Skip to content

build(deps): bump astro from 5.18.2 to 6.1.10#46

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/astro-6.1.10
Closed

build(deps): bump astro from 5.18.2 to 6.1.10#46
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/astro-6.1.10

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 13, 2026

Bumps astro from 5.18.2 to 6.1.10.

Changelog

Sourced from astro's changelog.

6.1.10

Patch Changes

  • #16479 1058428 Thanks @​matthewp! - Fixes a spurious [WARN] [content] Content config not loaded warning during astro dev for projects that don't use content collections

  • #16457 3d82220 Thanks @​matthewp! - Hardens server island encryption to prevent encrypted data from one island component being replayed against a different one

  • #16481 152700e Thanks @​matthewp! - Fixes a spurious 404 request for a dev toolbar sourcemap during astro dev caused by the browser mis-resolving a relative sourceMappingURL from the /@id/ URL prefix

  • #16480 1bcb43b Thanks @​matthewp! - Fixes an unnecessary full page reload on first navigation during dev

6.1.9

Patch Changes

  • #16448 99464ed Thanks @​matthewp! - Updates vite, picomatch, and unstorage to latest patch versions

  • #16422 a3951d7 Thanks @​matthewp! - Hardens astro-island export resolution and hydration error handling for malformed component metadata

  • #16420 e21de1d Thanks @​matthewp! - Hardens Astro's error overlay and server logging paths to avoid unsafe HTML insertion and format-string interpolation

  • #16419 f3485c3 Thanks @​matthewp! - Hardens nested object and package metadata lookups to ignore prototype keys in content handling and project scaffolding

  • #16022 a002540 Thanks @​mathieumaf! - Fixes an issue where i18n domains would return 404 when trailingSlash is set to never.

  • Updated dependencies [99464ed, f3485c3]:

    • @​astrojs/internal-helpers@​0.9.0
    • @​astrojs/markdown-remark@​7.1.1

6.1.8

Patch Changes

  • #16367 a6866a7 Thanks @​ematipico! - Fixes an issue where build output files could contain special characters (!, ~, {, }) in their names, causing deploy failures on platforms like Netlify.

  • #16381 217c5b3 Thanks @​ematipico! - Slightly improved the performance of the dev server by caching the internal crawling of the dependencies of a project.

  • #16348 7d26cd7 Thanks @​ocavue! - Fixes a bug where emitted assets during a client build would contain always fresh, new hashes in their name. Now the build should be more stable.

  • #16317 d012bfe Thanks @​das-peter! - Fixes a bug where allowedDomains weren't correctly propagated when using the development server.

  • #16379 5a84551 Thanks @​martrapp! - Improves Vue scoped style handling in DEV mode during client router navigation.

  • #16317 d012bfe Thanks @​das-peter! - Adds tests to verify settings are properly propagated when using the development server.

  • #16282 5b0fdaa Thanks @​jmurty! - Fixes build errors on platforms with skew protection enabled (e.g. Vercel, Netlify) for inter-chunk Javascript using dynamic imports

  • Updated dependencies [e0b240e]:

    • @​astrojs/telemetry@​3.3.1

... (truncated)

Commits
  • c1f2e4f [ci] release (#16467)
  • 345fb9e chore: fix flaky dev toolbar render time test (#16500)
  • 5120ecd [ci] format
  • 3d82220 Add AEAD context binding to server island encryption (#16457)
  • 1bcb43b Prebundle dev toolbar entrypoint in client environment (#16480)
  • 93101cc [ci] format
  • 152700e fix: strip sourceMappingURL from dev toolbar entrypoint during dep optimizati...
  • bc83041 refactor(astro): migrate test utils to typescript (#16492)
  • 5c543c5 refactor(astro): add internal entry points for test (#16473)
  • 1058428 Suppress content config warning for projects without content collections (#16...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 13, 2026
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented May 13, 2026

Deploying devcharms with  Cloudflare Pages  Cloudflare Pages

Latest commit: 74a49f5
Status:🚫  Build failed.

View logs

@dependabot dependabot Bot changed the title build(deps): bump astro from 5.18.1 to 6.1.10 build(deps): bump astro from 5.18.2 to 6.1.10 May 26, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/astro-6.1.10 branch from cbee708 to 41a86cf Compare May 26, 2026 15:07
Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 5.18.2 to 6.1.10.
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@6.1.10/packages/astro)

---
updated-dependencies:
- dependency-name: astro
  dependency-version: 6.1.10
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/astro-6.1.10 branch from 41a86cf to 74a49f5 Compare May 26, 2026 15:22
@shrinkray
Copy link
Copy Markdown
Owner

@copilot this code is currently using astro@6.1.10 -- Do we ignore this PR? Or does this PR offer something we do not currently have installed?

Copy link
Copy Markdown

Copilot AI commented May 26, 2026

@copilot this code is currently using astro@6.1.10 -- Do we ignore this PR? Or does this PR offer something we do not currently have installed?

Good catch — if the target branch is already on astro@6.1.10, this PR is effectively redundant and can be closed. Also, in this branch npm ci currently fails because @astrojs/tailwind@6.0.2 has a peer range capped at Astro 5, so this bump alone isn’t merge-ready without coordinated package updates.

Copilot AI requested a review from shrinkray May 26, 2026 15:39
@shrinkray
Copy link
Copy Markdown
Owner

This PR is recommended to be closed, not merged.

  • This branch npm ci fails because @astrojs/tailwind@6.0.2 has a peer range capped at Astro 5
  • This bump alone isn’t merge-ready without coordinated package updates.

@shrinkray shrinkray closed this May 26, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 26, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/astro-6.1.10 branch May 26, 2026 15:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants