Update dependency astro-icon to v1.2.0

Renovate commented

2026-08-18 05:00:46 +00:00

Collaborator

This PR contains the following updates:

Package	Change	Age	Confidence
astro-icon (source)	`1.1.5` → `1.2.0`

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

natemoo-re/astro-icon (astro-icon)

`v1.2.0`

Compare Source

Minor Changes

#290 956817e Thanks @stramel! - Bump @iconify/tools to v5 and @iconify/utils to v3, removing the transitive extract-zip dependency that was flagged for a symlink path-traversal vulnerability (GHSA-jmr9-qjv8-65gv).

Requires Node ≥22.12 — @iconify/utils v3 uses node:util's styleText, which needs Node ≥20.12/21.7, but the toolchain now also builds against Astro 7 (which itself requires Node ≥22.12). Node 20 reached end-of-life in April 2026, so astro-icon's engines field is raised to the currently-supported floor rather than the bare minimum.
#285 2e83ca0 Thanks @stramel! - title/desc props now accept { id, value } in addition to a plain string, so consumers can set id attributes on the generated <title>/<desc> elements for aria-labelledby referencing.

Patch Changes

#291 3db45a5 Thanks @stramel! - Strip the lastModified timestamp from the generated local icon collection so its output is deterministic across builds, allowing Astro's incremental build cache to work as expected.
#288 adb18cf Thanks @stramel! - Log a warning instead of silently swallowing errors when the local icon collection fails to load, so failures during dev/build are visible instead of hidden.
#287 fd5d522 Thanks @stramel! - Fix icon dir watcher so newly added local icons (including files inside subfolders) are picked up without restarting the dev server
#282 8904693 Thanks @stramel! - Update @iconify/tools and @iconify/utils to resolve axios and undici vulnerabilities pulled in transitively.
#286 6af6fcf Thanks @stramel! - Fix viewBox being inconsistently present on <svg> elements across repeated uses of the same icon. The viewBox is now always kept on the <svg> element, so attributes that depend on it (such as preserveAspectRatio) continue to work. Icons whose viewBox has a non-zero min-x/min-y keep a viewBox on their shared <symbol> and anchor their <use> element, so they stay positioned correctly and a per-instance viewBox override no longer leaks onto other instances of the same icon.
#281 df57ce6 Thanks @stramel! - Fix duplicate/incorrect icons rendering in Chromium-based browsers by rewriting internal SVG ids (e.g. gradients, clip paths) to be unique per rendered icon.
#284 09177dd Thanks @stramel! - Fixes Astro.request.headers warning on prerendered pages by keying the internal per-render icon cache off Astro.locals instead of Astro.request

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [astro-icon](https://github.com/natemoo-re/astro-icon) ([source](https://github.com/natemoo-re/astro-icon/tree/HEAD/packages/core)) | [`1.1.5` → `1.2.0`](https://renovatebot.com/diffs/npm/astro-icon/1.1.5/1.2.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/astro-icon/1.2.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/astro-icon/1.1.5/1.2.0?slim=true) | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/3) for more information. --- ### Release Notes <details> <summary>natemoo-re/astro-icon (astro-icon)</summary> ### [`v1.2.0`](https://github.com/natemoo-re/astro-icon/blob/HEAD/packages/core/CHANGELOG.md#120) [Compare Source](https://github.com/natemoo-re/astro-icon/compare/astro-icon@1.1.5...astro-icon@1.2.0) ##### Minor Changes - [#290](https://github.com/natemoo-re/astro-icon/pull/290) [`956817e`](https://github.com/natemoo-re/astro-icon/commit/956817ef3718fafa1e011a5191a61331389419ae) Thanks [@stramel](https://github.com/stramel)! - Bump `@iconify/tools` to v5 and `@iconify/utils` to v3, removing the transitive `extract-zip` dependency that was flagged for a symlink path-traversal vulnerability (GHSA-jmr9-qjv8-65gv). **Requires Node ≥22.12** — `@iconify/utils` v3 uses `node:util`'s `styleText`, which needs Node ≥20.12/21.7, but the toolchain now also builds against Astro 7 (which itself requires Node ≥22.12). Node 20 reached end-of-life in April 2026, so `astro-icon`'s `engines` field is raised to the currently-supported floor rather than the bare minimum. - [#285](https://github.com/natemoo-re/astro-icon/pull/285) [`2e83ca0`](https://github.com/natemoo-re/astro-icon/commit/2e83ca08f47aea16a7b44a1d60332f0e29cb12ce) Thanks [@stramel](https://github.com/stramel)! - `title`/`desc` props now accept `{ id, value }` in addition to a plain string, so consumers can set `id` attributes on the generated `<title>`/`<desc>` elements for `aria-labelledby` referencing. ##### Patch Changes - [#291](https://github.com/natemoo-re/astro-icon/pull/291) [`3db45a5`](https://github.com/natemoo-re/astro-icon/commit/3db45a5c2dd99f0f51dbfc2f35c1ed8e04d15d6a) Thanks [@stramel](https://github.com/stramel)! - Strip the `lastModified` timestamp from the generated local icon collection so its output is deterministic across builds, allowing Astro's incremental build cache to work as expected. - [#288](https://github.com/natemoo-re/astro-icon/pull/288) [`adb18cf`](https://github.com/natemoo-re/astro-icon/commit/adb18cf0256139a0b4636a2b5f950eb89daf3270) Thanks [@stramel](https://github.com/stramel)! - Log a warning instead of silently swallowing errors when the local icon collection fails to load, so failures during dev/build are visible instead of hidden. - [#287](https://github.com/natemoo-re/astro-icon/pull/287) [`fd5d522`](https://github.com/natemoo-re/astro-icon/commit/fd5d522ce1b9d12f0dcf85de18c122a7765c09df) Thanks [@stramel](https://github.com/stramel)! - Fix icon dir watcher so newly added local icons (including files inside subfolders) are picked up without restarting the dev server - [#282](https://github.com/natemoo-re/astro-icon/pull/282) [`8904693`](https://github.com/natemoo-re/astro-icon/commit/8904693a63a10b2de15edb327eb9632ea36a919a) Thanks [@stramel](https://github.com/stramel)! - Update `@iconify/tools` and `@iconify/utils` to resolve `axios` and `undici` vulnerabilities pulled in transitively. - [#286](https://github.com/natemoo-re/astro-icon/pull/286) [`6af6fcf`](https://github.com/natemoo-re/astro-icon/commit/6af6fcf1e44b25ed126285952f1b92683b1c38db) Thanks [@stramel](https://github.com/stramel)! - Fix `viewBox` being inconsistently present on `<svg>` elements across repeated uses of the same icon. The `viewBox` is now always kept on the `<svg>` element, so attributes that depend on it (such as `preserveAspectRatio`) continue to work. Icons whose `viewBox` has a non-zero `min-x`/`min-y` keep a `viewBox` on their shared `<symbol>` and anchor their `<use>` element, so they stay positioned correctly and a per-instance `viewBox` override no longer leaks onto other instances of the same icon. - [#281](https://github.com/natemoo-re/astro-icon/pull/281) [`df57ce6`](https://github.com/natemoo-re/astro-icon/commit/df57ce68165f396dae6f1802523704f0c068d4c9) Thanks [@stramel](https://github.com/stramel)! - Fix duplicate/incorrect icons rendering in Chromium-based browsers by rewriting internal SVG ids (e.g. gradients, clip paths) to be unique per rendered icon. - [#284](https://github.com/natemoo-re/astro-icon/pull/284) [`09177dd`](https://github.com/natemoo-re/astro-icon/commit/09177dd5b663f878133bb998cf53c016510707be) Thanks [@stramel](https://github.com/stramel)! - Fixes `Astro.request.headers` warning on prerendered pages by keying the internal per-render icon cache off `Astro.locals` instead of `Astro.request` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

Renovate added 1 commit

2026-08-18 05:00:46 +00:00

Update dependency astro-icon to v1.2.0

ci/woodpecker/pr/build-and-deploy Pipeline was successful

Details

ci/woodpecker/push/build-and-deploy Pipeline was successful

Details

67293f017a

Renovate force-pushed renovate/astro-icon-1.x-lockfile from 67293f017a

ci/woodpecker/pr/build-and-deploy Pipeline was successful

Details

ci/woodpecker/push/build-and-deploy Pipeline was successful