Monthly dependency updates: Bump the "maintenance" group with 2 updates across multiple ecosystems by dependabot[bot] · Pull Request #440 · mlibrary/lib.umich.edu

dependabot · 2026-10-01T10:10:11Z

Bumps the maintenance group with 6 updates:

Package	From	To
astro	`7.3.2`	`7.3.5`
nanostores	`1.5.3`	`1.5.4`
@astrojs/netlify	`8.2.5`	`8.2.6`
eslint	`10.10.0`	`10.11.0`
postcss-custom-media	`12.0.1`	`12.0.2`
typescript	`6.0.3`	`7.0.2`

Updates astro from 7.3.2 to 7.3.5

Release notes

Sourced from astro's releases.

astro@7.3.5

Patch Changes
#17736 2b8b2e8 Thanks @ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

Users must import the component with the new ?container query string:
import { experimental_AstroContainer } from "astro/container";
import TodoList from "../components/TodoList.astro?container";
const container = await experimental_AstroContainer.create();
const _string = container.renderComponent(TodoList);
astro@7.3.4

Patch Changes

#18063 40896ac Thanks @adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

#18053 cf5d72f Thanks @Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

#18086 795a7e4 Thanks @ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&) and named (&) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

#18074 0429805 Thanks @SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

#18007 2245837 Thanks @L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

#18096 43657c4 Thanks @matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

#18043 8a53a8b Thanks @astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

#18029 c08252d Thanks @matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

Updated dependencies [3fd16ee, 8358d59]:

@astrojs/markdown-satteri@0.4.2

astro@7.3.3

Patch Changes

#17651 504333c Thanks @sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

#17942 0bc5715 Thanks @matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

#17700 b2222fc Thanks @winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

#17941 394ff79 Thanks @matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

#17928 3277927 Thanks @ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.5

Patch Changes
#17736 2b8b2e8 Thanks @ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

Users must import the component with the new ?container query string:
import { experimental_AstroContainer } from "astro/container";
import TodoList from "../components/TodoList.astro?container";
const container = await experimental_AstroContainer.create();
const _string = container.renderComponent(TodoList);
7.3.4

Patch Changes

#18063 40896ac Thanks @adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

#18053 cf5d72f Thanks @Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

#18086 795a7e4 Thanks @ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&) and named (&) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

#18074 0429805 Thanks @SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

#18007 2245837 Thanks @L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

#18096 43657c4 Thanks @matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

#18043 8a53a8b Thanks @astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

#18029 c08252d Thanks @matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

Updated dependencies [3fd16ee, 8358d59]:

@astrojs/markdown-satteri@0.4.2

7.3.3

Patch Changes

#17651 504333c Thanks @sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

#17942 0bc5715 Thanks @matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

#17700 b2222fc Thanks @winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

#17941 394ff79 Thanks @matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

... (truncated)

Commits

c2e0164 [ci] release (#18113)
2b8b2e8 feat: add render component (#17736)
790c6f7 [ci] release (#18035)
9d17bf1 Update dependency obug to v3 (#18100)
43657c4 Fix i18n domain host validation (#18096)
00393ff Update dependency vitest [SECURITY] (#18026)
40896ac fix(incremental): resolve asset placeholders in modules or compiled CSS (#18063)
0429805 fix(errors): align three error names with their documented reference (#18074)
3eab954 [ci] format
795a7e4 Fix double-escaped ampersands in Markdown image alt and title attributes (#18...
Additional commits viewable in compare view

Updates nanostores from 1.5.3 to 1.5.4

Release notes

Sourced from nanostores's releases.

1.5.4

Fixed listenKeys for deepMap (by @tiagovilasboas).

Fixed listener calls lost after unbind and inside batch() (by @psd-coder).

Fixed tasks during cleaning up (by @lprnmns).

Fixed listenKeys with non-string map keys (by @lprnmns).

Fixed listenKeys to use Object.is (by @lprnmns).

Fixed effect() on an error during subscription (by @lprnmns).

Changelog

Sourced from nanostores's changelog.

1.5.4

Fixed listenKeys for deepMap (by @tiagovilasboas).

Fixed listener calls lost after unbind and inside batch() (by @psd-coder).

Fixed tasks during cleaning up (by @lprnmns).

Fixed listenKeys with non-string map keys (by @lprnmns).

Fixed listenKeys to use Object.is (by @lprnmns).

Fixed effect() on an error during subscription (by @lprnmns).

Commits

96ae584 Release 1.5.4 version
c0276c2 Update dependencies
e2ea3bc Fix listener calls lost after unbind and inside batch() (#435)
d9f170b fix(listen-keys): fire for deep keys changed through a parent key (#437)
20256bf docs: add Redux DevTools integration to devtools list (#436)
cb9c3b1 Update dependencies
983153d Update Size Limit
1256782 Move from esbuild to rolldown in Size Limit
c97f5a8 Update dependencies
79a749d Fix subscriptions left behind when effect setup fails (#433)
Additional commits viewable in compare view

Updates @astrojs/netlify from 8.2.5 to 8.2.6

Release notes

Sourced from @astrojs/netlify's releases.

@astrojs/netlify@8.2.6

Patch Changes

#17978 7a698ca Thanks @astro-factory! - Fixes skew protection to include the build assets directory (/_astro/ by default) in skew-protection.json patterns, preventing lazy-hydrated islands from loading duplicate framework instances after a redeploy

Updated dependencies []:

@astrojs/underscore-redirects@1.0.4

Changelog

Sourced from @astrojs/netlify's changelog.

8.2.6

Patch Changes

#17978 7a698ca Thanks @astro-factory! - Fixes skew protection to include the build assets directory (/_astro/ by default) in skew-protection.json patterns, preventing lazy-hydrated islands from loading duplicate framework instances after a redeploy

Updated dependencies []:

@astrojs/underscore-redirects@1.0.4

Commits

8a3106e [ci] release (#17939)
7a698ca fix(netlify): include assets directory in skew-protection.json patterns (#17978)
c0b6581 feat: use logger instead of console where possible (#17818)
See full diff in compare view

Updates eslint from 10.10.0 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)

397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)

d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)

b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)

26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)

6c789ff docs: Update README (GitHub Actions Bot)

5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)

92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)

9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])

24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)

45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])

ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)

c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)

f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)

fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)

Commits

3c0b7c6 10.11.0
321f0a7 Build: changelog update for 10.11.0
520dd77 perf: Implement fast paths in critical areas (#21210)
9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
24310e3 chore: update ecosystem plugins (#21324)
d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
Additional commits viewable in compare view

Updates postcss-custom-media from 12.0.1 to 12.0.2

Changelog

Sourced from postcss-custom-media's changelog.

12.0.2

September 25, 2026

Improve performance

Fix exponential growth of cascade layer names for deeply nested @layer rules

Throw when @layer nesting exceeds a safe depth

Throw when a custom media expansion exceeds the maximum size or length

Fixed the handling of cyclic custom media references to be deterministic

Updated @csstools/css-tokenizer to 4.0.1 (patch)

Updated @csstools/css-tokenizer to 4.0.2 (patch)

Updated @csstools/css-parser-algorithms to 4.0.1 (patch)

Updated @csstools/cascade-layer-name-parser to 3.0.1 (patch)

Updated @csstools/media-query-list-parser to 5.0.1 (patch)

Commits

See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits

1e4744d Merge branch 'main' into ts7-release
a5a219cmicrosoft/typescript-go#4558
ecfe30d Update status localization
5de25b5 Hide executable name in TypeScript status
d7ce74a Show bundled TypeScript version for packaged servers
29be66a Correct TS 7 release version to 7.0.2
ed2bd1b Merge branch 'main' into ts7-release
8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
d4eaca5microsoft/typescript-go#4549
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Bumps the maintenance group with 2 updates: actions/cache and aws-actions/configure-aws-credentials.

Updates actions/cache from 5.0.4 to 6.1.0

Release notes

Sourced from actions/cache's releases.

v6.1.0

What's Changed

Bump @actions/cache to v6.1.0 - handle read-only cache access by @jasongin in actions/cache#1768

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

What's Changed

Update packages, migrate to ESM by @Samirat in actions/cache#1760

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in actions/cache#1775

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

What's Changed

Update ts-http-runtime dependency by @yacaovsnc in actions/cache#1747

Full Changelog: actions/cache@v5...v5.0.5

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

Switch to a new branch from main.

Run npm test to ensure all tests are passing.

Update the version in https://github.com/actions/cache/blob/main/package.json.

Run npm run build to update the compiled files.

Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.

Run licensed cache to update the license report.

Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.

Commit your changes and push your branch upstream.

Open a pull request against main and get it reviewed and merged.

Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json

Create a new tag with the version number.

Auto generate release notes and update them to match the changes you made in RELEASES.md.

Toggle the set as the latest release option.

Publish the release.

Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml

There should be a workflow run queued with the same version number.

Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

Bump @actions/cache to v6.1.0 to pick up actions/toolkit#2435 Handle cache write error due to read-only token

Switch redundant "Cache save failed" warning to debug log in save-only

6.0.0

Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2

Migrated to ESM module system

Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)

Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)

Bump fast-xml-parser to v5.5.6

5.0.3

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

5.0.2

... (truncated)

Commits

55cc834 Merge pull request #1768 from jasongin/readonly-cache
d8cd72f Bump @actions/cache to v6.1.0 - handle cache write error due to RO token
2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
e9b91fd Prettier fixes
e4884b8 Rebuild dist
10baf01 Fixed licenses
e39b386 Fix test mock return order
b692820 PR feedback
6074912 Rebuild dist bundles as ESM to match type:module
5a912e8 Fix lint and jest issues
Additional commits viewable in compare view

Updates aws-actions/configure-aws-credentials from 6.2.4 to 6.3.0

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.3.0

6.3.0 (2026-09-11)

Features

add translate-env-variables option (#1961) (57b8365)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.3.0 (2026-09-11)

Features

add translate-env-variables option (#1961) (57b8365)

6.2.4 (2026-08-31)

Bug Fixes

account-ids handling, mask proxy as secret in logs (#1943) (aa65264)

skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

6.2.3 (2026-07-22)

Bug Fixes

attach git credentials before Tag Major Version push (#1877) (9ae780b)

PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

release 6.2.2 (d01d678)

6.2.1 (2026-06-26)

Bug Fixes

enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

add additional session tags by default (#1775) (e0ba768)

add more retry logic and better logging (#1764) (540d0c1)

add regex validation to role-session-name (#1765) (e354499)

Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)

expose run id in STS client user-agent (#1774) (29d1be3)

... (truncated)

Commits

e125382 chore(main): release 6.3.0 (#1963)
438100a chore: add link to GH security docs (#1962)
e92ebcc chore: Update dist
57b8365 feat: add translate-env-variables option (#1961)
cc49fa7 chore(docs): README main branch guidance (#1960)
866cb16 chore(deps-dev): bump smol-toml from 1.7.0 to 1.7.2 (#1958)
6782cb1 chore(deps-dev): bump generate-license-file from 4.2.4 to 4.2.5 (#1951)
c20509a chore: Update dist
7a41fc6 chore(deps): bump @aws-sdk/client-sts from 3.1121.0 to 3.1127.0 (#1954)
726b713 chore(deps-dev): bump @biomejs/biome from 2.5.11 to 2.5.12 (#1957)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maintenance group with 6 updates: | Package | From | To | | --- | --- | --- | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.2` | `7.3.5` | | [nanostores](https://github.com/nanostores/nanostores) | `1.5.3` | `1.5.4` | | [@astrojs/netlify](https://github.com/withastro/astro/tree/HEAD/packages/integrations/netlify) | `8.2.5` | `8.2.6` | | [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.11.0` | | [postcss-custom-media](https://github.com/csstools/postcss-plugins/tree/HEAD/plugins/postcss-custom-media) | `12.0.1` | `12.0.2` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | Updates `astro` from 7.3.2 to 7.3.5 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.3.5/packages/astro) Updates `nanostores` from 1.5.3 to 1.5.4 - [Release notes](https://github.com/nanostores/nanostores/releases) - [Changelog](https://github.com/nanostores/nanostores/blob/main/CHANGELOG.md) - [Commits](nanostores/nanostores@1.5.3...1.5.4) Updates `@astrojs/netlify` from 8.2.5 to 8.2.6 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/netlify/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/netlify@8.2.6/packages/integrations/netlify) Updates `eslint` from 10.10.0 to 10.11.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.10.0...v10.11.0) Updates `postcss-custom-media` from 12.0.1 to 12.0.2 - [Changelog](https://github.com/csstools/postcss-plugins/blob/main/plugins/postcss-custom-media/CHANGELOG.md) - [Commits](https://github.com/csstools/postcss-plugins/commits/HEAD/plugins/postcss-custom-media) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) Monthly dependency updates: Bump the maintenance group with 2 updates Bumps the maintenance group with 2 updates: [actions/cache](https://github.com/actions/cache) and [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials). Updates `actions/cache` from 5.0.4 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v5.0.4...55cc834) Updates `aws-actions/configure-aws-credentials` from 6.2.4 to 6.3.0 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@cbe3b39...e125382) --- updated-dependencies: - dependency-name: astro dependency-version: 7.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maintenance - dependency-name: nanostores dependency-version: 1.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maintenance - dependency-name: "@astrojs/netlify" dependency-version: 8.2.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maintenance - dependency-name: eslint dependency-version: 10.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maintenance - dependency-name: postcss-custom-media dependency-version: 12.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maintenance - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: maintenance - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: maintenance - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maintenance ... Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: SalazarJosh <6354268+SalazarJosh@users.noreply.github.com>

dependabot Bot assigned SalazarJosh Oct 1, 2026

dependabot Bot requested review from SalazarJosh and erinesullivan as code owners October 1, 2026 10:10

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026

dependabot Bot had a problem deploying to previews October 1, 2026 10:10 Failure

Downgrade TypeScript version to ^6.0.3

fd31f42

SalazarJosh had a problem deploying to previews October 1, 2026 14:17 — with GitHub Actions Failure

Copilot started work on behalf of SalazarJosh October 1, 2026 14:18 View session

Sync TypeScript lockfile to 6.0.3

e164e7c

Co-authored-by: SalazarJosh <6354268+SalazarJosh@users.noreply.github.com>

Copilot finished work on behalf of SalazarJosh October 1, 2026 14:24

Copilot AI deployed to previews October 1, 2026 14:28 Active

SalazarJosh approved these changes Oct 1, 2026

View reviewed changes

SalazarJosh merged commit b73275d into master Oct 1, 2026
2 checks passed

SalazarJosh deleted the dependabot/maintenance-974fc296dd branch October 1, 2026 15:05

Navigation Menu

Monthly dependency updates: Bump the "maintenance" group with 2 updates across multiple ecosystems - #440

Monthly dependency updates: Bump the "maintenance" group with 2 updates across multiple ecosystems#440
SalazarJosh merged 3 commits into
masterfrom
dependabot/maintenance-974fc296dd

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

astro@7.3.5

Patch Changes

astro@7.3.4

Patch Changes

astro@7.3.3

Patch Changes

7.3.5

Patch Changes

7.3.4

Patch Changes

7.3.3

Patch Changes

1.5.4

1.5.4

@​astrojs/netlify@​8.2.6

Patch Changes

8.2.6

Patch Changes

v10.11.0

Features

Bug Fixes

Documentation

Chores

12.0.2

TypeScript 7.0.2

v6.1.0

What's Changed

v6.0.0

What's Changed

v5.1.0

What's Changed

v5.0.5

What's Changed

Releases

How to prepare a release

Changelog

6.1.0

6.0.0

5.0.4

5.0.3

5.0.2

v6.3.0

6.3.0 (2026-09-11)

Features

Changelog

6.3.0 (2026-09-11)

Features

6.2.4 (2026-08-31)

Bug Fixes

6.2.3 (2026-07-22)

Bug Fixes

6.2.2 (2026-07-07)

Miscellaneous Chores

6.2.1 (2026-06-26)

Bug Fixes

6.2.0 (2026-06-01)

Features

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`@astrojs/netlify@8`.2.6