[dependabot]

Bumps satori to 0.33.5 and updates ancestor dependency vinext. These dependencies need to be updated together.

Updates satori from 0.16.0 to 0.33.5

Release notes

Sourced from satori's releases.

0.33.5

0.33.5 (2026-09-22)

Bug Fixes

• Harden SVG serialization (#814) (26a52af)

0.33.4

0.33.4 (2026-08-24)

Bug Fixes

• Use Geist for playground cards (#790) (9668d20)

0.33.3

0.33.3 (2026-08-21)

Bug Fixes

• Optimize opacity processing (#789) (6c400d5)

0.33.2

0.33.2 (2026-08-21)

Bug Fixes

• Better font caching (#788) (b22c04c)

0.33.1

0.33.1 (2026-08-21)

Bug Fixes

• Improve cache and update benchmark (~12% faster) (#787) (ed7d78e)

0.33.0

0.33.0 (2026-08-20)

Features

• Add HarfBuzz text shaping (#735) (b2127fe)

0.32.0

0.32.0 (2026-08-20)

... (truncated)

Commits

• 26a52af fix: Harden SVG serialization (#814)
• 499436f chore: Replace playground Monaco editor with sugar-high (#803)
• 9668d20 fix: Use Geist for playground cards (#790)
• 6c400d5 fix: Optimize opacity processing (#789)
• b22c04c fix: Better font caching (#788)
• ed7d78e fix: Improve cache and update benchmark (~12% faster) (#787)
• b2127fe feat: Add HarfBuzz text shaping (#735)
• de6db71 feat: backdrop-filter (#786)
• 9487cbb feat: shape() in clip-path (#785)
• 8705f4c feat: corner-shape support (#784)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for satori since your current version.

Updates vinext from 1.0.0-beta.9 to 1.4.2

Release notes

Sourced from vinext's releases.

vinext@1.4.2

Bug Fixes

App Router

• take a same-route interception's config from its own loader tree (#4500)
• take an interception's segment config from its own loader tree (#4493)
• render the dynamic sibling for an encoded request-time page (#4430)
• match encoded paths like Next.js after rewrites, for metadata routes and the image endpoint (#4420)
• send next.config headers with /_next/image responses (#4454)
• keep a route's slot params above a staged response stage (#4492)
• send Next.js's Cache-Control on every Server Action response (#4428)
• never cache early and intercepted page responses (#4427)
• rebind an optimistic shell's layout-less level keys (#4490)
• send an intercepted response's params to useParams() (#4489)
• catch errors in a named slot's nested error boundaries (#4488)
• don't render a learned shell over a retained BFCache entry (#4487)
• keep a BFCache list for a named slot's page level (#4486)
• keep BFCache segment lists under layouts with named slots (#4485)
• render a restored history entry with its own URL (#4484)
• key optimistic route shells by their target params (#4482)
• render a sibling intercept's own route from deeper sources (#4481)
• keep Next's BFCache segment lists for sibling intercepts (#4477)

Misc

• Build: apply the pinned cssTarget only when the app does not set one (#4415)
• Config: keep RegExp lookbehinds out of client chunks (#4495)
• Nitro: keep asset fetches on the file the caller named (#4438)
• Pages Router: 404 _next/data requests whose .json strip leaves a dot segment (#4439)
• Pages Router: restore a stripped basePath when a route's first segment repeats it (#4434)
• Image: round the quality prop to a configured images.qualities like Next.js (#4449)
• Cloudflare: keep middleware and headers() Cache-Control on Worker-served public files (#4457)
• Image: enforce images.localPatterns on the image endpoint like Next.js (#4455)
• Init: warn when worker/index.* does not import vinext's fetch handler (#4479)

Contributors

• @​haruki860
• @​james-elicx

vinext@1.4.1

Bug Fixes

App Router

• reject route handler request reads inside unstable_cache() like Next.js (#4456)
• report SSR-only shell errors in the dev overlay and answer error boundary documents with 500 (#4466)
• accept _rsc values only for the headers they were computed from (#4448)
• answer shell errors with the error document, and add VINEXT_QUIET (#4411)

... (truncated)

Commits

• ab5d17d chore: version packages (#4491)
• 5ecec3c fix(build): apply the pinned cssTarget only when the app does not set one (#4...
• 613b48f refactor(app-router): resolve a dispatch's intercept once and reuse its reval...
• 7e690b3 fix(app-router): take a same-route interception's config from its own loader ...
• b2581ce fix(app-router): take an interception's segment config from its own loader tr...
• 329bde6 fix(config): keep RegExp lookbehinds out of client chunks (#4495)
• 58da2ec fix(nitro): keep asset fetches on the file the caller named (#4438)
• 520fa1e fix(pages-router): 404 _next/data requests whose .json strip leaves a dot seg...
• 9e1725e fix(app-router): render the dynamic sibling for an encoded request-time page ...
• d92b980 fix(app-router): match encoded paths like Next.js after rewrites, for metadat...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Looks like these dependencies are up-to-date now, so this is no longer needed.