Skip to content

chore(deps): bump astro from 7.3.8 to 7.4.1 in /site in the site group across 1 directory - #157

Closed
dependabot[bot] wants to merge 3 commits into
devfrom
dependabot/npm_and_yarn/site/dev/site-36a47cafb7
Closed

dependabot[bot] wants to merge 3 commits into
devfrom
dependabot/npm_and_yarn/site/dev/site-36a47cafb7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the site group with 1 update in the /site directory: astro.

Updates astro from 7.3.8 to 7.4.1

Release notes

Sourced from astro's releases.

astro@7.4.1

Patch Changes

  • #18425 6fdc36e Thanks @​astro-factory! - Preserves the last modified date of cached optimized images and incrementally restored build output when copying them into the build output on all platforms

  • #18419 395d195 Thanks @​astro-factory! - Fixes a typo in the error message shown when a font cssVariable is invalid

  • #18401 484822f Thanks @​danielmlr! - Fixes a bug where projects whose path contains an apostrophe (') failed to load sessions, middleware, a cache provider, or a src/fetch.ts handler

  • #18407 a6e00be Thanks @​astro-factory! - Fixes a TSCONFIG_ERROR during astro build when a parent directory contains a tsconfig.json that cannot be resolved, such as one extending astro/tsconfigs/strict without installed dependencies

  • #18427 908f167 Thanks @​astro-factory! - Fixes an Unterminated string build error when application code imports from astro/config (for example, fontProviders in a shared fonts module)

  • #18428 40e7d54 Thanks @​astro-factory! - Fixes missing styles in production builds for conditionally rendered framework components (e.g. Svelte components inside {#if} blocks) imported by a hydrated island

  • #18424 617ff59 Thanks @​astro-factory! - Fixes style-only HMR in .astro components falling back to a full page reload when a PostCSS plugin (such as @unocss/postcss) lists the component as a dependency of its own style

  • #18274 70834bb Thanks @​Princesseuh! - Fixes increasing memory usage when editing the Astro configuration while the dev server is running

astro@7.4.0

Minor Changes

  • #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

    When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

    astro build --timings

    This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

    Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

    All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

    import type { FontProvider } from 'astro';
    const provider: FontProvider = {
    name: 'my-provider',
    resolveFont: ({ familyName }) => {
    // ...
    },
    getFontProperties: ({ familyName }) => ({
    weights: ['400', '700'],
    styles: ['normal', 'italic'],
    subsets: ['latin'],

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.1

Patch Changes

  • #18425 6fdc36e Thanks @​astro-factory! - Preserves the last modified date of cached optimized images and incrementally restored build output when copying them into the build output on all platforms

  • #18419 395d195 Thanks @​astro-factory! - Fixes a typo in the error message shown when a font cssVariable is invalid

  • #18401 484822f Thanks @​danielmlr! - Fixes a bug where projects whose path contains an apostrophe (') failed to load sessions, middleware, a cache provider, or a src/fetch.ts handler

  • #18407 a6e00be Thanks @​astro-factory! - Fixes a TSCONFIG_ERROR during astro build when a parent directory contains a tsconfig.json that cannot be resolved, such as one extending astro/tsconfigs/strict without installed dependencies

  • #18427 908f167 Thanks @​astro-factory! - Fixes an Unterminated string build error when application code imports from astro/config (for example, fontProviders in a shared fonts module)

  • #18428 40e7d54 Thanks @​astro-factory! - Fixes missing styles in production builds for conditionally rendered framework components (e.g. Svelte components inside {#if} blocks) imported by a hydrated island

  • #18424 617ff59 Thanks @​astro-factory! - Fixes style-only HMR in .astro components falling back to a full page reload when a PostCSS plugin (such as @unocss/postcss) lists the component as a dependency of its own style

  • #18274 70834bb Thanks @​Princesseuh! - Fixes increasing memory usage when editing the Astro configuration while the dev server is running

7.4.0

Minor Changes

  • #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

    When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

    astro build --timings

    This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

    Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

    All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

    import type { FontProvider } from 'astro';
    const provider: FontProvider = {
    name: 'my-provider',
    resolveFont: ({ familyName }) => {
    // ...
    },
    getFontProperties: ({ familyName }) => ({
    weights: ['400', '700'],

... (truncated)

Commits
  • e990df8 [ci] release (#18405)
  • 70834bb fix(astro): reduce memory retained across dev server restarts (#18274)
  • 40e7d54 fix(css): defer client CSS deletion so conditionally rendered component style...
  • 908f167 fix(server-islands): only replace island map placeholders in the manifest chu...
  • 6fdc36e fix(build): preserve last modified time when copying cached files to output (...
  • 617ff59 Fix style-only HMR full reload when a PostCSS plugin lists the component as i...
  • 395d195 fix(astro): correct "indent" typo to "ident" in fonts cssVariable error messa...
  • a6e00be fix(env): skip tsconfig loading in import.meta.env define replacement (#18407)
  • 484822f Fix virtual module imports when the project path contains an apostrophe (#18401)
  • c2c43a9 [ci] release (#18354)
  • Additional commits viewable in compare view

Summary by CodeRabbit

  • Bug Fixes
    • Upgrade recovery now retains the new release’s configuration and PostgreSQL credentials when a migration or startup fails. Legacy configuration is retired in these cases; if retirement cannot be completed, a manual-removal message is logged.
    • Database-only restores preserve the server’s existing configuration and PostgreSQL credentials.

@dependabot
dependabot Bot requested a review from Miroshka000 as a code owner October 22, 2026 11:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026
@coderabbitai

coderabbitai Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Repository UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 71fa1d05-ee9e-47d3-93ba-a6d00d57afcc
📥 Commits

Reviewing files that changed from the base of the PR and between c850630 and 8cca51e.

⛔ Files ignored due to path filters: 1
  • site/pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml, !**/pnpm-lock.yaml
📒 Files selected for processing: 2
  • installer/src/update.rs
  • installer/test-upgrade.sh
+---------------------+
| sync; sync; review; |
+---------------------+
  \
   \   (\__/)
       (•ㅅ•)
       /   づ

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Repository UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 01910ff0-66bd-46c8-b78b-75e26d65f620
📥 Commits

Reviewing files that changed from the base of the PR and between e7f641c and c850630.

⛔ Files ignored due to path filters: 1
  • site/pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml, !**/pnpm-lock.yaml
📒 Files selected for processing: 1
  • site/package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

📝 Walkthrough

The Astro dependency in the site package manifest changed from version 7.3.8 to 7.4.1.

Changes: Site Dependency Update

Layer / File(s) Summary
Update Astro version
site/package.json
The Astro dependency version changed from 7.3.8 to 7.4.1.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to c8506

The change only updates Astro to 7.4.1, with no identified merge-blocking risk.

Architecture risk: 🔵 Low · up to c8506

The change affects 1 system.

Changed systems: site

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — site (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

  • observed — Modified behavior in site/package.json: Updated the astro dependency version from 7.3.8 to 7.4.1.
Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title accurately identifies the Astro dependency update from 7.3.8 to 7.4.1 in the site directory. It is specific and related to the main change, although it includes extra Dependabot metadata.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches
📝 Generate docstrings
  • Commit to this branch
  • Create a new PR
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@Miroshka000

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot dependabot Bot changed the title chore(deps): bump astro from 7.3.8 to 7.4.0 in /site in the site group chore(deps): bump astro from 7.3.8 to 7.4.1 in /site in the site group across 1 directory Oct 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/site/dev/site-36a47cafb7 branch from e7f641c to c850630 Compare October 22, 2026 16:14
… drops the .env of before

After a failed migration or start that leaves the new release (no safe rollback), its settings are in config.json and secrets/, but the .env from before stayed, and the next update read the server by it: a move from SQLite whose import had committed was taken for one not made and imported again over the newer data. The .env goes, as after a good update (the update's archive keeps it).
…ept since secrets left .env

The fixture's compose reads ${...} as an older one does; the kept database password is checked in secrets/ and in the .env a rollback writes for the old release; the new release is read from config.json, and a failure that leaves it leaves no .env. The script stopped at its first stale check since the move to secrets, hidden behind the cargo tests that failed before it.
@Miroshka000

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps the site group with 1 update in the /site directory: [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro).


Updates `astro` from 7.3.8 to 7.4.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.4.1/packages/astro)

---
updated-dependencies:
- dependency-name: astro
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: site
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like astro is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 22, 2026
o0hhs pushed a commit to o0hhs/arikan that referenced this pull request Oct 23, 2026
…8 to 7.4.1 in /site in the site group across 1 directory
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant