chore(deps): update dependency @astrojs/compiler-rs to v0.4.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@astrojs/compiler-rs (source)	0.3.1 → 0.4.0

---

Release Notes

withastro/compiler-rs (@​astrojs/compiler-rs)

v0.4.0

Compare Source

Minor Changes

• bc10d43: Adds a comments array to the AST returned by parse(), covering comments in the frontmatter, in <script> blocks, and in the template.
• bc10d43: parse() now reports node and comment positions as UTF-16 offsets, so they line up with JavaScript string indices. Previously they were UTF-8 byte offsets, which drifted on any source containing non-ASCII characters.

Patch Changes

• 90af674: Fixes an issue where a <script define:vars={...}> element lost all of its other attributes (such as data-astro-rerun, id, or nonce) in the compiled output.
• Updated dependencies [90af674]
• Updated dependencies [bc10d43]
• Updated dependencies [bc10d43]
  • @​astrojs/compiler-binding@​0.4.0

v0.3.2

Compare Source

Patch Changes

• 2264c9a: Fixes an issue where define:vars didn't work correctly for custom components.
• 4006641: Fixes two :global() scoping mismatches with the Go compiler. An attribute or class suffixed onto a leading :global() (:global(a)[role="button"], :global(a).cls) is no longer mis-scoped and now stays global. A selector list inside :global() (.x :global(ul, ol)) no longer drops later items; the scope prefix is distributed across every item instead.
• Updated dependencies [2264c9a]
• Updated dependencies [4006641]
  • @​astrojs/compiler-binding@​0.3.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​astrojs/​compiler-rs@​0.3.1 ⏵ 0.4.0	+45			-2

View full report

[cursor]

Risk: low. Approved — patch bump of @astrojs/compiler-rs (0.3.1 → 0.3.2) with lockfile update only; Cursor Bugbot was not present after the initial check poll so that signal was skipped. No reviewers assigned.

  

_{Sent by Cursor Approval Agent: Pull Request Approver External}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud