An open index of dependabot pull requests across open source projects.

[Docs Site] Bump the non-major group across 1 directory with 31 updates

Open
Number: #7
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 3
Created: June 03, 2026 at 06:52 PM UTC
(6 days ago)
Updated: June 03, 2026 at 06:54 PM UTC
(6 days ago)
Labels:
dependencies javascript size/xl
Description:

Bumps the non-major group with 31 updates in the / directory:

Package From To
@astrojs/react 5.0.4 5.0.7
@astrojs/sitemap 3.7.2 3.7.3
@astrojs/starlight 0.38.4 0.39.3
@base-ui/react 1.4.1 1.5.0
@cloudflare/vitest-pool-workers 0.15.2 0.16.12
@cloudflare/workers-types 4.20260504.1 4.20260603.1
@expressive-code/core 0.41.7 0.42.0
@expressive-code/plugin-collapsible-sections 0.41.3 0.42.0
@expressive-code/plugin-line-numbers 0.41.7 0.42.0
@iconify/utils 3.1.1 3.1.3
@marsidev/react-turnstile 1.5.1 1.5.2
@tailwindcss/postcss 4.2.4 4.3.0
@typescript-eslint/parser 8.44.0 8.60.1
algoliasearch 5.52.0 5.53.0
astro 6.2.2 6.4.4
astro-expressive-code 0.41.7 0.42.0
date-fns 4.1.0 4.4.0
marked 18.0.3 18.0.4
mermaid 11.14.0 11.15.0
react 19.0.0 19.2.7
@types/react 19.0.7 19.2.16
react-dom 19.0.0 19.2.7
@types/react-dom 19.0.4 19.2.3
react-instantsearch 7.31.0 7.35.0
starlight-image-zoom 0.14.1 0.14.2
tailwindcss 4.1.4 4.3.0
ts-blank-space 0.8.0 0.9.0
tsx 4.21.0 4.22.4
typescript-eslint 8.44.1 8.60.1
vitest 4.1.5 4.1.8
wrangler 4.88.0 4.97.0

Updates @astrojs/react from 5.0.4 to 5.0.7

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​5.0.7

Patch Changes

@​astrojs/react@​5.0.6

Patch Changes

  • Updated dependencies [f732f3c]:
    • @​astrojs/internal-helpers@​0.10.0

@​astrojs/react@​5.0.5

Patch Changes

  • Updated dependencies [d365c97]:
    • @​astrojs/internal-helpers@​0.9.1
Changelog

Sourced from @​astrojs/react's changelog.

5.0.7

Patch Changes

5.0.6

Patch Changes

  • Updated dependencies [f732f3c]:
    • @​astrojs/internal-helpers@​0.10.0

5.0.5

Patch Changes

  • Updated dependencies [d365c97]:
    • @​astrojs/internal-helpers@​0.9.1
Commits

Updates @astrojs/sitemap from 3.7.2 to 3.7.3

Release notes

Sourced from @​astrojs/sitemap's releases.

@​astrojs/sitemap@​3.7.3

Patch Changes

  • #16837 783c4a6 Thanks @​jdevalk! - Improves <lastmod> accuracy in the sitemap index. Each <sitemap> entry in sitemap-index.xml is now stamped with the most recent lastmod of the URLs in the child sitemap it points to, instead of repeating a single global date on every entry. When a child sitemap has no per-URL lastmod, the entry falls back to the lastmod option as before. This gives search engines a per-file freshness signal, so they can tell which child sitemaps actually changed without refetching all of them.
Changelog

Sourced from @​astrojs/sitemap's changelog.

3.7.3

Patch Changes

  • #16837 783c4a6 Thanks @​jdevalk! - Improves <lastmod> accuracy in the sitemap index. Each <sitemap> entry in sitemap-index.xml is now stamped with the most recent lastmod of the URLs in the child sitemap it points to, instead of repeating a single global date on every entry. When a child sitemap has no per-URL lastmod, the entry falls back to the lastmod option as before. This gives search engines a per-file freshness signal, so they can tell which child sitemaps actually changed without refetching all of them.
Commits

Updates @astrojs/starlight from 0.38.4 to 0.39.3

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.39.3

Patch Changes

@​astrojs/starlight@​0.39.2

Patch Changes

@​astrojs/starlight@​0.39.1

Patch Changes

  • #3885 010eed1 Thanks @​ArmandPhilippot! - Fixes the version mentioned in an error message related to autogenerated sidebar groups support.

  • #3887 b3c6990 Thanks @​delucis! - Adds 13 new icons: clock, desktop, mobile-android, window, database, server, code-branch, notes, question, question-circle, analytics, padlock, and solidjs.

@​astrojs/starlight@​0.39.0

Minor Changes

  • #3618 dcf6d09 Thanks @​HiDeoo! - ⚠️ BREAKING CHANGE: This release changes how autogenerated links work in Starlight’s sidebar configuration.

    If you have sidebar groups using the autogenerate key, you must now wrap that configuration in an items array:

    {
        label: 'My group',
    -   autogenerate: { directory: 'some-dir' },
    +   items: [{ autogenerate: { directory: 'some-dir' } }],
    }
    

    This change unlocks the possibility to mix autogenerated links and other links in a single group, for example:

    {
      label: 'Mixed group',
      items: [
        'example-page',
        { autogenerate: { directory: 'examples' } },
        { label: 'More examples', link: 'https://example.com' },
      ],
    }
    

... (truncated)

Changelog

Sourced from @​astrojs/starlight's changelog.

0.39.3

Patch Changes

0.39.2

Patch Changes

0.39.1

Patch Changes

  • #3885 010eed1 Thanks @​ArmandPhilippot! - Fixes the version mentioned in an error message related to autogenerated sidebar groups support.

  • #3887 b3c6990 Thanks @​delucis! - Adds 13 new icons: clock, desktop, mobile-android, window, database, server, code-branch, notes, question, question-circle, analytics, padlock, and solidjs.

0.39.0

Minor Changes

  • #3618 dcf6d09 Thanks @​HiDeoo! - ⚠️ BREAKING CHANGE: This release changes how autogenerated links work in Starlight’s sidebar configuration.

    If you have sidebar groups using the autogenerate key, you must now wrap that configuration in an items array:

    {
        label: 'My group',
    -   autogenerate: { directory: 'some-dir' },
    +   items: [{ autogenerate: { directory: 'some-dir' } }],
    }
    

    This change unlocks the possibility to mix autogenerated links and other links in a single group, for example:

    {
      label: 'Mixed group',
      items: [
        'example-page',
        { autogenerate: { directory: 'examples' } },
    

... (truncated)

Commits

Updates @base-ui/react from 1.4.1 to 1.5.0

Release notes

Sourced from @​base-ui/react's releases.

v1.5.0

General changes

  • Improve mount performance with interaction splitting, including closed popup mount performance by up to 50% and unmounting performance by up to 85% (#4661) by @​atomiks
  • Use local document for virtual arrow (#4662) by @​lyzno1
  • Fix macOS Safari and Firefox minimizing fullscreen when closing popups with Esc (#4695) by @​arturbien
  • Drop unnecessary memoization (#4693) by @​flaviendelangle
  • Do not use Math.random() in useStableCallback() (#4732) by @​michaldudak
  • Fix return focus when reference disconnects (#4655) by @​atomiks
  • Don't steal initial focus if focus already moved inside a popup (#4775) by @​stefee

Alert Dialog

Autocomplete

Checkbox

Combobox

Dialog

Drawer

Field

Form

Menu

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.5.0

May 19, 2026

General changes

  • Improve mount performance with interaction splitting, including closed popup mount performance by up to 50% and unmounting performance by up to 85% (#4661) by @​atomiks
  • Use local document for virtual arrow (#4662) by @​lyzno1
  • Fix macOS Safari and Firefox minimizing fullscreen when closing popups with Esc (#4695) by @​arturbien
  • Drop unnecessary memoization (#4693) by @​flaviendelangle
  • Do not use Math.random() in useStableCallback() (#4732) by @​michaldudak
  • Fix return focus when reference disconnects (#4655) by @​atomiks
  • Don't steal initial focus if focus already moved inside a popup (#4775) by @​stefee

Alert Dialog

Autocomplete

Checkbox

Combobox

Dialog

Drawer

Field

Form

... (truncated)

Commits

Updates @cloudflare/vitest-pool-workers from 0.15.2 to 0.16.12

Release notes

Sourced from @​cloudflare/vitest-pool-workers's releases.

@​cloudflare/vitest-pool-workers@​0.16.12

Patch Changes

  • #14152 3d7992e Thanks @​petebacondarwin! - Fix module resolution failing when project path contains spaces

    When a project lived under a directory with spaces (e.g. /Users/me/Documents/Master CMS/project), the vitest pool would fail with No such module "threads.js" before any test executed. The module fallback service now uses the rawSpecifier from workerd's fallback request to correctly decode file:// URLs, avoiding the double-encoding of spaces (%20%2520) that occurred when workerd resolved these URLs as relative paths.

  • #14105 337e912 Thanks @​dario-piotrowicz! - Remove trailing periods from URLs in terminal output

    URLs printed to the terminal with a sentence-ending period (e.g. https://example.com/path.) would include the period when clicked in some terminal emulators, causing 404 errors. This removes trailing periods from all URLs displayed in CLI output across wrangler, miniflare, vitest-pool-workers, and workers-utils.

  • #14112 3a746ac Thanks @​penalosa! - Pin non-bundled runtime dependencies to exact versions

    Dependencies that are not bundled into a package's published output are installed directly into consumers' dependency trees, so they are now pinned to exact versions instead of semver ranges. This closes a supply-chain gap where an unpinned external dependency could resolve to a compromised upstream release on a fresh install. A new pnpm check:pinned-deps lint enforces this for all published packages (and for the shared pnpm catalog) going forward.

  • #14061 da8e306 Thanks @​Vardiak! - Preserve Durable Object WebSocket handler invocation order

    Durable Object WebSocket events could begin executing out of order in the Workers Vitest integration when several events arrived while the test wrapper was resolving user code.

    Handler invocation now preserves arrival order while still allowing asynchronous handler completion to run concurrently.

  • Updated dependencies [b210c5e, aec1bb8, e06cbb7, 9a26191, 5565823, 4ef790b, 890fca7, 6fc9777, 337e912, 8e7b74f, e86489a, 42288d4, 65b5f9e, 3a746ac, 64ef9fd, 94b29f7]:

    • wrangler@4.97.0
    • miniflare@4.20260601.0

@​cloudflare/vitest-pool-workers@​0.16.11

Patch Changes

@​cloudflare/vitest-pool-workers@​0.16.10

Patch Changes

@​cloudflare/vitest-pool-workers@​0.16.9

Patch Changes

  • #13933 90092c0 Thanks @​petebacondarwin! - Derive bundler externals from package.json and shrink the published bundle

    The bundler's external list was previously hand-maintained and out of sync with package.jsonundici and semver were both listed as external despite being only devDependencies. The published dist/pool/index.mjs consequently contained a top-level import { fetch } from "undici" that was only resolvable because pnpm happened to hoist undici from other packages' devDependencies during local development.

... (truncated)

Changelog

Sourced from @​cloudflare/vitest-pool-workers's changelog.

0.16.12

Patch Changes

  • #14152 3d7992e Thanks @​petebacondarwin! - Fix module resolution failing when project path contains spaces

    When a project lived under a directory with spaces (e.g. /Users/me/Documents/Master CMS/project), the vitest pool would fail with No such module "threads.js" before any test executed. The module fallback service now uses the rawSpecifier from workerd's fallback request to correctly decode file:// URLs, avoiding the double-encoding of spaces (%20%2520) that occurred when workerd resolved these URLs as relative paths.

  • #14105 337e912 Thanks @​dario-piotrowicz! - Remove trailing periods from URLs in terminal output

    URLs printed to the terminal with a sentence-ending period (e.g. https://example.com/path.) would include the period when clicked in some terminal emulators, causing 404 errors. This removes trailing periods from all URLs displayed in CLI output across wrangler, miniflare, vitest-pool-workers, and workers-utils.

  • #14112 3a746ac Thanks @​penalosa! - Pin non-bundled runtime dependencies to exact versions

    Dependencies that are not bundled into a package's published output are installed directly into consumers' dependency trees, so they are now pinned to exact versions instead of semver ranges. This closes a supply-chain gap where an unpinned external dependency could resolve to a compromised upstream release on a fresh install. A new pnpm check:pinned-deps lint enforces this for all published packages (and for the shared pnpm catalog) going forward.

  • #14061 da8e306 Thanks @​Vardiak! - Preserve Durable Object WebSocket handler invocation order

    Durable Object WebSocket events could begin executing out of order in the Workers Vitest integration when several events arrived while the test wrapper was resolving user code.

    Handler invocation now preserves arrival order while still allowing asynchronous handler completion to run concurrently.

  • Updated dependencies [b210c5e, aec1bb8, e06cbb7, 9a26191, 5565823, 4ef790b, 890fca7, 6fc9777, 337e912, 8e7b74f, e86489a, 42288d4, 65b5f9e, 3a746ac, 64ef9fd, 94b29f7]:

    • wrangler@4.97.0
    • miniflare@4.20260601.0

0.16.11

Patch Changes

0.16.10

Patch Changes

0.16.9

Patch Changes

... (truncated)

Commits
  • 0b60424 Version Packages (#14142)
  • 3d7992e [vitest-pool-workers] Fix module resolution for paths with spaces (#14152)
  • da8e306 [vitest-pool-workers] Preserve Durable Object handler order (for hibernated D...
  • 0998725 Set disallowTypeAnnotations to false in `@typescript-eslint/consistent-ty...
  • 3a746ac [tools] Lint that all non-bundled deps of published packages are pinned (#14112)
  • 337e912 Remove trailing periods from URLs in terminal output (#14105)
  • 50ef724 Version Packages (#14082)
  • e3c862a Revert "Version Packages" (#14087)
  • 689f381 Version Packages (#14048)
  • 96ae856 [vitest-pool-workers] Dispatch RPC methods through proxied Durable Object ins...
  • Additional commits viewable in compare view

Updates @cloudflare/workers-types from 4.20260504.1 to 4.20260603.1

Commits

Updates @expressive-code/core from 0.41.7 to 0.42.0

Release notes

Sourced from @​expressive-code/core's releases.

@​expressive-code/core@​0.42.0

No release notes provided.

Changelog

Sourced from

Ecosystem:
npm
Version Change:
4.1.5 → 4.1.8
Update Type:
Patch
Package:
astro
Ecosystem:
npm
Version Change:
6.2.2 → 6.4.4
Update Type:
Minor
Ecosystem:
npm
Version Change:
19.0.7 → 19.2.16
Update Type:
Minor
Package:
react-dom
Ecosystem:
npm
Version Change:
19.0.0 → 19.2.7
Update Type:
Minor
Ecosystem:
npm
Version Change:
19.0.4 → 19.2.3
Update Type:
Minor
Ecosystem:
npm
Version Change:
4.2.4 → 4.3.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
5.52.0 → 5.53.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
4.20260504.1 → 4.20260603.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
8.44.0 → 8.60.1
Update Type:
Minor
Package:
tailwindcss
Ecosystem:
npm
Version Change:
4.1.4 → 4.3.0
Update Type:
Minor
Package:
wrangler
Ecosystem:
npm
Version Change:
4.88.0 → 4.97.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
8.44.1 → 8.60.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
3.7.2 → 3.7.3
Update Type:
Patch
Package:
marked
Ecosystem:
npm
Version Change:
18.0.3 → 18.0.4
Update Type:
Patch
Package:
react
Ecosystem:
npm
Version Change:
19.0.0 → 19.2.7
Update Type:
Minor
Package:
tsx
Ecosystem:
npm
Version Change:
4.21.0 → 4.22.4
Update Type:
Minor
Package:
date-fns
Ecosystem:
npm
Version Change:
4.1.0 → 4.4.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.41.7 → 0.42.0
Update Type:
Minor
Package:
mermaid
Ecosystem:
npm
Version Change:
11.14.0 → 11.15.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
5.0.4 → 5.0.7
Update Type:
Patch
Ecosystem:
npm
Version Change:
0.15.2 → 0.16.12
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.38.4 → 0.39.3
Update Type:
Minor
Ecosystem:
npm
Version Change:
7.31.0 → 7.35.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.14.1 → 0.14.2
Update Type:
Patch
Ecosystem:
npm
Version Change:
0.41.7 → 0.42.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.41.3 → 0.42.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.8.0 → 0.9.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.41.7 → 0.42.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
1.5.1 → 1.5.2
Update Type:
Patch
Ecosystem:
npm
Version Change:
3.1.1 → 3.1.3
Update Type:
Patch
Ecosystem:
npm
Version Change:
1.4.1 → 1.5.0
Update Type:
Minor
Technical Details
ID: 15987401
UUID: 4582749955
Node ID: PR_kwDOSeDgNc7iXjsw
Host: GitHub
Repository: robvankathmp/cloudflare-docs