chore(deps): update dependency astro to v5.9.2 #10

Merged
jleibl merged 1 commits from renovate/astro-5.x into main 2025-06-12 06:20:47 +00:00
Collaborator

This PR contains the following updates:

Package Type Update Change
astro (source) dependencies patch 5.9.0 -> 5.9.2

Release Notes

withastro/astro (astro)

v5.9.2

Compare Source

Patch Changes
  • #​13919 423fe60 Thanks @​ematipico! - Fixes a bug where Astro added quotes to the CSP resources.

    Only certain resources require quotes (e.g. 'self' but not https://cdn.example.com), so Astro no longer adds quotes to any resources. You must now provide the quotes yourself for resources such as 'self' when necessary:

    export default defineConfig({
      experimental: {
        csp: {
          styleDirective: {
            resources: [
    -          "self",
    +          "'self'",
              "https://cdn.example.com"
            ]
          }
        }
      }
    })
    
  • #​13914 76c5480 Thanks @​ematipico! - BREAKING CHANGE to the experimental Content Security Policy feature only

    Removes support for experimental Content Security Policy (CSP) when using the <ClientRouter /> component for view transitions.

    It is no longer possible to enable experimental CSP while using Astro's view transitions. Support was already unstable with the <ClientRouter /> because CSP required making its underlying implementation asynchronous. This caused breaking changes for several users and therefore, this PR removes support completely.

    If you are currently using the component for view transitions, please remove the experimental CSP flag as they cannot be used together.

    import { defineConfig } from 'astro/config';
    
    export default defineConfig({
      experimental: {
    -   csp: true
       }
    });
    

    Alternatively, to continue using experimental CSP in your project, you can consider migrating to the browser native View Transition API and remove the <ClientRouter /> from your project. You may be able to achieve similar results if you are not using Astro's enhancements to the native View Transitions and Navigation APIs.

    Support might be reintroduced in future releases. You can follow this experimental feature's development in the CSP RFC.

v5.9.1

Compare Source

Patch Changes

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astro](https://astro.build) ([source](https://github.com/withastro/astro/tree/HEAD/packages/astro)) | dependencies | patch | [`5.9.0` -> `5.9.2`](https://renovatebot.com/diffs/npm/astro/5.9.0/5.9.2) | --- ### Release Notes <details> <summary>withastro/astro (astro)</summary> ### [`v5.9.2`](https://github.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#592) [Compare Source](https://github.com/withastro/astro/compare/astro@5.9.1...astro@5.9.2) ##### Patch Changes - [#&#8203;13919](https://github.com/withastro/astro/pull/13919) [`423fe60`](https://github.com/withastro/astro/commit/423fe6048dfb4c24d198611f60a5815459efacd3) Thanks [@&#8203;ematipico](https://github.com/ematipico)! - Fixes a bug where Astro added quotes to the CSP resources. Only certain resources require quotes (e.g. `'self'` but not `https://cdn.example.com`), so Astro no longer adds quotes to any resources. You must now provide the quotes yourself for resources such as `'self'` when necessary: ```diff export default defineConfig({ experimental: { csp: { styleDirective: { resources: [ - "self", + "'self'", "https://cdn.example.com" ] } } } }) ``` - [#&#8203;13914](https://github.com/withastro/astro/pull/13914) [`76c5480`](https://github.com/withastro/astro/commit/76c5480ac0ab1f64df38c23a848f8d28f7640562) Thanks [@&#8203;ematipico](https://github.com/ematipico)! - **BREAKING CHANGE to the experimental Content Security Policy feature only** Removes support for experimental Content Security Policy (CSP) when using the `<ClientRouter />` component for view transitions. It is no longer possible to enable experimental CSP while using Astro's view transitions. Support was already unstable with the `<ClientRouter />` because CSP required making its underlying implementation asynchronous. This caused breaking changes for several users and therefore, this PR removes support completely. If you are currently using the component for view transitions, please remove the experimental CSP flag as they cannot be used together. ```diff import { defineConfig } from 'astro/config'; export default defineConfig({ experimental: { - csp: true } }); ``` Alternatively, to continue using experimental CSP in your project, you can [consider migrating to the browser native View Transition API](https://events-3bg.pages.dev/jotter/astro-view-transitions/) and remove the `<ClientRouter />` from your project. You may be able to achieve similar results if you are not using Astro's enhancements to the native View Transitions and Navigation APIs. Support might be reintroduced in future releases. You can follow this experimental feature's development in [the CSP RFC](https://github.com/withastro/roadmap/blob/feat/rfc-csp/proposals/0055-csp.md). ### [`v5.9.1`](https://github.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#591) [Compare Source](https://github.com/withastro/astro/compare/astro@5.9.0...astro@5.9.1) ##### Patch Changes - [#&#8203;13899](https://github.com/withastro/astro/pull/13899) [`7a1303d`](https://github.com/withastro/astro/commit/7a1303dbcebe0f0b5c8c3278669af5577115c0a3) Thanks [@&#8203;reknih](https://github.com/reknih)! - Fix bug where error pages would return invalid bodies if the upstream response was compressed - [#&#8203;13902](https://github.com/withastro/astro/pull/13902) [`051bc30`](https://github.com/withastro/astro/commit/051bc3025523756474ff5be350a7680e9fed3384) Thanks [@&#8203;arHSM](https://github.com/arHSM)! - Fixes a bug where vite virtual module ids were incorrectly added in the dev server - [#&#8203;13905](https://github.com/withastro/astro/pull/13905) [`81f71ca`](https://github.com/withastro/astro/commit/81f71ca6fd8b313b055eb4659c02a8e0e0335204) Thanks [@&#8203;jsparkdev](https://github.com/jsparkdev)! - Fixes wrong contents in CSP meta tag. - [#&#8203;13907](https://github.com/withastro/astro/pull/13907) [`8246bcc`](https://github.com/withastro/astro/commit/8246bcc0008880a49d9374136ec44488b629a2c3) Thanks [@&#8203;martrapp](https://github.com/martrapp)! - Fixes a bug that caused view transition names to be lost. - [#&#8203;13901](https://github.com/withastro/astro/pull/13901) [`37fa0a2`](https://github.com/withastro/astro/commit/37fa0a228cdfdaf20dd135835fdc84337f2d9637) Thanks [@&#8203;ansg191](https://github.com/ansg191)! - fix fallback not being removed when server island is rendered </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC40Mi4zIiwidXBkYXRlZEluVmVyIjoiNDAuNDIuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Renovate added 1 commit 2025-06-08 00:02:32 +00:00
Renovate force-pushed renovate/astro-5.x from b2ccf5de13 to c8467b8b3b 2025-06-10 00:16:30 +00:00 Compare
Renovate changed title from chore(deps): update dependency astro to v5.9.1 to chore(deps): update dependency astro to v5.9.2 2025-06-10 00:16:59 +00:00
jleibl merged commit e4d7b6a8a7 into main 2025-06-12 06:20:47 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: jleibl/jleibl.net#10
No description provided.