Update dependency astro to v5.16.3 #232

Merged
renovate-bot merged 1 commits from renovate/astro-monorepo into main 2025-12-01 00:01:55 +00:00
Collaborator

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
astro (source) 5.16.2 -> 5.16.3 age adoption passing confidence

Release Notes

withastro/astro (astro)

v5.16.3

Compare Source

Patch Changes
  • #​14889 4bceeb0 Thanks @​florian-lefebvre! - Fixes actions types when using specific TypeScript configurations

  • #​14929 e0f277d Thanks @​matthewp! - Fixes authentication bypass via double URL encoding in middleware

    Prevents attackers from bypassing path-based authentication checks using multi-level URL encoding (e.g., /%2561dmin instead of /%61dmin). Pathnames are now validated after decoding to ensure no additional encoding remains.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [astro](https://astro.build) ([source](https://github.com/withastro/astro/tree/HEAD/packages/astro)) | [`5.16.2` -> `5.16.3`](https://renovatebot.com/diffs/npm/astro/5.16.2/5.16.3) | [![age](https://developer.mend.io/api/mc/badges/age/npm/astro/5.16.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/astro/5.16.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/astro/5.16.2/5.16.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/astro/5.16.2/5.16.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>withastro/astro (astro)</summary> ### [`v5.16.3`](https://github.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#5163) [Compare Source](https://github.com/withastro/astro/compare/astro@5.16.2...astro@5.16.3) ##### Patch Changes - [#&#8203;14889](https://github.com/withastro/astro/pull/14889) [`4bceeb0`](https://github.com/withastro/astro/commit/4bceeb0c7183de4db0087316e2fc2d287f27ad01) Thanks [@&#8203;florian-lefebvre](https://github.com/florian-lefebvre)! - Fixes actions types when using specific TypeScript configurations - [#&#8203;14929](https://github.com/withastro/astro/pull/14929) [`e0f277d`](https://github.com/withastro/astro/commit/e0f277d9248d2fefbd0234b53f9dea8c9b750adb) Thanks [@&#8203;matthewp](https://github.com/matthewp)! - Fixes authentication bypass via double URL encoding in middleware Prevents attackers from bypassing path-based authentication checks using multi-level URL encoding (e.g., `/%2561dmin` instead of `/%61dmin`). Pathnames are now validated after decoding to ensure no additional encoding remains. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41LjAiLCJ1cGRhdGVkSW5WZXIiOiI0Mi41LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsImRlcGVuZGVuY3kiXX0=-->
renovate-bot added the automergedependency labels 2025-12-01 00:01:46 +00:00
renovate-bot added 1 commit 2025-12-01 00:01:48 +00:00
Update dependency astro to v5.16.3
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
test-build / build (pull_request) Successful in 1m38s
cda1c254b6
renovate-bot scheduled this pull request to auto merge when all checks succeed 2025-12-01 00:01:51 +00:00
renovate-bot merged commit 0dc48fa375 into main 2025-12-01 00:01:55 +00:00
renovate-bot deleted branch renovate/astro-monorepo 2025-12-01 00:01:56 +00:00
Sign in to join this conversation.