chore(deps): bump sharp and astro in /astro-site by dependabot[bot] · Pull Request #244 · braboj/tutorial-git

dependabot · 2026-07-25T19:59:29Z

Bumps sharp to 0.35.3 and updates ancestor dependency astro. These dependencies need to be updated together.

Updates sharp from 0.34.5 to 0.35.3

Release notes

v0.35.3
Tighten verification of text dimensions, TIFF tile dimensions and extend values.
Improve code bundler support by resolving path to libvips binary.
Increase default concurrency when use of MALLOC_ARENA_MAX is detected.
Emit warning about binaries provided by Electron for use on Linux.
Add hasAlpha property to output info. #4500
TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @Andarist
Bound clahe width and height to avoid signed overflow. #4551 @metsw24-max
Bound trim margin to avoid signed overflow. #4552 @metsw24-max
Reject infinite values when validating numbers. #4553 @metsw24-max
Bound extract region to libvips coordinate limit. #4555 @metsw24-max
Verify background colour values are numbers. #4556 @metsw24-max
Bound create and raw input dimensions to coordinate limit. #4558 @metsw24-max
Tighten recomb and affine matrix verification. #4560 @chatman-media
Verify cache memory limit to avoid overflow. #4561 @metsw24-max
v0.35.3-rc.2
Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

1018449 Release v0.35.3
ba303a7 Prerelease v0.35.3-rc.2
4f94fc5 Upgrade to sharp-libvips v1.3.2
c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
9a8d002 Docs: Add changelog entry and note about transferable #4520
8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
e000d0b Prerelease v0.35.3-rc.1
9554ca9 Prerelease v0.35.3-rc.0
6a29fd5 Emit warning about native binaries on Linux Electron
540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
Additional commits viewable in compare view

Updates astro from 6.1.8 to 7.1.3

Release notes

Sourced from astro's releases.

astro@7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
astro@7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
astro@7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
astro@7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.
Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:
// astro.config.mjs

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

... (truncated)

Commits

cf9ffc7 [ci] release (#17455)
630b382 Use os.availableParallelism() for image optimization queue to fix OOM in CP...
8a7f7e0 [ci] release (#17411)
ebbd793 chore(deps): update astro-embed (#17436)
311e42c [ci] format
1d62202 chore(deps): update neotraverse to v1 (#17446)
a5f7230 fix(astro): update cookie to v2 (#17445)
91992ef fix(prefetch): swallow fetch-fallback rejection to avoid unhandled 'Load fail...
a89c137 fix(astro): propagate mutated locals to custom error pages (#17402)
91c645a [ci] release (#17403)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [sharp](https://github.com/lovell/sharp) to 0.35.3 and updates ancestor dependency [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro). These dependencies need to be updated together. Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.3) Updates `astro` from 6.1.8 to 7.1.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.3 dependency-type: indirect - dependency-name: astro dependency-version: 7.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-25T19:59:29Z

Bumps sharp to 0.35.3 and updates ancestor dependency astro. These dependencies need to be updated together.

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3
Tighten verification of text dimensions, TIFF tile dimensions and extend values.
Improve code bundler support by resolving path to libvips binary.
Increase default concurrency when use of MALLOC_ARENA_MAX is detected.
Emit warning about binaries provided by Electron for use on Linux.
Add hasAlpha property to output info. #4500
TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @Andarist
Bound clahe width and height to avoid signed overflow. #4551 @metsw24-max
Bound trim margin to avoid signed overflow. #4552 @metsw24-max
Reject infinite values when validating numbers. #4553 @metsw24-max
Bound extract region to libvips coordinate limit. #4555 @metsw24-max
Verify background colour values are numbers. #4556 @metsw24-max
Bound create and raw input dimensions to coordinate limit. #4558 @metsw24-max
Tighten recomb and affine matrix verification. #4560 @chatman-media
Verify cache memory limit to avoid overflow. #4561 @metsw24-max
v0.35.3-rc.2
Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

1018449 Release v0.35.3
ba303a7 Prerelease v0.35.3-rc.2
4f94fc5 Upgrade to sharp-libvips v1.3.2
c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
9a8d002 Docs: Add changelog entry and note about transferable #4520
8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
e000d0b Prerelease v0.35.3-rc.1
9554ca9 Prerelease v0.35.3-rc.0
6a29fd5 Emit warning about native binaries on Linux Electron
540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
Additional commits viewable in compare view

Updates astro from 6.1.8 to 7.1.3

Release notes

Sourced from astro's releases.

astro@7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
astro@7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
astro@7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
astro@7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.
Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:
// astro.config.mjs

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

... (truncated)

Commits

cf9ffc7 [ci] release (#17455)
630b382 Use os.availableParallelism() for image optimization queue to fix OOM in CP...
8a7f7e0 [ci] release (#17411)
ebbd793 chore(deps): update astro-embed (#17436)
311e42c [ci] format
1d62202 chore(deps): update neotraverse to v1 (#17446)
a5f7230 fix(astro): update cookie to v2 (#17445)
91992ef fix(prefetch): swallow fetch-fallback rejection to avoid unhandled 'Load fail...
a89c137 fix(astro): propagate mutated locals to custom error pages (#17402)
91c645a [ci] release (#17403)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [sharp](https://github.com/lovell/sharp) to 0.35.3 and updates ancestor dependency [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro). These dependencies need to be updated together. Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.3) Updates `astro` from 6.1.8 to 7.1.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.3 dependency-type: indirect - dependency-name: astro dependency-version: 7.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-25T19:59:29Z

Bumps sharp to 0.35.3 and updates ancestor dependency astro. These dependencies need to be updated together.

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3
Tighten verification of text dimensions, TIFF tile dimensions and extend values.
Improve code bundler support by resolving path to libvips binary.
Increase default concurrency when use of MALLOC_ARENA_MAX is detected.
Emit warning about binaries provided by Electron for use on Linux.
Add hasAlpha property to output info. #4500
TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @Andarist
Bound clahe width and height to avoid signed overflow. #4551 @metsw24-max
Bound trim margin to avoid signed overflow. #4552 @metsw24-max
Reject infinite values when validating numbers. #4553 @metsw24-max
Bound extract region to libvips coordinate limit. #4555 @metsw24-max
Verify background colour values are numbers. #4556 @metsw24-max
Bound create and raw input dimensions to coordinate limit. #4558 @metsw24-max
Tighten recomb and affine matrix verification. #4560 @chatman-media
Verify cache memory limit to avoid overflow. #4561 @metsw24-max
v0.35.3-rc.2
Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

1018449 Release v0.35.3
ba303a7 Prerelease v0.35.3-rc.2
4f94fc5 Upgrade to sharp-libvips v1.3.2
c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
9a8d002 Docs: Add changelog entry and note about transferable #4520
8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
e000d0b Prerelease v0.35.3-rc.1
9554ca9 Prerelease v0.35.3-rc.0
6a29fd5 Emit warning about native binaries on Linux Electron
540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
Additional commits viewable in compare view

Updates astro from 6.1.8 to 7.1.3

Release notes

Sourced from astro's releases.

astro@7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
astro@7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
astro@7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
astro@7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.
Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:
// astro.config.mjs

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

... (truncated)

Commits

cf9ffc7 [ci] release (#17455)
630b382 Use os.availableParallelism() for image optimization queue to fix OOM in CP...
8a7f7e0 [ci] release (#17411)
ebbd793 chore(deps): update astro-embed (#17436)
311e42c [ci] format
1d62202 chore(deps): update neotraverse to v1 (#17446)
a5f7230 fix(astro): update cookie to v2 (#17445)
91992ef fix(prefetch): swallow fetch-fallback rejection to avoid unhandled 'Load fail...
a89c137 fix(astro): propagate mutated locals to custom error pages (#17402)
91c645a [ci] release (#17403)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [sharp](https://github.com/lovell/sharp) to 0.35.3 and updates ancestor dependency [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro). These dependencies need to be updated together. Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.3) Updates `astro` from 6.1.8 to 7.1.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.3 dependency-type: indirect - dependency-name: astro dependency-version: 7.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-25T19:59:29Z

Bumps sharp to 0.35.3 and updates ancestor dependency astro. These dependencies need to be updated together.

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3
Tighten verification of text dimensions, TIFF tile dimensions and extend values.
Improve code bundler support by resolving path to libvips binary.
Increase default concurrency when use of MALLOC_ARENA_MAX is detected.
Emit warning about binaries provided by Electron for use on Linux.
Add hasAlpha property to output info. #4500
TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @Andarist
Bound clahe width and height to avoid signed overflow. #4551 @metsw24-max
Bound trim margin to avoid signed overflow. #4552 @metsw24-max
Reject infinite values when validating numbers. #4553 @metsw24-max
Bound extract region to libvips coordinate limit. #4555 @metsw24-max
Verify background colour values are numbers. #4556 @metsw24-max
Bound create and raw input dimensions to coordinate limit. #4558 @metsw24-max
Tighten recomb and affine matrix verification. #4560 @chatman-media
Verify cache memory limit to avoid overflow. #4561 @metsw24-max
v0.35.3-rc.2
Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

1018449 Release v0.35.3
ba303a7 Prerelease v0.35.3-rc.2
4f94fc5 Upgrade to sharp-libvips v1.3.2
c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
9a8d002 Docs: Add changelog entry and note about transferable #4520
8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
e000d0b Prerelease v0.35.3-rc.1
9554ca9 Prerelease v0.35.3-rc.0
6a29fd5 Emit warning about native binaries on Linux Electron
540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
Additional commits viewable in compare view

Updates astro from 6.1.8 to 7.1.3

Release notes

Sourced from astro's releases.

astro@7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
astro@7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
astro@7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
astro@7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.
Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:
// astro.config.mjs

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

... (truncated)

Commits

cf9ffc7 [ci] release (#17455)
630b382 Use os.availableParallelism() for image optimization queue to fix OOM in CP...
8a7f7e0 [ci] release (#17411)
ebbd793 chore(deps): update astro-embed (#17436)
311e42c [ci] format
1d62202 chore(deps): update neotraverse to v1 (#17446)
a5f7230 fix(astro): update cookie to v2 (#17445)
91992ef fix(prefetch): swallow fetch-fallback rejection to avoid unhandled 'Load fail...
a89c137 fix(astro): propagate mutated locals to custom error pages (#17402)
91c645a [ci] release (#17403)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [sharp](https://github.com/lovell/sharp) to 0.35.3 and updates ancestor dependency [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro). These dependencies need to be updated together. Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.3) Updates `astro` from 6.1.8 to 7.1.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.3 dependency-type: indirect - dependency-name: astro dependency-version: 7.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-25T19:59:29Z

Bumps sharp to 0.35.3 and updates ancestor dependency astro. These dependencies need to be updated together.

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3
Tighten verification of text dimensions, TIFF tile dimensions and extend values.
Improve code bundler support by resolving path to libvips binary.
Increase default concurrency when use of MALLOC_ARENA_MAX is detected.
Emit warning about binaries provided by Electron for use on Linux.
Add hasAlpha property to output info. #4500
TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @Andarist
Bound clahe width and height to avoid signed overflow. #4551 @metsw24-max
Bound trim margin to avoid signed overflow. #4552 @metsw24-max
Reject infinite values when validating numbers. #4553 @metsw24-max
Bound extract region to libvips coordinate limit. #4555 @metsw24-max
Verify background colour values are numbers. #4556 @metsw24-max
Bound create and raw input dimensions to coordinate limit. #4558 @metsw24-max
Tighten recomb and affine matrix verification. #4560 @chatman-media
Verify cache memory limit to avoid overflow. #4561 @metsw24-max
v0.35.3-rc.2
Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

1018449 Release v0.35.3
ba303a7 Prerelease v0.35.3-rc.2
4f94fc5 Upgrade to sharp-libvips v1.3.2
c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
9a8d002 Docs: Add changelog entry and note about transferable #4520
8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
e000d0b Prerelease v0.35.3-rc.1
9554ca9 Prerelease v0.35.3-rc.0
6a29fd5 Emit warning about native binaries on Linux Electron
540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
Additional commits viewable in compare view

Updates astro from 6.1.8 to 7.1.3

Release notes

Sourced from astro's releases.

astro@7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
astro@7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
astro@7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
astro@7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.
Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:
// astro.config.mjs

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

... (truncated)

Commits

cf9ffc7 [ci] release (#17455)
630b382 Use os.availableParallelism() for image optimization queue to fix OOM in CP...
8a7f7e0 [ci] release (#17411)
ebbd793 chore(deps): update astro-embed (#17436)
311e42c [ci] format
1d62202 chore(deps): update neotraverse to v1 (#17446)
a5f7230 fix(astro): update cookie to v2 (#17445)
91992ef fix(prefetch): swallow fetch-fallback rejection to avoid unhandled 'Load fail...
a89c137 fix(astro): propagate mutated locals to custom error pages (#17402)
91c645a [ci] release (#17403)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [sharp](https://github.com/lovell/sharp) to 0.35.3 and updates ancestor dependency [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro). These dependencies need to be updated together. Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.3) Updates `astro` from 6.1.8 to 7.1.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.3 dependency-type: indirect - dependency-name: astro dependency-version: 7.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-25T19:59:29Z

Bumps sharp to 0.35.3 and updates ancestor dependency astro. These dependencies need to be updated together.

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3
Tighten verification of text dimensions, TIFF tile dimensions and extend values.
Improve code bundler support by resolving path to libvips binary.
Increase default concurrency when use of MALLOC_ARENA_MAX is detected.
Emit warning about binaries provided by Electron for use on Linux.
Add hasAlpha property to output info. #4500
TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @Andarist
Bound clahe width and height to avoid signed overflow. #4551 @metsw24-max
Bound trim margin to avoid signed overflow. #4552 @metsw24-max
Reject infinite values when validating numbers. #4553 @metsw24-max
Bound extract region to libvips coordinate limit. #4555 @metsw24-max
Verify background colour values are numbers. #4556 @metsw24-max
Bound create and raw input dimensions to coordinate limit. #4558 @metsw24-max
Tighten recomb and affine matrix verification. #4560 @chatman-media
Verify cache memory limit to avoid overflow. #4561 @metsw24-max
v0.35.3-rc.2
Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

1018449 Release v0.35.3
ba303a7 Prerelease v0.35.3-rc.2
4f94fc5 Upgrade to sharp-libvips v1.3.2
c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
9a8d002 Docs: Add changelog entry and note about transferable #4520
8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
e000d0b Prerelease v0.35.3-rc.1
9554ca9 Prerelease v0.35.3-rc.0
6a29fd5 Emit warning about native binaries on Linux Electron
540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
Additional commits viewable in compare view

Updates astro from 6.1.8 to 7.1.3

Release notes

Sourced from astro's releases.

astro@7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
astro@7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
astro@7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
astro@7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.
Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:
// astro.config.mjs

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

... (truncated)

Commits

cf9ffc7 [ci] release (#17455)
630b382 Use os.availableParallelism() for image optimization queue to fix OOM in CP...
8a7f7e0 [ci] release (#17411)
ebbd793 chore(deps): update astro-embed (#17436)
311e42c [ci] format
1d62202 chore(deps): update neotraverse to v1 (#17446)
a5f7230 fix(astro): update cookie to v2 (#17445)
91992ef fix(prefetch): swallow fetch-fallback rejection to avoid unhandled 'Load fail...
a89c137 fix(astro): propagate mutated locals to custom error pages (#17402)
91c645a [ci] release (#17403)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [sharp](https://github.com/lovell/sharp) to 0.35.3 and updates ancestor dependency [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro). These dependencies need to be updated together. Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.3) Updates `astro` from 6.1.8 to 7.1.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.3 dependency-type: indirect - dependency-name: astro dependency-version: 7.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-25T19:59:29Z

Bumps sharp to 0.35.3 and updates ancestor dependency astro. These dependencies need to be updated together.

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3
Tighten verification of text dimensions, TIFF tile dimensions and extend values.
Improve code bundler support by resolving path to libvips binary.
Increase default concurrency when use of MALLOC_ARENA_MAX is detected.
Emit warning about binaries provided by Electron for use on Linux.
Add hasAlpha property to output info. #4500
TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @Andarist
Bound clahe width and height to avoid signed overflow. #4551 @metsw24-max
Bound trim margin to avoid signed overflow. #4552 @metsw24-max
Reject infinite values when validating numbers. #4553 @metsw24-max
Bound extract region to libvips coordinate limit. #4555 @metsw24-max
Verify background colour values are numbers. #4556 @metsw24-max
Bound create and raw input dimensions to coordinate limit. #4558 @metsw24-max
Tighten recomb and affine matrix verification. #4560 @chatman-media
Verify cache memory limit to avoid overflow. #4561 @metsw24-max
v0.35.3-rc.2
Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

1018449 Release v0.35.3
ba303a7 Prerelease v0.35.3-rc.2
4f94fc5 Upgrade to sharp-libvips v1.3.2
c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
9a8d002 Docs: Add changelog entry and note about transferable #4520
8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
e000d0b Prerelease v0.35.3-rc.1
9554ca9 Prerelease v0.35.3-rc.0
6a29fd5 Emit warning about native binaries on Linux Electron
540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
Additional commits viewable in compare view

Updates astro from 6.1.8 to 7.1.3

Release notes

Sourced from astro's releases.

astro@7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
astro@7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
astro@7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
astro@7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.
Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:
// astro.config.mjs

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

... (truncated)

Commits

cf9ffc7 [ci] release (#17455)
630b382 Use os.availableParallelism() for image optimization queue to fix OOM in CP...
8a7f7e0 [ci] release (#17411)
ebbd793 chore(deps): update astro-embed (#17436)
311e42c [ci] format
1d62202 chore(deps): update neotraverse to v1 (#17446)
a5f7230 fix(astro): update cookie to v2 (#17445)
91992ef fix(prefetch): swallow fetch-fallback rejection to avoid unhandled 'Load fail...
a89c137 fix(astro): propagate mutated locals to custom error pages (#17402)
91c645a [ci] release (#17403)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [sharp](https://github.com/lovell/sharp) to 0.35.3 and updates ancestor dependency [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro). These dependencies need to be updated together. Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.3) Updates `astro` from 6.1.8 to 7.1.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.3 dependency-type: indirect - dependency-name: astro dependency-version: 7.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-25T19:59:29Z

Bumps sharp to 0.35.3 and updates ancestor dependency astro. These dependencies need to be updated together.

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3
Tighten verification of text dimensions, TIFF tile dimensions and extend values.
Improve code bundler support by resolving path to libvips binary.
Increase default concurrency when use of MALLOC_ARENA_MAX is detected.
Emit warning about binaries provided by Electron for use on Linux.
Add hasAlpha property to output info. #4500
TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @Andarist
Bound clahe width and height to avoid signed overflow. #4551 @metsw24-max
Bound trim margin to avoid signed overflow. #4552 @metsw24-max
Reject infinite values when validating numbers. #4553 @metsw24-max
Bound extract region to libvips coordinate limit. #4555 @metsw24-max
Verify background colour values are numbers. #4556 @metsw24-max
Bound create and raw input dimensions to coordinate limit. #4558 @metsw24-max
Tighten recomb and affine matrix verification. #4560 @chatman-media
Verify cache memory limit to avoid overflow. #4561 @metsw24-max
v0.35.3-rc.2
Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

1018449 Release v0.35.3
ba303a7 Prerelease v0.35.3-rc.2
4f94fc5 Upgrade to sharp-libvips v1.3.2
c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
9a8d002 Docs: Add changelog entry and note about transferable #4520
8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
e000d0b Prerelease v0.35.3-rc.1
9554ca9 Prerelease v0.35.3-rc.0
6a29fd5 Emit warning about native binaries on Linux Electron
540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
Additional commits viewable in compare view

Updates astro from 6.1.8 to 7.1.3

Release notes

Sourced from astro's releases.

astro@7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
astro@7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
astro@7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
astro@7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.
Set experimental.collectionStorage: 'chunked' to instead split the data store across many smaller, content-addressed files inside a .astro/data-store/ directory, described by a manifest:
// astro.config.mjs

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.3
Patch Changes
#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.
7.1.2
Patch Changes
#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.
#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)
#17405 91992ef Thanks @Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().
7.1.1
Patch Changes
#17399 4b03702 Thanks @matthewp! - Fixes encoded request paths being routed incorrectly when using domain-based i18n
7.1.0
Minor Changes
#17302 5f4dc03 Thanks @astrobot-houston! - Adds a new deferRender option to the glob() content loader
When set to true, renderable entries (such as Markdown) are not rendered during content sync. Instead, rendering is deferred until the entry is actually rendered in a page, using the same on-demand path that .mdx files already use.
This reduces memory usage during astro build for large collections whose rendered output is much larger than the source — for example, Markdown that uses heavy rehype plugins like rehype-katex. Such builds could previously run out of memory while storing the eagerly-rendered HTML for every entry.
// src/content.config.tsimport{defineCollection}from'astro:content';import{glob}from'astro/loaders';constdocs=defineCollection({loader: glob({pattern: '**/*.md',base: 'src/content/docs',deferRender: true}),});
By default deferRender is false, preserving the existing behavior of rendering entries eagerly during sync so their rendered HTML can be cached across builds.
#17296 30698a2 Thanks @ematipico! - Adds a new experimental collectionStorage option for controlling how the content layer persists its data store
By default, Astro serializes the entire content layer data store to a single file (.astro/data-store.json). For very large content collections, this file can grow large enough to hit platform file-size limits.

... (truncated)

Commits

cf9ffc7 [ci] release (#17455)
630b382 Use os.availableParallelism() for image optimization queue to fix OOM in CP...
8a7f7e0 [ci] release (#17411)
ebbd793 chore(deps): update astro-embed (#17436)
311e42c [ci] format
1d62202 chore(deps): update neotraverse to v1 (#17446)
a5f7230 fix(astro): update cookie to v2 (#17445)
91992ef fix(prefetch): swallow fetch-fallback rejection to avoid unhandled 'Load fail...
a89c137 fix(astro): propagate mutated locals to custom error pages (#17402)
91c645a [ci] release (#17403)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [sharp](https://github.com/lovell/sharp) to 0.35.3 and updates ancestor dependency [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro). These dependencies need to be updated together. Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.3) Updates `astro` from 6.1.8 to 7.1.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.3 dependency-type: indirect - dependency-name: astro dependency-version: 7.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 25, 2026

dependabotBot mentioned this pull request Jul 25, 2026
chore(deps): bump astro from 6.1.8 to 7.1.0 in /astro-site #242
Closed