Skip to content

Bump astro to ^6.1.8 (unpin — upstream fix shipped)#13

Merged
KCerveny merged 6 commits into
stagingfrom
bump-astro-6.1.8
Apr 20, 2026
Merged

Bump astro to ^6.1.8 (unpin — upstream fix shipped)#13
KCerveny merged 6 commits into
stagingfrom
bump-astro-6.1.8

Conversation

@KCerveny

@KCerveny KCerveny commented Apr 20, 2026

Copy link
Copy Markdown
Contributor

Summary

Unpin astro and @astrojs/netlify now that the upstream fix for
withastro/astro#16209 has
shipped. astro@6.1.8 (2026-04-18) includes both the root-cause fix
#16282 (offset math for
dynamic-import specifier rewriting) and the defense-in-depth fix
#16367
(cleanChunkName sanitizer).

Changes

Package Was Now
astro 6.1.2 ^6.1.8
@astrojs/netlify 7.0.6 ^7.0.7

Plus: docs/astro/known-issues.md flips from "waiting for fix" to a
historical reference, and the TODO.md unpin item is checked off.

🚫 Do not merge yet

Holding this PR until the CI workflow is re-enabled and includes a
DEPLOY_ID=ci pnpm build step. That step is the only automated
protection against this class of regression recurring — without it, the
next drift into a broken astro patch release will be caught only by a
Netlify deploy failure again.

Merge order will be:

  1. Restore CI workflow + add DEPLOY_ID=ci pnpm build step.
  2. PR #12
    (emergency 6.1.2 pin) → main.
  3. This PR (bump to 6.1.8) → stagingmain, with CI green.

Test plan

Already run locally:

  • pnpm install && pnpm build on pinned versions → success.
  • DEPLOY_ID=local-test pnpm build → success; no !~{…}~ chunk
    filenames emitted.
  • grep import\("\./ dist/_astro/VideoModal*.js → specifiers look
    like import("./plyr.<hash>.js?dpl=local-test") (well-formed —
    ?dpl=… is inside the string literal, not spliced mid-specifier
    as it was under 6.1.7).

To run before merging:

  • CI green on this PR (requires workflow re-enabled).
  • Netlify deploy preview builds successfully.
  • Smoke-test VideoModal in the deploy preview (opens, plays,
    autoplay where configured).

🤖 Generated with Claude Code

KCerveny and others added 2 commits April 19, 2026 20:06
astro@6.1.8 (2026-04-18) ships both fixes for the plugin-chunk-imports
regression that forced the 6.1.2 pin in PR #12:

- withastro/astro#16282 — corrects the offset math that was splicing `?`
  into dynamic import() specifiers (the root cause of our Netlify failure).
- withastro/astro#16367 — adds a cleanChunkName() sanitizer as defense
  in depth against `!`, `~`, `{`, `}` leaking into chunk filenames.

Verified locally with `DEPLOY_ID=local-test pnpm build`:
- Build succeeds; no `_astro/*.!~{…}~.js` placeholder filenames emitted.
- `grep import\("\./ dist/_astro/VideoModal*.js` shows well-formed
  rewrites like `import("./plyr.<hash>.js?dpl=local-test")`.

@astrojs/netlify returns to ^7.0.7 — compatible again now that astro has
the `verifyOptions` export the adapter needs.

Docs updated: known-issues.md flips from "waiting for fix" to historical
reference, TODO unpin item checked off.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@netlify

netlify Bot commented Apr 20, 2026

Copy link
Copy Markdown

Deploy Preview for javelina-works ready!

Name Link
🔨 Latest commit 31f6948
🔍 Latest deploy log https://app.netlify.com/projects/javelina-works/deploys/69e68f88f61c8e0008d8d252
😎 Deploy Preview https://deploy-preview-13--javelina-works.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@KCerveny KCerveny marked this pull request as ready for review April 20, 2026 20:34
@KCerveny KCerveny merged commit 8b51d01 into staging Apr 20, 2026
6 checks passed
@KCerveny KCerveny deleted the bump-astro-6.1.8 branch April 20, 2026 20:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant