chore(deps): bump the minor-patch group across 1 directory with 4 updates by dependabot[bot] · Pull Request #94 · tinyauthapp/docs

dependabot · 2026-05-12T10:58:56Z

Bumps the minor-patch group with 4 updates in the / directory: @astrojs/starlight, astro, mermaid and otpauth.

Updates @astrojs/starlight from 0.38.3 to 0.39.2

Release notes

Sourced from @astrojs/starlight's releases.

@astrojs/starlight@0.39.2

Patch Changes

#3890 2d05e18 Thanks @tats-u! - Fixes CSS selector for text-autospace styles in Chromium browsers

@astrojs/starlight@0.39.1

Patch Changes

#3885 010eed1 Thanks @ArmandPhilippot! - Fixes the version mentioned in an error message related to autogenerated sidebar groups support.

#3887 b3c6990 Thanks @delucis! - Adds 13 new icons: clock, desktop, mobile-android, window, database, server, code-branch, notes, question, question-circle, analytics, padlock, and solidjs.

@astrojs/starlight@0.39.0

Minor Changes
#3618 dcf6d09 Thanks @HiDeoo! - ⚠️ BREAKING CHANGE: This release changes how autogenerated links work in Starlight’s sidebar configuration.

If you have sidebar groups using the autogenerate key, you must now wrap that configuration in an items array:
{
    label: 'My group',
-   autogenerate: { directory: 'some-dir' },
+   items: [{ autogenerate: { directory: 'some-dir' } }],
}
This change unlocks the possibility to mix autogenerated links and other links in a single group, for example:
{
  label: 'Mixed group',
  items: [
    'example-page',
    { autogenerate: { directory: 'examples' } },
    { label: 'More examples', link: 'https://example.com' },
  ],
}
This release also updates the shape of autogenerated sidebar entries in route data. Autogenerated links and groups in Astro.locals.starlightRoute.sidebar now include an autogenerate object with the configured directory value:
{
  type: 'link',
  label: 'Example',
  href: '/examples/example/',
  isCurrent: false,
  autogenerate: { directory: 'examples' }
}

... (truncated)

Changelog

Sourced from @astrojs/starlight's changelog.

0.39.2

Patch Changes

#3890 2d05e18 Thanks @tats-u! - Fixes CSS selector for text-autospace styles in Chromium browsers

0.39.1

Patch Changes

#3885 010eed1 Thanks @ArmandPhilippot! - Fixes the version mentioned in an error message related to autogenerated sidebar groups support.

#3887 b3c6990 Thanks @delucis! - Adds 13 new icons: clock, desktop, mobile-android, window, database, server, code-branch, notes, question, question-circle, analytics, padlock, and solidjs.

0.39.0

Minor Changes
#3618 dcf6d09 Thanks @HiDeoo! - ⚠️ BREAKING CHANGE: This release changes how autogenerated links work in Starlight’s sidebar configuration.

If you have sidebar groups using the autogenerate key, you must now wrap that configuration in an items array:
{
    label: 'My group',
-   autogenerate: { directory: 'some-dir' },
+   items: [{ autogenerate: { directory: 'some-dir' } }],
}
This change unlocks the possibility to mix autogenerated links and other links in a single group, for example:
{
  label: 'Mixed group',
  items: [
    'example-page',
    { autogenerate: { directory: 'examples' } },
    { label: 'More examples', link: 'https://example.com' },
  ],
}
This release also updates the shape of autogenerated sidebar entries in route data. Autogenerated links and groups in Astro.locals.starlightRoute.sidebar now include an autogenerate object with the configured directory value:
{
  type: 'link',
  label: 'Example',
  href: '/examples/example/',

... (truncated)

Commits

76ff51e [ci] release (#3891)
2d05e18 Make sure to enable text-autospace even in non-Firefox browsers (#3890)
0c0acc0 [ci] release (#3886)
b3c6990 Add new icons to Starlight’s built-in set (#3887)
010eed1 fix: update the version mentioned in autogenerate error message (#3885)
c89c144 [ci] release (#3883)
dcf6d09 Refactor autogenerated sidebar groups (#3618)
6672c35 Update i18next (#3858)
6b18976 [ci] format
417a66c Enable text-autospace in Chinese and Japanese documents (#3872)
Additional commits viewable in compare view

Updates astro from 6.1.8 to 6.3.1

Release notes

Sourced from astro's releases.

astro@6.3.1

Patch Changes

#16646 15fbc41 Thanks @matthewp! - Fixes local images returning 404 on non-prerendered pages when using the generic image endpoint

astro@6.3.0

Minor Changes
#16366 d69f858 Thanks @matthewp! - Adds a new experimental.advancedRouting option that lets you take full control of Astro's request handling pipeline by creating a src/app.ts file in your project.

Today, Astro handles every incoming request through a fixed internal pipeline: trailing slash normalization, redirects, actions, middleware, page rendering, i18n, and so on. That pipeline works great for most sites, but as projects grow you often want to run your own logic between those steps — an auth check before rendering, a rate limiter before actions, custom logging around the whole stack. Advanced routing gives you that control.

When enabled, Astro looks for a src/app.ts file in your project. If it finds one, that file becomes the entrypoint for all server-rendered requests. You compose the pipeline yourself using the handlers Astro provides, and you can slot your own logic anywhere in the chain.

Enabling advanced routing
// astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
advancedRouting: true,
},
});
Two ways to build your pipeline

Astro ships two entrypoints for advanced routing: astro/fetch and astro/hono.

astro/fetch is a low-level, framework-free API built on the Web Fetch standard. You create a FetchState from the incoming request, then call handler functions in sequence. Each handler takes the state, does its work, and returns a Response (or undefined to pass through). This is the core primitive that everything else is built on:
// src/app.ts
import {
  FetchState,
  trailingSlash,
  redirects,
  actions,
  middleware,
  pages,
  i18n,
} from 'astro/fetch';
export default {
async fetch(request: Request) {
const state = new FetchState(request);
// Early exits — these return a Response only when they apply.

... (truncated)

Changelog

Sourced from astro's changelog.

6.3.1

Patch Changes

#16646 15fbc41 Thanks @matthewp! - Fixes local images returning 404 on non-prerendered pages when using the generic image endpoint

6.3.0

Minor Changes
#16366 d69f858 Thanks @matthewp! - Adds a new experimental.advancedRouting option that lets you take full control of Astro's request handling pipeline by creating a src/app.ts file in your project.

Today, Astro handles every incoming request through a fixed internal pipeline: trailing slash normalization, redirects, actions, middleware, page rendering, i18n, and so on. That pipeline works great for most sites, but as projects grow you often want to run your own logic between those steps — an auth check before rendering, a rate limiter before actions, custom logging around the whole stack. Advanced routing gives you that control.

When enabled, Astro looks for a src/app.ts file in your project. If it finds one, that file becomes the entrypoint for all server-rendered requests. You compose the pipeline yourself using the handlers Astro provides, and you can slot your own logic anywhere in the chain.

Enabling advanced routing
// astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
experimental: {
advancedRouting: true,
},
});
Two ways to build your pipeline

Astro ships two entrypoints for advanced routing: astro/fetch and astro/hono.

astro/fetch is a low-level, framework-free API built on the Web Fetch standard. You create a FetchState from the incoming request, then call handler functions in sequence. Each handler takes the state, does its work, and returns a Response (or undefined to pass through). This is the core primitive that everything else is built on:
// src/app.ts
import {
  FetchState,
  trailingSlash,
  redirects,
  actions,
  middleware,
  pages,
  i18n,
} from 'astro/fetch';
export default {
async fetch(request: Request) {
const state = new FetchState(request);

... (truncated)

Commits

868892b [ci] release (#16651)
8abfc7d [ci] format
15fbc41 Skip isRemoteAllowed check for local images in generic endpoint (#16646)
4886184 test: merge astro-assets-prefix test files into one (#16645)
c397908 [ci] format
5311b78 test: parallel testing (#16382)
2ffa0ba [ci] release (#16596)
c68a9da fix(docs): missing version and verb tense (#16632)
f54be80 fix(logger): add flush/close to AstroIntegrationLogger (#16629)
9c6efc5 Escape interpolated values in redirect HTML template (#16592)
Additional commits viewable in compare view

Updates mermaid from 11.14.0 to 11.15.0

Release notes

Sourced from mermaid's releases.

mermaid@11.15.0

Minor Changes
#7174 0aca217 Thanks @milesspencer35! - feat(sequence): Add support for decimal start and increment values in the autonumber directive

#7512 8e17492 Thanks @aruncveli! - feat(flowchart): add datastore shape

In Data flow diagrams, a datastore/warehouse/file/database is used to represent data persistence. It is denoted by a rectangle with only top and bottom borders, and can be used in flowcharts with A@{ shape: datastore, label: "Datastore" }.

#6440 9ad8dde Thanks @yordis, @lgazo! - feat: add Event Modeling diagram

#7707 27db774 Thanks @txmxthy! - feat(architecture): expose four fcose layout knobs for architecture-beta diagrams (nodeSeparation, idealEdgeLengthMultiplier, edgeElasticity, numIter) so authors can tune layout density and spread overlapping siblings without changing diagram source
#7604 bf9502f Thanks @M-a-c! - feat(class): add nested namespace support for class diagrams via dot notation and syntactic nesting

If you have namespaces in class diagrams that use .s already and want to render them without nesting (≤v11.14.0 behaviour), you can use set class.hierarchicalNamespaces=false in your mermaid config:
config:
  class:
    hierarchicalNamespaces: false
#7272 88cdd3d Thanks @xinbenlv! - feat(sankey): add outlined label style, configurable nodeWidth/nodePadding, and custom node colors
Patch Changes

#7737 e9b0f34 Thanks @ashishjain0512! - fix: prevent unbalanced CSS styles in classDefs

#7737 37ff937 Thanks @ashishjain0512! - fix: create CSS styles using the CSSOM

This removes some invalid CSS and normalizes some CSS formatting.

#7508 bfe60cc Thanks @biiab! - fix(stateDiagram): end note now only closes a note when used on a new line

#7737 faafb5d Thanks @ashishjain0512! - fix(gantt): add iteration limit for excludes field

#7737 65f8be2 Thanks @ashishjain0512! - fix: disallow some CSS at-rules in custom CSS

#7726 1502f32 Thanks @aloisklink! - fix(wardley): fix unnecessary sanitization of text

#7578 1f98db8 Thanks @Gaston202! - fix(class): self-referential class multiplicity labels no longer rendered multiple times

Fixes #7560. Resolves an issue where cardinality labels on self-referential class relationships were rendered three times due to edge splitting in the dagre layout. The fix ensures that each sub-edge only carries its relevant label positions.

#7592 2343e38 Thanks @knsv-bot! - fix(sequence): add background box behind alt/else section title labels in sequence diagrams

#7589 7fb9509 Thanks @NYCU-Chung! - fix(block): prevent column widths from shrinking when mixing different column spans

#7632 3f9e0f1 Thanks @ekiauhce! - fix(sequence): correct messageAlign label position for right-to-left arrows in sequence diagrams

... (truncated)

Commits

41646df Merge pull request #7739 from aloisklink/ci/fix-release
2671f5c docs: fix v11.15.0 release
f4bf04b Merge pull request #7738 from mermaid-js/changeset-release/master
abfb563 Version Packages
60b289f Release Candidate 11.15.0 (#7737)
d37c0db Merge pull request #7730 from aloisklink/fix/fix-edgeLabelRightLeft-changes
5ab5a28 docs: improve nested namespace changeset
18f8b4c fix: revert endEdgeLabelLeft/endEdgeLabelRight change
504b2eb Merge pull request #7726 from aloisklink/fix/correct-unnecessary-html-escapes...
1502f32 fix(wardley): fix unnecessary sanitization of text
Additional commits viewable in compare view

Updates otpauth from 9.5.0 to 9.5.1

Release notes

Sourced from otpauth's releases.

v9.5.1

What's Changed

Bump rollup from 4.57.1 to 4.59.0 by @dependabot[bot] in hectorm/otpauth#674

Bump minimatch by @dependabot[bot] in hectorm/otpauth#673

Bump the github-actions-all group with 3 updates by @dependabot[bot] in hectorm/otpauth#675

Bump the npm-development-minor-patch group across 1 directory with 7 updates by @dependabot[bot] in hectorm/otpauth#677

Bump the github-actions-all group with 3 updates by @dependabot[bot] in hectorm/otpauth#679

Bump @rollup/plugin-terser from 0.4.4 to 1.0.0 by @dependabot[bot] in hectorm/otpauth#680

Bump eslint from 9.39.2 to 10.0.3 by @dependabot[bot] in hectorm/otpauth#678

Bump @eslint/js from 9.39.2 to 10.0.1 by @dependabot[bot] in hectorm/otpauth#670

Bump the npm-development-minor-patch group across 1 directory with 8 updates by @dependabot[bot] in hectorm/otpauth#686

Bump the github-actions-all group with 5 updates by @dependabot[bot] in hectorm/otpauth#685

Bump picomatch from 4.0.3 to 4.0.4 by @dependabot[bot] in hectorm/otpauth#684

Bump flatted from 3.3.3 to 3.4.2 by @dependabot[bot] in hectorm/otpauth#682

Bump the github-actions-all group with 4 updates by @dependabot[bot] in hectorm/otpauth#692

Bump @noble/hashes from 2.0.1 to 2.2.0 in the npm-production-minor-patch group by @dependabot[bot] in hectorm/otpauth#688

Bump the npm-development-minor-patch group across 1 directory with 8 updates by @dependabot[bot] in hectorm/otpauth#690

Full Changelog: hectorm/otpauth@v9.5.0...v9.5.1

Commits

4903d3d 9.5.1
b5c6df7 Add 7 day cooldown for new dependency versions
01f7caf Update dependencies
adff202 Bump the npm-development-minor-patch group across 1 directory with 8 updates ...
0e4fa84 Bump @noble/hashes in the npm-production-minor-patch group (#688)
b7f24c9 Bump the github-actions-all group with 4 updates (#692)
80b053d Bump flatted from 3.3.3 to 3.4.2 (#682)
4d0f0cc Bump picomatch from 4.0.3 to 4.0.4 (#684)
2f0e384 Bump the github-actions-all group with 5 updates (#685)
7097f14 Bump the npm-development-minor-patch group across 1 directory with 8 updates ...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

^{Need help on this PR? Tag @codesmith with what you need.}

Let Codesmith autofix CI failures and bot reviews

…ates Bumps the minor-patch group with 4 updates in the / directory: [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight), [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro), [mermaid](https://github.com/mermaid-js/mermaid) and [otpauth](https://github.com/hectorm/otpauth). Updates `@astrojs/starlight` from 0.38.3 to 0.39.2 - [Release notes](https://github.com/withastro/starlight/releases) - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md) - [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.39.2/packages/starlight) Updates `astro` from 6.1.8 to 6.3.1 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.3.1/packages/astro) Updates `mermaid` from 11.14.0 to 11.15.0 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.14.0...mermaid@11.15.0) Updates `otpauth` from 9.5.0 to 9.5.1 - [Release notes](https://github.com/hectorm/otpauth/releases) - [Commits](hectorm/otpauth@v9.5.0...v9.5.1) --- updated-dependencies: - dependency-name: "@astrojs/starlight" dependency-version: 0.39.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: astro dependency-version: 6.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: mermaid dependency-version: 11.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: otpauth dependency-version: 9.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 12, 2026

dosubot Bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label May 12, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the minor-patch group across 1 directory with 4 updates#94

chore(deps): bump the minor-patch group across 1 directory with 4 updates#94
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-patch-efcc7ef614

dependabot Bot commented on behalf of github May 12, 2026 •

edited

Loading

Enabling advanced routing

Two ways to build your pipeline

Enabling advanced routing

Two ways to build your pipeline

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​astrojs/starlight@​0.39.2

Patch Changes

@​astrojs/starlight@​0.39.1

Patch Changes

@​astrojs/starlight@​0.39.0

Minor Changes

0.39.2

Patch Changes

0.39.1

Patch Changes

0.39.0

Minor Changes

astro@6.3.1

Patch Changes

astro@6.3.0

Minor Changes

Enabling advanced routing

Two ways to build your pipeline

6.3.1

Patch Changes

6.3.0

Minor Changes

Enabling advanced routing

Two ways to build your pipeline

mermaid@11.15.0

Minor Changes

Patch Changes

v9.5.1

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 12, 2026 •

edited

Loading

`@astrojs/starlight@0`.39.2

`@astrojs/starlight@0`.39.1

`@astrojs/starlight@0`.39.0