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/language-server) | `2.16.12` | `2.16.14` | Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) Updates `@astrojs/cloudflare` from 14.1.4 to 14.2.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/cloudflare/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/cloudflare@14.2.3/packages/integrations/cloudflare) Updates `@hugeicons/core-free-icons` from 4.2.3 to 4.3.0 Updates `@sentry/browser` from 10.67.0 to 10.70.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.70.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.67.0...10.70.0) Updates `@tabler/icons` from 3.45.0 to 3.46.0 - [Release notes](https://github.com/tabler/tabler-icons/releases) - [Commits](tabler/tabler-icons@v3.45.0...v3.46.0) Updates `@tanstack/virtual-core` from 3.17.5 to 3.17.8 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/virtual-core/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/virtual-core@3.17.8/packages/virtual-core) Updates `astro` from 7.1.3 to 7.2.4 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.2.4/packages/astro) Updates `posthog-js` from 1.405.3 to 1.418.7 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/compare/posthog-js@1.405.3...posthog-js@1.418.7) Updates `tailwind-variants` from 3.2.2 to 3.3.1 - [Release notes](https://github.com/heroui-inc/tailwind-variants/releases) - [Changelog](https://github.com/heroui-inc/tailwind-variants/blob/main/CHANGELOG.md) - [Commits](heroui-inc/tailwind-variants@v3.2.2...v3.3.1) Updates `@astrojs/react` from 6.0.1 to 6.0.4 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/react@6.0.4/packages/integrations/react) Updates `@base-ui/react` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/mui/base-ui/releases) - [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md) - [Commits](https://github.com/mui/base-ui/commits/v1.7.0/packages/react) Updates `@tanstack/react-virtual` from 3.14.7 to 3.14.10 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.10/packages/react-virtual) Updates `lucide-react` from 1.25.0 to 1.33.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.33.0/packages/lucide-react) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `shadcn` from 4.13.1 to 4.18.0 - [Release notes](https://github.com/shadcn-ui/ui/releases) - [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md) - [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.18.0/packages/shadcn) Updates `sonner` from 2.0.7 to 2.0.8 - [Release notes](https://github.com/emilkowalski/sonner/releases) - [Commits](emilkowalski/sonner@v2.0.7...v2.0.8) Updates `@astrojs/starlight` from 0.41.3 to 0.41.7 - [Release notes](https://github.com/withastro/starlight/releases) - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md) - [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.41.7/packages/starlight) Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0) Updates `pg` from 8.22.0 to 8.23.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg) Updates `@aws-sdk/client-s3` from 3.1091.0 to 3.1115.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1115.0/clients/client-s3) Updates `@fastify/busboy` from 3.2.0 to 3.2.2 - [Release notes](https://github.com/fastify/busboy/releases) - [Commits](fastify/busboy@v3.2.0...v3.2.2) Updates `@hono/mcp` from 0.3.1 to 0.3.2 - [Release notes](https://github.com/honojs/middleware/releases) - [Changelog](https://github.com/honojs/middleware/blob/main/packages/mcp/CHANGELOG.md) - [Commits](https://github.com/honojs/middleware/commits/@hono/mcp@0.3.2/packages/mcp) Updates `@hono/node-server` from 2.0.11 to 2.1.1 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.0.11...v2.1.1) Updates `@hono/zod-openapi` from 1.5.1 to 1.6.1 - [Release notes](https://github.com/honojs/middleware/releases) - [Changelog](https://github.com/honojs/middleware/blob/main/packages/zod-openapi/CHANGELOG.md) - [Commits](https://github.com/honojs/middleware/commits/@hono/zod-openapi@1.6.1/packages/zod-openapi) Updates `@sentry/bun` from 10.67.0 to 10.70.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.70.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.67.0...10.70.0) Updates `@sentry/node` from 10.67.0 to 10.70.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/10.70.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.67.0...10.70.0) Updates `add-mcp` from 1.13.0 to 2.0.0 - [Release notes](https://github.com/neon-solutions/add-mcp/releases) - [Changelog](https://github.com/neon-solutions/add-mcp/blob/main/CHANGELOG.md) - [Commits](neon-solutions/add-mcp@v1.13.0...v2.0.0) Updates `hono` from 4.12.31 to 4.13.3 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.31...v4.13.3) Updates `posthog-node` from 5.46.0 to 5.49.2 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.49.2/packages/node) Updates `ws` from 8.21.1 to 8.21.3 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.21.1...8.21.3) Updates `@astrojs/language-server` from 2.16.12 to 2.16.14 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/language-server/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/language-server@2.16.14/packages/language-tools/language-server) --- updated-dependencies: - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@astrojs/cloudflare" dependency-version: 14.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@hugeicons/core-free-icons" dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/browser" dependency-version: 10.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tabler/icons" dependency-version: 3.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tanstack/virtual-core" dependency-version: 3.17.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: astro dependency-version: 7.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: posthog-js dependency-version: 1.418.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: tailwind-variants dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@astrojs/react" dependency-version: 6.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@base-ui/react" dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tanstack/react-virtual" dependency-version: 3.14.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: lucide-react dependency-version: 1.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: shadcn dependency-version: 4.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: sonner dependency-version: 2.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@astrojs/starlight" dependency-version: 0.41.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: pg dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1115.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@fastify/busboy" dependency-version: 3.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@hono/mcp" dependency-version: 0.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@hono/node-server" dependency-version: 2.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@hono/zod-openapi" dependency-version: 1.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/bun" dependency-version: 10.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@sentry/node" dependency-version: 10.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: add-mcp dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: hono dependency-version: 4.13.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: posthog-node dependency-version: 5.49.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: ws dependency-version: 8.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@astrojs/language-server" dependency-version: 2.16.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

greptile-apps · 2026-08-24T09:45:01Z

PR author is in the excluded authors list.

socket-security · 2026-08-24T09:45:57Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@tanstack/react-virtual@3.14.10
	@tanstack/virtual-core@3.17.8
	@types/pg@8.23.1
	@types/react-dom@19.2.4
	add-mcp@2.0.0
	@sentry/browser@10.70.0
	@types/react@19.2.18
	posthog-node@5.49.2
	@astrojs/language-server@2.16.14
	lucide-react@1.33.0
	posthog-js@1.418.7
	@astrojs/react@6.0.4
	sonner@2.0.8
	react@19.2.8
	@astrojs/cloudflare@14.2.3
	@astrojs/starlight@0.41.7
	@hono/mcp@0.3.2
	astro@7.2.4
	pg@8.23.0
	@base-ui/react@1.7.0
	@sentry/bun@10.70.0
	shadcn@4.18.0
	tailwind-variants@3.3.1
	react-dom@19.2.8
	@hugeicons/core-free-icons@4.3.0
	@tabler/icons@3.46.0
	ws@8.21.3
	@fastify/busboy@3.2.2
	@hono/node-server@2.1.1
	@hono/zod-openapi@1.6.1
	@sentry/node@10.70.0
	hono@4.13.3
See 1 more rows in the dashboard

View full report

socket-security · 2026-08-24T09:45:59Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@sentry/node-core` is 60.0% likely obfuscated Confidence: 0.60 Location: Package overview From: pnpm-lock.yaml → `npm/@sentry/node@10.70.0` → `npm/@sentry/node-core@10.70.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@sentry/node-core@10.70.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot · 2026-08-31T09:45:44Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026

dependabot Bot closed this Aug 31, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-6f30bddfbd branch August 31, 2026 09:45

Navigation Menu

Uh oh!

Uh oh!

chore(deps): bump the production-dependencies group across 1 directory with 32 updates - #265

chore(deps): bump the production-dependencies group across 1 directory with 32 updates#265
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-6f30bddfbd

dependabot Bot commented on behalf of github Aug 24, 2026 •

edited

Loading

Uh oh!

greptile-apps Bot commented Aug 24, 2026

Uh oh!

socket-security Bot commented Aug 24, 2026

Uh oh!

socket-security Bot commented Aug 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Path	Size
`@sentry/browser`	27.09 KB
`@sentry/browser` - with treeshaking flags	25.58 KB
`@sentry/browser` (incl. Tracing)	45.5 KB
`@sentry/browser` (incl. Tracing + Span Streaming)	47.24 KB
`@sentry/browser` (incl. Tracing, Profiling)	50.13 KB
`@sentry/browser` (incl. Tracing, Replay)	83.82 KB
`@sentry/browser` (incl. Tracing, Replay) - with treeshaking flags	73.7 KB
`@sentry/browser` (incl. Tracing, Replay with Canvas)	88.42 KB
`@sentry/browser` (incl. Tracing, Replay, Feedback)	100.78 KB
`@sentry/browser` (incl. Feedback)	43.87 KB
`@sentry/browser` (incl. sendFeedback)	31.78 KB
`@sentry/browser` (incl. FeedbackAsync)	36.79 KB
`@sentry/browser` (incl. Metrics)	28.16 KB

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

TypeScript 7.0.2

@​astrojs/cloudflare@​14.2.3

Patch Changes

@​astrojs/cloudflare@​14.2.2

Patch Changes

@​astrojs/cloudflare@​14.2.1

Patch Changes

@​astrojs/cloudflare@​14.2.0

Minor Changes

Patch Changes

14.2.3

Patch Changes

14.2.2

Patch Changes

14.2.1

Patch Changes

14.2.0

Minor Changes

Patch Changes

10.70.0

Bundle size 📦

10.70.0

10.69.0

Important Changes

Other Changes

Release 3.46.0

18 new icons:

@​tanstack/virtual-core@​3.17.8

Patch Changes

@​tanstack/virtual-core@​3.17.7

Patch Changes

@​tanstack/virtual-core@​3.17.6

Patch Changes

3.17.8

Patch Changes

3.17.7

Patch Changes

3.17.6

Patch Changes

astro@7.2.4

Patch Changes

astro@7.2.3

Patch Changes

7.2.4

Patch Changes

7.2.3

Patch Changes

Uh oh!

greptile-apps Bot commented Aug 24, 2026

Uh oh!

socket-security Bot commented Aug 24, 2026

Uh oh!

socket-security Bot commented Aug 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 24, 2026 •

edited

Loading

`@astrojs/cloudflare@14`.2.3

`@astrojs/cloudflare@14`.2.2

`@astrojs/cloudflare@14`.2.1

`@astrojs/cloudflare@14`.2.0

`@tanstack/virtual-core@3`.17.8

`@tanstack/virtual-core@3`.17.7

`@tanstack/virtual-core@3`.17.6