build(deps): bump the npm_and_yarn group across 1 directory with 2 updates by dependabot[bot] · Pull Request #53 · mx-space/docs

dependabot · 2026-11-14T02:09:42Z

Bumps the npm_and_yarn group with 2 updates in the / directory: astro and zod.

Updates astro from 7.3.5 to 7.4.7

Release notes

astro@7.4.7

Patch Changes

7da442b Thanks @matthewp! - Fixes the image endpoint treating directories whose names differ only by letter case as being inside the build output directory on case-sensitive filesystems

Updated dependencies [7da442b]:

@astrojs/internal-helpers@0.13.1

@astrojs/markdown-satteri@0.4.7

astro@7.4.6

Patch Changes

#18565 cd09986 Thanks @praveen-kumary! - Avoids attributing client-only components or scripts to unrelated pages importing astro:i18n by bounding top-level page graph traversal at virtual page entries

#18608 babd96d Thanks @umeraamir69! - Fixes an extra page reload on the first page load after starting astro dev without an existing .astro directory

#18589 402c0fa Thanks @astro-factory! - Fixes astro check exiting with code 0 when @astrojs/check or typescript is not installed. The command now exits with code 1 so CI fails instead of silently skipping type checking.

#18503 54fcdd5 Thanks @SwastikTripathi! - Preserves the last-modified date of cached font files and unchanged public files when copying them into the build output. Public-file timestamp preservation respects the resolved public-directory configuration, follows source symlinks, and avoids backdating files overwritten by build plugins.

#18605 76cd239 Thanks @astro-factory! - Fixes the glob() loader adding files from a folder excluded with a negation pattern such as !_docs when they change during astro dev

#18432 ed60d82 Thanks @alexmv! - Improves the MissingSharp error to include the reason Sharp failed to load, such as its prebuilt binaries not supporting the current CPU

#18474 59543c3 Thanks @miottid! - Fixes i18n fallback for on-demand rendered pages. A locale-prefixed request for a page that only exists in the fallback locale (for example /de/about with fallback: { de: 'en' }) was answered with status 302 and no Location header. Such requests are now rewritten or redirected to the fallback locale according to i18n.routing.fallbackType, including encoded paths and sites with a configured base. Query strings are preserved, and explicit page statuses and redirects are left unchanged.

#18541 cfa2d2b Thanks @ump45nose! - Fixes matchAllRoutes to consider fallbackRoutes, matching matchRoute and the production router. Dev-server i18n fallback requests now resolve to the source route's metadata instead of the 404 route, and SSR-only fallback candidates can fall through the prerender handler.

#18602 d856064 Thanks @astro-factory! - Fixes astro check losing the end of its output, including the Result summary, when stdout is piped to a slow reader. When the reader closes the pipe early, for example astro check | head, astro check now exits with code 1 instead of crashing with an EPIPE stack trace.

#18574 da0f149 Thanks @astro-factory! - Fixes an unnecessary full page reload in astro dev when a content loader calls store.clear() or store.delete() and the content store has no asset imports

#18570 e71c038 Thanks @astro-factory! - Fixes pages using <ClientRouter /> briefly showing the top of the page on reload before jumping back to the previous scroll position. Full reloads now use the browser's native scroll restoration.

#18531 f75553b Thanks @praveen-kumary! - Fixes an unhandled TypeError: Cannot convert undefined or null to object when calling route.generate() without arguments on static routes

astro@7.4.5

Patch Changes

#18558 fac3c50 Thanks @astro-factory! - Fixes astro dev status and other background server commands deleting the lock file of a running dev or preview server when run from a sandbox or as another user that is not permitted to signal its process

#18559 10dae2f Thanks @astro-factory! - Fixes import.meta.env values containing $ sequences (such as $$ or $&) being corrupted in astro build when server code reads the import.meta.env object directly, for example with const { MY_SECRET } = import.meta.env

#18544 e3bec3d Thanks @skezo! - Fixes request paths with invalid percent-encoding (e.g. /%C0%AF or a bare %) being logged as an Invalid URL encoding error and routed with the undecoded path. These requests now return a 400, the same as a path that is encoded too many times.

#18520 e023aba Thanks @matthewp! - Makes rendering of string tag names stricter and consistent across .astro dynamic tags, JSX, and MDX. Only the leading part of the string that is a valid element name is rendered, so characters such as / or = can no longer change the generated markup. A string that does not start with a valid element name (for example '!--' or '') now throws an error instead of producing invalid HTML.

astro@7.4.4-beta.0

Patch Changes

#18539 db62f3b Thanks @matthewp! - Allows astro add to configure tagged versions of official adapters

Changelog

Sourced from astro's changelog.

7.4.7

Patch Changes

7da442b Thanks @matthewp! - Fixes the image endpoint treating directories whose names differ only by letter case as being inside the build output directory on case-sensitive filesystems

Updated dependencies [7da442b]:

@astrojs/internal-helpers@0.13.1

@astrojs/markdown-satteri@0.4.7

7.4.6

Patch Changes

#18565 cd09986 Thanks @praveen-kumary! - Avoids attributing client-only components or scripts to unrelated pages importing astro:i18n by bounding top-level page graph traversal at virtual page entries

#18608 babd96d Thanks @umeraamir69! - Fixes an extra page reload on the first page load after starting astro dev without an existing .astro directory

#18589 402c0fa Thanks @astro-factory! - Fixes astro check exiting with code 0 when @astrojs/check or typescript is not installed. The command now exits with code 1 so CI fails instead of silently skipping type checking.

#18503 54fcdd5 Thanks @SwastikTripathi! - Preserves the last-modified date of cached font files and unchanged public files when copying them into the build output. Public-file timestamp preservation respects the resolved public-directory configuration, follows source symlinks, and avoids backdating files overwritten by build plugins.

#18605 76cd239 Thanks @astro-factory! - Fixes the glob() loader adding files from a folder excluded with a negation pattern such as !_docs when they change during astro dev

#18432 ed60d82 Thanks @alexmv! - Improves the MissingSharp error to include the reason Sharp failed to load, such as its prebuilt binaries not supporting the current CPU

#18474 59543c3 Thanks @miottid! - Fixes i18n fallback for on-demand rendered pages. A locale-prefixed request for a page that only exists in the fallback locale (for example /de/about with fallback: { de: 'en' }) was answered with status 302 and no Location header. Such requests are now rewritten or redirected to the fallback locale according to i18n.routing.fallbackType, including encoded paths and sites with a configured base. Query strings are preserved, and explicit page statuses and redirects are left unchanged.

#18541 cfa2d2b Thanks @ump45nose! - Fixes matchAllRoutes to consider fallbackRoutes, matching matchRoute and the production router. Dev-server i18n fallback requests now resolve to the source route's metadata instead of the 404 route, and SSR-only fallback candidates can fall through the prerender handler.

#18602 d856064 Thanks @astro-factory! - Fixes astro check losing the end of its output, including the Result summary, when stdout is piped to a slow reader. When the reader closes the pipe early, for example astro check | head, astro check now exits with code 1 instead of crashing with an EPIPE stack trace.

#18574 da0f149 Thanks @astro-factory! - Fixes an unnecessary full page reload in astro dev when a content loader calls store.clear() or store.delete() and the content store has no asset imports

#18570 e71c038 Thanks @astro-factory! - Fixes pages using <ClientRouter /> briefly showing the top of the page on reload before jumping back to the previous scroll position. Full reloads now use the browser's native scroll restoration.

#18531 f75553b Thanks @praveen-kumary! - Fixes an unhandled TypeError: Cannot convert undefined or null to object when calling route.generate() without arguments on static routes

7.4.5

Patch Changes

#18558 fac3c50 Thanks @astro-factory! - Fixes astro dev status and other background server commands deleting the lock file of a running dev or preview server when run from a sandbox or as another user that is not permitted to signal its process

#18559 10dae2f Thanks @astro-factory! - Fixes import.meta.env values containing $ sequences (such as $$ or $&) being corrupted in astro build when server code reads the import.meta.env object directly, for example with const { MY_SECRET } = import.meta.env

#18544 e3bec3d Thanks @skezo! - Fixes request paths with invalid percent-encoding (e.g. /%C0%AF or a bare %) being logged as an Invalid URL encoding error and routed with the undecoded path. These requests now return a 400, the same as a path that is encoded too many times.

#18520 e023aba Thanks @matthewp! - Makes rendering of string tag names stricter and consistent across .astro dynamic tags, JSX, and MDX. Only the leading part of the string that is a valid element name is rendered, so characters such as / or = can no longer change the generated markup. A string that does not start with a valid element name (for example '!--' or '') now throws an error instead of producing invalid HTML.

7.4.4

... (truncated)

Commits

cd30ae2 [ci] release (#18637)
7a1255f [ci] release (#18582)
78eddf9 Update dependency p-queue to v10 (#18619)
ff1e2fb Update dependency undici to v8 [SECURITY] (#18519)
babd96d fix(astro): skip data-store full-reload when no clients are connected (#18608)
b64567f Update all non-major dependencies (#18615)
cfa2d2b fix(routing): consider fallbackRoutes in matchAllRoutes (#18541)
f75553b fix(routing): avoid TypeError when calling route generator without arguments ...
59543c3 Fix i18n fallback for on-demand pages reached through a fallback route (#18474)
e71c038 ClientRouter no longer flashes the top of the page on full reload when scroll...
Additional commits viewable in compare view

Updates zod from 4.6.5 to 4.6.7

Release notes

Sourced from zod's releases.

v4.6.7

Commits:

b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7

v4.6.6

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.

Commits:

0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini

9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales

34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note

74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (#6622)

b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors

8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze

bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles

c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (#6638)

a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (#6645)

a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (#6652)

529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6

9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why

Commits

b500a2e 4.6.7
9c21983 ci: stage at verbose so a failed OIDC token exchange says why
529f78d 4.6.6
a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#6652)
a2ba4a6 fix(types): declare record output and input as members, not base type argumen...
c42596b release: hold the run on the release-approval environment until the staged ve...
bacad51 docs: square the Code for Japan logo to match the other bronze tiles
8fb2faf docs: crop the Code for Japan logo and list it first in bronze
b2ef983 docs: add Code for Japan to bronze sponsors
74304ce release: stage npm versions instead of publishing them (#6622)
Additional commits viewable in compare view

safedep · 2026-11-14T02:09:47Z

SafeDep Report Summary

Package Details

Package	Malware	Vulnerability	Risky License	Report
`@astrojs/compiler-binding @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/compiler-binding-android-arm64 @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/compiler-binding-darwin-arm64 @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/compiler-binding-darwin-x64 @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/compiler-binding-linux-arm64-gnu @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/compiler-binding-linux-arm64-musl @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/compiler-binding-linux-x64-gnu @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/compiler-binding-linux-x64-musl @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/compiler-binding-wasm32-wasi @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/compiler-binding-win32-arm64-msvc @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/compiler-binding-win32-x64-msvc @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/compiler-rs @ 0.5.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/internal-helpers @ 0.13.1` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/markdown-satteri @ 0.4.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/prism @ 4.1.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@astrojs/telemetry @ 3.4.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@bruits/satteri-android-arm64 @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@bruits/satteri-darwin-arm64 @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@bruits/satteri-darwin-x64 @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@bruits/satteri-freebsd-x64 @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@bruits/satteri-linux-arm64-gnu @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@bruits/satteri-linux-arm64-musl @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@bruits/satteri-linux-x64-gnu @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@bruits/satteri-linux-x64-musl @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@bruits/satteri-wasm32-wasi @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@bruits/satteri-win32-arm64-msvc @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@bruits/satteri-win32-x64-msvc @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@emnapi/core @ 2.0.0-beta.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@emnapi/runtime @ 2.0.0-beta.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@emnapi/wasi-threads @ 2.2.0` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@napi-rs/wasm-runtime @ 1.2.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@napi-rs/wasm-runtime @ 1.2.6` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@oxc-project/types @ 0.158.0` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@oxc-project/types @ 0.156.0` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-android-arm-eabi @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-android-arm-eabi @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-android-arm64 @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-android-arm64 @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-darwin-arm64 @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-darwin-arm64 @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-darwin-x64 @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-darwin-x64 @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-freebsd-x64 @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-freebsd-x64 @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-arm-gnueabihf @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-arm-gnueabihf @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-arm64-gnu @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-arm64-gnu @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-arm64-musl @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-arm64-musl @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-ppc64-gnu @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-ppc64-gnu @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-s390x-gnu @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-s390x-gnu @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-x64-gnu @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-x64-gnu @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-x64-musl @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-linux-x64-musl @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-openharmony-arm64 @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-openharmony-arm64 @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-wasm32-wasi @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-wasm32-wasi @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-win32-arm64-msvc @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-win32-arm64-msvc @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-win32-x64-msvc @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`@rolldown/binding-win32-x64-msvc @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`am-i-vibing @ 0.5.0` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`astro @ 7.4.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`devalue @ 6.0.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`es-module-lexer @ 3.0.4` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`fnv1a-64 @ 0.1.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`get-tsconfig @ 5.0.0-beta.6` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`http-cache-semantics @ 4.3.0` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`magic-string @ 1.4.5` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`p-queue @ 10.0.0` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`package-manager-detector @ 1.9.0` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`rolldown @ 1.2.19` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`rolldown @ 1.3.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`satteri @ 0.11.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`smol-toml @ 1.9.1` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`std-env @ 4.3.0` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`tinyexec @ 1.3.1` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`tinyps @ 0.5.2` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`unifont @ 1.0.3` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`unstorage @ 1.17.6` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`verkit @ 0.5.0` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`vite @ 8.3.8` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗
`zod @ 4.6.7` _npm _{pnpm-lock.yaml}	✔️	✔️	✔️	🔗

View complete scan results →

_{This report is generated by SafeDep GitHub App}

…dates Bumps the npm_and_yarn group with 2 updates in the / directory: [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) and [zod](https://github.com/colinhacks/zod). Updates `astro` from 7.3.5 to 7.4.7 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.4.7/packages/astro) Updates `zod` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.5...v4.6.7) --- updated-dependencies: - dependency-name: astro dependency-version: 7.4.7 dependency-type: direct:production - dependency-name: zod dependency-version: 4.6.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 14, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-4ab00fa422 branch from 1209476 to 632394a Compare November 14, 2026 10:51

Navigation Menu

Repository navigation

build(deps): bump the npm_and_yarn group across 1 directory with 2 updates - #53

build(deps): bump the npm_and_yarn group across 1 directory with 2 updates#53
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-4ab00fa422

dependabot Bot commented on behalf of github Nov 14, 2026 •

edited

Loading

Uh oh!

safedep Bot commented Nov 14, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

astro@7.4.7

Patch Changes

astro@7.4.6

Patch Changes

astro@7.4.5

Patch Changes

astro@7.4.4-beta.0

Patch Changes

7.4.7

Patch Changes

7.4.6

Patch Changes

7.4.5

Patch Changes

7.4.4

v4.6.7

Commits:

v4.6.6

Commits:

Uh oh!

safedep Bot commented Nov 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

SafeDep Report Summary

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Nov 14, 2026 •

edited

Loading

safedep Bot commented Nov 14, 2026 •

edited

Loading