Skip to content

Bump astro from 7.2.1 to 7.3.2 - #51

Merged
takashiuesaka merged 4 commits into
mainfrom
dependabot/npm_and_yarn/astro-7.3.2
Sep 12, 2026
Merged

takashiuesaka merged 4 commits into
mainfrom
dependabot/npm_and_yarn/astro-7.3.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps astro from 7.2.1 to 7.3.2.

Release notes

Sourced from astro's releases.

astro@7.3.2

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

  • #17931 c1a6a89 Thanks @​astro-factory! - Fixes the dev toolbar returning a 504 "Outdated Optimize Dep" error when a workspace-linked package imports a dependency that Vite's initial scan did not discover

  • #17908 42e9188 Thanks @​astro-factory! - Fixes i18n fallback routing replacing the first substring match instead of the actual locale segment, which mangled paths like /energy/en/about into /esergy/en/about

  • #17936 4b92ddc Thanks @​astro-factory! - Fixes sessions breaking in dev mode with the Cloudflare adapter when middleware is present

  • Updated dependencies [a548223]:

    • @​astrojs/markdown-satteri@​0.4.1

astro@7.3.1

Patch Changes

astro@7.3.0

Minor Changes

  • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

    Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { LocalImageService } from 'astro';
    const service: LocalImageService = {
    // ...
    async transform(inputBuffer, transform, imageConfig, logger) {
    logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
    return { data: inputBuffer, format: 'png' };
    },
    };

    Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

    Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { CacheProvider } from 'astro';
    const provider: CacheProvider = {

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.2

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

  • #17931 c1a6a89 Thanks @​astro-factory! - Fixes the dev toolbar returning a 504 "Outdated Optimize Dep" error when a workspace-linked package imports a dependency that Vite's initial scan did not discover

  • #17908 42e9188 Thanks @​astro-factory! - Fixes i18n fallback routing replacing the first substring match instead of the actual locale segment, which mangled paths like /energy/en/about into /esergy/en/about

  • #17936 4b92ddc Thanks @​astro-factory! - Fixes sessions breaking in dev mode with the Cloudflare adapter when middleware is present

  • Updated dependencies [a548223]:

    • @​astrojs/markdown-satteri@​0.4.1

7.3.1

Patch Changes

7.3.0

Minor Changes

  • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

    Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { LocalImageService } from 'astro';
    const service: LocalImageService = {
    // ...
    async transform(inputBuffer, transform, imageConfig, logger) {
    logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
    return { data: inputBuffer, format: 'png' };
    },
    };

    Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

    Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 9, 2026
Copilot AI lite review requested due to automatic review settings September 9, 2026 09:20
@dependabot
dependabot Bot requested a review from takashiuesaka as a code owner September 9, 2026 09:20
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 9, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The Astro bump introduces a peer-dependency mismatch with @astrojs/markdown-remark that should be resolved (and lockfile regenerated) before merging.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR updates the site’s Astro dependency to keep the handbook’s build toolchain current and aligned with upstream fixes in the Astro 7.3.x series.

Changes:

  • Bump astro from ^7.2.1 to ^7.3.2 in package.json.
  • Update package-lock.json to reflect the new Astro version and its transitive dependency graph changes.
File summaries
File Description
package.json Updates the Astro version requested by the project.
package-lock.json Updates the resolved dependency tree for the Astro bump (and related transitive updates).
Review details
  • Files reviewed: 1/2 changed files
  • Comments generated: 1
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread package.json Outdated
Copilot AI review requested due to automatic review settings September 9, 2026 11:12
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/astro-7.3.2 branch from 46133bc to 7fc1beb Compare September 9, 2026 11:12

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Astro 7.3.2’s peer/engine requirements are no longer aligned with the current top-level dependencies and should be reconciled to avoid install/build warnings or incompatibilities.

Review details

Suppressed comments (1)

package.json:18

  • Astro 7.3.2 raises its peer requirement for @astrojs/markdown-remark (now ^7.3.0 in package-lock.json) and pulls in undici which requires Node >=22.19.0; with the current package.json, installs may produce peer/engine warnings and the lock still pins @astrojs/markdown-remark 7.2.2. Consider bumping @astrojs/markdown-remark (and sharp to match Astro’s optional dep) and declaring an engines.node floor to reflect the new transitive requirement.
    "@astrojs/markdown-remark": "^7.2.2",
    "@astrojs/starlight": "^0.41.7",
    "@mermaid-js/layout-elk": "^0.2.2",
    "astro": "^7.3.2",
    "astro-mermaid": "^2.1.0",
  • Files reviewed: 1/2 changed files
  • Comments generated: 0 new
  • Review effort level: Lite

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 7.2.1 to 7.3.2.
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.2/packages/astro)

---
updated-dependencies:
- dependency-name: astro
  dependency-version: 7.3.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI review requested due to automatic review settings September 12, 2026 02:13
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/astro-7.3.2 branch from 7fc1beb to d3bc67f Compare September 12, 2026 02:13

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Unresolved dependency peer-range and Node.js engine compatibility issues remain.

Review details

Suppressed comments (1)

package.json:17

  • astro@7.3.2 declares @astrojs/markdown-remark as an optional peer dependency at ^7.3.0, but the lockfile still resolves the direct dependency to 7.2.2 (package-lock.json:226-228). Because astro.config.mjs imports this integration, the installed tree has an unsatisfied peer and npm can reject the install; regenerate the lockfile so a 7.3.x version is selected (the existing ^7.2.2 manifest range already permits it).
    "astro": "^7.3.2",
  • Files reviewed: 1/2 changed files
  • Comments generated: 0 new
  • Review effort level: Lite

Update the direct markdown-remark dependency to 7.3.0 and regenerate its lock entries while preserving MDX's nested 7.2.2 dependency.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings September 12, 2026 02:33

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

undici 8.10.2 requires Node.js >=22.19.0, conflicting with the repository’s stated Node 22.12+ support.

Get a fresh assessment by requesting another Copilot review.

Review details
  • Files reviewed: 1/2 changed files
  • Comments generated: 0 new
  • Review effort level: Lite

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings September 12, 2026 03:53

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Pin CI Node.js to 22.19.0 or enable check-latest in both workflows.

Review details

Suppressed comments (2)

.github/workflows/feature-build-only.yml:34

  • ここで engines とドキュメントが Node.js 22.19.0 以上を要求するようになりましたが、node-version: 22 は setup-node の既定動作ではランナーにキャッシュされた任意の 22.x を選ぶため、22.19.0 未満で npm ci/ビルドが実行される可能性があります。最低要件をCIでも保証するため、22.19.0を明示するか check-latest: true を設定してください。
          # 間接依存の undici に合わせて Node 22.19.0 以上が必要。22 系の最新版を使う。
          node-version: 22

.github/workflows/main-build-and-publish.yml:30

  • ここで engines とドキュメントが Node.js 22.19.0 以上を要求するようになりましたが、node-version: 22 は setup-node の既定動作ではランナーにキャッシュされた任意の 22.x を選ぶため、22.19.0 未満で npm ci/ビルドが実行される可能性があります。最低要件をCIでも保証するため、22.19.0を明示するか check-latest: true を設定してください。
          # 間接依存の undici に合わせて Node 22.19.0 以上が必要。22 系の最新版を使う。
          node-version: 22
  • Files reviewed: 4/5 changed files
  • Comments generated: 0 new
  • Review effort level: Lite

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings September 12, 2026 04:05

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No unresolved review issues were identified.

Review details
  • Files reviewed: 4/5 changed files
  • Comments generated: 0 new
  • Review effort level: Lite

@takashiuesaka
takashiuesaka merged commit 9ebb835 into main Sep 12, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/astro-7.3.2 branch September 12, 2026 04:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants