Skip to content

build(deps): bump @astrojs/rss from 4.0.15 to 4.0.19 - #106

Merged
ro80t merged 1 commit into
mainfrom
dependabot/npm_and_yarn/astrojs/rss-4.0.18
Aug 11, 2026
Merged

build(deps): bump @astrojs/rss from 4.0.15 to 4.0.19#106
ro80t merged 1 commit into
mainfrom
dependabot/npm_and_yarn/astrojs/rss-4.0.18

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 30, 2026

Copy link
Copy Markdown
Contributor

Bumps @astrojs/rss from 4.0.15 to 4.0.19.

Release notes

Sourced from @​astrojs/rss's releases.

@​astrojs/rss@​4.0.19

Patch Changes

  • #17209 fbcfa03 Thanks @​matthewp! - Hardens RSS feed generation by escaping the source and enclosure item fields. These fields are now serialized as structured XML values, ensuring that special characters in values like source.title and enclosure.type are always treated as text rather than markup, consistent with how other feed fields are handled.
Changelog

Sourced from @​astrojs/rss's changelog.

4.0.19

Patch Changes

  • #17209 fbcfa03 Thanks @​matthewp! - Hardens RSS feed generation by escaping the source and enclosure item fields. These fields are now serialized as structured XML values, ensuring that special characters in values like source.title and enclosure.type are always treated as text rather than markup, consistent with how other feed fields are handled.

4.0.18

Patch Changes

4.0.17

Patch Changes

4.0.16

Patch Changes

4.0.15-beta.4

Patch Changes

4.0.15-beta.3

Patch Changes

4.0.15-beta.2

Patch Changes

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 30, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/astrojs/rss-4.0.18 branch from 4786461 to 6e90e7e Compare April 18, 2026 14:15
@ro80t

ro80t commented Aug 11, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [@astrojs/rss](https://github.com/withastro/astro/tree/HEAD/packages/astro-rss) from 4.0.15 to 4.0.19.
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro-rss/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/rss@4.0.19/packages/astro-rss)

---
updated-dependencies:
- dependency-name: "@astrojs/rss"
  dependency-version: 4.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump @astrojs/rss from 4.0.15 to 4.0.18 build(deps): bump @astrojs/rss from 4.0.15 to 4.0.19 Aug 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/astrojs/rss-4.0.18 branch from 6e90e7e to 7952685 Compare August 11, 2026 15:00
@ro80t
ro80t merged commit d460441 into main Aug 11, 2026
1 check passed
@ro80t
ro80t deleted the dependabot/npm_and_yarn/astrojs/rss-4.0.18 branch August 11, 2026 15:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant