build(deps): bump vite, @astrojs/mdx and astro by dependabot[bot] · Pull Request #206 · ericmasiello/synbydesign

dependabot · 2025-09-11T07:15:02Z

Bumps vite to 6.3.6 and updates ancestor dependencies vite, @astrojs/mdx and astro. These dependencies need to be updated together.

Updates vite from 4.5.14 to 6.3.6

Release notes

Sourced from vite's releases.

v6.3.6

Please refer to CHANGELOG.md for details.

v6.3.5

Please refer to CHANGELOG.md for details.

v6.3.4

Please refer to CHANGELOG.md for details.

v6.3.3

Please refer to CHANGELOG.md for details.

v6.3.2

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v6.3.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v6.3.0

Please refer to CHANGELOG.md for details.

v6.3.0-beta.2

Please refer to CHANGELOG.md for details.

v6.3.0-beta.1

Please refer to CHANGELOG.md for details.

v6.3.0-beta.0

Please refer to CHANGELOG.md for details.

v6.2.7

Please refer to CHANGELOG.md for details.

v6.2.6

Please refer to CHANGELOG.md for details.

v6.2.5

Please refer to CHANGELOG.md for details.

v6.2.4

Please refer to CHANGELOG.md for details.

v6.2.3

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

6.3.6 (2025-09-08)

fix: apply fs.strict check to HTML files (#20736) (0ab19ea), closes #20736

fix: upgrade sirv to 3.0.2 (#20735) (e11d240), closes #20735

test: detect ts support via process.features (#20544) (7d99229), closes #20544

6.3.5 (2025-05-05)

fix(ssr): handle uninitialized export access as undefined (#19959) (fd38d07), closes #19959

6.3.4 (2025-04-30)

fix: check static serve file inside sirv (#19965) (c22c43d), closes #19965

fix(optimizer): return plain object when using require to import externals in optimized dependenci (efc5eab), closes #19940

refactor: remove duplicate plugin context type (#19935) (d6d01c2), closes #19935

6.3.3 (2025-04-24)

fix: ignore malformed uris in tranform middleware (#19853) (e4d5201), closes #19853

fix(assets): ensure ?no-inline is not included in the asset url in the production environment (#1949 (16a73c0), closes #19496

fix(css): resolve relative imports in sass properly on Windows (#19920) (ffab442), closes #19920

fix(deps): update all non-major dependencies (#19899) (a4b500e), closes #19899

fix(ssr): fix execution order of re-export (#19841) (ed29dee), closes #19841

fix(ssr): fix live binding of default export declaration and hoist exports getter (#19842) (80a91ff), closes #19842

perf: skip sourcemap generation for renderChunk hook of import-analysis-build plugin (#19921) (55cfd04), closes #19921

test(ssr): test ssrTransform re-export deps and test stacktrace with first line (#19629) (9399cda), closes #19629

6.3.2 (2025-04-18)

fix: match default asserts case insensitive (#19852) (cbdab1d), closes #19852

fix: open first url if host does not match any urls (#19886) (6abbdce), closes #19886

fix(css): respect css.lightningcss option in css minification process (#19879) (b5055e0), closes #19879

fix(deps): update all non-major dependencies (#19698) (bab4cb9), closes #19698

feat(css): improve lightningcss messages (#19880) (c713f79), closes #19880

6.3.1 (2025-04-17)

fix: avoid using Promise.allSettled in preload function (#19805) (35c7f35), closes #19805

fix: backward compat for internal plugin transform calls (#19878) (a152b7c), closes #19878

... (truncated)

Commits

3f337c5 release: v6.3.6
e11d240 fix: upgrade sirv to 3.0.2 (#20735)
0ab19ea fix: apply fs.strict check to HTML files (#20736)
7d99229 test: detect ts support via process.features (#20544)
84e4647 release: v6.3.5
fd38d07 fix(ssr): handle uninitialized export access as undefined (#19959)
b040d54 release: v6.3.4
c22c43d fix: check static serve file inside sirv (#19965)
efc5eab fix(optimizer): return plain object when using require to import externals ...
d6d01c2 refactor: remove duplicate plugin context type (#19935)
Additional commits viewable in compare view

Updates @astrojs/mdx from 1.1.5 to 4.3.5

Release notes

Sourced from @astrojs/mdx's releases.

@astrojs/mdx@4.3.5

Patch Changes

#14326 c24a8f4 Thanks @jsparkdev! - Updates vite version to fix CVE

@astrojs/mdx@4.3.4

Patch Changes

Updated dependencies []:

@astrojs/markdown-remark@6.3.6

@astrojs/mdx@4.3.3

Patch Changes

Updated dependencies []:

@astrojs/markdown-remark@6.3.5

@astrojs/mdx@4.3.2

Patch Changes

Updated dependencies []:

@astrojs/markdown-remark@6.3.4

@astrojs/mdx@4.3.1

Patch Changes

Updated dependencies [6bd5f75]:

@astrojs/markdown-remark@6.3.3

Changelog

Sourced from @astrojs/mdx's changelog.

4.3.5

Patch Changes

#14326 c24a8f4 Thanks @jsparkdev! - Updates vite version to fix CVE

4.3.4

Patch Changes

Updated dependencies []:

@astrojs/markdown-remark@6.3.6

4.3.3

Patch Changes

Updated dependencies []:

@astrojs/markdown-remark@6.3.5

4.3.2

Patch Changes

Updated dependencies []:

@astrojs/markdown-remark@6.3.4

4.3.1

Patch Changes

Updated dependencies [6bd5f75]:

@astrojs/markdown-remark@6.3.3

4.3.0

Minor Changes

#13809 3c3b492 Thanks @ascorbic! - Increases minimum Node.js version to 18.20.8

Node.js 18 has now reached end-of-life and should not be used. For now, Astro will continue to support Node.js 18.20.8, which is the final LTS release of Node.js 18, as well as Node.js 20 and Node.js 22 or later. We will drop support for Node.js 18 in a future release, so we recommend upgrading to Node.js 22 as soon as possible. See Astro's Node.js support policy for more details.

⚠️ Important note for users of Cloudflare Pages: The current build image for Cloudflare Pages uses Node.js 18.17.1 by default, which is no longer supported by Astro. If you are using Cloudflare Pages you should override the default Node.js version to Node.js 22. This does not affect users of Cloudflare Workers, which uses Node.js 22 by default.

Patch Changes

Updated dependencies []:

@astrojs/markdown-remark@6.3.2

4.2.6

... (truncated)

Commits

aa7bebd [ci] release (#14295)
c24a8f4 fix(vite): update vite to fix CVE (#14326)
42a2cc5 fix(deps): update astro dependencies (#14307)
bdc8ce2 fix(deps): update astro dependencies (#14305)
9288133 [ci] release (#14232)
0f0a4c4 [ci] release (#14172)
5eaf524 [ci] release (#14171)
9cfccc7 [ci] format
c2a347d chore(deps): upgrade development tools (#14040)
5452ee6 fix: pass key argument as prop in JSX transform (#14111)
Additional commits viewable in compare view

Updates astro from 3.6.5 to 5.13.7

Release notes

Sourced from astro's releases.

[email protected]

Patch Changes

#14330 72e14ab Thanks @ascorbic! - Removes pinned package that is no longer needed.

#14335 17c7b03 Thanks @florian-lefebvre! - Bumps sharp minimal version to 0.34.0

[email protected]

Patch Changes

#14294 e005855 Thanks @martrapp! - Restores the ability to use Google Analytics History change trigger with the <ClientRouter />.

#14326 c24a8f4 Thanks @jsparkdev! - Updates vite version to fix CVE

#14108 218e070 Thanks @JusticeMatthew! - Updates dynamic route split regex to avoid infinite retries/exponential complexity

#14327 c1033be Thanks @ascorbic! - Pins simple-swizzle to avoid compromised version

[email protected]

Patch Changes

#14286 09c5db3 Thanks @ematipico! - BREAKING CHANGES only to the experimental CSP feature

The following runtime APIs of the Astro global have been renamed:

Astro.insertDirective to Astro.csp.insertDirective

Astro.insertStyleResource to Astro.csp.insertStyleResource

Astro.insertStyleHash to Astro.csp.insertStyleHash

Astro.insertScriptResource to Astro.csp.insertScriptResource

Astro.insertScriptHash to Astro.csp.insertScriptHash

The following runtime APIs of the APIContext have been renamed:

ctx.insertDirective to ctx.csp.insertDirective

ctx.insertStyleResource to ctx.csp.insertStyleResource

ctx.insertStyleHash to ctx.csp.insertStyleHash

ctx.insertScriptResource to ctx.csp.insertScriptResource

ctx.insertScriptHash to ctx.csp.insertScriptHash

#14283 3224637 Thanks @ematipico! - Fixes an issue where CSP headers were incorrectly injected in the development server.

#14275 3e2f20d Thanks @florian-lefebvre! - Adds support for experimental CSP when using experimental fonts

Experimental fonts now integrate well with experimental CSP by injecting hashes for the styles it generates, as well as font-src directives.

No action is required to benefit from it.

#14280 4b9fb73 Thanks @ascorbic! - Fixes a bug that caused cookies to not be correctly set when using middleware sequences

#14276 77281c4 Thanks @ArmandPhilippot! - Adds a missing export for resolveSrc, a documented image services utility.

... (truncated)

Changelog

Sourced from astro's changelog.

5.13.7

Patch Changes

#14330 72e14ab Thanks @ascorbic! - Removes pinned package that is no longer needed.

#14335 17c7b03 Thanks @florian-lefebvre! - Bumps sharp minimal version to 0.34.0

5.13.6

Patch Changes

#14294 e005855 Thanks @martrapp! - Restores the ability to use Google Analytics History change trigger with the <ClientRouter />.

#14326 c24a8f4 Thanks @jsparkdev! - Updates vite version to fix CVE

#14108 218e070 Thanks @JusticeMatthew! - Updates dynamic route split regex to avoid infinite retries/exponential complexity

#14327 c1033be Thanks @ascorbic! - Pins simple-swizzle to avoid compromised version

5.13.5

Patch Changes

#14286 09c5db3 Thanks @ematipico! - BREAKING CHANGES only to the experimental CSP feature

The following runtime APIs of the Astro global have been renamed:

Astro.insertDirective to Astro.csp.insertDirective

Astro.insertStyleResource to Astro.csp.insertStyleResource

Astro.insertStyleHash to Astro.csp.insertStyleHash

Astro.insertScriptResource to Astro.csp.insertScriptResource

Astro.insertScriptHash to Astro.csp.insertScriptHash

The following runtime APIs of the APIContext have been renamed:

ctx.insertDirective to ctx.csp.insertDirective

ctx.insertStyleResource to ctx.csp.insertStyleResource

ctx.insertStyleHash to ctx.csp.insertStyleHash

ctx.insertScriptResource to ctx.csp.insertScriptResource

ctx.insertScriptHash to ctx.csp.insertScriptHash

#14283 3224637 Thanks @ematipico! - Fixes an issue where CSP headers were incorrectly injected in the development server.

#14275 3e2f20d Thanks @florian-lefebvre! - Adds support for experimental CSP when using experimental fonts

Experimental fonts now integrate well with experimental CSP by injecting hashes for the styles it generates, as well as font-src directives.

No action is required to benefit from it.

#14280 4b9fb73 Thanks @ascorbic! - Fixes a bug that caused cookies to not be correctly set when using middleware sequences

... (truncated)

Commits

468c845 [ci] release (#14336)
72e14ab fix: remove the pinned simple-swizzle (#14330)
17c7b03 feat: update sharp (#14335)
aa7bebd [ci] release (#14295)
c1033be fix: pin simple-swizzle (#14327)
c24a8f4 fix(vite): update vite to fix CVE (#14326)
218e070 Fix: Dynamic route split regex (#14108)
0eba233 fix(deps): update astro dependencies (#14308)
d63f6bb fix(deps): update astro dependencies (#13749)
bdc8ce2 fix(deps): update astro dependencies (#14305)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) to 6.3.6 and updates ancestor dependencies [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) and [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro). These dependencies need to be updated together. Updates `vite` from 4.5.14 to 6.3.6 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.3.6/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.3.6/packages/vite) Updates `@astrojs/mdx` from 1.1.5 to 4.3.5 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/integrations/mdx) Updates `astro` from 3.6.5 to 5.13.7 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/[email protected]/packages/astro) --- updated-dependencies: - dependency-name: vite dependency-version: 6.3.6 dependency-type: indirect - dependency-name: "@astrojs/mdx" dependency-version: 4.3.5 dependency-type: direct:production - dependency-name: astro dependency-version: 5.13.7 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 11, 2025

dependabot bot mentioned this pull request Sep 11, 2025

build(deps): bump astro and @astrojs/mdx #205

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump vite, @astrojs/mdx and astro#206

build(deps): bump vite, @astrojs/mdx and astro#206
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-0412c0f681

dependabot bot commented on behalf of github Sep 11, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Sep 11, 2025

v6.3.6

v6.3.5

v6.3.4

v6.3.3

v6.3.2

[email protected]

v6.3.1

[email protected]

v6.3.0

v6.3.0-beta.2

v6.3.0-beta.1

v6.3.0-beta.0

v6.2.7

v6.2.6

v6.2.5

v6.2.4

v6.2.3

6.3.6 (2025-09-08)

6.3.5 (2025-05-05)

6.3.4 (2025-04-30)

6.3.3 (2025-04-24)

6.3.2 (2025-04-18)

6.3.1 (2025-04-17)

@​astrojs/mdx@​4.3.5

Patch Changes

@​astrojs/mdx@​4.3.4

Patch Changes

@​astrojs/mdx@​4.3.3

Patch Changes

@​astrojs/mdx@​4.3.2

Patch Changes

@​astrojs/mdx@​4.3.1

Patch Changes

4.3.5

Patch Changes

4.3.4

Patch Changes

4.3.3

Patch Changes

4.3.2

Patch Changes

4.3.1

Patch Changes

4.3.0

Minor Changes

Patch Changes

4.2.6

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Patch Changes

5.13.7

Patch Changes

5.13.6

Patch Changes

5.13.5

Patch Changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@astrojs/mdx@4`.3.5

`@astrojs/mdx@4`.3.4

`@astrojs/mdx@4`.3.3

`@astrojs/mdx@4`.3.2

`@astrojs/mdx@4`.3.1