chore(deps): bump the npm-minor-and-patch group with 2 updates

[dependabot]

Bumps the npm-minor-and-patch group with 2 updates: astro and puppeteer-core.

Updates astro from 7.3.3 to 7.3.5

Release notes

Sourced from astro's releases.

astro@7.3.5

Patch Changes

• #17736 2b8b2e8 Thanks @​ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

  Users must import the component with the new ?container query string:

  import { experimental_AstroContainer } from "astro/container";
  import TodoList from "../components/TodoList.astro?container";
  const container = await experimental_AstroContainer.create();
  const _string = container.renderComponent(TodoList);

astro@7.3.4

Patch Changes

• #18063 40896ac Thanks @​adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

• #18053 cf5d72f Thanks @​Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

• #18086 795a7e4 Thanks @​ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&) and named (&) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

• #18074 0429805 Thanks @​SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

• #18007 2245837 Thanks @​L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

• #18096 43657c4 Thanks @​matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

• #18043 8a53a8b Thanks @​astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

• #18029 c08252d Thanks @​matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

• Updated dependencies [3fd16ee, 8358d59]:

  • @​astrojs/markdown-satteri@​0.4.2

Changelog

Sourced from astro's changelog.

7.3.5

Patch Changes

• #17736 2b8b2e8 Thanks @​ematipico! - Adds a new container function called renderComponent(), which renders Astro components with inlined styles and scripts.

  Users must import the component with the new ?container query string:

  import { experimental_AstroContainer } from "astro/container";
  import TodoList from "../components/TodoList.astro?container";
  const container = await experimental_AstroContainer.create();
  const _string = container.renderComponent(TodoList);

7.3.4

Patch Changes

• #18063 40896ac Thanks @​adamchal! - Fixes incremental builds repeatedly rendering unchanged pages when modules or compiled CSS reference bundled assets.

• #18053 cf5d72f Thanks @​Princesseuh! - Improves the astro check error shown for TypeScript 7. The command now explains that TypeScript 7 is not currently supported and provides instructions for experimentally type-checking Astro files with TypeScript 7.1 and @astrojs/ts-content-mapper.

• #18086 795a7e4 Thanks @​ump45nose! - Fix double-escaped ampersands in Markdown image alt and title attributes. The __ASTRO_IMAGE_ round-trip now decodes the numeric (&) and named (&) character references the Markdown processors emit, so an & in an alt or title is escaped exactly once in the final HTML instead of twice.

• #18074 0429805 Thanks @​SurefireStudios! - Fix three error names that did not match their documented reference. MissingLocale, MissingIndexForInternationalization and NoManifestAvailable reported names ending in Error in the dev overlay, while their error reference pages are published under the unsuffixed names, so the name shown to users could not be found in the docs.

• #18007 2245837 Thanks @​L4XB! - Fixes the dev server re-evaluating the whole server module graph on every request. The astro:head-metadata plugin invalidated its component metadata virtual module from its own transform hook, so each evaluation of that module scheduled the next one. Adapters that run requests outside Vite's module runner, such as @astrojs/cloudflare, paid for a full re-evaluation of the server graph on every request for the lifetime of the process.

• #18096 43657c4 Thanks @​matthewp! - Fixes domain-based i18n routing to respect security.allowedDomains when selecting a locale from request host headers

• #18043 8a53a8b Thanks @​astro-factory! - Fixes image.responsiveStyles emitting invalid object-position CSS values for same-axis keyword pairs (top bottom, left right, etc.)

• #18029 c08252d Thanks @​matthewp! - Runs astro dev and astro preview in the foreground when an AI agent is detected on Windows, allowing the agent to manage the process lifetime. Pass --background explicitly to request an Astro-managed background process. Agent-inferred backgrounding remains enabled on other platforms.

• Updated dependencies [3fd16ee, 8358d59]:

  • @​astrojs/markdown-satteri@​0.4.2

Commits

• c2e0164 [ci] release (#18113)
• 2b8b2e8 feat: add render component (#17736)
• 790c6f7 [ci] release (#18035)
• 9d17bf1 Update dependency obug to v3 (#18100)
• 43657c4 Fix i18n domain host validation (#18096)
• 00393ff Update dependency vitest [SECURITY] (#18026)
• 40896ac fix(incremental): resolve asset placeholders in modules or compiled CSS (#18063)
• 0429805 fix(errors): align three error names with their documented reference (#18074)
• 3eab954 [ci] format
• 795a7e4 Fix double-escaped ampersands in Markdown image alt and title attributes (#18...
• Additional commits viewable in compare view

Updates puppeteer-core from 25.11.0 to 25.12.0

Release notes

Sourced from puppeteer-core's releases.

puppeteer-core: v25.12.0

25.12.0 (2026-09-23)

🎉 Features

• roll to Chrome 154.0.8037.57 (#15484) (00eec77)
• roll to Firefox 156.0 (#15464) (abdc078)

🛠️ Fixes

• launcher: clean temporary profiles on process exit (#15441) (b30d91c)
• release the mouse button when a drag or drop fails (#15231) (469621f)
• return the shadow host for a text node in a shadow root in SerializedAXNode.elementHandle (#15451) (101c7d5)
• roll to Chrome 153.0.8010.47 (#15465) (1ce3a9a)
• roll to Chrome 153.0.8010.52 (#15470) (257a6a1)
• roll to Firefox 156.0.1 (#15483) (73d8fec)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.2.2 to 3.2.3

Commits

• 15684eb chore: release main (#15458)
• 73d8fec fix: roll to Firefox 156.0.1 (#15483)
• 00eec77 feat: roll to Chrome 154.0.8037.57 (#15484)
• 17b5351 test: better loggin around failed tests (#15467)
• 5cf7e20 test: fix Chrome Canary expectations (#15473)
• 8c78a1a test: update canary expectations for webmcp tests (#15471)
• 257a6a1 fix: roll to Chrome 153.0.8010.52 (#15470)
• b30d91c fix(launcher): clean temporary profiles on process exit (#15441)
• abdc078 feat: roll to Firefox 156.0 (#15464)
• 1ce3a9a fix: roll to Chrome 153.0.8010.47 (#15465)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cloudflare-workers-and-pages]

Deploying freshman with    Cloudflare Pages

Latest commit:	13da057
Status:	✅  Deploy successful!
Preview URL:	https://10279404.freshman-1i8.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-dev.freshman-1i8.pages.dev

View logs

[greptile-apps]

PR author is in the excluded authors list.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 5bd75469-7052-42c4-9cd0-7a3d810b7ea5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}