Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 9 updates - #165

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-31b1112683
Closed

chore(deps): bump the production-dependencies group across 1 directory with 9 updates#165
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-31b1112683

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 9 updates in the / directory:

Package From To
@astrojs/starlight 0.41.7 0.42.0
@types/node 25.9.5 26.2.0
astro 7.2.4 7.3.2
backlog-js 0.19.1 0.20.1
commander 14.0.3 15.0.0
lefthook 2.1.10 2.1.12
oxfmt 0.64.0 0.67.0
oxlint 1.79.0 1.82.0
turbo 2.10.11 2.10.12

Updates @astrojs/starlight from 0.41.7 to 0.42.0

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.0

Minor Changes

  • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

  • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

    ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

    In the following example, custom styles for the menu button are updated for the new approach:

    - starlight-menu-button button {
+ .sl-menu-button {
  color: var(--sl-color-text);
}

starlight-menu-button[aria-expanded='true'] button {


.sl-menu-button:has(~ :popover-open) {
color: var(--sl-color-text-accent-high);
}

See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    If your configuration included a tagline option, you can safely remove it without any replacement.

  • #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:

    • astro v7.2.10 or later
    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
    • @astrojs/markdown-remark 7.3.0 or later (if you use it)

    Please update Starlight and Astro together:

    npx @astrojs/upgrade

  • #4121 2623ae6 Thanks @​delucis! - Refactors Starlight’s mobile menu toggle to work when JavaScript fails or is disabled

    ⚠️ BREAKING CHANGE: This release drops official support for Chromium-based browsers prior to version 116 (released August 2023), Safari-based browsers prior to version 17.0 (released September 2023), and Firefox prior to version 125 (released April 2024). You can find a list of currently supported browsers and their versions using this browserslist query.

    This change also removes the data-mobile-menu-expanded attribute, which was previously added to <body> while the mobile menu is open. If you have custom code that was depending on this attribute, you will need to update it to use a new selector to check if the mobile menu is open.

    In the following example, a custom background colour for the site header while the menu is open is updated for the new approach:

    • ... (truncated)

    Changelog

    Sourced from @​astrojs/starlight's changelog.

    0.42.0

    Minor Changes

    • #3572 292fb17 Thanks @​HiDeoo! - Distributes package as JavaScript files with dedicated type declaration files instead of TypeScript source files.

    • #4121 2623ae6 Thanks @​delucis! - Simplifies markup for Starlight’s mobile menu toggle

      ⚠️ Potentially breaking change: If you use a theme plugin, custom styles, or component overrides targeting the MobileMenuToggle button or PageFrame components, you may need to adjust these for the new markup. The button is no longer wrapped in a <starlight-menu-button> custom element and no longer uses the aria-expanded attribute. Instead, you can use the .sl-menu-button class name to target the button and the :popover-open pseudo-class to style the menu open state specifically.

      In the following example, custom styles for the menu button are updated for the new approach:

      - starlight-menu-button button {
+ .sl-menu-button {
  color: var(--sl-color-text);
}

starlight-menu-button[aria-expanded='true'] button {


.sl-menu-button:has(~ :popover-open) {
color: var(--sl-color-text-accent-high);
}

    See MobileMenuToggle.astro and PageFrame.astro on GitHub for the full source code of the updated components.

  • #3572 292fb17 Thanks @​HiDeoo! - Removes the tagline configuration option, which was never used.

    If your configuration included a tagline option, you can safely remove it without any replacement.

  • #4134 6135f01 Thanks @​HiDeoo! - Updates internal @astrojs/mdx, @astrojs/markdown-satteri, and satteri dependencies.

    ⚠️ BREAKING CHANGE: The following minimum versions are now required:

    • astro v7.2.10 or later
    • @astrojs/markdown-satteri 0.4.0 or later (if you use it)
    • @astrojs/markdown-remark 7.3.0 or later (if you use it)

    Please update Starlight and Astro together:

    npx @astrojs/upgrade

  • #4121 2623ae6 Thanks @​delucis! - Refactors Starlight’s mobile menu toggle to work when JavaScript fails or is disabled

    ⚠️ BREAKING CHANGE: This release drops official support for Chromium-based browsers prior to version 116 (released August 2023), Safari-based browsers prior to version 17.0 (released September 2023), and Firefox prior to version 125 (released April 2024). You can find a list of currently supported browsers and their versions using this browserslist query.

    This change also removes the data-mobile-menu-expanded attribute, which was previously added to <body> while the mobile menu is open. If you have custom code that was depending on this attribute, you will need to update it to use a new selector to check if the mobile menu is open.

    • ... (truncated)

    Commits

    Updates @types/node from 25.9.5 to 26.2.0

    Commits

    Updates astro from 7.2.4 to 7.3.2

    Release notes

    Sourced from astro's releases.

    astro@7.3.2

    Patch Changes

    • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

    • #17931 c1a6a89 Thanks @​astro-factory! - Fixes the dev toolbar returning a 504 "Outdated Optimize Dep" error when a workspace-linked package imports a dependency that Vite's initial scan did not discover

    • #17908 42e9188 Thanks @​astro-factory! - Fixes i18n fallback routing replacing the first substring match instead of the actual locale segment, which mangled paths like /energy/en/about into /esergy/en/about

    • #17936 4b92ddc Thanks @​astro-factory! - Fixes sessions breaking in dev mode with the Cloudflare adapter when middleware is present

    • Updated dependencies [a548223]:

      • @​astrojs/markdown-satteri@​0.4.1

    astro@7.3.1

    Patch Changes

    astro@7.3.0

    Minor Changes

    • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

      Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { LocalImageService } from 'astro';
const service: LocalImageService = {
// ...
async transform(inputBuffer, transform, imageConfig, logger) {
logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
return { data: inputBuffer, format: 'png' };
},
};

      Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

      Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { CacheProvider } from 'astro';
const provider: CacheProvider = {

    ... (truncated)

    Changelog

    Sourced from astro's changelog.

    7.3.2

    Patch Changes

    • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

    • #17931 c1a6a89 Thanks @​astro-factory! - Fixes the dev toolbar returning a 504 "Outdated Optimize Dep" error when a workspace-linked package imports a dependency that Vite's initial scan did not discover

    • #17908 42e9188 Thanks @​astro-factory! - Fixes i18n fallback routing replacing the first substring match instead of the actual locale segment, which mangled paths like /energy/en/about into /esergy/en/about

    • #17936 4b92ddc Thanks @​astro-factory! - Fixes sessions breaking in dev mode with the Cloudflare adapter when middleware is present

    • Updated dependencies [a548223]:

      • @​astrojs/markdown-satteri@​0.4.1

    7.3.1

    Patch Changes

    7.3.0

    Minor Changes

    • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

      Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      import type { LocalImageService } from 'astro';
const service: LocalImageService = {
// ...
async transform(inputBuffer, transform, imageConfig, logger) {
logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
return { data: inputBuffer, format: 'png' };
},
};

      Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

    • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

      Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

      

      • 

    


    

    ... (truncated)
    

    

    
Commits


    

    

    Updates backlog-js from 0.19.1 to 0.20.1
    

    
Release notes

    Sourced from backlog-js's releases.
    

    

    v0.20.1
    

    What's Changed
    


    Full Changelog: nulab/backlog-js@v0.20.0...v0.20.1
    

    v0.20.0
    

    What's Changed
    


    New Contributors
    


    Full Changelog: nulab/backlog-js@v0.19.1...v0.20.0
    

    

    

    
Commits

      

    • 39fed62 chore: bump version to v0.20.1
      • 

    • 7f11c3a Merge pull request #198 from nulab/feat/file-data-content-type
      • 

    • 291852f docs: say what the Content-Type is, not what it used to be
      • 

    • 02569b1 Merge pull request #196 from nulab/fix/content-disposition-filename
      • 

    • 136c7ed feat: expose the response's Content-Type on FileData
      • 

    • 0514ecf docs: cut the comments back to what a later reader needs
      • 

    • 9278917 test: cover the headers Backlog actually sends
      • 

    • 5556fb3 fix: unquote a quoted ext-value, and say what the decoded name can contain
      • 

    • 00348f3 fix: parse Content-Disposition instead of slicing it at the first ''
      • 

    • 19a2b38 chore: bump version to v0.20.0
      • 

    • Additional commits viewable in compare view
      • 

    

    

    

    Updates commander from 14.0.3 to 15.0.0
    

    
Release notes

    Sourced from commander's releases.
    

    

    v15.0.0
    

    Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.
    

    The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for
12 months (to May 2027). For more info see Release Policy.
    

    Added
    

      

    • show excess command-arguments in error message (#2384)
      • 

    

    Fixed
    

      

    • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
      • 

    • update example to use compatible character for MINGW64 (#2475)
      • 

    

    Changed
    

      

    • Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
      • 

    • Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
      • 

    • dev: switch tests from Jest to node:test test runner (#2463)
      • 

    

    Deleted
    

      

    • Breaking: removed deprecated export of commander/esm.mjs (#2464)
      • 

    

    Migration Tips
    

    Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is
supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or
some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework
or bundler.
    

    If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will
get security updates until May 2027 and things will hopefully improve for your setup in the meantime.
    

    v15.0.0-0
    

    Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.
    

    The release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for
12 months (to May 2027). For more info see Release Policy.
    

    Added
    

      

    • show excess command-arguments in error message (#2384)
      • 

    

    Fixed
    

      

    • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
      • 

    • update example to use compatible character for MINGW64 (#2475)
      • 

    


    

    ... (truncated)
    

    

    
Changelog

    Sourced from commander's changelog.
    

    

    [15.0.0] (2026-05-29)
    

    Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.
    

    The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for
12 months (to May 2027). For more info see Release Policy.
    

    Added
    

      

    • show excess command-arguments in error message (#2384)
      • 

    

    Fixed
    

      

    • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
      • 

    • update example to use compatible character for MINGW64 (#2475)
      • 

    

    Changed
    

      

    • Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
      • 

    • Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
      • 

    • dev: switch tests from Jest to node:test test runner (#2463)
      • 

    

    Deleted
    

      

    • Breaking: removed deprecated export of commander/esm.mjs (#2464)
      • 

    

    Migration Tips
    

    Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is
supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or
some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework
or bundler.
    

    If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will
get security updates until May 2027 and things will hopefully improve for your setup in the meantime.
    

    [15.0.0-0] (2026-02-22)
    

    (Released as 15.0.0)
    

    

    

    
Commits


    

    

    Updates lefthook from 2.1.10 to 2.1.12
    

    
Release notes

    Sourced from lefthook's releases.
    

    

    v2.1.12
    

    Changelog
    

      

    • b8350fde604197b2422adfc4ae0af080725822b9 ci: fix npm publishing by bumping Node to 24 (#1508)
      • 

    • 9fb290d786a0e122fe113b1b49a45bbd0ffa7d28 fix: LEFTHOOK_OUTPUT precedence (#1506)
      • 

    • 2f0a9f37cef73e10d95043ba3754329a21850d57 fix: fail the hook when staging fixed files errors (#1484)
      • 

    

    v2.1.11
    

    Changelog
    

      

    • e5b10ac3a2645784ee2e4260620c49c31b44992a deps: bump Go to 1.26.6 (#1495)
      • 

    • d4a259f460b7c1d8c512dd75eedc7068310ee961 fix: inherit terminal size for PTY commands (#1498)
      • 

    

    

    

    
Changelog

    Sourced from lefthook's changelog.
    

    

    2.1.12 (2026-08-28)
    


    2.1.11 (2026-08-21)
    


    

    

    
Commits


    

    

    Updates oxfmt from 0.64.0 to 0.67.0
    

    
Changelog

    Sourced from oxfmt's changelog.
    

    

    [0.67.0] - 2026-09-07
    

    🛡️ Security
    

      

    • 9a612d5 deps: Update npm packages (#26178) (renovate[bot])
      • 

    

    

    

    
Commits


    

    

    Updates oxlint from 1.79.0 to 1.82.0
    

    
Release notes

    Sourced from oxlint's releases.
    

    

    oxlint v1.82.0 & oxfmt v0.67.0
    

    Table of Contents
    


    Oxlint v1.82.0
    

    💥 BREAKING CHANGES
    

      

    • 66744f0 parser: [BREAKING] Rename panicked to fatal_error in ParserReturn (#26382) (overlookmotel)
      • 

    

    🚀 Features
    

      

    • 6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)
      • 

    

    🐛 Bug Fixes
    

      

    • aa38ddf linter/unicorn/numeric-separators-style: Correct schema defaults (#26393) (camc314)
      • 

    • 562dd14 jsx-a11y/anchor-has-content: Allow anchors passed as custom component props (#26360) (Mikhail Baev)
      • 

    • 253cdb2 linter/eslint/id-length: Exempt TS interface/type-literal members with never (#26310) (Pearce Ropion)
      • 

    • 8c7ea76 ast_visit: Account for trimmed source offsets (#26223) (Cameron)
      • 

    • 5f9cffc linter/typescript/no-explicit-any: Fix rest parameter to unknown[] (#26279) (camc314)
      • 

    • 4de9fa3 linter/react/jsx-no-literals: Check nested JSX expression literals (#26253) (camc314)
      • 

    • 07851b9 parser: Fix debug assert failure when lexer error with tokens enabled (#26229) (overlookmotel)
      • 

    • 9cee146 oxlint/lsp: Don't try to parse fix message, always fallback (#26204) (Sysix)
      • 

    • a662c40 linter/eslint/no-useless-assignment: Handle destructuring assignments (#25925) (camc314)
      • 

    • 304bd9a linter/eslint/no-array-constructor: Handle ASI hazards in fixer (#26166) (Hamody We)
      • 

    • b41bb35 linter: Qualify rules in rules output (#26250) (camc314)
      • 

    • 895c685 linter/typescript/no-extraneous-class: Avoid deleting class expressions (#26231) (camc314)
      • 

    • 4ba33c8 linter/eslint/no-unused-vars: Handle stored arrow references (#26225) (camc314)
      • 

    

    🛡️ Security
    

      

    • 9a612d5 deps: Update npm packages (#26178) (renovate[bot])
      • 

    

    Oxfmt v0.67.0
    

    💥 BREAKING CHANGES
    

      

    • 66744f0 parser: [BREAKING] Rename panicked to fatal_error in ParserReturn (#26382) (overlookmotel)
      • 

    • 2c9a947 parser: [BREAKING] Reduce MAX_LEN to 256 bytes below u32::MAX (#26352) (overlookmotel)
      • 

    

    🚀 Features
    

      

    • 68e12ab formatter_css: Follow the oxc-css-parser's acceptance line (#26337) (leaysgur)
      • 

    

    🐛 Bug Fixes
    

      

    • f7acdc0 formatter: Treat a JSDoc cast target as opaque in chain layouts (#26375) (leaysgur)
      • 

    • 104061b formatter: Keep JSDoc cast parens with a comment inside them (#26374) (leaysgur)
      • 

    • 3d00a76 formatter_css: Keep comment inside important and simple-vars colon (#26370) (leaysgur)
      • 

    


    

    ... (truncated)
    

    

    
Changelog

    Sourced from oxlint's changelog.
    

    

    [1.82.0] - 2026-09-07
    

    🚀 Features
    

      

    • 6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)
      • 

    

    [1.81.0] - 2026-08-31
    

    📚 Documentation
    

      

    • d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)
      • 

    

    

    

    
Commits

      

    • b4da00b release(apps): oxlint v1.82.0 && oxfmt v0.67.0 (#26384)
      • 

    • aa38ddf fix(linter/unicorn/numeric-separators-style): correct schema defaults (#26393)
      • 

    • 6a0e19c feat(linter/eslint/no-unmodified-loop-condition): support `checkConditionalEx...
      • 

    • 0b4e2e6 release(apps): oxlint v1.81.0 && oxfmt v0.66.0 (#26199)
      • 

    • d5be037 docs(linter/typescript/switch-exhaustiveness-check): clarify default case com...
      • 

    • 63bc313 chore(npm): update funding URL (#26066)
      • 

    • 97e99b8 release(apps): oxlint v1.80.0 && oxfmt v0.65.0 (#26045)
      • 

    • See full diff in compare view
      • 

    

    

    

    Updates turbo from 2.10.11 to 2.10.12
    

    
Release notes

    Sourced from turbo's releases.
    

    

    Turborepo v2.10.12
    


    What's Changed
    

    Changelog
    

    
    
    
      
  

    

      
    

          
    
          
  
  
    
    
  
    
    

  
    
  

  
    

    
                    
    
          
        
    



    
  
    

    
    

    
    


      
    
  
        
    
  
    
      
    
  
  
    
  
              
    
  
    
    
    
      

    
  
    
        
          @dependabot
  
    

    

      
    
        
          chore(deps): bump the production-dependencies group across 1 director…
        

          
                        
      
    

      
    
        

    
    
    
    
    

  

    


      
    

      
    
        
    
          

    
    
    

  

  
    
    
  
    

    
        
    
      
    

      
    
        
          456d664
        
      
    
    
    
  
    
    
    
      
    …y with 9 updates

Bumps the production-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.7` | `0.42.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.5` | `26.2.0` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.4` | `7.3.2` |
| [backlog-js](https://github.com/nulab/backlog-js) | `0.19.1` | `0.20.1` |
| [commander](https://github.com/tj/commander.js) | `14.0.3` | `15.0.0` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.10` | `2.1.12` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.64.0` | `0.67.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.79.0` | `1.82.0` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.11` | `2.10.12` |



Updates `@astrojs/starlight` from 0.41.7 to 0.42.0
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.42.0/packages/starlight)

Updates `@types/node` from 25.9.5 to 26.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `astro` from 7.2.4 to 7.3.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.2/packages/astro)

Updates `backlog-js` from 0.19.1 to 0.20.1
- [Release notes](https://github.com/nulab/backlog-js/releases)
- [Commits](nulab/backlog-js@v0.19.1...v0.20.1)

Updates `commander` from 14.0.3 to 15.0.0
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v14.0.3...v15.0.0)

Updates `lefthook` from 2.1.10 to 2.1.12
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.10...v2.1.12)

Updates `oxfmt` from 0.64.0 to 0.67.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.67.0/npm/oxfmt)

Updates `oxlint` from 1.79.0 to 1.82.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.82.0/npm/oxlint)

Updates `turbo` from 2.10.11 to 2.10.12
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.11...v2.10.12)

---
updated-dependencies:
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: astro
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: backlog-js
  dependency-version: 0.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: commander
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: lefthook
  dependency-version: 2.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: oxfmt
  dependency-version: 0.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: oxlint
  dependency-version: 1.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: turbo
  dependency-version: 2.10.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
    
    
    

    


    

      
    

    



    

      
    
  
            
    
    
    
      
    
    
    
    

      


          @dependabot
dependabot
Bot



            added
      
  dependencies

  Pull requests that update a dependency file

      
  javascript

  Pull requests that update javascript code

  labels


      Sep 20, 2026

    
    
  
    


  
    
  
  
    
  
        
    
        
    
              @dependabot


        
    
      
    
            dependabot
Bot

              requested a review
  from lollipop-onl
    as a code owner


        September 20, 2026 13:55        
        
      
    
    
    

    

    
    
    
    
    
      
    
    
    
    

      


          @dependabot
dependabot
Bot



            added
      
  dependencies

  Pull requests that update a dependency file

      
  javascript

  Pull requests that update javascript code

  labels


      Sep 20, 2026

    
    
  
    





    

      
    
  
      

    

  
    
  @dependabot


    @github

    


  

    

    
    
      
    
  
    
    
    
      
          
      

      
            dependabot
    Bot

      

      

      commented

        on behalf of github

        Sep 27, 2026



      
    
    

  
    

  
    
    
    
      
    
          
    
    

  


        
            
  
      
              Copy link

  
    
                
  
      
              Copy Markdown

  
    
                
      
    
    
    

    
    
        

  
    Contributor


        

  Author


    
    
  
    

    


      
    

        


    
  
    
    
      
          
    Looks like these dependencies are updatable in another way, so this is no longer needed.
    

          		
    
    
      

    
    


        
    
            

            
    
              
            
    
        
    
      
    

      
    
            
  
  
    
    
  
    
    

  
    
  

  
    

        
    

    


    



    


      
    
  
            
    
    
    
      
    
    
    
    

      


          @dependabot
dependabot
Bot



          closed this


      Sep 27, 2026

    
    
  
    

    
    

  
    
  
  
    
  
        
    
        
    
              @dependabot


        
    
      
    
            dependabot
Bot

        
    deleted the
    
      
        dependabot/npm_and_yarn/production-dependencies-31b1112683
    
    branch

        September 27, 2026 13:55        
        
      
    
    
    

    

    



    





  
  
    
    
    
      

      
    




    



    
  

    





    
  
      
    
  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  

    


    

    

    

    
        
    
  
    
    
    
    
    

  
    
    Reviewers
  
    

    


      
    
          


  
      @lollipop-onl
  
    lollipop-onl


          Awaiting requested review from lollipop-onl


                    lollipop-onl is a code owner
      
    


      
    


    


  
      
    
  
    

      
  
    
    Assignees
  
    


        


    No one assigned




    


  
        

    
  


  
    
    Labels
  
    


    
    
      
    dependencies

  Pull requests that update a dependency file
  
    javascript

  Pull requests that update javascript code


    


    


  
        

  
    
    
    
        
    
    Projects
  
    

        
    

    

    None yet




      
    


  
        

    
  
    
    
  
    
    Milestone
  
    

      No milestone


    


    
      
          

    
  
    
    
    
      
        
    
          
  
    
    Development
  
    


            

    Successfully merging this pull request may close these issues.
    




  
  



              
    
    
  
    

    

          

  
  
        
    
  
    
    
    
      0 participants