Skip to content

chore(deps): bump the github-actions group across 1 directory with 9 updates - #1665

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/github-actions-536e0dfe1c
Open

chore(deps): bump the github-actions group across 1 directory with 9 updates#1665
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/github-actions-536e0dfe1c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 9 updates in the / directory:

Package From To
@astrojs/check 0.9.9 0.9.10
@astrojs/markdown-remark 7.2.1 7.2.2
@astrojs/starlight 0.41.3 0.41.6
@astrojs/vercel 11.0.3 11.0.4
astro 7.1.3 7.1.6
@octokit/graphql 9.0.3 9.0.4
prettier 3.9.5 3.9.6
tsx 4.23.1 4.23.5
vercel 56.3.2 58.4.4

Updates @astrojs/check from 0.9.9 to 0.9.10

Release notes

Sourced from @​astrojs/check's releases.

@​astrojs/check@​0.9.10

Patch Changes

Changelog

Sourced from @​astrojs/check's changelog.

0.9.10

Patch Changes

Commits

Updates @astrojs/markdown-remark from 7.2.1 to 7.2.2

Release notes

Sourced from @​astrojs/markdown-remark's releases.

@​astrojs/markdown-remark@​7.2.2

Patch Changes

  • Updated dependencies [c895b12]:
    • @​astrojs/internal-helpers@​0.10.2
Changelog

Sourced from @​astrojs/markdown-remark's changelog.

7.2.2

Patch Changes

  • Updated dependencies [c895b12]:
    • @​astrojs/internal-helpers@​0.10.2
Commits

Updates @astrojs/starlight from 0.41.3 to 0.41.6

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.41.6

Patch Changes

@​astrojs/starlight@​0.41.5

Patch Changes

@​astrojs/starlight@​0.41.4

Patch Changes

Changelog

Sourced from @​astrojs/starlight's changelog.

0.41.6

Patch Changes

0.41.5

Patch Changes

0.41.4

Patch Changes

Commits

Updates @astrojs/vercel from 11.0.3 to 11.0.4

Release notes

Sourced from @​astrojs/vercel's releases.

@​astrojs/vercel@​11.0.4

Patch Changes

  • Updated dependencies [c895b12]:
    • @​astrojs/internal-helpers@​0.10.2
Changelog

Sourced from @​astrojs/vercel's changelog.

11.0.4

Patch Changes

  • Updated dependencies [c895b12]:
    • @​astrojs/internal-helpers@​0.10.2
Commits

Updates astro from 7.1.3 to 7.1.6

Release notes

Sourced from astro's releases.

astro@7.1.6

Patch Changes

  • #17536 ff97b86 Thanks @​dmgawel! - Fixes concurrent static builds failing to generate i18n rewrite fallbacks for dynamic routes

  • #17383 296e1b0 Thanks @​thelazylamaGit! - Fixes stale dev CSS after editing component style blocks and CSS files in dev

  • #17543 bbc1ec9 Thanks @​ematipico! - Adds a feature to experimental.collectionStorage that allows to change the size of chunks.

    For example, you can reduce the size of chunks to 1MB:

    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
collectionStorage: {
type: 'chunked',
chunkSize: 1024 * 1024,
},
},
});

  • #17545 5214663 Thanks @​ematipico! - Bumps the Astro compiler to the latest version. Changelog.

astro@7.1.5

Patch Changes

  • #17524 7613030 Thanks @​matthewp! - Fixes a bug where an error while finalizing a request could prevent a response from being sent

  • #17480 f61ba9c Thanks @​florian-lefebvre! - Fixes a case where a custom logger.entrypoint failed to load at runtime in a built server bundle.

  • #17525 e614b7b Thanks @​matthewp! - Fixes action path resolution so that properties of a resolved action function are not treated as routable path segments

  • #17284 c775c1f Thanks @​matthewp! - Fixes a bug where the custom 404 (or 500) page was not rendered when a middleware rewrite targeted a route that returned an empty 404/500 response, and a blank page was returned instead

  • #17474 c895b12 Thanks @​nicksnyder! - Updates dependency js-yaml to v4.3.0

  • Updated dependencies [c895b12]:

    • @​astrojs/internal-helpers@​0.10.2
    • @​astrojs/markdown-remark@​7.2.2
    • @​astrojs/markdown-satteri@​0.3.5

astro@7.1.4

Patch Changes

  • #17488 d4f266d Thanks @​emerson-d-lopes! - Fixes duplicate CSS files being emitted in server output when a prerendered page and a server-rendered page share the same styles (e.g. a shared layout importing Tailwind). The prerender and SSR environments each emitted their own copy of the same stylesheet (index.X.css and _..Y.css); the SSR build now reuses the CSS asset filename from the prerender build when the stylesheet is backed by the same CSS source modules, so only a single file is emitted.

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.6

Patch Changes

  • #17536 ff97b86 Thanks @​dmgawel! - Fixes concurrent static builds failing to generate i18n rewrite fallbacks for dynamic routes

  • #17383 296e1b0 Thanks @​thelazylamaGit! - Fixes stale dev CSS after editing component style blocks and CSS files in dev

  • #17543 bbc1ec9 Thanks @​ematipico! - Adds a feature to experimental.collectionStorage that allows to change the size of chunks.

    For example, you can reduce the size of chunks to 1MB:

    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
collectionStorage: {
type: 'chunked',
chunkSize: 1024 * 1024,
},
},
});

  • #17545 5214663 Thanks @​ematipico! - Bumps the Astro compiler to the latest version. Changelog.

7.1.5

Patch Changes

  • #17524 7613030 Thanks @​matthewp! - Fixes a bug where an error while finalizing a request could prevent a response from being sent

  • #17480 f61ba9c Thanks @​florian-lefebvre! - Fixes a case where a custom logger.entrypoint failed to load at runtime in a built server bundle.

  • #17525 e614b7b Thanks @​matthewp! - Fixes action path resolution so that properties of a resolved action function are not treated as routable path segments

  • #17284 c775c1f Thanks @​matthewp! - Fixes a bug where the custom 404 (or 500) page was not rendered when a middleware rewrite targeted a route that returned an empty 404/500 response, and a blank page was returned instead

  • #17474 c895b12 Thanks @​nicksnyder! - Updates dependency js-yaml to v4.3.0

  • Updated dependencies [c895b12]:

    • @​astrojs/internal-helpers@​0.10.2
    • @​astrojs/markdown-remark@​7.2.2
    • @​astrojs/markdown-satteri@​0.3.5

7.1.4

Patch Changes

... (truncated)

Commits

Updates @octokit/graphql from 9.0.3 to 9.0.4

Release notes

Sourced from @​octokit/graphql's releases.

v9.0.4

9.0.4 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#705) (245ee6e)
Commits
  • af94a01 chore(deps): update dependency prettier to v3.9.6 (#686)
  • 2b24525 build(deps): lock file maintenance (#704)
  • 245ee6e fix(deps): update dependency @​octokit/types to v17 (#705)
  • 9d55053 ci(action): update actions/add-to-project action to v2 (#695)
  • c92e5e3 ci(action): update actions/checkout action to v7 (#700)
  • 1d10b42 chore(deps): update dependency typescript to v7 (#701)
  • 25587cf ci(action): update actions/setup-node action to v7 (#702)
  • 9fef990 ci(action): update actions/create-github-app-token action to v3 (#688)
  • 5ef2ab4 build(deps): lock file maintenance (#699)
  • 7018c70 chore(deps): update dependency esbuild to ^0.28.0 [security] (#698)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/graphql since your current version.


Updates prettier from 3.9.5 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

  1. Install the plugin:

    yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

Updates tsx from 4.23.1 to 4.23.5

Release notes

Sourced from tsx's releases.

v4.23.5

4.23.5 (2026-08-02)

Bug Fixes

  • detect the Node inspector enabled via NODE_OPTIONS (3c1d051)

This release is also available on:

v4.23.4

4.23.4 (2026-08-02)

Bug Fixes

  • cli: allow async process.once() signal handlers to finish (#827) (2afc7bb)

This release is also available on:

v4.23.3

4.23.3 (2026-08-02)

Bug Fixes

  • preserve listenerCount overload semantics (#823) (b6574d4)

This release is also available on:

v4.23.2

4.23.2 (2026-08-02)

Bug Fixes

  • watch: exit with 128 + signal number when interrupted (#820) (0b00bc8)

This release is also available on:

Commits
  • c55004d test: remove legacy PTY retry
  • e368161 chore(deps): update pty-spawn to 1.1.1
  • 8d39496 ci: validate GitHub Actions workflows
  • 6fe724e test: clean up timed-out PTY attempts
  • e0a0536 ci: skip unused Windows Node cache
  • 6d6dd84 ci: remove broken lock automation
  • 3c1d051 fix: detect the Node inspector enabled via NODE_OPTIONS
  • 40380a4 ci: lock down the release toolchain
  • f217b6b ci: restrict releases to public repository
  • 2afc7bb fix(cli): allow async process.once() signal handlers to finish (#827)
  • Additional commits viewable in compare view

Updates vercel from 56.3.2 to 58.4.4

Release notes

Sourced from vercel's releases.

vercel@58.4.4

Patch Changes

  • dcadcad: Trigger a new release to publish versions that were skipped by the failed release run.

vercel@58.4.0

Minor Changes

  • a928d5a: Add vercel ai-gateway budgets defaults (list/set/remove) to manage per-scope AI Gateway budget defaults (project and api-key), each with its own limit and refresh period

Patch Changes

  • Updated dependencies [2c75803]
  • Updated dependencies [57dec92]
    • @​vercel/build-utils@​13.36.2
    • @​vercel/backends@​0.8.29
    • @​vercel/container@​0.1.0
    • @​vercel/elysia@​0.1.106
    • @​vercel/express@​0.1.120
    • @​vercel/fastify@​0.1.109
    • @​vercel/go@​3.10.2
    • @​vercel/h3@​0.1.115
    • @​vercel/hono@​0.2.109
    • @​vercel/hydrogen@​1.4.0
    • @​vercel/koa@​0.1.89
    • @​vercel/nestjs@​0.2.110
    • @​vercel/next@​4.20.4
    • @​vercel/node@​5.9.2
    • @​vercel/python@​6.54.0
    • @​vercel/redwood@​2.5.0
    • @​vercel/remix-builder@​5.9.1
    • @​vercel/ruby@​2.5.1
    • @​vercel/rust@​1.4.0
    • @​vercel/static-build@​2.11.12

vercel@58.3.0

Minor Changes

  • 0f04613: Add vercel vcr permissions subcommands for managing which teams can pull images from a VCR repository: vcr permissions <repository> ls lists teams with access (by team slug), add and rm grant or revoke access for one or more teams (comma-separated team ids or slugs), and clear removes access for every team.

  • 17ee736: Replace the vercel-workers integration for Python queue subscribers and workflows with the new vercel-queue SDK:

    • [[tool.vercel.subscribers]] entrypoints are introspected at build time via vercel.queue.get_subscriptions() and served through generated vercel.queue.asgi_app() handler modules, with queue/v2beta triggers carrying the SDK-registered consumer groups and per-subscription tuning.
    • Celery and Dramatiq projects get the matching vercel-celery/vercel-dramatiq integration package injected automatically (bundled variant unless vercel-queue is an explicit dependency), in builds and in vercel dev.
    • [[tool.vercel.workflows]] entrypoints follow the SDK generation: projects on vercel >= 0.8.0 are served through vercel-queue like subscribers; older or undeterminable versions keep the legacy vercel-workers serving (worker env markers, injected pinned vercel-workers).
    • Projects that depend on vercel-workers directly keep the legacy integration wholesale: legacy subscriber schema, direct entrypoint serving, worker env markers.
    • vercel dev serves queue sidecars through vercel.queue.asgi_app() for new-SDK projects, and its queue broker delivers with the SDK-registered consumer groups introspected at sidecar startup (matching production trigger behavior); legacy projects keep the vercel-workers bootstrap.
    • The CLI no longer injects config.hasWorkerServices; the Python builder makes all queue-serving decisions from project metadata.

  • 5fc4930: Rename the vc edge-config command to vc global-config, keeping edge-config working as an alias for backwards compatibility.

... (truncated)

Changelog

Sourced from vercel's changelog.

58.4.4

Patch Changes

  • dcadcad: Trigger a new release to publish versions that were skipped by the failed release run.

58.4.3

Patch Changes

  • 5f49021: Add --protection-password to vercel project protection enable so deployment protection passwords can be set from the CLI when used with --password.
  • 230fe53: Made non-interactive project inspection fail instead of linking when project context is unresolved, and corrected Vercel CLI skill guidance for project resolution, pull outputs, and browser authentication flows.

58.4.2

Patch Changes

  • a69c714: Propagate per-function maxConcurrency configuration into build outputs and keep every configured Next.js route in its own Lambda group, including routes with the same limit.
  • 2d84055: Skip legacy Sensitive Environment Variables Policy in vercel env add and vercel env update when VERCEL_ENV_VAR_CONFIG_SECRET_UI is set, and send visibility (config/secret) on create and update requests when not explicitly set via --visibility (omitted for public-prefixed keys that cannot use secret visibility). Development still disallows secrets.
  • 682bf8b: Fix login device-flow unit tests under CI: clear CI when asserting browser open, and read already-flushed stderr via getFullOutput.
  • c006a5f: Fix pagination for the vercel teams members command.
  • 654e898: Type shared function settings in container image build outputs.
  • ae08009: Remove auto-opt-in of vercel team members to the native CLI binary.
  • 8b8a729: Added support for adding and removing variants with vercel flags update. For example, use vercel flags update checkout-flow --add-variant treatment="Treatment" to add a variant, or vercel flags update checkout-flow --remove-variant legacy --yes to remove one.
  • Updated dependencies [a69c714]
  • Updated dependencies [654e898]
    • @​vercel/build-utils@​13.36.3
    • @​vercel/next@​4.20.5
    • @​vercel/static-build@​2.11.13
    • @​vercel/backends@​0.8.30
    • @​vercel/container@​0.1.0
    • @​vercel/elysia@​0.1.107
    • @​vercel/express@​0.1.121
    • @​vercel/fastify@​0.1.110
    • @​vercel/go@​3.10.2
    • @​vercel/h3@​0.1.116
    • @​vercel/hono@​0.2.110
    • @​vercel/hydrogen@​1.4.0
    • @​vercel/koa@​0.1.90
    • @​vercel/nestjs@​0.2.111
    • @​vercel/node@​5.9.3
    • @​vercel/python@​6.54.1
    • @​vercel/redwood@​2.5.0
    • @​vercel/remix-builder@​5.9.1
    • @​vercel/ruby@​2.5.1

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the github-actions group across 1 directory with 9 …
bb41c76 
…updates

Bumps the github-actions group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/check](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check) | `0.9.9` | `0.9.10` |
| [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) | `7.2.1` | `7.2.2` |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.41.3` | `0.41.6` |
| [@astrojs/vercel](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vercel) | `11.0.3` | `11.0.4` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.3` | `7.1.6` |
| [@octokit/graphql](https://github.com/octokit/graphql.js) | `9.0.3` | `9.0.4` |
| [prettier](https://github.com/prettier/prettier) | `3.9.5` | `3.9.6` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.5` |
| [vercel](https://github.com/vercel/vercel/tree/HEAD/packages/cli) | `56.3.2` | `58.4.4` |



Updates `@astrojs/check` from 0.9.9 to 0.9.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/astro-check/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/check@0.9.10/packages/language-tools/astro-check)

Updates `@astrojs/markdown-remark` from 7.2.1 to 7.2.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.2.2/packages/markdown/remark)

Updates `@astrojs/starlight` from 0.41.3 to 0.41.6
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.41.6/packages/starlight)

Updates `@astrojs/vercel` from 11.0.3 to 11.0.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vercel/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/vercel@11.0.4/packages/integrations/vercel)

Updates `astro` from 7.1.3 to 7.1.6
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.1.6/packages/astro)

Updates `@octokit/graphql` from 9.0.3 to 9.0.4
- [Release notes](https://github.com/octokit/graphql.js/releases)
- [Commits](octokit/graphql.js@v9.0.3...v9.0.4)

Updates `prettier` from 3.9.5 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.5...3.9.6)

Updates `tsx` from 4.23.1 to 4.23.5
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.1...v4.23.5)

Updates `vercel` from 56.3.2 to 58.4.4
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/vercel@58.4.4/packages/cli)

---
updated-dependencies:
- dependency-name: "@astrojs/check"
  dependency-version: 0.9.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: "@astrojs/markdown-remark"
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.41.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: "@astrojs/vercel"
  dependency-version: 11.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: astro
  dependency-version: 7.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: "@octokit/graphql"
  dependency-version: 9.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: tsx
  dependency-version: 4.23.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: vercel
  dependency-version: 58.4.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
@vercel

vercel Bot commented Aug 10, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
openresource-dev Ready Ready Preview Aug 10, 2026 3:05am

@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants