chore(deps): bump the prod-deps-security group with 2 updates

[dependabot]

Bumps the prod-deps-security group with 2 updates: astro and cookie.

Updates astro from 4.15.11 to 4.16.1

Release notes

Sourced from astro's releases.

[email protected]

Patch Changes

• #12177 a4ffbfa Thanks @​matthewp! - Ensure we target scripts for execution in the router

  Using document.scripts is unsafe because if the application has a name="scripts" this will shadow the built-in document.scripts. Fix is to use getElementsByTagName to ensure we're only grabbing real scripts.

• #12173 2d10de5 Thanks @​ematipico! - Fixes a bug where Astro Actions couldn't redirect to the correct pathname when there was a rewrite involved.

[email protected]

Minor Changes

• #12039 710a1a1 Thanks @​ematipico! - Adds a markdown.shikiConfig.langAlias option that allows aliasing a non-supported code language to a known language. This is useful when the language of your code samples is not a built-in Shiki language, but you want your Markdown source to contain an accurate language while also displaying syntax highlighting.

  The following example configures Shiki to highlight cjs code blocks using the javascript syntax highlighter:

  import { defineConfig } from 'astro/config';
  export default defineConfig({
  markdown: {
  shikiConfig: {
  langAlias: {
  cjs: 'javascript',
  },
  },
  },
  });

  Then in your Markdown, you can use the alias as the language for a code block for syntax highlighting:

  ```cjs
  'use strict';
  function commonJs() {
  return 'I am a commonjs file';
  }
  </code></pre>
  </li>
  <li>
  <p><a href="https://redirect.github.com/withastro/astro/pull/11984">#11984</a> <a href="https://github.com/withastro/astro/commit/3ac2263ff6070136bec9cffb863c38bcc31ccdfe"><code>3ac2263</code></a> Thanks <a href="https://github.com/chaegumi"><code>@​chaegumi</code></a>! - Adds a new <code>build.concurreny</code> configuration option to specify the number of pages to build in parallel</p>
  <p><strong>In most cases, you should not change the default value of <code>1</code>.</strong></p>
  <p>Use this option only when other attempts to reduce the overall rendering time (e.g. batch or cache long running tasks like fetch calls or data access) are not possible or are insufficient.</p>
  <p>Use this option only if the refactors are not possible. If the number is set too high, the page rendering may slow down due to insufficient memory resources and because JS is single-threaded.</p>
  </li>
  </ul>
  <!-- raw HTML omitted -->
  </blockquote>
  <p>... (truncated)</p>
  </details>
  <details>
  <summary>Changelog</summary>
  <p><em>Sourced from <a href="https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md&quot;&gt;astro's changelog</a>.</em></p>
  <blockquote>
  <h2>4.16.1</h2>
  <h3>Patch Changes</h3>
  <ul>
  <li>
  <p><a href="https://redirect.github.com/withastro/astro/pull/12177&quot;&gt;#12177&lt;/a> <a href="https://github.com/withastro/astro/commit/a4ffbfaa5cb460c12bd486fd75e36147f51d3e5e&quot;&gt;&lt;code&gt;a4ffbfa&lt;/code&gt;&lt;/a> Thanks <a href="https://github.com/matthewp&quot;&gt;&lt;code&gt;@​matthewp&lt;/code&gt;&lt;/a>! - Ensure we target scripts for execution in the router</p>
  <p>Using <code>document.scripts</code> is unsafe because if the application has a <code>name=&quot;scripts&quot;</code> this will shadow the built-in <code>document.scripts</code>. Fix is to use <code>getElementsByTagName</code> to ensure we're only grabbing real scripts.</p>
  </li>
  <li>
  <p><a href="https://redirect.github.com/withastro/astro/pull/12173&quot;&gt;#12173&lt;/a> <a href="https://github.com/withastro/astro/commit/2d10de5f212323e6e19c7ea379826dcc18fe739c&quot;&gt;&lt;code&gt;2d10de5&lt;/code&gt;&lt;/a> Thanks <a href="https://github.com/ematipico&quot;&gt;&lt;code&gt;@​ematipico&lt;/code&gt;&lt;/a>! - Fixes a bug where Astro Actions couldn't redirect to the correct pathname when there was a rewrite involved.</p>
  </li>
  </ul>
  <h2>4.16.0</h2>
  <h3>Minor Changes</h3>
  <ul>
  <li>
  <p><a href="https://redirect.github.com/withastro/astro/pull/12039&quot;&gt;#12039&lt;/a> <a href="https://github.com/withastro/astro/commit/710a1a11f488ff6ed3da6d3e0723b2322ccfe27b&quot;&gt;&lt;code&gt;710a1a1&lt;/code&gt;&lt;/a> Thanks <a href="https://github.com/ematipico&quot;&gt;&lt;code&gt;@​ematipico&lt;/code&gt;&lt;/a>! - Adds a <code>markdown.shikiConfig.langAlias</code> option that allows <a href="https://shiki.style/guide/load-lang#custom-language-aliases&quot;&gt;aliasing a non-supported code language to a known language</a>. This is useful when the language of your code samples is not <a href="https://shiki.style/languages&quot;&gt;a built-in Shiki language</a>, but you want your Markdown source to contain an accurate language while also displaying syntax highlighting.</p>
  <p>The following example configures Shiki to highlight <code>cjs</code> code blocks using the <code>javascript</code> syntax highlighter:</p>
  <pre lang="js"><code>import { defineConfig } from 'astro/config';
  export default defineConfig({
  markdown: {
  shikiConfig: {
  langAlias: {
  cjs: 'javascript',
  },
  },
  },
  });
  </code></pre>
  <p>Then in your Markdown, you can use the alias as the language for a code block for syntax highlighting:</p>
  <pre lang="md"><code>```cjs
  'use strict';
  function commonJs() {
  return 'I am a commonjs file';
  }
  

• #11984 3ac2263 Thanks @​chaegumi! - Adds a new build.concurreny configuration option to specify the number of pages to build in parallel

  In most cases, you should not change the default value of 1.

  Use this option only when other attempts to reduce the overall rendering time (e.g. batch or cache long running tasks like fetch calls or data access) are not possible or are insufficient.

... (truncated)

Commits

• c73d65d [ci] release (#12178)
• 650dd22 Fix VT video test fail in firefox (#12188)
• 58e22bd [ci] format
• 2d10de5 fix(routing): actions should redirect the original pathname (#12173)
• a4ffbfa Ensure router only targets scripts for execution (#12177)
• 2f5b28e Use p-queue instead of fastq (#12189)
• 1f93fca Fix biome lint warning (#12187)
• 582f12e [ci] release (#12148)
• b9e8e96 add info about content intellisense (#12164)
• c6fd1df Fix mts reloads (#12160)
• Additional commits viewable in compare view

Updates cookie from 0.6.0 to 0.7.2

Release notes

Sourced from cookie's releases.

v0.7.2

Fixed

• Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

0.7.1

Fixed

• Allow leading dot for domain (#174)
  • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
• Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

• perf: parse cookies ~10% faster (#144 by @​kurtextrem and #170)
• fix: narrow the validation of cookies to match RFC6265 (#167 by @​bewinsnw)
• fix: add main to package.json for rspack (#166 by @​proudparrot2)

jshttp/cookie@v0.6.0...v0.7.0

Commits

• d19eaa1 0.7.2
• bc38ffd Fix object assignment of hasOwnProperty (#177)
• cf4658f 0.7.1
• 6a8b8f5 Allow leading dot for domain (#174)
• 58015c0 Remove more code and perf wins (#172)
• ab057d6 0.7.0
• 5f02ca8 Migrate history to GitHub releases
• a5d591c Migrate history to GitHub releases
• 51968f9 Skip isNaN
• 9e7ca51 perf(parse): cache length, return early (#144)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+312	58.8 MB	fredkschott, matthewp, natemoo-re

🚮 Removed packages: npm/[email protected]

View full report↗︎

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.