build: bump the docs-dependencies group in /docs with 3 updates - #1778
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the docs-dependencies group in /docs with 3 updates: [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro), [starlight-llms-txt](https://github.com/delucis/starlight-llms-txt/tree/HEAD/packages/starlight-llms-txt) and [zod](https://github.com/colinhacks/zod). Updates `astro` from 7.3.2 to 7.3.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.3.3/packages/astro) Updates `starlight-llms-txt` from 0.11.0 to 0.12.0 - [Release notes](https://github.com/delucis/starlight-llms-txt/releases) - [Changelog](https://github.com/delucis/starlight-llms-txt/blob/main/packages/starlight-llms-txt/CHANGELOG.md) - [Commits](https://github.com/delucis/starlight-llms-txt/commits/starlight-llms-txt@0.12.0/packages/starlight-llms-txt) Updates `zod` from 4.6.2 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.2...v4.6.5) --- updated-dependencies: - dependency-name: astro dependency-version: 7.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs-dependencies - dependency-name: starlight-llms-txt dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docs-dependencies - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docs-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
documentation
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Request changes — docs production build is broken
This is a valid Dependabot docs-group bump (docs/package.json + docs/pnpm-lock.yaml only; title is build: so it will not cut a plugin release). I am not merging it: a frozen install of this lockfile cannot build the docs site.
Regression
docs/astro.config.mjs still registers the custom remarkHeadingId plugin via the legacy markdown.remarkPlugins path (Docusaurus-style {#custom-id} anchors that inbound links rely on). Astro 7 only auto-wraps that path if @astrojs/markdown-remark is installed.
Through astro@7.3.2 / starlight-llms-txt@0.11.0 that package arrived transitively via @astrojs/mdx@7.0.2. This PR’s starlight-llms-txt@0.12.0 bump (changelog: “Updates @astrojs/mdx to the latest release”) pulls @astrojs/mdx@8.0.1, which makes markdown-remark an optional peer. After pnpm install --frozen-lockfile in /docs, @astrojs/markdown-remark is absent and astro build fails immediately:
`markdown.remarkPlugins`, `markdown.rehypePlugins`, and `markdown.remarkRehype` run on the `unified` processor from `@astrojs/markdown-remark`, which is no longer installed by default now that Sätteri is the default Markdown processor. Install it with:
npm install @astrojs/markdown-remark
Root CI does not build /docs, and Cloudflare Pages does not preview dependabot/* branches, so a green GitHub check run would not catch this.
What is otherwise fine
- Frozen install of the PR lockfile succeeds;
pnpm audit --prodin/docsreports 0 vulnerabilities. astro7.3.2 → 7.3.3 is a patch (image-endpoint 400/404, trailing-slash redirect body,svgoadvisory, rendering/dev-server fixes). None of those touch this site’s Starlight customizations (PageTitle.astro/starlightRoute, theme-onlycustom.css, explicit sidebar, notagline).zod4.6.2 → 4.6.5 is additive (z.currencyCode(),z.url()/.properties()tweaks). This package is a hoist pin; there are no directzodimports.starlight-llms-txt0.12.0 peers (astro ^7,@astrojs/starlight >=0.41) match the site. The plugin config (projectName/description/details/optionalLinks) is unchanged.- Local probe: adding
@astrojs/markdown-remark@^7.3.0as a direct/docsdependency unblocks a production build (52 pages,llms.txt/llms-full.txt/llms-small.txtemitted) andpython3 scripts/check-links.pyreports 0 problems. The only leftover is Astro’s deprecation warning to pass the plugins intounified({...}).
Required unblock
Do not land this lockfile as-is. Either:
- Preferred short-term: add
@astrojs/markdown-remarkas a direct/docsdependency (the version MDX 8 peers,^7.3.0) so the existingremarkHeadingIdpath keeps working, or - Port
remarkHeadingIdto Sätteri and dropmarkdown.remarkPlugins.
I did not push either change onto this Dependabot branch.
Sent by Cursor Automation: Dependabot PRs
| "astro": "^7.3.3", | ||
| "sharp": "^0.35.4", | ||
| "starlight-llms-txt": "^0.11.0", | ||
| "starlight-llms-txt": "^0.12.0", |
There was a problem hiding this comment.
starlight-llms-txt@0.12.0 is only an @astrojs/mdx 7 → 8 bump, but that is what breaks this site. MDX 8 marks @astrojs/markdown-remark optional; we still set markdown.remarkPlugins in astro.config.mjs for {#id} heading anchors, and Astro 7 then throws at config validation because the package is gone from the tree.
A local pnpm add @astrojs/markdown-remark@^7.3.0 in /docs (not committed) restored a 52-page production build and a clean link check. Please add that direct dependency (or migrate the remark plugin to Sätteri) before this lockfile lands.
Bumps the docs-dependencies group in /docs with 3 updates: astro, starlight-llms-txt and zod.
Updates
astrofrom 7.3.2 to 7.3.3Release notes
Sourced from astro's releases.
... (truncated)
Changelog
Sourced from astro's changelog.
... (truncated)
Commits
8a3106e[ci] release (#17939)5efea1bAdd a version field to the astro-client-only fixture80f9f1dHash compiled CSS output in incremental build to detect Sass partial changes ...bc6572fRevert "Forward user class to Picture's outer element" (#18004) (#18030)0e5478dNormalize CRLF line endings before computing CSP hashes (#17998)30ef3cbfix: invalidate prerender environment in invalidateDataStore (#17991) (#17999)312ab49Fix redirect targets when a param value contains a$replacement pattern (#...1b5a234Fix trailing-slash redirect body to match the Location header target (#18018)558b301Fix prerendered Cloudflare pages rendering as [object Object] with nodejs_com...4464b3afix(assets): forward class to picture element in Picture component (#18003) (...Updates
starlight-llms-txtfrom 0.11.0 to 0.12.0Release notes
Sourced from starlight-llms-txt's releases.
Changelog
Sourced from starlight-llms-txt's changelog.
Commits
776a901[ci] release (#167)92e4845fix(deps): update astro (major) (#166)80d6685fix(deps): update dependency astro to ^7.3.2 (#164)a79bc37fix(deps): update dependency@astrojs/starlightto ^0.41.10 (#159)22c1421fix(deps): update astro (#155)286f7cdfix(deps): update astro (#148)0eb6babfix(deps): update astro (#143)b928965fix(deps): update astro (#135)9f56bf1fix(deps): update dependency@types/hastto ^3.0.5 (#136)Updates
zodfrom 4.6.2 to 4.6.5Release notes
Sourced from zod's releases.
Commits
59bbc03chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump0f3f5ee4.6.5cc4cd4eRevert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...ca0229aRevert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...56222cdfeat(instanceof): key the .properties() shape off the instance type (#6600)de65a5cdocs: lead the properties section with the check and add a Zod Mini tab (#6598)f1448f7docs: fold the 4.6.x patch highlights into the 4.6 post's own sectionsd2b135cdocs: add the 4.6.x patch highlights to the 4.6 post2bb0871chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump743aedb4.6.4Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions