[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [astro](https://astro.build) ([source](https://togithub.com/withastro/astro/tree/HEAD/packages/astro)) | [`4.5.18` -> `4.6.1`](https://renovatebot.com/diffs/npm/astro/4.5.18/4.6.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/astro/4.6.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/astro/4.6.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/astro/4.5.18/4.6.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/astro/4.5.18/4.6.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>withastro/astro (astro)</summary> ### [`v4.6.1`](https://togithub.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#461) [Compare Source](https://togithub.com/withastro/astro/compare/astro@4.6.0...astro@4.6.1) ##### Patch Changes - [#10708](https://togithub.com/withastro/astro/pull/10708) [`742866c5669a2be4f8b5a4c861cadb933c381415`](https://togithub.com/withastro/astro/commit/742866c5669a2be4f8b5a4c861cadb933c381415) Thanks [@horo-fox](https://togithub.com/horo-fox)! - Limits parallel imports within `getCollection()` to prevent EMFILE errors when accessing files - [#10755](https://togithub.com/withastro/astro/pull/10755) [`c6d59b6fb7db20af957a8706c8159c50619235ef`](https://togithub.com/withastro/astro/commit/c6d59b6fb7db20af957a8706c8159c50619235ef) Thanks [@ematipico](https://togithub.com/ematipico)! - Fixes a case where the i18n fallback failed to correctly redirect to the index page with SSR enabled ### [`v4.6.0`](https://togithub.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#460) [Compare Source](https://togithub.com/withastro/astro/compare/astro@4.5.18...astro@4.6.0) ##### Minor Changes - [#10591](https://togithub.com/withastro/astro/pull/10591) [`39988ef8e2c4c4888543c973e06d9b9939e4ac95`](https://togithub.com/withastro/astro/commit/39988ef8e2c4c4888543c973e06d9b9939e4ac95) Thanks [@mingjunlu](https://togithub.com/mingjunlu)! - Adds a new dev toolbar settings option to change the horizontal placement of the dev toolbar on your screen: bottom left, bottom center, or bottom right. - [#10689](https://togithub.com/withastro/astro/pull/10689) [`683d51a5eecafbbfbfed3910a3f1fbf0b3531b99`](https://togithub.com/withastro/astro/commit/683d51a5eecafbbfbfed3910a3f1fbf0b3531b99) Thanks [@ematipico](https://togithub.com/ematipico)! - Deprecate support for versions of Node.js older than `v18.17.1` for Node.js 18, older than `v20.0.3` for Node.js 20, and the complete Node.js v19 release line. This change is in line with Astro's [Node.js support policy](https://docs.astro.build/en/upgrade-astro/#support). - [#10678](https://togithub.com/withastro/astro/pull/10678) [`2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1`](https://togithub.com/withastro/astro/commit/2e53b5fff6d292b7acdf8c30a6ecf5e5696846a1) Thanks [@ematipico](https://togithub.com/ematipico)! - Adds a new experimental security option to prevent [Cross-Site Request Forgery (CSRF) attacks](https://owasp.org/www-community/attacks/csrf). This feature is available only for pages rendered on demand: ```js import { defineConfig } from 'astro/config'; export default defineConfig({ experimental: { security: { csrfProtection: { origin: true, }, }, }, }); ``` Enabling this setting performs a check that the "origin" header, automatically passed by all modern browsers, matches the URL sent by each `Request`. This experimental "origin" check is executed only for pages rendered on demand, and only for the requests ` POST, `PATCH` , `DELETE`and`PUT`with one of the following`content-type\` headers: 'application/x-www-form-urlencoded', 'multipart/form-data', 'text/plain'. It the "origin" header doesn't match the pathname of the request, Astro will return a 403 status code and won't render the page. - [#10193](https://togithub.com/withastro/astro/pull/10193) [`440681e7b74511a17b152af0fd6e0e4dc4014025`](https://togithub.com/withastro/astro/commit/440681e7b74511a17b152af0fd6e0e4dc4014025) Thanks [@ematipico](https://togithub.com/ematipico)! - Adds a new i18n routing option `manual` to allow you to write your own i18n middleware: ```js import { defineConfig } from 'astro/config'; // astro.config.mjs export default defineConfig({ i18n: { locales: ['en', 'fr'], defaultLocale: 'fr', routing: 'manual', }, }); ``` Adding `routing: "manual"` to your i18n config disables Astro's own i18n middleware and provides you with helper functions to write your own: `redirectToDefaultLocale`, `notFound`, and `redirectToFallback`: ```js // middleware.js import { redirectToDefaultLocale } from 'astro:i18n'; export const onRequest = defineMiddleware(async (context, next) => { if (context.url.startsWith('/about')) { return next(); } else { return redirectToDefaultLocale(context, 302); } }); ``` Also adds a `middleware` function that manually creates Astro's i18n middleware. This allows you to extend Astro's i18n routing instead of completely replacing it. Run `middleware` in combination with your own middleware, using the `sequence` utility to determine the order: ```js title="src/middleware.js" import { defineMiddleware, sequence } from 'astro:middleware'; import { middleware } from 'astro:i18n'; // Astro's own i18n routing config export const userMiddleware = defineMiddleware(); export const onRequest = sequence( userMiddleware, middleware({ redirectToDefaultLocale: false, prefixDefaultLocale: true, }) ); ``` - [#10671](https://togithub.com/withastro/astro/pull/10671) [`9e14a78cb05667af9821948c630786f74680090d`](https://togithub.com/withastro/astro/commit/9e14a78cb05667af9821948c630786f74680090d) Thanks [@fshafiee](https://togithub.com/fshafiee)! - Adds the `httpOnly`, `sameSite`, and `secure` options when deleting a cookie ##### Patch Changes - [#10747](https://togithub.com/withastro/astro/pull/10747) [`994337c99f84304df1147a14504659439a9a7326`](https://togithub.com/withastro/astro/commit/994337c99f84304df1147a14504659439a9a7326) Thanks [@lilnasy](https://togithub.com/lilnasy)! - Fixes an issue where functions could not be used as named slots. - [#10750](https://togithub.com/withastro/astro/pull/10750) [`7e825604ddf90c989537e07939a39dc249343897`](https://togithub.com/withastro/astro/commit/7e825604ddf90c989537e07939a39dc249343897) Thanks [@OliverSpeir](https://togithub.com/OliverSpeir)! - Fixes a false positive for "Invalid `tabindex` on non-interactive element" rule for roleless elements ( `div` and `span` ). - [#10745](https://togithub.com/withastro/astro/pull/10745) [`d51951ce6278d4b59deed938d65e1cb72b5102df`](https://togithub.com/withastro/astro/commit/d51951ce6278d4b59deed938d65e1cb72b5102df) Thanks [@lilnasy](https://togithub.com/lilnasy)! - Fixes an issue where CLI commands could not report the reason for failure before exiting. - [#10661](https://togithub.com/withastro/astro/pull/10661) [`e2cd7f4291912dadd4a654bc7917856c58a72a97`](https://togithub.com/withastro/astro/commit/e2cd7f4291912dadd4a654bc7917856c58a72a97) Thanks [@liruifengv](https://togithub.com/liruifengv)! - Fixed errorOverlay theme toggle bug. - Updated dependencies \[[`ccafa8d230f65c9302421a0ce0a0adc5824bfd55`](https://togithub.com/withastro/astro/commit/ccafa8d230f65c9302421a0ce0a0adc5824bfd55), [`683d51a5eecafbbfbfed3910a3f1fbf0b3531b99`](https://togithub.com/withastro/astro/commit/683d51a5eecafbbfbfed3910a3f1fbf0b3531b99)]: - [@astrojs/markdown-remark](https://togithub.com/astrojs/markdown-remark)[@5](https://togithub.com/5).1.0 - [@astrojs/telemetry](https://togithub.com/astrojs/telemetry)[@3](https://togithub.com/3).1.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/knope-dev/knope).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>