Skip to content

chore(deps):(deps-dev): bump the development-dependencies group across 1 directory with 19 updates - #6401

Open
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/npm_and_yarn/development-dependencies-b66ce82ff6
Open

chore(deps):(deps-dev): bump the development-dependencies group across 1 directory with 19 updates#6401
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/npm_and_yarn/development-dependencies-b66ce82ff6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 19 updates in the / directory:

Package From To
@astrojs/markdoc 2.0.11 2.1.1
@astrojs/react 7.0.1 7.1.1
@axe-core/playwright 4.13.0 4.14.0
@composio/vercel 0.12.1 0.13.0
agents 0.28.1 0.30.1
astro 7.3.5 7.4.2
dependency-cruiser 18.6.0 18.7.0
eslint 10.12.0 10.13.0
eslint-plugin-n 18.4.1 18.5.0
headroom-ai 0.40.0 0.41.0
knip 6.41.0 6.42.1
markdownlint 0.41.1 0.42.0
mcp-remote 0.14.5 0.15.2
oxc-parser 0.151.0 0.155.0
oxfmt 0.72.0 0.74.0
oxlint 1.88.0 1.89.0
rollup 4.64.9 4.65.0
satori 0.47.1 0.63.2
wrangler 4.151.1 4.152.0

Updates @astrojs/markdoc from 2.0.11 to 2.1.1

Release notes

Sourced from @​astrojs/markdoc's releases.

@​astrojs/markdoc@​2.1.1

Patch Changes

@​astrojs/markdoc@​2.1.0

Minor Changes

Patch Changes

Changelog

Sourced from @​astrojs/markdoc's changelog.

2.1.1

Patch Changes

2.1.0

Minor Changes

Patch Changes

Commits

Updates @astrojs/react from 7.0.1 to 7.1.1

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​7.1.1

Patch Changes

@​astrojs/react@​7.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0
Changelog

Sourced from @​astrojs/react's changelog.

7.1.1

Patch Changes

7.1.0

Minor Changes

Patch Changes

  • Updated dependencies [b7a1bd9]:
    • @​astrojs/internal-helpers@​0.13.0
Commits

Updates @axe-core/playwright from 4.13.0 to 4.14.0

Release notes

Sourced from @​axe-core/playwright's releases.

Release 4.14.0

What's Changed

New Contributors

Full Changelog: dequelabs/axe-core-npm@v4.13.0...v4.14.0

Changelog

Sourced from @​axe-core/playwright's changelog.

4.14.0 (2026-10-06)

Bug Fixes

Features

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @composio/vercel from 0.12.1 to 0.13.0

Release notes

Sourced from @​composio/vercel's releases.

@​composio/vercel@​0.13.0

Minor Changes

  • adf6b02: Show the model each tool's JSON Schema as is. The provider now passes the schema to the AI SDK with jsonSchema(), so keywords a Zod schema cannot carry, such as format: "binary", contentEncoding, contentMediaType, title, default, and examples, reach the model. Internal $refs are still inlined first. Tool-call arguments are validated with the same Zod schema as before, so the values a tool accepts and rejects are unchanged.

    In strict mode the model now sees the output of the strict rewrite itself rather than a Zod rendering of it. Zod adds a pattern next to formats such as email, and strict structured outputs reject the one it adds for email, so a strict request with an email parameter would have failed once Zod forwarded more of the schema.

    tool.inputSchema is now an AI SDK Schema instead of a Zod schema. Code that called inputSchema.safeParse() directly can validate with asSchema(tool.inputSchema).validate(value) from ai.

Changelog

Sourced from @​composio/vercel's changelog.

0.13.0

Minor Changes

  • adf6b02: Show the model each tool's JSON Schema as is. The provider now passes the schema to the AI SDK with jsonSchema(), so keywords a Zod schema cannot carry, such as format: "binary", contentEncoding, contentMediaType, title, default, and examples, reach the model. Internal $refs are still inlined first. Tool-call arguments are validated with the same Zod schema as before, so the values a tool accepts and rejects are unchanged.

    In strict mode the model now sees the output of the strict rewrite itself rather than a Zod rendering of it. Zod adds a pattern next to formats such as email, and strict structured outputs reject the one it adds for email, so a strict request with an email parameter would have failed once Zod forwarded more of the schema.

    tool.inputSchema is now an AI SDK Schema instead of a Zod schema. Code that called inputSchema.safeParse() directly can validate with asSchema(tool.inputSchema).validate(value) from ai.

Commits
  • a15956a Release: update version (#4928)
  • cf6343b docs(vercel): state that strict mode does not turn on schema enforcement (#5028)
  • adf6b02 feat: show the model each tool's own JSON Schema in the Vercel, LlamaIndex, a...
  • 517725b test: remove low-value tests without reducing coverage (#4630)
  • See full diff in compare view

Updates agents from 0.28.1 to 0.30.1

Release notes

Sourced from agents's releases.

agents@0.30.1

Patch Changes

agents@0.30.0

This release adds support for Pi 1.4 and makes PiHarness recover more reliably from evictions, crashes and storage errors.

Highlights

  • Pi 1.4 support: agents/harness/pi now runs on Pi 1.4.
  • Hibernation while Pi's tasks sleep: PiHarness passes Pi's onWake through your harness factory, so a Durable Object sleeps until Pi's next task is due instead of staying in memory.
  • One wake job per object: PiHarness wakes from Pi's wake(), so a task stopped by Pi's restart limit no longer keeps the object awake.
  • Parked tasks: tasks stopped by Pi's restart limit show as parked in pending(), and retry() runs them again.
  • Recovery: Pi reopens after a storage error instead of failing every call until the object restarts, and the wake job survives failed steps with backoff.
  • Fixes: Lifecycle no longer keeps evicted Durable Objects in memory, and it arms a fallback alarm when startup fails. pi-ai now reports cut-off model streams with wording Pi treats as transient, so Pi retries them.

Upgrading

  1. Update Pi to ~1.4.0 (@earendil-works/pi-durable, pi-ai, pi-agent-core) and install @earendil-works/chord alongside them. Pi 1.4 migrates session storage to a schema Pi 1.3 cannot open, so a deployment cannot roll back past this release.

  2. Check pi-durable's 1.4.0 changelog for its breaking changes, such as the removal of TaskRuntime.sleep(), the new sleeping task status, and the restart limit that parks a crash-looping task after 5 restarts.

  3. Pass onWake to Harness.open, as in the diff below. Without it, the harness still works but logs a warning, and the object stays in memory while Pi's tasks sleep.

  4. If you create Pi's registry at module scope, move it into your class, as a field or in the factory. Our tool examples showed module scope before this release. Pi keeps every Harness subscribed to its registry until it closes, and an evicted object never closes it, so a module-level registry keeps every evicted object's harness in memory.

    - const registry = createRegistry();
  export class Assistant extends Agent<Env> {
+   registry = createRegistry();
    harness = new PiHarness({
      harness: ({ storage, context, onWake }) =>
-       Harness.open(storage, { models, registry }, context)
+       Harness.open(storage, { models, registry: this.registry, onWake }, context)
    });
  }

  5. Keep the harness factory safe to run more than once. It now runs again when Pi reopens after a storage error.

  6. Handle the new parked status if you switch on PiPendingOperation.status.

Existing objects need no migration step. Wake jobs left by earlier releases are handed over to the new wake job on first start.

Minor Changes

  • #2617 cfe9d0f Thanks @​ben-reitz! - Support Pi 1.4: the Pi peer range is now ~1.4.0. Pi 1.4 migrates SQLite session storage to a schema that Pi 1.3 cannot open, so a deployment cannot roll back past this release. See Pi harness.

  • #2619 4b535dc Thanks @​ben-reitz! - PiHarness hands its factory an onWake to pass to Harness.open, so the Durable Object can hibernate while Pi's tasks sleep. Add it to your factory: harness: ({ storage, context, onWake }) => Harness.open(storage, { ...options, onWake }, context). Without it the harness still works and logs a warning. See Pi harness.

... (truncated)

Changelog

Sourced from agents's changelog.

0.30.1

Patch Changes

0.30.0

This release adds support for Pi 1.4 and makes PiHarness recover more reliably from evictions, crashes and storage errors.

Highlights

  • Pi 1.4 support: agents/harness/pi now runs on Pi 1.4.
  • Hibernation while Pi's tasks sleep: PiHarness passes Pi's onWake through your harness factory, so a Durable Object sleeps until Pi's next task is due instead of staying in memory.
  • One wake job per object: PiHarness wakes from Pi's wake(), so a task stopped by Pi's restart limit no longer keeps the object awake.
  • Parked tasks: tasks stopped by Pi's restart limit show as parked in pending(), and retry() runs them again.
  • Recovery: Pi reopens after a storage error instead of failing every call until the object restarts, and the wake job survives failed steps with backoff.
  • Fixes: Lifecycle no longer keeps evicted Durable Objects in memory, and it arms a fallback alarm when startup fails. pi-ai now reports cut-off model streams with wording Pi treats as transient, so Pi retries them.

Upgrading

  1. Update Pi to ~1.4.0 (@earendil-works/pi-durable, pi-ai, pi-agent-core) and install @earendil-works/chord alongside them. Pi 1.4 migrates session storage to a schema Pi 1.3 cannot open, so a deployment cannot roll back past this release.

  2. Check pi-durable's 1.4.0 changelog for its breaking changes, such as the removal of TaskRuntime.sleep(), the new sleeping task status, and the restart limit that parks a crash-looping task after 5 restarts.

  3. Pass onWake to Harness.open, as in the diff below. Without it, the harness still works but logs a warning, and the object stays in memory while Pi's tasks sleep.

  4. If you create Pi's registry at module scope, move it into your class, as a field or in the factory. Our tool examples showed module scope before this release. Pi keeps every Harness subscribed to its registry until it closes, and an evicted object never closes it, so a module-level registry keeps every evicted object's harness in memory.

    - const registry = createRegistry();
  export class Assistant extends Agent<Env> {
+   registry = createRegistry();
    harness = new PiHarness({
      harness: ({ storage, context, onWake }) =>
-       Harness.open(storage, { models, registry }, context)
+       Harness.open(storage, { models, registry: this.registry, onWake }, context)
    });
  }

  5. Keep the harness factory safe to run more than once. It now runs again when Pi reopens after a storage error.

  6. Handle the new parked status if you switch on PiPendingOperation.status.

Existing objects need no migration step. Wake jobs left by earlier releases are handed over to the new wake job on first start.

Minor Changes

  • #2617 cfe9d0f Thanks @​ben-reitz! - Support Pi 1.4: the Pi peer range is now ~1.4.0. Pi 1.4 migrates SQLite session storage to a schema that Pi 1.3 cannot open, so a deployment cannot roll back past this release. See Pi harness.

  • #2619 4b535dc Thanks @​ben-reitz! - PiHarness hands its factory an onWake to pass to Harness.open, so the Durable Object can hibernate while Pi's tasks sleep. Add it to your factory: harness: ({ storage, context, onWake }) => Harness.open(storage, { ...options, onWake }, context). Without it the harness still works and logs a warning. See Pi harness.

  • #2624 3954859 Thanks @​ben-reitz! - PiHarness shows operations stopped by Pi's restart limit as parked in pending(), and retry() runs them again. See Pi harness.

... (truncated)

Commits
  • a40b8b4 Version Packages (#2685)
  • 9c79ba1 fix(agents): resume a due Pi sleep while other work keeps PiHarness active (#...
  • e29d776 docs(mcp): document servers with createMcpHandler only (#2654)
  • e18c094 Version Packages (#2652)
  • fc4cd24 fix(agents): stop Lifecycle's startup scope keeping evicted objects alive (#2...
  • 8af09a0 docs(agents): document Pi's afterFailedRun setting for PiHarness (#2651)
  • 91a8f61 fix(agents): keep the Pi harness wake job through failed steps (#2649)
  • 000fcaf fix(agents): reopen pi after a storage error fails its session (#2648)
  • 3954859 feat(agents): show and retry tasks parked by pi's restart limit in PiHarness ...
  • 4b535dc feat(agents): pass pi's onWake through the PiHarness factory (#2619)
  • Additional commits viewable in compare view

Updates astro from 7.3.5 to 7.4.2

Release notes

Sourced from astro's releases.

astro@7.4.2

Patch Changes

  • #18430 dda9ec3 Thanks @​Abhirup-99! - Speeds up content sync with experimental.collectionStorage: "chunked" by computing each character's UTF-8 width from its code point instead of encoding every character through TextEncoder. On a store of ~44k entries this cuts the chunking step from about 60 seconds to well under a second, with byte-identical output.

  • #18438 5e0eaa4 Thanks @​astro-factory! - Fixes astro dev with @astrojs/cloudflare failing with Calling `require` for "node-fetch" when a server dependency such as cross-fetch requires node-fetch

  • #18376 a4e201d Thanks @​okxint! - Fixes astro dev treating a stale lock file containing a Linux thread ID as a running Astro server. A successful process lookup with no matching PID now marks the lock as stale, preventing astro dev stop and astro dev --force from killing the unrelated process that owns the thread.

  • #18467 d1fb7d3 Thanks @​astro-factory! - Fixes the defineConfig() types for i18n.defaultLocale, i18n.fallback, and i18n.domains so they accept a custom locale's path instead of its codes, matching how Astro validates and uses these values

  • #18475 cf27e70 Thanks @​ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

    This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

  • #18451 7a0ba6f Thanks @​DenisCDev! - Fixes astro sync, astro check and astro build replacing the optimized dependencies of a dev server running in the same project, which broke framework islands in that dev server until it was restarted with --force

  • #18336 e943003 Thanks @​astro-factory! - Fixes inline styles in dev so that framework-transformed CSS is used, such as scoped styles and v-bind() in Vue single-file components

  • #18399 829fc00 Thanks @​astro-factory! - Fixes a dev server error (Could not find server component name) for a server:defer island that imports astro:actions or astro:config/server, when its page was not the first island page loaded after starting the server

  • #18330 4db9e0d Thanks @​Samuteg! - Fixes the astro:env/server virtual module being generated with invalid JS in dev when any environment variable contains $ replacement patterns ($`, $&, $', $1, …). The inlined env JSON was passed as a string to String.replace, so e.g. the KITTY_PUBLIC_KEY value set by default in Kitty terminals corrupted the module and broke dev with Failed to parse source for import analysis

  • Updated dependencies [cf27e70]:

    • @​astrojs/telemetry@​3.4.1
    • @​astrojs/markdown-satteri@​0.4.5

astro@7.4.1

Patch Changes

  • #18425 6fdc36e Thanks @​astro-factory! - Preserves the last modified date of cached optimized images and incrementally restored build output when copying them into the build output on all platforms

  • #18419 395d195 Thanks @​astro-factory! - Fixes a typo in the error message shown when a font cssVariable is invalid

  • #18401 484822f Thanks @​danielmlr! - Fixes a bug where projects whose path contains an apostrophe (') failed to load sessions, middleware, a cache provider, or a src/fetch.ts handler

  • #18407 a6e00be Thanks @​astro-factory! - Fixes a TSCONFIG_ERROR during astro build when a parent directory contains a tsconfig.json that cannot be resolved, such as one extending astro/tsconfigs/strict without installed dependencies

  • #18427 908f167 Thanks @​astro-factory! - Fixes an Unterminated string build error when application code imports from astro/config (for example, fontProviders in a shared fonts module)

  • #18428 40e7d54 Thanks @​astro-factory! - Fixes missing styles in production builds for conditionally rendered framework components (e.g. Svelte components inside {#if} blocks) imported by a hydrated island

  • #18424 617ff59 Thanks @​astro-factory! - Fixes style-only HMR in .astro components falling back to a full page reload when a PostCSS plugin (such as @unocss/postcss) lists the component as a dependency of its own style

  • #18274 70834bb Thanks @​Princesseuh! - Fixes increasing memory usage when editing the Astro configuration while the dev server is running

astro@7.4.0

Minor Changes

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.2

Patch Changes

  • #18430 dda9ec3 Thanks @​Abhirup-99! - Speeds up content sync with experimental.collectionStorage: "chunked" by computing each character's UTF-8 width from its code point instead of encoding every character through TextEncoder. On a store of ~44k entries this cuts the chunking step from about 60 seconds to well under a second, with byte-identical output.

  • #18438 5e0eaa4 Thanks @​astro-factory! - Fixes astro dev with @astrojs/cloudflare failing with Calling `require` for "node-fetch" when a server dependency such as cross-fetch requires node-fetch

  • #18376 a4e201d Thanks @​okxint! - Fixes astro dev treating a stale lock file containing a Linux thread ID as a running Astro server. A successful process lookup with no matching PID now marks the lock as stale, preventing astro dev stop and astro dev --force from killing the unrelated process that owns the thread.

  • #18467 d1fb7d3 Thanks @​astro-factory! - Fixes the defineConfig() types for i18n.defaultLocale, i18n.fallback, and i18n.domains so they accept a custom locale's path instead of its codes, matching how Astro validates and uses these values

  • #18475 cf27e70 Thanks @​ematipico! - Bumps the minimum supported Node.js version to 22.23.4, which includes the fixes from the October 2026 Node.js security releases

    This is a patch release because the Node.js support and upgrade policy allows the Core team to raise the minimum Maintenance LTS version in a patch release when a disclosed and fixed Node.js security flaw affects Astro.

  • #18451 7a0ba6f Thanks @​DenisCDev! - Fixes astro sync, astro check and astro build replacing the optimized dependencies of a dev server running in the same project, which broke framework islands in that dev server until it was restarted with --force

  • #18336 e943003 Thanks @​astro-factory! - Fixes inline styles in dev so that framework-transformed CSS is used, such as scoped styles and v-bind() in Vue single-file components

  • #18399 829fc00 Thanks @​astro-factory! - Fixes a dev server error (Could not find server component name) for a server:defer island that imports astro:actions or astro:config/server, when its page was not the first island page loaded after starting the server

  • #18330 4db9e0d Thanks @​Samuteg! - Fixes the astro:env/server virtual module being generated with invalid JS in dev when any environment variable contains $ replacement patterns ($`, $&, $', $1, …). The inlined env JSON was passed as a string to String.replace, so e.g. the KITTY_PUBLIC_KEY value set by default in Kitty terminals corrupted the module and broke dev with Failed to parse source for import analysis

  • Updated dependencies [cf27e70]:

    • @​astrojs/telemetry@​3.4.1
    • @​astrojs/markdown-satteri@​0.4.5

7.4.1

Patch Changes

@dependabot
chore(deps):(deps-dev): bump the development-dependencies group acros…
0a4bf72 
…s 1 directory with 19 updates

Bumps the development-dependencies group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/markdoc](https://github.com/withastro/astro/tree/HEAD/packages/integrations/markdoc) | `2.0.11` | `2.1.1` |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `7.0.1` | `7.1.1` |
| [@axe-core/playwright](https://github.com/dequelabs/axe-core-npm) | `4.13.0` | `4.14.0` |
| [@composio/vercel](https://github.com/ComposioHQ/composio/tree/HEAD/ts/packages/providers/vercel) | `0.12.1` | `0.13.0` |
| [agents](https://github.com/cloudflare/agents/tree/HEAD/packages/agents) | `0.28.1` | `0.30.1` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.5` | `7.4.2` |
| [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) | `18.6.0` | `18.7.0` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `18.4.1` | `18.5.0` |
| headroom-ai | `0.40.0` | `0.41.0` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.41.0` | `6.42.1` |
| [markdownlint](https://github.com/DavidAnson/markdownlint) | `0.41.1` | `0.42.0` |
| [mcp-remote](https://github.com/punkpeye/mcp-remote) | `0.14.5` | `0.15.2` |
| [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.151.0` | `0.155.0` |
| [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.72.0` | `0.74.0` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.88.0` | `1.89.0` |
| [rollup](https://github.com/rollup/rollup) | `4.64.9` | `4.65.0` |
| [satori](https://github.com/vercel/satori) | `0.47.1` | `0.63.2` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.151.1` | `4.152.0` |



Updates `@astrojs/markdoc` from 2.0.11 to 2.1.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/markdoc/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/markdoc@2.1.1/packages/integrations/markdoc)

Updates `@astrojs/react` from 7.0.1 to 7.1.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/react@7.1.1/packages/integrations/react)

Updates `@axe-core/playwright` from 4.13.0 to 4.14.0
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core-npm@v4.13.0...v4.14.0)

Updates `@composio/vercel` from 0.12.1 to 0.13.0
- [Release notes](https://github.com/ComposioHQ/composio/releases)
- [Changelog](https://github.com/ComposioHQ/composio/blob/next/ts/packages/providers/vercel/CHANGELOG.md)
- [Commits](https://github.com/ComposioHQ/composio/commits/@composio/vercel@0.13.0/ts/packages/providers/vercel)

Updates `agents` from 0.28.1 to 0.30.1
- [Release notes](https://github.com/cloudflare/agents/releases)
- [Changelog](https://github.com/cloudflare/agents/blob/main/packages/agents/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/agents/commits/agents@0.30.1/packages/agents)

Updates `astro` from 7.3.5 to 7.4.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.4.2/packages/astro)

Updates `dependency-cruiser` from 18.6.0 to 18.7.0
- [Release notes](https://github.com/sverweij/dependency-cruiser/releases)
- [Changelog](https://github.com/sverweij/dependency-cruiser/blob/main/CHANGELOG.md)
- [Commits](sverweij/dependency-cruiser@v18.6.0...v18.7.0)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `eslint-plugin-n` from 18.4.1 to 18.5.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@v18.4.1...v18.5.0)

Updates `headroom-ai` from 0.40.0 to 0.41.0

Updates `knip` from 6.41.0 to 6.42.1
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.42.1/packages/knip)

Updates `markdownlint` from 0.41.1 to 0.42.0
- [Changelog](https://github.com/DavidAnson/markdownlint/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint@v0.41.1...v0.42.0)

Updates `mcp-remote` from 0.14.5 to 0.15.2
- [Release notes](https://github.com/punkpeye/mcp-remote/releases)
- [Commits](punkpeye/mcp-remote@v0.14.5...v0.15.2)

Updates `oxc-parser` from 0.151.0 to 0.155.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/parser/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.155.0/napi/parser)

Updates `oxfmt` from 0.72.0 to 0.74.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.74.0/npm/oxfmt)

Updates `oxlint` from 1.88.0 to 1.89.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.89.0/npm/oxlint)

Updates `rollup` from 4.64.9 to 4.65.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.64.9...v4.65.0)

Updates `satori` from 0.47.1 to 0.63.2
- [Release notes](https://github.com/vercel/satori/releases)
- [Commits](vercel/satori@0.47.1...0.63.2)

Updates `wrangler` from 4.151.1 to 4.152.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/HEAD/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@astrojs/markdoc"
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@astrojs/react"
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@axe-core/playwright"
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@composio/vercel"
  dependency-version: 0.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: agents
  dependency-version: 0.30.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: astro
  dependency-version: 7.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: dependency-cruiser
  dependency-version: 18.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-n
  dependency-version: 18.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: headroom-ai
  dependency-version: 0.41.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: knip
  dependency-version: 6.42.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: markdownlint
  dependency-version: 0.42.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: mcp-remote
  dependency-version: 0.15.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxc-parser
  dependency-version: 0.155.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxfmt
  dependency-version: 0.74.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: oxlint
  dependency-version: 1.89.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: rollup
  dependency-version: 4.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: satori
  dependency-version: 0.63.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: wrangler
  dependency-version: 4.152.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from daggerstuff as a code owner October 26, 2026 22:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pnpm Pull requests that update pnpm dependencies labels Oct 26, 2026
@vercel

vercel Bot commented Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
pixelated Ignored Ignored Preview Oct 26, 2026 10:04pm UTC

Request Review

@github-actions

github-actions Bot commented Oct 26, 2026

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@github-actions

github-actions Bot commented Oct 26, 2026

Copy link
Copy Markdown

Lighthouse CI Results

Routes audited: /, /dashboard?perf=1, /training-session

Thresholds: Performance ≥90 | Accessibility ≥90 | Best Practices ≥85

Reports

  • Report files not found (see artifacts)

Reports are also available as workflow artifacts

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@daggerstuff daggerstuff Awaiting requested review from daggerstuff daggerstuff is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file pnpm Pull requests that update pnpm dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants