withastro · matthewp · Nov 10, 2025 · Nov 10, 2025
diff --git a/.changeset/dark-chicken-sleep.md b/.changeset/dark-chicken-sleep.md
diff --git a/.changeset/rich-tips-kick.md b/.changeset/rich-tips-kick.md
diff --git a/.changeset/secure-headers.md b/.changeset/secure-headers.md
diff --git a/examples/basics/package.json b/examples/basics/package.json
@@ -10,6 +10,6 @@
     "astro": "astro"
   },
   "dependencies": {
-    "astro": "^5.15.4"
+    "astro": "^5.15.5"
   }
 }
diff --git a/examples/blog/package.json b/examples/blog/package.json
@@ -13,7 +13,7 @@
     "@astrojs/mdx": "^4.3.10",
     "@astrojs/rss": "^4.0.13",
     "@astrojs/sitemap": "^3.6.0",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "sharp": "^0.34.3"
   }
 }
diff --git a/examples/component/package.json b/examples/component/package.json
@@ -15,7 +15,7 @@
   ],
   "scripts": {},
   "devDependencies": {
-    "astro": "^5.15.4"
+    "astro": "^5.15.5"
   },
   "peerDependencies": {
     "astro": "^4.0.0 || ^5.0.0"

diff --git a/examples/container-with-vitest/package.json b/examples/container-with-vitest/package.json
@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "@astrojs/react": "^4.4.2",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "vitest": "^3.2.4"

diff --git a/examples/framework-alpine/package.json b/examples/framework-alpine/package.json
@@ -13,6 +13,6 @@
     "@astrojs/alpinejs": "^0.4.9",
     "@types/alpinejs": "^3.13.11",
     "alpinejs": "^3.15.0",
-    "astro": "^5.15.4"
+    "astro": "^5.15.5"
   }
 }
diff --git a/examples/framework-multiple/package.json b/examples/framework-multiple/package.json
@@ -17,7 +17,7 @@
     "@astrojs/vue": "^5.1.3",
     "@types/react": "^18.3.26",
     "@types/react-dom": "^18.3.7",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "preact": "^10.27.2",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",

diff --git a/examples/framework-preact/package.json b/examples/framework-preact/package.json
@@ -12,7 +12,7 @@
   "dependencies": {
     "@astrojs/preact": "^4.1.3",
     "@preact/signals": "^2.3.2",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "preact": "^10.27.2"
   }
 }
diff --git a/examples/framework-react/package.json b/examples/framework-react/package.json
@@ -13,7 +13,7 @@
     "@astrojs/react": "^4.4.2",
     "@types/react": "^18.3.26",
     "@types/react-dom": "^18.3.7",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "react": "^18.3.1",
     "react-dom": "^18.3.1"
   }

diff --git a/examples/framework-solid/package.json b/examples/framework-solid/package.json
@@ -11,7 +11,7 @@
   },
   "dependencies": {
     "@astrojs/solid-js": "^5.1.3",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "solid-js": "^1.9.9"
   }
 }
diff --git a/examples/framework-svelte/package.json b/examples/framework-svelte/package.json
@@ -11,7 +11,7 @@
   },
   "dependencies": {
     "@astrojs/svelte": "^7.2.2",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "svelte": "^5.41.3"
   }
 }
diff --git a/examples/framework-vue/package.json b/examples/framework-vue/package.json
@@ -11,7 +11,7 @@
   },
   "dependencies": {
     "@astrojs/vue": "^5.1.3",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "vue": "^3.5.22"
   }
 }
diff --git a/examples/hackernews/package.json b/examples/hackernews/package.json
@@ -11,6 +11,6 @@
   },
   "dependencies": {
     "@astrojs/node": "^9.5.0",
-    "astro": "^5.15.4"
+    "astro": "^5.15.5"
   }
 }
diff --git a/examples/integration/package.json b/examples/integration/package.json
@@ -15,7 +15,7 @@
   ],
   "scripts": {},
   "devDependencies": {
-    "astro": "^5.15.4"
+    "astro": "^5.15.5"
   },
   "peerDependencies": {
     "astro": "^4.0.0"

diff --git a/examples/minimal/package.json b/examples/minimal/package.json
@@ -10,6 +10,6 @@
     "astro": "astro"
   },
   "dependencies": {
-    "astro": "^5.15.4"
+    "astro": "^5.15.5"
   }
 }
diff --git a/examples/portfolio/package.json b/examples/portfolio/package.json
@@ -10,6 +10,6 @@
     "astro": "astro"
   },
   "dependencies": {
-    "astro": "^5.15.4"
+    "astro": "^5.15.5"
   }
 }
diff --git a/examples/ssr/package.json b/examples/ssr/package.json
@@ -13,7 +13,7 @@
   "dependencies": {
     "@astrojs/node": "^9.5.0",
     "@astrojs/svelte": "^7.2.2",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "svelte": "^5.41.3"
   }
 }
diff --git a/examples/starlog/package.json b/examples/starlog/package.json
@@ -9,7 +9,7 @@
     "astro": "astro"
   },
   "dependencies": {
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "sass": "^1.93.2",
     "sharp": "^0.34.3"
   }

diff --git a/examples/toolbar-app/package.json b/examples/toolbar-app/package.json
@@ -16,6 +16,6 @@
   },
   "devDependencies": {
     "@types/node": "^18.17.8",
-    "astro": "^5.15.4"
+    "astro": "^5.15.5"
   }
 }
diff --git a/examples/with-markdoc/package.json b/examples/with-markdoc/package.json
@@ -11,6 +11,6 @@
   },
   "dependencies": {
     "@astrojs/markdoc": "^0.15.8",
-    "astro": "^5.15.4"
+    "astro": "^5.15.5"
   }
 }
diff --git a/examples/with-mdx/package.json b/examples/with-mdx/package.json
@@ -12,7 +12,7 @@
   "dependencies": {
     "@astrojs/mdx": "^4.3.10",
     "@astrojs/preact": "^4.1.3",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "preact": "^10.27.2"
   }
 }
diff --git a/examples/with-nanostores/package.json b/examples/with-nanostores/package.json
@@ -12,7 +12,7 @@
   "dependencies": {
     "@astrojs/preact": "^4.1.3",
     "@nanostores/preact": "^0.5.2",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "nanostores": "^0.11.4",
     "preact": "^10.27.2"
   }

diff --git a/examples/with-tailwindcss/package.json b/examples/with-tailwindcss/package.json
@@ -13,7 +13,7 @@
     "@astrojs/mdx": "^4.3.10",
     "@tailwindcss/vite": "^4.1.16",
     "@types/canvas-confetti": "^1.9.0",
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "canvas-confetti": "^1.9.3",
     "tailwindcss": "^4.1.16"
   }

diff --git a/examples/with-vitest/package.json b/examples/with-vitest/package.json
@@ -11,7 +11,7 @@
     "test": "vitest"
   },
   "dependencies": {
-    "astro": "^5.15.4",
+    "astro": "^5.15.5",
     "vitest": "^3.2.4"
   }
 }
diff --git a/packages/astro/CHANGELOG.md b/packages/astro/CHANGELOG.md
@@ -1,5 +1,15 @@
 # astro
 
+## 5.15.5
+
+### Patch Changes
+
+- [#14712](https://github.com/withastro/astro/pull/14712) [`91780cf`](https://github.com/withastro/astro/commit/91780cffa7cf97cc22694d55962710609a5475b0) Thanks [@florian-lefebvre](https://github.com/florian-lefebvre)! - Fixes a case where build's `process.env` would be inlined in the server output
+
+- [#14713](https://github.com/withastro/astro/pull/14713) [`666d5a7`](https://github.com/withastro/astro/commit/666d5a7ef486aa57f20f87b6cb210619dabd9c4c) Thanks [@florian-lefebvre](https://github.com/florian-lefebvre)! - Improves fallbacks generation when using the experimental Fonts API
+
+- [#14743](https://github.com/withastro/astro/pull/14743) [`dafbb1b`](https://github.com/withastro/astro/commit/dafbb1ba29912099c4faff1440033edc768af8b4) Thanks [@matthewp](https://github.com/matthewp)! - Improves `X-Forwarded` header validation to prevent cache poisoning and header injection attacks. Now properly validates `X-Forwarded-Proto`, `X-Forwarded-Host`, and `X-Forwarded-Port` headers against configured `allowedDomains` patterns, rejecting malformed or suspicious values. This is especially important when running behind a reverse proxy or load balancer.
+
 ## 5.15.4
 
 ### Patch Changes

diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -1,6 +1,6 @@
 {
   "name": "astro",
-  "version": "5.15.4",
+  "version": "5.15.5",
   "description": "Astro is a modern site builder with web best practices, performance, and DX front-of-mind.",
   "type": "module",
   "author": "withastro",