Update npm dependencies (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
astro-mermaid	^1.4.0 → ^2.0.1
typescript (source)	^5.9.3 → ^6.0.2
vite (source)	^7.3.1 → ^8.0.3

---

Release Notes

joesaby/astro-mermaid (astro-mermaid)

v2.0.1

Compare Source

Bug Fixes

• resolve 8 npm security vulnerabilities in dependencies (#​53) (eb9d9f6)

v2.0.0

Compare Source

• feat!: upgrade demos to Astro 6 (#​43) (0c3f2e3)
• fix!: Claude/fix security issues (#​49) (5147ea6)
• fix!: Claude/upgrade astro mermaid 3v e iy (#​50) (19625c4)

BREAKING CHANGES

• Demo projects now require Astro 6. The integration
  itself still supports Astro 4+ via the >=4 peer dependency.

https://claude.ai/code/session_01NywnmskRaJZtFzrQ4GcS2N

• docs: add AGENTS.md, CONTRIBUTING.md and update CLAUDE.md

• AGENTS.md: AI agent instructions covering architecture, commit
  conventions, release pipeline, and development workflow
• CONTRIBUTING.md: Contributor guidelines with conventional commits
  format, PR workflow, and project structure reference
• CLAUDE.md: Updated project structure (Astro 6 paths), added
  versioning/release section, added Astro 6 upgrade notes

https://claude.ai/code/session_01NywnmskRaJZtFzrQ4GcS2N

• fix: regenerate lockfile for Astro 6 and bump Node to 22 in CI

• Regenerate package-lock.json to match astro@^6.0.0 in devDependencies
  (npm ci was failing due to stale lockfile still referencing astro@​5)
• Bump Node.js from 20 to 22 in release workflow to satisfy
  semantic-release@​25 engine requirement (^22.14.0 || >= 24.10.0)

https://claude.ai/code/session_01NywnmskRaJZtFzrQ4GcS2N

• Icon pack configuration now uses url property instead
  of loader functions. Existing loader functions are supported via legacy
  URL extraction but direct function serialization is removed for security.

https://claude.ai/code/session_01NywnmskRaJZtFzrQ4GcS2N

• ci: add --legacy-peer-deps to Netlify builds

Netlify caches node_modules between builds, causing ERESOLVE conflicts
when dependency versions change (e.g. @​astrojs/starlight@​0.34.8 cached
but ^0.38.0 required). Adding NPM_FLAGS=--legacy-peer-deps resolves
the peer dependency conflicts during Netlify deploy previews.

https://claude.ai/code/session_01NywnmskRaJZtFzrQ4GcS2N

• Demo projects now require Astro 6. The integration
  itself still supports Astro 4+ via the >=4 peer dependency.

https://claude.ai/code/session_01NywnmskRaJZtFzrQ4GcS2N

• docs: add AGENTS.md, CONTRIBUTING.md and update CLAUDE.md

• AGENTS.md: AI agent instructions covering architecture, commit
  conventions, release pipeline, and development workflow
• CONTRIBUTING.md: Contributor guidelines with conventional commits
  format, PR workflow, and project structure reference
• CLAUDE.md: Updated project structure (Astro 6 paths), added
  versioning/release section, added Astro 6 upgrade notes

https://claude.ai/code/session_01NywnmskRaJZtFzrQ4GcS2N

microsoft/TypeScript (typescript)

v6.0.2

Compare Source

vitejs/vite (vite)

v8.0.3

Compare Source

Features

• update rolldown to 1.0.0-rc.12 (#​22024) (84164ef)

Bug Fixes

• html: cache unfiltered CSS list to prevent missing styles across entries (#​22017) (5464190)
• module-runner: handle non-ascii characters in base64 sourcemaps (#​21985) (77c95bf)
• module-runner: skip re-import if the runner is closed (#​22020) (ee2c2cd)
• optimizer: scan is not resolving sub path import if used in a glob import (#​22018) (ddfe20d)
• ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#​22019) (cff5f0c)

Miscellaneous Chores

• deps: bump picomatch from 4.0.3 to 4.0.4 (#​22027) (7e56003)

Tests

• html: add tests for getCssFilesForChunk (#​22016) (43fbbf9)

v8.0.2

Compare Source

Features

• update rolldown to 1.0.0-rc.11 (#​21998) (ff91c31)

Bug Fixes

• deps: update all non-major dependencies (#​21988) (9b7d150)

Miscellaneous Chores

• deps: update dependency @​vitejs/devtools to ^0.1.5 (#​21992) (b2dd65b)

v8.0.1

Compare Source

Features

• update rolldown to 1.0.0-rc.10 (#​21932) (b3c067d)

Bug Fixes

• bundled-dev: properly disable inlineConst optimization (#​21865) (6d97142)
• css: lightningcss minify failed when build.target: 'es6' (#​21933) (5fcce46)
• deps: update all non-major dependencies (#​21878) (6dbbd7f)
• dev: always use ESM Oxc runtime (#​21829) (d323ed7)
• dev: handle concurrent restarts in _createServer (#​21810) (40bc729)
• handle + symbol in package subpath exports during dep optimization (#​21886) (86db93d)
• improve no-cors request block error (#​21902) (5ba688b)
• use precise regexes for transform filter to avoid backtracking (#​21800) (dbe41bd)
• worker: require(json) result should not be wrapped (#​21847) (0672fd2)
• worker: make worker output consistent with client and SSR (#​21871) (69454d7)

Miscellaneous Chores

• add changelog rearrange script (#​21835) (efef073)
• deps: bump required @vitejs/devtools version to 0.1+ (#​21925) (12932f5)
• deps: update rolldown-related dependencies (#​21787) (1af1d3a)
• rearrange 8.0 changelog (8e05b61)
• rearrange 8.0 changelog (#​21834) (86edeee)

v8.0.0

Compare Source

Features

• update rolldown to 1.0.0-rc.9 (#​21813) (f05be0e)
• warn when vite-tsconfig-paths plugin is detected (#​21781) (ada493e)

Bug Fixes

• deps: update all non-major dependencies (#​21786) (eaa4352)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cla-assistant]

All committers have signed the CLA.