Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 26, 2026

Bumps the npm-deps group with 4 updates: @astrojs/starlight, astro, @lavamoat/allow-scripts and prettier.

Updates @astrojs/starlight from 0.37.3 to 0.37.4

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.37.4

Patch Changes

  • #3534 703fab0 Thanks @​HiDeoo! - Fixes support for running builds when npx is unavailable.

    Previously, Starlight would spawn a process to run the Pagefind search indexing binary using npx. On platforms where npx isn’t available, this could cause issues. Starlight now runs Pagefind using its Node.js API to avoid a separate process. As a side effect, you may notice that logging during builds is now less verbose.

  • #3656 a0e6368 Thanks @​delucis! - Fixes several edge cases in highlighting the current page heading in Starlight’s table of contents

  • #3663 00cbf00 Thanks @​lines-of-codes! - Adds Thai language support

  • #3658 ac79329 Thanks @​delucis! - Avoids adding redundant aria-current="false" attributes to sidebar entries

  • #3382 db295c2 Thanks @​trueberryless! - Fixes an issue where the mobile table of contents is unable to find the first heading when a page has a tall banner.

Changelog

Sourced from @​astrojs/starlight's changelog.

0.37.4

Patch Changes

  • #3534 703fab0 Thanks @​HiDeoo! - Fixes support for running builds when npx is unavailable.

    Previously, Starlight would spawn a process to run the Pagefind search indexing binary using npx. On platforms where npx isn’t available, this could cause issues. Starlight now runs Pagefind using its Node.js API to avoid a separate process. As a side effect, you may notice that logging during builds is now less verbose.

  • #3656 a0e6368 Thanks @​delucis! - Fixes several edge cases in highlighting the current page heading in Starlight’s table of contents

  • #3663 00cbf00 Thanks @​lines-of-codes! - Adds Thai language support

  • #3658 ac79329 Thanks @​delucis! - Avoids adding redundant aria-current="false" attributes to sidebar entries

  • #3382 db295c2 Thanks @​trueberryless! - Fixes an issue where the mobile table of contents is unable to find the first heading when a page has a tall banner.

Commits

Updates astro from 5.16.11 to 5.16.15

Release notes

Sourced from astro's releases.

astro@5.16.15

Patch Changes

  • #15286 0aafc83 Thanks @​florian-lefebvre! - Fixes a case where font providers provided as class instances may not work when using the experimental Fonts API. It affected the local provider

astro@5.16.14

Patch Changes

  • #15213 c775fce Thanks @​florian-lefebvre! - BREAKING CHANGE to the experimental Fonts API only

    Updates how the local provider must be used when using the experimental Fonts API

    Previously, there were 2 kinds of font providers: remote and local.

    Font providers are now unified. If you are using the local provider, the process for configuring local fonts must be updated:

    -import { defineConfig } from "astro/config";
    +import { defineConfig, fontProviders } from "astro/config";
    export default defineConfig({
    experimental: {
    fonts: [{
    name: "Custom",
    cssVariable: "--font-custom",
    
    
           provider: "local",
    
    
    
    
    
           provider: fontProviders.local(),
    
    
    
           options: {
          variants: [
              {
                  weight: 400,
                  style: "normal",
                  src: ["./src/assets/fonts/custom-400.woff2"]
              },
              {
                  weight: 700,
                  style: "normal",
                  src: ["./src/assets/fonts/custom-700.woff2"]
              }
              // ...
          ]
    
    
    
           }
      }]
    
    }
    });

Once configured, there is no change to using local fonts in your project. However, you should inspect your deployed site to confirm that your new font configuration is being applied.

See the experimental Fonts API docs for more information.

... (truncated)

Changelog

Sourced from astro's changelog.

5.16.15

Patch Changes

  • #15286 0aafc83 Thanks @​florian-lefebvre! - Fixes a case where font providers provided as class instances may not work when using the experimental Fonts API. It affected the local provider

5.16.14

Patch Changes

  • #15213 c775fce Thanks @​florian-lefebvre! - BREAKING CHANGE to the experimental Fonts API only

    Updates how the local provider must be used when using the experimental Fonts API

    Previously, there were 2 kinds of font providers: remote and local.

    Font providers are now unified. If you are using the local provider, the process for configuring local fonts must be updated:

    -import { defineConfig } from "astro/config";
    +import { defineConfig, fontProviders } from "astro/config";
    export default defineConfig({
    experimental: {
    fonts: [{
    name: "Custom",
    cssVariable: "--font-custom",
    
    
           provider: "local",
    
    
    
    
    
           provider: fontProviders.local(),
    
    
    
           options: {
          variants: [
              {
                  weight: 400,
                  style: "normal",
                  src: ["./src/assets/fonts/custom-400.woff2"]
              },
              {
                  weight: 700,
                  style: "normal",
                  src: ["./src/assets/fonts/custom-700.woff2"]
              }
              // ...
          ]
    
    
    
           }
      }]
    
    }
    });

Once configured, there is no change to using local fonts in your project. However, you should inspect your deployed site to confirm that your new font configuration is being applied.

... (truncated)

Commits

Updates @lavamoat/allow-scripts from 3.4.1 to 3.4.2

Release notes

Sourced from @​lavamoat/allow-scripts's releases.

allow-scripts: v3.4.2

3.4.2 (2026-01-20)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​lavamoat/aa bumped from ^4.3.4 to ^4.3.5
Changelog

Sourced from @​lavamoat/allow-scripts's changelog.

3.4.2 (2026-01-20)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​lavamoat/aa bumped from ^4.3.4 to ^4.3.5
Commits

Updates prettier from 3.8.0 to 3.8.1

Release notes

Sourced from prettier's releases.

3.8.1

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.1

diff

Include available printers in plugin type declarations (#18706 by @​porada)

// Input
import * as prettierPluginEstree from "prettier/plugins/estree";
// Prettier 3.8.0
// Property 'printers' does not exist on type 'typeof import("prettier/plugins/estree")'. ts(2339)
prettierPluginEstree.printers.estree; //=> any
// Prettier 3.8.1
prettierPluginEstree.printers.estree; //=> Printer
prettierPluginEstree.printers["estree-json"]; //=> Printer

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-deps group with 4 updates: [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight), [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro), [@lavamoat/allow-scripts](https://github.com/LavaMoat/LavaMoat/tree/HEAD/packages/allow-scripts) and [prettier](https://github.com/prettier/prettier).


Updates `@astrojs/starlight` from 0.37.3 to 0.37.4
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.37.4/packages/starlight)

Updates `astro` from 5.16.11 to 5.16.15
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@5.16.15/packages/astro)

Updates `@lavamoat/allow-scripts` from 3.4.1 to 3.4.2
- [Release notes](https://github.com/LavaMoat/LavaMoat/releases)
- [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/allow-scripts/CHANGELOG.md)
- [Commits](https://github.com/LavaMoat/LavaMoat/commits/allow-scripts-v3.4.2/packages/allow-scripts)

Updates `prettier` from 3.8.0 to 3.8.1
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.0...3.8.1)

---
updated-dependencies:
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: astro
  dependency-version: 5.16.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@lavamoat/allow-scripts"
  dependency-version: 3.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 26, 2026
@tomarra tomarra merged commit 6ac9107 into main Jan 26, 2026
3 of 4 checks passed
@tomarra tomarra deleted the dependabot/npm_and_yarn/npm-deps-5e8d0fcea0 branch January 26, 2026 16:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant