build(deps): Bump the patch-minor group with 7 updates

[dependabot]

Bumps the patch-minor group with 7 updates:

Package	From	To
@astrojs/db	0.14.0	0.14.1
astro	4.15.1	4.15.4
framer-motion	11.3.31	11.5.4
@playwright/test	1.46.1	1.47.0
@types/node	22.5.2	22.5.4
html-validate	8.21.0	8.22.0
sass	1.77.8	1.78.0

Updates @astrojs/db from 0.14.0 to 0.14.1

Release notes

Sourced from @​astrojs/db's releases.

@​astrojs/db@​0.14.1

Patch Changes

• #11894 cc820c5 Thanks @​Fryuni! - Fixes mixed environment variable for app token when using DB commands with libSQL remote.

• Updated dependencies []:

  • @​astrojs/studio@​0.1.1

Changelog

Sourced from @​astrojs/db's changelog.

0.14.1

Patch Changes

• #11894 cc820c5 Thanks @​Fryuni! - Fixes mixed environment variable for app token when using DB commands with libSQL remote.

• Updated dependencies []:

  • @​astrojs/studio@​0.1.1

Commits

• 65bfefb [ci] release (#11909)
• 5705200 [ci] format
• cc820c5 Fix mixed DB token env vars (#11894)
• 645f4e2 fix(deps): update all non-major dependencies (#11896)
• 11ebf3b chore: move node and vercel to adapters repo (#11866)
• See full diff in compare view

Updates astro from 4.15.1 to 4.15.4

Release notes

Sourced from astro's releases.

[email protected]

Patch Changes

• #11879 bd1d4aa Thanks @​matthewp! - Allow passing a cryptography key via ASTRO_KEY

  For Server islands Astro creates a cryptography key in order to hash props for the islands, preventing accidental leakage of secrets.

  If you deploy to an environment with rolling updates then there could be multiple instances of your app with different keys, causing potential key mismatches.

  To fix this you can now pass the ASTRO_KEY environment variable to your build in order to reuse the same key.

  To generate a key use:

  astro create-key
  

  This will print out an environment variable to set like:

  ASTRO_KEY=PIAuyPNn2aKU/bviapEuc/nVzdzZPizKNo3OqF/5PmQ=
  

• #11935 c58193a Thanks @​Princesseuh! - Fixes astro add not using the proper export point when adding certain adapters

[email protected]

Patch Changes

• #11902 d63bc50 Thanks @​ascorbic! - Fixes case where content layer did not update during clean dev builds on Linux and Windows

• #11886 7ff7134 Thanks @​matthewp! - Fixes a missing error message when actions throws during astro sync

• #11904 ca54e3f Thanks @​wtchnm! - perf(assets): avoid downloading original image when using cache

[email protected]

Patch Changes

• #11870 8e5257a Thanks @​ArmandPhilippot! - Fixes typo in documenting the fallbackType property in i18n routing

• #11884 e450704 Thanks @​ascorbic! - Correctly handles content layer data where the transformed value does not match the input schema

• #11900 80b4a18 Thanks @​delucis! - Fixes the user-facing type of the new i18n.routing.fallbackType option to be optional

Changelog

Sourced from astro's changelog.

4.15.4

Patch Changes

• #11879 bd1d4aa Thanks @​matthewp! - Allow passing a cryptography key via ASTRO_KEY

  For Server islands Astro creates a cryptography key in order to hash props for the islands, preventing accidental leakage of secrets.

  If you deploy to an environment with rolling updates then there could be multiple instances of your app with different keys, causing potential key mismatches.

  To fix this you can now pass the ASTRO_KEY environment variable to your build in order to reuse the same key.

  To generate a key use:

  astro create-key
  

  This will print out an environment variable to set like:

  ASTRO_KEY=PIAuyPNn2aKU/bviapEuc/nVzdzZPizKNo3OqF/5PmQ=
  

• #11935 c58193a Thanks @​Princesseuh! - Fixes astro add not using the proper export point when adding certain adapters

4.15.3

Patch Changes

• #11902 d63bc50 Thanks @​ascorbic! - Fixes case where content layer did not update during clean dev builds on Linux and Windows

• #11886 7ff7134 Thanks @​matthewp! - Fixes a missing error message when actions throws during astro sync

• #11904 ca54e3f Thanks @​wtchnm! - perf(assets): avoid downloading original image when using cache

4.15.2

Patch Changes

• #11870 8e5257a Thanks @​ArmandPhilippot! - Fixes typo in documenting the fallbackType property in i18n routing

• #11884 e450704 Thanks @​ascorbic! - Correctly handles content layer data where the transformed value does not match the input schema

• #11900 80b4a18 Thanks @​delucis! - Fixes the user-facing type of the new i18n.routing.fallbackType option to be optional

Commits

• 0d50d75 [ci] release (#11936)
• c0c9645 [ci] format
• bd1d4aa Allow passing into the crypto key via ASTRO_KEY (#11879)
• 4a44e82 fix: explicitly check for null props in serializeSignals (#11930)
• c58193a fix(add): Use proper export names when adding adapters (#11935)
• 65bfefb [ci] release (#11909)
• ca54e3f perf(astro/assets): avoid downloading original image when using cache (#11904)
• 5d7bc70 [ci] format
• 7ff7134 Provide an error message when Actions throws in setup (#11886)
• f696051 [ci] format
• Additional commits viewable in compare view

Updates framer-motion from 11.3.31 to 11.5.4

Changelog

Sourced from framer-motion's changelog.

[11.5.4] 2024-09-05

Fixed

• Improving tree-shakability.

[11.5.3] 2024-09-05

Fixed

• Reorder components now import motion proxy.

[11.5.2] 2024-09-04

Added

• Changing motion() deprecation warning to warnOnce.

[11.5.1] 2024-09-04

Added

• Exporting findSpring for internal use.

[11.5.0] 2024-09-04

Added

• motion.create() and m.create().

Deprecrated

• motion() and m().

[11.4.0] 2024-09-03

Added

• Support for React Server Components, including new entrypoints for motion and m components.

Commits

• 5d9d296 v11.5.4
• 29c4d0f Updating changelog
• b2608b2 Improving pure mark
• c342e05 Updating version
• cff1970 v11.5.3
• 61c6bc9 updating changelog
• 5922278 Moving
• 5619d56 Import hydrateRoot from react-dom/client (#2789)
• beae985 Upgrading to React 18.3.1 (#2788)
• e30cea7 Updating lockfile
• Additional commits viewable in compare view

Updates @playwright/test from 1.46.1 to 1.47.0

Release notes

Sourced from @​playwright/test's releases.

v1.47.0

Network Tab improvements

The Network tab in the UI mode and trace viewer has several nice improvements:

• filtering by asset type and URL
• better display of query string parameters
• preview of font assets

Credit to @​kubajanik for these wonderful improvements!

--tsconfig CLI option

By default, Playwright will look up the closest tsconfig for each imported file using a heuristic. You can now specify a single tsconfig file in the command line, and Playwright will use it for all imported files, not only test files:

# Pass a specific tsconfig
npx playwright test --tsconfig tsconfig.test.json

APIRequestContext now accepts URLSearchParams and string as query parameters

You can now pass URLSearchParams and string as query parameters to APIRequestContext:

test('query params', async ({ request }) => {
  const searchParams = new URLSearchParams();
  searchParams.set('userId', 1);
  const response = await request.get(
      'https://jsonplaceholder.typicode.com/posts',
      {
        params: searchParams // or as a string: 'userId=1'
      }
  );
  // ...
});

Miscellaneous

• The mcr.microsoft.com/playwright:v1.47.0 now serves a Playwright image based on Ubuntu 24.04 Noble. To use the 22.04 jammy-based image, please use mcr.microsoft.com/playwright:v1.47.0-jammy instead.
• The :latest/:focal/:jammy tag for Playwright Docker images is no longer being published. Pin to a specific version for better stability and reproducibility.
• New option behavior in page.removeAllListeners(), browser.removeAllListeners() and browserContext.removeAllListeners() to wait for ongoing listeners to complete.
• TLS client certificates can now be passed from memory by passing cert and key as buffers instead of file paths.
• Attachments with a text/html content type can now be opened in a new tab in the HTML report. This is useful for including third-party reports or other HTML content in the Playwright test report and distributing it to your team.
• noWaitAfter in locator.selectOption() was deprecated.
• We've seen reports of WebGL in Webkit misbehaving on GitHub Actions macos-13. We recommend upgrading GitHub Actions to macos-14.

... (truncated)

Commits

• d5943de cherry-pick(#32475): docs: update browsers version in release notes (#32476)
• 73fdd25 cherry-pick(#32470): feat(chromium): roll to r1134 (#32473)
• 13f4531 chore: mark 1.47 (#32472)
• 0a49c05 chore(test runner): document that --only-changed on CI needs history (#32461)
• a8139b5 docs: add release notes for 1.47 (#32463)
• 9101283 chore: move 'dev-server' extensibility point to plugin (#32448)
• 255143e feat(webkit): roll to r2070 (#32451)
• 9a2c60a chore: identify largest gaps in Bidi API (#32434)
• a87426e Update bug.yml
• ee91bdc feat(ui-mode): display list of query params in request tab (#32443)
• Additional commits viewable in compare view

Updates @types/node from 22.5.2 to 22.5.4

Commits

• See full diff in compare view

Updates html-validate from 8.21.0 to 8.22.0

Release notes

Sourced from html-validate's releases.

v8.22.0

8.22.0 (2024-09-09)

Features

• api: make DOMNode constructor internal (13377ac)
• api: make HtmlElement constructor private (fbf4303)
• deps: drop @babel/code-frame dependency (0003ffd)
• deps: update @​sidvind/better-ajv-errors to v3 (3112289)

Bug Fixes

• deps: update dependency ignore to v5.3.2 (9d86e68)

Commits

• 47e92a9 chore(release): 8.22.0
• e13a1f3 Merge branch 'feature/better-ajv-errors' into 'master'
• 3112289 feat(deps): update @​sidvind/better-ajv-errors to v3
• 2cb7445 Merge branch 'renovate/minimatch-8.x' into 'master'
• 121cf7d chore(deps): update dependency minimatch to v8
• f9806e9 Merge branch 'renovate/jsdom-24.x' into 'master'
• 0ea0cf3 chore(deps): update dependency jsdom to v24
• 995e1fa Merge branch 'renovate/minimatch-7.x' into 'master'
• c7ef20f chore(deps): update dependency minimatch to v7
• 5b0f9e9 chore(deps): update dependency @​html-validate/release-scripts to v6.6.0
• Additional commits viewable in compare view

Updates sass from 1.77.8 to 1.78.0

Release notes

Sourced from sass's releases.

Dart Sass 1.78.0

To install Sass 1.78.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• The meta.feature-exists function is now deprecated. This deprecation is named feature-exists.

• Fix a crash when using @at-root without any queries or children in the indented syntax.

JS API

• Backport the deprecation options (fatalDeprecations, futureDeprecations, and silenceDeprecations) to the legacy JS API. The legacy JS API is itself deprecated, and you should move off of it if possible, but this will allow users of bundlers and other tools that are still using the legacy API to still control deprecation warnings.

• Fix a bug where accessing SourceSpan.url would crash when a relative URL was passed to the Sass API.

Embedded Sass

• Explicitly expose a sass executable from the sass-embedded npm package. This was intended to be included in 1.63.0, but due to the way platform-specific dependency executables are installed it did not work as intended. Now users can run npx sass for local installs or just sass when sass-embedded is installed globally.

• Add linux-riscv64, linux-musl-riscv64, and android-riscv64 support for the sass-embedded npm package.

• Fix an edge case where the Dart VM could hang when shutting down when requests were in flight.

• Fix a race condition where the embedded host could fail to shut down if it was closed around the same time a new compilation was started.

• Fix a bug where parse-time deprecation warnings could not be controlled by the deprecation options in some circumstances.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.78.0

• The meta.feature-exists function is now deprecated. This deprecation is named feature-exists.

• Fix a crash when using @at-root without any queries or children in the indented syntax.

JS API

• Backport the deprecation options (fatalDeprecations, futureDeprecations, and silenceDeprecations) to the legacy JS API. The legacy JS API is itself deprecated, and you should move off of it if possible, but this will allow users of bundlers and other tools that are still using the legacy API to still control deprecation warnings.

• Fix a bug where accessing SourceSpan.url would crash when a relative URL was passed to the Sass API.

Embedded Sass

• Explicitly expose a sass executable from the sass-embedded npm package. This was intended to be included in 1.63.0, but due to the way platform-specific dependency executables are installed it did not work as intended. Now users can run npx sass for local installs or just sass when sass-embedded is installed globally.

• Add linux-riscv64, linux-musl-riscv64, and android-riscv64 support for the sass-embedded npm package.

• Fix an edge case where the Dart VM could hang when shutting down when requests were in flight.

• Fix a race condition where the embedded host could fail to shut down if it was closed around the same time a new compilation was started.

• Fix a bug where parse-time deprecation warnings could not be controlled by the deprecation options in some circumstances.

Commits

• 90a70ef Fix failing double check test for sass-parser (#2330)
• b1d5f98 Backport deprecation API to legacy JS API (#2293)
• 56a4237 Delete unreachable default clause. (#2323)
• a7f623d Bump bufbuild/buf-setup-action in /.github/util/initialize (#2319)
• 9f82850 Ignore new unreachable_switch_default warning. (#2318)
• 798cd7c Update pubspec.yaml (#2321)
• 2bf3ae0 Fix a comment (#2316)
• eb6c19e Initial implementation of a PostCSS-compatible parser JS API (#2304)
• c3cccef Bump dartdoc from 8.0.7 to 8.0.8 (#2300)
• f0a0182 docs: Fix link to custom importer (#2315)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions