chore(deps): bump the minor-patch group with 3 updates

[dependabot]

Bumps the minor-patch group with 3 updates: astro-mermaid, countup.js and sharp.

Updates astro-mermaid from 2.0.1 to 2.1.0

Release notes

Sourced from astro-mermaid's releases.

v2.1.0

2.1.0 (2026-06-24)

Features

• support Astro 7 Sätteri markdown processor (#71) (#72) (ce85c02)

v2.0.4

2.0.4 (2026-06-17)

Bug Fixes

• route markdown plugins through unified processor on Astro 6.4+ (#66) (4edbfd5), closes #62

v2.0.3

2.0.3 (2026-06-17)

Bug Fixes

• add support for icons property in iconPacks (fixes #18) (#20) (87a84f6)

v2.0.2

2.0.2 (2026-06-01)

Bug Fixes

• patch vitest UI critical security vulnerability (GHSA-5xrq-8626-4rwp) (#60) (002bd34)

Commits

• ce85c02 feat: support Astro 7 Sätteri markdown processor (#71) (#72)
• 68e8259 chore(deps-dev): bump dompurify (#70)
• 4edbfd5 fix: route markdown plugins through unified processor on Astro 6.4+ (#66)
• 9b37610 docs: fix C4 container diagram using unsupported Rel_Back_Neighbor (#67)
• 712988b chore(deps): resolve all Dependabot security alerts (#65)
• a4ec613 chore: add issue-workflow skill and brainstorm/code-reviewer subagents (#64)
• 87a84f6 fix: add support for icons property in iconPacks (fixes #18) (#20)
• 6df4298 chore(deps-dev): bump dompurify (#63)
• 002bd34 fix: patch vitest UI critical security vulnerability (GHSA-5xrq-8626-4rwp) (#60)
• fc49f71 chore(deps-dev): bump astro in the npm_and_yarn group across 1 directory (#57)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro-mermaid since your current version.

Updates countup.js from 2.10.0 to 2.10.1

Release notes

Sourced from countup.js's releases.

2.10.1

Fixes 2 smart easing pause/resume issues. Details in PR.

Commits

• 2346e49 Fix 2 smart easing pause/resume issues (#372)
• 23bcb00 fix options link in README
• a3e3d09 add dependabot config
• See full diff in compare view

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3

• Tighten verification of text dimensions, TIFF tile dimensions and extend values.

• Improve code bundler support by resolving path to libvips binary.

• Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

• Emit warning about binaries provided by Electron for use on Linux.

• Add hasAlpha property to output info. #4500

• TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @​Andarist

• Bound clahe width and height to avoid signed overflow. #4551 @​metsw24-max

• Bound trim margin to avoid signed overflow. #4552 @​metsw24-max

• Reject infinite values when validating numbers. #4553 @​metsw24-max

• Bound extract region to libvips coordinate limit. #4555 @​metsw24-max

• Verify background colour values are numbers. #4556 @​metsw24-max

• Bound create and raw input dimensions to coordinate limit. #4558 @​metsw24-max

• Tighten recomb and affine matrix verification. #4560 @​chatman-media

• Verify cache memory limit to avoid overflow. #4561 @​metsw24-max

v0.35.3-rc.2

• Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

• 1018449 Release v0.35.3
• ba303a7 Prerelease v0.35.3-rc.2
• 4f94fc5 Upgrade to sharp-libvips v1.3.2
• c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
• 9a8d002 Docs: Add changelog entry and note about transferable #4520
• 8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
• e000d0b Prerelease v0.35.3-rc.1
• 9554ca9 Prerelease v0.35.3-rc.0
• 6a29fd5 Emit warning about native binaries on Linux Electron
• 540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions