fix(deps): update astro monorepo (major)#649
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
2ab9db7 to
47b295d
Compare
47b295d to
ca67e2f
Compare
ca67e2f to
6092a53
Compare
6092a53 to
fdc9f9f
Compare
fdc9f9f to
e44d74c
Compare
e44d74c to
015e51f
Compare
015e51f to
36122fc
Compare
36122fc to
4caf6e1
Compare
4caf6e1 to
248350d
Compare
248350d to
aea4b6c
Compare
aea4b6c to
e91be74
Compare
e91be74 to
8cbedc4
Compare
8cbedc4 to
f722500
Compare
f722500 to
a0b2f6c
Compare
ff5388e to
50a8276
Compare
50a8276 to
57b45eb
Compare
57b45eb to
713e82d
Compare
713e82d to
9709a6b
Compare
9709a6b to
442b6c9
Compare
442b6c9 to
144b6ee
Compare
144b6ee to
e42c9f3
Compare
e42c9f3 to
4071aaf
Compare
4071aaf to
940d98c
Compare
940d98c to
324d48c
Compare
324d48c to
615c1c5
Compare
615c1c5 to
609ee1a
Compare
609ee1a to
48b0b4f
Compare
48b0b4f to
4f57b61
Compare
4f57b61 to
8b7b9df
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
7.8.2→10.0.8^4.0.0→^6.0.0Release Notes
withastro/astro (@astrojs/vercel)
v10.0.8Compare Source
Patch Changes
f732f3c]:v10.0.7Compare Source
Patch Changes
d365c97]:v10.0.6Compare Source
Patch Changes
0bae1a5Thanks @cyphercodes! - Fix forwarded serverless requests with streamed bodies by preserving the requiredduplex: 'half'option when rewriting middleware paths.v10.0.5Compare Source
Patch Changes
99464ed,f3485c3]:v10.0.4Compare Source
Patch Changes
d0fe1ecThanks @bittoby! - Fixes edge middlewarenext()dropping the HTTP method and body when forwarding requests to the serverless function, which caused non-GET API routes (POST, PUT, PATCH, DELETE) to return 404v10.0.3Compare Source
Patch Changes
aa26636Thanks @empoulter-uclan! - Fix vercel ISR path rewritev10.0.2Compare Source
Patch Changes
335a204Thanks @matthewp! - Fix Vercel serverless path override handling so override values are only applied when the trusted middleware secret is present.v10.0.1Compare Source
Patch Changes
6f8f0bcThanks @ematipico! - Updates the AstropeerDependencies#astroto be6.0.0.v10.0.0Compare Source
Major Changes
736216bThanks @florian-lefebvre! - Removes the deprecated@astrojs/vercel/serverlessand@astrojs/vercel/staticexports. Use the@astrojs/vercelexport insteadMinor Changes
#15258
d339a18Thanks @ematipico! - Stabilizes the adapter featureexperimentalStatiHeaders. If you were using this feature in any of the supported adapters, you'll need to change the name of the flag:export default defineConfig({ adapter: netlify({ - experimentalStaticHeaders: true + staticHeaders: true }) })#15413
736216bThanks @florian-lefebvre! - Updates the implementation to use the new Adapter API#15495
5b99e90Thanks @leekeh! - Adds newmiddlewareModeadapter feature and deprecatesedgeMiddlewareoptionThe
edgeMiddlewareoption is now deprecated and will be removed in a future release, so users should transition to using the newmiddlewareModefeature as soon as possible.export default defineConfig({ adapter: vercel({ - edgeMiddleware: true + middlewareMode: 'edge' }) })#14946
95c40f7Thanks @ematipico! - Removes theexperimental.cspflag and replaces it with a new configuration optionsecurity.csp- (v6 upgrade guidance)Patch Changes
#15781
2de969dThanks @ematipico! - Adds a newclientAddressoption to thecreateContext()functionProviding this value gives adapter and middleware authors explicit control over the client IP address. When not provided, accessing
clientAddressthrows an error consistent with other contexts where it is not set by the adapter.Additionally, both of the official Netlify and Vercel adapters have been updated to provide this information in their edge middleware.
#15778
4ebc1e3Thanks @ematipico! - Fixes an issue where the computedclientAddresswas incorrect in cases of a Request header with multiple values. TheclientAddressis now also validated to contain only characters valid in IP addresses, rejecting injection payloads.#15460
ee7e53fThanks @florian-lefebvre! - Updates to use the new Adapter API#15450
50c9129Thanks @florian-lefebvre! - Fixes a case wherebuild.serverEntrywould not be respected when using the new Adapter API#15461
9f21b24Thanks @florian-lefebvre! - Updates to new Adapter API introduced in v6#15125
6feb0d7Thanks @florian-lefebvre! - Updates Node versions data to account for v24 as the defaultUpdated dependencies [
4ebc1e3,4e7f3e8,a164c77,cf6ea6b,a18d727,240c317,745e632]:v9.0.5Compare Source
Patch Changes
c2cd371]:v9.0.4Compare Source
Patch Changes
29fd188Thanks @drwpow! - Improves error message when using Node builtins inside Edge middlewaresv9.0.3Compare Source
Patch Changes
9fc4562Thanks @Raanelom! - Updates Node versions data to account for v24 as the defaultv9.0.2Compare Source
Patch Changes
9a284cdThanks @drwpow! - fix: Allow "node:" prefix for Node builtinsv9.0.1Patch Changes
9e9c528,0f75f6b]:v9.0.0Major Changes
5601357Thanks @jacobdalamb! - Updates Node v18 'retiring' notice to 'deprecated' for Vercel adapter.Minor Changes
#14543
9b3241dThanks @matthewp! - Enables skew protection for Astro sites deployed on Vercel. Skew protection ensures that your site's client and server versions stay synchronized during deployments, preventing issues where users might load assets from a newer deployment while the server is still running the older version.Skew protection is automatically enabled on Vercel deployments when the
VERCEL_SKEW_PROTECTION_ENABLEDenvironment variable is set to1. The deployment ID is automatically included in both asset requests and API calls, allowing Vercel to serve the correct version to every user.v8.2.11Compare Source
Patch Changes
#14570
c96711dThanks @matthewp! - Fix regression in 8.2.7: validate densities-based srcset widths against configured sizesWhen using
densitieswith the Vercel image adapter, calculated widths were not being validated against Vercel's configured sizes list. This caused images to fail when using densities, as Vercel would reject the invalid widths.This fix ensures densities-calculated widths are mapped to valid configured sizes, matching the behavior already implemented for the
widthsprop.v8.2.10Compare Source
Patch Changes
9261996Thanks @florian-lefebvre! - Fixes a bug that caused too many files to be bundled in SSRv8.2.9Compare Source
Patch Changes
#14473
d9634d3Thanks @florian-lefebvre! - Fixes a bug that caused too many files to be bundled in SSRUpdated dependencies [
b8ca69b]:v8.2.8Compare Source
Patch Changes
1e2499e]:v8.2.7Compare Source
Patch Changes
#14039
da4182dThanks @ematipico! - Fixes a bug whereexperimentalStaticHeadersdid not work as expected.#14289
ed493a6Thanks @ascorbic! - Fixes a bug that caused invalid image sizes to be generated when the requested widths were larger than the source imagev8.2.6Compare Source
Patch Changes
4d16de7]:v8.2.5Compare Source
Patch Changes
0567fb7]:v8.2.4Compare Source
Patch Changes
f4e8889]:v8.2.3Compare Source
Patch Changes
42ef004Thanks @jat001! - Changes the default Node.js version of Vercel functions to 22v8.2.2Compare Source
Patch Changes
de5a253Thanks @RobbieTheWagner! - Allow settingdomainstoundefinedinimagesConfigso thatremotePatternscan be better utilized for images from a variety of domains.v8.2.1Compare Source
Patch Changes
#14570
c96711dThanks @matthewp! - Fix regression in 8.2.7: validate densities-based srcset widths against configured sizesWhen using
densitieswith the Vercel image adapter, calculated widths were not being validated against Vercel's configured sizes list. This caused images to fail when using densities, as Vercel would reject the invalid widths.This fix ensures densities-calculated widths are mapped to valid configured sizes, matching the behavior already implemented for the
widthsprop.v8.2.0Compare Source
Minor Changes
#13965
95ece06Thanks @ematipico! - Adds support for the experimental static headers Astro feature.When the feature is enabled via option
experimentalStaticHeaders, and experimental Content Security Policy is enabled, the adapter will generateResponseheaders for static pages, which allows support for CSP directives that are not supported inside a<meta>tag (e.g.frame-ancestors).Patch Changes
#13917
e615216Thanks @ascorbic! - The responsive images feature introduced behind a flag in v5.0.0 is no longer experimental and is available for general use.The new responsive images feature in Astro automatically generates optimized images for different screen sizes and resolutions, and applies the correct attributes to ensure that images are displayed correctly on all devices.
Enable the
or component, or configure a default
image.responsiveStylesoption in your Astro config. Then, set alayoutattribute on anyimage.layout, for instantly responsive images with automatically generatedsrcsetandsizesattributes based on the image's dimensions and the layout type.Displaying images correctly on the web can be challenging, and is one of the most common performance issues seen in sites. This new feature simplifies the most challenging part of the process: serving your site visitor an image optimized for their viewing experience, and for your website's performance.
For full details, see the updated Image guide.
Migration from Experimental Responsive Images
The
experimental.responsiveImagesflag has been removed, and all experimental image configuration options have been renamed to their final names.If you were using the experimental responsive images feature, you'll need to update your configuration:
Remove the experimental flag
export default defineConfig({ experimental: { - responsiveImages: true, }, });Update image configuration options
During the experimental phase, default styles were applied automatically to responsive images. Now, you need to explicitly set the
responsiveStylesoption totrueif you want these styles applied.export default defineConfig({ image: { + responsiveStyles: true, }, });The experimental image configuration options have been renamed:
Before:
After:
Component usage remains the same
The
layout,fit, andpositionprops on<Image>and<Picture>components work exactly the same as before:If you weren't using the experimental responsive images feature, no changes are required.
Please see the Image guide for more information on using responsive images in Astro.
v8.1.5Compare Source
Patch Changes
4a8f193Thanks @moonclavedev! - Handle SVG images correctly in build image servicev8.1.4Compare Source
Patch Changes
5dd2d3fThanks @florian-lefebvre! - Removes unused codev8.1.3Compare Source
Patch Changes
12cc4d8Thanks @ascorbic! - Fixes a bug that caused external redirects to failv8.1.2Compare Source
Patch Changes
042d1de]:v8.1.1Compare Source
Patch Changes
fac32adThanks @ascorbic! - Ensuressrcsetfor responsive images only contains allowed sizesv8.1.0Compare Source
Minor Changes
#13211
7ea0abaThanks @slawekkolodziej! - Adds support for regular expressions in ISR exclude listPreviously, excluding a page from ISR required explicitly listing it in
isr.exclude. As websites grew larger, maintaining this list became increasingly difficult, especially for multiple API routes and pages that needed server-side rendering.To address this, ISR exclusions now support regular expressions, allowing for more flexible and scalable configurations.
Patch Changes
#13323
80926faThanks @ematipico! - Updatesesbuildandviteto the latest to avoid false positives audits warnings caused byesbuild.Updated dependencies [
1e11f5e]:v8.0.8Compare Source
Patch Changes
#13304
6efd57dThanks @ematipico! - Fixes a small issue where the package was pulling an outdated version of its internal dependencies.#13299
2e1321eThanks @bluwy! - Usestinyglobbyfor globbing filesv8.0.7Patch Changes
8e5b89cThanks @ascorbic! - Unpins@vercel/routing-utilsdependency as bug has been fixedv8.0.6Patch Changes
5c2ea1fThanks @ascorbic! - Pins@vercel/routing-utilsto avoid broken versionv8.0.5Patch Changes
#519
641d7d5Thanks @ascorbic! - Updates edge middleware to support esnext syntax#525
6ef9a6fThanks @ascorbic! - Fixes a bug that caused redirect loops when trailingSlash was setv8.0.4Patch Changes
3fe04ebThanks @ascorbic! - Fixes a bug that prevented integration-generated static assets from being deployed with non-static sitesv8.0.3Patch Changes
af69a12Thanks @ascorbic! - Fixes a bug that prevented static assets generated by integrations from being deployedv8.0.2Patch Changes
#454
83cedadThanks @alexanderniebuhr! - Improves Astro 5 support#501
012b31dThanks @florian-lefebvre! - Refactor of the redirects logicv8.0.1Patch Changes
d9eed7eThanks @bluwy! - Add back support for Node 22 on Vercel serverless that was fixed in v7 but lost in v8v8.0.0Major Changes
#375
e7881f7Thanks @Princesseuh! - Updates internal code to works with Astro 5 changes to hybrid rendering. No changes are necessary to your project, apart from using Astro 5#397
776a266Thanks @Princesseuh! - Welcome to the Astro 5 beta! This release has no changes from the latest alpha of this package, but it does bring us one step closer to the final, stable release.Starting from this release, no breaking changes will be introduced unless absolutely necessary.
To learn how to upgrade, check out the Astro v5.0 upgrade guide in our beta docs site.
#377
b77f99cThanks @alexanderniebuhr! - Updates the adapter to use newIntegrationRouteDatatype#451
f248546Thanks @ematipico! - Updates esbuild dependency to v0.24.0#384
7d83f60Thanks @bluwy! - Removes deprecatedspeedInsightsoption in favor of Vercel's direct support: https://vercel.com/docs/speed-insights/quickstart#392
3a49eb7Thanks @Princesseuh! - Updates internal code for Astro 5 changes. No changes is required to your project, apart from using Astro 5Minor Changes
#424
3351348Thanks @ematipico! - Deprecates the entrypoints@astrojs/vercel/serverlessand@astrojs/vercel/static. These will continue to work but are no longer documented and will be removed in a future version. We recommend updating to the@astrojs/vercelentrypoint as soon as you are able:#447
7d9835fThanks @laymonage! - Add support for Node 22 on Vercel serverless#385
bb725b7Thanks @florian-lefebvre! - Cleans upastro:envsupportPatch Changes
b725b49Thanks @ematipico! - Fixes a regression where the@astrojs/vercelsingle entry point for the adapter was causing some regressions in users projects.withastro/astro (astro)
v6.4.7Compare Source
Patch Changes
#17035
197e50eThanks @astrobot-houston! - FixesgetRelativeLocaleUrl,getAbsoluteLocaleUrl, andgetAbsoluteLocaleUrlListto strip trailing slashes whentrailingSlash: 'never'is configured#16967
3719765Thanks @astrobot-houston! - Fixes double URL-encoded paths returning 400 Bad Request on on-demand routesPreviously, any URL containing a double-encoded character (like
%255B, which is[encoded twice) was unconditionally rejected with a400 Bad Requestbefore middleware or route handlers could run. This broke embedded tools like Sanity Studio whose client-side router legitimately produces double-encoded URLs.The fix replaces the rejection approach with iterative decoding — multi-level percent-encoding is now fully resolved to its canonical form before being passed to middleware and route matching. This preserves the security fix for CVE-2025-66202 (middleware authorization bypass via double encoding) because middleware now always sees the fully decoded path, making bypass impossible. For example,
/api/%2561dminis decoded to/api/admin, which middleware can correctly block.#17066
2f4d92aThanks @matthewp! - Fixes prerendered redirect targets being incorrectly bundled into the SSR function in hybrid mode, causing massive bundle size inflation#16882
621beb7Thanks @jettwayio! - fix(render): honour compressHTML when joining head elements#16892
8d753b0Thanks @astrobot-houston! - Fixes custom elements in MDX having their children'sslotattribute stripped by the JSX runtimeWhen custom elements (tags with hyphens like
<my-element>) are used in MDX files, theslotHTML attribute on their children is now correctly preserved. Previously, the shared JSX runtime would treatslotas an Astro slot assignment and remove it from the output, breaking Shadow DOM named slot distribution for web components.#16957
544ee76Thanks @thelazylamaGit! - Fixes stale inline CSS in server-rendered HTML after CSS file edits during devWhen editing a CSS file (
.css,.scss, etc.) during development, the inline<style>tags in server-rendered HTML would retain old CSS content instead of updating. This caused a brief flash of old CSS (FOUC) on fresh page loads before Vite's client-side HMR corrected the styles.The fix ensures that Astro's per-route dev CSS virtual modules are invalidated in both the SSR module graph and the module runner's evaluation cache when a style file changes, so the next page render picks up the fresh CSS.
#17044
2220d22Thanks @astrobot-houston! - Fixes CSS fromclient:onlyislands leaking to unrelated pages when Rollup bundles non-CSS-importing modules into the same chunk as CSS-importing modules#17040
7c4763dThanks @astrobot-houston! - Fixes HMR not triggering for files inside thesrc/middleware/directory during dev#16672
52fc862Thanks @martinheidegger! - Fixes support for numeric IDs in YAML frontmatter when using content collection references#16762
9de80aeThanks @alexanderdombroski! - Adds a JSON schema to the Wrangler configuration file generated when runningastro add cloudflare#17046
ef771ecThanks @ematipico! - Improves the diagnostics emitted when Astro parses incorrect.astrofiles.v6.4.6Compare Source
Patch Changes
#16765
b10e86eThanks @fkatsuhiro! - Fixes an issue where renaming an image file while the dev server is running triggers a build error. Now Astro correctly hot-reloads the image without crashing.#17026
add3df1Thanks @matthewp! - HardensaddAttributeto drop attribute names containing characters that are invalid per the HTML spec (",',>,/,=, whitespace)#17033
ffda27bThanks @matthewp! - Validates the request origin againstallowedDomainsbefore fetching prerendered error pages. WhenallowedDomainsis configured and the Host header matches, the original origin is used. Otherwise, the fetch falls back tolocalhost.v6.4.5Compare Source
Patch Changes
#16985
4ecff32Thanks @maximslo! - Fixes theexperimental.loggerdestination not being used for the "Server listening on..." startup message. The logger is now resolved before the server starts listening, andadapterLoggerre-creates itself when the underlying logger changes so the startup message uses the correct destination.#16947
e0703a6Thanks @ematipico! - FixesAstro.request.urlnot reflecting validatedX-Forwarded-Proto/X-Forwarded-Hostheaders whensecurity.allowedDomainsis configured. Previously, onlyAstro.urlwas updated with the forwarded origin whileAstro.request.urlretained the socket-derived URL, causing the two to diverge behind TLS-terminating proxies.#16997
dc45246Thanks @matthewp! - Reverts a change toisNoderuntime detection that caused a significant build time regression for Cloudflare adapter users with large prerendered sitesv6.4.4Compare Source
Patch Changes
#16926
1b39ae8Thanks @narendraio! - PreventsApp.match()from throwing on request paths that contain an invalid percent-sequence.#16924
2c0bc94Thanks @astrobot-houston! - Fixes an issue where editing a client-side component (e.g. withclient:idle,client:load, etc.) caused an unnecessary full program reload of the backend during development.#16958
2c1d50fThanks @fkatsuhiro! - Fixes a bug where static file endpoints usinggetStaticPathswith.htmlin dynamic param values (e.g.{ path: 'file.html' }) would fail with aNoMatchingStaticPathFounderror during build. The.htmlsuffix is no longer incorrectly stripped from endpoint route pathnames.#16855
c610cdaThanks @astrobot-houston! - Fixes dynamic routes returning 500 "TypeError: Missing parameter" when using domain-based i18n routing in SSR.#16946
606c37bThanks @ematipico! - FixesAstro.routePatternto preserve original casing of dynamic parameter names from filenames. Previously, a file atsrc/pages/blog/[postId].astrowould return/blog/[postid]forAstro.routePatterndue to an internal.toLowerCase()call. It now correctly returns/blog/[postId].#16720
16d49b6Thanks @thomas-callahan-collibra! - Fix an issue where dynamic routes would return the string[object Object]instead of the expected content, in certain runtimes.#16703
17390a6Thanks @henrybrewer00-dotcom! - Fixes styles being stripped when the project root is started with a path whose case differs from the actual filesystem case (e.g. runningastro devfromd:\dev\appwhile the folder on disk isD:\dev\app).#16855
c610cdaThanks @astrobot-houston! - FixesAstro.currentLocalereturning the default locale instead of the domain's locale on dynamic routes served from a mapped domain.v6.4.3Compare Source
Patch Changes
#16900
17a0fbdThanks @ocavue! - Bumpsdevaluedependency to v5.8.1#16016
0d85e1bThanks @felmonon! - Fix a false positive in the dev toolbar accessibility audit for anchors with text inside closed<details>elements.#16911
79c6c46Thanks @astrobot-houston! - Fixes a bug whereexperimental.advancedRoutingwithastro/honohandlers threwTypeError: Cannot read properties of undefined (reading 'route')for unmatched routes instead of rendering the custom 404 page.#16899
239c469Thanks @matthewp! - Fixes a false "does not call the middleware() handler" warning when usingastro()in a customsrc/app.tsand the first request is a redirect route.#16887
493acdbThanks @astrobot-houston! - FixesredirectToDefaultLocalenot working after the Advanced Routing refactoring.[#16908](https:
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.