diff --git a/.changeset/dark-chicken-sleep.md b/.changeset/dark-chicken-sleep.md deleted file mode 100644 index 637db29ca566..000000000000 --- a/.changeset/dark-chicken-sleep.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'astro': patch ---- - -Fixes a case where build's `process.env` would be inlined in the server output diff --git a/.changeset/rich-tips-kick.md b/.changeset/rich-tips-kick.md deleted file mode 100644 index b71a4c0acc40..000000000000 --- a/.changeset/rich-tips-kick.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'astro': patch ---- - -Improves fallbacks generation when using the experimental Fonts API diff --git a/.changeset/secure-headers.md b/.changeset/secure-headers.md deleted file mode 100644 index bb7ff1db15af..000000000000 --- a/.changeset/secure-headers.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'astro': patch ---- - -Improves `X-Forwarded` header validation to prevent cache poisoning and header injection attacks. Now properly validates `X-Forwarded-Proto`, `X-Forwarded-Host`, and `X-Forwarded-Port` headers against configured `allowedDomains` patterns, rejecting malformed or suspicious values. This is especially important when running behind a reverse proxy or load balancer. diff --git a/examples/basics/package.json b/examples/basics/package.json index d090e16943d4..cf26d5124318 100644 --- a/examples/basics/package.json +++ b/examples/basics/package.json @@ -10,6 +10,6 @@ "astro": "astro" }, "dependencies": { - "astro": "^5.15.4" + "astro": "^5.15.5" } } diff --git a/examples/blog/package.json b/examples/blog/package.json index 36710b8efac9..b66fb2391b89 100644 --- a/examples/blog/package.json +++ b/examples/blog/package.json @@ -13,7 +13,7 @@ "@astrojs/mdx": "^4.3.10", "@astrojs/rss": "^4.0.13", "@astrojs/sitemap": "^3.6.0", - "astro": "^5.15.4", + "astro": "^5.15.5", "sharp": "^0.34.3" } } diff --git a/examples/component/package.json b/examples/component/package.json index 5023b02c0b06..fe44e37c16bf 100644 --- a/examples/component/package.json +++ b/examples/component/package.json @@ -15,7 +15,7 @@ ], "scripts": {}, "devDependencies": { - "astro": "^5.15.4" + "astro": "^5.15.5" }, "peerDependencies": { "astro": "^4.0.0 || ^5.0.0" diff --git a/examples/container-with-vitest/package.json b/examples/container-with-vitest/package.json index eaa4516390ad..7e2ec67ef8d6 100644 --- a/examples/container-with-vitest/package.json +++ b/examples/container-with-vitest/package.json @@ -12,7 +12,7 @@ }, "dependencies": { "@astrojs/react": "^4.4.2", - "astro": "^5.15.4", + "astro": "^5.15.5", "react": "^18.3.1", "react-dom": "^18.3.1", "vitest": "^3.2.4" diff --git a/examples/framework-alpine/package.json b/examples/framework-alpine/package.json index 72931e3f6a83..393128117df0 100644 --- a/examples/framework-alpine/package.json +++ b/examples/framework-alpine/package.json @@ -13,6 +13,6 @@ "@astrojs/alpinejs": "^0.4.9", "@types/alpinejs": "^3.13.11", "alpinejs": "^3.15.0", - "astro": "^5.15.4" + "astro": "^5.15.5" } } diff --git a/examples/framework-multiple/package.json b/examples/framework-multiple/package.json index 6b76e7fed2ce..c634f58b055c 100644 --- a/examples/framework-multiple/package.json +++ b/examples/framework-multiple/package.json @@ -17,7 +17,7 @@ "@astrojs/vue": "^5.1.3", "@types/react": "^18.3.26", "@types/react-dom": "^18.3.7", - "astro": "^5.15.4", + "astro": "^5.15.5", "preact": "^10.27.2", "react": "^18.3.1", "react-dom": "^18.3.1", diff --git a/examples/framework-preact/package.json b/examples/framework-preact/package.json index 7f452cbd7326..a3ad884b3f00 100644 --- a/examples/framework-preact/package.json +++ b/examples/framework-preact/package.json @@ -12,7 +12,7 @@ "dependencies": { "@astrojs/preact": "^4.1.3", "@preact/signals": "^2.3.2", - "astro": "^5.15.4", + "astro": "^5.15.5", "preact": "^10.27.2" } } diff --git a/examples/framework-react/package.json b/examples/framework-react/package.json index 7d34cde23d4b..5461da580193 100644 --- a/examples/framework-react/package.json +++ b/examples/framework-react/package.json @@ -13,7 +13,7 @@ "@astrojs/react": "^4.4.2", "@types/react": "^18.3.26", "@types/react-dom": "^18.3.7", - "astro": "^5.15.4", + "astro": "^5.15.5", "react": "^18.3.1", "react-dom": "^18.3.1" } diff --git a/examples/framework-solid/package.json b/examples/framework-solid/package.json index 007efc1e39c3..b9f165e6219d 100644 --- a/examples/framework-solid/package.json +++ b/examples/framework-solid/package.json @@ -11,7 +11,7 @@ }, "dependencies": { "@astrojs/solid-js": "^5.1.3", - "astro": "^5.15.4", + "astro": "^5.15.5", "solid-js": "^1.9.9" } } diff --git a/examples/framework-svelte/package.json b/examples/framework-svelte/package.json index 37e3e31b6fb7..c32f3807861c 100644 --- a/examples/framework-svelte/package.json +++ b/examples/framework-svelte/package.json @@ -11,7 +11,7 @@ }, "dependencies": { "@astrojs/svelte": "^7.2.2", - "astro": "^5.15.4", + "astro": "^5.15.5", "svelte": "^5.41.3" } } diff --git a/examples/framework-vue/package.json b/examples/framework-vue/package.json index d8171c928435..9f2eec751609 100644 --- a/examples/framework-vue/package.json +++ b/examples/framework-vue/package.json @@ -11,7 +11,7 @@ }, "dependencies": { "@astrojs/vue": "^5.1.3", - "astro": "^5.15.4", + "astro": "^5.15.5", "vue": "^3.5.22" } } diff --git a/examples/hackernews/package.json b/examples/hackernews/package.json index 7827eb624102..8a35ee5e1ccf 100644 --- a/examples/hackernews/package.json +++ b/examples/hackernews/package.json @@ -11,6 +11,6 @@ }, "dependencies": { "@astrojs/node": "^9.5.0", - "astro": "^5.15.4" + "astro": "^5.15.5" } } diff --git a/examples/integration/package.json b/examples/integration/package.json index 18ba0f5b95bf..d605438813a2 100644 --- a/examples/integration/package.json +++ b/examples/integration/package.json @@ -15,7 +15,7 @@ ], "scripts": {}, "devDependencies": { - "astro": "^5.15.4" + "astro": "^5.15.5" }, "peerDependencies": { "astro": "^4.0.0" diff --git a/examples/minimal/package.json b/examples/minimal/package.json index b13f301a733a..d97840f9ae93 100644 --- a/examples/minimal/package.json +++ b/examples/minimal/package.json @@ -10,6 +10,6 @@ "astro": "astro" }, "dependencies": { - "astro": "^5.15.4" + "astro": "^5.15.5" } } diff --git a/examples/portfolio/package.json b/examples/portfolio/package.json index 347a5de9e58c..6e61b40ea385 100644 --- a/examples/portfolio/package.json +++ b/examples/portfolio/package.json @@ -10,6 +10,6 @@ "astro": "astro" }, "dependencies": { - "astro": "^5.15.4" + "astro": "^5.15.5" } } diff --git a/examples/ssr/package.json b/examples/ssr/package.json index 0585cdb0669f..6bfecfb0f39c 100644 --- a/examples/ssr/package.json +++ b/examples/ssr/package.json @@ -13,7 +13,7 @@ "dependencies": { "@astrojs/node": "^9.5.0", "@astrojs/svelte": "^7.2.2", - "astro": "^5.15.4", + "astro": "^5.15.5", "svelte": "^5.41.3" } } diff --git a/examples/starlog/package.json b/examples/starlog/package.json index fa156981c23d..f3d54810dbe7 100644 --- a/examples/starlog/package.json +++ b/examples/starlog/package.json @@ -9,7 +9,7 @@ "astro": "astro" }, "dependencies": { - "astro": "^5.15.4", + "astro": "^5.15.5", "sass": "^1.93.2", "sharp": "^0.34.3" } diff --git a/examples/toolbar-app/package.json b/examples/toolbar-app/package.json index 40758a360122..0ef55b5746d0 100644 --- a/examples/toolbar-app/package.json +++ b/examples/toolbar-app/package.json @@ -16,6 +16,6 @@ }, "devDependencies": { "@types/node": "^18.17.8", - "astro": "^5.15.4" + "astro": "^5.15.5" } } diff --git a/examples/with-markdoc/package.json b/examples/with-markdoc/package.json index 38f60ec8505f..054d1a09225e 100644 --- a/examples/with-markdoc/package.json +++ b/examples/with-markdoc/package.json @@ -11,6 +11,6 @@ }, "dependencies": { "@astrojs/markdoc": "^0.15.8", - "astro": "^5.15.4" + "astro": "^5.15.5" } } diff --git a/examples/with-mdx/package.json b/examples/with-mdx/package.json index 7730302705b9..b5d15c0727b5 100644 --- a/examples/with-mdx/package.json +++ b/examples/with-mdx/package.json @@ -12,7 +12,7 @@ "dependencies": { "@astrojs/mdx": "^4.3.10", "@astrojs/preact": "^4.1.3", - "astro": "^5.15.4", + "astro": "^5.15.5", "preact": "^10.27.2" } } diff --git a/examples/with-nanostores/package.json b/examples/with-nanostores/package.json index 0deb85627d34..42278a7d23f2 100644 --- a/examples/with-nanostores/package.json +++ b/examples/with-nanostores/package.json @@ -12,7 +12,7 @@ "dependencies": { "@astrojs/preact": "^4.1.3", "@nanostores/preact": "^0.5.2", - "astro": "^5.15.4", + "astro": "^5.15.5", "nanostores": "^0.11.4", "preact": "^10.27.2" } diff --git a/examples/with-tailwindcss/package.json b/examples/with-tailwindcss/package.json index 72dd9a09d0c6..b73d394f54a9 100644 --- a/examples/with-tailwindcss/package.json +++ b/examples/with-tailwindcss/package.json @@ -13,7 +13,7 @@ "@astrojs/mdx": "^4.3.10", "@tailwindcss/vite": "^4.1.16", "@types/canvas-confetti": "^1.9.0", - "astro": "^5.15.4", + "astro": "^5.15.5", "canvas-confetti": "^1.9.3", "tailwindcss": "^4.1.16" } diff --git a/examples/with-vitest/package.json b/examples/with-vitest/package.json index 41e9875efe24..7f6801776754 100644 --- a/examples/with-vitest/package.json +++ b/examples/with-vitest/package.json @@ -11,7 +11,7 @@ "test": "vitest" }, "dependencies": { - "astro": "^5.15.4", + "astro": "^5.15.5", "vitest": "^3.2.4" } } diff --git a/packages/astro/CHANGELOG.md b/packages/astro/CHANGELOG.md index a6f442caed15..789ba4d53d57 100644 --- a/packages/astro/CHANGELOG.md +++ b/packages/astro/CHANGELOG.md @@ -1,5 +1,15 @@ # astro +## 5.15.5 + +### Patch Changes + +- [#14712](https://github.com/withastro/astro/pull/14712) [`91780cf`](https://github.com/withastro/astro/commit/91780cffa7cf97cc22694d55962710609a5475b0) Thanks [@florian-lefebvre](https://github.com/florian-lefebvre)! - Fixes a case where build's `process.env` would be inlined in the server output + +- [#14713](https://github.com/withastro/astro/pull/14713) [`666d5a7`](https://github.com/withastro/astro/commit/666d5a7ef486aa57f20f87b6cb210619dabd9c4c) Thanks [@florian-lefebvre](https://github.com/florian-lefebvre)! - Improves fallbacks generation when using the experimental Fonts API + +- [#14743](https://github.com/withastro/astro/pull/14743) [`dafbb1b`](https://github.com/withastro/astro/commit/dafbb1ba29912099c4faff1440033edc768af8b4) Thanks [@matthewp](https://github.com/matthewp)! - Improves `X-Forwarded` header validation to prevent cache poisoning and header injection attacks. Now properly validates `X-Forwarded-Proto`, `X-Forwarded-Host`, and `X-Forwarded-Port` headers against configured `allowedDomains` patterns, rejecting malformed or suspicious values. This is especially important when running behind a reverse proxy or load balancer. + ## 5.15.4 ### Patch Changes diff --git a/packages/astro/package.json b/packages/astro/package.json index 6995ccb22981..2c91dd8a18fd 100644 --- a/packages/astro/package.json +++ b/packages/astro/package.json @@ -1,6 +1,6 @@ { "name": "astro", - "version": "5.15.4", + "version": "5.15.5", "description": "Astro is a modern site builder with web best practices, performance, and DX front-of-mind.", "type": "module", "author": "withastro", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index dd42fe426870..8d35d2e60d8b 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -149,7 +149,7 @@ importers: examples/basics: dependencies: astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro examples/blog: @@ -164,7 +164,7 @@ importers: specifier: ^3.6.0 version: link:../../packages/integrations/sitemap astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro sharp: specifier: ^0.34.3 @@ -173,7 +173,7 @@ importers: examples/component: devDependencies: astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro examples/container-with-vitest: @@ -182,7 +182,7 @@ importers: specifier: ^4.4.2 version: link:../../packages/integrations/react astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro react: specifier: ^18.3.1 @@ -213,7 +213,7 @@ importers: specifier: ^3.15.0 version: 3.15.0 astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro examples/framework-multiple: @@ -240,7 +240,7 @@ importers: specifier: ^18.3.7 version: 18.3.7(@types/react@18.3.26) astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro preact: specifier: ^10.27.2 @@ -270,7 +270,7 @@ importers: specifier: ^2.3.2 version: 2.3.2(preact@10.27.2) astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro preact: specifier: ^10.27.2 @@ -288,7 +288,7 @@ importers: specifier: ^18.3.7 version: 18.3.7(@types/react@18.3.26) astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro react: specifier: ^18.3.1 @@ -303,7 +303,7 @@ importers: specifier: ^5.1.3 version: link:../../packages/integrations/solid astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro solid-js: specifier: ^1.9.9 @@ -315,7 +315,7 @@ importers: specifier: ^7.2.2 version: link:../../packages/integrations/svelte astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro svelte: specifier: ^5.41.3 @@ -327,7 +327,7 @@ importers: specifier: ^5.1.3 version: link:../../packages/integrations/vue astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro vue: specifier: ^3.5.22 @@ -339,25 +339,25 @@ importers: specifier: ^9.5.0 version: link:../../packages/integrations/node astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro examples/integration: devDependencies: astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro examples/minimal: dependencies: astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro examples/portfolio: dependencies: astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro examples/ssr: @@ -369,7 +369,7 @@ importers: specifier: ^7.2.2 version: link:../../packages/integrations/svelte astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro svelte: specifier: ^5.41.3 @@ -378,7 +378,7 @@ importers: examples/starlog: dependencies: astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro sass: specifier: ^1.93.2 @@ -393,7 +393,7 @@ importers: specifier: ^18.17.8 version: 18.19.130 astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro examples/with-markdoc: @@ -402,7 +402,7 @@ importers: specifier: ^0.15.8 version: link:../../packages/integrations/markdoc astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro examples/with-mdx: @@ -414,7 +414,7 @@ importers: specifier: ^4.1.3 version: link:../../packages/integrations/preact astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro preact: specifier: ^10.27.2 @@ -429,7 +429,7 @@ importers: specifier: ^0.5.2 version: 0.5.2(nanostores@0.11.4)(preact@10.27.2) astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro nanostores: specifier: ^0.11.4 @@ -450,7 +450,7 @@ importers: specifier: ^1.9.0 version: 1.9.0 astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro canvas-confetti: specifier: ^1.9.3 @@ -462,7 +462,7 @@ importers: examples/with-vitest: dependencies: astro: - specifier: ^5.15.4 + specifier: ^5.15.5 version: link:../../packages/astro vitest: specifier: ^3.2.4