chore(deps-dev): bump astro from 1.6.10 to 6.4.6

[dependabot]

Bumps astro from 1.6.10 to 6.4.6.

Release notes

Sourced from astro's releases.

astro@6.4.6

Patch Changes

• #16765 b10e86e Thanks @​fkatsuhiro! - Fixes an issue where renaming an image file while the dev server is running triggers a build error. Now Astro correctly hot-reloads the image without crashing.

• #17026 add3df1 Thanks @​matthewp! - Hardens addAttribute to drop attribute names containing characters that are invalid per the HTML spec (", ', >, /, =, whitespace)

• #17033 ffda27b Thanks @​matthewp! - Validates the request origin against allowedDomains before fetching prerendered error pages. When allowedDomains is configured and the Host header matches, the original origin is used. Otherwise, the fetch falls back to localhost.

astro@6.4.5

Patch Changes

• #16985 4ecff32 Thanks @​maximslo! - Fixes the experimental.logger destination not being used for the "Server listening on..." startup message. The logger is now resolved before the server starts listening, and adapterLogger re-creates itself when the underlying logger changes so the startup message uses the correct destination.

• #16947 e0703a6 Thanks @​ematipico! - Fixes Astro.request.url not reflecting validated X-Forwarded-Proto/X-Forwarded-Host headers when security.allowedDomains is configured. Previously, only Astro.url was updated with the forwarded origin while Astro.request.url retained the socket-derived URL, causing the two to diverge behind TLS-terminating proxies.

• #16997 dc45246 Thanks @​matthewp! - Reverts a change to isNode runtime detection that caused a significant build time regression for Cloudflare adapter users with large prerendered sites

astro-vscode@2.16.17

Patch Changes

• #17254 2cffae1 Thanks @​astrobot-houston! - Fixes syntax highlighting breaking when using CSS @property at-rules inside <style> blocks. The </style> closing tag and all subsequent blocks are now correctly recognized regardless of CSS content.

Changelog

Sourced from astro's changelog.

1.9.2

Patch Changes

• #5776 6a31433ed Thanks @​ba55ie! - Fix Lit slotted content

1.9.1

Patch Changes

• adad7e966 Thanks @​matthewp! - Fix for hoisted scripts in project with spaces in the file path

1.9.0

Minor Changes

• #5666 bf210f784 Thanks @​bholmesdev! - Correctly handle spaces and capitalization in src/content/ file names. This introduces github-slugger for slug generation to ensure slugs are usable by getStaticPaths. Changes:
  • Resolve spaces and capitalization: collection/Entry With Spaces.md becomes collection/entry-with-spaces.
  • Truncate /index paths to base URL: collection/index.md becomes collection

Patch Changes

• #5720 fe316be86 Thanks @​umarov! - Do not add base path to a hoisted script body

• #5706 c2844a79c Thanks @​bluwy! - Add preact and sitemap integration to config load external list

• #5700 3aa3e00a6 Thanks @​bholmesdev! - Fix import.meta.env.DEV always being set to true when using Content Collections

1.8.0

Minor Changes

• #5647 d72da5290 Thanks @​bholmesdev! - Add astro sync CLI command for type generation

Patch Changes

• #5668 9674cf56c Thanks @​bholmesdev! - Remove stray console.log from content collections error message

• #5652 0b5098758 Thanks @​bluwy! - Use acorn to postprocess Astro globs

• #5648 853081d1c Thanks @​bholmesdev! - Prevent relative image paths in src/content/

• #5678 f8f576829 Thanks @​bluwy! - Fix code generation quotes handling

• #5635 376f67011 Thanks @​SegaraRai! - Add server.headers typing

• Updated dependencies [853081d1c, 2c65b433b]:

  • @​astrojs/markdown-remark@​1.2.0

1.7.2

... (truncated)

Commits

• 19ad1b4 [ci] release (#17023)
• f1baeea [ci] format
• ffda27b Validate origin in prerendered error page fetch against allowedDomains (#17033)
• 0408628 [ci] format
• add3df1 Harden addAttribute to reject invalid attribute names (#17026)
• cfeb958 [ci] format
• b10e86e fix : content collections image hmr (#16765)
• 0b879fb [ci] release (#16972)
• dc45246 Revert isNode workerd detection that caused Cloudflare build regression (#16997)
• 132a879 [ci] format
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 6ae6186

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[Anber]

@dependabot rebase

[dependabot]

Superseded by #1488.