Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates - #67

Merged
blamas merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-083a44e101
Sep 21, 2026
Merged

chore(deps): bump the minor-and-patch group across 1 directory with 9 updates#67
blamas merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-083a44e101

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 9 updates in the / directory:

Package From To
@astrojs/sitemap 3.7.3 3.7.4
astro 7.2.9 7.3.2
svelte 5.56.10 5.57.0
@biomejs/biome 2.5.11 2.5.13
@cloudflare/workers-types 5.20260828.1 5.20260911.1
@playwright/test 1.62.1 1.63.0
@types/node 26.4.0 26.5.1
knip 6.32.3 6.35.1
wrangler 4.127.0 4.131.0

Updates @astrojs/sitemap from 3.7.3 to 3.7.4

Release notes

Sourced from @​astrojs/sitemap's releases.

@​astrojs/sitemap@​3.7.4

Patch Changes

  • #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"
Changelog

Sourced from @​astrojs/sitemap's changelog.

3.7.4

Patch Changes

  • #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"
Commits

Updates astro from 7.2.9 to 7.3.2

Release notes

Sourced from astro's releases.

astro@7.3.2

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

  • #17931 c1a6a89 Thanks @​astro-factory! - Fixes the dev toolbar returning a 504 "Outdated Optimize Dep" error when a workspace-linked package imports a dependency that Vite's initial scan did not discover

  • #17908 42e9188 Thanks @​astro-factory! - Fixes i18n fallback routing replacing the first substring match instead of the actual locale segment, which mangled paths like /energy/en/about into /esergy/en/about

  • #17936 4b92ddc Thanks @​astro-factory! - Fixes sessions breaking in dev mode with the Cloudflare adapter when middleware is present

  • Updated dependencies [a548223]:

    • @​astrojs/markdown-satteri@​0.4.1

astro@7.3.1

Patch Changes

astro@7.3.0

Minor Changes

  • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

    Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { LocalImageService } from 'astro';
const service: LocalImageService = {
// ...
async transform(inputBuffer, transform, imageConfig, logger) {
logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
return { data: inputBuffer, format: 'png' };
},
};

    Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

    Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { CacheProvider } from 'astro';
const provider: CacheProvider = {

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.2

Patch Changes

  • #17896 a548223 Thanks @​matthewp! - Fixes <script>/<style> rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a <script>/<style> child (e.g. <script>{value}</script>) is now escaped like any other element's content instead of being rendered raw. Use set:html to explicitly opt a dynamic value back into raw rendering.

  • #17931 c1a6a89 Thanks @​astro-factory! - Fixes the dev toolbar returning a 504 "Outdated Optimize Dep" error when a workspace-linked package imports a dependency that Vite's initial scan did not discover

  • #17908 42e9188 Thanks @​astro-factory! - Fixes i18n fallback routing replacing the first substring match instead of the actual locale segment, which mangled paths like /energy/en/about into /esergy/en/about

  • #17936 4b92ddc Thanks @​astro-factory! - Fixes sessions breaking in dev mode with the Cloudflare adapter when middleware is present

  • Updated dependencies [a548223]:

    • @​astrojs/markdown-satteri@​0.4.1

7.3.1

Patch Changes

7.3.0

Minor Changes

  • #17767 ce7c91f Thanks @​astro-factory! - Adds --ignore-lock flag to astro preview, allowing multiple preview servers to run simultaneously on different ports. This is useful for E2E testing workflows (e.g., Playwright) that need to run several preview servers at once.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds a logger parameter to image services hooks

    Custom image services now receive Astro's runtime logger as an extra argument. Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    import type { LocalImageService } from 'astro';
const service: LocalImageService = {
// ...
async transform(inputBuffer, transform, imageConfig, logger) {
logger.warn(Could not optimize &quot;${transform.src}&quot;. Passing it through unchanged.);
return { data: inputBuffer, format: 'png' };
},
};

    Astro's built-in Sharp service now uses this logger for the warnings it emits when it encounters an unexpected or unsupported source format.

  • #17818 c0b6581 Thanks @​florian-lefebvre! - Adds logger to the context object passed to cache providers

    Custom cache providers now receive Astro's runtime logger on the context passed to onRequest(). Messages logged with it are routed through the destination configured in logger and respect your log level, instead of being written straight to the console:

    

    • 






... (truncated)





Commits






Updates svelte from 5.56.10 to 5.57.0



Release notes

Sourced from svelte's releases.




svelte@5.57.0


Minor Changes


    

  • 

    feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)
    

    • 

  • 

    feat: add has function to createContext (#18472)
    

    • 

  • 

    feat: support defaultValue on <select> (#18591)
    

    • 

  • 

    feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)
    

    • 



Patch Changes


    

  • 

    fix: block template store subscriptions on the promise that assigns the store (#18582)
    

    • 

  • 

    fix: route $derived teardown errors through invoke_error_boundary (#18486)
    

    • 

  • 

    fix: track SvelteDate snapshots in reactions (#18700)
    

    • 

  • 

    fix: remove <svelte:head> anchors on unmount (#18697)
    

    • 

  • 

    fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)
    

    • 

  • 

    perf: reuse the cached value in the <option>/<select> value guard (#18713)
    

    • 

  • 

    fix: prevent malformed AST output for <select> with static value attribute (#18449)
    

    • 

  • 

    fix: apply ownership mutation ignores to binding assignments (#18718)
    

    • 

  • 

    fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)
    

    • 

  • 

    fix: preserve whitespace after inline elements when printing (#18685)
    

    • 

  • 

    perf: fold SSR block-open markers into the branch's first push (#18712)
    

    • 

  • 

    fix: run onDestroy callbacks when a server render throws (#18585)
    

    • 

  • 

    fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)
    

    • 

  • 

    fix: never apply class hash to elements inside <svelte:head> (#18160)
    

    • 

  • 

    fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)
    

    • 

  • 

    fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)
    

    • 

  • 

    perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)
    

    • 

  • 

    fix: distinct memoizer on style/class directives (#18466)
    

    • 

  • 

    fix: measure nested transitions before applying their starting styles (#18647)
    

    • 






... (truncated)





Changelog

Sourced from svelte's changelog.




5.57.0


Minor Changes


    

  • 

    feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)
    

    • 

  • 

    feat: add has function to createContext (#18472)
    

    • 

  • 

    feat: support defaultValue on <select> (#18591)
    

    • 

  • 

    feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)
    

    • 



Patch Changes


    

  • 

    fix: block template store subscriptions on the promise that assigns the store (#18582)
    

    • 

  • 

    fix: route $derived teardown errors through invoke_error_boundary (#18486)
    

    • 

  • 

    fix: track SvelteDate snapshots in reactions (#18700)
    

    • 

  • 

    fix: remove <svelte:head> anchors on unmount (#18697)
    

    • 

  • 

    fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)
    

    • 

  • 

    perf: reuse the cached value in the <option>/<select> value guard (#18713)
    

    • 

  • 

    fix: prevent malformed AST output for <select> with static value attribute (#18449)
    

    • 

  • 

    fix: apply ownership mutation ignores to binding assignments (#18718)
    

    • 

  • 

    fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)
    

    • 

  • 

    fix: preserve whitespace after inline elements when printing (#18685)
    

    • 

  • 

    perf: fold SSR block-open markers into the branch's first push (#18712)
    

    • 

  • 

    fix: run onDestroy callbacks when a server render throws (#18585)
    

    • 

  • 

    fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)
    

    • 

  • 

    fix: never apply class hash to elements inside <svelte:head> (#18160)
    

    • 

  • 

    fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)
    

    • 

  • 

    fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)
    

    • 

  • 

    perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)
    

    • 

  • 

    fix: distinct memoizer on style/class directives (#18466)
    

    • 






... (truncated)





Commits

    

  • 7bc0a70 Version Packages (#18682)
    • 

  • 6374a2a chore: move @types/trusted-types to devDependencies (#18730)
    • 

  • 4ae5eb3 feat: add has function to createContext (#18472)
    • 

  • 5034b59 chore: bump playwright (#18729)
    • 

  • 74197cc feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)
    • 

  • edbe11e fix: properly apply static textarea value attribute during CSR (#18727)
    • 

  • 05b6916 fix: omit bind:focused from SSR output (#18724)
    • 

  • 7c6f36a fix: keep boolean attributes with an empty string value when rendering attrib...
    • 

  • 2e8b57b fix: render selected options for \<select multiple> with an array value ...
    • 

  • 864de81 fix: keep the current selection of a \<select> when its defaultValue is ap...
    • 

  • Additional commits viewable in compare view
    • 







Updates @biomejs/biome from 2.5.11 to 2.5.13



Release notes

Sourced from @​biomejs/biome's releases.




Biome CLI v2.5.13


2.5.13


Patch Changes


    

  • 

    #11379 07a0073 Thanks @​Netail! - Added the nursery rule useLayeredStyles, which enforces that style rules are defined within a cascade layer and import rules to import its styles into a cascade layer.
    

    /* Invalid */
@import 'foo.css';
.my-style {
color: red;
}
/* Valid */
@​import 'foo.css' layer(base);
@​layer base {
.my-style {
color: red;
}
}
    

    • 

  • 

    #11667 e997900 Thanks @​devtechedge! - Added the nursery rule useBetterDomTraversing, which prefers .firstChild, .firstElementChild, .closest(), and merged .querySelector() calls over positional DOM traversal.
    

    element.childNodes[0];
element.children[0];
element.parentElement.parentElement;
element.querySelector("a").querySelector("b");
    

    • 

  • 

    #11620 20e513a Thanks @​jakeleventhal! - Fixed #11610, #11611, #11612, #11615, and #11616: Biome no longer fully infers an imported generic declaration just to apply its type arguments, restoring type-aware lint performance for large libraries such as Zod. This improves useRegexpExec, noFloatingPromises, noMisusedPromises, useNullishCoalescing, and noUnsafePlusOperands.
    

    • 

  • 

    #11657 e322040 Thanks @​ematipico! - Fixed #7495: noUselessConstructor now ignores TypeScript constructors that forward at least one argument to super, preserving constructors that narrow the subclass's accepted parameter types. The exemption also applies when the parent and child signatures are identical; JavaScript and zero-argument forwarding behavior are unchanged.
    

    • 

  • 

    #11670 4969ee1 Thanks @​ematipico! - Fixed #7076: useAriaPropsForRole and useFocusableInteractive no longer report non-focusable elements with role="separator". A separator with an explicit tabIndex or tabindex still requires aria-valuenow.
    

    • 

  • 

    #11627 23aad6d Thanks @​ematipico! - Fixed #6571 so Grit plugins can capture and inspect multiple named import specifiers.
    

    • 

  • 

    #11631 00dbd3a Thanks @​ematipico! - Reduced unnecessary type inference when type-aware lint rules inspect members of namespace imports from libraries such as Zod. Fixed type inference so blanket re-exports do not expose default exports.
    

    • 

  • 

    #11628 a2f8ff7 Thanks @​dyc3! - Added the nursery rule noXorAsExponentiation, which reports the bitwise XOR operator ^ between two decimal integer literals, where the exponentiation operator ** was likely intended.
    

    const kibibyte = 2 ^ 10; // 8, not 1024
    

    • 






... (truncated)





Changelog

Sourced from @​biomejs/biome's changelog.




2.5.13


Patch Changes






... (truncated)





Commits






Updates @cloudflare/workers-types from 5.20260828.1 to 5.20260911.1



Commits






Updates @playwright/test from 1.62.1 to 1.63.0



Release notes

Sourced from @​playwright/test's releases.




v1.63.0


🔒 Test locks


Tests that access a shared resource — an external service, a global account setting — can now declare a named lock.
Tests that share a lock name never run concurrently, across files, workers and projects, while
everything else keeps running in parallel:


test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});


A test can hold multiple locks, and test.describe() accepts a lock for the whole group.
Learn more about test locks.


🪟 Locate across frames


page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the
subtree, so you no longer need to locate the iframe first:


// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();


The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it
matches elements in several frames.


👁️ Visible-only locators


New locator.visible() returns a locator that matches only visible elements. It is the recommended
replacement for the :visible CSS pseudo-class:


await page.locator('button').visible().click();


🧾 Step params and subtitles


Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments,
and test.step() accepts subtitle and params options for your own steps:


await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });


Reporters receive them via testStep.subtitle and testStep.params. For Playwright API





... (truncated)





Commits

    

  • 1b025d7 chore: mark v1.63.0 (#42569)
    • 

  • 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
    • 

  • 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
    • 

  • e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
    • 

  • 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
    • 

  • 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
    • 

  • 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
    • 

  • 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
    • 

  • 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
    • 

  • bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
    • 

  • Additional commits viewable in compare view
    • 







Updates @types/node from 26.4.0 to 26.5.1



Commits






Updates knip from 6.32.3 to 6.35.1



Release notes

Sourced from knip's releases.




Release 6.35.1


    

  • Exit with code 2 when a plugin config file fails to load (#1947) (37b26426694380ef70ee45f63358faf63355a58d) - thanks @​WooWan!
    • 

  • Fix sponsorship income calculations (0d9cf344b8cc0104c06d11e2c78f3f01b1df548b)
    • 

  • Update sponsors page (2659063d87f558b4fc18369a4b143849eaa7543e)
    • 

  • Fix npm alias attribution under Yarn PnP (resolve #2024) (7be11aa4fd50b8a3d6e276f03efb450d6d142c26)
    • 



Release 6.35.0


    

  • fix: track pnpm workspace override catalogs (#1999) (c6497a18c6534ee914b27bb459d7778a7b93a914) - thanks @​gioboa!
    • 

  • fix: track spreads under string-literal keys (#2003) (9ce68ed42a3c22fa4f4711b06d6d80a0e7f2ba13) - thanks @​gioboa!
    • 

  • fix: don't flag a tag that suppresses member issues (#2004) (2e7d498cf1e53f0bbad5e16c335c5e1417432ffd) - thanks @​devYRPauli!
    • 

  • fix: resolve Nuxt Virtual Component Imports (#2006) (a21f972ed68aaa6d145dd883b4ce4d68c71e6afb) - thanks @​gioboa!
    • 

  • Update raw transfer problems doc with low RAM machines (#2014) (31789404cca5a8ba119b4ae97b959b7e2c595345) - thanks @​s-h-a-d-o-w!
    • 

  • fix: recognize pnpm stage as built-in (#2015) (aaab35a948b458e3031989c13c13d099fdd6f229) - thanks @​gioboa!
    • 

  • fix: support object-form Rstest test environments (#2010) (6c27aab20de5b6d31d71513b016548e74fc494ba) - thanks @​gioboa!
    • 

  • fix: honor explicit entry export analysis (#2012) (a092e4075a6a37107c0da05c8e59343d5a7c8fab) - thanks @​gioboa!
    • 

  • Document that pnpm.overrides is read from the root manifest only (f69a7f6d4fa2c68f76a9ba91fb876c5963a9e978)
    • 

  • Compile source on demand (resolve #1906) (3662c9545e8bb980a5503fdea48ecc6f7e2ad3b3)
    • 

  • Update dependency bun to v1.4.2 (#2019) (90b384da25203c07acb9303336622f794d77b575) - thanks @​renovate[bot]!
    • 

  • feat: support configuring preprocessors in knip.json (#1920) (16d03f75ae752cb419684868ff14d89b01e84e62) - thanks @​bytedoe!
    • 

  • Fix Windows paths in cache persistence and test fixtures (a4c7a93a81e04afde09d7977298b397cee9a68c2)
    • 

  • fix: add a fallback to seach for lock file at cwd if its missing at the root level (#2020) (f66c9f1631347f0256f2276748de89b0d8448017) - thanks @​JayaKrishnaNamburu!
    • 

  • fix: ignore raw Vite import globs (#2017) (75d56286b41ba3e3b4aad53b603736ec357fac75) - thanks @​gioboa!
    • 

  • Edit docs re. cycles issue type/reporter (resolve #2021) (f1e690b5a4d8f2b3d13388aa3a95216b9691becb)
    • 

  • Update dependencies (e2bd3fcc2274b52d35adf0eaec2c555d74873433)
    • 

  • Resolve Vite public script entries (resolve #2023) (1cc979b7e37a4dcde5e8e9e75a8d79cf663c606e)
    • 

  • Add mise plugin (resolve #2001) (db6d8919af4e870432cdda205e6271a166c84645)
    • 

  • Add editor severity setting for diagnostics (resolve #1955) (4afbbcf8b16454a1d1c201d50cf8e8bd28d2cb91)
    • 



Release 6.34.0


    

  • fix: report types used only in private parameters (resolve #1950) (3c785f55ce608d7921e37e41dd5fc61b623e5da2)
    • 

  • 💡 Add support for node:fs/promises glob (#1977) (44faf08e7f56ce695d1541a6c337b76bea0328d1) - thanks @​DreamLongYT!
    • 

  • Respect JSDoc tags on URL dependencies (resolve #1943) (f93ad0997e1b8fc644f6487df52803cba6f7a9ad)
    • 

  • Make prop access consistent while at it (1c90b49b1b196795df6dcf9d7e85bc1b1399667a)
    • 

  • Set an explicit Bun test timeout (964085dfab0165db2658e51cb787e2301886f9ce)
    • 

  • Add note re. one scoped PRs (8f9490a581874e0fd7246e60223b20938bf4ebb1)
    • 

  • fix(cli): validate numeric options instead of passing NaN through (#1975) (ab90e2428a16ff50fe5323ce73172f6f1efb9730) - thanks @​devYRPauli!
    • 

  • fix: compile files with workspace-scoped compilers (#1997) (462ae45df33a5ee2e2185f3b2db756b13dfbadd3) - thanks @​gioboa!
    • 

  • Resolve Nuxt #shared imports from the shared directory (#1991) (cc470611042b01761491c21f6987549db4c11df8) - thanks @​DreamLongYT!
    • 

  • Update dependencies (c4e0f082fbd7fb508a411c7dd0a782ea4556527c)
    • 

  • Declare webpack directly instead of through @types/webpack (96ff2df58dd1d229d077212e1cd80f10889650ca)
    • 

  • Assert counters in targeted regression tests (f0cf11dfcfbdeac053bba0dd12212356a67f6464)
    • 



Release 6.33.0


    

  • Support package manifest resolution under Yarn PnP (#1946) (a82efb62b290e004bdabee40bcb337baf3701a1b) - thanks @​WooWan!
    • 

  • Resolve oxlint jsPlugins from .oxlintrc.jsonc (#1973) (d055023182789555a574eaefde80dac997190437) - thanks @​DreierF!
    • 

  • Update dependency bun to v1.4.0 (#1964) (937ab38ad514a00edafecff4ca04603b015bf921) - thanks @​renovate[bot]!
    • 

  • Expose defineConfig on a ./config entrypoint (#1960) (17f7a6051d9781860f248cc2a745dbe837713cd9) - thanks @​theRizwan!
    • 

  • Preserve all environment variables in exec.ts (#1979) (c0a9ecf8d1c0cdd7789c1e1bea893706c060239d) - thanks @​DreamLongYT!
    • 

  • Add support for TypeScript content mappers (#1978) (db67f9bd8cebf0ea3c298690d462c154827aa462) - thanks @​remcohaszing!
    • 

  • fix(vitest): resolve array entries and root-relative setup dependencies (#1982) (0ecf48538c339437e6f9dfe9a6013d307783cbd3) - thanks @​DreamLongYT!
    • 






... (truncated)





Commits






Updates wrangler from 4.127.0 to 4.131.0



Release notes

Sourced from wrangler's releases.




wrangler@4.131.0


Minor Changes


    

  • 

    #15480 36aed7f Thanks @​skepticfx! - Add Durable Object-managed Containers to top-level container configuration
    

    Wrangler now accepts scheduling_policy: "durable_object" in the top-level containers array and creates its namespace-backed application after the Worker upload resolves the Durable Object namespace ID. The namespace ID is also the application ID, so repeated deploys idempotently ensure the same application without name-based lookup, modification, or a Containers rollout.
    

    Durable Object-managed entries accept class_name, scheduling_policy, an optional name, and an optional named images map. Scheduler-only fields are rejected. Each image provides either a local dockerfile or a digest-pinned managed-registry image. Wrangler builds or resolves each image, waits while Cloudflare prepares it for the Containers runtime, and uploads the resulting references with the Worker version for access through Description has been truncated

    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          chore(deps): bump the minor-and-patch group across 1 directory with 9…
        

          
                        
      


      

        

    
    
    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          8282312
        
      

    

  

    

      
… updates

Bumps the minor-and-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/sitemap](https://github.com/withastro/astro/tree/HEAD/packages/integrations/sitemap) | `3.7.3` | `3.7.4` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.9` | `7.3.2` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.10` | `5.57.0` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.11` | `2.5.13` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `5.20260828.1` | `5.20260911.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.0` | `26.5.1` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.3` | `6.35.1` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.127.0` | `4.131.0` |



Updates `@astrojs/sitemap` from 3.7.3 to 3.7.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/sitemap/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/sitemap@3.7.4/packages/integrations/sitemap)

Updates `astro` from 7.2.9 to 7.3.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.2/packages/astro)

Updates `svelte` from 5.56.10 to 5.57.0
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.0/packages/svelte)

Updates `@biomejs/biome` from 2.5.11 to 2.5.13
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.13/packages/@biomejs/biome)

Updates `@cloudflare/workers-types` from 5.20260828.1 to 5.20260911.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `@playwright/test` from 1.62.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.62.1...v1.63.0)

Updates `@types/node` from 26.4.0 to 26.5.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `knip` from 6.32.3 to 6.35.1
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.35.1/packages/knip)

Updates `wrangler` from 4.127.0 to 4.131.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.131.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@astrojs/sitemap"
  dependency-version: 3.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: astro
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: svelte
  dependency-version: 5.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260911.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: knip
  dependency-version: 6.35.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: wrangler
  dependency-version: 4.131.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      
  dependencies

  Pull requests that update a dependency file

      
  javascript

  Pull requests that update javascript code

  labels


      Sep 18, 2026

    

  



  

  

    
  


  

      


    @dependabot
dependabot
Bot


    mentioned this pull request
    
      Sep 18, 2026
    





  


  

      
   Closed

  







  




  
 
  

    
  

  


        
    

        

              @blamas


        

      

              blamas



            merged commit 910d179
          into

          
  
    main
  


        Sep 21, 2026

          

            8 checks passed
          

      

    


      

        
  
          
  
    
    


  
      

  







  

  
  

  
    

        

              @blamas


        

      

        

              blamas


          
    deleted the
    
      
        dependabot/npm_and_yarn/minor-and-patch-083a44e101
    
    branch

          September 21, 2026 16:39          
        

      

    














  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










    
        

  

    
    

    

  

    Reviewers
  


    

    No reviews






  
      

  


      
  

    Assignees
  



        


    No one assigned







  
        


  


  

    Labels
  



    

      
    dependencies

  Pull requests that update a dependency file
  
    javascript

  Pull requests that update javascript code








  
        

  

    

        

    Projects
  


        




    None yet




  



  
        


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            

Successfully merging this pull request may close these issues.





  
  



      
    

  




      

  
  
        

  

    

      1 participant
    

    

        
          @blamas