Skip to content

chore(deps): bump the site-dependencies group across 1 directory with 5 updates - #186

Open
dependabot[bot] wants to merge 1 commit into
stagefrom
dependabot/npm_and_yarn/site/site-dependencies-f633389e03
Open

chore(deps): bump the site-dependencies group across 1 directory with 5 updates#186
dependabot[bot] wants to merge 1 commit into
stagefrom
dependabot/npm_and_yarn/site/site-dependencies-f633389e03

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the site-dependencies group with 5 updates in the /site directory:

PackageFromTo
@fontsource-variable/public-sans5.2.75.3.0
@fontsource/ibm-plex-mono5.2.75.3.0
sharp0.34.50.35.3
starlight-versions0.9.00.9.1
shiki4.2.04.4.3

Updates @fontsource-variable/public-sans from 5.2.7 to 5.3.0

Commits

Updates @fontsource/ibm-plex-mono from 5.2.7 to 5.3.0

Commits

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

  • Improve code bundler support by resolving path to libvips binary.

  • Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

  • Emit warning about binaries provided by Electron for use on Linux.

  • Add hasAlpha property to output info. #4500

  • TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520@​Andarist

  • Bound clahe width and height to avoid signed overflow. #4551@​metsw24-max

  • Bound trim margin to avoid signed overflow. #4552@​metsw24-max

  • Reject infinite values when validating numbers. #4553@​metsw24-max

  • Bound extract region to libvips coordinate limit. #4555@​metsw24-max

  • Verify background colour values are numbers. #4556@​metsw24-max

  • Bound create and raw input dimensions to coordinate limit. #4558@​metsw24-max

  • Tighten recomb and affine matrix verification. #4560@​chatman-media

  • Verify cache memory limit to avoid overflow. #4561@​metsw24-max

v0.35.3-rc.2

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits
  • 1018449 Release v0.35.3
  • ba303a7 Prerelease v0.35.3-rc.2
  • 4f94fc5 Upgrade to sharp-libvips v1.3.2
  • c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
  • 9a8d002 Docs: Add changelog entry and note about transferable #4520
  • 8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
  • e000d0b Prerelease v0.35.3-rc.1
  • 9554ca9 Prerelease v0.35.3-rc.0
  • 6a29fd5 Emit warning about native binaries on Linux Electron
  • 540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
  • Additional commits viewable in compare view

Updates starlight-versions from 0.9.0 to 0.9.1

Release notes

Sourced from starlight-versions's releases.

starlight-versions@0.9.1

Patch Changes

Changelog

Sourced from starlight-versions's changelog.

0.9.1

Patch Changes

Commits

Updates shiki from 4.2.0 to 4.4.3

Release notes

Sourced from shiki's releases.

v4.4.3

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v4.4.2

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v4.4.1

🚀 Features

View changes on GitHub

v4.4.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v4.3.1

🚀 Features

View changes on GitHub

v4.3.0

🚀 Features

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the site-dependencies group across 1 directory with…
9e300ca
… 5 updates
Bumps the site-dependencies group with 5 updates in the /site directory:
| Package | From | To |
| --- | --- | --- |
| [@fontsource-variable/public-sans](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/public-sans) | `5.2.7` | `5.3.0` |
| [@fontsource/ibm-plex-mono](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/ibm-plex-mono) | `5.2.7` | `5.3.0` |
| [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.3` |
| [starlight-versions](https://github.com/HiDeoo/starlight-versions/tree/HEAD/packages/starlight-versions) | `0.9.0` | `0.9.1` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.2.0` | `4.4.3` |
Updates `@fontsource-variable/public-sans` from 5.2.7 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/public-sans)
Updates `@fontsource/ibm-plex-mono` from 5.2.7 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/ibm-plex-mono)
Updates `sharp` from 0.34.5 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.3)
Updates `starlight-versions` from 0.9.0 to 0.9.1
- [Release notes](https://github.com/HiDeoo/starlight-versions/releases)
- [Changelog](https://github.com/HiDeoo/starlight-versions/blob/main/packages/starlight-versions/CHANGELOG.md)
- [Commits](https://github.com/HiDeoo/starlight-versions/commits/starlight-versions@0.9.1/packages/starlight-versions)
Updates `shiki` from 4.2.0 to 4.4.3
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.4.3/packages/shiki)
---
updated-dependencies:
- dependency-name: "@fontsource-variable/public-sans"
dependency-version: 5.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: site-dependencies
- dependency-name: "@fontsource/ibm-plex-mono"
dependency-version: 5.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: site-dependencies
- dependency-name: sharp
dependency-version: 0.35.3
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: site-dependencies
- dependency-name: starlight-versions
dependency-version: 0.9.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: site-dependencies
- dependency-name: shiki
dependency-version: 4.4.3
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: site-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 19, 2026
@dependabot
dependabotBot requested a review from jaylann as a code ownerAugust 19, 2026 10:15
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 19, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jaylannjaylannAwaiting requested review from jaylannjaylann is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants