msc-viewer.meta

48.json (14402B)

---

 {
   "number": 48,
   "title": "Bump astro from 4.0.6 to 4.6.1",
   "state": "closed",
   "diff_file": "48.diff",
   "author": "dependabot[bot]",
   "created_at": "2024-04-15T01:44:53Z",
   "closed_at": "2024-04-22T01:20:19Z",
   "merged_at": null,
   "base_ref": "main",
   "head_ref": "dependabot/npm_and_yarn/astro-4.6.1",
   "labels": [
     "dependencies",
     "javascript"
   ],
   "assignees": [],
   "requested_reviewers": [],
   "body": "Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 4.0.6 to 4.6.1.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/withastro/astro/releases\">astro's releases</a>.</em></p>\n<blockquote>\n<h2>astro@4.6.1</h2>\n<h3>Patch Changes</h3>\n<ul>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10708\">#10708</a> <a href=\"https://github.com/withastro/astro/commit/742866c5669a2be4f8b5a4c861cadb933c381415\"><code>742866c5669a2be4f8b5a4c861cadb933c381415</code></a> Thanks <a href=\"https://github.com/horo-fox\"><code>@\u200bhoro-fox</code></a>! - Limits parallel imports within <code>getCollection()</code> to prevent EMFILE errors when accessing files</p>\n</li>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10755\">#10755</a> <a href=\"https://github.com/withastro/astro/commit/c6d59b6fb7db20af957a8706c8159c50619235ef\"><code>c6d59b6fb7db20af957a8706c8159c50619235ef</code></a> Thanks <a href=\"https://github.com/ematipico\"><code>@\u200bematipico</code></a>! - Fixes a case where the i18n fallback failed to correctly redirect to the index page with SSR enabled</p>\n</li>\n</ul>\n<h2>astro@4.6.0</h2>\n<h3>Minor Changes</h3>\n<ul>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10591\">#10591</a> <a href=\"https://github.com/withastro/astro/commit/39988ef8e2c4c4888543c973e06d9b9939e4ac95\"><code>39988ef8e2c4c4888543c973e06d9b9939e4ac95</code></a> Thanks <a href=\"https://github.com/mingjunlu\"><code>@\u200bmingjunlu</code></a>! - Adds a new dev toolbar settings option to change the horizontal placement of the dev toolbar on your screen: bottom left, bottom center, or bottom right.</p>\n</li>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10689\">#10689</a> <a href=\"https://github.com/withastro/astro/commit/683d51a5eecafbbfbfed3910a3f1fbf0b3531b99\"><code>683d51a5eecafbbfbfed3910a3f1fbf0b3531b99</code></a> Thanks <a href=\"https://github.com/ematipico\"><code>@\u200bematipico</code></a>! - Deprecate support for versions of Node.js older than <code>v18.17.1</code> for Node.js 18, older than <code>v20.0.3</code> for Node.js 20, and the complete Node.js v19 release line.</p>\n<p>This change is in line with Astro's <a href=\"https://docs.astro.build/en/upgrade-astro/#support\">Node.js support policy</a>.</p>\n</li>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10678\">#10678</a> <a href=\"https://github.com/withastro/astro/commit/2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1\"><code>2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1</code></a> Thanks <a href=\"https://github.com/ematipico\"><code>@\u200bematipico</code></a>! - Adds a new experimental security option to prevent <a href=\"https://owasp.org/www-community/attacks/csrf\">Cross-Site Request Forgery (CSRF) attacks</a>. This feature is available only for pages rendered on demand:</p>\n<pre lang=\"js\"><code>import { defineConfig } from 'astro/config';\nexport default defineConfig({\n  experimental: {\n    security: {\n      csrfProtection: {\n        origin: true,\n      },\n    },\n  },\n});\n</code></pre>\n<p>Enabling this setting performs a check that the &quot;origin&quot; header, automatically passed by all modern browsers, matches the URL sent by each <code>Request</code>.</p>\n<p>This experimental &quot;origin&quot; check is executed only for pages rendered on demand, and only for the requests <code>POST, </code>PATCH<code>, </code>DELETE<code>and</code>PUT<code>with one of the following</code>content-type` headers: 'application/x-www-form-urlencoded', 'multipart/form-data', 'text/plain'.</p>\n<p>It the &quot;origin&quot; header doesn't match the pathname of the request, Astro will return a 403 status code and won't render the page.</p>\n</li>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10193\">#10193</a> <a href=\"https://github.com/withastro/astro/commit/440681e7b74511a17b152af0fd6e0e4dc4014025\"><code>440681e7b74511a17b152af0fd6e0e4dc4014025</code></a> Thanks <a href=\"https://github.com/ematipico\"><code>@\u200bematipico</code></a>! - Adds a new i18n routing option <code>manual</code> to allow you to write your own i18n middleware:</p>\n<pre lang=\"js\"><code>import { defineConfig } from 'astro/config';\n// astro.config.mjs\nexport default defineConfig({\n  i18n: {\n    locales: ['en', 'fr'],\n    defaultLocale: 'fr',\n    routing: 'manual',\n  },\n});\n</code></pre>\n</li>\n</ul>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n</details>\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md\">astro's changelog</a>.</em></p>\n<blockquote>\n<h2>4.6.1</h2>\n<h3>Patch Changes</h3>\n<ul>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10708\">#10708</a> <a href=\"https://github.com/withastro/astro/commit/742866c5669a2be4f8b5a4c861cadb933c381415\"><code>742866c5669a2be4f8b5a4c861cadb933c381415</code></a> Thanks <a href=\"https://github.com/horo-fox\"><code>@\u200bhoro-fox</code></a>! - Limits parallel imports within <code>getCollection()</code> to prevent EMFILE errors when accessing files</p>\n</li>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10755\">#10755</a> <a href=\"https://github.com/withastro/astro/commit/c6d59b6fb7db20af957a8706c8159c50619235ef\"><code>c6d59b6fb7db20af957a8706c8159c50619235ef</code></a> Thanks <a href=\"https://github.com/ematipico\"><code>@\u200bematipico</code></a>! - Fixes a case where the i18n fallback failed to correctly redirect to the index page with SSR enabled</p>\n</li>\n</ul>\n<h2>4.6.0</h2>\n<h3>Minor Changes</h3>\n<ul>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10591\">#10591</a> <a href=\"https://github.com/withastro/astro/commit/39988ef8e2c4c4888543c973e06d9b9939e4ac95\"><code>39988ef8e2c4c4888543c973e06d9b9939e4ac95</code></a> Thanks <a href=\"https://github.com/mingjunlu\"><code>@\u200bmingjunlu</code></a>! - Adds a new dev toolbar settings option to change the horizontal placement of the dev toolbar on your screen: bottom left, bottom center, or bottom right.</p>\n</li>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10689\">#10689</a> <a href=\"https://github.com/withastro/astro/commit/683d51a5eecafbbfbfed3910a3f1fbf0b3531b99\"><code>683d51a5eecafbbfbfed3910a3f1fbf0b3531b99</code></a> Thanks <a href=\"https://github.com/ematipico\"><code>@\u200bematipico</code></a>! - Deprecate support for versions of Node.js older than <code>v18.17.1</code> for Node.js 18, older than <code>v20.0.3</code> for Node.js 20, and the complete Node.js v19 release line.</p>\n<p>This change is in line with Astro's <a href=\"https://docs.astro.build/en/upgrade-astro/#support\">Node.js support policy</a>.</p>\n</li>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10678\">#10678</a> <a href=\"https://github.com/withastro/astro/commit/2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1\"><code>2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1</code></a> Thanks <a href=\"https://github.com/ematipico\"><code>@\u200bematipico</code></a>! - Adds a new experimental security option to prevent <a href=\"https://owasp.org/www-community/attacks/csrf\">Cross-Site Request Forgery (CSRF) attacks</a>. This feature is available only for pages rendered on demand:</p>\n<pre lang=\"js\"><code>import { defineConfig } from 'astro/config';\nexport default defineConfig({\n  experimental: {\n    security: {\n      csrfProtection: {\n        origin: true,\n      },\n    },\n  },\n});\n</code></pre>\n<p>Enabling this setting performs a check that the &quot;origin&quot; header, automatically passed by all modern browsers, matches the URL sent by each <code>Request</code>.</p>\n<p>This experimental &quot;origin&quot; check is executed only for pages rendered on demand, and only for the requests <code>POST, </code>PATCH<code>, </code>DELETE<code>and</code>PUT<code>with one of the following</code>content-type` headers: 'application/x-www-form-urlencoded', 'multipart/form-data', 'text/plain'.</p>\n<p>It the &quot;origin&quot; header doesn't match the pathname of the request, Astro will return a 403 status code and won't render the page.</p>\n</li>\n<li>\n<p><a href=\"https://redirect.github.com/withastro/astro/pull/10193\">#10193</a> <a href=\"https://github.com/withastro/astro/commit/440681e7b74511a17b152af0fd6e0e4dc4014025\"><code>440681e7b74511a17b152af0fd6e0e4dc4014025</code></a> Thanks <a href=\"https://github.com/ematipico\"><code>@\u200bematipico</code></a>! - Adds a new i18n routing option <code>manual</code> to allow you to write your own i18n middleware:</p>\n<pre lang=\"js\"><code>import { defineConfig } from 'astro/config';\n// astro.config.mjs\nexport default defineConfig({\n  i18n: {\n    locales: ['en', 'fr'],\n    defaultLocale: 'fr',\n    routing: 'manual',\n  },\n</code></pre>\n</li>\n</ul>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/withastro/astro/commit/3ff6b403db5191c1f676fac35b8134102442a800\"><code>3ff6b40</code></a> [ci] release (<a href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10757\">#10757</a>)</li>\n<li><a href=\"https://github.com/withastro/astro/commit/17c2bb1aad7eb1eb5a0dcb8d5ea5be24abcdddc7\"><code>17c2bb1</code></a> Fix typo in error message for IncorrectStrategyForI18n (<a href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10768\">#10768</a>)</li>\n<li><a href=\"https://github.com/withastro/astro/commit/ed2f4aa1227fb2e967e9b3e2a6187b0f522aa8af\"><code>ed2f4aa</code></a> Performance improvement in createAstro function (<a href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10765\">#10765</a>)</li>\n<li><a href=\"https://github.com/withastro/astro/commit/ae12a7e32cbd3471e7f8fcea0cd8d3bbfee79c3e\"><code>ae12a7e</code></a> [ci] format</li>\n<li><a href=\"https://github.com/withastro/astro/commit/742866c5669a2be4f8b5a4c861cadb933c381415\"><code>742866c</code></a> Limit imports in flight for <code>getCollection</code> (<a href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10708\">#10708</a>)</li>\n<li><a href=\"https://github.com/withastro/astro/commit/789ce230e97c1d9ebb61437fe380c8787a160191\"><code>789ce23</code></a> [docs] config reference link fix (<a href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10758\">#10758</a>)</li>\n<li><a href=\"https://github.com/withastro/astro/commit/c6d59b6fb7db20af957a8706c8159c50619235ef\"><code>c6d59b6</code></a> fix(i18n): fallback SSR (<a href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10755\">#10755</a>)</li>\n<li><a href=\"https://github.com/withastro/astro/commit/66bc1041d4fbef95d624fc9bff0c3f9ced4638c2\"><code>66bc104</code></a> [ci] release (<a href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10739\">#10739</a>)</li>\n<li><a href=\"https://github.com/withastro/astro/commit/d51951ce6278d4b59deed938d65e1cb72b5102df\"><code>d51951c</code></a> fix(cli): call path.replace only if it is a function (<a href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10745\">#10745</a>)</li>\n<li><a href=\"https://github.com/withastro/astro/commit/f1bc3dea92e82290195800ddb9b27c61edbd3089\"><code>f1bc3de</code></a> Update utils.ts: Optimize and simplify code (<a href=\"https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10749\">#10749</a>)</li>\n<li>Additional commits viewable in <a href=\"https://github.com/withastro/astro/commits/astro@4.6.1/packages/astro\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=astro&package-manager=npm_and_yarn&previous-version=4.0.6&new-version=4.6.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n</details>",
   "comments": [
     {
       "author": "dependabot[bot]",
       "created_at": "2024-04-22T01:20:18Z",
       "body": "Superseded by #50."
     }
   ],
   "review_comments": []
 }