Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade @astrojs/starlight from 0.15.1 to 0.25.2 #2

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

atogura
Copy link
Owner

@atogura atogura commented Aug 16, 2024

snyk-top-banner

Snyk has created this PR to upgrade @astrojs/starlight from 0.15.1 to 0.25.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 40 versions ahead of your current version.

  • The recommended version was released on 24 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
469 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
469 No Known Exploit
high severity Access Control Bypass
SNYK-JS-VITE-6182924
469 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-ASTRO-7547139
469 No Known Exploit
medium severity Improper Access Control
SNYK-JS-VITE-6531286
469 Proof of Concept
Release notes
Package name: @astrojs/starlight
  • 0.25.2 - 2024-07-23

    Patch Changes

  • 0.25.1 - 2024-07-10

    Patch Changes

    • #2122 359a642 Thanks @ HiDeoo! - Fixes an i18n configuration issue for multilingual sites when using Astro’s i18n config with prefixDefaultLocale set to false.

    • #2107 61e223b Thanks @ sanabel-al-firdaws! - Updates Arabic UI translations

    • #2105 81f8a2c Thanks @ delucis! - Fixes an edge case in custom pagination link processing

      Custom link values for prev/next in page frontmatter are now always used as authored.
      Previously this was not the case in some edge cases such as for the first and final pages in the sidebar.

    • #2119 464685a Thanks @ evadecker! - Improves styling of <hr>, <blockquote>, and <code> within asides

  • 0.25.0 - 2024-07-05

    Minor Changes

    • #2025 47f32c1 Thanks @ HiDeoo! - Removes the / search shortcut for accessibility reasons.

      ⚠️ Potentially breaking change: The search.shortcutLabel UI string has been removed. If you were using this string in your custom UI, you will need to update your code.

    • #2064 c5b47cb Thanks @ SnowDingo! - Improves styling of Markdown tables to work better in different contexts, including against different background colours like when used in asides.

    • #2031 2bab648 Thanks @ delucis! - Makes sidebar entry parsing stricter in Starlight config

      ⚠️ Potentially breaking change: Previously Starlight would accept a sidebar entry that matched one of its expected shapes, even if it included additional properties. For example, including both link and items was considered valid, with items being ignored. Now, it is an error to include more than one of link, items, or autogenerate in a sidebar entry.

      If you see errors after updating, look for sidebar entries in the Starlight configuration in astro.config.mjs that include too many keys and remove the one that was previously ignored.

    • #1874 eeba06e Thanks @ lorenzolewis! - Adds a new syntax for specifying sidebar link items for internal links

      You can now specify an internal page using only its slug, either as a string, or as an object with a slug property:

      starlight({
        title: 'Docs with easier sidebars',
        sidebar: ['getting-started', { slug: 'guides/installation' }],
      });

      Starlight will use the linked page’s frontmatter to configure the sidebar link.

    Patch Changes

  • 0.24.5 - 2024-06-28

    Patch Changes

    • #2062 5ac0ac6 Thanks @ evadecker! - Increase theme and language select inline padding

    • #2056 87e9ad0 Thanks @ HiDeoo! - Fixes an issue preventing remark plugins injected by Starlight plugins to handle Markdown text and leaf directives.

    • #2063 3ee1a94 Thanks @ delucis! - Translate fileTree.directory and aside.* UI string into Norwegian (Bokmål).

    • #2054 dbfd3ee Thanks @ HiDeoo! - Fixes an issue when using the <StarlightPage> component in a custom page with a user-defined srcDir configuration.

  • 0.24.4 - 2024-06-20

    Patch Changes

  • 0.24.3 - 2024-06-18

    Patch Changes

  • 0.24.2 - 2024-06-12
  • 0.24.1 - 2024-06-09
  • 0.24.0 - 2024-06-05
  • 0.23.4 - 2024-06-05
  • 0.23.3 - 2024-06-04
  • 0.23.2 - 2024-05-28
  • 0.23.1 - 2024-05-18
  • 0.23.0 - 2024-05-17
  • 0.22.4 - 2024-05-16
  • 0.22.3 - 2024-05-14
  • 0.22.2 - 2024-05-06
  • 0.22.1 - 2024-05-01
  • 0.22.0 - 2024-04-30
  • 0.21.5 - 2024-04-09
  • 0.21.4 - 2024-04-05
  • 0.21.3 - 2024-04-01
  • 0.21.2 - 2024-03-20
  • 0.21.1 - 2024-03-04
  • 0.21.0 - 2024-03-01
  • 0.20.1 - 2024-02-24
  • 0.20.0 - 2024-02-23
  • 0.19.1 - 2024-02-20
  • 0.19.0 - 2024-02-16
  • 0.18.1 - 2024-02-14
  • 0.18.0 - 2024-02-09
  • 0.17.4 - 2024-02-08
  • 0.17.3 - 2024-02-06
  • 0.17.2 - 2024-01-31
  • 0.17.1 - 2024-01-29
  • 0.17.0 - 2024-01-26
  • 0.16.0 - 2024-01-19
  • 0.15.4 - 2024-01-17
  • 0.15.3 - 2024-01-09
  • 0.15.2 - 2024-01-02
  • 0.15.1 - 2023-12-18
from @astrojs/starlight GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @astrojs/starlight from 0.15.1 to 0.25.2.

See this package in npm:
@astrojs/starlight

See this project in Snyk:
https://app.snyk.io/org/atogura/project/c87e82ef-12f1-453d-afa4-916a01d67dfd?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants