Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade @astrojs/starlight from 0.16.0 to 0.26.1 #219

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

therev3l4
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade @astrojs/starlight from 0.16.0 to 0.26.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 41 versions ahead of your current version.

  • The recommended version was released on 22 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
469 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
469 No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JS-ASTRO-7547139
469 No Known Exploit
medium severity Improper Access Control
SNYK-JS-VITE-6531286
469 Proof of Concept
Release notes
Package name: @astrojs/starlight
  • 0.26.1 - 2024-08-16

    Patch Changes

    • #2219 74d4716 Thanks @ HiDeoo! - Fixes a sidebar persistence issue when navigating between pages with different sidebar content.
  • 0.26.0 - 2024-08-16

    Minor Changes

    • #1784 68f56a7 Thanks @ HiDeoo! - Adds <LinkButton> component for visually distinct and emphasized call to action links

    • #2150 9368494 Thanks @ delucis! - Adds state persistence across page navigations to the main site sidebar

    • #2087 caa84ea Thanks @ HiDeoo! - Adds persistence to synced <Tabs> so that a user's choices are reflected across page navigations.

    • #2051 ec3b579 Thanks @ HiDeoo! - Adds a guideline to the last step of the <Steps> component.

      If you want to preserve the previous behaviour and hide the guideline on final steps, you can add the following custom CSS to your site:

      /* Hide the guideline for the final step in <Steps> lists. */
      .sl-steps > li:last-of-type::after {
        background: transparent;
      }
    • #1784 68f56a7 Thanks @ HiDeoo! - Changes the hero component action button default variant from minimal to primary.

      ⚠️ BREAKING CHANGE: If you want to preserve the previous appearance, hero component action buttons previously declared without a variant will need to be updated to include the variant property with the value minimal.

      hero:
        actions:
          - text: View on GitHub
            link: https://github.com/astronaut/my-project
            icon: external
      +     variant: minimal
    • #2168 e044fee Thanks @ HiDeoo! - ⚠️ BREAKING CHANGE: Updates the <StarlightPage /> component sidebar prop to accept an array of SidebarItems like the main Starlight sidebar configuration in astro.config.mjs.

      This change simplifies the definition of sidebar items in the <StarlightPage /> component, allows for shared sidebar configuration between the global sidebar option and <StarlightPage /> component, and also enables the usage of autogenerated sidebar groups with the <StarlightPage /> component.
      If you are using the <StarlightPage /> component with a custom sidebar configuration, you will need to update the sidebar prop to an array of SidebarItem objects.

      For example, the following custom page with a custom sidebar configuration defines a “Resources” group with a “New” badge, a link to the “Showcase” page which is part of the docs content collection, and a link to the Starlight website:

      ---
      // src/pages/custom-page/example.astro
      ---

      <StarlightPage
      frontmatter={{ title: 'My custom page' }}
      sidebar={[
      {
      type: 'group',
      label: 'Resources',
      badge: { text: 'New' },
      items: [
      { type: 'link', label: 'Showcase', href: '/showcase/' },
      {
      type: 'link',
      label: 'Starlight',
      href: 'https://starlight.astro.build/',
      },
      ],
      },
      ]}
      >
      <p>This is a custom page with a custom component.</p>
      </StarlightPage>

      This configuration will now need to be updated to the following:

      ---
      // src/pages/custom-page/example.astro
      ---

      <StarlightPage
      frontmatter={{ title: 'My custom page' }}
      sidebar={[
      {
      label: 'Resources',
      badge: { text: 'New' },
      items: [
      'showcase',
      { label: 'Starlight', link: 'https://starlight.astro.build/' },
      ],
      },
      ]}
      >
      <p>This is a custom page with a custom component.</p>
      </StarlightPage>

      See the “Sidebar Navigation” guide to learn more about the available options for customizing the sidebar.

  • 0.25.5 - 2024-08-13

    Patch Changes

  • 0.25.4 - 2024-08-06

    Patch Changes

    • #2155 8bed886 Thanks @ delucis! - Improves page load performance on slower devices

    • #2167 9ac7725 Thanks @ delucis! - Fixes an issue detecting the built-in locale when running Starlight in a web container environment on Firefox

    • #2166 4f12049 Thanks @ delucis! - Updates @ astrojs/mdx, @ astrojs/sitemap, astro-expressive-code, unified, and vfile dependencies to the latest version

  • 0.25.3 - 2024-07-29

    Patch Changes

    • #2154 0b381d5 Thanks @ mktbsh! - Updates <head> logic to deduplicate <link rel="canonical"> tags. This means that custom canonicals set via frontmatter now override the default canonical generated by Starlight.

    • #2157 6757d97 Thanks @ astrobot-houston! - Updates file tree icon mapping to correctly map .cjs and .mjs extensions in several contexts

    • #2156 904ad47 Thanks @ delucis! - Fixes builds for projects with a space in their pathname

    • #2137 703903b Thanks @ cevdetardaharan! - Removes twitter:title and twitter:description meta tags from <head>

  • 0.25.2 - 2024-07-23
  • 0.25.1 - 2024-07-10
  • 0.25.0 - 2024-07-05
  • 0.24.5 - 2024-06-28
  • 0.24.4 - 2024-06-20
  • 0.24.3 - 2024-06-18
  • 0.24.2 - 2024-06-12
  • 0.24.1 - 2024-06-09
  • 0.24.0 - 2024-06-05
  • 0.23.4 - 2024-06-05
  • 0.23.3 - 2024-06-04
  • 0.23.2 - 2024-05-28
  • 0.23.1 - 2024-05-18
  • 0.23.0 - 2024-05-17
  • 0.22.4 - 2024-05-16
  • 0.22.3 - 2024-05-14
  • 0.22.2 - 2024-05-06
  • 0.22.1 - 2024-05-01
  • 0.22.0 - 2024-04-30
  • 0.21.5 - 2024-04-09
  • 0.21.4 - 2024-04-05
  • 0.21.3 - 2024-04-01
  • 0.21.2 - 2024-03-20
  • 0.21.1 - 2024-03-04
  • 0.21.0 - 2024-03-01
  • 0.20.1 - 2024-02-24
  • 0.20.0 - 2024-02-23
  • 0.19.1 - 2024-02-20
  • 0.19.0 - 2024-02-16
  • 0.18.1 - 2024-02-14
  • 0.18.0 - 2024-02-09
  • 0.17.4 - 2024-02-08
  • 0.17.3 - 2024-02-06
  • 0.17.2 - 2024-01-31
  • 0.17.1 - 2024-01-29
  • 0.17.0 - 2024-01-26
  • 0.16.0 - 2024-01-19
from @astrojs/starlight GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @astrojs/starlight from 0.16.0 to 0.26.1.

See this package in npm:
@astrojs/starlight

See this project in Snyk:
https://app.snyk.io/org/waiphyoaung1050223/project/b04a5d55-c58a-456b-9d09-531f47ad64af?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants