48.md (13847B)
1 # PR #48 Bump astro from 4.0.6 to 4.6.1 2 3 - **Status:** closed 4 - **Author:** @dependabot[bot] 5 - **Created:** 2024-04-15T01:44:53Z 6 - **Branch:** dependabot/npm_and_yarn/astro-4.6.1 → main 7 - **Closed:** 2024-04-22T01:20:19Z 8 - **Labels:** dependencies, javascript 9 - **Diff:** [48.diff](./48.diff) 10 11 --- 12 13 Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 4.0.6 to 4.6.1. 14 <details> 15 <summary>Release notes</summary> 16 <p><em>Sourced from <a href="https://github.com/withastro/astro/releases">astro's releases</a>.</em></p> 17 <blockquote> 18 <h2>astro@4.6.1</h2> 19 <h3>Patch Changes</h3> 20 <ul> 21 <li> 22 <p><a href="https://redirect.github.com/withastro/astro/pull/10708">#10708</a> <a href="https://github.com/withastro/astro/commit/742866c5669a2be4f8b5a4c861cadb933c381415"><code>742866c5669a2be4f8b5a4c861cadb933c381415</code></a> Thanks <a href="https://github.com/horo-fox"><code>@horo-fox</code></a>! - Limits parallel imports within <code>getCollection()</code> to prevent EMFILE errors when accessing files</p> 23 </li> 24 <li> 25 <p><a href="https://redirect.github.com/withastro/astro/pull/10755">#10755</a> <a href="https://github.com/withastro/astro/commit/c6d59b6fb7db20af957a8706c8159c50619235ef"><code>c6d59b6fb7db20af957a8706c8159c50619235ef</code></a> Thanks <a href="https://github.com/ematipico"><code>@ematipico</code></a>! - Fixes a case where the i18n fallback failed to correctly redirect to the index page with SSR enabled</p> 26 </li> 27 </ul> 28 <h2>astro@4.6.0</h2> 29 <h3>Minor Changes</h3> 30 <ul> 31 <li> 32 <p><a href="https://redirect.github.com/withastro/astro/pull/10591">#10591</a> <a href="https://github.com/withastro/astro/commit/39988ef8e2c4c4888543c973e06d9b9939e4ac95"><code>39988ef8e2c4c4888543c973e06d9b9939e4ac95</code></a> Thanks <a href="https://github.com/mingjunlu"><code>@mingjunlu</code></a>! - Adds a new dev toolbar settings option to change the horizontal placement of the dev toolbar on your screen: bottom left, bottom center, or bottom right.</p> 33 </li> 34 <li> 35 <p><a href="https://redirect.github.com/withastro/astro/pull/10689">#10689</a> <a href="https://github.com/withastro/astro/commit/683d51a5eecafbbfbfed3910a3f1fbf0b3531b99"><code>683d51a5eecafbbfbfed3910a3f1fbf0b3531b99</code></a> Thanks <a href="https://github.com/ematipico"><code>@ematipico</code></a>! - Deprecate support for versions of Node.js older than <code>v18.17.1</code> for Node.js 18, older than <code>v20.0.3</code> for Node.js 20, and the complete Node.js v19 release line.</p> 36 <p>This change is in line with Astro's <a href="https://docs.astro.build/en/upgrade-astro/#support">Node.js support policy</a>.</p> 37 </li> 38 <li> 39 <p><a href="https://redirect.github.com/withastro/astro/pull/10678">#10678</a> <a href="https://github.com/withastro/astro/commit/2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1"><code>2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1</code></a> Thanks <a href="https://github.com/ematipico"><code>@ematipico</code></a>! - Adds a new experimental security option to prevent <a href="https://owasp.org/www-community/attacks/csrf">Cross-Site Request Forgery (CSRF) attacks</a>. This feature is available only for pages rendered on demand:</p> 40 <pre lang="js"><code>import { defineConfig } from 'astro/config'; 41 export default defineConfig({ 42 experimental: { 43 security: { 44 csrfProtection: { 45 origin: true, 46 }, 47 }, 48 }, 49 }); 50 </code></pre> 51 <p>Enabling this setting performs a check that the "origin" header, automatically passed by all modern browsers, matches the URL sent by each <code>Request</code>.</p> 52 <p>This experimental "origin" check is executed only for pages rendered on demand, and only for the requests <code>POST, </code>PATCH<code>, </code>DELETE<code>and</code>PUT<code>with one of the following</code>content-type` headers: 'application/x-www-form-urlencoded', 'multipart/form-data', 'text/plain'.</p> 53 <p>It the "origin" header doesn't match the pathname of the request, Astro will return a 403 status code and won't render the page.</p> 54 </li> 55 <li> 56 <p><a href="https://redirect.github.com/withastro/astro/pull/10193">#10193</a> <a href="https://github.com/withastro/astro/commit/440681e7b74511a17b152af0fd6e0e4dc4014025"><code>440681e7b74511a17b152af0fd6e0e4dc4014025</code></a> Thanks <a href="https://github.com/ematipico"><code>@ematipico</code></a>! - Adds a new i18n routing option <code>manual</code> to allow you to write your own i18n middleware:</p> 57 <pre lang="js"><code>import { defineConfig } from 'astro/config'; 58 // astro.config.mjs 59 export default defineConfig({ 60 i18n: { 61 locales: ['en', 'fr'], 62 defaultLocale: 'fr', 63 routing: 'manual', 64 }, 65 }); 66 </code></pre> 67 </li> 68 </ul> 69 <!-- raw HTML omitted --> 70 </blockquote> 71 <p>... (truncated)</p> 72 </details> 73 <details> 74 <summary>Changelog</summary> 75 <p><em>Sourced from <a href="https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md">astro's changelog</a>.</em></p> 76 <blockquote> 77 <h2>4.6.1</h2> 78 <h3>Patch Changes</h3> 79 <ul> 80 <li> 81 <p><a href="https://redirect.github.com/withastro/astro/pull/10708">#10708</a> <a href="https://github.com/withastro/astro/commit/742866c5669a2be4f8b5a4c861cadb933c381415"><code>742866c5669a2be4f8b5a4c861cadb933c381415</code></a> Thanks <a href="https://github.com/horo-fox"><code>@horo-fox</code></a>! - Limits parallel imports within <code>getCollection()</code> to prevent EMFILE errors when accessing files</p> 82 </li> 83 <li> 84 <p><a href="https://redirect.github.com/withastro/astro/pull/10755">#10755</a> <a href="https://github.com/withastro/astro/commit/c6d59b6fb7db20af957a8706c8159c50619235ef"><code>c6d59b6fb7db20af957a8706c8159c50619235ef</code></a> Thanks <a href="https://github.com/ematipico"><code>@ematipico</code></a>! - Fixes a case where the i18n fallback failed to correctly redirect to the index page with SSR enabled</p> 85 </li> 86 </ul> 87 <h2>4.6.0</h2> 88 <h3>Minor Changes</h3> 89 <ul> 90 <li> 91 <p><a href="https://redirect.github.com/withastro/astro/pull/10591">#10591</a> <a href="https://github.com/withastro/astro/commit/39988ef8e2c4c4888543c973e06d9b9939e4ac95"><code>39988ef8e2c4c4888543c973e06d9b9939e4ac95</code></a> Thanks <a href="https://github.com/mingjunlu"><code>@mingjunlu</code></a>! - Adds a new dev toolbar settings option to change the horizontal placement of the dev toolbar on your screen: bottom left, bottom center, or bottom right.</p> 92 </li> 93 <li> 94 <p><a href="https://redirect.github.com/withastro/astro/pull/10689">#10689</a> <a href="https://github.com/withastro/astro/commit/683d51a5eecafbbfbfed3910a3f1fbf0b3531b99"><code>683d51a5eecafbbfbfed3910a3f1fbf0b3531b99</code></a> Thanks <a href="https://github.com/ematipico"><code>@ematipico</code></a>! - Deprecate support for versions of Node.js older than <code>v18.17.1</code> for Node.js 18, older than <code>v20.0.3</code> for Node.js 20, and the complete Node.js v19 release line.</p> 95 <p>This change is in line with Astro's <a href="https://docs.astro.build/en/upgrade-astro/#support">Node.js support policy</a>.</p> 96 </li> 97 <li> 98 <p><a href="https://redirect.github.com/withastro/astro/pull/10678">#10678</a> <a href="https://github.com/withastro/astro/commit/2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1"><code>2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1</code></a> Thanks <a href="https://github.com/ematipico"><code>@ematipico</code></a>! - Adds a new experimental security option to prevent <a href="https://owasp.org/www-community/attacks/csrf">Cross-Site Request Forgery (CSRF) attacks</a>. This feature is available only for pages rendered on demand:</p> 99 <pre lang="js"><code>import { defineConfig } from 'astro/config'; 100 export default defineConfig({ 101 experimental: { 102 security: { 103 csrfProtection: { 104 origin: true, 105 }, 106 }, 107 }, 108 }); 109 </code></pre> 110 <p>Enabling this setting performs a check that the "origin" header, automatically passed by all modern browsers, matches the URL sent by each <code>Request</code>.</p> 111 <p>This experimental "origin" check is executed only for pages rendered on demand, and only for the requests <code>POST, </code>PATCH<code>, </code>DELETE<code>and</code>PUT<code>with one of the following</code>content-type` headers: 'application/x-www-form-urlencoded', 'multipart/form-data', 'text/plain'.</p> 112 <p>It the "origin" header doesn't match the pathname of the request, Astro will return a 403 status code and won't render the page.</p> 113 </li> 114 <li> 115 <p><a href="https://redirect.github.com/withastro/astro/pull/10193">#10193</a> <a href="https://github.com/withastro/astro/commit/440681e7b74511a17b152af0fd6e0e4dc4014025"><code>440681e7b74511a17b152af0fd6e0e4dc4014025</code></a> Thanks <a href="https://github.com/ematipico"><code>@ematipico</code></a>! - Adds a new i18n routing option <code>manual</code> to allow you to write your own i18n middleware:</p> 116 <pre lang="js"><code>import { defineConfig } from 'astro/config'; 117 // astro.config.mjs 118 export default defineConfig({ 119 i18n: { 120 locales: ['en', 'fr'], 121 defaultLocale: 'fr', 122 routing: 'manual', 123 }, 124 </code></pre> 125 </li> 126 </ul> 127 <!-- raw HTML omitted --> 128 </blockquote> 129 <p>... (truncated)</p> 130 </details> 131 <details> 132 <summary>Commits</summary> 133 <ul> 134 <li><a href="https://github.com/withastro/astro/commit/3ff6b403db5191c1f676fac35b8134102442a800"><code>3ff6b40</code></a> [ci] release (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10757">#10757</a>)</li> 135 <li><a href="https://github.com/withastro/astro/commit/17c2bb1aad7eb1eb5a0dcb8d5ea5be24abcdddc7"><code>17c2bb1</code></a> Fix typo in error message for IncorrectStrategyForI18n (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10768">#10768</a>)</li> 136 <li><a href="https://github.com/withastro/astro/commit/ed2f4aa1227fb2e967e9b3e2a6187b0f522aa8af"><code>ed2f4aa</code></a> Performance improvement in createAstro function (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10765">#10765</a>)</li> 137 <li><a href="https://github.com/withastro/astro/commit/ae12a7e32cbd3471e7f8fcea0cd8d3bbfee79c3e"><code>ae12a7e</code></a> [ci] format</li> 138 <li><a href="https://github.com/withastro/astro/commit/742866c5669a2be4f8b5a4c861cadb933c381415"><code>742866c</code></a> Limit imports in flight for <code>getCollection</code> (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10708">#10708</a>)</li> 139 <li><a href="https://github.com/withastro/astro/commit/789ce230e97c1d9ebb61437fe380c8787a160191"><code>789ce23</code></a> [docs] config reference link fix (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10758">#10758</a>)</li> 140 <li><a href="https://github.com/withastro/astro/commit/c6d59b6fb7db20af957a8706c8159c50619235ef"><code>c6d59b6</code></a> fix(i18n): fallback SSR (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10755">#10755</a>)</li> 141 <li><a href="https://github.com/withastro/astro/commit/66bc1041d4fbef95d624fc9bff0c3f9ced4638c2"><code>66bc104</code></a> [ci] release (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10739">#10739</a>)</li> 142 <li><a href="https://github.com/withastro/astro/commit/d51951ce6278d4b59deed938d65e1cb72b5102df"><code>d51951c</code></a> fix(cli): call path.replace only if it is a function (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10745">#10745</a>)</li> 143 <li><a href="https://github.com/withastro/astro/commit/f1bc3dea92e82290195800ddb9b27c61edbd3089"><code>f1bc3de</code></a> Update utils.ts: Optimize and simplify code (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/10749">#10749</a>)</li> 144 <li>Additional commits viewable in <a href="https://github.com/withastro/astro/commits/astro@4.6.1/packages/astro">compare view</a></li> 145 </ul> 146 </details> 147 <br /> 148 149 150 [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) 151 152 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. 153 154 [//]: # (dependabot-automerge-start) 155 [//]: # (dependabot-automerge-end) 156 157 --- 158 159 <details> 160 <summary>Dependabot commands and options</summary> 161 <br /> 162 163 You can trigger Dependabot actions by commenting on this PR: 164 - `@dependabot rebase` will rebase this PR 165 - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it 166 - `@dependabot merge` will merge this PR after your CI passes on it 167 - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it 168 - `@dependabot cancel merge` will cancel a previously requested merge and block automerging 169 - `@dependabot reopen` will reopen this PR if it is closed 170 - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually 171 - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency 172 - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) 173 - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) 174 - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) 175 176 177 </details> 178 179 180 ## Comments 181 182 ### @dependabot[bot] — 2024-04-22T01:20:18Z 183 184 Superseded by #50. 185