chore(deps-dev): Bump the dev-dependencies group across 1 directory with 4 updates by dependabot[bot] · Pull Request #16 · appwrite/cdn-for-astro

dependabot · 2026-10-05T08:19:56Z

Bumps the dev-dependencies group with 4 updates in the / directory: @biomejs/biome, astro, publint and simple-git-hooks.

Updates @biomejs/biome from 2.5.9 to 2.5.15

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.15

2.5.15

Patch Changes
#10634 b436ba0 Thanks @subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

For example, the following snippet triggers the rule.
function Component({ items = [] }) {
  return items;
}
#11956 faa8b37 Thanks @dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.
<script>
  export let name;
</script>
#10816 1b9479e Thanks @Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034
{
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}
#11960 1fdb5c2 Thanks @dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.
import { page } from "$app/stores";

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.15

Patch Changes
#10634 b436ba0 Thanks @subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

For example, the following snippet triggers the rule.
function Component({ items = [] }) {
  return items;
}
#11956 faa8b37 Thanks @dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.
<script>
  export let name;
</script>
#10816 1b9479e Thanks @Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034
{
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}
#11960 1fdb5c2 Thanks @dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.
import { page } from "$app/stores";
#11723 3b429d1 Thanks @m1handr! - Fixed #11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.

... (truncated)

Commits

0b4c11f ci: release (#11815)
ad5b362 feat: adds noAstroConflictingSetDirectives rule for .astro (#11494)
034366d chore: update codspeed logo in readme (#12019)
717db8c feat(lint): add noMisplacedListElements (#11917)
089bde0 feat(lint/js): add useStrictBooleanExpressions (#11750)
1fdb5c2 feat(lint/js/svelte): add useSvelteKitRuneImports lint rule (#11960)
faa8b37 feat(lint/js/svelte): add noSvelteExportLet (#11956)
b2b4400 chore: update sponsors (#11973)
ff4c4dd feat(lint/js): add noMeaninglessVoidOperator (#11732)
1b9479e feat(lint): add useLogicalProperties rule (#10816)
Additional commits viewable in compare view

Updates astro from 7.2.4 to 7.3.5

Release notes

Sourced from astro's releases.

astro@7.3.5

Patch Changes
#17736 2b8b2e8 Thanks @ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

Users must import the component with the new ?container query string:
import { experimental_AstroContainer } from "astro/container";
import TodoList from "../components/TodoList.astro?container";
const container = await experimental_AstroContainer.create();
const _string = container.renderComponent(TodoList);
astro@7.3.4

Patch Changes

#18063 40896ac Thanks @adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

#18053 cf5d72f Thanks @Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

#18086 795a7e4 Thanks @ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&) and named (&) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

#18074 0429805 Thanks @SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

#18007 2245837 Thanks @L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

#18096 43657c4 Thanks @matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

#18043 8a53a8b Thanks @astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

#18029 c08252d Thanks @matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

Updated dependencies [3fd16ee, 8358d59]:

@astrojs/markdown-satteri@0.4.2

astro@7.3.3

Patch Changes

#17651 504333c Thanks @sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

#17942 0bc5715 Thanks @matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

#17700 b2222fc Thanks @winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

#17941 394ff79 Thanks @matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

#17928 3277927 Thanks @ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.5

Patch Changes
#17736 2b8b2e8 Thanks @ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

Users must import the component with the new ?container query string:
import { experimental_AstroContainer } from "astro/container";
import TodoList from "../components/TodoList.astro?container";
const container = await experimental_AstroContainer.create();
const _string = container.renderComponent(TodoList);
7.3.4

Patch Changes

#18063 40896ac Thanks @adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

#18053 cf5d72f Thanks @Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

#18086 795a7e4 Thanks @ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&) and named (&) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

#18074 0429805 Thanks @SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

#18007 2245837 Thanks @L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

#18096 43657c4 Thanks @matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

#18043 8a53a8b Thanks @astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

#18029 c08252d Thanks @matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

Updated dependencies [3fd16ee, 8358d59]:

@astrojs/markdown-satteri@0.4.2

7.3.3

Patch Changes

#17651 504333c Thanks @sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

#17942 0bc5715 Thanks @matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

#17700 b2222fc Thanks @winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

#17941 394ff79 Thanks @matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

... (truncated)

Commits

c2e0164 [ci] release (#18113)
2b8b2e8 feat: add render component (#17736)
790c6f7 [ci] release (#18035)
9d17bf1 Update dependency obug to v3 (#18100)
43657c4 Fix i18n domain host validation (#18096)
00393ff Update dependency vitest [SECURITY] (#18026)
40896ac fix(incremental): resolve asset placeholders in modules or compiled CSS (#18063)
0429805 fix(errors): align three error names with their documented reference (#18074)
3eab954 [ci] format
795a7e4 Fix double-escaped ampersands in Markdown image alt and title attributes (#18...
Additional commits viewable in compare view

Updates publint from 0.3.24 to 0.3.25

Release notes

Sourced from publint's releases.

publint@0.3.25

Patch Changes

#260 54aebea - Fix FILE_INVALID_JSX_EXTENSION not detecting the .ctsx extension

#265 78604f3 - Skip file existence check for browser field values that point at another package

Changelog

Sourced from publint's changelog.

0.3.25

Patch Changes

#260 54aebea - Fix FILE_INVALID_JSX_EXTENSION not detecting the .ctsx extension

#265 78604f3 - Skip file existence check for browser field values that point at another package

Commits

b994a03 Release packages (#261)
247be99 Update dependencies (#266)
78604f3 Skip file check for browser field values that point at another package (#265)
54aebea Fix FILE_INVALID_JSX_EXTENSION not detecting the .ctsx extension (#260)
See full diff in compare view

Updates simple-git-hooks from 2.13.1 to 2.14.0

Release notes

Sourced from simple-git-hooks's releases.

2.14.0

What's Changed

chore: remove some unnecessary ignore files by @chouchouji in toplenboren/simple-git-hooks#135

Support node_modules created with bun install --linker=isolated by @dylan-conway in toplenboren/simple-git-hooks#136

feat: silent success if nothing has changed by @younggglcy in toplenboren/simple-git-hooks#138

README.md - better info about uninstall, manual uninstall by @MirKml in toplenboren/simple-git-hooks#143

Update installation guide and usages in README.md by @toplenboren in toplenboren/simple-git-hooks#147

fix: install and remove hooks correctly inside a git worktree by @wmaurer in toplenboren/simple-git-hooks#149

fix: skip postinstall when project has no package.json by @DanMat in toplenboren/simple-git-hooks#151

fix: resolve project root via INIT_CWD in postinstall by @colinhacks in toplenboren/simple-git-hooks#146

New Contributors

@dylan-conway made their first contribution in toplenboren/simple-git-hooks#136

@younggglcy made their first contribution in toplenboren/simple-git-hooks#138

@MirKml made their first contribution in toplenboren/simple-git-hooks#143

@wmaurer made their first contribution in toplenboren/simple-git-hooks#149

@DanMat made their first contribution in toplenboren/simple-git-hooks#151

@colinhacks made their first contribution in toplenboren/simple-git-hooks#146

Full Changelog: toplenboren/simple-git-hooks@2.13.1...2.14.0

Changelog

Sourced from simple-git-hooks's changelog.

2.14.0

Minor Changes

#138 2f3ec3f Thanks @younggglcy! - feat: silent success if nothing has changed

Patch Changes

#146 e9e9367 Thanks @colinhacks! - fix: resolve the project root from INIT_CWD during postinstall so hooks install correctly on isolated node_modules layouts (pnpm, yarn, bun, and other package managers) regardless of the store directory name

#149 f071064 Thanks @wmaurer! - fix: install and remove hooks correctly inside a git worktree, including worktrees created with git worktree add --relative-paths

#151 eb795de Thanks @DanMat! - fix: don't crash postinstall when the resolved project directory has no package.json — skip instead of throwing an uncaught ENOENT

Commits

e9aebbd fix: fix tests
e9e9367 fix: resolve project root via INIT_CWD in postinstall (#146)
eb795de fix: skip postinstall when project has no package.json (#151)
f071064 fix: install and remove hooks correctly inside a git worktree (#149)
d513d07 Update installation guide and usages in README.md (#147)
523532b README.md - better info about uninstall, manual uninstall (#143)
7625657 Update README.md
2f3ec3f feat: silent success if nothing has changed (#138)
33af460 Support node_modules created with bun install --linker=isolated (#136)
bcbc720 chore: remove some unnecessary ignore files (#135)
See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

…ith 4 updates Bumps the dev-dependencies group with 4 updates in the / directory: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome), [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro), [publint](https://github.com/publint/publint/tree/HEAD/packages/publint) and [simple-git-hooks](https://github.com/toplenboren/simple-git-hooks). Updates `@biomejs/biome` from 2.5.9 to 2.5.15 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.15/packages/@biomejs/biome) Updates `astro` from 7.2.4 to 7.3.5 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.3.5/packages/astro) Updates `publint` from 0.3.24 to 0.3.25 - [Release notes](https://github.com/publint/publint/releases) - [Changelog](https://github.com/publint/publint/blob/master/packages/publint/CHANGELOG.md) - [Commits](https://github.com/publint/publint/commits/publint@0.3.25/packages/publint) Updates `simple-git-hooks` from 2.13.1 to 2.14.0 - [Release notes](https://github.com/toplenboren/simple-git-hooks/releases) - [Changelog](https://github.com/toplenboren/simple-git-hooks/blob/master/CHANGELOG.md) - [Commits](toplenboren/simple-git-hooks@2.13.1...2.14.0) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: astro dependency-version: 7.3.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: publint dependency-version: 0.3.25 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: simple-git-hooks dependency-version: 2.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-05T08:19:57Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

Repository navigation

chore(deps-dev): Bump the dev-dependencies group across 1 directory with 4 updates - #16

chore(deps-dev): Bump the dev-dependencies group across 1 directory with 4 updates#16
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-5c4a622e70

dependabot Bot commented on behalf of github Oct 5, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.15

2.5.15

Patch Changes

2.5.15

Patch Changes

astro@7.3.5

Patch Changes

astro@7.3.4

Patch Changes

astro@7.3.3

Patch Changes

7.3.5

Patch Changes

7.3.4

Patch Changes

7.3.3

Patch Changes

publint@0.3.25

Patch Changes

0.3.25

Patch Changes

2.14.0

What's Changed

New Contributors

2.14.0

Minor Changes

Patch Changes

Uh oh!

dependabot Bot commented on behalf of github Oct 5, 2026

Labels

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 5, 2026 •

edited

Loading