Bump the all-dependencies group with 3 updates

[dependabot]

Bumps the all-dependencies group with 3 updates: @11ty/eleventy-plugin-rss, dotenv and @types/node.

Updates @11ty/eleventy-plugin-rss from 3.0.0 to 3.1.0

Release notes

Sourced from @​11ty/eleventy-plugin-rss's releases.

Feeds (RSS, Atom, JSON) v3.1.0

• Add collection.sort option to the Virtual Template: "auto" (default, previous behavior), "descending" (newest first by date, regardless of collection order), or "ascending". Use "descending" if your collection is sorted newest-first and your feed was showing your oldest posts. 11ty/plugin-rss#63
• Add getFeedTemplate(options) export, which returns { content, data } for use with eleventyConfig.addTemplate so you can choose the virtual template path yourself (useful for multiple feeds of the same type).

  import { rssPlugin, getFeedTemplate } from "@11ty/eleventy-plugin-rss";
  export default function($config) {
  $config.addPlugin(rssPlugin);
  let { content, data } = getFeedTemplate({ type: "atom", outputPath: "/posts.xml", collection: { name: "posts" } });
  $config.addTemplate("feeds/posts.njk", content, data);
  
  };

• Feed entries without a URL (e.g. permalink: false) are now skipped by the Virtual Template instead of failing the build. 11ty/plugin-rss#66 (thank you @​robb-j for the assist in 11ty/plugin-rss#59)
• Plugin helpers (feedPlugin, dateToRfc3339, dateToRfc822, getNewestCollectionItemDate, absoluteUrl, convertHtmlToAbsoluteUrls) are available on the default export again (matching CommonJS behavior in v2). Named exports are still the preferred method 11ty/plugin-rss#91
• JSON Virtual Template now falls back to metadata.subtitle for the feed description (matching Atom and RSS) when metadata.description isn't set.
• Fix Atom Virtual Template using <icon> instead of <logo> for metadata.logo by @​philipmw in 11ty/plugin-rss#90
• Swap debug dependency for obug. DEBUG=Eleventy* works the same. 11ty/plugin-rss#100

Milestone: https://github.com/11ty/plugin-rss/milestone/10?closed=1 Full Changelog: 11ty/plugin-rss@v3.0.0...v3.1.0

Commits

• 71036e8 v3.1.0
• 0b6d51a Fixes 11ty/plugin-rss#101
• 4c12cc6 Feed items must have a URL! Fixes #66
• 2e41008 Fixes #63
• ed4cca8 Reuse subtitle in JSON Virtual Template
• 83400b9 Fixes #100
• ea5c25e Fix #91
• a118986 Revert Node 22 bump for 3.x
• 34486fc Restore posthtml-urls@1 for v3
• 68c29fd Simplification
• Additional commits viewable in compare view

Updates dotenv from 18.0.3 to 18.0.5

Changelog

Sourced from dotenv's changelog.

18.0.5 (2026-09-30)

Changed

• Fix missing typescript module declaration (#1068)
• Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

• import dotenv/config should default quiet: true (#1063)

Commits

• 05215e0 18.0.5
• 25bdd0a changelog
• 2d640d2 Merge pull request #1066 from AyanAta42/master
• c84e2b4 Merge pull request #1068 from matzehecht/fix-typescript
• 570146a Optimize fast parser comment scanning
• 4aa0665 add typescript module declaration for dotenv/config
• f1380ec Bound fast parser comment scans to the current line
• a626f72 add link
• b36a142 video links
• 86804c0 18.0.4
• Additional commits viewable in compare view

Updates @types/node from 26.6.2 to 26.6.4

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions