Update astro #18390

This PR contains the following updates:

Package
Change
Age
Confidence

@preact/signals (source)
2.11.2 → 2.11.3

@vitejs/plugin-vue (source)
^6.0.9 → ^6.0.10

es-module-lexer
^3.0.2 → ^3.0.3

hono (source)
^4.13.11 → ^4.13.13

http-cache-semantics
^4.2.0 → ^4.3.0

magic-string
^1.4.2 → ^1.4.3

oxc-transform-react (source)
^0.151.0 → ^0.153.0

p-queue
^9.3.3 → ^9.3.5

package-manager-detector
^1.8.0 → ^1.9.0

postcss (source)
^8.5.28 → ^8.5.29

postcss-preset-env (source)
^11.5.4 → ^11.6.1

sass
^1.105.0 → ^1.105.1

shiki (source)
^4.4.3 → ^4.5.0

smol-toml
^1.9.0 → ^1.9.1

solid-js (source)
^1.9.15 → ^1.9.17

svelte (source)
^5.57.1 → ^5.57.2

unifont
^1.0.2 → ^1.0.3

zod (source)
^4.6.5 → ^4.6.6

---

Release Notes

preactjs/signals (@​preact/signals)

### [`v2.11.3`](https://redirect.github.com/preactjs/signals/blob/HEAD/packages/preact/CHANGELOG.md#2113)

[Compare Source](https://redirect.github.com/preactjs/signals/compare/@preact/[email protected]...@preact/[email protected])

##### Patch Changes

- [#​991](https://redirect.github.com/preactjs/signals/pull/991) [`04445ba`](https://redirect.github.com/preactjs/signals/commit/04445ba15a095b7f11d5095ad83254bc180b05bc) Thanks [@​JoviDeCroock](https://redirect.github.com/JoviDeCroock)! - Don't re-run a `useSignalEffect` for a component that was unmounted by the same update. Preact 11 disposes it after paint, so the effect could otherwise run once more against an unmounted component.

kornelski/http-cache-semantics (http-cache-semantics)

### [`v4.3.0`](https://redirect.github.com/kornelski/http-cache-semantics/compare/83810982b8f8996b101ed761548ea7e87a9132ea...b1d4bd682fbab0252985de45219f4e7497c0067c)

[Compare Source](https://redirect.github.com/kornelski/http-cache-semantics/compare/83810982b8f8996b101ed761548ea7e87a9132ea...b1d4bd682fbab0252985de45219f4e7497c0067c)

Rich-Harris/magic-string (magic-string)

### [`v1.4.3`](https://redirect.github.com/Rich-Harris/magic-string/blob/HEAD/CHANGELOG.md#143-2026-10-05)

[Compare Source](https://redirect.github.com/Rich-Harris/magic-string/compare/v1.4.2...v1.4.3)

##### Bug Fixes

- preserve inserts when `update` spans several chunks ([#​361](https://redirect.github.com/Rich-Harris/magic-string/issues/361)) ([fb89bad](https://redirect.github.com/Rich-Harris/magic-string/commit/fb89bad8837daf568648e3e1dde3284c61bdd1fb))
- replace the matched text when an offset is set ([#​362](https://redirect.github.com/Rich-Harris/magic-string/issues/362)) ([607e8e4](https://redirect.github.com/Rich-Harris/magic-string/commit/607e8e44a5cc8e0cef9476f15ddb59cbc10f99df))

oxc-project/oxc (oxc-transform-react)

### [`v0.152.0`](https://redirect.github.com/oxc-project/oxc/blob/HEAD/napi/transform-react/CHANGELOG.md#01520---2026-09-28)

##### 🚀 Features

- [`3255b89`](https://redirect.github.com/oxc-project/oxc/commit/3255b89) transform-react: Add `reportDiagnostics` option to expose recoverable React Compiler diagnostics ([#​26624](https://redirect.github.com/oxc-project/oxc/issues/26624)) (Jack)
- [`f585cb4`](https://redirect.github.com/oxc-project/oxc/commit/f585cb4) napi: Add threadless WASI builds ([#​26898](https://redirect.github.com/oxc-project/oxc/issues/26898)) (Boshen)

sindresorhus/p-queue (p-queue)

### [`v9.3.5`](https://redirect.github.com/sindresorhus/p-queue/releases/tag/v9.3.5)

[Compare Source](https://redirect.github.com/sindresorhus/p-queue/compare/v9.3.4...v9.3.5)

- Fix missed abort when the task aborts the signal while it starts [`507e7ee`](https://redirect.github.com/sindresorhus/p-queue/commit/507e7ee)

***

### [`v9.3.4`](https://redirect.github.com/sindresorhus/p-queue/releases/tag/v9.3.4)

[Compare Source](https://redirect.github.com/sindresorhus/p-queue/compare/v9.3.3...v9.3.4)

- Count the running task before emitting active [`22edad4`](https://redirect.github.com/sindresorhus/p-queue/commit/22edad4)

***

postcss/postcss (postcss)

### [`v8.5.29`](https://redirect.github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8529)

[Compare Source](https://redirect.github.com/postcss/postcss/compare/8.5.28...8.5.29)

- Improved `` escaping (by [@​choudhryfrompak](https://redirect.github.com/choudhryfrompak)).
- Fixed comments support in `list.comma()` and `list.space()` (by [@​00200200](https://redirect.github.com/00200200)).
- Fixed semicolon and custom property (by [@​wahidrizka](https://redirect.github.com/wahidrizka)).

csstools/postcss-plugins (postcss-preset-env)

### [`v11.6.1`](https://redirect.github.com/csstools/postcss-plugins/blob/HEAD/plugin-packs/postcss-preset-env/CHANGELOG.md#1161)

[Compare Source](https://redirect.github.com/csstools/postcss-plugins/compare/1ea5284dc5d39c01e3f1831626c9ab31753603b0...d70aa9feebea5a3534fbcc1deb202294437c7ce6)

*October 5, 2026*

- Updated [`@csstools/selector-specificity`](https://redirect.github.com/csstools/postcss-plugins/tree/main/packages/selector-specificity) to [`6.0.1`](https://redirect.github.com/csstools/postcss-plugins/tree/main/packages/selector-specificity/CHANGELOG.md#601) (patch)

### [`v11.6.0`](https://redirect.github.com/csstools/postcss-plugins/blob/HEAD/plugin-packs/postcss-preset-env/CHANGELOG.md#1160)

[Compare Source](https://redirect.github.com/csstools/postcss-plugins/compare/2e1d41e60312c915389d1b6329cefa49d10a6c85...1ea5284dc5d39c01e3f1831626c9ab31753603b0)

*October 2, 2026*

- Added `@csstools/postcss-custom-functions` [Check the plugin README](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-custom-functions#readme) for usage details.
- Updated [`@csstools/postcss-custom-functions`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-custom-functions) to [`1.0.1`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-custom-functions/CHANGELOG.md#101) (patch)

### [`v11.5.5`](https://redirect.github.com/csstools/postcss-plugins/blob/HEAD/plugin-packs/postcss-preset-env/CHANGELOG.md#1155)

[Compare Source](https://redirect.github.com/csstools/postcss-plugins/compare/7341dca27a98a724ea5d146be1cb7a731cdb8879...2e1d41e60312c915389d1b6329cefa49d10a6c85)

*October 1, 2026*

Notable changes:

- `postcss-mixins` now implements more of the current spec
- many plugins now have bounds to prevent CPU starvation or OOM

All updates plugins:

- Updated [`@csstools/postcss-alpha-function`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-alpha-function) to [`2.0.15`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-alpha-function/CHANGELOG.md#2015) (patch)
- Updated [`@csstools/postcss-color-function-display-p3-linear`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-color-function-display-p3-linear) to [`2.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-color-function-display-p3-linear/CHANGELOG.md#2014) (patch)
- Updated [`@csstools/postcss-color-function`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-color-function) to [`5.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-color-function/CHANGELOG.md#5014) (patch)
- Updated [`@csstools/postcss-color-mix-function`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-color-mix-function) to [`4.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-color-mix-function/CHANGELOG.md#4014) (patch)
- Updated [`@csstools/postcss-color-mix-variadic-function-arguments`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-color-mix-variadic-function-arguments) to [`2.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-color-mix-variadic-function-arguments/CHANGELOG.md#2014) (patch)
- Updated [`@csstools/postcss-container-rule-prelude-list`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-container-rule-prelude-list) to [`1.0.3`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-container-rule-prelude-list/CHANGELOG.md#103) (patch)
- Updated [`@csstools/postcss-content-alt-text`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-content-alt-text) to [`3.0.6`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-content-alt-text/CHANGELOG.md#306) (patch)
- Updated [`@csstools/postcss-contrast-color-function`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-contrast-color-function) to [`3.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-contrast-color-function/CHANGELOG.md#3014) (patch)
- Updated [`@csstools/postcss-exponential-functions`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-exponential-functions) to [`3.0.8`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-exponential-functions/CHANGELOG.md#308) (patch)
- Updated [`@csstools/postcss-gamut-mapping`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-gamut-mapping) to [`3.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-gamut-mapping/CHANGELOG.md#3014) (patch)
- Updated [`@csstools/postcss-gradients-interpolation-method`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-gradients-interpolation-method) to [`6.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-gradients-interpolation-method/CHANGELOG.md#6014) (patch)
- Updated [`@csstools/postcss-hwb-function`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-hwb-function) to [`5.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-hwb-function/CHANGELOG.md#5014) (patch)
- Updated [`@csstools/postcss-image-function`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-image-function) to [`1.0.5`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-image-function/CHANGELOG.md#105) (patch)
- Updated [`@csstools/postcss-light-dark-function`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-light-dark-function) to [`3.0.6`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-light-dark-function/CHANGELOG.md#306) (patch)
- Updated [`@csstools/postcss-media-minmax`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-media-minmax) to [`3.0.7`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-media-minmax/CHANGELOG.md#307) (patch)
- Updated [`@csstools/postcss-media-queries-aspect-ratio-number-values`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-media-queries-aspect-ratio-number-values) to [`4.0.2`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-media-queries-aspect-ratio-number-values/CHANGELOG.md#402) (patch)
- Updated [`@csstools/postcss-mixins`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-mixins) to [`1.1.0`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-mixins/CHANGELOG.md#110) (minor)
- Updated [`@csstools/postcss-oklab-function`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-oklab-function) to [`5.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-oklab-function/CHANGELOG.md#5014) (patch)
- Updated [`@csstools/postcss-property-rule-prelude-list`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-property-rule-prelude-list) to [`2.0.2`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-property-rule-prelude-list/CHANGELOG.md#202) (patch)
- Updated [`@csstools/postcss-random-function`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-random-function) to [`4.0.4`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-random-function/CHANGELOG.md#404) (patch)
- Updated [`@csstools/postcss-relative-color-syntax`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-relative-color-syntax) to [`4.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-relative-color-syntax/CHANGELOG.md#4014) (patch)
- Updated [`@csstools/postcss-sign-functions`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-sign-functions) to [`2.0.8`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-sign-functions/CHANGELOG.md#208) (patch)
- Updated [`@csstools/postcss-stepped-value-functions`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-stepped-value-functions) to [`5.0.8`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-stepped-value-functions/CHANGELOG.md#508) (patch)
- Updated [`@csstools/postcss-system-ui-font-family`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-system-ui-font-family) to [`2.0.2`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-system-ui-font-family/CHANGELOG.md#202) (patch)
- Updated [`@csstools/postcss-trigonometric-functions`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-trigonometric-functions) to [`5.0.8`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-trigonometric-functions/CHANGELOG.md#508) (patch)
- Updated [`postcss-color-functional-notation`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-color-functional-notation) to [`8.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-color-functional-notation/CHANGELOG.md#8014) (patch)
- Updated [`postcss-custom-media`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-custom-media) to [`12.0.3`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-custom-media/CHANGELOG.md#1203) (patch)
- Updated [`postcss-custom-properties`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-custom-properties) to [`15.0.3`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-custom-properties/CHANGELOG.md#1503) (patch)
- Updated [`postcss-custom-selectors`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-custom-selectors) to [`9.0.3`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-custom-selectors/CHANGELOG.md#903) (patch)
- Updated [`postcss-lab-function`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-lab-function) to [`8.0.14`](https://redirect.github.com/csstools/postcss-plugins/tree/main/plugins/postcss-lab-function/CHANGELOG.md#8014) (patch)

unjs/unifont (unifont)

### [`v1.0.3`](https://redirect.github.com/unjs/unifont/releases/tag/v1.0.3)

[Compare Source](https://redirect.github.com/unjs/unifont/compare/v1.0.2...v1.0.3)

> v1.0.3 is the next patch release.

#### 👉 Changelog

[compare changes](https://redirect.github.com/unjs/unifont/compare/v1.0.2...v1.0.3)

##### 🩹 Fixes

- confine font sources from providers + npm packages ([#​548](https://redirect.github.com/unjs/unifont/issues/548))

##### 💅 Refactors

- replace `ohash` with `fnv1a-64` ([#​549](https://redirect.github.com/unjs/unifont/issues/549))

##### ❤️ Contributors

- Daniel Roe ([@​danielroe](https://redirect.github.com/danielroe))

colinhacks/zod (zod)

### [`v4.6.6`](https://redirect.github.com/colinhacks/zod/releases/tag/v4.6.6)

[Compare Source](https://redirect.github.com/colinhacks/zod/compare/v4.6.5...v4.6.6)

> Six malicious commits pushed to `main` on September 21 with a compromised git credential were reverted the same day in [#​6620](https://redirect.github.com/colinhacks/zod/issues/6620) and have since been removed from the history of `main`. None were ever published to npm. The npm provenance for 4.6.6 names [`284243f`](https://redirect.github.com/colinhacks/zod/commit/284243fb), the pre-rewrite copy of [`9c21983`](https://redirect.github.com/colinhacks/zod/commit/9c219833) with identical contents.

#### Commits:

- [`0cd3af5`](https://redirect.github.com/colinhacks/zod/commit/0cd3af5e9f50ad11bbcd4407a46a21b8848ba574) docs: load the en locale directly in Zod Mini
- [`9d5e60f`](https://redirect.github.com/colinhacks/zod/commit/9d5e60f162997b764b40d45aa02481888db50dea) docs: import locales from zod/locales, not z.locales
- [`34a626f`](https://redirect.github.com/colinhacks/zod/commit/34a626f307871ecbb0123947559328dc52ed5e3e) docs: tighten the z.locales tree-shaking note
- [`74304ce`](https://redirect.github.com/colinhacks/zod/commit/74304ce5b5796b5edb9a88ceb8e170b6ea3e82df) release: stage npm versions instead of publishing them ([#​6622](https://redirect.github.com/colinhacks/zod/issues/6622))
- [`b2ef983`](https://redirect.github.com/colinhacks/zod/commit/b2ef983e0711ff6517d6020b021071e2e5653efa) docs: add Code for Japan to bronze sponsors
- [`8fb2faf`](https://redirect.github.com/colinhacks/zod/commit/8fb2faf0584828a6a027d8279db36f6f52784462) docs: crop the Code for Japan logo and list it first in bronze
- [`bacad51`](https://redirect.github.com/colinhacks/zod/commit/bacad518c41610d654658172d325874bf0ee6290) docs: square the Code for Japan logo to match the other bronze tiles
- [`c42596b`](https://redirect.github.com/colinhacks/zod/commit/c42596bd1c87e941d7241d10e012c5c196adcc10) release: hold the run on the release-approval environment until the staged versions are approved ([#​6638](https://redirect.github.com/colinhacks/zod/issues/6638))
- [`a2ba4a6`](https://redirect.github.com/colinhacks/zod/commit/a2ba4a67986a3e6b2b131be30084a2f460d9ea67) fix(types): declare record output and input as members, not base type arguments ([#​6645](https://redirect.github.com/colinhacks/zod/issues/6645))
- [`a0ebf97`](https://redirect.github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd) fix(v4): check array, set and map size bounds before parsing elements ([#​6652](https://redirect.github.com/colinhacks/zod/issues/6652))
- [`529f78d`](https://redirect.github.com/colinhacks/zod/commit/529f78dd9431b07f49647fee3aa0819b3f8b66b7) 4.6.6
- [`9c21983`](https://redirect.github.com/colinhacks/zod/commit/9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1) ci: stage at verbose so a failed OIDC token exchange says why

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  
  
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  
  
  
  


• Automerge
  
  
  • At any time (no schedule defined)
  
  
  
  

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTYuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE1Ni4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->