astro@5.16.4

Patch Changes

• #14940 2cf79c2 Thanks @ematipico! - Fixes a bug where Astro didn't properly combine CSP resources from the csp configuration with those added using the runtime API (Astro.csp.insertDirective()) to form grammatically correct CSP headers

  Now Astro correctly deduplicate CSP resources. For example, if you have a global resource in the configuration file, and then you add a
  a new one using the runtime APIs.

@astrojs/language-server@2.16.2

Patch Changes

• #14950 385be1b Thanks @dvelasquez! - Fixes an issue with the volar-service-emmet that was pointing to a github username/repository instead of a npm package. This type of dependencies are not supported for Deno installations and it can break in enterprise environments that use private registries or don't have access to public github.

astro@5.16.3

Patch Changes

• #14889 4bceeb0 Thanks @florian-lefebvre! - Fixes actions types when using specific TypeScript configurations

• #14929 e0f277d Thanks @matthewp! - Fixes authentication bypass via double URL encoding in middleware

  Prevents attackers from bypassing path-based authentication checks using multi-level URL encoding (e.g., /%2561dmin instead of /%61dmin). Pathnames are now validated after decoding to ensure no additional encoding remains.

astro@5.16.2

Patch Changes

• #14876 b43dc7f Thanks @florian-lefebvre! - Fixes a vite warning log during builds when using npm

• #14884 10273e0 Thanks @florian-lefebvre! - Fixes a case where setting the status of a page to 404 in ssr would show an empty page (or 404.astro page if provided) instead of using the current page

astro-vscode@2.16.4

Patch Changes

• #14916 f00aa2b Thanks @Princesseuh! - Retry failed publish (again)

astro@5.16.1

Patch Changes

• #14769 b43ee71 Thanks @adriandlam! - Fixes an unhandled rejection issue when using Astro with Vercel Workflow DevKit

• #14761 345eb22 Thanks @ooga! - Updates button attributes types to allow command and commandfor

• #14866 65e214b Thanks @GameRoMan! - Fixes Astro.glob to be correctly marked as deprecated

• #14894 1ad9a5b Thanks @delucis! - Fixes support for Astro component rendering in Vitest test suites using a “client” environment such as happy-dom or jsdom

• #14782 abed929 Thanks @florian-lefebvre! - Improves syncing

astro-vscode@2.16.3

Patch Changes

• #14911 fcdf52f Thanks @Princesseuh! - Retry failed publish

astro-vscode@2.16.2

Patch Changes

• #14909 629d86b Thanks @Princesseuh! - Fixes borked publish

astro-vscode@2.16.1

Patch Changes

• #14740 abfed97 Thanks @ArmandPhilippot! - Fixes link targets in documentation following repository relocation.

• #14710 c6903cd Thanks @RomanHauksson! - Fixes the displayed description for the Content-intellisense setting to refer to the correct configuration file option

@astrojs/vercel@9.0.2

Patch Changes

• #14839 9a284cd Thanks @drwpow! - fix: Allow "node:" prefix for Node builtins