Bump astro from 4.12.2 to 6.1.6 by dependabot[bot] · Pull Request #79 · getsentry/sentry-javascript-examples

dependabot · 2026-04-21T21:23:28Z

Bumps astro from 4.12.2 to 6.1.6.

Release notes

astro@6.1.6
Patch Changes
#16202 b5c2fba Thanks @matthewp! - Fixes Actions failing with ActionsWithoutServerOutputError when using output: 'static' with an adapter
#16303 b06eabf Thanks @matthewp! - Improves handling of special characters in inline <script> content
#14924 bb4586a Thanks @aralroca! - Fixes SCSS and CSS module file changes triggering a full page reload instead of hot-updating styles in place during development
astro@6.1.5
Patch Changes
#16171 5bcd03c Thanks @Desel72! - Fixes a build error that occurred when a pre-rendered page used the <Picture> component and another page called render() on content collection entries.
#16239 7c65c04 Thanks @dataCenter430! - Fixes sync content inside <Fragment> not streaming to the browser until all async sibling expressions have resolved.
#16242 686c312 Thanks @martrapp! - Revives UnoCSS in dev mode when used with the client router.
This change partly reverts #16089, which in hindsight turned out to be too general. Instead of automatically persisting all style sheets, we now do this only for styles from Vue components.
#16192 79d86b8 Thanks @alexanderniebuhr! - Uses today’s date for Cloudflare compatibility_date in astro add cloudflare
When creating new projects, astro add cloudflare now sets compatibility_date to the current date. Previously, this date was resolved from locally installed packages, which could be unreliable in some package manager environments. Using today’s date is simpler and more reliable across environments, and is supported by workerd.
#16259 34df955 Thanks @gameroman! - Removed dlv dependency
astro@6.1.4
Patch Changes
#16197 21f9fe2 Thanks @SchahinRohani! - Remove unused re-exports from assets/utils barrel file to fix Vite build warning
#16059 6d5469e Thanks @matthewp! - Fixes Expected 'miniflare' to be defined errors and 404 responses in dev mode when using the Cloudflare adapter and the config file changes. Instead of creating a brand new Vite server on config changes, Astro now performs a Vite in-place restart, allowing the Cloudflare adapter to reuse its existing miniflare instance across restarts.
#16154 7610ba4 Thanks @Desel72! - Fixes pages with dots in their filenames (e.g. hello.world.astro) returning 404 when accessed with a trailing slash in the dev server. The trailingSlashForPath function now only forces trailingSlash: 'never' for endpoints with file extensions, allowing pages to correctly respect the user's trailingSlash config.
#16193 23425e2 Thanks @matthewp! - Fixes trailingSlash: "always" producing redirect HTML instead of the actual response for extensionless endpoints during static builds
astro@6.1.3
Patch Changes
#16161 b51f297 Thanks @matthewp! - Fixes a dev rendering issue with the Cloudflare adapter where head metadata could be missing and dev CSS/scripts could be injected in the wrong place
#16110 de669f0 Thanks @tmimmanuel! - Fixes skew protection query parameters not being appended to inter-chunk JavaScript imports in client bundles, which could cause version mismatches during rolling deployments on Vercel
#16162 a0a49e9 Thanks @rururux! - Fixes an issue where HMR would not trigger when modifying files while using @astrojs/cloudflare with prerenderEnvironment: 'node' enabled.
#16142 7454854 Thanks @rururux! - Fixes HTML content being incorrectly escaped as plain text when rendering a MDX component using the AstroContainer APIs.
#16116 12602a9 Thanks @riderx! - Fixes a bug where page-level CSS could leak between unrelated pages when traversing style parents across top-level route boundaries

... (truncated)

Changelog

Sourced from astro's changelog.

4.16.16
Patch Changes
#12542 65e50eb Thanks @kadykov! - Fix JPEG image size determination
#12525 cf0d8b0 Thanks @ematipico! - Fixes an issue where with i18n enabled, Astro couldn't render the 404.astro component for nonexistent routes.
4.16.15
Patch Changes
#12498 b140a3f Thanks @ematipico! - Fixes a regression where Astro was trying to access Request.headers
4.16.14
Patch Changes
#12480 c3b7e7c Thanks @matthewp! - Removes the default throw behavior in astro:env
#12444 28dd3ce Thanks @ematipico! - Fixes an issue where a server island hydration script might fail case the island ID misses from the DOM.
#12476 80a9a52 Thanks @florian-lefebvre! - Fixes a case where the Content Layer glob() loader would not update when renaming or deleting an entry
#12418 25baa4e Thanks @oliverlynch! - Fix cached image redownloading if it is the first asset
#12477 46f6b38 Thanks @ematipico! - Fixes an issue where the SSR build was emitting the dist/server/entry.mjs file with an incorrect import at the top of the file/
#12365 a23985b Thanks @apatel369! - Fixes an issue where Astro.currentLocale was not correctly returning the locale for 404 and 500 pages.
4.16.13
Patch Changes
#12436 453ec6b Thanks @martrapp! - Fixes a potential null access in the clientside router
#12392 0462219 Thanks @apatel369! - Fixes an issue where scripts were not correctly injected during the build. The issue was triggered when there were injected routes with the same entrypoint and different pattern
4.16.12
Patch Changes
#12420 acac0af Thanks @ematipico! - Fixes an issue where the dev server returns a 404 status code when a user middleware returns a valid Response.
4.16.11
Patch Changes
#12305 f5f7109 Thanks @florian-lefebvre! - Fixes a case where the error overlay would not escape the message

... (truncated)

Commits

1945a93 [ci] release (#16281)
bb4586a fix: avoid full-reload in scss modules (#14924)
5f3085b [ci] format
b5c2fba Skip actions server-output validation when an adapter is configured (#16202)
b06eabf Consolidate inline script escaping into shared utility (#16303)
92fc030 refactor(core): rename logger internal types (#16271)
ba18015 [ci] format
d198e82 test: port 16 routing unit tests to TypeScript (#16266)
673a871 [ci] release (#16244)
fab9c00 chore: upgrade biome (#16246)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 4.12.2 to 6.1.6. - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v4.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.6/packages/astro) --- updated-dependencies: - dependency-name: astro dependency-version: 6.1.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

cursor

Cursor Bugbot has reviewed your changes and found 3 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


Astro 6 removed output: 'hybrid' causing build failure
High Severity
Bumping astro to ^6.1.6 breaks the project because output: 'hybrid' was removed in Astro 5.0. The astro.config.mjs still uses output: 'hybrid', which will now throw an error at startup. In Astro 5+, the hybrid behavior was merged into output: 'static', so the config needs to be updated (or the output key removed entirely).
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@astrojs/node v8 incompatible with Astro 6
High Severity
The @astrojs/node dependency at ^8.2.5 is incompatible with Astro 6. The @astrojs/node v8.x series targets Astro 4.x, v9.x targets Astro 5.x, and v10.x targets Astro 6.x. This will cause peer dependency conflicts and likely runtime failures since the adapter's internal APIs changed across these major versions.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:39Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@sentry/astro 8.9.2 incompatible with Astro 6 internals
High Severity
The pinned @sentry/astro at 8.9.2 predates Astro 6 support, which was only added in a later version (PR #19745, March 2026). Astro 6 changed internal middleware context APIs — specifically, the route manifest moved from ctx.[Symbol.for('context.routes')] to ctx.[Symbol.for('astro.pipeline')]. Version 8.9.2 will fail at runtime when its middleware tries to access the old symbols.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

dependabot · 2026-05-13T23:50:56Z

Superseded by #85.

dependabot · 2026-04-21T21:23:28Z

Bumps astro from 4.12.2 to 6.1.6.

Release notes

Sourced from astro's releases.

astro@6.1.6
Patch Changes
#16202 b5c2fba Thanks @matthewp! - Fixes Actions failing with ActionsWithoutServerOutputError when using output: 'static' with an adapter
#16303 b06eabf Thanks @matthewp! - Improves handling of special characters in inline <script> content
#14924 bb4586a Thanks @aralroca! - Fixes SCSS and CSS module file changes triggering a full page reload instead of hot-updating styles in place during development
astro@6.1.5
Patch Changes
#16171 5bcd03c Thanks @Desel72! - Fixes a build error that occurred when a pre-rendered page used the <Picture> component and another page called render() on content collection entries.
#16239 7c65c04 Thanks @dataCenter430! - Fixes sync content inside <Fragment> not streaming to the browser until all async sibling expressions have resolved.
#16242 686c312 Thanks @martrapp! - Revives UnoCSS in dev mode when used with the client router.
This change partly reverts #16089, which in hindsight turned out to be too general. Instead of automatically persisting all style sheets, we now do this only for styles from Vue components.
#16192 79d86b8 Thanks @alexanderniebuhr! - Uses today’s date for Cloudflare compatibility_date in astro add cloudflare
When creating new projects, astro add cloudflare now sets compatibility_date to the current date. Previously, this date was resolved from locally installed packages, which could be unreliable in some package manager environments. Using today’s date is simpler and more reliable across environments, and is supported by workerd.
#16259 34df955 Thanks @gameroman! - Removed dlv dependency
astro@6.1.4
Patch Changes
#16197 21f9fe2 Thanks @SchahinRohani! - Remove unused re-exports from assets/utils barrel file to fix Vite build warning
#16059 6d5469e Thanks @matthewp! - Fixes Expected 'miniflare' to be defined errors and 404 responses in dev mode when using the Cloudflare adapter and the config file changes. Instead of creating a brand new Vite server on config changes, Astro now performs a Vite in-place restart, allowing the Cloudflare adapter to reuse its existing miniflare instance across restarts.
#16154 7610ba4 Thanks @Desel72! - Fixes pages with dots in their filenames (e.g. hello.world.astro) returning 404 when accessed with a trailing slash in the dev server. The trailingSlashForPath function now only forces trailingSlash: 'never' for endpoints with file extensions, allowing pages to correctly respect the user's trailingSlash config.
#16193 23425e2 Thanks @matthewp! - Fixes trailingSlash: "always" producing redirect HTML instead of the actual response for extensionless endpoints during static builds
astro@6.1.3
Patch Changes
#16161 b51f297 Thanks @matthewp! - Fixes a dev rendering issue with the Cloudflare adapter where head metadata could be missing and dev CSS/scripts could be injected in the wrong place
#16110 de669f0 Thanks @tmimmanuel! - Fixes skew protection query parameters not being appended to inter-chunk JavaScript imports in client bundles, which could cause version mismatches during rolling deployments on Vercel
#16162 a0a49e9 Thanks @rururux! - Fixes an issue where HMR would not trigger when modifying files while using @astrojs/cloudflare with prerenderEnvironment: 'node' enabled.
#16142 7454854 Thanks @rururux! - Fixes HTML content being incorrectly escaped as plain text when rendering a MDX component using the AstroContainer APIs.
#16116 12602a9 Thanks @riderx! - Fixes a bug where page-level CSS could leak between unrelated pages when traversing style parents across top-level route boundaries

... (truncated)

Changelog

Sourced from astro's changelog.

4.16.16
Patch Changes
#12542 65e50eb Thanks @kadykov! - Fix JPEG image size determination
#12525 cf0d8b0 Thanks @ematipico! - Fixes an issue where with i18n enabled, Astro couldn't render the 404.astro component for nonexistent routes.
4.16.15
Patch Changes
#12498 b140a3f Thanks @ematipico! - Fixes a regression where Astro was trying to access Request.headers
4.16.14
Patch Changes
#12480 c3b7e7c Thanks @matthewp! - Removes the default throw behavior in astro:env
#12444 28dd3ce Thanks @ematipico! - Fixes an issue where a server island hydration script might fail case the island ID misses from the DOM.
#12476 80a9a52 Thanks @florian-lefebvre! - Fixes a case where the Content Layer glob() loader would not update when renaming or deleting an entry
#12418 25baa4e Thanks @oliverlynch! - Fix cached image redownloading if it is the first asset
#12477 46f6b38 Thanks @ematipico! - Fixes an issue where the SSR build was emitting the dist/server/entry.mjs file with an incorrect import at the top of the file/
#12365 a23985b Thanks @apatel369! - Fixes an issue where Astro.currentLocale was not correctly returning the locale for 404 and 500 pages.
4.16.13
Patch Changes
#12436 453ec6b Thanks @martrapp! - Fixes a potential null access in the clientside router
#12392 0462219 Thanks @apatel369! - Fixes an issue where scripts were not correctly injected during the build. The issue was triggered when there were injected routes with the same entrypoint and different pattern
4.16.12
Patch Changes
#12420 acac0af Thanks @ematipico! - Fixes an issue where the dev server returns a 404 status code when a user middleware returns a valid Response.
4.16.11
Patch Changes
#12305 f5f7109 Thanks @florian-lefebvre! - Fixes a case where the error overlay would not escape the message

... (truncated)

Commits

1945a93 [ci] release (#16281)
bb4586a fix: avoid full-reload in scss modules (#14924)
5f3085b [ci] format
b5c2fba Skip actions server-output validation when an adapter is configured (#16202)
b06eabf Consolidate inline script escaping into shared utility (#16303)
92fc030 refactor(core): rename logger internal types (#16271)
ba18015 [ci] format
d198e82 test: port 16 routing unit tests to TypeScript (#16266)
673a871 [ci] release (#16244)
fab9c00 chore: upgrade biome (#16246)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 4.12.2 to 6.1.6. - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v4.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.6/packages/astro) --- updated-dependencies: - dependency-name: astro dependency-version: 6.1.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

cursor

Cursor Bugbot has reviewed your changes and found 3 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


Astro 6 removed output: 'hybrid' causing build failure
High Severity
Bumping astro to ^6.1.6 breaks the project because output: 'hybrid' was removed in Astro 5.0. The astro.config.mjs still uses output: 'hybrid', which will now throw an error at startup. In Astro 5+, the hybrid behavior was merged into output: 'static', so the config needs to be updated (or the output key removed entirely).
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@astrojs/node v8 incompatible with Astro 6
High Severity
The @astrojs/node dependency at ^8.2.5 is incompatible with Astro 6. The @astrojs/node v8.x series targets Astro 4.x, v9.x targets Astro 5.x, and v10.x targets Astro 6.x. This will cause peer dependency conflicts and likely runtime failures since the adapter's internal APIs changed across these major versions.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:39Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@sentry/astro 8.9.2 incompatible with Astro 6 internals
High Severity
The pinned @sentry/astro at 8.9.2 predates Astro 6 support, which was only added in a later version (PR #19745, March 2026). Astro 6 changed internal middleware context APIs — specifically, the route manifest moved from ctx.[Symbol.for('context.routes')] to ctx.[Symbol.for('astro.pipeline')]. Version 8.9.2 will fail at runtime when its middleware tries to access the old symbols.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

dependabot · 2026-05-13T23:50:56Z

Superseded by #85.

dependabot · 2026-04-21T21:23:28Z

Bumps astro from 4.12.2 to 6.1.6.

Release notes

Sourced from astro's releases.

astro@6.1.6
Patch Changes
#16202 b5c2fba Thanks @matthewp! - Fixes Actions failing with ActionsWithoutServerOutputError when using output: 'static' with an adapter
#16303 b06eabf Thanks @matthewp! - Improves handling of special characters in inline <script> content
#14924 bb4586a Thanks @aralroca! - Fixes SCSS and CSS module file changes triggering a full page reload instead of hot-updating styles in place during development
astro@6.1.5
Patch Changes
#16171 5bcd03c Thanks @Desel72! - Fixes a build error that occurred when a pre-rendered page used the <Picture> component and another page called render() on content collection entries.
#16239 7c65c04 Thanks @dataCenter430! - Fixes sync content inside <Fragment> not streaming to the browser until all async sibling expressions have resolved.
#16242 686c312 Thanks @martrapp! - Revives UnoCSS in dev mode when used with the client router.
This change partly reverts #16089, which in hindsight turned out to be too general. Instead of automatically persisting all style sheets, we now do this only for styles from Vue components.
#16192 79d86b8 Thanks @alexanderniebuhr! - Uses today’s date for Cloudflare compatibility_date in astro add cloudflare
When creating new projects, astro add cloudflare now sets compatibility_date to the current date. Previously, this date was resolved from locally installed packages, which could be unreliable in some package manager environments. Using today’s date is simpler and more reliable across environments, and is supported by workerd.
#16259 34df955 Thanks @gameroman! - Removed dlv dependency
astro@6.1.4
Patch Changes
#16197 21f9fe2 Thanks @SchahinRohani! - Remove unused re-exports from assets/utils barrel file to fix Vite build warning
#16059 6d5469e Thanks @matthewp! - Fixes Expected 'miniflare' to be defined errors and 404 responses in dev mode when using the Cloudflare adapter and the config file changes. Instead of creating a brand new Vite server on config changes, Astro now performs a Vite in-place restart, allowing the Cloudflare adapter to reuse its existing miniflare instance across restarts.
#16154 7610ba4 Thanks @Desel72! - Fixes pages with dots in their filenames (e.g. hello.world.astro) returning 404 when accessed with a trailing slash in the dev server. The trailingSlashForPath function now only forces trailingSlash: 'never' for endpoints with file extensions, allowing pages to correctly respect the user's trailingSlash config.
#16193 23425e2 Thanks @matthewp! - Fixes trailingSlash: "always" producing redirect HTML instead of the actual response for extensionless endpoints during static builds
astro@6.1.3
Patch Changes
#16161 b51f297 Thanks @matthewp! - Fixes a dev rendering issue with the Cloudflare adapter where head metadata could be missing and dev CSS/scripts could be injected in the wrong place
#16110 de669f0 Thanks @tmimmanuel! - Fixes skew protection query parameters not being appended to inter-chunk JavaScript imports in client bundles, which could cause version mismatches during rolling deployments on Vercel
#16162 a0a49e9 Thanks @rururux! - Fixes an issue where HMR would not trigger when modifying files while using @astrojs/cloudflare with prerenderEnvironment: 'node' enabled.
#16142 7454854 Thanks @rururux! - Fixes HTML content being incorrectly escaped as plain text when rendering a MDX component using the AstroContainer APIs.
#16116 12602a9 Thanks @riderx! - Fixes a bug where page-level CSS could leak between unrelated pages when traversing style parents across top-level route boundaries

... (truncated)

Changelog

Sourced from astro's changelog.

4.16.16
Patch Changes
#12542 65e50eb Thanks @kadykov! - Fix JPEG image size determination
#12525 cf0d8b0 Thanks @ematipico! - Fixes an issue where with i18n enabled, Astro couldn't render the 404.astro component for nonexistent routes.
4.16.15
Patch Changes
#12498 b140a3f Thanks @ematipico! - Fixes a regression where Astro was trying to access Request.headers
4.16.14
Patch Changes
#12480 c3b7e7c Thanks @matthewp! - Removes the default throw behavior in astro:env
#12444 28dd3ce Thanks @ematipico! - Fixes an issue where a server island hydration script might fail case the island ID misses from the DOM.
#12476 80a9a52 Thanks @florian-lefebvre! - Fixes a case where the Content Layer glob() loader would not update when renaming or deleting an entry
#12418 25baa4e Thanks @oliverlynch! - Fix cached image redownloading if it is the first asset
#12477 46f6b38 Thanks @ematipico! - Fixes an issue where the SSR build was emitting the dist/server/entry.mjs file with an incorrect import at the top of the file/
#12365 a23985b Thanks @apatel369! - Fixes an issue where Astro.currentLocale was not correctly returning the locale for 404 and 500 pages.
4.16.13
Patch Changes
#12436 453ec6b Thanks @martrapp! - Fixes a potential null access in the clientside router
#12392 0462219 Thanks @apatel369! - Fixes an issue where scripts were not correctly injected during the build. The issue was triggered when there were injected routes with the same entrypoint and different pattern
4.16.12
Patch Changes
#12420 acac0af Thanks @ematipico! - Fixes an issue where the dev server returns a 404 status code when a user middleware returns a valid Response.
4.16.11
Patch Changes
#12305 f5f7109 Thanks @florian-lefebvre! - Fixes a case where the error overlay would not escape the message

... (truncated)

Commits

1945a93 [ci] release (#16281)
bb4586a fix: avoid full-reload in scss modules (#14924)
5f3085b [ci] format
b5c2fba Skip actions server-output validation when an adapter is configured (#16202)
b06eabf Consolidate inline script escaping into shared utility (#16303)
92fc030 refactor(core): rename logger internal types (#16271)
ba18015 [ci] format
d198e82 test: port 16 routing unit tests to TypeScript (#16266)
673a871 [ci] release (#16244)
fab9c00 chore: upgrade biome (#16246)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 4.12.2 to 6.1.6. - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v4.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.6/packages/astro) --- updated-dependencies: - dependency-name: astro dependency-version: 6.1.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

cursor

Cursor Bugbot has reviewed your changes and found 3 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


Astro 6 removed output: 'hybrid' causing build failure
High Severity
Bumping astro to ^6.1.6 breaks the project because output: 'hybrid' was removed in Astro 5.0. The astro.config.mjs still uses output: 'hybrid', which will now throw an error at startup. In Astro 5+, the hybrid behavior was merged into output: 'static', so the config needs to be updated (or the output key removed entirely).
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@astrojs/node v8 incompatible with Astro 6
High Severity
The @astrojs/node dependency at ^8.2.5 is incompatible with Astro 6. The @astrojs/node v8.x series targets Astro 4.x, v9.x targets Astro 5.x, and v10.x targets Astro 6.x. This will cause peer dependency conflicts and likely runtime failures since the adapter's internal APIs changed across these major versions.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:39Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@sentry/astro 8.9.2 incompatible with Astro 6 internals
High Severity
The pinned @sentry/astro at 8.9.2 predates Astro 6 support, which was only added in a later version (PR #19745, March 2026). Astro 6 changed internal middleware context APIs — specifically, the route manifest moved from ctx.[Symbol.for('context.routes')] to ctx.[Symbol.for('astro.pipeline')]. Version 8.9.2 will fail at runtime when its middleware tries to access the old symbols.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

dependabot · 2026-05-13T23:50:56Z

Superseded by #85.

dependabot · 2026-04-21T21:23:28Z

Bumps astro from 4.12.2 to 6.1.6.

Release notes

Sourced from astro's releases.

astro@6.1.6
Patch Changes
#16202 b5c2fba Thanks @matthewp! - Fixes Actions failing with ActionsWithoutServerOutputError when using output: 'static' with an adapter
#16303 b06eabf Thanks @matthewp! - Improves handling of special characters in inline <script> content
#14924 bb4586a Thanks @aralroca! - Fixes SCSS and CSS module file changes triggering a full page reload instead of hot-updating styles in place during development
astro@6.1.5
Patch Changes
#16171 5bcd03c Thanks @Desel72! - Fixes a build error that occurred when a pre-rendered page used the <Picture> component and another page called render() on content collection entries.
#16239 7c65c04 Thanks @dataCenter430! - Fixes sync content inside <Fragment> not streaming to the browser until all async sibling expressions have resolved.
#16242 686c312 Thanks @martrapp! - Revives UnoCSS in dev mode when used with the client router.
This change partly reverts #16089, which in hindsight turned out to be too general. Instead of automatically persisting all style sheets, we now do this only for styles from Vue components.
#16192 79d86b8 Thanks @alexanderniebuhr! - Uses today’s date for Cloudflare compatibility_date in astro add cloudflare
When creating new projects, astro add cloudflare now sets compatibility_date to the current date. Previously, this date was resolved from locally installed packages, which could be unreliable in some package manager environments. Using today’s date is simpler and more reliable across environments, and is supported by workerd.
#16259 34df955 Thanks @gameroman! - Removed dlv dependency
astro@6.1.4
Patch Changes
#16197 21f9fe2 Thanks @SchahinRohani! - Remove unused re-exports from assets/utils barrel file to fix Vite build warning
#16059 6d5469e Thanks @matthewp! - Fixes Expected 'miniflare' to be defined errors and 404 responses in dev mode when using the Cloudflare adapter and the config file changes. Instead of creating a brand new Vite server on config changes, Astro now performs a Vite in-place restart, allowing the Cloudflare adapter to reuse its existing miniflare instance across restarts.
#16154 7610ba4 Thanks @Desel72! - Fixes pages with dots in their filenames (e.g. hello.world.astro) returning 404 when accessed with a trailing slash in the dev server. The trailingSlashForPath function now only forces trailingSlash: 'never' for endpoints with file extensions, allowing pages to correctly respect the user's trailingSlash config.
#16193 23425e2 Thanks @matthewp! - Fixes trailingSlash: "always" producing redirect HTML instead of the actual response for extensionless endpoints during static builds
astro@6.1.3
Patch Changes
#16161 b51f297 Thanks @matthewp! - Fixes a dev rendering issue with the Cloudflare adapter where head metadata could be missing and dev CSS/scripts could be injected in the wrong place
#16110 de669f0 Thanks @tmimmanuel! - Fixes skew protection query parameters not being appended to inter-chunk JavaScript imports in client bundles, which could cause version mismatches during rolling deployments on Vercel
#16162 a0a49e9 Thanks @rururux! - Fixes an issue where HMR would not trigger when modifying files while using @astrojs/cloudflare with prerenderEnvironment: 'node' enabled.
#16142 7454854 Thanks @rururux! - Fixes HTML content being incorrectly escaped as plain text when rendering a MDX component using the AstroContainer APIs.
#16116 12602a9 Thanks @riderx! - Fixes a bug where page-level CSS could leak between unrelated pages when traversing style parents across top-level route boundaries

... (truncated)

Changelog

Sourced from astro's changelog.

4.16.16
Patch Changes
#12542 65e50eb Thanks @kadykov! - Fix JPEG image size determination
#12525 cf0d8b0 Thanks @ematipico! - Fixes an issue where with i18n enabled, Astro couldn't render the 404.astro component for nonexistent routes.
4.16.15
Patch Changes
#12498 b140a3f Thanks @ematipico! - Fixes a regression where Astro was trying to access Request.headers
4.16.14
Patch Changes
#12480 c3b7e7c Thanks @matthewp! - Removes the default throw behavior in astro:env
#12444 28dd3ce Thanks @ematipico! - Fixes an issue where a server island hydration script might fail case the island ID misses from the DOM.
#12476 80a9a52 Thanks @florian-lefebvre! - Fixes a case where the Content Layer glob() loader would not update when renaming or deleting an entry
#12418 25baa4e Thanks @oliverlynch! - Fix cached image redownloading if it is the first asset
#12477 46f6b38 Thanks @ematipico! - Fixes an issue where the SSR build was emitting the dist/server/entry.mjs file with an incorrect import at the top of the file/
#12365 a23985b Thanks @apatel369! - Fixes an issue where Astro.currentLocale was not correctly returning the locale for 404 and 500 pages.
4.16.13
Patch Changes
#12436 453ec6b Thanks @martrapp! - Fixes a potential null access in the clientside router
#12392 0462219 Thanks @apatel369! - Fixes an issue where scripts were not correctly injected during the build. The issue was triggered when there were injected routes with the same entrypoint and different pattern
4.16.12
Patch Changes
#12420 acac0af Thanks @ematipico! - Fixes an issue where the dev server returns a 404 status code when a user middleware returns a valid Response.
4.16.11
Patch Changes
#12305 f5f7109 Thanks @florian-lefebvre! - Fixes a case where the error overlay would not escape the message

... (truncated)

Commits

1945a93 [ci] release (#16281)
bb4586a fix: avoid full-reload in scss modules (#14924)
5f3085b [ci] format
b5c2fba Skip actions server-output validation when an adapter is configured (#16202)
b06eabf Consolidate inline script escaping into shared utility (#16303)
92fc030 refactor(core): rename logger internal types (#16271)
ba18015 [ci] format
d198e82 test: port 16 routing unit tests to TypeScript (#16266)
673a871 [ci] release (#16244)
fab9c00 chore: upgrade biome (#16246)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 4.12.2 to 6.1.6. - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v4.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.6/packages/astro) --- updated-dependencies: - dependency-name: astro dependency-version: 6.1.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

cursor

Cursor Bugbot has reviewed your changes and found 3 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


Astro 6 removed output: 'hybrid' causing build failure
High Severity
Bumping astro to ^6.1.6 breaks the project because output: 'hybrid' was removed in Astro 5.0. The astro.config.mjs still uses output: 'hybrid', which will now throw an error at startup. In Astro 5+, the hybrid behavior was merged into output: 'static', so the config needs to be updated (or the output key removed entirely).
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@astrojs/node v8 incompatible with Astro 6
High Severity
The @astrojs/node dependency at ^8.2.5 is incompatible with Astro 6. The @astrojs/node v8.x series targets Astro 4.x, v9.x targets Astro 5.x, and v10.x targets Astro 6.x. This will cause peer dependency conflicts and likely runtime failures since the adapter's internal APIs changed across these major versions.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:39Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@sentry/astro 8.9.2 incompatible with Astro 6 internals
High Severity
The pinned @sentry/astro at 8.9.2 predates Astro 6 support, which was only added in a later version (PR #19745, March 2026). Astro 6 changed internal middleware context APIs — specifically, the route manifest moved from ctx.[Symbol.for('context.routes')] to ctx.[Symbol.for('astro.pipeline')]. Version 8.9.2 will fail at runtime when its middleware tries to access the old symbols.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

dependabot · 2026-05-13T23:50:56Z

Superseded by #85.

dependabot · 2026-04-21T21:23:28Z

Bumps astro from 4.12.2 to 6.1.6.

Release notes

Sourced from astro's releases.

astro@6.1.6
Patch Changes
#16202 b5c2fba Thanks @matthewp! - Fixes Actions failing with ActionsWithoutServerOutputError when using output: 'static' with an adapter
#16303 b06eabf Thanks @matthewp! - Improves handling of special characters in inline <script> content
#14924 bb4586a Thanks @aralroca! - Fixes SCSS and CSS module file changes triggering a full page reload instead of hot-updating styles in place during development
astro@6.1.5
Patch Changes
#16171 5bcd03c Thanks @Desel72! - Fixes a build error that occurred when a pre-rendered page used the <Picture> component and another page called render() on content collection entries.
#16239 7c65c04 Thanks @dataCenter430! - Fixes sync content inside <Fragment> not streaming to the browser until all async sibling expressions have resolved.
#16242 686c312 Thanks @martrapp! - Revives UnoCSS in dev mode when used with the client router.
This change partly reverts #16089, which in hindsight turned out to be too general. Instead of automatically persisting all style sheets, we now do this only for styles from Vue components.
#16192 79d86b8 Thanks @alexanderniebuhr! - Uses today’s date for Cloudflare compatibility_date in astro add cloudflare
When creating new projects, astro add cloudflare now sets compatibility_date to the current date. Previously, this date was resolved from locally installed packages, which could be unreliable in some package manager environments. Using today’s date is simpler and more reliable across environments, and is supported by workerd.
#16259 34df955 Thanks @gameroman! - Removed dlv dependency
astro@6.1.4
Patch Changes
#16197 21f9fe2 Thanks @SchahinRohani! - Remove unused re-exports from assets/utils barrel file to fix Vite build warning
#16059 6d5469e Thanks @matthewp! - Fixes Expected 'miniflare' to be defined errors and 404 responses in dev mode when using the Cloudflare adapter and the config file changes. Instead of creating a brand new Vite server on config changes, Astro now performs a Vite in-place restart, allowing the Cloudflare adapter to reuse its existing miniflare instance across restarts.
#16154 7610ba4 Thanks @Desel72! - Fixes pages with dots in their filenames (e.g. hello.world.astro) returning 404 when accessed with a trailing slash in the dev server. The trailingSlashForPath function now only forces trailingSlash: 'never' for endpoints with file extensions, allowing pages to correctly respect the user's trailingSlash config.
#16193 23425e2 Thanks @matthewp! - Fixes trailingSlash: "always" producing redirect HTML instead of the actual response for extensionless endpoints during static builds
astro@6.1.3
Patch Changes
#16161 b51f297 Thanks @matthewp! - Fixes a dev rendering issue with the Cloudflare adapter where head metadata could be missing and dev CSS/scripts could be injected in the wrong place
#16110 de669f0 Thanks @tmimmanuel! - Fixes skew protection query parameters not being appended to inter-chunk JavaScript imports in client bundles, which could cause version mismatches during rolling deployments on Vercel
#16162 a0a49e9 Thanks @rururux! - Fixes an issue where HMR would not trigger when modifying files while using @astrojs/cloudflare with prerenderEnvironment: 'node' enabled.
#16142 7454854 Thanks @rururux! - Fixes HTML content being incorrectly escaped as plain text when rendering a MDX component using the AstroContainer APIs.
#16116 12602a9 Thanks @riderx! - Fixes a bug where page-level CSS could leak between unrelated pages when traversing style parents across top-level route boundaries

... (truncated)

Changelog

Sourced from astro's changelog.

4.16.16
Patch Changes
#12542 65e50eb Thanks @kadykov! - Fix JPEG image size determination
#12525 cf0d8b0 Thanks @ematipico! - Fixes an issue where with i18n enabled, Astro couldn't render the 404.astro component for nonexistent routes.
4.16.15
Patch Changes
#12498 b140a3f Thanks @ematipico! - Fixes a regression where Astro was trying to access Request.headers
4.16.14
Patch Changes
#12480 c3b7e7c Thanks @matthewp! - Removes the default throw behavior in astro:env
#12444 28dd3ce Thanks @ematipico! - Fixes an issue where a server island hydration script might fail case the island ID misses from the DOM.
#12476 80a9a52 Thanks @florian-lefebvre! - Fixes a case where the Content Layer glob() loader would not update when renaming or deleting an entry
#12418 25baa4e Thanks @oliverlynch! - Fix cached image redownloading if it is the first asset
#12477 46f6b38 Thanks @ematipico! - Fixes an issue where the SSR build was emitting the dist/server/entry.mjs file with an incorrect import at the top of the file/
#12365 a23985b Thanks @apatel369! - Fixes an issue where Astro.currentLocale was not correctly returning the locale for 404 and 500 pages.
4.16.13
Patch Changes
#12436 453ec6b Thanks @martrapp! - Fixes a potential null access in the clientside router
#12392 0462219 Thanks @apatel369! - Fixes an issue where scripts were not correctly injected during the build. The issue was triggered when there were injected routes with the same entrypoint and different pattern
4.16.12
Patch Changes
#12420 acac0af Thanks @ematipico! - Fixes an issue where the dev server returns a 404 status code when a user middleware returns a valid Response.
4.16.11
Patch Changes
#12305 f5f7109 Thanks @florian-lefebvre! - Fixes a case where the error overlay would not escape the message

... (truncated)

Commits

1945a93 [ci] release (#16281)
bb4586a fix: avoid full-reload in scss modules (#14924)
5f3085b [ci] format
b5c2fba Skip actions server-output validation when an adapter is configured (#16202)
b06eabf Consolidate inline script escaping into shared utility (#16303)
92fc030 refactor(core): rename logger internal types (#16271)
ba18015 [ci] format
d198e82 test: port 16 routing unit tests to TypeScript (#16266)
673a871 [ci] release (#16244)
fab9c00 chore: upgrade biome (#16246)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 4.12.2 to 6.1.6. - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v4.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.6/packages/astro) --- updated-dependencies: - dependency-name: astro dependency-version: 6.1.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

cursor

Cursor Bugbot has reviewed your changes and found 3 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


Astro 6 removed output: 'hybrid' causing build failure
High Severity
Bumping astro to ^6.1.6 breaks the project because output: 'hybrid' was removed in Astro 5.0. The astro.config.mjs still uses output: 'hybrid', which will now throw an error at startup. In Astro 5+, the hybrid behavior was merged into output: 'static', so the config needs to be updated (or the output key removed entirely).
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@astrojs/node v8 incompatible with Astro 6
High Severity
The @astrojs/node dependency at ^8.2.5 is incompatible with Astro 6. The @astrojs/node v8.x series targets Astro 4.x, v9.x targets Astro 5.x, and v10.x targets Astro 6.x. This will cause peer dependency conflicts and likely runtime failures since the adapter's internal APIs changed across these major versions.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:39Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@sentry/astro 8.9.2 incompatible with Astro 6 internals
High Severity
The pinned @sentry/astro at 8.9.2 predates Astro 6 support, which was only added in a later version (PR #19745, March 2026). Astro 6 changed internal middleware context APIs — specifically, the route manifest moved from ctx.[Symbol.for('context.routes')] to ctx.[Symbol.for('astro.pipeline')]. Version 8.9.2 will fail at runtime when its middleware tries to access the old symbols.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

dependabot · 2026-05-13T23:50:56Z

Superseded by #85.

dependabot · 2026-04-21T21:23:28Z

Bumps astro from 4.12.2 to 6.1.6.

Release notes

Sourced from astro's releases.

astro@6.1.6
Patch Changes
#16202 b5c2fba Thanks @matthewp! - Fixes Actions failing with ActionsWithoutServerOutputError when using output: 'static' with an adapter
#16303 b06eabf Thanks @matthewp! - Improves handling of special characters in inline <script> content
#14924 bb4586a Thanks @aralroca! - Fixes SCSS and CSS module file changes triggering a full page reload instead of hot-updating styles in place during development
astro@6.1.5
Patch Changes
#16171 5bcd03c Thanks @Desel72! - Fixes a build error that occurred when a pre-rendered page used the <Picture> component and another page called render() on content collection entries.
#16239 7c65c04 Thanks @dataCenter430! - Fixes sync content inside <Fragment> not streaming to the browser until all async sibling expressions have resolved.
#16242 686c312 Thanks @martrapp! - Revives UnoCSS in dev mode when used with the client router.
This change partly reverts #16089, which in hindsight turned out to be too general. Instead of automatically persisting all style sheets, we now do this only for styles from Vue components.
#16192 79d86b8 Thanks @alexanderniebuhr! - Uses today’s date for Cloudflare compatibility_date in astro add cloudflare
When creating new projects, astro add cloudflare now sets compatibility_date to the current date. Previously, this date was resolved from locally installed packages, which could be unreliable in some package manager environments. Using today’s date is simpler and more reliable across environments, and is supported by workerd.
#16259 34df955 Thanks @gameroman! - Removed dlv dependency
astro@6.1.4
Patch Changes
#16197 21f9fe2 Thanks @SchahinRohani! - Remove unused re-exports from assets/utils barrel file to fix Vite build warning
#16059 6d5469e Thanks @matthewp! - Fixes Expected 'miniflare' to be defined errors and 404 responses in dev mode when using the Cloudflare adapter and the config file changes. Instead of creating a brand new Vite server on config changes, Astro now performs a Vite in-place restart, allowing the Cloudflare adapter to reuse its existing miniflare instance across restarts.
#16154 7610ba4 Thanks @Desel72! - Fixes pages with dots in their filenames (e.g. hello.world.astro) returning 404 when accessed with a trailing slash in the dev server. The trailingSlashForPath function now only forces trailingSlash: 'never' for endpoints with file extensions, allowing pages to correctly respect the user's trailingSlash config.
#16193 23425e2 Thanks @matthewp! - Fixes trailingSlash: "always" producing redirect HTML instead of the actual response for extensionless endpoints during static builds
astro@6.1.3
Patch Changes
#16161 b51f297 Thanks @matthewp! - Fixes a dev rendering issue with the Cloudflare adapter where head metadata could be missing and dev CSS/scripts could be injected in the wrong place
#16110 de669f0 Thanks @tmimmanuel! - Fixes skew protection query parameters not being appended to inter-chunk JavaScript imports in client bundles, which could cause version mismatches during rolling deployments on Vercel
#16162 a0a49e9 Thanks @rururux! - Fixes an issue where HMR would not trigger when modifying files while using @astrojs/cloudflare with prerenderEnvironment: 'node' enabled.
#16142 7454854 Thanks @rururux! - Fixes HTML content being incorrectly escaped as plain text when rendering a MDX component using the AstroContainer APIs.
#16116 12602a9 Thanks @riderx! - Fixes a bug where page-level CSS could leak between unrelated pages when traversing style parents across top-level route boundaries

... (truncated)

Changelog

Sourced from astro's changelog.

4.16.16
Patch Changes
#12542 65e50eb Thanks @kadykov! - Fix JPEG image size determination
#12525 cf0d8b0 Thanks @ematipico! - Fixes an issue where with i18n enabled, Astro couldn't render the 404.astro component for nonexistent routes.
4.16.15
Patch Changes
#12498 b140a3f Thanks @ematipico! - Fixes a regression where Astro was trying to access Request.headers
4.16.14
Patch Changes
#12480 c3b7e7c Thanks @matthewp! - Removes the default throw behavior in astro:env
#12444 28dd3ce Thanks @ematipico! - Fixes an issue where a server island hydration script might fail case the island ID misses from the DOM.
#12476 80a9a52 Thanks @florian-lefebvre! - Fixes a case where the Content Layer glob() loader would not update when renaming or deleting an entry
#12418 25baa4e Thanks @oliverlynch! - Fix cached image redownloading if it is the first asset
#12477 46f6b38 Thanks @ematipico! - Fixes an issue where the SSR build was emitting the dist/server/entry.mjs file with an incorrect import at the top of the file/
#12365 a23985b Thanks @apatel369! - Fixes an issue where Astro.currentLocale was not correctly returning the locale for 404 and 500 pages.
4.16.13
Patch Changes
#12436 453ec6b Thanks @martrapp! - Fixes a potential null access in the clientside router
#12392 0462219 Thanks @apatel369! - Fixes an issue where scripts were not correctly injected during the build. The issue was triggered when there were injected routes with the same entrypoint and different pattern
4.16.12
Patch Changes
#12420 acac0af Thanks @ematipico! - Fixes an issue where the dev server returns a 404 status code when a user middleware returns a valid Response.
4.16.11
Patch Changes
#12305 f5f7109 Thanks @florian-lefebvre! - Fixes a case where the error overlay would not escape the message

... (truncated)

Commits

1945a93 [ci] release (#16281)
bb4586a fix: avoid full-reload in scss modules (#14924)
5f3085b [ci] format
b5c2fba Skip actions server-output validation when an adapter is configured (#16202)
b06eabf Consolidate inline script escaping into shared utility (#16303)
92fc030 refactor(core): rename logger internal types (#16271)
ba18015 [ci] format
d198e82 test: port 16 routing unit tests to TypeScript (#16266)
673a871 [ci] release (#16244)
fab9c00 chore: upgrade biome (#16246)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 4.12.2 to 6.1.6. - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v4.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.6/packages/astro) --- updated-dependencies: - dependency-name: astro dependency-version: 6.1.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

cursor

Cursor Bugbot has reviewed your changes and found 3 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


Astro 6 removed output: 'hybrid' causing build failure
High Severity
Bumping astro to ^6.1.6 breaks the project because output: 'hybrid' was removed in Astro 5.0. The astro.config.mjs still uses output: 'hybrid', which will now throw an error at startup. In Astro 5+, the hybrid behavior was merged into output: 'static', so the config needs to be updated (or the output key removed entirely).
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@astrojs/node v8 incompatible with Astro 6
High Severity
The @astrojs/node dependency at ^8.2.5 is incompatible with Astro 6. The @astrojs/node v8.x series targets Astro 4.x, v9.x targets Astro 5.x, and v10.x targets Astro 6.x. This will cause peer dependency conflicts and likely runtime failures since the adapter's internal APIs changed across these major versions.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:39Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@sentry/astro 8.9.2 incompatible with Astro 6 internals
High Severity
The pinned @sentry/astro at 8.9.2 predates Astro 6 support, which was only added in a later version (PR #19745, March 2026). Astro 6 changed internal middleware context APIs — specifically, the route manifest moved from ctx.[Symbol.for('context.routes')] to ctx.[Symbol.for('astro.pipeline')]. Version 8.9.2 will fail at runtime when its middleware tries to access the old symbols.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

dependabot · 2026-05-13T23:50:56Z

Superseded by #85.

dependabot · 2026-04-21T21:23:28Z

Bumps astro from 4.12.2 to 6.1.6.

Release notes

Sourced from astro's releases.

astro@6.1.6
Patch Changes
#16202 b5c2fba Thanks @matthewp! - Fixes Actions failing with ActionsWithoutServerOutputError when using output: 'static' with an adapter
#16303 b06eabf Thanks @matthewp! - Improves handling of special characters in inline <script> content
#14924 bb4586a Thanks @aralroca! - Fixes SCSS and CSS module file changes triggering a full page reload instead of hot-updating styles in place during development
astro@6.1.5
Patch Changes
#16171 5bcd03c Thanks @Desel72! - Fixes a build error that occurred when a pre-rendered page used the <Picture> component and another page called render() on content collection entries.
#16239 7c65c04 Thanks @dataCenter430! - Fixes sync content inside <Fragment> not streaming to the browser until all async sibling expressions have resolved.
#16242 686c312 Thanks @martrapp! - Revives UnoCSS in dev mode when used with the client router.
This change partly reverts #16089, which in hindsight turned out to be too general. Instead of automatically persisting all style sheets, we now do this only for styles from Vue components.
#16192 79d86b8 Thanks @alexanderniebuhr! - Uses today’s date for Cloudflare compatibility_date in astro add cloudflare
When creating new projects, astro add cloudflare now sets compatibility_date to the current date. Previously, this date was resolved from locally installed packages, which could be unreliable in some package manager environments. Using today’s date is simpler and more reliable across environments, and is supported by workerd.
#16259 34df955 Thanks @gameroman! - Removed dlv dependency
astro@6.1.4
Patch Changes
#16197 21f9fe2 Thanks @SchahinRohani! - Remove unused re-exports from assets/utils barrel file to fix Vite build warning
#16059 6d5469e Thanks @matthewp! - Fixes Expected 'miniflare' to be defined errors and 404 responses in dev mode when using the Cloudflare adapter and the config file changes. Instead of creating a brand new Vite server on config changes, Astro now performs a Vite in-place restart, allowing the Cloudflare adapter to reuse its existing miniflare instance across restarts.
#16154 7610ba4 Thanks @Desel72! - Fixes pages with dots in their filenames (e.g. hello.world.astro) returning 404 when accessed with a trailing slash in the dev server. The trailingSlashForPath function now only forces trailingSlash: 'never' for endpoints with file extensions, allowing pages to correctly respect the user's trailingSlash config.
#16193 23425e2 Thanks @matthewp! - Fixes trailingSlash: "always" producing redirect HTML instead of the actual response for extensionless endpoints during static builds
astro@6.1.3
Patch Changes
#16161 b51f297 Thanks @matthewp! - Fixes a dev rendering issue with the Cloudflare adapter where head metadata could be missing and dev CSS/scripts could be injected in the wrong place
#16110 de669f0 Thanks @tmimmanuel! - Fixes skew protection query parameters not being appended to inter-chunk JavaScript imports in client bundles, which could cause version mismatches during rolling deployments on Vercel
#16162 a0a49e9 Thanks @rururux! - Fixes an issue where HMR would not trigger when modifying files while using @astrojs/cloudflare with prerenderEnvironment: 'node' enabled.
#16142 7454854 Thanks @rururux! - Fixes HTML content being incorrectly escaped as plain text when rendering a MDX component using the AstroContainer APIs.
#16116 12602a9 Thanks @riderx! - Fixes a bug where page-level CSS could leak between unrelated pages when traversing style parents across top-level route boundaries

... (truncated)

Changelog

Sourced from astro's changelog.

4.16.16
Patch Changes
#12542 65e50eb Thanks @kadykov! - Fix JPEG image size determination
#12525 cf0d8b0 Thanks @ematipico! - Fixes an issue where with i18n enabled, Astro couldn't render the 404.astro component for nonexistent routes.
4.16.15
Patch Changes
#12498 b140a3f Thanks @ematipico! - Fixes a regression where Astro was trying to access Request.headers
4.16.14
Patch Changes
#12480 c3b7e7c Thanks @matthewp! - Removes the default throw behavior in astro:env
#12444 28dd3ce Thanks @ematipico! - Fixes an issue where a server island hydration script might fail case the island ID misses from the DOM.
#12476 80a9a52 Thanks @florian-lefebvre! - Fixes a case where the Content Layer glob() loader would not update when renaming or deleting an entry
#12418 25baa4e Thanks @oliverlynch! - Fix cached image redownloading if it is the first asset
#12477 46f6b38 Thanks @ematipico! - Fixes an issue where the SSR build was emitting the dist/server/entry.mjs file with an incorrect import at the top of the file/
#12365 a23985b Thanks @apatel369! - Fixes an issue where Astro.currentLocale was not correctly returning the locale for 404 and 500 pages.
4.16.13
Patch Changes
#12436 453ec6b Thanks @martrapp! - Fixes a potential null access in the clientside router
#12392 0462219 Thanks @apatel369! - Fixes an issue where scripts were not correctly injected during the build. The issue was triggered when there were injected routes with the same entrypoint and different pattern
4.16.12
Patch Changes
#12420 acac0af Thanks @ematipico! - Fixes an issue where the dev server returns a 404 status code when a user middleware returns a valid Response.
4.16.11
Patch Changes
#12305 f5f7109 Thanks @florian-lefebvre! - Fixes a case where the error overlay would not escape the message

... (truncated)

Commits

1945a93 [ci] release (#16281)
bb4586a fix: avoid full-reload in scss modules (#14924)
5f3085b [ci] format
b5c2fba Skip actions server-output validation when an adapter is configured (#16202)
b06eabf Consolidate inline script escaping into shared utility (#16303)
92fc030 refactor(core): rename logger internal types (#16271)
ba18015 [ci] format
d198e82 test: port 16 routing unit tests to TypeScript (#16266)
673a871 [ci] release (#16244)
fab9c00 chore: upgrade biome (#16246)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 4.12.2 to 6.1.6. - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v4.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.6/packages/astro) --- updated-dependencies: - dependency-name: astro dependency-version: 6.1.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

cursor

Cursor Bugbot has reviewed your changes and found 3 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


Astro 6 removed output: 'hybrid' causing build failure
High Severity
Bumping astro to ^6.1.6 breaks the project because output: 'hybrid' was removed in Astro 5.0. The astro.config.mjs still uses output: 'hybrid', which will now throw an error at startup. In Astro 5+, the hybrid behavior was merged into output: 'static', so the config needs to be updated (or the output key removed entirely).
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@astrojs/node v8 incompatible with Astro 6
High Severity
The @astrojs/node dependency at ^8.2.5 is incompatible with Astro 6. The @astrojs/node v8.x series targets Astro 4.x, v9.x targets Astro 5.x, and v10.x targets Astro 6.x. This will cause peer dependency conflicts and likely runtime failures since the adapter's internal APIs changed across these major versions.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:39Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@sentry/astro 8.9.2 incompatible with Astro 6 internals
High Severity
The pinned @sentry/astro at 8.9.2 predates Astro 6 support, which was only added in a later version (PR #19745, March 2026). Astro 6 changed internal middleware context APIs — specifically, the route manifest moved from ctx.[Symbol.for('context.routes')] to ctx.[Symbol.for('astro.pipeline')]. Version 8.9.2 will fail at runtime when its middleware tries to access the old symbols.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

dependabot · 2026-05-13T23:50:56Z

Superseded by #85.

dependabot · 2026-04-21T21:23:28Z

Bumps astro from 4.12.2 to 6.1.6.

Release notes

Sourced from astro's releases.

astro@6.1.6
Patch Changes
#16202 b5c2fba Thanks @matthewp! - Fixes Actions failing with ActionsWithoutServerOutputError when using output: 'static' with an adapter
#16303 b06eabf Thanks @matthewp! - Improves handling of special characters in inline <script> content
#14924 bb4586a Thanks @aralroca! - Fixes SCSS and CSS module file changes triggering a full page reload instead of hot-updating styles in place during development
astro@6.1.5
Patch Changes
#16171 5bcd03c Thanks @Desel72! - Fixes a build error that occurred when a pre-rendered page used the <Picture> component and another page called render() on content collection entries.
#16239 7c65c04 Thanks @dataCenter430! - Fixes sync content inside <Fragment> not streaming to the browser until all async sibling expressions have resolved.
#16242 686c312 Thanks @martrapp! - Revives UnoCSS in dev mode when used with the client router.
This change partly reverts #16089, which in hindsight turned out to be too general. Instead of automatically persisting all style sheets, we now do this only for styles from Vue components.
#16192 79d86b8 Thanks @alexanderniebuhr! - Uses today’s date for Cloudflare compatibility_date in astro add cloudflare
When creating new projects, astro add cloudflare now sets compatibility_date to the current date. Previously, this date was resolved from locally installed packages, which could be unreliable in some package manager environments. Using today’s date is simpler and more reliable across environments, and is supported by workerd.
#16259 34df955 Thanks @gameroman! - Removed dlv dependency
astro@6.1.4
Patch Changes
#16197 21f9fe2 Thanks @SchahinRohani! - Remove unused re-exports from assets/utils barrel file to fix Vite build warning
#16059 6d5469e Thanks @matthewp! - Fixes Expected 'miniflare' to be defined errors and 404 responses in dev mode when using the Cloudflare adapter and the config file changes. Instead of creating a brand new Vite server on config changes, Astro now performs a Vite in-place restart, allowing the Cloudflare adapter to reuse its existing miniflare instance across restarts.
#16154 7610ba4 Thanks @Desel72! - Fixes pages with dots in their filenames (e.g. hello.world.astro) returning 404 when accessed with a trailing slash in the dev server. The trailingSlashForPath function now only forces trailingSlash: 'never' for endpoints with file extensions, allowing pages to correctly respect the user's trailingSlash config.
#16193 23425e2 Thanks @matthewp! - Fixes trailingSlash: "always" producing redirect HTML instead of the actual response for extensionless endpoints during static builds
astro@6.1.3
Patch Changes
#16161 b51f297 Thanks @matthewp! - Fixes a dev rendering issue with the Cloudflare adapter where head metadata could be missing and dev CSS/scripts could be injected in the wrong place
#16110 de669f0 Thanks @tmimmanuel! - Fixes skew protection query parameters not being appended to inter-chunk JavaScript imports in client bundles, which could cause version mismatches during rolling deployments on Vercel
#16162 a0a49e9 Thanks @rururux! - Fixes an issue where HMR would not trigger when modifying files while using @astrojs/cloudflare with prerenderEnvironment: 'node' enabled.
#16142 7454854 Thanks @rururux! - Fixes HTML content being incorrectly escaped as plain text when rendering a MDX component using the AstroContainer APIs.
#16116 12602a9 Thanks @riderx! - Fixes a bug where page-level CSS could leak between unrelated pages when traversing style parents across top-level route boundaries

... (truncated)

Changelog

Sourced from astro's changelog.

4.16.16
Patch Changes
#12542 65e50eb Thanks @kadykov! - Fix JPEG image size determination
#12525 cf0d8b0 Thanks @ematipico! - Fixes an issue where with i18n enabled, Astro couldn't render the 404.astro component for nonexistent routes.
4.16.15
Patch Changes
#12498 b140a3f Thanks @ematipico! - Fixes a regression where Astro was trying to access Request.headers
4.16.14
Patch Changes
#12480 c3b7e7c Thanks @matthewp! - Removes the default throw behavior in astro:env
#12444 28dd3ce Thanks @ematipico! - Fixes an issue where a server island hydration script might fail case the island ID misses from the DOM.
#12476 80a9a52 Thanks @florian-lefebvre! - Fixes a case where the Content Layer glob() loader would not update when renaming or deleting an entry
#12418 25baa4e Thanks @oliverlynch! - Fix cached image redownloading if it is the first asset
#12477 46f6b38 Thanks @ematipico! - Fixes an issue where the SSR build was emitting the dist/server/entry.mjs file with an incorrect import at the top of the file/
#12365 a23985b Thanks @apatel369! - Fixes an issue where Astro.currentLocale was not correctly returning the locale for 404 and 500 pages.
4.16.13
Patch Changes
#12436 453ec6b Thanks @martrapp! - Fixes a potential null access in the clientside router
#12392 0462219 Thanks @apatel369! - Fixes an issue where scripts were not correctly injected during the build. The issue was triggered when there were injected routes with the same entrypoint and different pattern
4.16.12
Patch Changes
#12420 acac0af Thanks @ematipico! - Fixes an issue where the dev server returns a 404 status code when a user middleware returns a valid Response.
4.16.11
Patch Changes
#12305 f5f7109 Thanks @florian-lefebvre! - Fixes a case where the error overlay would not escape the message

... (truncated)

Commits

1945a93 [ci] release (#16281)
bb4586a fix: avoid full-reload in scss modules (#14924)
5f3085b [ci] format
b5c2fba Skip actions server-output validation when an adapter is configured (#16202)
b06eabf Consolidate inline script escaping into shared utility (#16303)
92fc030 refactor(core): rename logger internal types (#16271)
ba18015 [ci] format
d198e82 test: port 16 routing unit tests to TypeScript (#16266)
673a871 [ci] release (#16244)
fab9c00 chore: upgrade biome (#16246)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 4.12.2 to 6.1.6. - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v4.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.6/packages/astro) --- updated-dependencies: - dependency-name: astro dependency-version: 6.1.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

cursor

Cursor Bugbot has reviewed your changes and found 3 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


Astro 6 removed output: 'hybrid' causing build failure
High Severity
Bumping astro to ^6.1.6 breaks the project because output: 'hybrid' was removed in Astro 5.0. The astro.config.mjs still uses output: 'hybrid', which will now throw an error at startup. In Astro 5+, the hybrid behavior was merged into output: 'static', so the config needs to be updated (or the output key removed entirely).
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:38Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@astrojs/node v8 incompatible with Astro 6
High Severity
The @astrojs/node dependency at ^8.2.5 is incompatible with Astro 6. The @astrojs/node v8.x series targets Astro 4.x, v9.x targets Astro 5.x, and v10.x targets Astro 6.x. This will cause peer dependency conflicts and likely runtime failures since the adapter's internal APIs changed across these major versions.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

cursor · 2026-04-21T21:25:39Z

 "@astrojs/node": "^8.2.5",
 "@sentry/astro": "8.9.2",
- "astro": "^4.7.0",
+ "astro": "^6.1.6",


@sentry/astro 8.9.2 incompatible with Astro 6 internals
High Severity
The pinned @sentry/astro at 8.9.2 predates Astro 6 support, which was only added in a later version (PR #19745, March 2026). Astro 6 changed internal middleware context APIs — specifically, the route manifest moved from ctx.[Symbol.for('context.routes')] to ctx.[Symbol.for('astro.pipeline')]. Version 8.9.2 will fail at runtime when its middleware tries to access the old symbols.
^{Reviewed by Cursor Bugbot for commit 07e2b55. Configure here.}

dependabot · 2026-05-13T23:50:56Z

Superseded by #85.

dependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 21, 2026

dependabotBot mentioned this pull request Apr 21, 2026
Bump astro from 4.12.2 to 5.18.1 #68
Closed

cursorBot reviewed Apr 21, 2026
View reviewed changes

dependabotBot closed this May 13, 2026

dependabotBot deleted the dependabot/npm_and_yarn/astro-6.1.6 branch May 13, 2026 23:50

dependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 21, 2026

dependabotBot mentioned this pull request Apr 21, 2026
Bump astro from 4.12.2 to 5.18.1 #68
Closed

cursorBot reviewed Apr 21, 2026
View reviewed changes

dependabotBot closed this May 13, 2026

dependabotBot deleted the dependabot/npm_and_yarn/astro-6.1.6 branch May 13, 2026 23:50

dependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 21, 2026

dependabotBot mentioned this pull request Apr 21, 2026
Bump astro from 4.12.2 to 5.18.1 #68
Closed

cursorBot reviewed Apr 21, 2026
View reviewed changes

dependabotBot closed this May 13, 2026

dependabotBot deleted the dependabot/npm_and_yarn/astro-6.1.6 branch May 13, 2026 23:50

dependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 21, 2026

dependabotBot mentioned this pull request Apr 21, 2026
Bump astro from 4.12.2 to 5.18.1 #68
Closed

cursorBot reviewed Apr 21, 2026
View reviewed changes

dependabotBot closed this May 13, 2026

dependabotBot deleted the dependabot/npm_and_yarn/astro-6.1.6 branch May 13, 2026 23:50

dependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 21, 2026

dependabotBot mentioned this pull request Apr 21, 2026
Bump astro from 4.12.2 to 5.18.1 #68
Closed

cursorBot reviewed Apr 21, 2026
View reviewed changes

dependabotBot closed this May 13, 2026

dependabotBot deleted the dependabot/npm_and_yarn/astro-6.1.6 branch May 13, 2026 23:50

dependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 21, 2026

dependabotBot mentioned this pull request Apr 21, 2026
Bump astro from 4.12.2 to 5.18.1 #68
Closed

cursorBot reviewed Apr 21, 2026
View reviewed changes

dependabotBot closed this May 13, 2026

dependabotBot deleted the dependabot/npm_and_yarn/astro-6.1.6 branch May 13, 2026 23:50

dependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 21, 2026

dependabotBot mentioned this pull request Apr 21, 2026
Bump astro from 4.12.2 to 5.18.1 #68
Closed

cursorBot reviewed Apr 21, 2026
View reviewed changes

dependabotBot closed this May 13, 2026

dependabotBot deleted the dependabot/npm_and_yarn/astro-6.1.6 branch May 13, 2026 23:50

dependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 21, 2026

dependabotBot mentioned this pull request Apr 21, 2026
Bump astro from 4.12.2 to 5.18.1 #68
Closed

cursorBot reviewed Apr 21, 2026
View reviewed changes

dependabotBot closed this May 13, 2026

dependabotBot deleted the dependabot/npm_and_yarn/astro-6.1.6 branch May 13, 2026 23:50

Uh oh!

Uh oh!

Conversation

dependabotBot commented on behalf of githubApr 21, 2026

astro@6.1.6

Patch Changes

astro@6.1.5

Patch Changes

astro@6.1.4

Patch Changes

astro@6.1.3

Patch Changes

4.16.16

Patch Changes

4.16.15

Patch Changes

4.16.14

Patch Changes

4.16.13

Patch Changes

4.16.12

Patch Changes

4.16.11

Patch Changes

Uh oh!

cursorBot left a comment

Choose a reason for hiding this comment

Uh oh!

cursorBotApr 21, 2026

Choose a reason for hiding this comment

Astro 6 removed output: 'hybrid' causing build failure

Uh oh!

cursorBotApr 21, 2026

Choose a reason for hiding this comment

@astrojs/node v8 incompatible with Astro 6

Uh oh!

cursorBotApr 21, 2026

Choose a reason for hiding this comment

@sentry/astro 8.9.2 incompatible with Astro 6 internals

Uh oh!

dependabotBot commented on behalf of githubMay 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabotBot commented on behalf of githubApr 21, 2026

astro@6.1.6

Patch Changes

astro@6.1.5

Patch Changes

astro@6.1.4

Patch Changes

astro@6.1.3

Patch Changes

4.16.16

Patch Changes

4.16.15

Patch Changes

4.16.14

Patch Changes

4.16.13

Patch Changes

4.16.12

Patch Changes

4.16.11

Patch Changes

Uh oh!

cursorBot left a comment

Choose a reason for hiding this comment

Uh oh!

cursorBotApr 21, 2026

Choose a reason for hiding this comment

Astro 6 removed `output: 'hybrid'` causing build failure

`@astrojs/node` v8 incompatible with Astro 6

`@sentry/astro` 8.9.2 incompatible with Astro 6 internals

Astro 6 removed `output: 'hybrid'` causing build failure

`@astrojs/node` v8 incompatible with Astro 6

`@sentry/astro` 8.9.2 incompatible with Astro 6 internals

Astro 6 removed `output: 'hybrid'` causing build failure

`@astrojs/node` v8 incompatible with Astro 6