Skip to content

deps: bump the minor-patch group in /docs with 2 updates - #197

Merged
DeDuva merged 1 commit into
devfrom
dependabot/npm_and_yarn/docs/minor-patch-7db130fa1a
Nov 2, 2026
Merged

DeDuva merged 1 commit into
devfrom
dependabot/npm_and_yarn/docs/minor-patch-7db130fa1a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-patch group in /docs with 2 updates: @astrojs/markdown-remark and unist-util-visit.

Updates @astrojs/markdown-remark from 7.3.4 to 7.3.5

Release notes

Sourced from @​astrojs/markdown-remark's releases.

@​astrojs/markdown-remark@​7.3.5

Patch Changes

  • edfbf4a Thanks @​matthewp! - Fixes Prism code blocks for languages Prism doesn't support, such as vue or svelte. Their code is now displayed as plain text instead of being rendered as HTML. Also correctly escapes the code block language in the generated class and data-language attributes.
  • Updated dependencies [edfbf4a]:
    • @​astrojs/prism@​4.1.2
Changelog

Sourced from @​astrojs/markdown-remark's changelog.

7.3.5

Patch Changes

  • edfbf4a Thanks @​matthewp! - Fixes Prism code blocks for languages Prism doesn't support, such as vue or svelte. Their code is now displayed as plain text instead of being rendered as HTML. Also correctly escapes the code block language in the generated class and data-language attributes.
  • Updated dependencies [edfbf4a]:
    • @​astrojs/prism@​4.1.2
Commits

Updates unist-util-visit from 5.1.0 to 5.2.0

Release notes

Sourced from unist-util-visit's releases.

5.2.0

Add

  • c1ed449 Add support for exit visitors

Performance

  • f57c39f Fix performance around indexOf

Full Changelog: syntax-tree/unist-util-visit@5.1.0...5.2.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-patch group in /docs with 2 updates: [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) and [unist-util-visit](https://github.com/syntax-tree/unist-util-visit).


Updates `@astrojs/markdown-remark` from 7.3.4 to 7.3.5
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.3.5/packages/markdown/remark)

Updates `unist-util-visit` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/syntax-tree/unist-util-visit/releases)
- [Commits](syntax-tree/unist-util-visit@5.1.0...5.2.0)

---
updated-dependencies:
- dependency-name: "@astrojs/markdown-remark"
  dependency-version: 7.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: unist-util-visit
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates (Dependabot) label Nov 2, 2026

DeDuva commented Nov 2, 2026 •

Copy link
Copy Markdown
Owner

Validated and merging. minor-patch group in /docs, head 12b49a84: @astrojs/markdown-remark 7.3.4 → 7.3.5 (patch) and unist-util-visit 5.1.0 → 5.2.0 (minor).

Scope: docs/package.json + docs/package-lock.json only. Lockfile diff is confined to those two packages and their transitive @astrojs/prism 4.1.1 → 4.1.2 and unist-util-visit-parents 6.0.2 → 6.1.0; every resolved URL stays on registry.npmjs.org and no package name or owner changed.

Local validation in a clean worktree of this head (docs/ is a separate npm project, not a workspace member):

Command Result
npm ci exit 0, 353 packages, tracked files unmodified (git diff --exit-code on docs/package.json + docs/package-lock.json clean)
npm run build exit 0 — Astro build + Pagefind indexed 170 pages
npm audit --package-lock-only 0 vulnerabilities

Release metadata: @astrojs/markdown-remark 7.3.5 is a single patch fix (Prism code blocks for unsupported languages, plus attribute escaping). unist-util-visit 5.2.0 adds exit visitors and fixes an indexOf performance path — additive, no removals, no engine change. Neither is 0.x, so the semver reading is the ordinary one.

One caveat on the CI signal, recorded for the record rather than as a blocker: the green docs-quality tick is not evidence about this change. That job installs only markdownlint-cli2 and cspell with npm install --no-save and then runs markdownlint and cspell — it never installs docs/'s own dependencies and never builds the site. The workflow that does build the docs, Squad Docs — Build & Deploy, is disabled_manually. The local npm ci + npm run build above is the only thing that actually exercised these packages, which is why it was run.

Merging via squash.

@DeDuva
DeDuva merged commit 056df7b into dev Nov 2, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates (Dependabot)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant