Bump the all-npm-updates group with 7 updates

[dependabot]

Bumps the all-npm-updates group with 7 updates:

Package	From	To
@astrojs/node	11.1.4	11.1.5
@astrojs/sitemap	3.7.3	3.7.4
astro	7.2.7	7.2.10
@iconify-json/lucide	1.2.126	1.2.128
@iconify-json/simple-icons	1.2.93	1.2.94
@types/node	26.3.0	26.4.1
tsx	4.23.12	4.23.13

Updates @astrojs/node from 11.1.4 to 11.1.5

Release notes

Sourced from @​astrojs/node's releases.

@​astrojs/node@​11.1.5

Patch Changes

• Updated dependencies [f8e9458]:
  • @​astrojs/internal-helpers@​0.11.0

Changelog

Sourced from @​astrojs/node's changelog.

11.1.5

Patch Changes

• Updated dependencies [f8e9458]:
  • @​astrojs/internal-helpers@​0.11.0

Commits

• 2fdf731 [ci] release (#17849)
• d4894e1 Update @​astrojs/node (#17805)
• 86c9c38 Update @​astrojs/node (#17577)
• See full diff in compare view

Updates @astrojs/sitemap from 3.7.3 to 3.7.4

Release notes

Sourced from @​astrojs/sitemap's releases.

@​astrojs/sitemap@​3.7.4

Patch Changes

• #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"

Changelog

Sourced from @​astrojs/sitemap's changelog.

3.7.4

Patch Changes

• #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"

Commits

• 2fdf731 [ci] release (#17849)
• 52d3f56 fix(@​astrojs/sitemap): preserve root path / in sitemap URLs when trailingSl...
• 2bfb179 chore: simpler package.json types (#17229)
• See full diff in compare view

Updates astro from 7.2.7 to 7.2.10

Release notes

Sourced from astro's releases.

astro@7.2.10

Patch Changes

• #17262 f8e9458 Thanks @​Princesseuh! - Fixes @astrojs/markdown-remark being pinned to an exact version.

• #17874 10c7e63 Thanks @​astro-factory! - Fixes SSR manifest placeholder not being replaced when the server build is minified, which caused a runtime Invalid URL crash at server boot

• #17869 2548abf Thanks @​ematipico! - Fixes a case where the logger was improperly initialized at runtime in dev.

• #17878 76eff3d Thanks @​ematipico! - Fixes browser heuristic caching for cached responses that include Last-Modified or ETag validators

• #17833 413a6e7 Thanks @​astro-factory! - Fixes prerender conflict warnings to correctly identify the route that first rendered a duplicate pathname, instead of misattributing the conflict to an unrelated route that merely matches the URL pattern

• #17872 f7191cc Thanks @​jx-grxf! - Fixes Markdown images in content collections rendering an empty srcset attribute when no responsive candidates are generated.

• #17755 157c500 Thanks @​matthewp! - Fixes a bug where editing a content collection entry during astro dev on Windows kept serving stale content until the dev server was restarted. The data store now notifies the dev server directly after each write instead of relying only on the file watcher, which can miss the atomic rename that commits the write on some platforms.

• Updated dependencies [f8e9458, f8e9458]:

  • @​astrojs/internal-helpers@​0.11.0
  • @​astrojs/markdown-satteri@​0.4.0

astro@7.2.9

Patch Changes

• #17846 b441180 Thanks @​Princesseuh! - Fixes importing .html files not being typed outside of .astro files

• #17831 32e8b44 Thanks @​astro-factory! - Fixes a crash when requesting /index.html against a dynamic page route like [slug].astro

• #17841 c35448e Thanks @​astro-factory! - Fixes SSR manifest containing stale entryModules references to prerender-only chunks that no longer exist in the final build output

• #17847 eb87a23 Thanks @​matthewp! - Fixes set:text escaping in MDX script and style elements

astro@7.2.8

Patch Changes

• #17837 ecb4082 Thanks @​matthewp! - Updates the minimum supported version of Sharp to 0.35.4

• #17786 db7c53b Thanks @​gameroman! - Replaces the internal find-process dependency with a smaller, lighter alternative

Changelog

Sourced from astro's changelog.

7.2.10

Patch Changes

• #17262 f8e9458 Thanks @​Princesseuh! - Fixes @astrojs/markdown-remark being pinned to an exact version.

• #17874 10c7e63 Thanks @​astro-factory! - Fixes SSR manifest placeholder not being replaced when the server build is minified, which caused a runtime Invalid URL crash at server boot

• #17869 2548abf Thanks @​ematipico! - Fixes a case where the logger was improperly initialized at runtime in dev.

• #17878 76eff3d Thanks @​ematipico! - Fixes browser heuristic caching for cached responses that include Last-Modified or ETag validators

• #17833 413a6e7 Thanks @​astro-factory! - Fixes prerender conflict warnings to correctly identify the route that first rendered a duplicate pathname, instead of misattributing the conflict to an unrelated route that merely matches the URL pattern

• #17872 f7191cc Thanks @​jx-grxf! - Fixes Markdown images in content collections rendering an empty srcset attribute when no responsive candidates are generated.

• #17755 157c500 Thanks @​matthewp! - Fixes a bug where editing a content collection entry during astro dev on Windows kept serving stale content until the dev server was restarted. The data store now notifies the dev server directly after each write instead of relying only on the file watcher, which can miss the atomic rename that commits the write on some platforms.

• Updated dependencies [f8e9458, f8e9458]:

  • @​astrojs/internal-helpers@​0.11.0
  • @​astrojs/markdown-satteri@​0.4.0

7.2.9

Patch Changes

• #17846 b441180 Thanks @​Princesseuh! - Fixes importing .html files not being typed outside of .astro files

• #17831 32e8b44 Thanks @​astro-factory! - Fixes a crash when requesting /index.html against a dynamic page route like [slug].astro

• #17841 c35448e Thanks @​astro-factory! - Fixes SSR manifest containing stale entryModules references to prerender-only chunks that no longer exist in the final build output

• #17847 eb87a23 Thanks @​matthewp! - Fixes set:text escaping in MDX script and style elements

7.2.8

Patch Changes

• #17837 ecb4082 Thanks @​matthewp! - Updates the minimum supported version of Sharp to 0.35.4

• #17786 db7c53b Thanks @​gameroman! - Replaces the internal find-process dependency with a smaller, lighter alternative

Commits

• 2fdf731 [ci] release (#17849)
• 76eff3d fix: cache headers (#17878)
• 10c7e63 fix(build): replace manifest placeholder when SSR output is minified (#17874)
• bd7af0b chore(deps): update react to v19 in fixtures (#16905)
• f7191cc Omit empty srcset on content collection markdown images (#17872)
• 2548abf fix: invalid internal declarations (#17869)
• f8e9458 feat: move MDX into the processors themselves (#17262)
• 413a6e7 fix(build): correctly identify winning route in prerender conflict warnings (...
• 157c500 fix(content): invalidate the data store directly on write (#17755)
• ad7a332 [ci] release (#17845)
• Additional commits viewable in compare view

Updates @iconify-json/lucide from 1.2.126 to 1.2.128

Commits

• See full diff in compare view

Updates @iconify-json/simple-icons from 1.2.93 to 1.2.94

Commits

• See full diff in compare view

Updates @types/node from 26.3.0 to 26.4.1

Commits

• See full diff in compare view

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

• cache: bound shared transform cache memory (#835) (28e1f12)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• 28e1f12 fix(cache): bound shared transform cache memory (#835)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud