[dependabot]

Bumps the docs-minor-patch group in /docs with 2 updates: @astrojs/starlight and astro.

Updates @astrojs/starlight from 0.42.6 to 0.42.7

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.42.7

Patch Changes

• #4264 94e0985 Thanks @​chrispezza! - Fixes a layout shift where the table of contents could be painted at the start of the content area and then jump to the end when a page's HTML arrived in several chunks

• #4285 6f22edd Thanks @​tunetheweb! - Improves hero image loading by adding fetchpriority="high" hint for browsers

Changelog

Sourced from @​astrojs/starlight's changelog.

0.42.7

Patch Changes

• #4264 94e0985 Thanks @​chrispezza! - Fixes a layout shift where the table of contents could be painted at the start of the content area and then jump to the end when a page's HTML arrived in several chunks

• #4285 6f22edd Thanks @​tunetheweb! - Improves hero image loading by adding fetchpriority="high" hint for browsers

Commits

• e200e31 [ci] release (#4274)
• 6f22edd Add fetchpriority=high on Hero images (#4285)
• 6a06a01 Update to Vitest 5 (#4180)
• 94e0985 Fix table of contents layout shift while a page streams in (#4264)
• See full diff in compare view

Updates astro from 7.4.2 to 7.4.4

Release notes

Sourced from astro's releases.

astro@7.4.4

Patch Changes

• #18344 df838da Thanks @​edmundhung! - Allows astro add to configure tagged versions of official adapters

astro@7.4.4-beta.0

Patch Changes

• #18539 db62f3b Thanks @​matthewp! - Allows astro add to configure tagged versions of official adapters

astro@7.4.3

Patch Changes

• #18488 e4e25fa Thanks @​umeraamir69! - CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into script-src and style-src.

• #18500 e5a3a1b Thanks @​astro-factory! - Fixes <Image> and <Picture> emitting duplicate srcset candidates when densities contains equivalent values such as 1 and '1x'

• #18517 c3185b7 Thanks @​okxint! - Fix unhandled AbortError rejection when ClientRouter skips a pending view transition

• #18497 c712113 Thanks @​astro-factory! - Fixes an uncaught TypeError in the browser when a server:defer island request fails due to a network error. The fallback content is kept, as it is for non-200 responses.

• #18525 d0240b9 Thanks @​astro-factory! - Fixes a DEP0190 deprecation warning printed by astro info on Node.js 24 and later

• #18522 776b9a6 Thanks @​astro-factory! - Fixes memoryCache() serving an empty body for cached pages that return an empty 404 or 500 response. These responses now render the 404 or 500 error page on every request.

• #18511 d060ff9 Thanks @​astro-factory! - Fixes transition:name styles missing in dev when the element is inside a component that is only rendered through another component with no styles or scripts

• #18494 5fe699c Thanks @​astro-factory! - Fixes the astro CLI refusing to run on StackBlitz by allowing Node.js >=22.22.0 inside WebContainers, whose Node.js version users cannot change

• #18506 bf43a60 Thanks @​astro-factory! - Fixes <ClientRouter /> animating scroll restoration on back/forward navigation when scroll-behavior: smooth is set. Saved scroll positions are now restored instantly, matching the browser's native behavior.

• #18476 8ea79a2 Thanks @​astro-factory! - Fixes a DataCloneError crash when building pages that render SVG imports with <Image /> or getImage() while experimental.parallelPrerender is enabled.

• #18504 6dbd737 Thanks @​astro-factory! - Fixes <Picture> emitting a duplicate 1x candidate in <source> srcset when densities includes 1

• #18524 7524889 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Image />, <Picture />, <Code />, <Debug /> and <ClientRouter /> components when type-checking a project that extends astro/tsconfigs/strictest with tsc and @astrojs/ts-content-mapper

• #18493 3773941 Thanks @​astro-factory! - Fixes scoped styles of unused Astro components being included in the build when those components are re-exported from a barrel file

• #18512 1151b9e Thanks @​jp-knj! - Fixes CSP hashes added with Astro.csp from components rendered inside <body> being left out of the CSP <meta> element in static builds, including MDX pages

• Updated dependencies [6cf3423, edfbf4a]:

  • @​astrojs/telemetry@​3.4.2
  • @​astrojs/markdown-satteri@​0.4.6

Changelog

Sourced from astro's changelog.

7.4.4

Patch Changes

• #18344 df838da Thanks @​edmundhung! - Allows astro add to configure tagged versions of official adapters

7.4.3

Patch Changes

• #18488 e4e25fa Thanks @​umeraamir69! - CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into script-src and style-src.

• #18500 e5a3a1b Thanks @​astro-factory! - Fixes <Image> and <Picture> emitting duplicate srcset candidates when densities contains equivalent values such as 1 and '1x'

• #18517 c3185b7 Thanks @​okxint! - Fix unhandled AbortError rejection when ClientRouter skips a pending view transition

• #18497 c712113 Thanks @​astro-factory! - Fixes an uncaught TypeError in the browser when a server:defer island request fails due to a network error. The fallback content is kept, as it is for non-200 responses.

• #18525 d0240b9 Thanks @​astro-factory! - Fixes a DEP0190 deprecation warning printed by astro info on Node.js 24 and later

• #18522 776b9a6 Thanks @​astro-factory! - Fixes memoryCache() serving an empty body for cached pages that return an empty 404 or 500 response. These responses now render the 404 or 500 error page on every request.

• #18511 d060ff9 Thanks @​astro-factory! - Fixes transition:name styles missing in dev when the element is inside a component that is only rendered through another component with no styles or scripts

• #18494 5fe699c Thanks @​astro-factory! - Fixes the astro CLI refusing to run on StackBlitz by allowing Node.js >=22.22.0 inside WebContainers, whose Node.js version users cannot change

• #18506 bf43a60 Thanks @​astro-factory! - Fixes <ClientRouter /> animating scroll restoration on back/forward navigation when scroll-behavior: smooth is set. Saved scroll positions are now restored instantly, matching the browser's native behavior.

• #18476 8ea79a2 Thanks @​astro-factory! - Fixes a DataCloneError crash when building pages that render SVG imports with <Image /> or getImage() while experimental.parallelPrerender is enabled.

• #18504 6dbd737 Thanks @​astro-factory! - Fixes <Picture> emitting a duplicate 1x candidate in <source> srcset when densities includes 1

• #18524 7524889 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Image />, <Picture />, <Code />, <Debug /> and <ClientRouter /> components when type-checking a project that extends astro/tsconfigs/strictest with tsc and @astrojs/ts-content-mapper

• #18493 3773941 Thanks @​astro-factory! - Fixes scoped styles of unused Astro components being included in the build when those components are re-exported from a barrel file

• #18512 1151b9e Thanks @​jp-knj! - Fixes CSP hashes added with Astro.csp from components rendered inside <body> being left out of the CSP <meta> element in static builds, including MDX pages

• Updated dependencies [6cf3423, edfbf4a]:

  • @​astrojs/telemetry@​3.4.2
  • @​astrojs/markdown-satteri@​0.4.6

Commits

• 883e672 [ci] release (#18540)
• df838da astro add: configure tagged official adapters (#18344)
• fda754d [ci] release (#18478)
• 776b9a6 Prevent memory cache from storing empty 404/500 responses that would be rerou...
• d060ff9 Fix transition:name styles silently dropped in dev when component is nested u...
• 290b196 Merge commit from fork
• d0240b9 fix(cli): drop shell: true from astro info package manager calls to avoid DEP...
• 7524889 Fix type errors in shipped components under the strictest TypeScript preset...
• d53d823 [ci] format
• 6dbd737 fix(assets): avoid duplicate 1x candidate in Picture source srcset when densi...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note

Bump docs dependency group: @astrojs/starlight to ^0.42.7 and astro to ^7.4.4

Updates the declared version ranges in docs/package.json for @astrojs/starlight (^0.42.6 → ^0.42.7) and astro (^7.4.2 → ^7.4.4), and refreshes docs/package-lock.json to match. Both are patch-level updates within the docs minor-patch group.

^{Macroscope summarized fa6933c.}

[cloudflare-workers-and-pages]

Deploying podnotes with    Cloudflare Pages

Latest commit:	fa6933c
Status:	✅  Deploy successful!
Preview URL:	https://6d5d9ffc.podnotes.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-docs-yw3v.podnotes.pages.dev

View logs

[cursor]

Review

Dependabot docs(deps) group bump in /docs only. Diff is docs/package.json + docs/package-lock.json. Plugin runtime, main.js, and root lockfile are untouched. Title will not cut a release.

Updates

• @astrojs/starlight 0.42.6 → 0.42.7 (published 2026-10-23): TOC layout-shift fix while HTML streams in; fetchpriority="high" on hero images. Custom Hero.astro is unchanged.
• astro 7.4.2 → 7.4.4 (7.4.3/7.4.4 published 2026-10-28): patches only (astro add tagged adapters, CSP empty-hash, Image/Picture srcset dupes, ClientRouter/island error handling, astro info DEP0190, memoryCache empty 404/500, transition:name in dev, WebContainer Node floor, SVG DataCloneError with unused experimental.parallelPrerender). engines.node stays >=22.23.4, matching .nvmrc.
• Transitives: @astrojs/telemetry 3.4.1 → 3.4.2; Astro-nested @astrojs/markdown-satteri 0.4.5 → 0.4.6 and @astrojs/prism 4.1.1 → 4.1.2; vite 8.3.4 → 8.3.5 (same patch already on the plugin lockfile from #528). Top-level Starlight markdown-satteri stays 0.4.4. Resolved rolldown 1.2.14 and postcss 8.5.30 are unchanged vs master.
• 7-day cooldown is met. astro@7.4.5 (2026-11-02) and later Starlight patches stay out, correctly.

This site does not use the experimental/i18n/adapter/CSP/ClientRouter surfaces those patches touch.

Verification

• Node 22.23.4; branch is one commit ahead of current master (e4ef5c5).
• npm ci --prefix docs frozen; lockfile not rewritten.
• npm audit --prefix docs and --omit=dev: 0.
• npm run docs:build: static 22 pages + Pagefind, all internal links valid, 112 legacy fragments resolve.
• GitHub: Test (lint/format, unit, svelte/tooling, build/sizes), Docs, Validate PR title, Dependency Review, Platforms (macOS/Windows), Cloudflare Pages all green. CodeQL NEUTRAL (configurations not found on this docs-lockfile SHA), same as #528/#529 docs-only heads.

No regressions. Squash-merging.

  

_{Sent by Cursor Automation: Dependabot PRs}