Skip to content

chore(deps): bump the site-dependencies group across 1 directory with 15 updates - #82

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/site/site-dependencies-d7e0f8d5c1
Open

chore(deps): bump the site-dependencies group across 1 directory with 15 updates#82
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/site/site-dependencies-d7e0f8d5c1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the site-dependencies group with 14 updates in the /site directory:

Package From To
@astrojs/check 0.9.9 0.9.10
@astrojs/rss 4.0.18 4.0.19
@microsoft/applicationinsights-web 3.4.1 3.4.3
astro 6.4.6 7.2.2
dompurify 3.4.10 3.4.13
jsdom 29.1.1 30.0.1
@types/jsdom 28.0.3 30.0.0
katex 0.17.0 0.18.4
marked 18.0.5 18.0.9
typescript 6.0.3 7.0.2
web-vitals 5.3.0 6.1.0
@axe-core/playwright 4.11.3 4.13.0
@playwright/test 1.60.0 1.62.1
@tailwindcss/vite 4.3.1 4.3.3

Updates @astrojs/check from 0.9.9 to 0.9.10

Release notes

Sourced from @​astrojs/check's releases.

@​astrojs/check@​0.9.10

Patch Changes

Changelog

Sourced from @​astrojs/check's changelog.

0.9.10

Patch Changes

Commits

Updates @astrojs/rss from 4.0.18 to 4.0.19

Release notes

Sourced from @​astrojs/rss's releases.

@​astrojs/rss@​4.0.19

Patch Changes

  • #17209 fbcfa03 Thanks @​matthewp! - Hardens RSS feed generation by escaping the source and enclosure item fields. These fields are now serialized as structured XML values, ensuring that special characters in values like source.title and enclosure.type are always treated as text rather than markup, consistent with how other feed fields are handled.
Changelog

Sourced from @​astrojs/rss's changelog.

4.0.19

Patch Changes

  • #17209 fbcfa03 Thanks @​matthewp! - Hardens RSS feed generation by escaping the source and enclosure item fields. These fields are now serialized as structured XML values, ensuring that special characters in values like source.title and enclosure.type are always treated as text rather than markup, consistent with how other feed fields are handled.
Commits

Updates @microsoft/applicationinsights-web from 3.4.1 to 3.4.3

Changelog

Sourced from @​microsoft/applicationinsights-web's changelog.

3.4.3 (July 2nd, 2026)

This is a maintenance release for the 3.4.x version line adding a new SDK statistics feature, a PostChannel reliability fix, and dependency security hardening. The @microsoft/1ds-post-js channel is numbered 4.4.3 and requires v3.4.3.

Significant Changes (since 3.4.2)

  • Customer SDK Stats: Added a new SdkStats feature that periodically collects internal SDK usage/health statistics. It is enabled by default and can be disabled (or explicitly configured) via the featureOptIn configuration (e.g. featureOptIn: { SdkStats: { mode: FeatureOptInMode.disable } }); the collection interval defaults to 15 minutes (sdkStats.int).

  • PostChannel Auto-Flush Stall Fix: Fixed a permanent stall in @microsoft/1ds-post-js where, under sustained intermittent send failures (e.g. a load balancer returning occasional 503s), auto flush could wedge behind the flush() wait-for-idle timer and permanently stop draining the in-memory queue — causing telemetry to be silently dropped as QueueFull until the process was restarted. Auto flush is now fire-and-forget and no longer parks the scheduler waiting for the manager to become completely idle.

  • Dependency Security Hardening: Pinned tar to >=7.5.16 to remediate CVE-2026-53655 and resolved the remaining npm audit findings in build tooling via dependency overrides (js-yaml, yaml, markdown-it, linkify-it). These are build/tooling changes and do not affect the published runtime packages.

Changelog

  • #2746 Fix PostChannel auto-flush permanent stall under sustained intermittent send failures
  • #2745 fix(security): pin tar >=7.5.16 to remediate CVE-2026-53655
  • #2707 Enable Customer SDK Stats
  • Resolve remaining npm audit findings via dependency overrides (js-yaml, yaml, markdown-it, linkify-it)

Full Changelog: microsoft/ApplicationInsights-JS@3.4.2...3.4.3

3.4.2 (June 18th, 2026)

This is a maintenance release for the 3.4.x version line containing security hardening, bug fixes, build tooling improvements, and CI updates. The @microsoft/1ds-post-js channel is numbered 4.4.2 and requires v3.4.2.

Commits

Updates astro from 6.4.6 to 7.2.2

Release notes

Sourced from astro's releases.

astro@7.2.2

Patch Changes

  • #17611 9bc3207 Thanks @​thelazylamaGit! - Fixes component styles rendered from content entries remaining stale until a second save when an adapter uses Astro's fallback development environment

  • #17634 2267eee Thanks @​astrobot-houston! - Fixes incremental builds dropping optimized images for cached pages when using a collectStaticImages prerenderer (e.g. @astrojs/cloudflare with compile-time image optimization)

  • #17650 4cdf128 Thanks @​astrobot-houston! - Fixes intermittent ImageNotFound errors during build on projects with many images. The build now limits concurrent image file reads to avoid exhausting OS file descriptors (EMFILE) and retries transient I/O errors with backoff. Non-transient errors are no longer silently swallowed.

  • #17683 2378221 Thanks @​astrobot-houston! - Fixes prerenderConflictBehavior not applying to content collection duplicate ID warnings in the glob() and file() loaders. Setting it to 'error' now throws during content sync, and 'ignore' suppresses the warning.

  • #17659 90c6ea4 Thanks @​astrobot-houston! - Fixes the Fonts API breaking experimental.incrementalBuild caching by embedding a build-local, randomly-assigned server port in generated code used for the dependency hash

  • #17630 fd1d9ee Thanks @​ericclemmons! - Fixes incremental builds becoming prohibitively slow for sites with many pages or content entries that share a large dependency graph.

  • #17690 93beecc Thanks @​NgoQuocViet2001! - Prevents files in directories whose names start with pages from being treated as page routes

  • #17671 09f0dc7 Thanks @​tarikermis! - Fixes astro dev refusing to start after a Docker container restart when an unrelated process reuses the PID from a persisted lock file. Astro now checks the process command across platforms, so stale lock files are cleaned up and --force does not signal the unrelated process.

astro@7.2.1

Patch Changes

  • #17612 7133730 Thanks @​thelazylamaGit! - Fixes CSS hot module replacement after navigating between pages with ClientRouter

  • #17628 4ada248 Thanks @​astrobot-houston! - Fixes a CSP violation when using both security.csp and experimental.clientPrerender with data-astro-prefetch links. The dynamically injected <script type="speculationrules"> now uses a static "source": "document" approach with a CSS selector, producing a deterministic payload that is hashed and included in the CSP script-src directive at build time.

  • #17605 89e4647 Thanks @​ashleigh-yeoman! - Fixes middleware HMR not responding to changes in imported modules. Previously, only direct edits to the middleware file would trigger a reload.

  • #17582 bd2c1a5 Thanks @​astrobot-houston! - Fixes a regression where content collection reference() fields silently accepted entry IDs that don't exist, such as an ID that doesn't match a loader's slugified version of it. Astro now logs an error for references that point to a missing entry after all loaders finish syncing.

  • #17661 97b0cc7 Thanks @​ArmandPhilippot! - Improves Markdown options documentation with links to the Markdown guide and official processors.

  • #17349 4328c73 Thanks @​astrobot-houston! - Fixes an issue where requests handled by the dev prerender environment (e.g. /_image with @astrojs/cloudflare's prerenderEnvironment: 'node') returned a 500 when a prerendered catch-all route existed, because non-prerendered route modules were imported in an environment where their runtime-specific APIs are unavailable

  • #17603 722eed6 Thanks @​astrobot-houston! - Fixes <video> and <audio> elements being non-functional after navigating via view transitions (<ClientRouter />)

  • #17616 3a890d2 Thanks @​lazerg! - Fixes experimental.incrementalBuild re-rendering unchanged routes that import more than one asset. The route's dependency hash depended on the order the assets finished building, so two builds of identical sources could produce different hashes. The hash is now based on the file name each asset resolves to.

  • #17547 fba468c Thanks @​dmgawel! - Improves getCollection() and getEntry() performance for entries without local image references

  • #17602 16e0d9d Thanks @​astrobot-houston! - Fixes a build error caused by hash collisions in generated content collection image import identifiers

astro@7.2.0

Minor Changes

  • #17174 0224a3a Thanks @​matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

    This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.

    

    • 






... (truncated)





Changelog

Sourced from astro's changelog.




7.2.2


Patch Changes


    

  • 

    #17611 9bc3207 Thanks @​thelazylamaGit! - Fixes component styles rendered from content entries remaining stale until a second save when an adapter uses Astro's fallback development environment
    

    • 

  • 

    #17634 2267eee Thanks @​astrobot-houston! - Fixes incremental builds dropping optimized images for cached pages when using a collectStaticImages prerenderer (e.g. @astrojs/cloudflare with compile-time image optimization)
    

    • 

  • 

    #17650 4cdf128 Thanks @​astrobot-houston! - Fixes intermittent ImageNotFound errors during build on projects with many images. The build now limits concurrent image file reads to avoid exhausting OS file descriptors (EMFILE) and retries transient I/O errors with backoff. Non-transient errors are no longer silently swallowed.
    

    • 

  • 

    #17683 2378221 Thanks @​astrobot-houston! - Fixes prerenderConflictBehavior not applying to content collection duplicate ID warnings in the glob() and file() loaders. Setting it to 'error' now throws during content sync, and 'ignore' suppresses the warning.
    

    • 

  • 

    #17659 90c6ea4 Thanks @​astrobot-houston! - Fixes the Fonts API breaking experimental.incrementalBuild caching by embedding a build-local, randomly-assigned server port in generated code used for the dependency hash
    

    • 

  • 

    #17630 fd1d9ee Thanks @​ericclemmons! - Fixes incremental builds becoming prohibitively slow for sites with many pages or content entries that share a large dependency graph.
    

    • 

  • 

    #17690 93beecc Thanks @​NgoQuocViet2001! - Prevents files in directories whose names start with pages from being treated as page routes
    

    • 

  • 

    #17671 09f0dc7 Thanks @​tarikermis! - Fixes astro dev refusing to start after a Docker container restart when an unrelated process reuses the PID from a persisted lock file. Astro now checks the process command across platforms, so stale lock files are cleaned up and --force does not signal the unrelated process.
    

    • 



7.2.1


Patch Changes


    

  • 

    #17612 7133730 Thanks @​thelazylamaGit! - Fixes CSS hot module replacement after navigating between pages with ClientRouter
    

    • 

  • 

    #17628 4ada248 Thanks @​astrobot-houston! - Fixes a CSP violation when using both security.csp and experimental.clientPrerender with data-astro-prefetch links. The dynamically injected <script type="speculationrules"> now uses a static "source": "document" approach with a CSS selector, producing a deterministic payload that is hashed and included in the CSP script-src directive at build time.
    

    • 

  • 

    #17605 89e4647 Thanks @​ashleigh-yeoman! - Fixes middleware HMR not responding to changes in imported modules. Previously, only direct edits to the middleware file would trigger a reload.
    

    • 

  • 

    #17582 bd2c1a5 Thanks @​astrobot-houston! - Fixes a regression where content collection reference() fields silently accepted entry IDs that don't exist, such as an ID that doesn't match a loader's slugified version of it. Astro now logs an error for references that point to a missing entry after all loaders finish syncing.
    

    • 

  • 

    #17661 97b0cc7 Thanks @​ArmandPhilippot! - Improves Markdown options documentation with links to the Markdown guide and official processors.
    

    • 

  • 

    #17349 4328c73 Thanks @​astrobot-houston! - Fixes an issue where requests handled by the dev prerender environment (e.g. /_image with @astrojs/cloudflare's prerenderEnvironment: 'node') returned a 500 when a prerendered catch-all route existed, because non-prerendered route modules were imported in an environment where their runtime-specific APIs are unavailable
    

    • 

  • 

    #17603 722eed6 Thanks @​astrobot-houston! - Fixes <video> and <audio> elements being non-functional after navigating via view transitions (<ClientRouter />)
    

    • 

  • 

    #17616 3a890d2 Thanks @​lazerg! - Fixes experimental.incrementalBuild re-rendering unchanged routes that import more than one asset. The route's dependency hash depended on the order the assets finished building, so two builds of identical sources could produce different hashes. The hash is now based on the file name each asset resolves to.
    

    • 

  • 

    #17547 fba468c Thanks @​dmgawel! - Improves getCollection() and getEntry() performance for entries without local image references
    

    • 

  • 

    #17602 16e0d9d Thanks @​astrobot-houston! - Fixes a build error caused by hash collisions in generated content collection image import identifiers
    

    • 



7.2.0


Minor Changes


    

  • #17174 0224a3a Thanks @​matthewp! - Adds the astro preview --background flag to start preview servers as background processes.
    • 






... (truncated)





Commits

    

  • 14f8f87 [ci] release (#17673)
    • 

  • 93beecc Fix page directory boundary detection (#17690)
    • 

  • 2378221 fix(content): apply prerenderConflictBehavior to content collection duplicate...
    • 

  • fd1d9ee fix(build): Optimize incremental builds with shared content graph hashing (#1...
    • 

  • 8df416a test: skip type check tests in ecosystem-ci (#17587)
    • 

  • 09f0dc7 Detect stale dev server lock files after PID reuse (#17671)
    • 

  • 2267eee fix: preserve restored image transforms when merging adapter-collected images...
    • 

  • 4cdf128 fix(assets): prevent EMFILE errors on large image builds with concurrency lim...
    • 

  • 90c6ea4 fix(fonts): strip volatile server address from incremental build hash (#17659)
    • 

  • 9bc3207 fix(dev): apply the dev CSS plugin to the fallback Astro environment (#17611)
    • 

  • Additional commits viewable in compare view
    • 







Updates dompurify from 3.4.10 to 3.4.13



Release notes

Sourced from dompurify's releases.




DOMPurify 3.4.13


    

  • Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
    • 

  • Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
    • 

  • Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
    • 

  • Bumped several dependencies where possible
    • 



DOMPurify 3.4.12


    

  • Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
    • 

  • Hardened the handling of hooks removing elements, @​mkrause-bee360
    • 

  • Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
    • 

  • Hardened the handling of declarative partial updates
    • 

  • Updated the documentation is several spots, README, wiki, etc.
    • 

  • Bumped several dependencies where possible
    • 



DOMPurify 3.4.11


    

  • Fixed an issue with a leaky config for hooks via setConfig, thanks @​trace37labs
    • 

  • Bumped vulnerable development dependencies to arrive at plain 0 with npm audit
    • 

  • Updated the osv-scanner suppression list as no vulnerable dependencies are left for now
    • 

  • Updated up the linting tool-chain and removed now-redundant lint directives
    • 

  • Updated the documentation is several spots, README, wiki, etc.
    • 

  • Bumped several dependencies where possible
    • 








Commits






Updates jsdom from 29.1.1 to 30.0.1



Release notes

Sourced from jsdom's releases.




v30.0.1


    

  • Fixed getComputedStyle() with calc() and other functions throwing an exception, which regressed in v30.0.0. (@​asamuzaK)
    • 

  • Sped up up range operations on large documents (@​leonidaz)
    • 



v30.0.0


Breaking changes:


    

  • Node.js minimum version raised to ^22.22.2 || ^24.15.0 || >=26.0.0.
    • 



Other changes:


    

  • Added CSS.escape() and CSS.supports() functions. (@​asamuzaK)
    • 

  • Added 'background-position-x' and 'background-position-y' CSS properties. (@​olagokemills)
    • 

  • Fixed getComputedStyle() to convert length values into pixels. (@​asamuzaK)
    • 

  • Fixed CSS function serialization, e.g., in the return value of getPropertyValue(). (@​asamuzaK)
    • 

  • Fixed the type of error thrown by document.evaluate() (@​dokson)
    • 








Commits

    

  • 6584485 30.0.1
    • 

  • 0c51df6 Update dependencies and dev dependencies
    • 

  • 32adb34 Bump @​asamuzakjp/dom-selector
    • 

  • 70f014a Speed up range operations on large documents
    • 

  • 250d7ee Partially fix getComputedStyle with calc()
    • 

  • 20a01fc 30.0.0
    • 

  • 8c8e583 Precompute WPT expectation matches
    • 

  • f32245c Bump Node.js floor and dependencies
    • 

  • 03ef23b Add background-position longhands
    • 

  • ded056f Test CSS.escape() with numeric IDs
    • 

  • Additional commits viewable in compare view
    • 







Updates @types/jsdom from 28.0.3 to 30.0.0



Commits






Updates katex from 0.17.0 to 0.18.4



Release notes

Sourced from katex's releases.




v0.18.4


0.18.4 (2026-08-10)


Bug Fixes



v0.18.3


0.18.3 (2026-08-09)


Bug Fixes



v0.18.2


0.18.2 (2026-08-08)


Bug Fixes



v0.18.1


0.18.1 (2026-07-19)


Bug Fixes



v0.18.0


0.18.0 (2026-07-17)


Features



BREAKING CHANGES


    

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.
    • 








Changelog

Sourced from katex's changelog.




0.18.4 (2026-08-10)


Bug Fixes



0.18.3 (2026-08-09)


Bug Fixes



0.18.2 (2026-08-08)


Bug Fixes



0.18.1 (2026-07-19)


Bug Fixes



0.18.0 (2026-07-17)


Features



BREAKING CHANGES


    

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.
    • 








Commits

    

  • 49dc3d9 chore(release): 0.18.4 [ci skip]
    • 

  • e507f75 fix(environment): report invalid environment names as ParseError (#4256)
    • 

  • f0f46a8 chore(release): 0.18.3 [ci skip]
    • 

  • 1c973ae fix: allow braced arguments for delimsizing (#4255)
    • 

  • a11ce72 docs: update migration guide (#4248)
    • 

  • 95322e1 docs: add Deno section (#4254)
    • 

  • dd88e46 chore(deps): update dependency js-yaml to v4.3.1 [security] (#4263)
    • 

  • 93c362b chore(release): 0.18.2 [ci skip]
    • 

  • 0adf7e7 fix: prevent prototype pollution in settings (#4260)
    • 

  • 5a5bf20 chore(deps): update dependency postcss to v8.5.23 [security] (#4259)
    • 

  • Additional commits viewable in compare view
    • 






Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.






Updates marked from 18.0.5 to 18.0.9



Release notes

Sourced from marked's releases.




v18.0.9


18.0.9 (2026-08-04)


Bug Fixes


    

  • an unmatched strong run before emphasis stays literal (#4008) (e8544e6)
    • 

  • Fix spurious deeper nesting in a blockquote continuation (#4030) (452f1ed)
    • 

  • pedantic foo: and "word" emphasis parsing (#3999) (823093f)
    • 



v18.0.8


18.0.8 (2026-08-04)


Bug Fixes


    

  • fall back to default checkbox renderer when extension returns false (#4023) (e1b6139)
    • 



v18.0.7


18.0.7 (2026-07-21)


Bug Fixes


    

  • Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991
    • 

  • Avoid O(n^2) masked source rebuild in inline tokenizer (#4017) (9154f8f)
    • 

  • keep empty list after blockquote as a sibling block (#4004) (3f144a0)
    • 

  • preserve code spans adjacent to tildes (#4012) (0de7188)
    • 

  • Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1
    • 

  • treat a line of only tabs as a blank line between paragraphs (#4007) (bc2f121)
    • 



v18.0.6


18.0.6 (2026-07-09)


Bug Fixes


    

  • Avoid O(n^2) backtracking in inline link href regex (#4013) (a009808)
    • 

  • Fix ordered lists after blockquotes (#4003) (33928d0)
    • 

  • keep trailing text on HTML block close line for PI, declarations, and CDATA (#3991) (bbb84c8)
    • 








Commits

    

  • 8e858a4 chore(release): 18.0.9 [skip ci]
    • 

  • 641e5df docs: explain partial extensions in use (#4033)
    • 

  • 452f1ed fix: Fix spurious deeper nesting in a blockquote continuation (#4030)
    • 

  • e8544e6 fix: an unmatched strong run before emphasis stays literal (#4008)
    • 

  • 823093f fix: pedantic foo: and "word" emphasis parsing (#3999)
    • 

  • 12a84a8 chore(release): 18.0.8 [skip ci]
    • 

  • 3a1a706 chore(deps-dev): bump undici from 6.24.0 to 6.27.0 (#4042)
    • 

  • 58ed4af chore(deps-dev): bump eslint from 10.7.0 to 10.8.0 (#4032)
    • 

  • 01539fb chore(deps-dev): bump @​semantic-release/git from 10.0.1 to 11.0.1 (#4031)
    • 

  • e1b6139 fix: fall back to default checkbox renderer when extension returns false (#4023)
    • 

  • Additional commits viewable in compare view
    • 







Updates typescript from 6.0.3 to 7.0.2



Commits





Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.






Updates web-vitals from 5.3.0 to 6.1.0



Changelog

Sourced from web-vitals's changelog.




v6.1.0 (2026-08-05)


    

  • Add Resource Timing buffer for LCP attribution
(#776)
    • 



v6.0.1 (2026-07-27)


    

  • Prevent JavaScript error if PerformanceObserver not available
(#772)
    • 



v6.0.0 (2026-07-21)


v6 introduces Soft Navigation support for the Web Vitals metrics when supported by the browser.




[!NOTE]
See the upgrading to v6 guide for a complete list of all API changes in version 6.




    

  • [BREAKING] Remove unneeded modules with tsconfig verbatimModuleSyntax
(#741)
    • 

  • Add source maps
(#771)
    • 

  • Cap RequestIdleCallback to 1 second to ensure metrics report even when busy
(#755)
    • 

  • Flip default for includeProcessedEventEntries to false for v6
(#763)
    • 

  • Add Soft Navigation support
(#308)
    • 

  • Add bfcache support for reporting small INP interactions
(part of #308)
    • 








Commits






Updates @axe-core/playwright from 4.11.3 to 4.13.0



Release notes

Sourced from @​axe-core/playwright's releases.




Release 4.13.0


What's Changed



    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          chore(deps): bump the site-dependencies group across 1 directory with…
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          826b458
        
      

    

  

    

      
… 15 updates

Bumps the site-dependencies group with 14 updates in the /site directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/check](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check) | `0.9.9` | `0.9.10` |
| [@astrojs/rss](https://github.com/withastro/astro/tree/HEAD/packages/astro-rss) | `4.0.18` | `4.0.19` |
| [@microsoft/applicationinsights-web](https://github.com/microsoft/ApplicationInsights-JS) | `3.4.1` | `3.4.3` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `6.4.6` | `7.2.2` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.10` | `3.4.13` |
| [jsdom](https://github.com/jsdom/jsdom) | `29.1.1` | `30.0.1` |
| [@types/jsdom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jsdom) | `28.0.3` | `30.0.0` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.17.0` | `0.18.4` |
| [marked](https://github.com/markedjs/marked) | `18.0.5` | `18.0.9` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [web-vitals](https://github.com/GoogleChrome/web-vitals) | `5.3.0` | `6.1.0` |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.11.3` | `4.13.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.62.1` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.1` | `4.3.3` |



Updates `@astrojs/check` from 0.9.9 to 0.9.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/astro-check/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/check@0.9.10/packages/language-tools/astro-check)

Updates `@astrojs/rss` from 4.0.18 to 4.0.19
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro-rss/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/rss@4.0.19/packages/astro-rss)

Updates `@microsoft/applicationinsights-web` from 3.4.1 to 3.4.3
- [Release notes](https://github.com/microsoft/ApplicationInsights-JS/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-JS/blob/main/RELEASES.md)
- [Commits](https://github.com/microsoft/ApplicationInsights-JS/commits)

Updates `astro` from 6.4.6 to 7.2.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.2.2/packages/astro)

Updates `dompurify` from 3.4.10 to 3.4.13
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.10...3.4.13)

Updates `jsdom` from 29.1.1 to 30.0.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v29.1.1...v30.0.1)

Updates `@types/jsdom` from 28.0.3 to 30.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jsdom)

Updates `katex` from 0.17.0 to 0.18.4
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.17.0...v0.18.4)

Updates `marked` from 18.0.5 to 18.0.9
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.5...v18.0.9)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `web-vitals` from 5.3.0 to 6.1.0
- [Changelog](https://github.com/GoogleChrome/web-vitals/blob/main/CHANGELOG.md)
- [Commits](GoogleChrome/web-vitals@v5.3.0...v6.1.0)

Updates `@axe-core/playwright` from 4.11.3 to 4.13.0
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core-npm@v4.11.3...v4.13.0)

Updates `@playwright/test` from 1.60.0 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.62.1)

Updates `@tailwindcss/vite` from 4.3.1 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite)

Updates `tailwindcss` from 4.3.1 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

---
updated-dependencies:
- dependency-name: "@astrojs/check"
  dependency-version: 0.9.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: site-dependencies
- dependency-name: "@astrojs/rss"
  dependency-version: 4.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: site-dependencies
- dependency-name: "@microsoft/applicationinsights-web"
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: site-dependencies
- dependency-name: astro
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: site-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: site-dependencies
- dependency-name: jsdom
  dependency-version: 30.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: site-dependencies
- dependency-name: "@types/jsdom"
  dependency-version: 30.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: site-dependencies
- dependency-name: katex
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: site-dependencies
- dependency-name: marked
  dependency-version: 18.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: site-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: site-dependencies
- dependency-name: web-vitals
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: site-dependencies
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: site-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: site-dependencies
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: site-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: site-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
      



  

  @dependabot


    @github




  



    

      

  

    

      
          
      

      
            dependabot
    Bot

      

      

      commented

        on behalf of github

        Aug 17, 2026



      
    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        

  
    Contributor


        

  Author


    

  





      


        



  
    

      
          
Labels


The following labels could not be found: dependencies, site. Please create them before Dependabot can add them to a pull request.


Please fix the above issues or remove invalid values from dependabot.yml.


      		
    

  





        

            

            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
          

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

              requested a review
  from a team
    as a code owner


        August 17, 2026 09:26        
        
      

    














  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










    
        

  

    
    

    

  

    Reviewers
  


    

    No reviews







  
      

  


      
  

    Assignees
  



        


    No one assigned







  
        


  


  

    Labels
  



    

    None yet







  
        

  

    

        

    Projects
  


        




    None yet




  



  
        


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

  
  
        

  

    

      0 participants