Skip to content

Bump astro, @astrojs/cloudflare and @astrojs/mdx#22

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-9cef1e52dc
Open

Bump astro, @astrojs/cloudflare and @astrojs/mdx#22
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-9cef1e52dc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 21, 2026

Copy link
Copy Markdown

Bumps astro, @astrojs/cloudflare and @astrojs/mdx. These dependencies needed to be updated together.
Updates astro from 5.16.2 to 6.1.8

Release notes

Sourced from astro's releases.

astro@6.1.8

Patch Changes

  • #16367 a6866a7 Thanks @​ematipico! - Fixes an issue where build output files could contain special characters (!, ~, {, }) in their names, causing deploy failures on platforms like Netlify.

  • #16381 217c5b3 Thanks @​ematipico! - Slightly improved the performance of the dev server by caching the internal crawling of the dependencies of a project.

  • #16348 7d26cd7 Thanks @​ocavue! - Fixes a bug where emitted assets during a client build would contain always fresh, new hashes in their name. Now the build should be more stable.

  • #16317 d012bfe Thanks @​das-peter! - Fixes a bug where allowedDomains weren't correctly propagated when using the development server.

  • #16379 5a84551 Thanks @​martrapp! - Improves Vue scoped style handling in DEV mode during client router navigation.

  • #16317 d012bfe Thanks @​das-peter! - Adds tests to verify settings are properly propagated when using the development server.

  • #16282 5b0fdaa Thanks @​jmurty! - Fixes build errors on platforms with skew protection enabled (e.g. Vercel, Netlify) for inter-chunk Javascript using dynamic imports

  • Updated dependencies [e0b240e]:

    • @​astrojs/telemetry@​3.3.1

astro@6.1.7

Patch Changes

  • #16027 c62516b Thanks @​fkatsuhiro! - Fixes a bug where remote image dimensions were not validated during static builds on Netlify.

  • #16311 94048f2 Thanks @​Arecsu! - Fixes --port flag being ignored after a Vite-triggered server restart (e.g. when a .env file changes)

  • #16316 0fcd04c Thanks @​ematipico! - Fixes the /_image endpoint accepting an arbitrary f=svg query parameter and serving non-SVG content as image/svg+xml. The endpoint now validates that the source is actually SVG before honoring f=svg, matching the same guard already enforced on the <Image> component path.

astro@6.1.6

Patch Changes

  • #16202 b5c2fba Thanks @​matthewp! - Fixes Actions failing with ActionsWithoutServerOutputError when using output: 'static' with an adapter

  • #16303 b06eabf Thanks @​matthewp! - Improves handling of special characters in inline <script> content

  • #14924 bb4586a Thanks @​aralroca! - Fixes SCSS and CSS module file changes triggering a full page reload instead of hot-updating styles in place during development

astro@6.1.5

Patch Changes

  • #16171 5bcd03c Thanks @​Desel72! - Fixes a build error that occurred when a pre-rendered page used the <Picture> component and another page called render() on content collection entries.

  • #16239 7c65c04 Thanks @​dataCenter430! - Fixes sync content inside <Fragment> not streaming to the browser until all async sibling expressions have resolved.

  • #16242 686c312 Thanks @​martrapp! - Revives UnoCSS in dev mode when used with the client router.

    This change partly reverts #16089, which in hindsight turned out to be too general. Instead of automatically persisting all style sheets, we now do this only for styles from Vue components.

  • #16192 79d86b8 Thanks @​alexanderniebuhr! - Uses today’s date for Cloudflare compatibility_date in astro add cloudflare

... (truncated)

Changelog

Sourced from astro's changelog.

6.1.8

Patch Changes

  • #16367 a6866a7 Thanks @​ematipico! - Fixes an issue where build output files could contain special characters (!, ~, {, }) in their names, causing deploy failures on platforms like Netlify.

  • #16381 217c5b3 Thanks @​ematipico! - Slightly improved the performance of the dev server by caching the internal crawling of the dependencies of a project.

  • #16348 7d26cd7 Thanks @​ocavue! - Fixes a bug where emitted assets during a client build would contain always fresh, new hashes in their name. Now the build should be more stable.

  • #16317 d012bfe Thanks @​das-peter! - Fixes a bug where allowedDomains weren't correctly propagated when using the development server.

  • #16379 5a84551 Thanks @​martrapp! - Improves Vue scoped style handling in DEV mode during client router navigation.

  • #16317 d012bfe Thanks @​das-peter! - Adds tests to verify settings are properly propagated when using the development server.

  • #16282 5b0fdaa Thanks @​jmurty! - Fixes build errors on platforms with skew protection enabled (e.g. Vercel, Netlify) for inter-chunk Javascript using dynamic imports

  • Updated dependencies [e0b240e]:

    • @​astrojs/telemetry@​3.3.1

6.1.7

Patch Changes

  • #16027 c62516b Thanks @​fkatsuhiro! - Fixes a bug where remote image dimensions were not validated during static builds on Netlify.

  • #16311 94048f2 Thanks @​Arecsu! - Fixes --port flag being ignored after a Vite-triggered server restart (e.g. when a .env file changes)

  • #16316 0fcd04c Thanks @​ematipico! - Fixes the /_image endpoint accepting an arbitrary f=svg query parameter and serving non-SVG content as image/svg+xml. The endpoint now validates that the source is actually SVG before honoring f=svg, matching the same guard already enforced on the <Image> component path.

6.1.6

Patch Changes

  • #16202 b5c2fba Thanks @​matthewp! - Fixes Actions failing with ActionsWithoutServerOutputError when using output: 'static' with an adapter

  • #16303 b06eabf Thanks @​matthewp! - Improves handling of special characters in inline <script> content

  • #14924 bb4586a Thanks @​aralroca! - Fixes SCSS and CSS module file changes triggering a full page reload instead of hot-updating styles in place during development

6.1.5

Patch Changes

  • #16171 5bcd03c Thanks @​Desel72! - Fixes a build error that occurred when a pre-rendered page used the <Picture> component and another page called render() on content collection entries.

  • #16239 7c65c04 Thanks @​dataCenter430! - Fixes sync content inside <Fragment> not streaming to the browser until all async sibling expressions have resolved.

  • #16242 686c312 Thanks @​martrapp! - Revives UnoCSS in dev mode when used with the client router.

... (truncated)

Commits

Updates @astrojs/cloudflare from 12.6.12 to 13.1.10

Release notes

Sourced from @​astrojs/cloudflare's releases.

@​astrojs/cloudflare@​13.1.10

Patch Changes

  • #16320 a43eb4b Thanks @​matthewp! - Uses redirect: 'manual' for remote image fetches in the Cloudflare binding image transform, consistent with all other image fetch paths

  • #16307 a81dd3e Thanks @​matthewp! - Surfaces console.log and console.warn output from workerd during prerendering

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.3

@​astrojs/cloudflare@​13.1.9

Patch Changes

  • #16210 e030bd0 Thanks @​matthewp! - Fixes .svelte files in node_modules failing with Unknown file extension ".svelte" when using the Cloudflare adapter with prerenderEnvironment: 'node'

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.3

@​astrojs/cloudflare@​13.1.8

Patch Changes

  • #16225 756e7be Thanks @​travisbreaks! - Fixes ERR_MULTIPLE_CONSUMERS error when using Cloudflare Queues with prerendered pages. The prerender worker config callback now excludes queues.consumers from the entry worker config, since the prerender worker only renders static HTML and should not register as a queue consumer. Queue producers (bindings) are preserved.

  • #16192 79d86b8 Thanks @​alexanderniebuhr! - Removes an unused function re-export from the /info package path

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.3

@​astrojs/cloudflare@​13.1.7

Patch Changes

  • Updated dependencies [814406d]:
    • @​astrojs/underscore-redirects@​1.0.3

@​astrojs/cloudflare@​13.1.6

Patch Changes

  • #16151 4978165 Thanks @​matthewp! - Fixes a dev-mode crash loop in the Cloudflare adapter when using Starlight by excluding @astrojs/starlight from SSR dependency optimization

@​astrojs/cloudflare@​13.1.5

Patch Changes

  • #16109 c887b4a Thanks @​matthewp! - Fix HMR crash when editing content collection files caused by Vite's SSR transform colliding with zod v4's meta export

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.2

@​astrojs/cloudflare@​13.1.4

Patch Changes

... (truncated)

Changelog

Sourced from @​astrojs/cloudflare's changelog.

13.1.10

Patch Changes

  • #16320 a43eb4b Thanks @​matthewp! - Uses redirect: 'manual' for remote image fetches in the Cloudflare binding image transform, consistent with all other image fetch paths

  • #16307 a81dd3e Thanks @​matthewp! - Surfaces console.log and console.warn output from workerd during prerendering

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.3

13.1.9

Patch Changes

  • #16210 e030bd0 Thanks @​matthewp! - Fixes .svelte files in node_modules failing with Unknown file extension ".svelte" when using the Cloudflare adapter with prerenderEnvironment: 'node'

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.3

13.1.8

Patch Changes

  • #16225 756e7be Thanks @​travisbreaks! - Fixes ERR_MULTIPLE_CONSUMERS error when using Cloudflare Queues with prerendered pages. The prerender worker config callback now excludes queues.consumers from the entry worker config, since the prerender worker only renders static HTML and should not register as a queue consumer. Queue producers (bindings) are preserved.

  • #16192 79d86b8 Thanks @​alexanderniebuhr! - Removes an unused function re-export from the /info package path

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.3

13.1.7

Patch Changes

  • Updated dependencies [814406d]:
    • @​astrojs/underscore-redirects@​1.0.3

13.1.6

Patch Changes

  • #16151 4978165 Thanks @​matthewp! - Fixes a dev-mode crash loop in the Cloudflare adapter when using Starlight by excluding @astrojs/starlight from SSR dependency optimization

13.1.5

Patch Changes

  • #16109 c887b4a Thanks @​matthewp! - Fix HMR crash when editing content collection files caused by Vite's SSR transform colliding with zod v4's meta export

... (truncated)

Commits

Updates @astrojs/mdx from 4.3.12 to 5.0.3

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​5.0.3

Patch Changes

  • Updated dependencies [10a1a5a]:
    • @​astrojs/markdown-remark@​7.1.0

@​astrojs/mdx@​5.0.2

Patch Changes

  • #15864 d3c7de9 Thanks @​florian-lefebvre! - Removes temporary support for Node >=20.19.1 because Stackblitz now uses Node 22 by default

  • Updated dependencies []:

    • @​astrojs/markdown-remark@​7.0.1

@​astrojs/mdx@​5.0.1

Patch Changes

Changelog

Sourced from @​astrojs/mdx's changelog.

5.0.3

Patch Changes

  • Updated dependencies [10a1a5a]:
    • @​astrojs/markdown-remark@​7.1.0

5.0.2

Patch Changes

  • #15864 d3c7de9 Thanks @​florian-lefebvre! - Removes temporary support for Node >=20.19.1 because Stackblitz now uses Node 22 by default

  • Updated dependencies []:

    • @​astrojs/markdown-remark@​7.0.1

5.0.1

Patch Changes

5.0.0

Major Changes

Patch Changes

5.0.0-beta.12

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​7.0.0-beta.11

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump astro, @astrojs/cloudflare and @astrojs/mdx
9f84c08 
Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro), [@astrojs/cloudflare](https://github.com/withastro/astro/tree/HEAD/packages/integrations/cloudflare) and [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx). These dependencies needed to be updated together.

Updates `astro` from 5.16.2 to 6.1.8
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@6.1.8/packages/astro)

Updates `@astrojs/cloudflare` from 12.6.12 to 13.1.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/cloudflare/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/cloudflare@13.1.10/packages/integrations/cloudflare)

Updates `@astrojs/mdx` from 4.3.12 to 5.0.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@5.0.3/packages/integrations/mdx)

---
updated-dependencies:
- dependency-name: astro
  dependency-version: 6.1.8
  dependency-type: direct:production
- dependency-name: "@astrojs/cloudflare"
  dependency-version: 13.1.10
  dependency-type: direct:production
- dependency-name: "@astrojs/mdx"
  dependency-version: 5.0.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 21, 2026
@dependabot dependabot Bot mentioned this pull request Apr 21, 2026
Closed
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Apr 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs		 astro-blog-starter-template 9f84c08 Apr 21 2026, 10:17 PM

@devin-ai-integration devin-ai-integration Bot mentioned this pull request May 31, 2026
Open
@devin-ai-integration

devin-ai-integration Bot commented May 31, 2026

Copy link
Copy Markdown

Code Review: ⚠️ Most Important PR — Needs Source Code Changes Before Merging

Summary

This PR bumps 3 packages together as a coordinated major upgrade:

  • astro: 5.16.2 → 6.1.8 (major)
  • @astrojs/cloudflare: 12.6.12 → 13.1.10 (major)
  • @astrojs/mdx: 4.3.12 → 5.0.3 (major)

This is the right approach — these packages need to be upgraded together. However, the PR only updates package.json/package-lock.json and doesn't include necessary source code migrations.

Critical Issues

1. 🔴 Missing wrangler upgrade
@astrojs/cloudflare@13.x now requires wrangler: ^4.61.1 as a peer dependency (it was previously bundled internally). The project has wrangler: 4.56.0 in devDependencies. This must be bumped to >=4.61.1.

2. 🔴 Node.js version requirement
Astro 6 requires Node 22.12.0+ (Node 18 and 20 support dropped entirely). Ensure your CI/CD and Cloudflare Workers deployment environment support Node 22+. Consider adding an .nvmrc or engines field:

"engines": { "node": ">=22.12.0" }

3. 🟡 astro.config.mjs — platformProxy option
The current config uses:

adapter: cloudflare({
  platformProxy: { enabled: true },
})

In @astrojs/cloudflare v13, the adapter was rewritten to use @cloudflare/vite-plugin internally. The platformProxy option may no longer be valid or may have changed behavior. Verify this option is still supported, or remove it if bindings are now handled automatically via the Vite plugin.

4. 🟡 src/env.d.ts — Runtime type

type Runtime = import("@astrojs/cloudflare").Runtime<Env>;

The Runtime type export from @astrojs/cloudflare may have changed in v13 with the new Vite Environment API. Verify this type still exists and has the same shape, or update to the new typing pattern.

5. 🟡 Zod 4 compatibility in src/content.config.ts
Astro 6 upgrades to Zod 4. The current schema uses:

pubDate: z.coerce.date(),
updatedDate: z.coerce.date().optional(),

These patterns should still work in Zod 4, but verify:

  • z.coerce.date() still works (it does in Zod 4)
  • z.string(), z.object(), z.string().optional() all unchanged
  • No .default() with transforms (not used here — ✅ safe)

6. 🟡 Vite 7 compatibility
Astro 6 upgrades to Vite 7. If PR #20 (Vite 6.4.1→6.4.2) is merged first, it will conflict with this PR since Astro 6 brings Vite 7. PR #20 becomes obsolete if this PR is merged.

7. 🟢 Content collections API
The project already uses the Content Layer API (glob loader in content.config.ts), which is the required pattern in Astro 6. No legacy collections migration needed. ✅

8. 🟢 getStaticPaths() deprecation
src/pages/blog/[...slug].astro uses getStaticPaths() but doesn't access Astro.site or Astro.generator inside it. No immediate action needed, but be aware this API is deprecated in Astro 6 and will eventually be removed.

Recommendation

Do not merge as-is. This PR needs:

  1. Bump wrangler to >=4.61.1 in devDependencies
  2. Verify/fix platformProxy config in astro.config.mjs
  3. Verify/fix Runtime type in src/env.d.ts
  4. Add .nvmrc with 22.12.0 or engines field
  5. Test a build locally to catch any remaining issues

This is the most important PR of the 5 and should be the foundation — PRs #24 and #20 become redundant after this merges.

@devin-ai-integration devin-ai-integration Bot mentioned this pull request May 31, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants