Skip to content

make actionBodySizeLimit configurable#15589

Merged
matthewp merged 2 commits intowithastro:5-legacyfrom
qzio:make-request-body-limit-configurable
Feb 20, 2026
Merged

make actionBodySizeLimit configurable#15589
matthewp merged 2 commits intowithastro:5-legacyfrom
qzio:make-request-body-limit-configurable

Conversation

@qzio
Copy link
Copy Markdown
Contributor

@qzio qzio commented Feb 20, 2026

Changes

To enable upload of larger files, make the action request body limit configurable changesets.

Testing

Docs

This PR doesn't touch docs.

NOTE:

I'm not sure if this should go against main or 5-legacy.
But I need this (or something like this) in the current "stable" version of astro.

@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Feb 20, 2026

🦋 Changeset detected

Latest commit: c4f24ed

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-actions github-actions bot added pkg: astro Related to the core `astro` package (scope) docs pr labels Feb 20, 2026
@withastro withastro deleted a comment from github-actions bot Feb 20, 2026
@matthewp matthewp merged commit b7dd447 into withastro:5-legacy Feb 20, 2026
25 checks passed
@astrobot-houston astrobot-houston mentioned this pull request Feb 20, 2026
dadezzz pushed a commit to dadezzz/ice-notes that referenced this pull request Mar 2, 2026
This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [astro](https://astro.build) ([source](https://github.com/withastro/astro/tree/HEAD/packages/astro)) | [`5.17.3` → `5.18.0`](https://renovatebot.com/diffs/npm/astro/5.17.3/5.18.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/astro/5.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/astro/5.17.3/5.18.0?slim=true) |

---

### Release Notes

<details>
<summary>withastro/astro (astro)</summary>

### [`v5.18.0`](https://github.com/withastro/astro/releases/tag/astro%405.18.0)

[Compare Source](https://github.com/withastro/astro/compare/astro@5.17.3...astro@5.18.0)

##### Minor Changes

- [#&#8203;15589](withastro/astro#15589) [`b7dd447`](withastro/astro@b7dd447) Thanks [@&#8203;qzio](https://github.com/qzio)! - Adds a new `security.actionBodySizeLimit` option to configure the maximum size of Astro Actions request bodies.

  This lets you increase the default 1 MB limit when your actions need to accept larger payloads. For example, actions that handle file uploads or large JSON payloads can now opt in to a higher limit.

  If you do not set this option, Astro continues to enforce the 1 MB default to help prevent abuse.

  ```js
  // astro.config.mjs
  export default defineConfig({
    security: {
      actionBodySizeLimit: 10 * 1024 * 1024, // set to 10 MB
    },
  });
  ```

##### Patch Changes

- [#&#8203;15594](withastro/astro#15594) [`efae11c`](withastro/astro@efae11c) Thanks [@&#8203;qzio](https://github.com/qzio)! - Fix X-Forwarded-Proto validation when allowedDomains includes both protocol and hostname fields. The protocol check no longer fails due to hostname mismatch against the hardcoded test URL.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zMS45IiwidXBkYXRlZEluVmVyIjoiNDMuMzEuOSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: Renovate Bot <renovate@zarantonello.dev>
Co-committed-by: Renovate Bot <renovate@zarantonello.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docs pr pkg: astro Related to the core `astro` package (scope)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants