boneskewer69/japan-gems
Watch
1
0
Fork
You've already forked japan-gems
 0
Code Issues 1 Pull requests 1 Projects Releases Packages 1 Wiki Activity Actions

Update dependency astro to v7.4.11 #38

Open
helferlein wants to merge 1 commit from renovate/astro-monorepo into main
pull from: renovate/astro-monorepo
merge into: boneskewer69:main
Conversation 0 Commits 1 Files changed 2 +18 -18
helferlein commented 2026-11-12 04:02:32 +00:00
Collaborator

This PR contains the following updates:

Package Change Age Confidence
astro (source) 7.4.10 → 7.4.11 age confidence

Release Notes

withastro/astro (astro)

v7.4.11

Compare Source

Patch Changes

  • #​18641 08e2cee Thanks @​astro-factory! - Validates the protocol, host and port from X-Forwarded-Proto, X-Forwarded-Host and X-Forwarded-Port together against each security.allowedDomains entry, instead of one at a time:

    • A forwarded protocol is only applied when an entry allows it for the host in use.
    • A forwarded port is only applied when the entry for that host lists it.
    • A forwarded host without a forwarded protocol is validated with the protocol of the server.
    • An entry with port: '443' (or '80' for http) now matches a host that doesn't include a port.

  • #​18651 93a9057 Thanks @​umeraamir69! - Returns 400 Bad Request for malformed percent-encoded paths in the dev server and static preview instead of bubbling into a 500

  • #​18672 e901468 Thanks @​astro-factory! - Fixes astro check reporting @astrojs/check as missing when the package is installed but throws while loading. The original error is now shown instead of an install prompt.

  • #​18641 08e2cee Thanks @​astro-factory! - Fixes security.allowedDomains accepting non-HTTP(S) X-Forwarded-Proto values (such as ftp or ws) when the list mixes patterns with and without a protocol

  • #​18686 62bb716 Thanks @​astro-factory! - Fixes astro build deleting the license file generated by Vite's build.license option. Astro now removes only its own Vite manifest from the .vite/ output folder.

  • #​18629 e9916e1 Thanks @​decrek! - Fixes spreading an object onto an element with scoped styles changing that object. When the same object was spread on every render, for example a constant imported from another module, its class grew with every request.

  • #​18641 08e2cee Thanks @​astro-factory! - Tightens how security.allowedDomains validates the Host and X-Forwarded-Host headers. Only a plain hostname with an optional port is accepted, and the validated host is applied to Astro.url exactly as it was matched.

  • Updated dependencies [d13beeb, e9916e1]:

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [astro](https://astro.build) ([source](https://github.com/withastro/astro/tree/HEAD/packages/astro)) | [`7.4.10` → `7.4.11`](https://renovatebot.com/diffs/npm/astro/7.4.10/7.4.11) | ![age](https://developer.mend.io/api/mc/badges/age/npm/astro/7.4.11?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/astro/7.4.10/7.4.11?slim=true) | --- ### Release Notes <details> <summary>withastro/astro (astro)</summary> ### [`v7.4.11`](https://github.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#7411) [Compare Source](https://github.com/withastro/astro/compare/astro@7.4.10...astro@7.4.11) ##### Patch Changes - [#&#8203;18641](https://github.com/withastro/astro/pull/18641) [`08e2cee`](https://github.com/withastro/astro/commit/08e2cee8b3ca41db0aa158549e51d2046fbd57a4) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Validates the protocol, host and port from `X-Forwarded-Proto`, `X-Forwarded-Host` and `X-Forwarded-Port` together against each `security.allowedDomains` entry, instead of one at a time: - A forwarded protocol is only applied when an entry allows it for the host in use. - A forwarded port is only applied when the entry for that host lists it. - A forwarded host without a forwarded protocol is validated with the protocol of the server. - An entry with `port: '443'` (or `'80'` for `http`) now matches a host that doesn't include a port. - [#&#8203;18651](https://github.com/withastro/astro/pull/18651) [`93a9057`](https://github.com/withastro/astro/commit/93a9057fdcee6273a3b2199bc80b788039c3ac87) Thanks [@&#8203;umeraamir69](https://github.com/umeraamir69)! - Returns 400 Bad Request for malformed percent-encoded paths in the dev server and static preview instead of bubbling into a 500 - [#&#8203;18672](https://github.com/withastro/astro/pull/18672) [`e901468`](https://github.com/withastro/astro/commit/e901468eafb752f51192940040d4217e8e88e5bf) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes `astro check` reporting `@astrojs/check` as missing when the package is installed but throws while loading. The original error is now shown instead of an install prompt. - [#&#8203;18641](https://github.com/withastro/astro/pull/18641) [`08e2cee`](https://github.com/withastro/astro/commit/08e2cee8b3ca41db0aa158549e51d2046fbd57a4) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes `security.allowedDomains` accepting non-HTTP(S) `X-Forwarded-Proto` values (such as `ftp` or `ws`) when the list mixes patterns with and without a `protocol` - [#&#8203;18686](https://github.com/withastro/astro/pull/18686) [`62bb716`](https://github.com/withastro/astro/commit/62bb716444159e733dad6c82a436e82577c53d05) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Fixes `astro build` deleting the license file generated by Vite's `build.license` option. Astro now removes only its own Vite manifest from the `.vite/` output folder. - [#&#8203;18629](https://github.com/withastro/astro/pull/18629) [`e9916e1`](https://github.com/withastro/astro/commit/e9916e1bff5f3e740d533a6f504630bd6c528ddf) Thanks [@&#8203;decrek](https://github.com/decrek)! - Fixes spreading an object onto an element with scoped styles changing that object. When the same object was spread on every render, for example a constant imported from another module, its `class` grew with every request. - [#&#8203;18641](https://github.com/withastro/astro/pull/18641) [`08e2cee`](https://github.com/withastro/astro/commit/08e2cee8b3ca41db0aa158549e51d2046fbd57a4) Thanks [@&#8203;astro-factory](https://github.com/apps/astro-factory)! - Tightens how `security.allowedDomains` validates the `Host` and `X-Forwarded-Host` headers. Only a plain hostname with an optional port is accepted, and the validated host is applied to `Astro.url` exactly as it was matched. - Updated dependencies \[[`d13beeb`](https://github.com/withastro/astro/commit/d13beeb66c753f03cbdbf4509cf2c527c816f1a4), [`e9916e1`](https://github.com/withastro/astro/commit/e9916e1bff5f3e740d533a6f504630bd6c528ddf)]: - [@&#8203;astrojs/markdown-satteri](https://github.com/astrojs/markdown-satteri)@0.4.9 - [@&#8203;astrojs/runtime](https://github.com/astrojs/runtime)@0.1.1 - [@&#8203;astrojs/vite-plugin-astro](https://github.com/astrojs/vite-plugin-astro)@0.1.2 </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [x] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yMzUuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjIzNS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
This pull request has changes conflicting with the target branch.
  • package-lock.json
  • package.json
View command line instructions

Manual merge helper

Use this merge commit message when completing the merge manually.

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin 'renovate/astro-monorepo:renovate/astro-monorepo'
git switch 'renovate/astro-monorepo'

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch 'main'
git merge --no-ff 'renovate/astro-monorepo'
git switch 'renovate/astro-monorepo'
git rebase 'main'
git switch 'main'
git merge --ff-only 'renovate/astro-monorepo'
git switch 'renovate/astro-monorepo'
git rebase 'main'
git switch 'main'
git merge --no-ff 'renovate/astro-monorepo'
git switch 'main'
git merge --squash 'renovate/astro-monorepo'
git switch 'main'
git merge --ff-only 'renovate/astro-monorepo'
git switch 'main'
git merge 'renovate/astro-monorepo'
git push origin 'main'
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
boneskewer69/japan-gems!38
No description provided.