Skip to content

Bump the javascript-dependencies group across 1 directory with 13 updates #21

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the javascript-dependencies group across 1 directory with 13 updates #21

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the javascript-dependencies group with 12 updates in the / directory:

Package From To
@astrojs/cloudflare 12.6.9 12.6.12
@astrojs/react 4.3.1 4.4.2
@auth0/auth0-spa-js 2.4.1 2.9.1
astro 5.13.11 5.16.3
react 19.1.1 19.2.0
@types/react 19.1.13 19.2.7
react-dom 19.1.1 19.2.0
@types/react-dom 19.1.9 19.2.3
eslint 9.36.0 9.39.1
eslint-plugin-astro 1.3.1 1.5.0
typescript-eslint 8.44.1 8.48.0
prettier 3.6.2 3.7.3

Updates @astrojs/cloudflare from 12.6.9 to 12.6.12

Release notes

Sourced from @​astrojs/cloudflare's releases.

@​astrojs/cloudflare@​12.6.12

Patch Changes

  • #14777 9720b70 Thanks @​iclectic! - Updates assets handling to use @astrojs/internal-helpers

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.0

@​astrojs/cloudflare@​12.6.11

Patch Changes

  • Updated dependencies [9e9c528, 0f75f6b]:
    • @​astrojs/internal-helpers@​0.7.5
    • @​astrojs/underscore-redirects@​1.0.0

@​astrojs/cloudflare@​12.6.10

Patch Changes

Changelog

Sourced from @​astrojs/cloudflare's changelog.

12.6.12

Patch Changes

  • #14777 9720b70 Thanks @​iclectic! - Updates assets handling to use @astrojs/internal-helpers

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.0

12.6.11

Patch Changes

  • Updated dependencies [9e9c528, 0f75f6b]:
    • @​astrojs/internal-helpers@​0.7.5
    • @​astrojs/underscore-redirects@​1.0.0

12.6.10

Patch Changes

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​astrojs/cloudflare since your current version.


Updates @astrojs/react from 4.3.1 to 4.4.2

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​4.4.2

Patch Changes

  • #14715 3d55c5d Thanks @​ascorbic! - Adds support for client hydration in getContainerRenderer()

    The getContainerRenderer() function is exported by Astro framework integrations to simplify the process of rendering framework components when using the experimental Container API inside a Vite or Vitest environment. This update adds the client hydration entrypoint to the returned object, enabling client-side interactivity for components rendered using this function. Previously this required users to manually call container.addClientRenderer() with the appropriate client renderer entrypoint.

    See the container-with-vitest demo for a usage example, and the Container API documentation for more information on using framework components with the experimental Container API.

@​astrojs/react@​4.4.1

Patch Changes

@​astrojs/react@​4.4.0

Minor Changes

  • #14386 f75f446 Thanks @​yanthomasdev! - Stabilizes the formerly experimental getActionState() and withState() functions introduced in @astrojs/react v3.4.0 used to integrate Astro Actions with React 19's useActionState() hook.

    This example calls a like action that accepts a postId and returns the number of likes. Pass this action to the withState() function to apply progressive enhancement info, and apply to useActionState() to track the result:

    import { actions } from 'astro:actions';
import { withState } from '@astrojs/react/actions';
import { useActionState } from 'react';

    export function Like({ postId }: { postId: string }) {
const [state, action, pending] = useActionState(
withState(actions.like),
0, // initial likes
);
    

    return (
<form action={action}>
<input type="hidden" name="postId" value={postId} />
<button disabled={pending}>{state} ❤️</button>
</form>
);
}

    You can also access the state stored by useActionState() from your action handler. Call getActionState() with the API context, and optionally apply a type to the result:

    import { defineAction } from 'astro:actions';
import { z } from 'astro:schema';
import { getActionState } from '@astrojs/react/actions';

    export const server = {
like: defineAction({
input: z.object({
postId: z.string(),
}),

... (truncated)

Changelog

Sourced from @​astrojs/react's changelog.

4.4.2

Patch Changes

  • #14715 3d55c5d Thanks @​ascorbic! - Adds support for client hydration in getContainerRenderer()

    The getContainerRenderer() function is exported by Astro framework integrations to simplify the process of rendering framework components when using the experimental Container API inside a Vite or Vitest environment. This update adds the client hydration entrypoint to the returned object, enabling client-side interactivity for components rendered using this function. Previously this required users to manually call container.addClientRenderer() with the appropriate client renderer entrypoint.

    See the container-with-vitest demo for a usage example, and the Container API documentation for more information on using framework components with the experimental Container API.

4.4.1

Patch Changes

4.4.0

Minor Changes

  • #14386 f75f446 Thanks @​yanthomasdev! - Stabilizes the formerly experimental getActionState() and withState() functions introduced in @astrojs/react v3.4.0 used to integrate Astro Actions with React 19's useActionState() hook.

    This example calls a like action that accepts a postId and returns the number of likes. Pass this action to the withState() function to apply progressive enhancement info, and apply to useActionState() to track the result:

    import { actions } from 'astro:actions';
import { withState } from '@astrojs/react/actions';
import { useActionState } from 'react';

    export function Like({ postId }: { postId: string }) {
const [state, action, pending] = useActionState(
withState(actions.like),
0, // initial likes
);
    

    return (
<form action={action}>
<input type="hidden" name="postId" value={postId} />
<button disabled={pending}>{state} ❤️</button>
</form>
);
}

    You can also access the state stored by useActionState() from your action handler. Call getActionState() with the API context, and optionally apply a type to the result:

    import { defineAction } from 'astro:actions';
import { z } from 'astro:schema';
import { getActionState } from '@astrojs/react/actions';

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​astrojs/react since your current version.


Updates @auth0/auth0-spa-js from 2.4.1 to 2.9.1

Release notes

Sourced from @​auth0/auth0-spa-js's releases.

v2.9.1

Added

v2.9.0

Added

  • feat: add support scopes parameter for connected accounts #1458 (guabu)

Security

  • security: Upgrade component-cdn-uploader to v2.4.0 to address critical vulnerability of form-data package #1454 (ankita10119)

v2.8.0

Added

Fixed

v2.7.0

Added

Fixed

  • Fix MRRT with default audience in worker #1439 (aridibag)
  • Fetcher: fix incorrect URL building when baseUrl is present #1435 (martinml)

v2.6.0

Added

Fixed

v2.5.0

Added

Changelog

Sourced from @​auth0/auth0-spa-js's changelog.

v2.9.1 (2025-11-21)

Full Changelog

Added

v2.9.0 (2025-11-17)

Full Changelog

Added

  • feat: add support scopes parameter for connected accounts #1458 (guabu)

Security

  • security: Upgrade component-cdn-uploader to v2.4.0 to address critical vulnerability of form-data package #1454 (ankita10119)

v2.8.0 (2025-10-27)

Full Changelog

Added

Fixed

v2.7.0 (2025-10-17)

Full Changelog

Added

Fixed

  • Fix MRRT with default audience in worker #1439 (aridibag)
  • Fetcher: fix incorrect URL building when baseUrl is present #1435 (martinml)

v2.6.0 (2025-10-10)

Full Changelog

Added

Fixed

v2.5.0 (2025-10-01)

Full Changelog

... (truncated)

Commits
  • c03d11c Release v2.9.1 (#1467)
  • e73877e build(deps): Bump codecov/codecov-action from 3.1.5 to 5.4.3 (#1370)
  • 08a535b fix: pass CODECOV_TOKEN to codecov uploader to avoid rate limit issues (#1463)
  • efcff52 fix: pass CODECOV_TOKEN to codecov uploader to avoid rate limit issues
  • b2694f4 Export type for Custom Token Exchange support (#1461)
  • 7d693d2 feat: Export CustomTokenExchangeOptions from TokenExchange module
  • d7483c9 Release v2.9.0 (#1460)
  • ecfb261 feat: add support scopes parameter for connected accounts (#1458)
  • 9d5caa5 security: Upgrade component-cdn-uploader to v2.4.0 to address critical vulne...
  • 86fc490 security: Upgrade component-cdn-uploader to latest
  • Additional commits viewable in compare view

Updates astro from 5.13.11 to 5.16.3

Release notes

Sourced from astro's releases.

astro@5.16.3

Patch Changes

  • #14889 4bceeb0 Thanks @​florian-lefebvre! - Fixes actions types when using specific TypeScript configurations

  • #14929 e0f277d Thanks @​matthewp! - Fixes authentication bypass via double URL encoding in middleware

    Prevents attackers from bypassing path-based authentication checks using multi-level URL encoding (e.g., /%2561dmin instead of /%61dmin). Pathnames are now validated after decoding to ensure no additional encoding remains.

astro@5.16.2

Patch Changes

astro@5.16.1

Patch Changes

astro@5.16.0

Minor Changes

  • #13880 1a2ed01 Thanks @​azat-io! - Adds experimental SVGO optimization support for SVG assets

    Astro now supports automatic SVG optimization using SVGO during build time. This experimental feature helps reduce SVG file sizes while maintaining visual quality, improving your site's performance.

    To enable SVG optimization with default settings, add the following to your astro.config.mjs:

    import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
svgo: true,
},
});

    To customize optimization, pass a SVGO configuration object:

... (truncated)

Changelog

Sourced from astro's changelog.

5.16.3

Patch Changes

  • #14889 4bceeb0 Thanks @​florian-lefebvre! - Fixes actions types when using specific TypeScript configurations

  • #14929 e0f277d Thanks @​matthewp! - Fixes authentication bypass via double URL encoding in middleware

    Prevents attackers from bypassing path-based authentication checks using multi-level URL encoding (e.g., /%2561dmin instead of /%61dmin). Pathnames are now validated after decoding to ensure no additional encoding remains.

5.16.2

Patch Changes

5.16.1

Patch Changes

5.16.0

Minor Changes

  • #13880 1a2ed01 Thanks @​azat-io! - Adds experimental SVGO optimization support for SVG assets

    Astro now supports automatic SVG optimization using SVGO during build time. This experimental feature helps reduce SVG file sizes while maintaining visual quality, improving your site's performance.

    To enable SVG optimization with default settings, add the following to your astro.config.mjs:

    import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
svgo: true,
},
});

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for astro since your current version.


Updates react from 19.1.1 to 19.2.0

Release notes

Sourced from react's releases.

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

React DOM

... (truncated)

Changelog

Sourced from react's changelog.

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

React DOM

... (truncated)

Commits

Updates @types/react from 19.1.13 to 19.2.7

Commits

Updates react-dom from 19.1.1 to 19.2.0

Release notes

Sourced from react-dom's releases.

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

React DOM

  • Block on Suspensey Fonts during reveal of server-side-rendered content (

@dependabot
Bump the javascript-dependencies group across 1 directory with 13 upd…
947be62 
…ates

Bumps the javascript-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/cloudflare](https://github.com/withastro/astro/tree/HEAD/packages/integrations/cloudflare) | `12.6.9` | `12.6.12` |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `4.3.1` | `4.4.2` |
| [@auth0/auth0-spa-js](https://github.com/auth0/auth0-spa-js) | `2.4.1` | `2.9.1` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.13.11` | `5.16.3` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.1.1` | `19.2.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.1.13` | `19.2.7` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.1.1` | `19.2.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.1.9` | `19.2.3` |
| [eslint](https://github.com/eslint/eslint) | `9.36.0` | `9.39.1` |
| [eslint-plugin-astro](https://github.com/ota-meshi/eslint-plugin-astro) | `1.3.1` | `1.5.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.44.1` | `8.48.0` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.3` |



Updates `@astrojs/cloudflare` from 12.6.9 to 12.6.12
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/cloudflare/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/cloudflare@12.6.12/packages/integrations/cloudflare)

Updates `@astrojs/react` from 4.3.1 to 4.4.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/react@4.4.2/packages/integrations/react)

Updates `@auth0/auth0-spa-js` from 2.4.1 to 2.9.1
- [Release notes](https://github.com/auth0/auth0-spa-js/releases)
- [Changelog](https://github.com/auth0/auth0-spa-js/blob/main/CHANGELOG.md)
- [Commits](auth0/auth0-spa-js@v2.4.1...v2.9.1)

Updates `astro` from 5.13.11 to 5.16.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@5.16.3/packages/astro)

Updates `react` from 19.1.1 to 19.2.0
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.0/packages/react)

Updates `@types/react` from 19.1.13 to 19.2.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.1.1 to 19.2.0
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.0/packages/react-dom)

Updates `@types/react-dom` from 19.1.9 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `wrangler` from 4.40.0 to 4.50.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.50.0/packages/wrangler)

Updates `eslint` from 9.36.0 to 9.39.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.36.0...v9.39.1)

Updates `eslint-plugin-astro` from 1.3.1 to 1.5.0
- [Release notes](https://github.com/ota-meshi/eslint-plugin-astro/releases)
- [Changelog](https://github.com/ota-meshi/eslint-plugin-astro/blob/main/CHANGELOG.md)
- [Commits](ota-meshi/eslint-plugin-astro@v1.3.1...v1.5.0)

Updates `typescript-eslint` from 8.44.1 to 8.48.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.0/packages/typescript-eslint)

Updates `prettier` from 3.6.2 to 3.7.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.7.3)

---
updated-dependencies:
- dependency-name: "@astrojs/cloudflare"
  dependency-version: 12.6.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: javascript-dependencies
- dependency-name: "@astrojs/react"
  dependency-version: 4.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: "@auth0/auth0-spa-js"
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: astro
  dependency-version: 5.16.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: react
  dependency-version: 19.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: wrangler
  dependency-version: 4.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: eslint
  dependency-version: 9.39.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: eslint-plugin-astro
  dependency-version: 1.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: prettier
  dependency-version: 3.7.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 1, 2025
@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Dec 1, 2025 •
edited
Loading

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs		 letsbuilda-dev 947be62 Commit Preview URL

Branch Preview URL		 Dec 01 2025, 01:09 AM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant