Skip to content

chore(deps): bump the deps group across 1 directory with 6 updates - #4605

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/astro-tailwind/deps-2400b02532
Closed

chore(deps): bump the deps group across 1 directory with 6 updates#4605
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/astro-tailwind/deps-2400b02532

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 28, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the deps group with 6 updates in the /astro-tailwind directory:

Package From To
@astrojs/mdx 4.0.1 4.1.0
@astrojs/tailwind 5.1.3 6.0.0
@types/canvas-confetti 1.6.4 1.9.0
astro 5.0.3 5.4.0
postcss 8.4.49 8.5.3
tailwindcss 3.4.16 4.0.9

Updates @astrojs/mdx from 4.0.1 to 4.1.0

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​4.1.0

Minor Changes

  • #13254 1e11f5e Thanks @​p0lyw0lf! - Adds the ability to process and optimize remote images in Markdown syntax in MDX files.

    Previously, Astro only allowed local images to be optimized when included using ![]() syntax. Astro's image service could only display remote images without any processing.

    Now, Astro's image service can also optimize remote images written in standard Markdown syntax. This allows you to enjoy the benefits of Astro's image processing when your images are stored externally, for example in a CMS or digital asset manager.

    No additional configuration is required to use this feature! Any existing remote images written in Markdown will now automatically be optimized. To opt-out of this processing, write your images in Markdown using the JSX <img/> tag instead. Note that images located in your public/ folder are still never processed.

Patch Changes

  • Updated dependencies [1e11f5e]:
    • @​astrojs/markdown-remark@​6.2.0

@​astrojs/mdx@​4.0.8

Patch Changes

  • Updated dependencies [db252e0]:
    • @​astrojs/markdown-remark@​6.1.0

@​astrojs/mdx@​4.0.7

Patch Changes

@​astrojs/mdx@​4.0.6

Patch Changes

  • Updated dependencies [3d89e62]:
    • @​astrojs/markdown-remark@​6.0.2

@​astrojs/mdx@​4.0.5

Patch Changes

@​astrojs/mdx@​4.0.4

Patch Changes

  • #12921 aeb7e1a Thanks @​ascorbic! - Fixes a bug that caused Image component to be imported on MDX pages that did not include images

  • #12913 9a3b48c Thanks @​bluwy! - Makes internal check() function a no-op to allow faster component renders and prevent React 19 component warnings

@​astrojs/mdx@​4.0.3

Patch Changes

Changelog

Sourced from @​astrojs/mdx's changelog.

4.1.0

Minor Changes

  • #13254 1e11f5e Thanks @​p0lyw0lf! - Adds the ability to process and optimize remote images in Markdown syntax in MDX files.

    Previously, Astro only allowed local images to be optimized when included using ![]() syntax. Astro's image service could only display remote images without any processing.

    Now, Astro's image service can also optimize remote images written in standard Markdown syntax. This allows you to enjoy the benefits of Astro's image processing when your images are stored externally, for example in a CMS or digital asset manager.

    No additional configuration is required to use this feature! Any existing remote images written in Markdown will now automatically be optimized. To opt-out of this processing, write your images in Markdown using the JSX <img/> tag instead. Note that images located in your public/ folder are still never processed.

Patch Changes

  • Updated dependencies [1e11f5e]:
    • @​astrojs/markdown-remark@​6.2.0

4.0.8

Patch Changes

  • Updated dependencies [db252e0]:
    • @​astrojs/markdown-remark@​6.1.0

4.0.7

Patch Changes

4.0.6

Patch Changes

  • Updated dependencies [3d89e62]:
    • @​astrojs/markdown-remark@​6.0.2

4.0.5

Patch Changes

4.0.4

Patch Changes

  • #12921 aeb7e1a Thanks @​ascorbic! - Fixes a bug that caused Image component to be imported on MDX pages that did not include images

  • #12913 9a3b48c Thanks @​bluwy! - Makes internal check() function a no-op to allow faster component renders and prevent React 19 component warnings

... (truncated)

Commits

Updates @astrojs/tailwind from 5.1.3 to 6.0.0

Release notes

Sourced from @​astrojs/tailwind's releases.

@​astrojs/tailwind@​6.0.0

Major Changes

  • #13049 2ed4bd9 Thanks @​florian-lefebvre! - Deprecates the integration

    Tailwind CSS now offers a Vite plugin which is the preferred way to use Tailwind 4 in Astro. Please uninstall @astrojs/tailwind and follow the Tailwind documentation for manual installation.

    This updated major version is only provided as a convenience for existing projects until they are able to migrate to the new plugin. It offers no additional functionality and is no longer recommended, but may continue to be used in your projects until it is removed entirely.

@​astrojs/tailwind@​5.1.5

Patch Changes

@​astrojs/tailwind@​5.1.4

Patch Changes

Changelog

Sourced from @​astrojs/tailwind's changelog.

6.0.0

Major Changes

  • #13049 2ed4bd9 Thanks @​florian-lefebvre! - Deprecates the integration

    Tailwind CSS now offers a Vite plugin which is the preferred way to use Tailwind 4 in Astro. Please uninstall @astrojs/tailwind and follow the Tailwind documentation for manual installation.

    This updated major version is only provided as a convenience for existing projects until they are able to migrate to the new plugin. It offers no additional functionality and is no longer recommended, but may continue to be used in your projects until it is removed entirely.

5.1.5

Patch Changes

5.1.4

Patch Changes

Commits

Updates @types/canvas-confetti from 1.6.4 to 1.9.0

Commits

Updates astro from 5.0.3 to 5.4.0

Release notes

Sourced from astro's releases.

astro@5.4.0

Minor Changes

  • #12052 5be12b2 Thanks @​Fryuni! - Exposes extra APIs for scripting and testing.

    Config helpers

    Two new helper functions exported from astro/config:

    • mergeConfig() allows users to merge partially defined Astro configurations on top of a base config while following the merge rules of updateConfig() available for integrations.
    • validateConfig() allows users to validate that a given value is a valid Astro configuration and fills in default values as necessary.

    These helpers are particularly useful for integration authors and for developers writing scripts that need to manipulate Astro configurations programmatically.

    Programmatic build

    The build API now receives a second optional BuildOptions argument where users can specify:

    • devOutput (default false): output a development-based build similar to code transformed in astro dev.
    • teardownCompiler (default true): teardown the compiler WASM instance after build.

    These options provide more control when running Astro builds programmatically, especially for testing scenarios or custom build pipelines.

  • #13278 4a43c4b Thanks @​ematipico! - Adds a new configuration option server.allowedHosts and CLI option --allowed-hosts.

    Now you can specify the hostnames that the dev and preview servers are allowed to respond to. This is useful for allowing additional subdomains, or running the dev server in a web container.

    allowedHosts checks the Host header on HTTP requests from browsers and if it doesn't match, it will reject the request to prevent CSRF and XSS attacks.

    astro dev --allowed-hosts=foo.bar.example.com,bar.example.com
    astro preview --allowed-hosts=foo.bar.example.com,bar.example.com
    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
server: {
allowedHosts: ['foo.bar.example.com', 'bar.example.com'],
},
});

    This feature is the same as Vite's server.allowHosts configuration.

... (truncated)

Changelog

Sourced from astro's changelog.

5.4.0

Minor Changes

  • #12052 5be12b2 Thanks @​Fryuni! - Exposes extra APIs for scripting and testing.

    Config helpers

    Two new helper functions exported from astro/config:

    • mergeConfig() allows users to merge partially defined Astro configurations on top of a base config while following the merge rules of updateConfig() available for integrations.
    • validateConfig() allows users to validate that a given value is a valid Astro configuration and fills in default values as necessary.

    These helpers are particularly useful for integration authors and for developers writing scripts that need to manipulate Astro configurations programmatically.

    Programmatic build

    The build API now receives a second optional BuildOptions argument where users can specify:

    • devOutput (default false): output a development-based build similar to code transformed in astro dev.
    • teardownCompiler (default true): teardown the compiler WASM instance after build.

    These options provide more control when running Astro builds programmatically, especially for testing scenarios or custom build pipelines.

  • #13278 4a43c4b Thanks @​ematipico! - Adds a new configuration option server.allowedHosts and CLI option --allowed-hosts.

    Now you can specify the hostnames that the dev and preview servers are allowed to respond to. This is useful for allowing additional subdomains, or running the dev server in a web container.

    allowedHosts checks the Host header on HTTP requests from browsers and if it doesn't match, it will reject the request to prevent CSRF and XSS attacks.

    astro dev --allowed-hosts=foo.bar.example.com,bar.example.com
    astro preview --allowed-hosts=foo.bar.example.com,bar.example.com
    // astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
server: {
allowedHosts: ['foo.bar.example.com', 'bar.example.com'],
},
});

    This feature is the same as Vite's server.allowHosts configuration.

... (truncated)

Commits

Updates postcss from 8.4.49 to 8.5.3

Release notes

Sourced from postcss's releases.

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

Changelog

Sourced from postcss's changelog.

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

  • Added Input#document for sources like CSS-in-JS or HTML (by @​romainmenke).
Commits

Updates tailwindcss from 3.4.16 to 4.0.9

Release notes

Sourced from tailwindcss's releases.

v4.0.9

Fixed

  • Make JS APIs available to plugins and configs in the Standalone CLI (#15934)
  • Vite: Don't crash when importing a virtual module from JavaScript that ends in .css (#16780)
  • Fix an issue where @reference "…" would sometimes omit keyframe animations (#16774)
  • Ensure z-*! utilities are properly marked as !important (#16795)
  • Read UTF-8 CSS files that start with a byte-order mark (BOM) (#16800)
  • Ensure nested functions in selectors used with JavaScript plugins are not truncated (#16802)

Changed

  • Emit variable fallbacks when using @reference "…" instead of duplicate CSS variable declarations (#16774)

v4.0.8

Added

  • Allow @import with theme(…) options for stylesheets that contain more than just @theme rules (#16514)

Fixed

  • Don't add !important to CSS variable declarations when using the important modifier (#16668)
  • Vite: Ignore files and directories specified in your .gitignore file when using automatic source detection(#16631)
  • Vite: Don't rely on the module graph for detecting candidates to ensure setups with multiple Vite builds work as expected (#16631)
  • Vite: Ensure Astro production builds always contain classes used in client-only components (#16631)
  • Vite: Always scan raw file contents for utility classes before any other transforms have been applied to ensure utility classes are scanned without any additional escaping (#16631)
  • Ensure utilities with more declarations are always sorted before utilities with fewer declarations when utilities only define CSS variables (#16715)
  • Only include translate-z-px utilities once in compiled CSS (#16718)

Changed

  • Don't include theme variables that aren't used in compiled CSS (#16211, #16676)

v4.0.7

Fixed

  • Export tailwindcss/lib/util/flattenColorPalette.js for backward compatibility (#16411)
  • Fix sorting of numeric utility suggestions when they have different magnitudes (#16414)
  • Show suggestions for fractions in IntelliSense (#16353)
  • Don’t replace _ in suggested theme keys (#16433)
  • Ensure --default-outline-width can be used to change the outline-width value of the outline utility (#16469)
  • Ensure drop shadow utilities don't inherit unexpectedly (#16471)
  • Export config and plugin types from tailwindcss/plugin for backward compatibility (#16505)
  • Ensure JavaScript plugins that emit nested rules referencing the utility name work as expected (#16539)
  • Statically link Visual Studio redistributables in @tailwindcss/oxide Windows builds (#16602)
  • Ensure that Next.js splat routes are scanned for classes (#16457)
  • Pin exact version of tailwindcss in @tailwindcss/* packages (#16623)
  • Upgrade: Report errors when updating dependencies (#16504)
  • Upgrade: Ensure a darkMode JS config setting with block syntax converts to use @slot (#16507)
  • Upgrade: Ensure the latest version of tailwindcss and @tailwindcss/postcss are installed when upgrading (#16620)

... (truncated)

Changelog

Sourced from tailwindcss's changelog.

[4.0.9] - 2025-02-25

Fixed

  • Make JS APIs available to plugins and configs in the Standalone CLI (#15934)
  • Vite: Don't crash when importing a virtual module from JavaScript that ends in .css (#16780)
  • Fix an issue where @reference "…" would sometimes omit keyframe animations (#16774)
  • Ensure z-*! utilities are properly marked as !important (#16795)
  • Read UTF-8 CSS files that start with a byte-order mark (BOM) (#16800)
  • Ensure nested functions in selectors used with JavaScript plugins are not truncated (#16802)

Changed

  • Emit variable fallbacks when using @reference "…" instead of duplicate CSS variable declarations (#16774)

[4.0.8] - 2025-02-21

Added

  • Allow @import with theme(…) options for stylesheets that contain more than just @theme rules (#16514)

Fixed

  • Don't add !important to CSS variable declarations when using the important modifier (#16668)
  • Vite: Ignore files and directories specified in your .gitignore file when using automatic source detection(#16631)
  • Vite: Don't rely on the module graph for detecting candidates to ensure setups with multiple Vite builds work as expected (#16631)
  • Vite: Ensure Astro production builds always contain classes used in client-only components (#16631)
  • Vite: Always scan raw file contents for utility classes before any other transforms have been applied to ensure utility classes are scanned without any additional escaping (#16631)
  • Ensure utilities with more declarations are always sorted before utilities with fewer declarations when utilities only define CSS variables (#16715)
  • Only include translate-z-px utilities once in compiled CSS (#16718)

Changed

  • Don't include theme variables that aren't used in compiled CSS (#16211, #16676)

[4.0.7] - 2025-02-18

Fixed

  • Export tailwindcss/lib/util/flattenColorPalette.js for backward compatibility (#16411)
  • Fix sorting of numeric utility suggestions when they have different magnitudes (#16414)
  • Show suggestions for fractions in IntelliSense (#16353)
  • Don’t replace _ in suggested theme keys (#16433)
  • Ensure --default-outline-width can be used to change the outline-width value of the outline utility (#16469)
  • Ensure drop shadow utilities don't inherit unexpectedly (#16471)
  • Export config and plugin types from tailwindcss/plugin for backward compatibility (#16505)
  • Ensure JavaScript plugins that emit nested rules referencing the utility name work as expected (#16539)
  • Statically link Visual Studio redistributables in @tailwindcss/oxide Windows builds (#16602)
  • Ensure that Next.js splat routes are scanned for classes (#16457)
  • Pin exact version of tailwindcss in @tailwindcss/* packages (#16623)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the deps group across 1 directory with 6 updates
f24ecf1 
Bumps the deps group with 6 updates in the /astro-tailwind directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `4.0.1` | `4.1.0` |
| [@astrojs/tailwind](https://github.com/withastro/astro/tree/HEAD/packages/integrations/tailwind) | `5.1.3` | `6.0.0` |
| [@types/canvas-confetti](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/canvas-confetti) | `1.6.4` | `1.9.0` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.0.3` | `5.4.0` |
| [postcss](https://github.com/postcss/postcss) | `8.4.49` | `8.5.3` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `3.4.16` | `4.0.9` |



Updates `@astrojs/mdx` from 4.0.1 to 4.1.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@4.1.0/packages/integrations/mdx)

Updates `@astrojs/tailwind` from 5.1.3 to 6.0.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/tailwind/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/tailwind@6.0.0/packages/integrations/tailwind)

Updates `@types/canvas-confetti` from 1.6.4 to 1.9.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/canvas-confetti)

Updates `astro` from 5.0.3 to 5.4.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@5.4.0/packages/astro)

Updates `postcss` from 8.4.49 to 8.5.3
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.49...8.5.3)

Updates `tailwindcss` from 3.4.16 to 4.0.9
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.0.9/packages/tailwindcss)

---
updated-dependencies:
- dependency-name: "@astrojs/mdx"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: "@astrojs/tailwind"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: deps
- dependency-name: "@types/canvas-confetti"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: astro
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: postcss
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: tailwindcss
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 28, 2025
@codesandbox

codesandbox Bot commented Feb 28, 2025

Copy link
Copy Markdown

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

@dependabot dependabot Bot mentioned this pull request Feb 28, 2025
Closed
@dependabot @github

dependabot Bot commented on behalf of github Mar 4, 2025

Copy link
Copy Markdown
Contributor Author

Superseded by #4641.

@dependabot dependabot Bot closed this Mar 4, 2025
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/astro-tailwind/deps-2400b02532 branch March 4, 2025 05:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants