chore(deps): bump the astro group across 1 directory with 5 updates by dependabot[bot] · Pull Request #2466 · expressjs/expressjs.com

dependabot · 2026-08-01T16:55:48Z

Bumps the astro group with 5 updates in the / directory:

Package	From	To
@astrojs/markdown-remark	`7.2.0`	`7.2.2`
@astrojs/mdx	`7.0.0`	`7.0.5`
@astrojs/react	`6.0.0`	`6.0.2`
astro	`7.0.3`	`7.1.6`
astro-expressive-code	`0.44.0`	`0.44.1`

Updates @astrojs/markdown-remark from 7.2.0 to 7.2.2

Release notes

Sourced from @astrojs/markdown-remark's releases.

@astrojs/markdown-remark@7.2.2

Patch Changes

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

@astrojs/markdown-remark@7.2.1

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

Changelog

Sourced from @astrojs/markdown-remark's changelog.

7.2.2

Patch Changes

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

7.2.1

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

Commits

b0535ca [ci] release (#17528)
a86160e [ci] release (#17256)
See full diff in compare view

Updates @astrojs/mdx from 7.0.0 to 7.0.5

Release notes

Sourced from @astrojs/mdx's releases.

@astrojs/mdx@7.0.5

Patch Changes

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

@astrojs/markdown-remark@7.2.2

@astrojs/mdx@7.0.4

Patch Changes

#17514 41a00dd Thanks @gtritchie! - Fixes a bug where the integration was emitting React-cased attribute names.

@astrojs/mdx@7.0.3

Patch Changes

#17341 64b0d66 Thanks @Princesseuh! - Fixes custom pre components not applying to syntax-highlighted code blocks when using the Sätteri Markdown processor with MDX.

@astrojs/mdx@7.0.2

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

@astrojs/markdown-remark@7.2.1

@astrojs/mdx@7.0.1

Patch Changes

#17249 02b73b0 Thanks @ematipico! - Fixes an issue where the peerDependencies field used incorrect dependencies.

Changelog

Sourced from @astrojs/mdx's changelog.

7.0.5

Patch Changes

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

@astrojs/markdown-remark@7.2.2

7.0.4

Patch Changes

#17514 41a00dd Thanks @gtritchie! - Fixes a bug where the integration was emitting React-cased attribute names.

7.0.3

Patch Changes

#17341 64b0d66 Thanks @Princesseuh! - Fixes custom pre components not applying to syntax-highlighted code blocks when using the Sätteri Markdown processor with MDX.

7.0.2

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

@astrojs/markdown-remark@7.2.1

7.0.1

Patch Changes

#17249 02b73b0 Thanks @ematipico! - Fixes an issue where the peerDependencies field used incorrect dependencies.

Commits

b0535ca [ci] release (#17528)
112d3ea [ci] release (#17469)
41a00dd fix(mdx): emit HTML attribute casing on the Sätteri MDX path (#17514)
dec7692 [ci] release (#17338)
64b0d66 fix(satteri): route highlighted code blocks through MDX pre components (#17341)
a86160e [ci] release (#17256)
7d8ec1f [ci] release (#17237)
02b73b0 fix: peer deps of packages (#17249)
0a054e7 chore(head): normalize html charset declarations (#17197)
2bfb179 chore: simpler package.json types (#17229)
Additional commits viewable in compare view

Updates @astrojs/react from 6.0.0 to 6.0.2

Release notes

Sourced from @astrojs/react's releases.

@astrojs/react@6.0.2

Patch Changes

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

@astrojs/react@6.0.1

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

Changelog

Sourced from @astrojs/react's changelog.

6.0.2

Patch Changes

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

6.0.1

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

Commits

b0535ca [ci] release (#17528)
a86160e [ci] release (#17256)
2bfb179 chore: simpler package.json types (#17229)
See full diff in compare view

Updates astro from 7.0.3 to 7.1.6

Release notes

Sourced from astro's releases.

astro@7.1.6

Patch Changes
#17536 ff97b86 Thanks @dmgawel! - Fixes concurrent static builds failing to generate i18n rewrite fallbacks for dynamic routes

#17383 296e1b0 Thanks @thelazylamaGit! - Fixes stale dev CSS after editing component style blocks and CSS files in dev
#17543 bbc1ec9 Thanks @ematipico! - Adds a feature to experimental.collectionStorage that allows to change the size of chunks.

For example, you can reduce the size of chunks to 1MB:
// astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
collectionStorage: {
type: 'chunked',
chunkSize: 1024 * 1024,
},
},
});
#17545 5214663 Thanks @ematipico! - Bumps the Astro compiler to the latest version. Changelog.
astro@7.1.5

Patch Changes

#17524 7613030 Thanks @matthewp! - Fixes a bug where an error while finalizing a request could prevent a response from being sent

#17480 f61ba9c Thanks @florian-lefebvre! - Fixes a case where a custom logger.entrypoint failed to load at runtime in a built server bundle.

#17525 e614b7b Thanks @matthewp! - Fixes action path resolution so that properties of a resolved action function are not treated as routable path segments

#17284 c775c1f Thanks @matthewp! - Fixes a bug where the custom 404 (or 500) page was not rendered when a middleware rewrite targeted a route that returned an empty 404/500 response, and a blank page was returned instead

#17474 c895b12 Thanks @nicksnyder! - Updates dependency js-yaml to v4.3.0

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

@astrojs/markdown-remark@7.2.2

@astrojs/markdown-satteri@0.3.5

astro@7.1.4

Patch Changes

#17488 d4f266d Thanks @emerson-d-lopes! - Fixes duplicate CSS files being emitted in server output when a prerendered page and a server-rendered page share the same styles (e.g. a shared layout importing Tailwind). The prerender and SSR environments each emitted their own copy of the same stylesheet (index.X.css and _..Y.css); the SSR build now reuses the CSS asset filename from the prerender build when the stylesheet is backed by the same CSS source modules, so only a single file is emitted.

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.6

Patch Changes
#17536 ff97b86 Thanks @dmgawel! - Fixes concurrent static builds failing to generate i18n rewrite fallbacks for dynamic routes

#17383 296e1b0 Thanks @thelazylamaGit! - Fixes stale dev CSS after editing component style blocks and CSS files in dev
#17543 bbc1ec9 Thanks @ematipico! - Adds a feature to experimental.collectionStorage that allows to change the size of chunks.

For example, you can reduce the size of chunks to 1MB:
// astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
collectionStorage: {
type: 'chunked',
chunkSize: 1024 * 1024,
},
},
});
#17545 5214663 Thanks @ematipico! - Bumps the Astro compiler to the latest version. Changelog.
7.1.5

Patch Changes

#17524 7613030 Thanks @matthewp! - Fixes a bug where an error while finalizing a request could prevent a response from being sent

#17480 f61ba9c Thanks @florian-lefebvre! - Fixes a case where a custom logger.entrypoint failed to load at runtime in a built server bundle.

#17525 e614b7b Thanks @matthewp! - Fixes action path resolution so that properties of a resolved action function are not treated as routable path segments

#17284 c775c1f Thanks @matthewp! - Fixes a bug where the custom 404 (or 500) page was not rendered when a middleware rewrite targeted a route that returned an empty 404/500 response, and a blank page was returned instead

#17474 c895b12 Thanks @nicksnyder! - Updates dependency js-yaml to v4.3.0

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

@astrojs/markdown-remark@7.2.2

@astrojs/markdown-satteri@0.3.5

7.1.4

Patch Changes

... (truncated)

Commits

9865d1c [ci] release (#17539)
5214663 fix: bump compiler (#17545)
bbc1ec9 fix: chuncked content collections (#17543)
296e1b0 fix(dev): refresh stale CSS for component \<style> block HMR (#17383)
ff97b86 fix(build): introduce two-staged build to prevent race condition with concurr...
b0535ca [ci] release (#17528)
c895b12 Update js-yaml to 4.3.0 (#17474)
f61ba9c fix(logger): loading at runtime when entrypoint is a URL (#17480)
e614b7b fix(astro): do not resolve action function properties as path segments (#17525)
7613030 Return a response when request finalization fails (#17524)
Additional commits viewable in compare view

Updates astro-expressive-code from 0.44.0 to 0.44.1

Release notes

Sourced from astro-expressive-code's releases.

astro-expressive-code@0.44.1

Patch Changes

ef538d8: Prevent a white corner from appearing when themed horizontal and vertical scrollbars are both visible.

Updated dependencies [ef538d8]

rehype-expressive-code@0.44.1

Changelog

Sourced from astro-expressive-code's changelog.

0.44.1

Patch Changes

ef538d8: Prevent a white corner from appearing when themed horizontal and vertical scrollbars are both visible.

Updated dependencies [ef538d8]

rehype-expressive-code@0.44.1

Commits

e0f1321 [CI] Release (#462)
See full diff in compare view

netlify · 2026-08-01T16:55:54Z

✅ Deploy Preview for expressjscom-preview ready!

Name	Link
🔨 Latest commit	`6dbd7e7`
🔍 Latest deploy log	https://app.netlify.com/projects/expressjscom-preview/deploys/6a6f7577b250b00008a76845
😎 Deploy Preview	https://deploy-preview-2466--expressjscom-preview.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 98 (🟢 up 1 from production) Accessibility: 100 (no change from production) Best Practices: 100 (no change from production) SEO: 100 (no change from production) PWA: 80 (no change from production) View the detailed breakdown and full score reports
🤖 Make changes	Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

socket-security · 2026-08-01T16:56:35Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
astro@7.0.3 ⏵ 7.1.6	^-21	⁺⁵
@astrojs/markdown-remark@7.2.0 ⏵ 7.2.2
astro-expressive-code@0.44.0 ⏵ 0.44.1				^-2
@astrojs/react@6.0.0 ⏵ 6.0.2
@astrojs/mdx@7.0.0 ⏵ 7.0.5			⁺¹

View full report

socket-security · 2026-08-01T16:56:37Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `astro` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → `npm/astro@7.1.6` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/astro@7.1.6`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Bumps the astro group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) | `7.2.0` | `7.2.2` | | [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx) | `7.0.0` | `7.0.5` | | [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `6.0.0` | `6.0.2` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.0.3` | `7.1.6` | | [astro-expressive-code](https://github.com/expressive-code/expressive-code/tree/HEAD/packages/astro-expressive-code) | `0.44.0` | `0.44.1` | Updates `@astrojs/markdown-remark` from 7.2.0 to 7.2.2 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.2.2/packages/markdown/remark) Updates `@astrojs/mdx` from 7.0.0 to 7.0.5 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@7.0.5/packages/integrations/mdx) Updates `@astrojs/react` from 6.0.0 to 6.0.2 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/react@6.0.2/packages/integrations/react) Updates `astro` from 7.0.3 to 7.1.6 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.1.6/packages/astro) Updates `astro-expressive-code` from 0.44.0 to 0.44.1 - [Release notes](https://github.com/expressive-code/expressive-code/releases) - [Changelog](https://github.com/expressive-code/expressive-code/blob/main/packages/astro-expressive-code/CHANGELOG.md) - [Commits](https://github.com/expressive-code/expressive-code/commits/astro-expressive-code@0.44.1/packages/astro-expressive-code) --- updated-dependencies: - dependency-name: "@astrojs/markdown-remark" dependency-version: 7.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: astro - dependency-name: "@astrojs/mdx" dependency-version: 7.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: astro - dependency-name: "@astrojs/react" dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: astro - dependency-name: astro dependency-version: 7.1.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: astro - dependency-name: astro-expressive-code dependency-version: 0.44.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: astro ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026

dependabot Bot requested a review from a team as a code owner August 1, 2026 16:55

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026

dependabot Bot changed the title ~~chore(deps): bump the astro group with 5 updates~~ chore(deps): bump the astro group across 1 directory with 5 updates Aug 2, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/astro-7dfcc62de6 branch from 21eb89a to 6dbd7e7 Compare August 2, 2026 16:51

bjohansebas merged commit 1da4cb9 into main Aug 2, 2026
14 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/astro-7dfcc62de6 branch August 2, 2026 17:17

Navigation Menu

Uh oh!

Uh oh!

chore(deps): bump the astro group across 1 directory with 5 updates - #2466

chore(deps): bump the astro group across 1 directory with 5 updates#2466
bjohansebas merged 1 commit into
mainfrom
dependabot/npm_and_yarn/astro-7dfcc62de6

dependabot Bot commented on behalf of github Aug 1, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Aug 1, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 1, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 1, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​astrojs/markdown-remark@​7.2.2

Patch Changes

@​astrojs/markdown-remark@​7.2.1

Patch Changes

7.2.2

Patch Changes

7.2.1

Patch Changes

@​astrojs/mdx@​7.0.5

Patch Changes

@​astrojs/mdx@​7.0.4

Patch Changes

@​astrojs/mdx@​7.0.3

Patch Changes

@​astrojs/mdx@​7.0.2

Patch Changes

@​astrojs/mdx@​7.0.1

Patch Changes

7.0.5

Patch Changes

7.0.4

Patch Changes

7.0.3

Patch Changes

7.0.2

Patch Changes

7.0.1

Patch Changes

@​astrojs/react@​6.0.2

Patch Changes

@​astrojs/react@​6.0.1

Patch Changes

6.0.2

Patch Changes

6.0.1

Patch Changes

astro@7.1.6

Patch Changes

astro@7.1.5

Patch Changes

astro@7.1.4

Patch Changes

7.1.6

Patch Changes

7.1.5

Patch Changes

7.1.4

Patch Changes

astro-expressive-code@0.44.1

Patch Changes

0.44.1

Patch Changes

Uh oh!

netlify Bot commented Aug 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for expressjscom-preview ready!

Uh oh!

socket-security Bot commented Aug 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Aug 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Aug 1, 2026 •

edited

Loading

`@astrojs/markdown-remark@7`.2.2

`@astrojs/markdown-remark@7`.2.1

`@astrojs/mdx@7`.0.5

`@astrojs/mdx@7`.0.4

`@astrojs/mdx@7`.0.3

`@astrojs/mdx@7`.0.2

`@astrojs/mdx@7`.0.1

`@astrojs/react@6`.0.2

`@astrojs/react@6`.0.1

netlify Bot commented Aug 1, 2026 •

edited

Loading

socket-security Bot commented Aug 1, 2026 •

edited

Loading

socket-security Bot commented Aug 1, 2026 •

edited

Loading