fix(deps): update dependency astro to v4.14.2 #216

renovate · 2024-05-13T01:03:05Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
astro (source)	`4.11.5` -> `4.14.2`

Release Notes

withastro/astro (astro)

`v4.14.2`

Compare Source

Patch Changes

#11733 391324d Thanks @bluwy! - Reverts back to yargs-parser package for CLI argument parsing

`v4.14.1`

Compare Source

Patch Changes

#11725 6c1560f Thanks @ascorbic! - Prevents content layer importing node builtins in runtime
#11692 35af73a Thanks @matthewp! - Prevent errant HTML from crashing server islands

When an HTML minifier strips away the server island comment, the script can't correctly know where the end of the fallback content is. This makes it so that it simply doesn't remove any DOM in that scenario. This means the fallback isn't removed, but it also doesn't crash the browser.
#11727 3c2f93b Thanks @florian-lefebvre! - Fixes a type issue when using the Content Layer in dev

`v4.14.0`

Compare Source

Minor Changes

#11657 a23c69d Thanks @bluwy! - Deprecates the option for route-generating files to export a dynamic value for prerender. Only static values are now supported (e.g. export const prerender = true or = false). This allows for better treeshaking and bundling configuration in the future.

Adds a new "astro:route:setup" hook to the Integrations API to allow you to dynamically set options for a route at build or request time through an integration, such as enabling on-demand server rendering.

To migrate from a dynamic export to the new hook, update or remove any dynamic prerender exports from individual routing files:
```
// src/pages/blog/[slug].astro
- export const prerender = import.meta.env.PRERENDER
```
Instead, create an integration with the "astro:route:setup" hook and update the route's prerender option:
```
// astro.config.mjs
import { defineConfig } from 'astro/config';
import { loadEnv } from 'vite';

export default defineConfig({
  integrations: [setPrerender()],
});

function setPrerender() {
  const { PRERENDER } = loadEnv(process.env.NODE_ENV, process.cwd(), '');

  return {
    name: 'set-prerender',
    hooks: {
      'astro:route:setup': ({ route }) => {
        if (route.component.endsWith('/blog/[slug].astro')) {
          route.prerender = PRERENDER;
        }
      },
    },
  };
}
```
#11360 a79a8b0 Thanks @ascorbic! - Adds a new injectTypes() utility to the Integration API and refactors how type generation works

Use injectTypes() in the astro:config:done hook to inject types into your user's project by adding a new a *.d.ts file.

The filename property will be used to generate a file at /.astro/integrations/<normalized_integration_name>/<normalized_filename>.d.ts and must end with ".d.ts".

The content property will create the body of the file, and must be valid TypeScript.

Additionally, injectTypes() returns a URL to the normalized path so you can overwrite its content later on, or manipulate it in any way you want.
```
// my-integration/index.js
export default {
  name: 'my-integration',
  'astro:config:done': ({ injectTypes }) => {
    injectTypes({
      filename: 'types.d.ts',
      content: "declare module 'virtual:my-integration' {}",
    });
  },
};
```
Codegen has been refactored. Although src/env.d.ts will continue to work as is, we recommend you update it:
```
- /// <reference types="astro/client" />
+ /// <reference path="../.astro/types.d.ts" />
- /// <reference path="../.astro/env.d.ts" />
- /// <reference path="../.astro/actions.d.ts" />
```
#11605 d3d99fb Thanks @jcayzac! - Adds a new property meta to Astro's built-in <Code /> component.

This allows you to provide a value for Shiki's meta attribute to pass options to transformers.

The following example passes an option to highlight lines 1 and 3 to Shiki's tranformerMetaHighlight:

`v4.13.4`

Compare Source

Patch Changes

#11678 34da907 Thanks @ematipico! - Fixes a case where omitting a semicolon and line ending with carriage return - CRLF - in the prerender option could throw an error.
#11535 932bd2e Thanks @matthewp! - Encrypt server island props

Server island props are now encrypted with a key generated at build-time. This is intended to prevent accidentally leaking secrets caused by exposing secrets through prop-passing. This is not intended to allow a server island to be trusted to skip authentication, or to protect against any other vulnerabilities other than secret leakage.

See the RFC for an explanation: https://github.com/withastro/roadmap/blob/server-islands/proposals/server-islands.md#props-serialization
#11655 dc0a297 Thanks @billy-le! - Fixes Astro Actions input validation when using default values with a form input.
#11689 c7bda4c Thanks @ematipico! - Fixes an issue in the Astro actions, where the size of the generated cookie was exceeding the size permitted by the Set-Cookie header.

`v4.13.3`

Compare Source

Patch Changes

#11653 32be549 Thanks @florian-lefebvre! - Updates astro:env docs to reflect current developments and usage guidance
#11658 13b912a Thanks @bholmesdev! - Fixes orThrow() type when calling an Action without an input validator.
#11603 f31d466 Thanks @bholmesdev! - Improves user experience when render an Action result from a form POST request:
- Removes "Confirm post resubmission?" dialog when refreshing a result.
- Removes the ?_astroAction=NAME flag when a result is rendered.
Also improves the DX of directing to a new route on success. Actions will now redirect to the route specified in your action string on success, and redirect back to the previous page on error. This follows the routing convention of established backend frameworks like Laravel.

For example, say you want to redirect to a /success route when actions.signup succeeds. You can add /success to your action string like so:
```
<form method="POST" action={'/success' + actions.signup}></form>
```
- On success, Astro will redirect to /success.
- On error, Astro will redirect back to the current page.
You can retrieve the action result from either page using the Astro.getActionResult() function.

Note on security

This uses a temporary cookie to forward the action result to the next page. The cookie will be deleted when that page is rendered.

⚠ The action result is not encrypted. In general, we recommend returning minimal data from an action handler to a) avoid leaking sensitive information, and b) avoid unexpected render issues once the temporary cookie is deleted. For example, a login function may return a user's session id to retrieve from your Astro frontmatter, rather than the entire user object.

`v4.13.2`

Compare Source

Patch Changes

#11648 589d351 Thanks @bholmesdev! - Fixes unexpected error when refreshing a POST request from a form using Actions.
#11600 09ec2ca Thanks @ArmandPhilippot! - Deprecates getEntryBySlug and getDataEntryById functions exported by astro:content in favor of getEntry.
#11593 81d7150 Thanks @bholmesdev! - Adds support for Date(), Map(), and Set() from action results. See devalue for a complete list of supported values.

Also fixes serialization exceptions when deploying Actions with edge middleware on Netlify and Vercel.
#11617 196092a Thanks @abubakriz! - Fix toolbar audit incorrectly flagging images as above the fold.
#11634 2716f52 Thanks @bholmesdev! - Fixes internal server error when calling an Astro Action without arguments on Vercel.
#11628 9aaf58c Thanks @madbook! - Ensures consistent CSS chunk hashes across different environments

`v4.13.1`

Compare Source

Patch Changes

#11584 a65ffe3 Thanks @bholmesdev! - Removes async local storage dependency from Astro Actions. This allows Actions to run in Cloudflare and Stackblitz without opt-in flags or other configuration.

This also introduces a new convention for calling actions from server code. Instead of calling actions directly, you must wrap function calls with the new Astro.callAction() utility.

callAction() is meant to trigger an action from server code. getActionResult() usage with form submissions remains unchanged.

`v4.13.0`

Compare Source

Minor Changes

#11507 a62345f Thanks @ematipico! - Adds color-coding to the console output during the build to highlight slow pages.

Pages that take more than 500 milliseconds to render will have their build time logged in red. This change can help you discover pages of your site that are not performant and may need attention.
#11379 e5e2d3e Thanks @alexanderniebuhr! - The experimental.contentCollectionJsonSchema feature introduced behind a flag in v4.5.0 is no longer experimental and is available for general use.

If you are working with collections of type data, Astro will now auto-generate JSON schema files for your editor to get IntelliSense and type-checking. A separate file will be created for each data collection in your project based on your collections defined in src/content/config.ts using a library called zod-to-json-schema.

This feature requires you to manually set your schema's file path as the value for $schema in each data entry file of the collection:
```
{
  "$schema": "../../../.astro/collections/authors.schema.json",
  "name": "Armand",
  "skills": ["Astro", "Starlight"]
}
```
Alternatively, you can set this value in your editor settings. For example, to set this value in VSCode's json.schemas setting, provide the path of files to match and the location of your JSON schema:
```
{
  "json.schemas": [
    {
      "fileMatch": ["/src/content/authors/**"],
      "url": "./.astro/collections/authors.schema.json"
    }
  ]
}
```
If you were previously using this feature, please remove the experimental flag from your Astro config:
```
import { defineConfig } from 'astro'

export default defineConfig({
-  experimental: {
-    contentCollectionJsonSchema: true
-  }
})
```
If you have been waiting for stabilization before using JSON Schema generation for content collections, you can now do so.

Please see the content collections guide for more about this feature.
#11542 45ad326 Thanks @ematipico! - The experimental.rewriting feature introduced behind a flag in v4.8.0 is no longer experimental and is available for general use.

Astro.rewrite() and context.rewrite() allow you to render a different page without changing the URL in the browser. Unlike using a redirect, your visitor is kept on the original page they visited.

Rewrites can be useful for showing the same content at multiple paths (e.g. /products/shoes/men/ and /products/men/shoes/) without needing to maintain two identical source files.

Rewrites are supported in Astro pages, endpoints, and middleware.

Return Astro.rewrite() in the frontmatter of a .astro page component to display a different page's content, such as fallback localized content:

`v4.12.3`

Compare Source

Patch Changes

#11509 dfbca06 Thanks @bluwy! - Excludes hoisted scripts and styles from Astro components imported with ?url or ?raw
#11561 904f1e5 Thanks @ArmandPhilippot! - Uses the correct pageSize default in page.size JSDoc comment
#11571 1c3265a Thanks @bholmesdev! - BREAKING CHANGE to the experimental Actions API only. Install the latest @astrojs/react integration as well if you're using React 19 features.

Make .safe() the default return value for actions. This means { data, error } will be returned when calling an action directly. If you prefer to get the data while allowing errors to throw, chain the .orThrow() modifier.
```
import { actions } from 'astro:actions';

// Before
const { data, error } = await actions.like.safe();
// After
const { data, error } = await actions.like();

// Before
const newLikes = await actions.like();
// After
const newLikes = await actions.like.orThrow();
```

`v4.12.2`

Compare Source

Patch Changes

#11505 8ff7658 Thanks @ematipico! - Enhances the dev server logging when rewrites occur during the lifecycle or rendering.

The dev server will log the status code before and after a rewrite:
```
08:16:48 [404] (rewrite) /foo/about 200ms
08:22:13 [200] (rewrite) /about 23ms
```
#11506 026e8ba Thanks @sarah11918! - Fixes typo in documenting the slot="fallback" attribute for Server Islands experimental feature.
#11508 ca335e1 Thanks @cramforce! - Escapes HTML in serialized props
#11501 4db78ae Thanks @martrapp! - Adds the missing export for accessing the getFallback() function of the client site router.

`v4.12.1`

Compare Source

Patch Changes

#11486 9c0c849 Thanks @ematipico! - Adds a new function called addClientRenderer to the Container API.

This function should be used when rendering components using the client:* directives. The addClientRenderer API must be used
after the use of the addServerRenderer:

const container = await experimental_AstroContainer.create();
container.addServerRenderer({ renderer });
container.addClientRenderer({ name: '@&#8203;astrojs/react', entrypoint: '@&#8203;astrojs/react/client.js' });
const response = await container.renderToResponse(Component);

#11500 4e142d3 Thanks @Princesseuh! - Fixes inferRemoteSize type not working
#11496 53ccd20 Thanks @alfawal! - Hide the dev toolbar on window.print() (CTRL + P)

`v4.12.0`

Compare Source

Minor Changes

#11341 49b5145 Thanks @madcampos! - Adds support for Shiki's defaultColor option.

This option allows you to override the values of a theme's inline style, adding only CSS variables to give you more flexibility in applying multiple color themes.

Configure defaultColor: false in your Shiki config to apply throughout your site, or pass to Astro's built-in <Code> component to style an individual code block.
```
import { defineConfig } from 'astro/config';
export default defineConfig({
  markdown: {
    shikiConfig: {
      themes: {
        light: 'github-light',
        dark: 'github-dark',
      },
      defaultColor: false,
    },
  },
});
```

`v4.11.6`

Compare Source

Patch Changes

#11459 bc2e74d Thanks @mingjunlu! - Fixes false positive audit warnings on elements with the role "tabpanel".
#11472 cb4e6d0 Thanks @delucis! - Avoids targeting all files in the src/ directory for eager optimization by Vite. After this change, only JSX, Vue, Svelte, and Astro components get scanned for early optimization.
#11387 b498461 Thanks @bluwy! - Fixes prerendering not removing unused dynamic imported chunks
#11437 6ccb30e Thanks @NuroDev! - Fixes a case where Astro's config experimental.env.schema keys did not allow numbers. Numbers are still not allowed as the first character to be able to generate valid JavaScript identifiers

#11439 08baf56 Thanks @bholmesdev! - Expands the isInputError() utility from astro:actions to accept errors of any type. This should now allow type narrowing from a try / catch block.

// example.ts
import { actions, isInputError } from 'astro:actions';

try {
  await actions.like(new FormData());
} catch (error) {
  if (isInputError(error)) {
    console.log(error.fields);
  }
}

#11452 0e66849 Thanks @FugiTech! - Fixes an issue where using .nullish() in a formdata Astro action would always parse as a string
#11438 619f07d Thanks @bholmesdev! - Exposes utility types from astro:actions for the defineAction handler (ActionHandler) and the ActionError code (ActionErrorCode).
#11456 17e048d Thanks @RickyC0626! - Fixes astro dev --open unexpected behavior that spawns a new tab every time a config file is saved
#11337 0a4b31f Thanks @florian-lefebvre! - Adds a new property experimental.env.validateSecrets to allow validating private variables on the server.

By default, this is set to false and only public variables are checked on start. If enabled, secrets will also be checked on start (dev/build modes). This is useful for example in some CIs to make sure all your secrets are correctly set before deploying.
```
// astro.config.mjs
import { defineConfig, envField } from 'astro/config';

export default defineConfig({
  experimental: {
    env: {
      schema: {
        // ...
      },
      validateSecrets: true,
    },
  },
});
```

#11443 ea4bc04 Thanks @bholmesdev! - Expose new ActionReturnType utility from astro:actions. This infers the return type of an action by passing typeof actions.name as a type argument. This example defines a like action that returns likes as an object:

// actions/index.ts
import { defineAction } from 'astro:actions';

export const server = {
  like: defineAction({
    handler: () => {
      /* ... */
      return { likes: 42 };
    },
  }),
};

In your client code, you can infer this handler return value with ActionReturnType:

// client.ts
import { actions, ActionReturnType } from 'astro:actions';

type LikesResult = ActionReturnType<typeof actions.like>;
// -> { likes: number }

#11436 7dca68f Thanks @bholmesdev! - Fixes astro:actions autocompletion for the defineAction accept property
#11455 645e128 Thanks @florian-lefebvre! - Improves astro:env invalid variables errors

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2024-06-03T22:33:03Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/astro-embed@0.7.2	Transitive: network, unsafe	`+23`	4.77 MB	delucis
npm/astro@4.14.2	Transitive: environment, eval, filesystem, network, shell, unsafe	`+133`	36.5 MB	fredkschott, matthewp, natemoo-re

🚮 Removed packages: npm/astro@4.11.5, npm/openai@4.36.0

View full report↗︎

sonarqubecloud · 2024-08-16T05:19:52Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

renovate bot force-pushed the renovate/astro-monorepo branch 2 times, most recently from 43428cc to cfb46eb Compare May 22, 2024 11:27

renovate bot force-pushed the renovate/astro-monorepo branch 2 times, most recently from 04939b2 to 07939ec Compare May 30, 2024 09:09

renovate bot force-pushed the renovate/astro-monorepo branch 2 times, most recently from 2e870ba to d75e557 Compare June 3, 2024 22:25

renovate bot force-pushed the renovate/astro-monorepo branch 3 times, most recently from ce5074a to 76681f4 Compare June 15, 2024 12:24

renovate bot force-pushed the renovate/astro-monorepo branch 2 times, most recently from 6eb7372 to f1357b2 Compare July 3, 2024 13:01

renovate bot force-pushed the renovate/astro-monorepo branch 8 times, most recently from de9d6a9 to 6f3edf6 Compare July 15, 2024 04:59

renovate bot changed the title ~~fix(deps): update astro monorepo~~ fix(deps): update astro monorepo - autoclosed Jul 15, 2024

renovate bot closed this Jul 15, 2024

renovate bot deleted the renovate/astro-monorepo branch July 15, 2024 09:34

renovate bot restored the renovate/astro-monorepo branch July 17, 2024 14:05

renovate bot changed the title ~~fix(deps): update astro monorepo - autoclosed~~ fix(deps): update astro monorepo Jul 17, 2024

renovate bot reopened this Jul 17, 2024

renovate bot force-pushed the renovate/astro-monorepo branch from 6f3edf6 to 6f99686 Compare July 17, 2024 17:52

renovate bot changed the title ~~fix(deps): update astro monorepo~~ fix(deps): update dependency astro to v4.11.6 Jul 17, 2024

renovate bot changed the title ~~fix(deps): update dependency astro to v4.11.6~~ fix(deps): update dependency astro to v4.12.0 Jul 18, 2024

renovate bot changed the title ~~fix(deps): update dependency astro to v4.12.0~~ fix(deps): update dependency astro to v4.12.1 Jul 18, 2024

renovate bot changed the title ~~fix(deps): update dependency astro to v4.12.1~~ fix(deps): update dependency astro to v4.12.2 Jul 19, 2024

renovate bot changed the title ~~fix(deps): update dependency astro to v4.12.2~~ fix(deps): update dependency astro to v4.12.3 Jul 30, 2024

renovate bot changed the title ~~fix(deps): update dependency astro to v4.12.3~~ fix(deps): update dependency astro to v4.13.0 Aug 1, 2024

renovate bot changed the title ~~fix(deps): update dependency astro to v4.13.0~~ fix(deps): update dependency astro to v4.13.1 Aug 2, 2024

renovate bot force-pushed the renovate/astro-monorepo branch 4 times, most recently from 3f018bc to d08f7d7 Compare August 7, 2024 23:40

renovate bot changed the title ~~fix(deps): update dependency astro to v4.13.1~~ fix(deps): update dependency astro to v4.13.2 Aug 8, 2024

renovate bot force-pushed the renovate/astro-monorepo branch from d08f7d7 to f74a02f Compare August 9, 2024 04:47

renovate bot changed the title ~~fix(deps): update dependency astro to v4.13.2~~ fix(deps): update dependency astro to v4.13.3 Aug 9, 2024

renovate bot force-pushed the renovate/astro-monorepo branch 4 times, most recently from eb0adc9 to f49d63f Compare August 14, 2024 06:41

renovate bot changed the title ~~fix(deps): update dependency astro to v4.13.3~~ fix(deps): update dependency astro to v4.13.4 Aug 14, 2024

renovate bot force-pushed the renovate/astro-monorepo branch 2 times, most recently from 06b05e5 to d7aa421 Compare August 15, 2024 07:14

renovate bot changed the title ~~fix(deps): update dependency astro to v4.13.4~~ fix(deps): update dependency astro to v4.14.0 Aug 15, 2024

renovate bot force-pushed the renovate/astro-monorepo branch from d7aa421 to 3940f97 Compare August 15, 2024 15:51

renovate bot changed the title ~~fix(deps): update dependency astro to v4.14.0~~ fix(deps): update dependency astro to v4.14.1 Aug 15, 2024

renovate bot changed the title ~~fix(deps): update dependency astro to v4.14.1~~ fix(deps): update dependency astro to v4.14.2 Aug 15, 2024

renovate bot force-pushed the renovate/astro-monorepo branch from 3940f97 to 73d288f Compare August 16, 2024 03:26

fix(deps): update dependency astro to v4.14.2

00cdf7d

renovate bot force-pushed the renovate/astro-monorepo branch from 73d288f to 00cdf7d Compare August 16, 2024 05:19

riderx closed this Aug 16, 2024

renovate bot deleted the renovate/astro-monorepo branch August 16, 2024 05:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update dependency astro to v4.14.2 #216

fix(deps): update dependency astro to v4.14.2 #216

renovate bot commented May 13, 2024 •

edited

Loading

socket-security bot commented Jun 3, 2024 •

edited

Loading

sonarqubecloud bot commented Aug 16, 2024

fix(deps): update dependency astro to v4.14.2 #216

fix(deps): update dependency astro to v4.14.2 #216

Conversation

renovate bot commented May 13, 2024 • edited Loading

Release Notes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Note on security

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Configuration

socket-security bot commented Jun 3, 2024 • edited Loading

sonarqubecloud bot commented Aug 16, 2024

Quality Gate passed

renovate bot commented May 13, 2024 •

edited

Loading

socket-security bot commented Jun 3, 2024 •

edited

Loading