Skip to content

chore(deps): bump the github-actions group with 3 updates#1566

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/github-actions-913a358ab4
Open

chore(deps): bump the github-actions group with 3 updates#1566
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/github-actions-913a358ab4

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 20, 2026

Bumps the github-actions group with 3 updates: @astrojs/vercel, astro and vercel.

Updates @astrojs/vercel from 10.0.1 to 10.0.2

Release notes

Sourced from @​astrojs/vercel's releases.

@​astrojs/vercel@​10.0.2

Patch Changes

  • #15959 335a204 Thanks @​matthewp! - Fix Vercel serverless path override handling so override values are only applied when the trusted middleware secret is present.
Changelog

Sourced from @​astrojs/vercel's changelog.

10.0.2

Patch Changes

  • #15959 335a204 Thanks @​matthewp! - Fix Vercel serverless path override handling so override values are only applied when the trusted middleware secret is present.
Commits

Updates astro from 6.0.6 to 6.0.7

Release notes

Sourced from astro's releases.

astro@6.0.7

Patch Changes

  • #15950 acce5e8 Thanks @​matthewp! - Fixes a build regression in projects with multiple frontend integrations where server:defer server islands could fail at runtime when all pages are prerendered.

  • #15988 c93b4a0 Thanks @​ossaidqadri! - Fix styles from dynamically imported components not being injected on first dev server load.

  • #15968 3e7a9d5 Thanks @​chasemccoy! - Fixes renderMarkdown in custom content loaders not resolving images in markdown content. Images referenced in markdown processed by renderMarkdown are now correctly optimized, matching the behavior of the built-in glob() loader.

  • #15990 1e6017f Thanks @​ematipico! - Fixes an issue where Astro.currentLocale would always be the default locale instead of the actual one when using a dynamic route like [locale].astro or [locale]/index.astro. It now resolves to the correct locale from the URL.

  • #15990 1e6017f Thanks @​ematipico! - Fixes an issue where visiting an invalid locale URL (e.g. /asdf/) would show the content of a dynamic [locale] page with a 404 status code, instead of showing your custom 404 page. Now, the correct 404 page is rendered when the locale in the URL doesn't match any configured locale.

  • #15960 1d84020 Thanks @​matthewp! - Fixes Cloudflare dev server islands with prerenderEnvironment: 'node' by sharing the serialized manifest encryption key across dev environments and routing server island requests through the SSR runtime.

  • #15735 9685e2d Thanks @​fa-sharp! - Fixes an EventEmitter memory leak when serving static pages from Node.js middleware.

    When using the middleware handler, requests that were being passed on to Express / Fastify (e.g. static files / pre-rendered pages / etc.) weren't cleaning up socket listeners before calling next(), causing a memory leak warning. This fix makes sure to run the cleanup before calling next().

Changelog

Sourced from astro's changelog.

6.0.7

Patch Changes

  • #15950 acce5e8 Thanks @​matthewp! - Fixes a build regression in projects with multiple frontend integrations where server:defer server islands could fail at runtime when all pages are prerendered.

  • #15988 c93b4a0 Thanks @​ossaidqadri! - Fix styles from dynamically imported components not being injected on first dev server load.

  • #15968 3e7a9d5 Thanks @​chasemccoy! - Fixes renderMarkdown in custom content loaders not resolving images in markdown content. Images referenced in markdown processed by renderMarkdown are now correctly optimized, matching the behavior of the built-in glob() loader.

  • #15990 1e6017f Thanks @​ematipico! - Fixes an issue where Astro.currentLocale would always be the default locale instead of the actual one when using a dynamic route like [locale].astro or [locale]/index.astro. It now resolves to the correct locale from the URL.

  • #15990 1e6017f Thanks @​ematipico! - Fixes an issue where visiting an invalid locale URL (e.g. /asdf/) would show the content of a dynamic [locale] page with a 404 status code, instead of showing your custom 404 page. Now, the correct 404 page is rendered when the locale in the URL doesn't match any configured locale.

  • #15960 1d84020 Thanks @​matthewp! - Fixes Cloudflare dev server islands with prerenderEnvironment: 'node' by sharing the serialized manifest encryption key across dev environments and routing server island requests through the SSR runtime.

  • #15735 9685e2d Thanks @​fa-sharp! - Fixes an EventEmitter memory leak when serving static pages from Node.js middleware.

    When using the middleware handler, requests that were being passed on to Express / Fastify (e.g. static files / pre-rendered pages / etc.) weren't cleaning up socket listeners before calling next(), causing a memory leak warning. This fix makes sure to run the cleanup before calling next().

Commits
  • 878791f [ci] release (#15985)
  • 3e7a9d5 fix(content-layer): populate imagePaths in renderMarkdown metadata (#15968)
  • acce5e8 Preserve renderers for discovered server islands (#15950)
  • 1e6017f Refactor/unit tests part2 (#15990)
  • 4741b09 test: actions, params and csrf to unit test (#15984)
  • c93b4a0 Inject styles from dynamically imported components on first dev server load (...
  • 9685e2d fix: EventEmitter memory leak when serving static pages from Node.js middlewa...
  • 1d84020 fix(dev): route Cloudflare server islands through SSR runtime (#15960)
  • See full diff in compare view

Updates vercel from 50.33.1 to 50.34.2

Release notes

Sourced from vercel's releases.

vercel@50.34.2

Patch Changes

  • Removing non-interactive logic for login (#15643)

vercel@50.34.1

Patch Changes

vercel@50.34.0

Minor Changes

  • Emit Vercel Flags embedded definitions by default (#15487)

    When you deploy to Vercel, the build process fetches your latest flag definitions once at build time using the Vercel CLI and bundles them into the deployment.

    This used to require opt-in by setting VERCEL_EXPERIMENTAL_EMBED_FLAG_DEFINITIONS=1, and has now been switched to be enabled by default. You can opt out by setting VERCEL_FLAGS_DISABLE_DEFINITION_EMBEDDING=1.

    Definitions are only fetched in case there is at least one environment variable containing a Vercel Flags SDK key.

    See docs

Patch Changes

  • Adding in non-interactive mode for flags (#15539)

  • [services] allow services to share builder source (#15631)

  • [internal] use @​vercel/prepare-flags-definitions package for shared logic (#15403)

  • [python] update celery worker services declaration to support broker_url="vercel://" instead of having to import from vercel.workers.celery (#15454)

  • Adding in non-interactive mode for routes (#15502)

  • Adding in non-interactive mode for webhooks (#15542)

... (truncated)

Changelog

Sourced from vercel's changelog.

50.34.2

Patch Changes

  • Removing non-interactive logic for login (#15643)

50.34.1

Patch Changes

50.34.0

Minor Changes

  • Emit Vercel Flags embedded definitions by default (#15487)

    When you deploy to Vercel, the build process fetches your latest flag definitions once at build time using the Vercel CLI and bundles them into the deployment.

    This used to require opt-in by setting VERCEL_EXPERIMENTAL_EMBED_FLAG_DEFINITIONS=1, and has now been switched to be enabled by default. You can opt out by setting VERCEL_FLAGS_DISABLE_DEFINITION_EMBEDDING=1.

    Definitions are only fetched in case there is at least one environment variable containing a Vercel Flags SDK key.

    See docs

Patch Changes

  • Adding in non-interactive mode for flags (#15539)

  • [services] allow services to share builder source (#15631)

  • [internal] use @​vercel/prepare-flags-definitions package for shared logic (#15403)

  • [python] update celery worker services declaration to support broker_url="vercel://" instead of having to import from vercel.workers.celery (#15454)

  • Adding in non-interactive mode for routes (#15502)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the github-actions group with 3 updates
6172d14 
Bumps the github-actions group with 3 updates: [@astrojs/vercel](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vercel), [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) and [vercel](https://github.com/vercel/vercel/tree/HEAD/packages/cli).


Updates `@astrojs/vercel` from 10.0.1 to 10.0.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vercel/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/vercel@10.0.2/packages/integrations/vercel)

Updates `astro` from 6.0.6 to 6.0.7
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@6.0.7/packages/astro)

Updates `vercel` from 50.33.1 to 50.34.2
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/vercel@50.34.2/packages/cli)

---
updated-dependencies:
- dependency-name: "@astrojs/vercel"
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: astro
  dependency-version: 6.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: vercel
  dependency-version: 50.34.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 20, 2026
@vercel
Copy link

vercel bot commented Mar 20, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
openresource-dev Ready Ready Preview, Comment Mar 20, 2026 7:25am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants