Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps the javascript-dependencies group with 5 updates:

Package From To
@astrojs/react 4.3.1 4.4.0
@types/react 19.1.13 19.1.16
astro 5.13.11 5.14.1
wrangler 4.40.0 4.40.3
typescript-eslint 8.44.1 8.45.0

Updates @astrojs/react from 4.3.1 to 4.4.0

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​4.4.0

Minor Changes

  • #14386 f75f446 Thanks @​yanthomasdev! - Stabilizes the formerly experimental getActionState() and withState() functions introduced in @astrojs/react v3.4.0 used to integrate Astro Actions with React 19's useActionState() hook.

    This example calls a like action that accepts a postId and returns the number of likes. Pass this action to the withState() function to apply progressive enhancement info, and apply to useActionState() to track the result:

    import { actions } from 'astro:actions';
    import { withState } from '@astrojs/react/actions';
    import { useActionState } from 'react';
    

    export function Like({ postId }: { postId: string }) { const [state, action, pending] = useActionState( withState(actions.like), 0, // initial likes );

    return ( <form action={action}> <input type="hidden" name="postId" value={postId} /> <button disabled={pending}>{state} ❤️</button> </form> ); }

    You can also access the state stored by useActionState() from your action handler. Call getActionState() with the API context, and optionally apply a type to the result:

    import { defineAction } from 'astro:actions';
    import { z } from 'astro:schema';
    import { getActionState } from '@astrojs/react/actions';
    

    export const server = { like: defineAction({ input: z.object({ postId: z.string(), }), handler: async ({ postId }, ctx) => { const currentLikes = getActionState<number>(ctx); // write to database return currentLikes + 1; }, }), };

    If you were previously using this experimental feature, you will need to update your code to use the new stable exports:

    // src/components/Form.jsx
    import { actions } from 'astro:actions';
    -import { experimental_withState } from '@astrojs/react/actions';

... (truncated)

Changelog

Sourced from @​astrojs/react's changelog.

4.4.0

Minor Changes

  • #14386 f75f446 Thanks @​yanthomasdev! - Stabilizes the formerly experimental getActionState() and withState() functions introduced in @astrojs/react v3.4.0 used to integrate Astro Actions with React 19's useActionState() hook.

    This example calls a like action that accepts a postId and returns the number of likes. Pass this action to the withState() function to apply progressive enhancement info, and apply to useActionState() to track the result:

    import { actions } from 'astro:actions';
    import { withState } from '@astrojs/react/actions';
    import { useActionState } from 'react';
    

    export function Like({ postId }: { postId: string }) { const [state, action, pending] = useActionState( withState(actions.like), 0, // initial likes );

    return ( <form action={action}> <input type="hidden" name="postId" value={postId} /> <button disabled={pending}>{state} ❤️</button> </form> ); }

    You can also access the state stored by useActionState() from your action handler. Call getActionState() with the API context, and optionally apply a type to the result:

    import { defineAction } from 'astro:actions';
    import { z } from 'astro:schema';
    import { getActionState } from '@astrojs/react/actions';
    

    export const server = { like: defineAction({ input: z.object({ postId: z.string(), }), handler: async ({ postId }, ctx) => { const currentLikes = getActionState<number>(ctx); // write to database return currentLikes + 1; }, }), };

    If you were previously using this experimental feature, you will need to update your code to use the new stable exports:

... (truncated)

Commits

Updates @types/react from 19.1.13 to 19.1.16

Commits

Updates astro from 5.13.11 to 5.14.1

Release notes

Sourced from astro's releases.

astro@5.14.1

Patch Changes

astro@5.14.0

Minor Changes

  • #13520 a31edb8 Thanks @​openscript! - Adds a new property routePattern available to GetStaticPathsOptions

    This provides the original, dynamic segment definition in a routing file path (e.g. /[...locale]/[files]/[slug]) from the Astro render context that would not otherwise be available within the scope of getStaticPaths(). This can be useful to calculate the params and props for each page route.

    For example, you can now localize your route segments and return an array of static paths by passing routePattern to a custom getLocalizedData() helper function. The params object will be set with explicit values for each route segment (e.g. locale, files, and slug). Then, these values will be used to generate the routes and can be used in your page template via Astro.params.

    // src/pages/[...locale]/[files]/[slug].astro
    import { getLocalizedData } from "../../../utils/i18n"; export async function getStaticPaths({ routePattern
    }) { const response = await fetch('...'); const data = await response.json(); console.log(routePattern);
    // [...locale]/[files]/[slug] // Call your custom helper with routePattern to generate the static
    paths return data.flatMap((file) => getLocalizedData(file, routePattern)); } const { locale, files,
    slug } = Astro.params;

    For more information about this advanced routing pattern, see Astro's routing reference.

  • #13651 dcfbd8c Thanks @​ADTC! - Adds a new SvgComponent type

    You can now more easily enforce type safety for your .svg assets by directly importing SVGComponent from astro/types:

    ---
    // src/components/Logo.astro
    import type { SvgComponent } from 'astro/types';
    import HomeIcon from './Home.svg';
    interface Link {
      url: string;
      text: string;
      icon: SvgComponent;
    }
    const links: Link[] = [
      {
        url: '/',
        text: 'Home',
        icon: HomeIcon,
      },
    ];
    ---

... (truncated)

Changelog

Sourced from astro's changelog.

5.14.1

Patch Changes

5.14.0

Minor Changes

  • #13520 a31edb8 Thanks @​openscript! - Adds a new property routePattern available to GetStaticPathsOptions

    This provides the original, dynamic segment definition in a routing file path (e.g. /[...locale]/[files]/[slug]) from the Astro render context that would not otherwise be available within the scope of getStaticPaths(). This can be useful to calculate the params and props for each page route.

    For example, you can now localize your route segments and return an array of static paths by passing routePattern to a custom getLocalizedData() helper function. The params object will be set with explicit values for each route segment (e.g. locale, files, and slug). Then, these values will be used to generate the routes and can be used in your page template via Astro.params.

    ---
    // src/pages/[...locale]/[files]/[slug].astro
    import { getLocalizedData } from '../../../utils/i18n';
    export async function getStaticPaths({ routePattern }) {
    const response = await fetch('...');
    const data = await response.json();
    console.log(routePattern); // [...locale]/[files]/[slug]
    // Call your custom helper with routePattern to generate the static paths
    return data.flatMap((file) => getLocalizedData(file, routePattern));
    }
    const { locale, files, slug } = Astro.params;

    For more information about this advanced routing pattern, see Astro's routing reference.

  • #13651 dcfbd8c Thanks @​ADTC! - Adds a new SvgComponent type

    You can now more easily enforce type safety for your .svg assets by directly importing SVGComponent from astro/types:

    ---
    // src/components/Logo.astro
    import type { SvgComponent } from 'astro/types';
    import HomeIcon from './Home.svg';
    interface Link {
      url: string;
      text: string;
      icon: SvgComponent;

... (truncated)

Commits

Updates wrangler from 4.40.0 to 4.40.3

Release notes

Sourced from wrangler's releases.

wrangler@4.40.3

Patch Changes

  • #10602 ff82d80 Thanks @​tukiminya! - fix: update Secrets Store command status from alpha to open-beta

  • #10623 7a6381c Thanks @​IRCody! - Handle more cases for correctly resolving the full uri for an image when using containers push.

  • #10779 325d22e Thanks @​hoodmane! - Add fallthrough: true for python_modules data rule

  • #10112 8d07576 Thanks @​devin-ai-integration! - fix: allow Workflow bindings when calling getPlatformProxy()

    Workflow bindings are not supported in practice when using getPlatformProxy(). But their existence in a Wrangler config file should not prevent other bindings from working. Previously, calling getPlatformProxy() would crash if there were any Workflow bindings defined. Now, instead, you get a warning telling you that these bindings are not available.

  • #10769 0a554f9 Thanks @​penalosa! - Mark more errors as UserError to disable Sentry reporting

  • #10679 6244a9e Thanks @​KianNH! - Fix rendering for nested objects in containers list and containers info [ID]

  • #10785 d09cab3 Thanks @​pombosilva! - Workflows names and instance IDs are now properly validated with production limits.

  • Updated dependencies [6ff41a6, 0c208e1, 2432022, d0801b1, 0a554f9]:

    • miniflare@4.20250927.0
    • @​cloudflare/unenv-preset@​2.7.5

wrangler@4.40.2

Patch Changes

wrangler@4.40.1

Patch Changes

Changelog

Sourced from wrangler's changelog.

4.40.3

Patch Changes

  • #10602 ff82d80 Thanks @​tukiminya! - fix: update Secrets Store command status from alpha to open-beta

  • #10623 7a6381c Thanks @​IRCody! - Handle more cases for correctly resolving the full uri for an image when using containers push.

  • #10779 325d22e Thanks @​hoodmane! - Add fallthrough: true for python_modules data rule

  • #10112 8d07576 Thanks @​devin-ai-integration! - fix: allow Workflow bindings when calling getPlatformProxy()

    Workflow bindings are not supported in practice when using getPlatformProxy(). But their existence in a Wrangler config file should not prevent other bindings from working. Previously, calling getPlatformProxy() would crash if there were any Workflow bindings defined. Now, instead, you get a warning telling you that these bindings are not available.

  • #10769 0a554f9 Thanks @​penalosa! - Mark more errors as UserError to disable Sentry reporting

  • #10679 6244a9e Thanks @​KianNH! - Fix rendering for nested objects in containers list and containers info [ID]

  • #10785 d09cab3 Thanks @​pombosilva! - Workflows names and instance IDs are now properly validated with production limits.

  • Updated dependencies [6ff41a6, 0c208e1, 2432022, d0801b1, 0a554f9]:

    • miniflare@4.20250927.0
    • @​cloudflare/unenv-preset@​2.7.5

4.40.2

Patch Changes

4.40.1

Patch Changes

Commits
  • 76d2538 Version Packages (#10783)
  • d0801b1 Drop node:process polyfill when v2 is available (#10805)
  • 0a554f9 Mark more errors as UserError (#10769)
  • 0c208e1 build(deps): bump the workerd-and-workers-types group with 2 updates (#10799)
  • 516a6e0 test: improve resilience of deployments e2e tests (#10800)
  • 01db4f1 address todos in unenv e2e tests (#10746)
  • 325d22e Add fallthrough: true to python-modules .so glob rule (#10779)
  • 5446135 Run cleanup every 2 hours and only cleanup kvs that are older than an hour (#...
  • 6244a9e fix(wrangler): Nested object rendering in Containers list/info commands (#10679)
  • d09cab3 Add Workflow name and instance id validations (#10785)
  • Additional commits viewable in compare view

Updates typescript-eslint from 8.44.1 to 8.45.0

Release notes

Sourced from typescript-eslint's releases.

v8.45.0

8.45.0 (2025-09-29)

🚀 Features

  • eslint-plugin: expose rule name via RuleModule interface (#11616)

🩹 Fixes

  • disable generating declaration maps (#11627)
  • ast-spec: narrow ArrowFunctionExpression.generator to false (#11636)
  • eslint-plugin: [no-base-to-string] check if superclass is ignored (#11617)
  • eslint-plugin: [prefer-nullish-coalescing] ignoreBooleanCoercion should not apply to top-level ternary expressions (#11614)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.45.0 (2025-09-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the javascript-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `4.3.1` | `4.4.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.1.13` | `19.1.16` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `5.13.11` | `5.14.1` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.40.0` | `4.40.3` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.44.1` | `8.45.0` |


Updates `@astrojs/react` from 4.3.1 to 4.4.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/react@4.4.0/packages/integrations/react)

Updates `@types/react` from 19.1.13 to 19.1.16
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `astro` from 5.13.11 to 5.14.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@5.14.1/packages/astro)

Updates `wrangler` from 4.40.0 to 4.40.3
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/wrangler/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.40.3/packages/wrangler)

Updates `typescript-eslint` from 8.44.1 to 8.45.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.45.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@astrojs/react"
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: javascript-dependencies
- dependency-name: astro
  dependency-version: 5.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
- dependency-name: wrangler
  dependency-version: 4.40.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: javascript-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.45.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2025
@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Oct 1, 2025

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
letsbuilda-dev a3c3ad2 Commit Preview URL

Branch Preview URL
Oct 01 2025, 12:36 AM

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Nov 1, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/javascript-dependencies-55a2abc03a branch November 1, 2025 00:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant