Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 11 updates - #163

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-54505a70e2
Closed

chore(deps): bump the production-dependencies group across 1 directory with 11 updates#163
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-54505a70e2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 11 updates in the / directory:

Package From To
@astrojs/starlight 0.41.7 0.42.0
@types/node 24.13.3 26.2.0
astro 7.2.4 7.3.1
backlog-js 0.19.1 0.20.1
commander 11.1.0 15.0.0
lefthook 2.1.10 2.1.12
marked 18.0.10 18.0.11
open 11.0.1 11.0.2
oxfmt 0.64.0 0.66.0
oxlint 1.79.0 1.81.0
turbo 2.10.11 2.10.12

Updates @astrojs/starlight from 0.41.7 to 0.42.0

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.0

Minor Changes

  • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

  • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

    ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

    In the following example, custom styles for the menu button are updated for the new approach:

    - starlight-menu-button button {
+ .sl-menu-button {
  color: var(--sl-color-text);
}

starlight-menu-button[aria-expanded='true'] button {


.sl-menu-button:has(~ :popover-open) {
color: var(--sl-color-text-accent-high);
}

See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    If your configuration included a tagline option, you can safely remove it without any replacement.

  • #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:

    • astro v7.2.10 or later
    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
    • @astrojs/markdown-remark 7.3.0 or later (if you use it)

    Please update Starlight and Astro together:

    npx @astrojs/upgrade

  • #4121 2623ae6 Thanks @​delucis! - Refactors Starlight’s mobile menu toggle to work when JavaScript fails or is disabled

    ⚠️ BREAKING CHANGE: This release drops official support for Chromium-based browsers prior to version 116 (released August 2023), Safari-based browsers prior to version 17.0 (released September 2023), and Firefox prior to version 125 (released April 2024). You can find a list of currently supported browsers and their versions using this browserslist query.

    This change also removes the data-mobile-menu-expanded attribute, which was previously added to <body> while the mobile menu is open. If you have custom code that was depending on this attribute, you will need to update it to use a new selector to check if the mobile menu is open.

    In the following example, a custom background colour for the site header while the menu is open is updated for the new approach:

    • ... (truncated)

    Changelog

    Sourced from @​astrojs/starlight's changelog.

    0.42.0

    Minor Changes

    • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

    • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

      ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

      In the following example, custom styles for the menu button are updated for the new approach:

      - starlight-menu-button button {
+ .sl-menu-button {
  color: var(--sl-color-text);
}

starlight-menu-button[aria-expanded='true'] button {


.sl-menu-button:has(~ :popover-open) {
color: var(--sl-color-text-accent-high);
}

    See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    If your configuration included a tagline option, you can safely remove it without any replacement.

  • #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:

    • astro v7.2.10 or later
    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
    • @astrojs/markdown-remark 7.3.0 or later (if you use it)

    Please update Starlight and Astro together:

    npx @astrojs/upgrade

  • #4121 2623ae6 Thanks @​delucis! - Refactors Starlight’s mobile menu toggle to work when JavaScript fails or is disabled

    ⚠️ BREAKING CHANGE: This release drops official support for Chromium-based browsers prior to version 116 (released August 2023), Safari-based browsers prior to version 17.0 (released September 2023), and Firefox prior to version 125 (released April 2024). You can find a list of currently supported browsers and their versions using this browserslist query.

    This change also removes the data-mobile-menu-expanded attribute, which was previously added to <body> while the mobile menu is open. If you have custom code that was depending on this attribute, you will need to update it to use a new selector to check if the mobile menu is open.

    • ... (truncated)

    Commits

    Updates @types/node from 24.13.3 to 26.2.0

    Commits

    Updates astro from 7.2.4 to 7.3.1

    Release notes

    Sourced from astro's releases.

    astro@7.3.1

    Patch Changes

    astro@7.3.0

    Minor Changes

    • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

      Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { LocalImageService } from 'astro';
const service: LocalImageService = {
// ...
async transform(inputBuffer, transform, imageConfig, logger) {
logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
return { data: inputBuffer, format: 'png' };
},
};

      Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

      Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { CacheProvider } from 'astro';
const provider: CacheProvider = {
name: 'my-cache',
async onRequest({ request, url, logger }, next) {
logger.warn(Skipping cache for ${url.pathname} because the response sets a cookie.);
return next();
},
// ...
};

      Astro's built-in memoryCache() provider now uses this logger for the warnings it emits when it skips caching a response that sets cookies, and when a background revalidation fails.

    Patch Changes

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Updates Astro's remaining internal warnings and errors to be written through the configured logger instead of directly to the console, when possible

    ... (truncated)

    Changelog

    Sourced from astro's changelog.

    7.3.1

    Patch Changes

    7.3.0

    Minor Changes

    • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

      Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { LocalImageService } from 'astro';
const service: LocalImageService = {
// ...
async transform(inputBuffer, transform, imageConfig, logger) {
logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
return { data: inputBuffer, format: 'png' };
},
};

      Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

      Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { CacheProvider } from 'astro';
const provider: CacheProvider = {
name: 'my-cache',
async onRequest({ request, url, logger }, next) {
logger.warn(Skipping cache for ${url.pathname} because the response sets a cookie.);
return next();
},
// ...
};

      Astro's built-in memoryCache() provider now uses this logger for the warnings it emits when it skips caching a response that sets cookies, and when a background revalidation fails.

    Patch Changes

    ... (truncated)

    Commits

    Updates backlog-js from 0.19.1 to 0.20.1

    Release notes

    Sourced from backlog-js's releases.

    v0.20.1

    What's Changed

    Full Changelog: nulab/backlog-js@v0.20.0...v0.20.1

    v0.20.0

    What's Changed

    New Contributors

    Full Changelog: nulab/backlog-js@v0.19.1...v0.20.0

    Commits
    • 39fed62 chore: bump version to v0.20.1
    • 7f11c3a Merge pull request #198 from nulab/feat/file-data-content-type
    • 291852f docs: say what the Content-Type is, not what it used to be
    • 02569b1 Merge pull request #196 from nulab/fix/content-disposition-filename
    • 136c7ed feat: expose the response's Content-Type on FileData
    • 0514ecf docs: cut the comments back to what a later reader needs
    • 9278917 test: cover the headers Backlog actually sends
    • 5556fb3 fix: unquote a quoted ext-value, and say what the decoded name can contain
    • 00348f3 fix: parse Content-Disposition instead of slicing it at the first ''
    • 19a2b38 chore: bump version to v0.20.0
    • Additional commits viewable in compare view

    Updates commander from 11.1.0 to 15.0.0

    Release notes

    Sourced from commander's releases.

    v15.0.0

    Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

    The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

    Added

    • show excess command-arguments in error message (#2384)

    Fixed

    • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
    • update example to use compatible character for MINGW64 (#2475)

    Changed

    • Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
    • Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
    • dev: switch tests from Jest to node:test test runner (#2463)

    Deleted

    • Breaking: removed deprecated export of commander/esm.mjs (#2464)

    Migration Tips

    Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

    If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

    v15.0.0-0

    Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

    The release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

    Added

    • show excess command-arguments in error message (#2384)

    Fixed

    • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
    • update example to use compatible character for MINGW64 (#2475)

    ... (truncated)

    Changelog

    Sourced from commander's changelog.

    [15.0.0] (2026-05-29)

    Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

    The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

    Added

    • show excess command-arguments in error message (#2384)

    Fixed

    • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
    • update example to use compatible character for MINGW64 (#2475)

    Changed

    • Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
    • Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
    • dev: switch tests from Jest to node:test test runner (#2463)

    Deleted

    • Breaking: removed deprecated export of commander/esm.mjs (#2464)

    Migration Tips

    Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

    If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

    [15.0.0-0] (2026-02-22)

    (Released as 15.0.0)

    [14.0.3] (2026-01-31)

    Added

    • Release Policy document (#2462)

    Changes

    • old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)
    • clarify typing for deprecated callback parameter to .outputHelp() (#2427)

    ... (truncated)

    Commits

    Updates lefthook from 2.1.10 to 2.1.12

    Release notes

    Sourced from lefthook's releases.

    v2.1.12

    Changelog

    • b8350fde604197b2422adfc4ae0af080725822b9 ci: fix npm publishing by bumping Node to 24 (#1508)
    • 9fb290d786a0e122fe113b1b49a45bbd0ffa7d28 fix: LEFTHOOK_OUTPUT precedence (#1506)
    • 2f0a9f37cef73e10d95043ba3754329a21850d57 fix: fail the hook when staging fixed files errors (#1484)

    v2.1.11

    Changelog

    • e5b10ac3a2645784ee2e4260620c49c31b44992a deps: bump Go to 1.26.6 (#1495)
    • d4a259f460b7c1d8c512dd75eedc7068310ee961 fix: inherit terminal size for PTY commands (#1498)
    Changelog

    Sourced from lefthook's changelog.

    2.1.12 (2026-08-28)

    2.1.11 (2026-08-21)

    Commits

    Updates marked from 18.0.10 to 18.0.11

    Release notes

    Sourced from marked's releases.

    v18.0.11

    18.0.11 (2026-08-24)

    Bug Fixes

    • do not nest a link inside a link (#4051) (e250e31)
    • inlineTokens rebuilds the reflink-mask preamble per call (#4040) (0653c24)
    • keep emphasis in the text of a rejected reference link (#4059) (b699db3)
    Commits
    • 53cb13f chore(release): 18.0.11 [skip ci]
    • 0c6b2a6 docs: add adaptable bullet point (#4058)
    • c430a64 chore(deps-dev): bump eslint from 10.8.1 to 10.9.0 (#4069)
    • b699db3 fix: keep emphasis in the text of a rejected reference link (#4059)
    • 0653c24 fix: inlineTokens rebuilds the reflink-mask preamble per call (#4040)
    • e250e31 fix: do not nest a link inside a link (#4051)
    • See full diff in compare view

    Updates open from 11.0.1 to 11.0.2

    Release notes

    Sourced from open's releases.

    v11.0.2

    • Update dependencies 6f006ad

    sindresorhus/open@v11.0.1...v11.0.2

    Commits

    Updates oxfmt from 0.64.0 to 0.66.0

    Changelog

    Sourced from oxfmt's changelog.

    Changelog

    All notable changes to this package will be documented in this file.

    The format is based on Keep a Changelog.

    [0.67.0] - 2026-09-07

    🛡️ Security

    • 9a612d5 deps: Update npm packages (#26178) (renovate[bot])
    Commits

    Updates oxlint from 1.79.0 to 1.81.0

    Release notes

    Sourced from oxlint's releases.

    oxlint v1.81.0 & oxfmt v0.66.0

    Table of Contents

    Oxlint v1.81.0

    🚀 Features

    • 60b945d linter/nextjs/no-typos: Implement suggestion (#26091) (Mikhail Baev)

    🐛 Bug Fixes

    • 33ac4b0 linter/lsp: Prevent tsgolint from holding onto processes (#25570) (Adrian Schaedle)
    • baf4b1e linter/import/no-empty-named-blocks: Make empty value import removal a suggestion (#26155) (camc314)
    • 77cfaec linter/eslint/object-shorthand: Preserve __proto__ semantics (#26154) (camc314)
    • fa3c082 linter/unicorn/prefer-set-size: Ignore shadowed Set constructors (#26153) (camc314)
    • e412cf2 linter: Clamp invalid JS plugin locations (#26144) (camc314)
    • d86c113 linter: Normalize reversed JS plugin locations (#26138) (camc314)
    • 73c09b2 linter/eslint/no-use-before-define: Run on JS, JSX files (#26114) (camc314)
    • 03ef0f2 linter/unicorn/no-useless-spread: Treat typed arrays as a distinct value hint (#26067) (Aadharsh Pannirselvam)
    • bd15905 linter/react/no-unstable-nested-components: Check nested component object property names (#26101) (camc314)
    • 3910e2b linter/eslint/no-unassigned-vars: Skip Svelte and Vue files (#26042) (Hamody We)
    • 047f7ca linter/plugins: Fix interaction between JS plugins and Vue rules (#26080) (overlookmotel)
    • 8531b9b linter/plugins: Alter method for obtaining mutable Program when sending AST to JS plugins (#26077) (overlookmotel)
    • dc464ff linter/unicorn/prefer-math-min-max: Avoid unsafe autofix (#26060) (camc314)

    📚 Documentation

    • 464ddd1 linter: Support a shared short description for jest/vitest rules (#26186) (connorshea)
    • 9db5ad3 linter: Add short description to vue/no-dupe-keys (#26183) (connorshea)
    • db66f58 linter: Correct export/import mismatch in bar and foo example (#25927) (billychannnnnn)
    • d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

    Oxfmt v0.66.0

    🚀 Features

    • 1fb37b6 formatter/css: Format declaration-shaped raw-prelude rules (postcss nested config blocks) (#26194) (leaysgur)

    🐛 Bug Fixes

    • 9f81002 formatter: Re-add suppressed statement terminators per options.semi (#26220) (leaysgur)
    • 769ffd5 formatter: Print suppressed typecast parens (#26218) (leaysgur)
    • 5ff57f8 formatter/sort-imports: Handle custom side effect groups (#26217) (leaysgur)
    • 2f4d759 formatter: Do not skip cast comment lookup (#26216) (leaysgur)
    • 1213e12 formatter: Preserve comment for statement terminators and binary casts (#26213) (leaysgur)
    • 57e8e22 formatter_css: Space a folded sign after a call in Less operations (#26134) (leaysgur)
    • e4298fb formatter/jsdoc: Follow CommonMark for interrupting lists and guard wrapping from creating them (#26098) (leaysgur)
    • a1e21c2 formatter: Apply head body policy everywhere (#26074) (leaysgur)
    • 676b7e1 formatter: Keep comments in their for-head slot, before an empty-statement body and do-while (#26073) (leaysgur)

    ... (truncated)

    Changelog

    Sourced from oxlint's changelog.

    [1.81.0] - 2026-08-31

    📚 Documentation

    • d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)
    Commits
    • 0b4e2e6 release(apps): oxlint v1.81.0 && oxfmt v0.66.0 (#26199)
    • d5be037 docs(linter/typescript/switch-exhaustiveness-check): clarify default case com...
    • 63bc313 chore(npm): update funding URL (#26066)
    • 97e99b8 release(apps): oxlint v1.80.0 && oxfmt v0.65.0 (#26045)
    • See full diff in compare view

    Updates turbo from 2.10.11 to 2.10.12

    Release notes

    Sourced from turbo's releases.

    Turborepo v2.10.12

    What's Changed

    Changelog

    @dependabot
    chore(deps): bump the production-dependencies group across 1 director…
    475e978 
    …y with 11 updates

Bumps the production-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.7` | `0.42.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `26.2.0` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.4` | `7.3.1` |
| [backlog-js](https://github.com/nulab/backlog-js) | `0.19.1` | `0.20.1` |
| [commander](https://github.com/tj/commander.js) | `11.1.0` | `15.0.0` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.10` | `2.1.12` |
| [marked](https://github.com/markedjs/marked) | `18.0.10` | `18.0.11` |
| [open](https://github.com/sindresorhus/open) | `11.0.1` | `11.0.2` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.64.0` | `0.66.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.79.0` | `1.81.0` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.11` | `2.10.12` |



Updates `@astrojs/starlight` from 0.41.7 to 0.42.0
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.0/packages/starlight)

Updates `@types/node` from 24.13.3 to 26.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `astro` from 7.2.4 to 7.3.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.1/packages/astro)

Updates `backlog-js` from 0.19.1 to 0.20.1
- [Release notes](https://github.com/nulab/backlog-js/releases)
- [Commits](nulab/backlog-js@v0.19.1...v0.20.1)

Updates `commander` from 11.1.0 to 15.0.0
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v11.1.0...v15.0.0)

Updates `lefthook` from 2.1.10 to 2.1.12
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.10...v2.1.12)

Updates `marked` from 18.0.10 to 18.0.11
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.10...v18.0.11)

Updates `open` from 11.0.1 to 11.0.2
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v11.0.1...v11.0.2)

Updates `oxfmt` from 0.64.0 to 0.66.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.66.0/npm/oxfmt)

Updates `oxlint` from 1.79.0 to 1.81.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.81.0/npm/oxlint)

Updates `turbo` from 2.10.11 to 2.10.12
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.11...v2.10.12)

---
updated-dependencies:
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: astro
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: backlog-js
  dependency-version: 0.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: commander
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: lefthook
  dependency-version: 2.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: marked
  dependency-version: 18.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: open
  dependency-version: 11.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: oxfmt
  dependency-version: 0.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: oxlint
  dependency-version: 1.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: turbo
  dependency-version: 2.10.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 13, 2026
    @dependabot
    dependabot Bot requested a review from lollipop-onl as a code owner September 13, 2026 13:56
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 13, 2026
    @dependabot @github

    dependabot Bot commented on behalf of github Sep 20, 2026

    Copy link
    Copy Markdown
    Contributor Author

    Looks like these dependencies are updatable in another way, so this is no longer needed.

    @dependabot dependabot Bot closed this Sep 20, 2026
    @dependabot
    dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-54505a70e2 branch September 20, 2026 13:55
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    @lollipop-onl lollipop-onl Awaiting requested review from lollipop-onl lollipop-onl is a code owner

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    0 participants