Skip to content

build(deps): bump the minor-patch group with 7 updates - #70

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-patch-f102725731
Aug 24, 2026
Merged

build(deps): bump the minor-patch group with 7 updates#70
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-patch-f102725731

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-patch group with 7 updates:

Package From To
nanostores 1.4.2 1.5.2
astro-icon 1.1.5 1.2.0
@rollup/rollup-darwin-arm64 4.62.4 4.62.5
@rollup/rollup-darwin-x64 4.62.4 4.62.5
@rollup/rollup-linux-arm64-gnu 4.62.4 4.62.5
@rollup/rollup-linux-x64-gnu 4.62.4 4.62.5
@rollup/rollup-win32-x64-msvc 4.62.4 4.62.5

Updates nanostores from 1.4.2 to 1.5.2

Release notes

Sourced from nanostores's releases.

1.5.2

1.5.1

1.5.0

  • Added eq and eqKey for custom value comparison (by @​psd-coder).
  • Fixed calling other listeners if one of them throws (by @​psd-coder).
  • Fixed listenKeys deep paths on whole store set (by @​ankit1324).
Changelog

Sourced from nanostores's changelog.

1.5.2

1.5.1

1.5.0

  • Added eq and eqKey for custom value comparison (by @​psd-coder).
  • Fixed calling other listeners if one of them throws (by @​psd-coder).
  • Fixed listenKeys deep paths on whole store set (by @​ankit1324).
Commits

Updates astro-icon from 1.1.5 to 1.2.0

Release notes

Sourced from astro-icon's releases.

astro-icon@1.2.0

Minor Changes

  • #290 956817e Thanks @​stramel! - Bump @iconify/tools to v5 and @iconify/utils to v3, removing the transitive extract-zip dependency that was flagged for a symlink path-traversal vulnerability (GHSA-jmr9-qjv8-65gv).

    Requires Node ≥22.12 — @iconify/utils v3 uses node:util's styleText, which needs Node ≥20.12/21.7, but the toolchain now also builds against Astro 7 (which itself requires Node ≥22.12). Node 20 reached end-of-life in April 2026, so astro-icon's engines field is raised to the currently-supported floor rather than the bare minimum.

  • #285 2e83ca0 Thanks @​stramel! - title/desc props now accept { id, value } in addition to a plain string, so consumers can set id attributes on the generated <title>/<desc> elements for aria-labelledby referencing.

Patch Changes

  • #291 3db45a5 Thanks @​stramel! - Strip the lastModified timestamp from the generated local icon collection so its output is deterministic across builds, allowing Astro's incremental build cache to work as expected.

  • #288 adb18cf Thanks @​stramel! - Log a warning instead of silently swallowing errors when the local icon collection fails to load, so failures during dev/build are visible instead of hidden.

  • #287 fd5d522 Thanks @​stramel! - Fix icon dir watcher so newly added local icons (including files inside subfolders) are picked up without restarting the dev server

  • #282 8904693 Thanks @​stramel! - Update @iconify/tools and @iconify/utils to resolve axios and undici vulnerabilities pulled in transitively.

  • #286 6af6fcf Thanks @​stramel! - Fix viewBox being inconsistently present on <svg> elements across repeated uses of the same icon. The viewBox is now always kept on the <svg> element, so attributes that depend on it (such as preserveAspectRatio) continue to work. Icons whose viewBox has a non-zero min-x/min-y keep a viewBox on their shared <symbol> and anchor their <use> element, so they stay positioned correctly and a per-instance viewBox override no longer leaks onto other instances of the same icon.

  • #281 df57ce6 Thanks @​stramel! - Fix duplicate/incorrect icons rendering in Chromium-based browsers by rewriting internal SVG ids (e.g. gradients, clip paths) to be unique per rendered icon.

  • #284 09177dd Thanks @​stramel! - Fixes Astro.request.headers warning on prerendered pages by keying the internal per-render icon cache off Astro.locals instead of Astro.request

Changelog

Sourced from astro-icon's changelog.

1.2.0

Minor Changes

  • #290 956817e Thanks @​stramel! - Bump @iconify/tools to v5 and @iconify/utils to v3, removing the transitive extract-zip dependency that was flagged for a symlink path-traversal vulnerability (GHSA-jmr9-qjv8-65gv).

    Requires Node ≥22.12 — @iconify/utils v3 uses node:util's styleText, which needs Node ≥20.12/21.7, but the toolchain now also builds against Astro 7 (which itself requires Node ≥22.12). Node 20 reached end-of-life in April 2026, so astro-icon's engines field is raised to the currently-supported floor rather than the bare minimum.

  • #285 2e83ca0 Thanks @​stramel! - title/desc props now accept { id, value } in addition to a plain string, so consumers can set id attributes on the generated <title>/<desc> elements for aria-labelledby referencing.

Patch Changes

  • #291 3db45a5 Thanks @​stramel! - Strip the lastModified timestamp from the generated local icon collection so its output is deterministic across builds, allowing Astro's incremental build cache to work as expected.

  • #288 adb18cf Thanks @​stramel! - Log a warning instead of silently swallowing errors when the local icon collection fails to load, so failures during dev/build are visible instead of hidden.

  • #287 fd5d522 Thanks @​stramel! - Fix icon dir watcher so newly added local icons (including files inside subfolders) are picked up without restarting the dev server

  • #282 8904693 Thanks @​stramel! - Update @iconify/tools and @iconify/utils to resolve axios and undici vulnerabilities pulled in transitively.

  • #286 6af6fcf Thanks @​stramel! - Fix viewBox being inconsistently present on <svg> elements across repeated uses of the same icon. The viewBox is now always kept on the <svg> element, so attributes that depend on it (such as preserveAspectRatio) continue to work. Icons whose viewBox has a non-zero min-x/min-y keep a viewBox on their shared <symbol> and anchor their <use> element, so they stay positioned correctly and a per-instance viewBox override no longer leaks onto other instances of the same icon.

  • #281 df57ce6 Thanks @​stramel! - Fix duplicate/incorrect icons rendering in Chromium-based browsers by rewriting internal SVG ids (e.g. gradients, clip paths) to be unique per rendered icon.

  • #284 09177dd Thanks @​stramel! - Fixes Astro.request.headers warning on prerendered pages by keying the internal per-render icon cache off Astro.locals instead of Astro.request

Commits
  • c079583 chore: release (#283)
  • eb0663b fix: keep viewBox on the svg wrapper instead of stripping it (#298)
  • d90facd chore: raise Node engines floor to >=22.12 (#296)
  • bb9e07e chore: format .astro files with prettier-plugin-astro (#295)
  • 9a2964b chore: bump dependencies to resolve pnpm audit vulnerabilities (#294)
  • 2e83ca0 feat: allow setting id on title/desc elements (#285)
  • 5f94dfc chore: require Node >=20.12 and mark @​iconify/tools v5 bump as minor (#293)
  • 3db45a5 fix: strip lastModified from local icon collection for deterministic output (...
  • 956817e fix: bump @​iconify/tools to v5 to remove vulnerable extract-zip dependency (#...
  • adb18cf fix: warn instead of silently swallowing local collection load errors (#288)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro-icon since your current version.


Updates @rollup/rollup-darwin-arm64 from 4.62.4 to 4.62.5

Release notes

Sourced from @​rollup/rollup-darwin-arm64's releases.

v4.62.5

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

Changelog

Sourced from @​rollup/rollup-darwin-arm64's changelog.

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

Commits

Updates @rollup/rollup-darwin-x64 from 4.62.4 to 4.62.5

Release notes

Sourced from @​rollup/rollup-darwin-x64's releases.

v4.62.5

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

Changelog

Sourced from @​rollup/rollup-darwin-x64's changelog.

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

Commits

Updates @rollup/rollup-linux-arm64-gnu from 4.62.4 to 4.62.5

Release notes

Sourced from @​rollup/rollup-linux-arm64-gnu's releases.

v4.62.5

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-arm64-gnu's changelog.

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

Commits

Updates @rollup/rollup-linux-x64-gnu from 4.62.4 to 4.62.5

Release notes

Sourced from @​rollup/rollup-linux-x64-gnu's releases.

v4.62.5

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-x64-gnu's changelog.

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

Commits

Updates @rollup/rollup-win32-x64-msvc from 4.62.4 to 4.62.5

Release notes

Sourced from @​rollup/rollup-win32-x64-msvc's releases.

v4.62.5

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

Changelog

Sourced from @​rollup/rollup-win32-x64-msvc's changelog.

4.62.5

2026-08-20

Bug Fixes

  • Resolve an issue where compact mode could result in invalid module concatenations (#6468)

Pull Requests

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the minor-patch group with 7 updates
1eb615b 
Bumps the minor-patch group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [nanostores](https://github.com/nanostores/nanostores) | `1.4.2` | `1.5.2` |
| [astro-icon](https://github.com/natemoo-re/astro-icon/tree/HEAD/packages/core) | `1.1.5` | `1.2.0` |
| [@rollup/rollup-darwin-arm64](https://github.com/rollup/rollup) | `4.62.4` | `4.62.5` |
| [@rollup/rollup-darwin-x64](https://github.com/rollup/rollup) | `4.62.4` | `4.62.5` |
| [@rollup/rollup-linux-arm64-gnu](https://github.com/rollup/rollup) | `4.62.4` | `4.62.5` |
| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.62.4` | `4.62.5` |
| [@rollup/rollup-win32-x64-msvc](https://github.com/rollup/rollup) | `4.62.4` | `4.62.5` |


Updates `nanostores` from 1.4.2 to 1.5.2
- [Release notes](https://github.com/nanostores/nanostores/releases)
- [Changelog](https://github.com/nanostores/nanostores/blob/main/CHANGELOG.md)
- [Commits](nanostores/nanostores@1.4.2...1.5.2)

Updates `astro-icon` from 1.1.5 to 1.2.0
- [Release notes](https://github.com/natemoo-re/astro-icon/releases)
- [Changelog](https://github.com/natemoo-re/astro-icon/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/natemoo-re/astro-icon/commits/astro-icon@1.2.0/packages/core)

Updates `@rollup/rollup-darwin-arm64` from 4.62.4 to 4.62.5
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.62.4...v4.62.5)

Updates `@rollup/rollup-darwin-x64` from 4.62.4 to 4.62.5
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.62.4...v4.62.5)

Updates `@rollup/rollup-linux-arm64-gnu` from 4.62.4 to 4.62.5
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.62.4...v4.62.5)

Updates `@rollup/rollup-linux-x64-gnu` from 4.62.4 to 4.62.5
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.62.4...v4.62.5)

Updates `@rollup/rollup-win32-x64-msvc` from 4.62.4 to 4.62.5
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.62.4...v4.62.5)

---
updated-dependencies:
- dependency-name: nanostores
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: astro-icon
  dependency-version: 1.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: "@rollup/rollup-darwin-arm64"
  dependency-version: 4.62.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@rollup/rollup-darwin-x64"
  dependency-version: 4.62.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@rollup/rollup-linux-arm64-gnu"
  dependency-version: 4.62.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.62.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: "@rollup/rollup-win32-x64-msvc"
  dependency-version: 4.62.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions
github-actions Bot enabled auto-merge (squash) August 24, 2026 10:09
@github-actions
github-actions Bot merged commit 9d61598 into main Aug 24, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-patch-f102725731 branch August 24, 2026 10:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants