fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@astrojs/react (source)	3.0.3 -> 3.3.0					dependencies	minor
@fontsource/inter (source)	5.0.13 -> 5.0.17					dependencies	patch
@types/react (source)	18.0.26 -> 18.2.77					dependencies	minor
@types/react-dom (source)	18.0.10 -> 18.2.25					dependencies	minor
accesskit	0.12.2 -> 0.12.3					workspace.dependencies	patch
accesskit_winit	0.18.0 -> 0.18.7					workspace.dependencies	patch
astro (source)	4.0.2 -> 4.6.0					dependencies	minor
bitflags	2.4.1 -> 2.5.0					dependencies	minor
bitflags	2.4.0 -> 2.5.0					dependencies	minor
bytes	1.5.0 -> 1.6.0					dependencies	minor
dashmap	5.4.0 -> 5.5.3					dependencies	minor
glutin	0.31.2 -> 0.31.3					workspace.dependencies	patch
highlight.js (source)	11.7.0 -> 11.9.0					dependencies	minor
image	0.24.7 -> 0.25.1					dependencies	minor
itertools	0.11.0 -> 0.12.1					dependencies	minor
itertools	0.11.0 -> 0.12.1					dev-dependencies	minor
raw-window-handle	0.5.2 -> 0.6.0					workspace.dependencies	minor
react-icons	5.0.0 -> 5.0.1					dependencies	patch
reqwest	0.11.22 -> 0.12.3					dependencies	minor
reqwest	0.11.22 -> 0.12.3					dev-dependencies	minor
ropey	1.6.0 -> 1.6.1					dependencies	patch
serde (source)	1.0.189 -> 1.0.197					dev-dependencies	patch
serde_json	1.0.107 -> 1.0.115					dependencies	patch
smallvec	1.13.1 -> 1.13.2					workspace.dependencies	patch
tokio (source)	1.33.0 -> 1.37.0					workspace.dependencies	minor
tracing-subscriber (source)	0.3.17 -> 0.3.18					workspace.dependencies	patch
uuid	1.4.1 -> 1.8.0					workspace.dependencies	minor
winit	0.29.9 -> 0.29.15					workspace.dependencies	patch

---

Release Notes

withastro/astro (@​astrojs/react)

v3.3.0

Compare Source

Minor Changes

• #​10689 683d51a5eecafbbfbfed3910a3f1fbf0b3531b99 Thanks @​ematipico! - Deprecate support for versions of Node.js older than v18.17.1 for Node.js 18, older than v20.0.3 for Node.js 20, and the complete Node.js v19 release line.

  This change is in line with Astro's Node.js support policy.

v3.2.0

Compare Source

Minor Changes

• #​10675 14f1d49a10541fecc4c10def8a094322442ccf23 Thanks @​fightingcat! - Expose Babel config for @​astro/react.

v3.1.1

Compare Source

Patch Changes

• #​10654 195f51f82a44df32be73865949aabee0d46ffe61 Thanks @​matthewp! - Mark @​material-tailwind/react as noExternal

v3.1.0

Compare Source

Minor Changes

• #​10136 9cd84bd19b92fb43ae48809f575ee12ebd43ea8f Thanks @​matthewp! - Changes the default behavior of transition:persist to update the props of persisted islands upon navigation. Also adds a new view transitions option transition:persist-props (default: false) to prevent props from updating as needed.

  Islands which have the transition:persist property to keep their state when using the <ViewTransitions /> router will now have their props updated upon navigation. This is useful in cases where the component relies on page-specific props, such as the current page title, which should update upon navigation.

  For example, the component below is set to persist across navigation. This component receives a products props and might have some internal state, such as which filters are applied:

  <ProductListing transition:persist products={products} />

  Upon navigation, this component persists, but the desired products might change, for example if you are visiting a category of products, or you are performing a search.

  Previously the props would not change on navigation, and your island would have to handle updating them externally, such as with API calls.

  With this change the props are now updated, while still preserving state.

  You can override this new default behavior on a per-component basis using transition:persist-props=true to persist both props and state during navigation:

  <ProductListing transition:persist-props="true" products={products} />

v3.0.10

Compare Source

Patch Changes

• #​9849 20ca3154fb37049cbcd51b06d9fa2ef25ac25a36 Thanks @​StandardGage! - Fixes an issue where passing void elements (img, etc..) did not work with the experimentalReactChildren option enabled

v3.0.9

Compare Source

Patch Changes

• #​9482 72b26daf694b213918f02d0fcbf90ab5b7ebc31f Thanks @​natemoo-re! - Improves compatability with the Qwik adapter

• #​9479 1baf0b0d3cbd0564954c2366a7278794fad6726e Thanks @​sarah11918! - Updates README

v3.0.8

Compare Source

Patch Changes

• #​9403 7eb9fe8a7 Thanks @​knpwrs! - Prevents unsupported forwardRef components created by Preact from being rendered by React

• #​9452 e83b5095f Thanks @​florian-lefebvre! - Upgrades vite to latest

v3.0.7

Compare Source

Patch Changes

• #​9122 1c48ed286 Thanks @​bluwy! - Adds Vite 5 support. There are no breaking changes from Astro. Check the Vite migration guide for details of the breaking changes from Vite instead.

v3.0.6

Compare Source

Patch Changes

• #​9141 af43fb517 Thanks @​lilnasy! - Fixes an issue where slotting self-closing elements (img, br, hr) into react components with experimentalReactChildren enabled led to an error.

v3.0.5

Compare Source

Patch Changes

• #​8925 ac5633b8f Thanks @​brandonsdebt! - Uses node:stream during server rendering for compatibility with Cloudflare

v3.0.4

Compare Source

Patch Changes

• #​8898 4dee38711 Thanks @​matthewp! - Fixes client hydration in islands when using experimentalReactChildren

fontsource/font-files (@​fontsource/inter)

v5.0.17

Compare Source

v5.0.16

Compare Source

v5.0.15

Compare Source

v5.0.14

Compare Source

AccessKit/accesskit (accesskit)

v0.12.3: accesskit: v0.12.3

Compare Source

Bug Fixes

• Derive PartialOrd and Ord on NodeId (#​363) (ce3bba1)
• Make NodeClassSet::new const (#​368) (11d2968)

withastro/astro (astro)

v4.6.0

Compare Source

Minor Changes

• #​10591 39988ef8e2c4c4888543c973e06d9b9939e4ac95 Thanks @​mingjunlu! - Adds a new dev toolbar settings option to change the horizontal placement of the dev toolbar on your screen: bottom left, bottom center, or bottom right.

• #​10689 683d51a5eecafbbfbfed3910a3f1fbf0b3531b99 Thanks @​ematipico! - Deprecate support for versions of Node.js older than v18.17.1 for Node.js 18, older than v20.0.3 for Node.js 20, and the complete Node.js v19 release line.

  This change is in line with Astro's Node.js support policy.

• #​10678 2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1 Thanks @​ematipico! - Adds a new experimental security option to prevent Cross-Site Request Forgery (CSRF) attacks. This feature is available only for pages rendered on demand:

  import { defineConfig } from 'astro/config';
  export default defineConfig({
    experimental: {
      security: {
        csrfProtection: {
          origin: true,
        },
      },
    },
  });

  Enabling this setting performs a check that the "origin" header, automatically passed by all modern browsers, matches the URL sent by each Request.

  This experimental "origin" check is executed only for pages rendered on demand, and only for the requests POST, PATCH, DELETEandPUTwith one of the followingcontent-type` headers: 'application/x-www-form-urlencoded', 'multipart/form-data', 'text/plain'.

  It the "origin" header doesn't match the pathname of the request, Astro will return a 403 status code and won't render the page.

• #​10193 440681e7b74511a17b152af0fd6e0e4dc4014025 Thanks @​ematipico! - Adds a new i18n routing option manual to allow you to write your own i18n middleware:

  import { defineConfig } from 'astro/config';
  // astro.config.mjs
  export default defineConfig({
    i18n: {
      locales: ['en', 'fr'],
      defaultLocale: 'fr',
      routing: 'manual',
    },
  });

  Adding routing: "manual" to your i18n config disables Astro's own i18n middleware and provides you with helper functions to write your own: redirectToDefaultLocale, notFound, and redirectToFallback:

  // middleware.js
  import { redirectToDefaultLocale } from 'astro:i18n';
  export const onRequest = defineMiddleware(async (context, next) => {
    if (context.url.startsWith('/about')) {
      return next();
    } else {
      return redirectToDefaultLocale(context, 302);
    }
  });

  Also adds a middleware function that manually creates Astro's i18n middleware. This allows you to extend Astro's i18n routing instead of completely replacing it. Run middleware in combination with your own middleware, using the sequence utility to determine the order:

  import { defineMiddleware, sequence } from 'astro:middleware';
  import { middleware } from 'astro:i18n'; // Astro's own i18n routing config
  
  export const userMiddleware = defineMiddleware();
  
  export const onRequest = sequence(
    userMiddleware,
    middleware({
      redirectToDefaultLocale: false,
      prefixDefaultLocale: true,
    })
  );

• #​10671 9e14a78cb05667af9821948c630786f74680090d Thanks @​fshafiee! - Adds the httpOnly, sameSite, and secure options when deleting a cookie

Patch Changes

• #​10747 994337c99f84304df1147a14504659439a9a7326 Thanks @​lilnasy! - Fixes an issue where functions could not be used as named slots.

• #​10750 7e825604ddf90c989537e07939a39dc249343897 Thanks @​OliverSpeir! - Fixes a false positive for "Invalid tabindex on non-interactive element" rule for roleless elements ( div and span ).

• #​10745 d51951ce6278d4b59deed938d65e1cb72b5102df Thanks @​lilnasy! - Fixes an issue where CLI commands could not report the reason for failure before exiting.

• #​10661 e2cd7f4291912dadd4a654bc7917856c58a72a97 Thanks @​liruifengv! - Fixed errorOverlay theme toggle bug.

• Updated dependencies [ccafa8d230f65c9302421a0ce0a0adc5824bfd55, 683d51a5eecafbbfbfed3910a3f1fbf0b3531b99]:

  • @​astrojs/markdown-remark@​5.1.0
  • @​astrojs/telemetry@​3.1.0

v4.5.18

Compare Source

Patch Changes

• #​10728 f508c4b7d54316e737f454a3777204b23636d4a0 Thanks @​ematipico! - Fixes a regression where some very specific code rendered using expressive-code was not escaped properly.

• #​10737 8a30f257b1f3618b01212a591b82ad7a63c82fbb Thanks @​lilnasy! - Fixes a regression where constructing and returning 404 responses from a middleware resulted in the dev server getting stuck in a loop.

• #​10719 b21b3ba307235510707ee9f5bd49f71473a07004 Thanks @​ematipico! - Fixes a false positive for div and span elements when running the Dev Toolbar accessibility audits.

  Those are special elements that don't have an interaction assigned by default. Instead, it is assigned through the role attribute. This means that cases like the following are now deemed correct:

  <div role="tablist"></div>
  <span role="button" onclick="" onkeydown=""></span>

v4.5.17

Compare Source

Patch Changes

• #​10688 799f6f3f29a3ef4f76347870a209ffa89651adfa Thanks @​bluwy! - Marks renderer jsxImportSource and jsxTransformOptions options as deprecated as they are no longer used since Astro 3.0

• #​10657 93d353528fa1a85b67e3f1e9514ed2a1b42dfd94 Thanks @​natemoo-re! - Improves the color contrast for notification badges on dev toolbar apps

• #​10693 1d26e9c7f7d8f47e33bc68d3b30bbffce25c7b63 Thanks @​apetta! - Adds the disableremoteplayback attribute to MediaHTMLAttributes interface

• #​10695 a15975e41cb5eaf6ed8eb3ebaee676a17e433052 Thanks @​bluwy! - Skips prerender chunk if building with static output

• #​10707 5e044a5eafaa206d2ef8b62c37d1bcd37f0a4078 Thanks @​horo-fox! - Logs an error when a page's getStaticPaths fails

• #​10686 fa0f593890502faf5709ab881fe0e45519d2f7af Thanks @​bluwy! - Prevents inlining scripts if used by other chunks when using the experimental.directRenderScript option

v4.5.16

Compare Source

Patch Changes

• #​10679 ca6bb1f31ef041e6ccf8ef974856fa945ff5bb31 Thanks @​martrapp! - Generates missing popstate events for Firefox when navigating to hash targets on the same page.

• #​10669 0464563e527f821e53d78028d9bbf3c4e1050f5b Thanks @​Princesseuh! - Fixes Astro waiting infinitely in CI when a required package was not installed

v4.5.15

Compare Source

Patch Changes

• #​10666 55ddb2ba4889480f776a8d29b9dcd531b9f5ab3e Thanks @​lilnasy! - Fixes an issue where forwarded requests did not include hostname on node-based adapters. This also makes error pages more reliable.

• #​10642 4f5dc14f315eba7ea6ec5cc8e5dacb0cb81288dd Thanks @​OliverSpeir! - Fixes typing issues when using format and quality options with remote images

• #​10616 317d18ef8c9cf4fd13647518e3fd352774a86481 Thanks @​NikolaRHristov! - This change disables the sharp libvips image cache as it errors when the
  file is too small and operations are happening too fast (runs into a race
  condition)

v4.5.14

Compare Source

Patch Changes

• #​10470 320c309ca9fbe51c40e6ba846d04a0cb49aced5f Thanks @​liruifengv! - improves client:only error message

• #​10496 ce985631129e49f7ea90e6ea690ef9f9cf0e6987 Thanks @​florian-lefebvre! - Makes the warning less scary when adding 3rd-party integrations using astro add

v4.5.13

Compare Source

Patch Changes

• #​10495 046d69d517118ab5c0e71604b321729d66ddffff Thanks @​satyarohith! - This patch allows astro to run in node-compat mode in Deno. Deno doesn't support
  construction of response from async iterables in node-compat mode so we need to
  use ReadableStream.

• #​10605 a16a829f4e25ad5c9a1b4557ec089fc8ab53320f Thanks @​martrapp! - Fixes an issue with outdated page titles in browser history when using text fragments in view transition navigation.

• #​10584 e648c5575a8774af739231cfa9fc27a32086aa5f Thanks @​duanwilliam! - Fixes a bug where JSX runtime would error on components with nullish prop values in certain conditions.

• #​10608 e31bea0704890ff92ce4f9b0ce536c1c90715f2c Thanks @​matthewp! - Fixes bug with head content being pushed into body

• Updated dependencies [2cf116f80cb5e421ab5cc5eb4a654e7b78c1b8de, 374efcdff9625ca43309d89e3b9cfc9174351512]:

  • @​astrojs/markdown-remark@​5.0.0

v4.5.12

Compare Source

Patch Changes

• #​10596 20463a6c1e1271d8dc3cb0ab3419ee5c72abd218 Thanks @​Princesseuh! - Add removeBase function

• Updated dependencies [20463a6c1e1271d8dc3cb0ab3419ee5c72abd218]:

  • @​astrojs/internal-helpers@​0.4.0

v4.5.11

Compare Source

Patch Changes

• #​10567 fbdc10f90f7baa5c49f2f53e3e4ce8f453814c01 Thanks @​Princesseuh! - Fixes astro:assets not working when using complex config with vite.build.rollupOptions.output.assetFileNames

• #​10593 61e283e5a0d95b6ef5d3c4c985d6ee78f74bbd8e Thanks @​Princesseuh! - Fixes Polymorphic type helper causing TypeScript errors in certain cases after the previous update

• #​10543 0fd36bdb383297b32cc523b57d2442132da41595 Thanks @​matthewp! - Fixes inline stylesheets with content collections cache

• #​10582 a05953538fcf524786385830b99c0c5a015173e8 Thanks @​lilnasy! - Fixes an issue where the dev server got stuck in a loop while routing responses with a 404 status code to the 404 route.

v4.5.10

Compare Source

Patch Changes

• #​10549 54c2f9707f5d038630143f769e3075c698474654 Thanks @​admirsaheta! - Updates the HTMLAttributes type exported from astro to allow data attributes

• #​10562 348c1ca1323d0516c2dcf8e963343cd12cb5407f Thanks @​apetta! - Fixes minor type issues inside the built-in components of Astro

• #​10550 34fa8e131b85531e6629390307108ffc4adb7ed1 Thanks @​Skn0tt! - Fixes bug where server builds would include unneeded assets in SSR Function, potentially leading to upload errors on Vercel, Netlify because of size limits

• Updated dependencies [c585528f446ccca3d4c643f4af5d550b93c18902]:

  • @​astrojs/markdown-remark@​4.3.2

v4.5.9

Compare Source

Patch Changes

• #​10532 8306ce1ff7b71a2a0d7908336c9be462a54d395a Thanks @​martrapp! - Fixes a style issue of client:only components in DEV mode during view transitions.

• #​10473 627e47d67af4846cea2acf26a96b4124001b26fc Thanks @​bluwy! - Fixes and improves performance when rendering Astro JSX

v4.5.8

Compare Source

Patch Changes

• #​10504 8e4e554cc211e59c329c0a5d110c839c886ff120 Thanks @​Princesseuh! - Update Babel version to fix regression in Babel's 7.24.2.

• Updated dependencies [19e42c368184013fc30d1e46753b9e9383bb2bdf]:

  • @​astrojs/markdown-remark@​4.3.1

v4.5.7

Compare Source

Patch Changes

• #​10493 e4a6462751725878bfe47632eeafa6854cad5bf2 Thanks @​firefoxic! - <link> tags created by astro for optimized stylesheets now do not include the closing forward slash. This slash is optional for void elements such as link, but made some html validation fail.

v4.5.6

Compare Source

Patch Changes

• #​10455 c12666166db724915e42e37a048483c99f88e6d9 Thanks @​lilnasy! - Adds a helpful error message that will be shown when an endpoint does not return a Response.

• #​10426 6a9a35ee15069541c3144012385366a3c689240a Thanks @​markgaze! - Fixes an issue with generating JSON schemas when the schema is a function

• #​10448 fcece3658697248ab58f77b3d4a8b14d362f3c47 Thanks @​lilnasy! - Fixes an issue where multiple rendering errors resulted in a crash of the SSR app server.

v4.5.5

Compare Source

Patch Changes

• #​10379 3776ecf0aa9e08a992d3ae76e90682fd04093721 Thanks @​1574242600! - Fixes a routing issue with partially truncated dynamic segments.

• #​10442 f8e0ad3c52a37b8a2175fe2f5ff2bd0cd738f499 Thanks @​Princesseuh! - Fixes small rendering issues with the dev toolbar in certain contexts

• #​10438 5b48cc0fc8383b0659a595afd3a6ee28b28779c3 Thanks @​bholmesdev! - Generate Astro DB types when running astro sync.

• #​10456 1900a8f9bc337f3a882178d1770e10ab67fab0ce Thanks @​martrapp! - Fixes an error when using astro:transtions/client without <ViewTransitions/>

v4.5.4

Compare Source

Patch Changes

• #​10427 128c7a36397d99608dea918885b68bd302d00e7f Thanks @​lilnasy! - Fixes an issue where error pages did not have access to the Astro.locals fields provided by the adapter.

v4.5.3

Compare Source

Patch Changes

• #​10410 055fe293c6702dd27bcd6c4f59297c6d4385abb1 Thanks @​lilnasy! - Fixes an issue where configured redirects could not include certain characters in the target path.

• #​9820 8edc42aa7c209b12d98ecf20cdecccddf7314af0 Thanks @​alexnguyennz! - Prevents fully formed URLs in attributes from being escaped

v4.5.2

Compare Source

Patch Changes

• #​10400 629c9d7c4d96ae5711d95601e738b3d31d268116 Thanks @​mingjunlu! - Fixes an issue where dev toolbar x-ray didn't escape props content.

v4.5.1

Compare Source

Patch Changes

• #​10392 [`02aeb01cb8b6

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.