Skip to content

chore(deps): bump the npm-deps group with 25 updates - #412

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-deps-e57acb52d1
Closed

chore(deps): bump the npm-deps group with 25 updates#412
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-deps-e57acb52d1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-deps group with 25 updates:

Package From To
@astrojs/mdx 4.3.13 8.0.1
@astrojs/react 4.4.2 6.0.5
@astrojs/rss 4.0.15 4.0.19
@astrojs/sitemap 3.7.0 3.7.4
@lavamoat/preinstall-always-fail 2.1.1 3.0.0
@radix-ui/react-accordion 1.2.12 1.2.20
@radix-ui/react-dialog 1.1.15 1.1.23
@radix-ui/react-slot 1.2.4 1.3.3
@tailwindcss/vite 4.1.18 4.3.3
astro 5.16.15 7.3.2
lottie-react 2.4.1 3.1.2
lucide-react 0.563.0 1.45.0
react 19.2.3 19.3.0
@types/react 19.2.9 19.3.0
react-dom 19.2.3 19.3.0
@types/react-dom 19.2.3 19.3.0
sharp 0.34.5 0.35.4
tailwind-merge 3.4.0 3.7.0
tailwindcss 4.1.18 4.3.3
@lavamoat/allow-scripts 3.4.2 5.1.0
@tailwindcss/typography 0.5.19 0.5.20
cspell 9.6.0 10.3.0
prettier 3.8.1 3.9.6
prettier-plugin-astro 0.14.1 1.0.0
prettier-plugin-tailwindcss 0.7.2 0.8.1

Updates @astrojs/mdx from 4.3.13 to 8.0.1

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​8.0.1

Patch Changes

  • Updated dependencies [a548223]:
    • @​astrojs/markdown-satteri@​0.4.1

@​astrojs/mdx@​8.0.0

Major Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Moves MDX file processing to the Markdown processors.

    '@​astrojs/mdx' is still required to add MDX support to your project. However, it now delegates the MDX files processing to Markdown processors.

    What should I do?

    If you haven't explicitly installed a Markdown processor, you don't need to do anything.

    Otherwise, ensure that your configured Markdown processor uses the following version:

    • @astrojs/markdown-satteri 0.4.0 or later if you use satteri()
    • @astrojs/markdown-remark 7.3.0 or later if you use unified()

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes .mdx files still using markdown.processor when extendMarkdownConfig is false. They now use a clean default processor instead; pass mdx({ processor }) to choose one explicitly.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a warning when the deprecated remarkPlugins, rehypePlugins, recmaPlugins and remarkRehype options are ignored because your Markdown processor does not run them. They still apply when your processor is unified(), and were previously dropped silently otherwise.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0

@​astrojs/mdx@​7.0.8

Patch Changes

  • #17757 660991c Thanks @​astro-factory! - Fixes build errors showing wrong file location, missing line:col, and misleading hints when a plugin error (e.g. from MDX) is wrapped by Vite's build error

  • #17766 0762a83 Thanks @​HiDeoo! - Fixes Sätteri processor option types to accept all plugin entries supported by Sätteri v0.10.3.

@​astrojs/mdx@​7.0.7

Patch Changes

@​astrojs/mdx@​7.0.6

Patch Changes

... (truncated)

Changelog

Sourced from @​astrojs/mdx's changelog.

8.0.1

Patch Changes

  • Updated dependencies [a548223]:
    • @​astrojs/markdown-satteri@​0.4.1

8.0.0

Major Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Moves MDX file processing to the Markdown processors.

    '@​astrojs/mdx' is still required to add MDX support to your project. However, it now delegates the MDX files processing to Markdown processors.

    What should I do?

    If you haven't explicitly installed a Markdown processor, you don't need to do anything.

    Otherwise, ensure that your configured Markdown processor uses the following version:

    • @astrojs/markdown-satteri 0.4.0 or later if you use satteri()
    • @astrojs/markdown-remark 7.3.0 or later if you use unified()

Patch Changes

  • #17262 f8e9458 Thanks @​Princesseuh! - Fixes .mdx files still using markdown.processor when extendMarkdownConfig is false. They now use a clean default processor instead; pass mdx({ processor }) to choose one explicitly.

  • #17262 f8e9458 Thanks @​Princesseuh! - Adds a warning when the deprecated remarkPlugins, rehypePlugins, recmaPlugins and remarkRehype options are ignored because your Markdown processor does not run them. They still apply when your processor is unified(), and were previously dropped silently otherwise.

  • Updated dependencies [f8e9458, f8e9458]:

    • @​astrojs/internal-helpers@​0.11.0
    • @​astrojs/markdown-satteri@​0.4.0

7.0.8

Patch Changes

  • #17757 660991c Thanks @​astro-factory! - Fixes build errors showing wrong file location, missing line:col, and misleading hints when a plugin error (e.g. from MDX) is wrapped by Vite's build error

  • #17766 0762a83 Thanks @​HiDeoo! - Fixes Sätteri processor option types to accept all plugin entries supported by Sätteri v0.10.3.

7.0.7

Patch Changes

... (truncated)

Commits

Updates @astrojs/react from 4.4.2 to 6.0.5

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​6.0.5

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

@​astrojs/react@​6.0.4

Patch Changes

  • Updated dependencies [05763a0]:
    • @​astrojs/internal-helpers@​0.10.4

@​astrojs/react@​6.0.3

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3

@​astrojs/react@​6.0.2

Patch Changes

  • Updated dependencies [c895b12]:
    • @​astrojs/internal-helpers@​0.10.2
Changelog

Sourced from @​astrojs/react's changelog.

6.0.5

Patch Changes

  • Updated dependencies [f8e9458]:
    • @​astrojs/internal-helpers@​0.11.0

6.0.4

Patch Changes

  • Updated dependencies [05763a0]:
    • @​astrojs/internal-helpers@​0.10.4

6.0.3

Patch Changes

  • Updated dependencies [8c193f6]:
    • @​astrojs/internal-helpers@​0.10.3

6.0.2

Patch Changes

  • Updated dependencies [c895b12]:
    • @​astrojs/internal-helpers@​0.10.2

6.0.1

Patch Changes

  • Updated dependencies [eb6f97e]:
    • @​astrojs/internal-helpers@​0.10.1

6.0.0

Major Changes

Minor Changes

  • #17093 4585fe5 Thanks @​Princesseuh! - Replaces the import entrypoint of getContainerRenderer()

    A new container-renderer entrypoint exporting getContainerRenderer() has been added to the following integrations: React, Preact, Svelte, SolidJS, Vue, and MDX. This prevents bundlers from trying to bundle unrelated exports from the package root when only the Container API is used.

    If you are using the Container API, update your import statements to use the new entrypoint. The following example updates the getContainerRenderer() import for React:

    

    • 






... (truncated)





Commits






Updates @astrojs/rss from 4.0.15 to 4.0.19



Changelog

Sourced from @​astrojs/rss's changelog.




4.0.19


Patch Changes


    

  • #17209 fbcfa03 Thanks @​matthewp! - Hardens RSS feed generation by escaping the source and enclosure item fields. These fields are now serialized as structured XML values, ensuring that special characters in values like source.title and enclosure.type are always treated as text rather than markup, consistent with how other feed fields are handled.
    • 



4.0.18


Patch Changes



4.0.17


Patch Changes



4.0.16


Patch Changes



4.0.15-beta.4


Patch Changes



4.0.15-beta.3


Patch Changes



4.0.15-beta.2


Patch Changes






... (truncated)





Commits






Updates @astrojs/sitemap from 3.7.0 to 3.7.4



Release notes

Sourced from @​astrojs/sitemap's releases.




@​astrojs/sitemap@​3.7.4


Patch Changes


    

  • #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"
    • 








Changelog

Sourced from @​astrojs/sitemap's changelog.




3.7.4


Patch Changes


    

  • #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"
    • 



3.7.3


Patch Changes


    

  • #16837 783c4a6 Thanks @​jdevalk! - Improves <lastmod> accuracy in the sitemap index. Each <sitemap> entry in sitemap-index.xml is now stamped with the most recent lastmod of the URLs in the child sitemap it points to, instead of repeating a single global date on every entry. When a child sitemap has no per-URL lastmod, the entry falls back to the lastmod option as before. This gives search engines a per-file freshness signal, so they can tell which child sitemaps actually changed without refetching all of them.
    • 



3.7.2


Patch Changes



3.7.1


Patch Changes



3.6.1-beta.3


Patch Changes



3.6.1-beta.2


Patch Changes



3.6.1-alpha.1


Patch Changes



3.6.1-alpha.0





... (truncated)





Commits






Updates @lavamoat/preinstall-always-fail from 2.1.1 to 3.0.0



Release notes

Sourced from @​lavamoat/preinstall-always-fail's releases.




preinstall-always-fail: v3.0.0


3.0.0 (2026-03-20)


⚠ BREAKING CHANGES


    

  • Node.js v18 is no longer supported.
    • 



Bug Fixes


    

  • drop Node.js v18 support across the board (#1886) (1190c9b)
    • 



webpack: v2.3.0


2.3.0 (2026-09-03)


Features


    

  • Add opt-in flag to overwrite policy.json with overrides (#2061) (c4760e6)
    • 

  • webpack: capture importScripts reference for use in runtime despite scuttling (#2070) (e9c0c48)
    • 



Dependencies


    

  • The following workspace dependencies were updated

      

    • dependencies

        

      • lavamoat-core bumped from ^18.0.5 to ^18.0.6
        • 

      

      • 

    

    • 



webpack: v2.2.4


2.2.4 (2026-06-25)


Bug Fixes



Dependencies


    

  • The following workspace dependencies were updated

      

    • dependencies

        

      • @​lavamoat/types bumped from ^1.0.1 to ^1.0.2
        • 

      • lavamoat-core bumped from ^18.0.4 to ^18.0.5
        • 

      

      • 

    

    • 



webpack: v2.2.3


2.2.3 (2026-06-08)


Bug Fixes





... (truncated)





Changelog

Sourced from @​lavamoat/preinstall-always-fail's changelog.




3.0.0 (2026-03-20)


⚠ BREAKING CHANGES


    

  • Node.js v18 is no longer supported.
    • 



Bug Fixes


    

  • drop Node.js v18 support across the board (#1886) (1190c9b)
    • 








Commits






Updates @radix-ui/react-accordion from 1.2.12 to 1.2.20



Changelog

Sourced from @​radix-ui/react-accordion's changelog.




1.2.20


    

  • Reverted breaking changes that caused compatibility issues with React Server Components.
    • 

  • Updated dependencies: @radix-ui/react-collapsible@1.1.20, @radix-ui/react-collection@1.1.15, @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-direction@1.1.4, @radix-ui/react-id@1.1.4, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-controllable-state@1.2.6
    • 



1.2.19


    

  • Updated dependencies: @radix-ui/react-collection@1.1.14, @radix-ui/react-primitive@2.1.9, @radix-ui/react-collapsible@1.1.19
    • 



1.2.18


    

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
    • 

  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-collapsible@1.1.18, @radix-ui/react-collection@1.1.13, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-direction@1.1.3, @radix-ui/react-id@1.1.3, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-controllable-state@1.2.5
    • 



1.2.17


    

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
    • 

  • Updated dependencies: @radix-ui/react-collapsible@1.1.17, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-collection@1.1.12, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-direction@1.1.2, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7
    • 



1.2.16


    

  • Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-collapsible@1.1.16, @radix-ui/react-collection@1.1.12
    • 



1.2.15


    

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-collapsible@1.1.15, @radix-ui/react-collection@1.1.11
    • 



1.2.14


    

  • Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
    • 

  • Updated dependencies: @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-collapsible@1.1.14
    • 



1.2.13


    

  • Added repository.directory to all package.json files
    • 

  • Updated dependencies: @radix-ui/react-collapsible@1.1.13, @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3
    • 








Commits





Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-accordion since your current version.






Updates @radix-ui/react-dialog from 1.1.15 to 1.1.23



Changelog

Sourced from @​radix-ui/react-dialog's changelog.




1.1.23


    

  • Reverted breaking changes that caused compatibility issues with React Server Components.
    • 

  • Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-focus-guards@1.1.6, @radix-ui/react-focus-scope@1.1.16, @radix-ui/react-id@1.1.4, @radix-ui/react-portal@1.1.17, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-slot@1.3.3, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4
    • 



1.1.22


    

  • Updated dependencies: @radix-ui/react-slot@1.3.2, @radix-ui/react-primitive@2.1.9, @radix-ui/react-dismissable-layer@1.1.18, @radix-ui/react-focus-scope@1.1.15, @radix-ui/react-portal@1.1.16
    • 



1.1.21


    

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
    • 

  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-focus-guards@1.1.5, @radix-ui/react-focus-scope@1.1.14, @radix-ui/react-id@1.1.3, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-slot@1.3.1, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3
    • 



1.1.20


    

  • Fixed broken ARIA references in Dialogs where a title or description elements are not rendered.
    • 

  • Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.
    • 

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-layout-effect@1.1.2
    • 



1.1.19


    

  • Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7
    • 



1.1.18


    

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-portal@1.1.13
    • 



1.1.17


    

  • Removed dev-only warnings for dialogs when title and/or description is not rendered.
    • 

  • Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
    • 

  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12
    • 



1.1.16


    

  • Fixed disabled pointer events in closed dialogs
    • 

  • Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken
    • 

  • Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @​dodomorandi for the original PR)
    • 

  • Added repository.directory to all package.json files
    • 

  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3
    • 








Commits





Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-dialog since your current version.






Updates @radix-ui/react-slot from 1.2.4 to 1.3.3



Changelog

Sourced from @​radix-ui/react-slot's changelog.




1.3.2, 1.3.3


    

  • Reverted breaking changes that caused compatibility issues with React Server Components.
    • 



1.3.1


    

  • Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.
    • 

  • Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4
    • 



1.3.0


Added generic type arguments for SlotProps and createSlot


SlotProps and createSlot now accept generic type arguments to specify the type of element a slot should render, as well as its props.


const Slot = createSlot<HTMLButtonElement, MyCustomButtonProps>('Slot');


1.2.5


    

  • Fixed infinite re-render loop in React 19 caused by Slot creating a new ref callback on every render
    • 

  • Added support for nested Slottable via a render prop, so a slotted element can be wrapped while still merging Slot props and refs onto it
    • 

  • Added repository.directory to all package.json files
    • 

  • Improved error messages for invalid slot children
    • 

  • Updated dependencies: @radix-ui/react-compose-refs@1.1.3
    • 








Commits





Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-slot since your current version.






Updates @tailwindcss/vite from 4.1.18 to 4.3.3



Release notes

Sourced from @​tailwindcss/vite's releases.




v4.3.3


Fixed


    

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
    • 

  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
    • 

  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
    • 

  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
    • 

  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
    • 

  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
    • 

  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
    • 

  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
    • 

  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
    • 

  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
    • 

  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
    • 

  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
    • 

  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
    • 

  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
    • 

  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)
    • 



v4.3.2


Fixed


    

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
    • 

  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
    • 

  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
    • 

  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
    • 

  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
    • 

  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
    • 

  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
    • 

  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
    • 

  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
    • 

  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
    • 

  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
    • 

  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
    • 

  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)
    • 



v4.3.1


Added


    

  • Add --silent option to suppress output in @tailwindcss/cli (#20100)
    • 



Fixed


    

  • Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#20028)
    • 

  • Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)
    • 

  • Allow @apply to be used with CSS mixins (#19427)
    • 

  • Ensure not-* correctly negates @container queries, including style(…) queries (#20059)
    • 

  • Ensure drop-shadow-* color utilities work with custom shadow values containing calc(…) (#20080)
    • 

  • Fix 'Sourcemap is likely to be incorrect' warnings when using @tailwindcss/vite (#20103)
    • 

  • Ensure @tailwindcss/webpack can be installed in Rspack projects without requiring webpack as a peer dependency (#20027)
    • 






... (truncated)





Changelog

Sourced from @​tailwindcss/vite's changelog.




[4.3.3] - 2026-07-16


Fixed


    

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
    • 

  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF]Description has been truncated

    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          chore(deps): bump the npm-deps group with 25 updates
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          56868fd
        
      

    

  

    

      
Bumps the npm-deps group with 25 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `4.3.13` | `8.0.1` |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `4.4.2` | `6.0.5` |
| [@astrojs/rss](https://github.com/withastro/astro/tree/HEAD/packages/astro-rss) | `4.0.15` | `4.0.19` |
| [@astrojs/sitemap](https://github.com/withastro/astro/tree/HEAD/packages/integrations/sitemap) | `3.7.0` | `3.7.4` |
| [@lavamoat/preinstall-always-fail](https://github.com/LavaMoat/LavaMoat/tree/HEAD/packages/preinstall-always-fail) | `2.1.1` | `3.0.0` |
| [@radix-ui/react-accordion](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/accordion) | `1.2.12` | `1.2.20` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.15` | `1.1.23` |
| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.2.4` | `1.3.3` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.1.18` | `4.3.3` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.16.15` | `7.3.2` |
| [lottie-react](https://github.com/Gamote/lottie-react) | `2.4.1` | `3.1.2` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.563.0` | `1.45.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.3` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.9` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.3.0` |
| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.4` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.4.0` | `3.7.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.18` | `4.3.3` |
| [@lavamoat/allow-scripts](https://github.com/LavaMoat/LavaMoat/tree/HEAD/packages/allow-scripts) | `3.4.2` | `5.1.0` |
| [@tailwindcss/typography](https://github.com/tailwindlabs/tailwindcss-typography) | `0.5.19` | `0.5.20` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `9.6.0` | `10.3.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.9.6` |
| [prettier-plugin-astro](https://github.com/withastro/prettier-plugin-astro) | `0.14.1` | `1.0.0` |
| [prettier-plugin-tailwindcss](https://github.com/tailwindlabs/prettier-plugin-tailwindcss) | `0.7.2` | `0.8.1` |


Updates `@astrojs/mdx` from 4.3.13 to 8.0.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@8.0.1/packages/integrations/mdx)

Updates `@astrojs/react` from 4.4.2 to 6.0.5
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/react@6.0.5/packages/integrations/react)

Updates `@astrojs/rss` from 4.0.15 to 4.0.19
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro-rss/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/rss@4.0.19/packages/astro-rss)

Updates `@astrojs/sitemap` from 3.7.0 to 3.7.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/sitemap/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/sitemap@3.7.4/packages/integrations/sitemap)

Updates `@lavamoat/preinstall-always-fail` from 2.1.1 to 3.0.0
- [Release notes](https://github.com/LavaMoat/LavaMoat/releases)
- [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/preinstall-always-fail/CHANGELOG.md)
- [Commits](https://github.com/LavaMoat/LavaMoat/commits/allow-scripts-v3.0.0/packages/preinstall-always-fail)

Updates `@radix-ui/react-accordion` from 1.2.12 to 1.2.20
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/accordion/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/accordion)

Updates `@radix-ui/react-dialog` from 1.1.15 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-slot` from 1.2.4 to 1.3.3
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot)

Updates `@tailwindcss/vite` from 4.1.18 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite)

Updates `astro` from 5.16.15 to 7.3.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v5.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.3.2/packages/astro)

Updates `lottie-react` from 2.4.1 to 3.1.2
- [Release notes](https://github.com/Gamote/lottie-react/releases)
- [Commits](Gamote/lottie-react@v2.4.1...v3.1.2)

Updates `lucide-react` from 0.563.0 to 1.45.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.45.0/packages/lucide-react)

Updates `react` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.9 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `sharp` from 0.34.5 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.4)

Updates `tailwind-merge` from 3.4.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `tailwindcss` from 4.1.18 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `@lavamoat/allow-scripts` from 3.4.2 to 5.1.0
- [Release notes](https://github.com/LavaMoat/LavaMoat/releases)
- [Changelog](https://github.com/LavaMoat/LavaMoat/blob/main/packages/allow-scripts/CHANGELOG.md)
- [Commits](https://github.com/LavaMoat/LavaMoat/commits/lavapack-v5.1.0/packages/allow-scripts)

Updates `@tailwindcss/typography` from 0.5.19 to 0.5.20
- [Release notes](https://github.com/tailwindlabs/tailwindcss-typography/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss-typography/blob/main/CHANGELOG.md)
- [Commits](tailwindlabs/tailwindcss-typography@v0.5.19...v0.5.20)

Updates `cspell` from 9.6.0 to 10.3.0
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.3.0/packages/cspell)

Updates `prettier` from 3.8.1 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.9.6)

Updates `prettier-plugin-astro` from 0.14.1 to 1.0.0
- [Release notes](https://github.com/withastro/prettier-plugin-astro/releases)
- [Changelog](https://github.com/withastro/prettier-plugin-astro/blob/main/CHANGELOG.md)
- [Commits](withastro/prettier-plugin-astro@v0.14.1...v1.0.0)

Updates `prettier-plugin-tailwindcss` from 0.7.2 to 0.8.1
- [Release notes](https://github.com/tailwindlabs/prettier-plugin-tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/prettier-plugin-tailwindcss/blob/main/CHANGELOG.md)
- [Commits](tailwindlabs/prettier-plugin-tailwindcss@v0.7.2...v0.8.1)

---
updated-dependencies:
- dependency-name: "@astrojs/mdx"
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@astrojs/react"
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@astrojs/rss"
  dependency-version: 4.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@astrojs/sitemap"
  dependency-version: 3.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@lavamoat/preinstall-always-fail"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@radix-ui/react-accordion"
  dependency-version: 1.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: "@radix-ui/react-slot"
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: astro
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: lottie-react
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: lucide-react
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@lavamoat/allow-scripts"
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@tailwindcss/typography"
  dependency-version: 0.5.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: cspell
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: prettier-plugin-astro
  dependency-version: 1.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: prettier-plugin-tailwindcss
  dependency-version: 0.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      
  dependencies

  Pull requests that update a dependency file

      
  javascript

  Pull requests that update Javascript code

  labels


      Sep 15, 2026

    

  



  

  

    
  


  

      


    @eseidel
eseidel



    mentioned this pull request
    
      Sep 15, 2026
    





  


  

      
   Merged

  





  
  

      
        
      
      


  
    
    
  


    7 tasks
  





  









      

  
      



  

  @eseidel


    
      Claude
    




  



    

      

  

    

      
          
      

      
            eseidel
    

      

      

      commented


        Sep 15, 2026



      
    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        

  
    Contributor


        

    

  





      


        



  
    

      
          
Superseded by #413, which carries all 25 updates from this group at identical versions — nothing was dropped.


npm ci failed here because the generated package-lock.json was missing every esbuild@0.28.2 entry, so it no longer matched package.json. #413 regenerates the lockfile from scratch and makes the three code changes the majors in this group require: the astro 7 content-collections move, an unclosed <div> the astro 7 compiler rejects, and the allowScripts config for @lavamoat/allow-scripts 5.


Closing as superseded.




Generated by Claude Code


      		
    

  





        

            

            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
            

    

      
    

    


      


          @eseidel
eseidel




          closed this


      Sep 15, 2026

    

  


    







      

  
      



  

  @dependabot


    @github




  



    

      

  

    

      
          
      

      
            dependabot
    Bot

      

      

      commented

        on behalf of github

        Sep 15, 2026



      
    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        

  
    Contributor


        

  Author


    

  





      


        



  
    

      
          
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.


To ignore these dependencies, configure ignore rules in dependabot.yml


      		
    

  





        

            

            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
          

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

        
    deleted the
    
      
        dependabot/npm_and_yarn/npm-deps-e57acb52d1
    
    branch

        September 15, 2026 23:47        
        
      

    














  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










    
        

  

    
    

    

  

    Reviewers
  


    

    No reviews







  
      

  


      
  

    Assignees
  



        


    No one assigned







  
        


  


  

    Labels
  



    

      
    dependencies

  Pull requests that update a dependency file
  
    javascript

  Pull requests that update Javascript code








  
        

  

    

        

    Projects
  


        




    None yet




  



  
        


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

  
  
        

  

    

      1 participant
    

    

        
          @eseidel