chore(deps): update dependency astro to v5.18.0 #358

renovate-bot · 2026-02-26T01:54:25Z

renovate-bot commented

2026-02-26 01:54:25 +00:00

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
astro (source)	`5.17.3` → `5.18.0`

Release Notes

withastro/astro (astro)

`v5.18.0`

Compare Source

Minor Changes

#15589 b7dd447 Thanks @qzio! - Adds a new security.actionBodySizeLimit option to configure the maximum size of Astro Actions request bodies.

This lets you increase the default 1 MB limit when your actions need to accept larger payloads. For example, actions that handle file uploads or large JSON payloads can now opt in to a higher limit.

If you do not set this option, Astro continues to enforce the 1 MB default to help prevent abuse.
```
// astro.config.mjs
export default defineConfig({
  security: {
    actionBodySizeLimit: 10 * 1024 * 1024, // set to 10 MB
  },
});
```

Patch Changes

#15594 efae11c Thanks @qzio! - Fix X-Forwarded-Proto validation when allowedDomains includes both protocol and hostname fields. The protocol check no longer fails due to hostname mismatch against the hardcoded test URL.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Adoption](https://docs.renovatebot.com/merge-confidence/) | [Passing](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---|---|---| | [astro](https://astro.build) ([source](https://github.com/withastro/astro/tree/HEAD/packages/astro)) | [`5.17.3` → `5.18.0`](https://renovatebot.com/diffs/npm/astro/5.17.3/5.18.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/astro/5.18.0?slim=true) | ![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/astro/5.18.0?slim=true) | ![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/astro/5.17.3/5.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/astro/5.17.3/5.18.0?slim=true) | --- ### Release Notes <details> <summary>withastro/astro (astro)</summary> ### [`v5.18.0`](https://github.com/withastro/astro/releases/tag/astro%405.18.0) [Compare Source](https://github.com/withastro/astro/compare/astro@5.17.3...astro@5.18.0) ##### Minor Changes - [#15589](https://github.com/withastro/astro/pull/15589) [`b7dd447`](https://github.com/withastro/astro/commit/b7dd447e319a7b435c01ccd69347e5261bd9dc14) Thanks [@qzio](https://github.com/qzio)! - Adds a new `security.actionBodySizeLimit` option to configure the maximum size of Astro Actions request bodies. This lets you increase the default 1 MB limit when your actions need to accept larger payloads. For example, actions that handle file uploads or large JSON payloads can now opt in to a higher limit. If you do not set this option, Astro continues to enforce the 1 MB default to help prevent abuse. ```js // astro.config.mjs export default defineConfig({ security: { actionBodySizeLimit: 10 * 1024 * 1024, // set to 10 MB }, }); ``` ##### Patch Changes - [#15594](https://github.com/withastro/astro/pull/15594) [`efae11c`](https://github.com/withastro/astro/commit/efae11cef1ebe1f2f54ceb55db0d1ff1938351c6) Thanks [@qzio](https://github.com/qzio)! - Fix X-Forwarded-Proto validation when allowedDomains includes both protocol and hostname fields. The protocol check no longer fails due to hostname mismatch against the hardcoded test URL. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added the dependency label 2026-02-26 01:54:25 +00:00

renovate-bot added 1 commit 2026-02-26 01:54:26 +00:00

chore(deps): update dependency astro to v5.18.0

renovate/stability-days Updates have not met minimum release age requirement

Details

test-build / guarddog (pull_request) Successful in 1m8s

Details

test-build / build (pull_request) Successful in 3m54s

Details

594ff43110

alexlebens merged commit 1a51ccb516 into main

2026-02-26 02:00:47 +00:00

alexlebens referenced this issue from a commit

2026-02-26 02:00:48 +00:00

Merge pull request 'chore(deps): update dependency astro to v5.18.0' (#358) from renovate/astro-monorepo into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: alexlebens/site-profile#358