Skip to content

fix: X-Forwarded-Proto rejected when allowedDomains includes protocol…#15594

Merged
louisescher merged 3 commits intowithastro:5-legacyfrom
qzio:backport-forwarded-proto-fix
Feb 24, 2026
Merged

fix: X-Forwarded-Proto rejected when allowedDomains includes protocol…#15594
louisescher merged 3 commits intowithastro:5-legacyfrom
qzio:backport-forwarded-proto-fix

Conversation

@qzio
Copy link
Copy Markdown
Contributor

@qzio qzio commented Feb 20, 2026

Changes

backports #15560 to 5.x

Testing

Docs

… and hostname (withastro#15560)

The protocol validation in validateForwardedHeaders() passed the full pattern
object to matchPattern(), which also checked hostname against the hardcoded
test URL (example.com). Pass only { protocol } to matchPattern() so that only
the protocol field is validated; the host+proto combination is already checked
in the host validation block below.

Fixes withastro#15559
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Feb 20, 2026

🦋 Changeset detected

Latest commit: 93bd131

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-actions github-actions bot added the pkg: astro Related to the core `astro` package (scope) label Feb 20, 2026
@louisescher louisescher merged commit efae11c into withastro:5-legacy Feb 24, 2026
5 checks passed
@github-actions
Copy link
Copy Markdown
Contributor

📊 Dependency Size Changes

Warning

This PR adds 46.9 MB of new dependencies, which exceeds the threshold of 100 kB.

📦 Package 📏 Size
@cloudflare/workerd-linux-64@1.20250428.0 → @cloudflare/workerd-linux-64@1.20260219.0 21 MB
@img/sharp-libvips-linux-x64@1.0.4 -16.2 MB
miniflare@4.20250428.1 → miniflare@4.20260219.0 10.9 MB
@esbuild/linux-x64@0.25.2 -10.3 MB
wrangler@4.14.1 → wrangler@4.67.0 8.9 MB
react-dom@19.2.4 7.3 MB
react-dom@19.2.3 -7.3 MB
@astrojs/compiler-binding-linux-x64-gnu@0.1.1 6.7 MB
react-dom@19.1.1 -6.6 MB
vite-plugin-vue-devtools@8.0.6 6 MB
@biomejs/cli-linux-x64@2.3.6 → @biomejs/cli-linux-x64@2.4.2 5.5 MB
zod@4.3.6 4.3 MB
zod@4.3.5 -4.3 MB
vite-plugin-inspect@11.3.3 3.7 MB
@cloudflare/vite-plugin@1.25.2 3.4 MB
@types/node@24.10.13 2.5 MB
@types/node@22.19.11 2.4 MB
@types/node@22.19.7 -2.4 MB
@types/node@25.2.3 2.4 MB
@types/node@20.19.33 2.3 MB
turbo-linux-64@2.7.5 → turbo-linux-64@2.8.10 -2.3 MB
@types/node@20.19.30 -2.3 MB
vite@7.3.1 2.2 MB
mocha@10.8.2 -2.1 MB
prismjs@1.30.0 2.1 MB
valibot@1.2.0 1.7 MB
@types/node@17.0.45 -1.7 MB
glob@13.0.3 1.6 MB
undici@7.22.0 1.5 MB
undici@7.18.2 1.5 MB
vitest@4.0.18 1.5 MB
lodash@4.17.23 1.4 MB
undici@6.23.0 -1.2 MB
playwright-core@1.57.0 → playwright-core@1.58.2 1 MB
jsdoc-type-pratt-parser@4.8.0 → jsdoc-type-pratt-parser@7.1.1 841.6 kB
@types/react@19.1.1 -802.6 kB
zod@3.22.3 -615.9 kB
acorn@8.16.0 558.6 kB
acorn@8.15.0 -554.9 kB
acorn@8.14.0 -546.8 kB
@isaacs/cliui@9.0.0 522.4 kB
lightningcss-linux-x64-gnu@1.30.2 → lightningcss-linux-x64-gnu@1.31.1 518.5 kB
sharp@0.33.5 -502.8 kB
@opencode-ai/sdk@1.1.65 459.5 kB
@vue/devtools-kit@8.0.6 449.6 kB
glob@13.0.0 -446.4 kB
@types/react@18.3.28 441.8 kB
@types/react@18.3.27 -441.7 kB
diff@5.2.0 -429.3 kB
workerpool@6.5.1 -374 kB
jackspeak@4.1.1 → jackspeak@4.2.3 362.2 kB
workerd@1.20250428.0 → workerd@1.20260219.0 354.4 kB
iconv-lite@0.4.24 -335.9 kB
diff@4.0.2 -334.8 kB
diff@4.0.4 332.4 kB
yargs@16.2.0 -286.3 kB
eslint-plugin-regexp@2.10.0 → eslint-plugin-regexp@3.0.0 -281.7 kB
@img/sharp-linux-x64@0.33.5 -281.4 kB
@cloudflare/workers-types@4.20260117.0 → @cloudflare/workers-types@4.20260228.0 275.7 kB
cheerio@1.1.2 → cheerio@1.2.0 -255.8 kB
@speed-highlight/core@1.2.14 242.2 kB
@clack/prompts@1.0.1 240.2 kB
zod-to-json-schema@3.25.1 -218.7 kB
sitemap@8.0.2 → sitemap@9.0.0 212.4 kB
@astrojs/language-server@2.16.3 206 kB
printable-characters@1.0.42 -191.6 kB
@netlify/serverless-functions-api@2.8.3 → @netlify/serverless-functions-api@2.9.0 188.3 kB
prompts@2.4.2 -186.8 kB
htmlparser2@10.0.0 → htmlparser2@10.1.0 -182.8 kB
@vitest/utils@4.0.18 181 kB
react@19.2.4 171.6 kB
react@19.2.3 -171.6 kB
playwright@1.57.0 → playwright@1.58.2 -168.3 kB
react@19.1.1 -167 kB
@typescript-eslint/eslint-plugin@8.53.0 → @typescript-eslint/eslint-plugin@8.56.0 152.9 kB
chai@6.2.2 146.6 kB
express@4.22.1 → express@5.2.1 -146.3 kB
@vitest/runner@4.0.18 143 kB
@clack/core@1.0.1 135.8 kB
esbuild@0.25.2 -134.2 kB
@valibot/to-json-schema@1.5.0 131.1 kB
knip@5.61.3 → knip@5.82.1 126.1 kB
@vitest/mocker@4.0.18 125.6 kB
@cloudflare/kv-asset-handler@0.4.0 → @cloudflare/kv-asset-handler@0.4.2 124.6 kB
yargs-parser@20.2.9 -124.4 kB
mustache@4.2.0 -113.7 kB
undici-types@7.16.0 110.1 kB
@sindresorhus/is@7.2.0 106.1 kB
@poppinss/dumper@0.6.5 104.3 kB
@typescript-eslint/scope-manager@8.53.0 → @typescript-eslint/scope-manager@8.56.0 103.5 kB
zod-validation-error@3.5.4 -100.6 kB
@vitest/expect@4.0.18 99.7 kB
unenv@2.0.0-rc.15 → unenv@2.0.0-rc.24 93.5 kB
@typescript-eslint/type-utils@8.53.0 → @typescript-eslint/type-utils@8.56.0 90.6 kB
@typescript-eslint/utils@8.53.0 → @typescript-eslint/utils@8.56.0 90.4 kB
@typescript-eslint/typescript-estree@8.53.0 → @typescript-eslint/typescript-estree@8.56.0 88.1 kB
typescript-eslint@8.53.0 → typescript-eslint@8.56.0 85.8 kB
@shikijs/themes@3.21.0 → @shikijs/themes@3.22.0 83.5 kB
scheduler@0.26.0 -82.7 kB
@vue/devtools-core@8.0.6 80 kB
import-meta-resolve@4.2.0 79.2 kB
@typescript-eslint/parser@8.53.0 → @typescript-eslint/parser@8.56.0 78.6 kB
@vitejs/plugin-vue@6.0.4 74.8 kB
@typescript-eslint/project-service@8.53.0 → @typescript-eslint/project-service@8.56.0 65.7 kB
@typescript-eslint/visitor-keys@8.53.0 → @typescript-eslint/visitor-keys@8.56.0 64.7 kB
@typescript-eslint/types@8.53.0 → @typescript-eslint/types@8.56.0 64.2 kB
@typescript-eslint/tsconfig-utils@8.53.0 → @typescript-eslint/tsconfig-utils@8.56.0 63.9 kB
@biomejs/biome@2.3.6 → @biomejs/biome@2.4.2 63.6 kB
@vitest/snapshot@4.0.18 62.7 kB
@vercel/oidc@2.0.2 → @vercel/oidc@3.2.0 62.2 kB
bgproc@0.2.0 56.5 kB
exsolve@1.0.8 -56.4 kB
glob@8.1.0 -56.2 kB
svelte@5.46.4 → svelte@5.53.1 54.7 kB
@flue/client@0.0.27 53.9 kB
@shikijs/langs@3.21.0 → @shikijs/langs@3.22.0 53 kB
acorn-walk@8.3.2 -52.4 kB
@codspeed/core@5.0.1 → @codspeed/core@5.2.0 51.6 kB
@csstools/css-color-parser@3.1.0 → @csstools/css-color-parser@4.0.1 -51.3 kB
svelte2tsx@0.7.46 → svelte2tsx@0.7.51 51.2 kB
@flue/cli@0.0.44 50.8 kB
send@0.19.2 -50.4 kB
brace-expansion@5.0.2 47.2 kB
router@2.2.0 46.9 kB
axios@1.13.2 → axios@1.13.5 46.4 kB
seroval@1.3.2 → seroval@1.5.0 45.9 kB
@isaacs/brace-expansion@5.0.0 -45.3 kB
@vitest/pretty-format@4.0.18 45.3 kB
stacktracey@2.1.8 -45.2 kB
@tailwindcss/oxide-linux-x64-gnu@4.1.18 → @tailwindcss/oxide-linux-x64-gnu@4.2.0 45.1 kB
muggle-string@0.4.1 44.7 kB
jsonwebtoken@9.0.2 -43.5 kB
@astrojs/mdx@4.3.13 43.2 kB
@csstools/media-query-list-parser@4.0.3 → @csstools/media-query-list-parser@5.0.0 -42.2 kB
sass@1.97.2 → sass@1.97.3 41.1 kB
@oxc-resolver/binding-linux-x64-gnu@11.16.3 → @oxc-resolver/binding-linux-x64-gnu@11.17.1 -41 kB
@vue/babel-plugin-jsx@2.0.1 40.9 kB
@astrojs/compiler-binding@0.1.1 38.6 kB
@astrojs/markdown-remark@6.3.10 37.1 kB
eslint-visitor-keys@5.0.0 35.9 kB
p-queue@8.1.1 → p-queue@9.1.0 35.8 kB
get-source@2.0.12 -35.5 kB
@vitest/spy@4.0.18 34.6 kB
zod-to-ts@1.2.0 -34.6 kB
@netlify/open-api@2.46.0 → @netlify/open-api@2.48.0 32.9 kB
@preact/signals-core@1.12.1 → @preact/signals-core@1.13.0 32.3 kB
as-table@1.0.55 -32.1 kB
@csstools/color-helpers@5.1.0 → @csstools/color-helpers@6.0.1 -31.7 kB
@astrojs/react@4.3.0 -31.3 kB
cliui@7.0.4 -30.6 kB
@astrojs/node@9.4.1 -30.5 kB
@csstools/css-calc@2.1.4 → @csstools/css-calc@3.1.1 -30.2 kB
@vercel/functions@2.2.13 → @vercel/functions@3.4.2 30.1 kB
error-stack-parser-es@1.0.5 30 kB
negotiator@1.0.0 28.7 kB
@csstools/postcss-progressive-custom-properties@4.2.1 → @csstools/postcss-progressive-custom-properties@5.0.0 -27.9 kB
@babel/generator@7.28.6 → @babel/generator@7.29.1 -27 kB
@vue/devtools-shared@8.0.6 27 kB
@azure/msal-browser@4.28.1 → @azure/msal-browser@4.28.2 26.9 kB
@rolldown/pluginutils@1.0.0-beta.27 -26.4 kB
tailwindcss@4.1.18 → tailwindcss@4.2.0 26.4 kB
tinyexec@1.0.2 26.1 kB
@csstools/css-tokenizer@3.0.4 → @csstools/css-tokenizer@4.0.0 -26.1 kB
enhanced-resolve@5.18.4 → enhanced-resolve@5.19.0 24.1 kB
fast-xml-parser@5.3.3 → fast-xml-parser@5.3.7 23.8 kB
boxen@8.0.1 -23.7 kB
@rolldown/pluginutils@1.0.0-rc.3 23.2 kB
@rolldown/pluginutils@1.0.0-rc.4 23.2 kB
@rolldown/pluginutils@1.0.0-rc.2 23.2 kB
@rolldown/pluginutils@1.0.0-beta.60 -23.2 kB
postcss-preset-env@10.6.1 → postcss-preset-env@11.1.3 -23.1 kB
@astrojs/compiler-rs@0.1.1 22.7 kB
@standard-schema/spec@1.1.0 22.6 kB
youch-core@0.3.3 22.5 kB
@types/react-dom@19.1.1 -22.1 kB
body-parser@1.20.4 → body-parser@2.2.2 -21.9 kB
type-is@2.0.1 21.3 kB
obug@2.1.1 21.2 kB
@astrojs/vue@5.1.4 21.1 kB
entities@7.0.0 → entities@7.0.1 -20.5 kB
fastify@5.7.1 → fastify@5.7.4 20.4 kB
avvio@9.1.0 → avvio@9.2.0 18.9 kB
jws@3.2.3 -18.5 kB
preact-render-to-string@6.6.5 → preact-render-to-string@6.6.6 18.3 kB
@isaacs/balanced-match@4.0.1 -18.2 kB
glob-to-regexp@0.4.1 -18.1 kB
balanced-match@4.0.2 17.6 kB
accepts@2.0.0 16.9 kB
color@4.2.3 -16.8 kB
@astrojs/solid-js@5.1.3 15.9 kB
youch@3.3.4 → youch@4.1.0-beta.10 15.8 kB
@astrojs/check@0.9.6 14.8 kB
@vitejs/plugin-vue-jsx@5.1.4 14.7 kB
@poppinss/colors@4.1.6 14.5 kB
yocto-spinner@0.2.3 -14.3 kB
@vitejs/plugin-react@4.7.0 → @vitejs/plugin-react@5.1.4 -14 kB
jwa@1.4.2 -14 kB
@preact/signals@2.5.1 → @preact/signals@2.8.1 13.6 kB
data-uri-to-buffer@2.0.2 -13.3 kB
seroval-plugins@1.3.3 → seroval-plugins@1.5.0 -13.2 kB
p-timeout@7.0.1 13 kB
postcss-logical@8.1.0 → postcss-logical@9.0.0 -12.6 kB
@types/minimatch@5.1.2 -12.5 kB
@astrojs/prism@3.3.0 12 kB
pino@10.2.0 → pino@10.3.1 11.5 kB
wrap-ansi@9.0.2 -11.5 kB
postcss-nesting@13.0.2 → postcss-nesting@14.0.0 -11.3 kB
serve-static@1.16.3 → serve-static@2.2.1 -11.2 kB
camelcase@8.0.0 -11.2 kB
vue@3.5.26 → vue@3.5.28 10.3 kB
@csstools/postcss-cascade-layers@5.0.2 → @csstools/postcss-cascade-layers@6.0.0 -10.3 kB
minimatch@10.1.1 → minimatch@10.2.0 10.2 kB
color-string@1.9.1 -10.1 kB
@csstools/postcss-is-pseudo-class@5.0.3 → @csstools/postcss-is-pseudo-class@6.0.0 -10 kB
unplugin-utils@0.3.1 10 kB
kleur@3.0.3 -9.9 kB
@poppinss/exception@1.2.3 9.8 kB
alpinejs@3.15.4 → alpinejs@3.15.8 9.8 kB
qs@6.14.1 → qs@6.14.2 9.8 kB
@csstools/css-parser-algorithms@3.0.5 → @csstools/css-parser-algorithms@4.0.0 -9.8 kB
perfect-debounce@2.1.0 9.6 kB
@vue/babel-plugin-resolve-type@2.0.1 9.3 kB
vite-dev-rpc@1.1.0 9.3 kB
media-typer@1.1.0 9.3 kB
tar@7.5.3 → tar@7.5.7 9.1 kB
devalue@5.6.2 → devalue@5.6.3 9.1 kB
destroy@1.2.0 -9 kB
@astrojs/yaml2ts@0.2.2 8.7 kB
@azure/msal-common@15.14.1 → @azure/msal-common@15.14.2 8.6 kB
postcss-custom-media@11.0.6 → postcss-custom-media@12.0.0 -8.6 kB
@vue/runtime-dom@3.5.26 → @vue/runtime-dom@3.5.28 8.5 kB
@netlify/edge-bundler@14.9.3 → @netlify/edge-bundler@14.9.8 8.3 kB
@parcel/watcher-linux-x64-glibc@2.5.4 → @parcel/watcher-linux-x64-glibc@2.5.6 8.2 kB
supports-hyperlinks@4.4.0 8 kB
@types/prompts@2.4.9 -8 kB
unifont@0.7.3 → unifont@0.7.4 7.9 kB
ansi-align@3.0.1 -7.7 kB
lightningcss@1.30.2 → lightningcss@1.31.1 7.2 kB
@csstools/postcss-unset-value@4.0.0 → @csstools/postcss-unset-value@5.0.0 -7.1 kB
stoppable@1.1.0 -7.1 kB
@csstools/postcss-media-minmax@2.0.9 → @csstools/postcss-media-minmax@3.0.0 -7 kB
tinyrainbow@3.0.3 7 kB
postcss-custom-properties@14.0.6 → postcss-custom-properties@15.0.0 -6.9 kB
autocannon@7.15.0 → autocannon@8.0.0 6.8 kB
terminal-link@5.0.0 6.7 kB
@types/glob@8.1.0 -6.7 kB
cli-boxes@3.0.0 -6.6 kB
path-to-regexp@0.1.12 -6.6 kB
@csstools/postcss-gradients-interpolation-method@5.0.12 → @csstools/postcss-gradients-interpolation-method@6.0.1 -6.1 kB
@csstools/postcss-mixins@1.0.0 6 kB
@csstools/postcss-initial@2.0.1 → @csstools/postcss-initial@3.0.0 -5.8 kB
@vercel/nft@0.30.4 → @vercel/nft@1.3.1 5.8 kB
@csstools/postcss-media-queries-aspect-ratio-number-values@3.0.5 → @csstools/postcss-media-queries-aspect-ratio-number-values@4.0.0 -5.8 kB
@minimistjs/subarg@1.0.0 5.6 kB
caniuse-lite@1.0.30001764 → caniuse-lite@1.0.30001769 5.5 kB
@azure/msal-node@3.8.6 → @azure/msal-node@3.8.7 5.5 kB
unist-util-visit@5.0.0 → unist-util-visit@5.1.0 5.3 kB
comment-parser@1.4.3 → comment-parser@1.4.5 5.2 kB
exit-hook@2.2.1 -4.8 kB
nanostores@0.11.4 → nanostores@1.1.0 4.6 kB
preact@10.28.2 → preact@10.28.4 -4.6 kB
p-limit@6.2.0 → p-limit@7.3.0 4.5 kB
merge-descriptors@2.0.0 4.4 kB
has-flag@5.0.1 4.3 kB
@vercel/routing-utils@5.3.2 → @vercel/routing-utils@5.3.3 4.3 kB
simple-swizzle@0.2.4 -4.1 kB
@rollup/rollup-linux-x64-gnu@4.55.1 → @rollup/rollup-linux-x64-gnu@4.58.0 4 kB
@vue/compiler-sfc@3.5.26 → @vue/compiler-sfc@3.5.28 3.8 kB
@types/mime@1.3.5 -3.8 kB
piccolore@0.1.3 3.8 kB
@csstools/postcss-alpha-function@1.0.1 → @csstools/postcss-alpha-function@2.0.2 -3.7 kB
@csstools/postcss-text-decoration-shorthand@4.0.3 → @csstools/postcss-text-decoration-shorthand@5.0.2 -3.7 kB
@cloudflare/unenv-preset@2.3.1 → @cloudflare/unenv-preset@2.14.0 3.6 kB
@csstools/selector-resolve-nested@3.1.0 → @csstools/selector-resolve-nested@4.0.0 -3.6 kB
@vue/reactivity@3.5.26 → @vue/reactivity@3.5.28 3.5 kB
widest-line@5.0.0 -3.4 kB
lru-cache@11.2.4 → lru-cache@11.2.6 3.4 kB
@csstools/cascade-layer-name-parser@2.0.5 → @csstools/cascade-layer-name-parser@3.0.0 -3.4 kB
postcss-image-set-function@7.0.0 → postcss-image-set-function@8.0.0 -3.2 kB
@publint/pack@0.1.2 → @publint/pack@0.1.4 3.2 kB
postcss-custom-selectors@8.0.5 → postcss-custom-selectors@9.0.0 -3.2 kB
fast-json-stringify@6.2.0 → fast-json-stringify@6.3.0 3.1 kB
is-arrayish@0.3.4 -3.1 kB
@csstools/postcss-light-dark-function@2.0.11 → @csstools/postcss-light-dark-function@3.0.0 -3 kB
is-promise@4.0.0 3 kB
@tailwindcss/node@4.1.18 → @tailwindcss/node@4.2.0 2.9 kB
shiki@3.21.0 → shiki@3.22.0 2.9 kB
postcss-pseudo-class-any-link@10.0.1 → postcss-pseudo-class-any-link@11.0.0 -2.8 kB
get-tsconfig@4.13.0 → get-tsconfig@4.13.6 2.7 kB
@astrojs/internal-helpers@0.7.1 → @astrojs/internal-helpers@0.7.5 2.6 kB
css-has-pseudo@7.0.3 → css-has-pseudo@8.0.0 -2.6 kB
@csstools/postcss-gamut-mapping@2.0.11 → @csstools/postcss-gamut-mapping@3.0.1 -2.5 kB
@csstools/selector-specificity@5.0.0 → @csstools/selector-specificity@6.0.0 -2.5 kB
formatly@0.2.4 → formatly@0.3.0 2.4 kB
electron-to-chromium@1.5.267 → electron-to-chromium@1.5.286 2.3 kB
@netlify/dev@4.8.7 → @netlify/dev@4.11.2 2.2 kB
@vue/runtime-core@3.5.26 → @vue/runtime-core@3.5.28 2.2 kB
@csstools/postcss-relative-color-syntax@3.0.12 → @csstools/postcss-relative-color-syntax@4.0.1 -2.1 kB
@vue/babel-helper-vue-transform-on@2.0.1 2.1 kB
@babel/parser@7.28.6 → @babel/parser@7.29.0 2 kB
@csstools/postcss-logical-resize@3.0.0 → @csstools/postcss-logical-resize@4.0.0 -2 kB
@netlify/config@24.2.0 → @netlify/config@24.4.0 2 kB
postcss-dir-pseudo-class@9.0.1 → postcss-dir-pseudo-class@10.0.0 -2 kB
@netlify/runtime-utils@2.2.1 → @netlify/runtime-utils@2.3.0 2 kB
@csstools/postcss-oklab-function@4.0.12 → @csstools/postcss-oklab-function@5.0.1 -1.9 kB
postcss-lab-function@7.0.12 → postcss-lab-function@8.0.1 -1.9 kB
css-blank-pseudo@7.0.1 → css-blank-pseudo@8.0.1 -1.8 kB
@csstools/postcss-color-mix-variadic-function-arguments@1.0.2 → @csstools/postcss-color-mix-variadic-function-arguments@2.0.1 -1.8 kB
@csstools/postcss-color-mix-function@3.0.12 → @csstools/postcss-color-mix-function@4.0.1 -1.8 kB
baseline-browser-mapping@2.9.15 → baseline-browser-mapping@2.9.19 1.7 kB
postcss-focus-within@9.0.1 → postcss-focus-within@10.0.0 -1.7 kB
@csstools/postcss-sign-functions@1.1.4 → @csstools/postcss-sign-functions@2.0.0 -1.6 kB
postcss-color-functional-notation@7.0.12 → postcss-color-functional-notation@8.0.1 -1.5 kB
sonic-boom@4.2.0 → sonic-boom@4.2.1 1.5 kB
postcss-attribute-case-insensitive@7.0.1 → postcss-attribute-case-insensitive@8.0.0 -1.5 kB
postcss-double-position-gradients@6.0.4 → postcss-double-position-gradients@7.0.0 -1.5 kB
@babel/types@7.28.6 → @babel/types@7.29.0 1.5 kB
rollup@4.55.1 → rollup@4.58.0 1.4 kB
@csstools/postcss-logical-viewport-units@3.0.4 → @csstools/postcss-logical-viewport-units@4.0.0 -1.4 kB
postcss-focus-visible@10.0.1 → postcss-focus-visible@11.0.0 -1.4 kB
@csstools/postcss-color-function-display-p3-linear@1.0.1 → @csstools/postcss-color-function-display-p3-linear@2.0.1 -1.4 kB
@vue/server-renderer@3.5.26 → @vue/server-renderer@3.5.28 1.3 kB
@csstools/postcss-color-function@4.0.12 → @csstools/postcss-color-function@5.0.1 -1.3 kB
@csstools/postcss-contrast-color-function@2.0.12 → @csstools/postcss-contrast-color-function@3.0.1 -1.3 kB
@csstools/postcss-hwb-function@4.0.12 → @csstools/postcss-hwb-function@5.0.1 -1.3 kB
@csstools/postcss-logical-float-and-clear@3.0.0 → @csstools/postcss-logical-float-and-clear@4.0.0 -1.3 kB
ansi-escapes@7.2.0 → ansi-escapes@7.3.0 1.2 kB
@tailwindcss/vite@4.1.18 → @tailwindcss/vite@4.2.0 1.2 kB
@babel/traverse@7.28.6 → @babel/traverse@7.29.0 1.1 kB
@types/send@0.17.6 → @types/send@1.2.1 -1.1 kB
finalhandler@1.3.2 → finalhandler@2.1.1 -1 kB
@sveltejs/acorn-typescript@1.0.8 → @sveltejs/acorn-typescript@1.0.9 1 kB
eventemitter3@5.0.1 → eventemitter3@5.0.4 996 B
@csstools/postcss-logical-overscroll-behavior@2.0.0 → @csstools/postcss-logical-overscroll-behavior@3.0.0 -933 B
@netlify/blobs@10.5.0 → @netlify/blobs@10.7.0 -914 B
cookie-signature@1.0.7 → cookie-signature@1.2.2 910 B
@csstools/postcss-syntax-descriptor-syntax-production@1.0.1 → @csstools/postcss-syntax-descriptor-syntax-production@2.0.0 -905 B
@csstools/postcss-logical-overflow@2.0.0 → @csstools/postcss-logical-overflow@3.0.0 -900 B
postcss-selector-not@8.0.1 → postcss-selector-not@9.0.0 -894 B
postcss-color-hex-alpha@10.0.0 → postcss-color-hex-alpha@11.0.0 -822 B
esrap@2.2.1 → esrap@2.2.3 806 B
@csstools/postcss-scope-pseudo-class@4.0.1 → @csstools/postcss-scope-pseudo-class@5.0.0 -791 B
@codspeed/vitest-plugin@5.0.1 → @codspeed/vitest-plugin@5.2.0 783 B
@csstools/postcss-font-format-keywords@4.0.0 → @csstools/postcss-font-format-keywords@5.0.0 -777 B
@volar/source-map@2.4.27 → @volar/source-map@2.4.28 753 B
@csstools/postcss-nested-calc@4.0.0 → @csstools/postcss-nested-calc@5.0.0 -721 B
@babel/core@7.28.6 → @babel/core@7.29.0 713 B
postcss-place@10.0.0 → postcss-place@11.0.0 -703 B
@babel/code-frame@7.28.6 → @babel/code-frame@7.29.0 685 B
postcss-overflow-shorthand@6.0.0 → postcss-overflow-shorthand@7.0.0 -683 B
@csstools/postcss-content-alt-text@2.0.8 → @csstools/postcss-content-alt-text@3.0.0 -679 B
@csstools/postcss-random-function@2.0.1 → @csstools/postcss-random-function@3.0.0 -679 B
@sveltejs/vite-plugin-svelte@5.1.1 → @sveltejs/vite-plugin-svelte@6.2.4 635 B
publint@0.3.16 → publint@0.3.17 620 B
cssdb@8.7.0 → cssdb@8.7.1 559 B
markdown-it@14.1.0 → markdown-it@14.1.1 553 B
@csstools/postcss-ic-unit@4.0.4 → @csstools/postcss-ic-unit@5.0.0 -550 B
magicast@0.5.1 → magicast@0.5.2 543 B
@astrojs/compiler@2.13.0 → @astrojs/compiler@2.13.1 514 B
@csstools/postcss-normalize-display-values@4.0.1 → @csstools/postcss-normalize-display-values@5.0.1 -499 B
prettier@3.8.0 → prettier@3.8.1 498 B
@csstools/postcss-system-ui-font-family@1.0.0 → @csstools/postcss-system-ui-font-family@2.0.0 -494 B
@sveltejs/vite-plugin-svelte-inspector@4.0.1 → @sveltejs/vite-plugin-svelte-inspector@5.0.2 489 B
postcss-gap-properties@6.0.0 → postcss-gap-properties@7.0.0 -462 B
postcss-color-rebeccapurple@10.0.0 → postcss-color-rebeccapurple@11.0.0 -447 B
default-browser@5.4.0 → default-browser@5.5.0 417 B
css-prefers-color-scheme@10.0.0 → css-prefers-color-scheme@11.0.0 -348 B
turbo@2.7.5 → turbo@2.8.10 323 B
@typespec/ts-http-runtime@0.3.2 → @typespec/ts-http-runtime@0.3.3 -322 B
@csstools/postcss-trigonometric-functions@4.0.9 → @csstools/postcss-trigonometric-functions@5.0.0 -310 B
text-decoder@1.2.3 → text-decoder@1.2.5 303 B
@csstools/postcss-stepped-value-functions@4.0.9 → @csstools/postcss-stepped-value-functions@5.0.0 -291 B
@csstools/utilities@2.0.0 → @csstools/utilities@3.0.0 -270 B
@csstools/postcss-exponential-functions@2.0.9 → @csstools/postcss-exponential-functions@3.0.0 -264 B
@csstools/postcss-property-rule-prelude-list@1.0.0 → @csstools/postcss-property-rule-prelude-list@2.0.0 238 B
is-wsl@3.1.0 → is-wsl@3.1.1 213 B
@volar/typescript@2.4.27 → @volar/typescript@2.4.28 190 B
decode-named-character-reference@1.2.0 → decode-named-character-reference@1.3.0 -170 B
node-abi@3.86.0 → node-abi@3.87.0 123 B
@preact/preset-vite@2.10.2 → @preact/preset-vite@2.10.3 79 B
@parcel/watcher@2.5.4 → @parcel/watcher@2.5.6 75 B
@tailwindcss/oxide@4.1.18 → @tailwindcss/oxide@4.2.0 -66 B
@netlify/ai@0.3.5 → @netlify/ai@0.3.8 -61 B
@volar/kit@2.4.27 → @volar/kit@2.4.28 56 B
@volar/language-core@2.4.27 → @volar/language-core@2.4.28 56 B
@volar/language-server@2.4.27 → @volar/language-server@2.4.28 56 B
@volar/language-service@2.4.27 → @volar/language-service@2.4.28 56 B
semver@7.7.3 → semver@7.7.4 56 B
@volar/test-utils@2.4.27 → @volar/test-utils@2.4.28 56 B
@volar/vscode@2.4.27 → @volar/vscode@2.4.28 56 B
strip-json-comments@5.0.2 → strip-json-comments@5.0.3 47 B
katex@0.16.27 → katex@0.16.28 34 B
@netlify/zip-it-and-ship-it@14.2.0 → @netlify/zip-it-and-ship-it@14.3.2 -25 B
autoprefixer@10.4.23 → autoprefixer@10.4.24 18 B
b4a@1.7.3 → b4a@1.7.4 14 B
raw-body@2.5.3 → raw-body@3.0.2 12 B
@netlify/vite-plugin@2.7.19 → @netlify/vite-plugin@2.10.2 10 B
@vue/compiler-dom@3.5.26 → @vue/compiler-dom@3.5.28 -10 B
@nanostores/preact@0.5.2 → @nanostores/preact@1.0.0 5 B
ovsx@0.10.8 → ovsx@0.10.9 -3 B
@csstools/postcss-position-area-property@1.0.0 → @csstools/postcss-position-area-property@2.0.0 -1 B
@netlify/edge-functions-dev@1.0.7 → @netlify/edge-functions-dev@1.0.11 1 B
@playwright/test@1.57.0 → @playwright/test@1.58.2 1 B
@astrojs/check@link:packages/language-tools/astro-check Unknown
solid-js@1.9.10 → solid-js@1.9.11 0 B
@babel/compat-data@7.28.6 → @babel/compat-data@7.29.0 0 B
@babel/plugin-proposal-decorators@7.28.6 → @babel/plugin-proposal-decorators@7.29.0 0 B
@netlify/api@14.0.12 → @netlify/api@14.0.14 0 B
@netlify/cache@3.3.4 → @netlify/cache@3.3.5 0 B
@netlify/functions-dev@1.1.7 → @netlify/functions-dev@1.1.12 0 B
@netlify/redirects@3.1.4 → @netlify/redirects@3.1.5 0 B
@netlify/runtime@4.1.13 → @netlify/runtime@4.1.15 0 B
@parcel/watcher-wasm@2.5.4 → @parcel/watcher-wasm@2.5.6 0 B
@textlint/linter-formatter@15.5.0 → @textlint/linter-formatter@15.5.1 0 B
@textlint/module-interop@15.5.0 → @textlint/module-interop@15.5.1 0 B
@textlint/types@15.5.0 → @textlint/types@15.5.1 0 B
@shikijs/core@3.21.0 → @shikijs/core@3.22.0 0 B
@shikijs/types@3.21.0 → @shikijs/types@3.22.0 0 B
@shikijs/engine-javascript@3.21.0 → @shikijs/engine-javascript@3.22.0 0 B
@shikijs/engine-oniguruma@3.21.0 → @shikijs/engine-oniguruma@3.22.0 0 B
@test/server-entry-fake-adapter@file:packages/astro/test/fixtures/server-entry/fake-adapter Unknown
@textlint/resolver@15.5.0 → @textlint/resolver@15.5.1 0 B
@textlint/ast-node-types@15.5.0 → @textlint/ast-node-types@15.5.1 0 B
react-refresh@0.17.0 → react-refresh@0.18.0 0 B
@vue/shared@3.5.26 → @vue/shared@3.5.28 0 B
@vue/compiler-core@3.5.26 → @vue/compiler-core@3.5.28 0 B
@vue/compiler-ssr@3.5.26 → @vue/compiler-ssr@3.5.28 0 B
fontace@0.4.0 → fontace@0.4.1 0 B
oxc-resolver@11.16.3 → oxc-resolver@11.17.1 0 B
server-destroy@1.0.1 Unknown
debug@2.6.9 Unknown
ms@2.0.0 Unknown
subarg@1.0.0 Unknown
array-flatten@1.1.1 Unknown
utils-merge@1.0.1 Unknown

Total size change: 46.9 MB

dadezzz pushed a commit to dadezzz/ice-notes that referenced this pull request Mar 2, 2026
This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [astro](https://astro.build) ([source](https://github.com/withastro/astro/tree/HEAD/packages/astro)) | [`5.17.3` → `5.18.0`](https://renovatebot.com/diffs/npm/astro/5.17.3/5.18.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/astro/5.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/astro/5.17.3/5.18.0?slim=true) |

---

### Release Notes

<details>
<summary>withastro/astro (astro)</summary>

### [`v5.18.0`](https://github.com/withastro/astro/releases/tag/astro%405.18.0)

[Compare Source](https://github.com/withastro/astro/compare/astro@5.17.3...astro@5.18.0)

##### Minor Changes

- [#&#8203;15589](withastro/astro#15589) [`b7dd447`](withastro/astro@b7dd447) Thanks [@&#8203;qzio](https://github.com/qzio)! - Adds a new `security.actionBodySizeLimit` option to configure the maximum size of Astro Actions request bodies.

  This lets you increase the default 1 MB limit when your actions need to accept larger payloads. For example, actions that handle file uploads or large JSON payloads can now opt in to a higher limit.

  If you do not set this option, Astro continues to enforce the 1 MB default to help prevent abuse.

  ```js
  // astro.config.mjs
  export default defineConfig({
    security: {
      actionBodySizeLimit: 10 * 1024 * 1024, // set to 10 MB
    },
  });
  ```

##### Patch Changes

- [#&#8203;15594](withastro/astro#15594) [`efae11c`](withastro/astro@efae11c) Thanks [@&#8203;qzio](https://github.com/qzio)! - Fix X-Forwarded-Proto validation when allowedDomains includes both protocol and hostname fields. The protocol check no longer fails due to hostname mismatch against the hardcoded test URL.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zMS45IiwidXBkYXRlZEluVmVyIjoiNDMuMzEuOSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: Renovate Bot <renovate@zarantonello.dev>
Co-committed-by: Renovate Bot <renovate@zarantonello.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pkg: astro Related to the core `astro` package (scope)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants