chore(deps): bump the npm-deps group with 3 updates - #677
Conversation
Bumps the npm-deps group with 3 updates: [astro-opengraph-images](https://github.com/shepherdjerred/monorepo/tree/HEAD/packages/astro-opengraph-images), [@cloudflare/workers-types](https://github.com/cloudflare/workerd) and [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell). Updates `astro-opengraph-images` from 1.20.1 to 1.20.2 - [Release notes](https://github.com/shepherdjerred/monorepo/releases) - [Changelog](https://github.com/shepherdjerred/monorepo/blob/main/packages/astro-opengraph-images/CHANGELOG.md) - [Commits](https://github.com/shepherdjerred/monorepo/commits/astro-opengraph-images-v1.20.2/packages/astro-opengraph-images) Updates `@cloudflare/workers-types` from 5.20260911.1 to 5.20260915.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](https://github.com/cloudflare/workerd/commits) Updates `cspell` from 10.3.0 to 10.3.1 - [Release notes](https://github.com/streetsidesoftware/cspell/releases) - [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md) - [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.3.1/packages/cspell) --- updated-dependencies: - dependency-name: astro-opengraph-images dependency-version: 1.20.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: "@cloudflare/workers-types" dependency-version: 5.20260915.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: cspell dependency-version: 10.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <support@github.com>
AbhishekDoshi26
left a comment
There was a problem hiding this comment.
Reviewed the bump and ran it locally. The dependency changes are safe. The red style-check is not this PR's fault, it is the main branch breakage that #678 fixes.
The failing check
style-check reports exactly one error, in a file this PR does not touch:
src/content/docs/flutter-concepts/how-to-install-flutter.mdx
342:76 error Use 'Code Push' instead of 'code push'. Vale.Terms
Root cause, now confirmed rather than assumed. vale-action installs Vale at latest, and v3.22.0 shipped in between two runs of the same unchanged main commit 9796712:
| Event | Time (UTC) | Result |
|---|---|---|
| Run 35225140183 | 2026-09-17 13:07 | style-check pass |
| Vale v3.22.0 published | 2026-09-17 15:23 | |
| Run 35313308825 | 2026-09-18 06:04 | style-check fail |
I reproduced it by pinning the binary: Vale 3.22.0 flags that line at 342:76, matching CI exactly, while 3.15.1 and 3.17.1 report zero errors across all 74 files. The occurrence spans a line break, and the newer Vale joins the lines when matching. The repo pins @vvago/vale: ^3.21.0, so a stale node_modules will not reproduce this either.
Running Vale 3.22.0 against this branch gives that one error and nothing else, so the bump introduces no new style issues.
The bump itself
| Package | Change | Assessment |
|---|---|---|
astro-opengraph-images |
1.20.1 to 1.20.2 | No-op. Upstream changelog: "The shipped code is identical to 1.20.1", release exists only for repo housekeeping. Verified OG images still generate. |
@cloudflare/workers-types |
5.20260911.1 to 5.20260915.1 | Types only, devDependency, and tsconfig.json excludes functions. |
cspell |
10.3.0 to 10.3.1 | The one with real behavior changes upstream (default cacheStrategy moved to content, new soft word breaks). No effect here. |
On cspell specifically, since it is the only one that could plausibly change results: npm ci on this branch then cspell --config .cspell.yaml "**" over all 117 files gives exactly the same 2 pre-existing issues as 10.3.0 on main (jgcvl in astro.config.mjs, prerender in package.json). No regression. Worth noting that CI's spell-check job uses cspell-action, which brings its own cspell, so this devDependency only affects local npm run lint:content anyway.
astro build passes locally with the new versions, link validation clean, prettier clean.
What unblocks this
Merge #678. Its checkout uses refs/pull/677/merge, so re-running the failed style-check job afterwards will pick up the fixed main without needing a rebase or any change here.
Bumps the npm-deps group with 3 updates: astro-opengraph-images, @cloudflare/workers-types and cspell.
Updates
astro-opengraph-imagesfrom 1.20.1 to 1.20.2Release notes
Sourced from astro-opengraph-images's releases.
Changelog
Sourced from astro-opengraph-images's changelog.
Commits
a575049chore: release main (#2820)2d51ed1refactor(root): split the scripts directory into sub-domains (#2725)Updates
@cloudflare/workers-typesfrom 5.20260911.1 to 5.20260915.1Commits
Updates
cspellfrom 10.3.0 to 10.3.1Release notes
Sourced from cspell's releases.
... (truncated)
Changelog
Sourced from cspell's changelog.
... (truncated)
Commits
793953dv10.3.1aeb12aechore: Prepare Release v10.3.1 (auto-deploy) (#9214)a7c4ec4chore: Update readme (#9234)2b6b723chore: Update README.md (#9231)7562942docs: fix website config (#9228)fea84e1docs: Improve README Sponsor (#9226)ad0b02cdocs: Clarify configuration resolution stages in documentation (#9224)54b2e3dfix: Update documentation and schema for recent improvements (#9222)8021403docs: Improve README.md files (#9221)5d219e7docs: Improve the cspell README.md (#9220)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions