[dependabot]

Bumps the astro-minor-patch group with 1 update in the /docs directory: astro.

Updates astro from 7.4.0 to 7.4.4

Release notes

Sourced from astro's releases.

astro@7.4.4

Patch Changes

• #18344 df838da Thanks @​edmundhung! - Allows astro add to configure tagged versions of official adapters

astro@7.4.4-beta.0

Patch Changes

• #18539 db62f3b Thanks @​matthewp! - Allows astro add to configure tagged versions of official adapters

astro@7.4.3

Patch Changes

• #18488 e4e25fa Thanks @​umeraamir69! - CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into script-src and style-src.

• #18500 e5a3a1b Thanks @​astro-factory! - Fixes <Image> and <Picture> emitting duplicate srcset candidates when densities contains equivalent values such as 1 and '1x'

• #18517 c3185b7 Thanks @​okxint! - Fix unhandled AbortError rejection when ClientRouter skips a pending view transition

• #18497 c712113 Thanks @​astro-factory! - Fixes an uncaught TypeError in the browser when a server:defer island request fails due to a network error. The fallback content is kept, as it is for non-200 responses.

• #18525 d0240b9 Thanks @​astro-factory! - Fixes a DEP0190 deprecation warning printed by astro info on Node.js 24 and later

• #18522 776b9a6 Thanks @​astro-factory! - Fixes memoryCache() serving an empty body for cached pages that return an empty 404 or 500 response. These responses now render the 404 or 500 error page on every request.

• #18511 d060ff9 Thanks @​astro-factory! - Fixes transition:name styles missing in dev when the element is inside a component that is only rendered through another component with no styles or scripts

• #18494 5fe699c Thanks @​astro-factory! - Fixes the astro CLI refusing to run on StackBlitz by allowing Node.js >=22.22.0 inside WebContainers, whose Node.js version users cannot change

• #18506 bf43a60 Thanks @​astro-factory! - Fixes <ClientRouter /> animating scroll restoration on back/forward navigation when scroll-behavior: smooth is set. Saved scroll positions are now restored instantly, matching the browser's native behavior.

• #18476 8ea79a2 Thanks @​astro-factory! - Fixes a DataCloneError crash when building pages that render SVG imports with <Image /> or getImage() while experimental.parallelPrerender is enabled.

• #18504 6dbd737 Thanks @​astro-factory! - Fixes <Picture> emitting a duplicate 1x candidate in <source> srcset when densities includes 1

• #18524 7524889 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Image />, <Picture />, <Code />, <Debug /> and <ClientRouter /> components when type-checking a project that extends astro/tsconfigs/strictest with tsc and @astrojs/ts-content-mapper

• #18493 3773941 Thanks @​astro-factory! - Fixes scoped styles of unused Astro components being included in the build when those components are re-exported from a barrel file

• #18512 1151b9e Thanks @​jp-knj! - Fixes CSP hashes added with Astro.csp from components rendered inside <body> being left out of the CSP <meta> element in static builds, including MDX pages

• Updated dependencies [6cf3423, edfbf4a]:

  • @​astrojs/telemetry@​3.4.2
  • @​astrojs/markdown-satteri@​0.4.6

astro@7.4.2

Patch Changes

• #18430 dda9ec3 Thanks @​Abhirup-99! - Speeds up content sync with experimental.collectionStorage: "chunked" by computing each character's UTF-8 width from its code point instead of encoding every character through TextEncoder. On a store of ~44k entries this cuts the chunking step from about 60 seconds to well under a second, with byte-identical output.

• #18438 5e0eaa4 Thanks @​astro-factory! - Fixes astro dev with @astrojs/cloudflare failing with Calling `require` for "node-fetch" when a server dependency such as cross-fetch requires node-fetch

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.4

Patch Changes

• #18344 df838da Thanks @​edmundhung! - Allows astro add to configure tagged versions of official adapters

7.4.3

Patch Changes

• #18488 e4e25fa Thanks @​umeraamir69! - CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into script-src and style-src.

• #18500 e5a3a1b Thanks @​astro-factory! - Fixes <Image> and <Picture> emitting duplicate srcset candidates when densities contains equivalent values such as 1 and '1x'

• #18517 c3185b7 Thanks @​okxint! - Fix unhandled AbortError rejection when ClientRouter skips a pending view transition

• #18497 c712113 Thanks @​astro-factory! - Fixes an uncaught TypeError in the browser when a server:defer island request fails due to a network error. The fallback content is kept, as it is for non-200 responses.

• #18525 d0240b9 Thanks @​astro-factory! - Fixes a DEP0190 deprecation warning printed by astro info on Node.js 24 and later

• #18522 776b9a6 Thanks @​astro-factory! - Fixes memoryCache() serving an empty body for cached pages that return an empty 404 or 500 response. These responses now render the 404 or 500 error page on every request.

• #18511 d060ff9 Thanks @​astro-factory! - Fixes transition:name styles missing in dev when the element is inside a component that is only rendered through another component with no styles or scripts

• #18494 5fe699c Thanks @​astro-factory! - Fixes the astro CLI refusing to run on StackBlitz by allowing Node.js >=22.22.0 inside WebContainers, whose Node.js version users cannot change

• #18506 bf43a60 Thanks @​astro-factory! - Fixes <ClientRouter /> animating scroll restoration on back/forward navigation when scroll-behavior: smooth is set. Saved scroll positions are now restored instantly, matching the browser's native behavior.

• #18476 8ea79a2 Thanks @​astro-factory! - Fixes a DataCloneError crash when building pages that render SVG imports with <Image /> or getImage() while experimental.parallelPrerender is enabled.

• #18504 6dbd737 Thanks @​astro-factory! - Fixes <Picture> emitting a duplicate 1x candidate in <source> srcset when densities includes 1

• #18524 7524889 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Image />, <Picture />, <Code />, <Debug /> and <ClientRouter /> components when type-checking a project that extends astro/tsconfigs/strictest with tsc and @astrojs/ts-content-mapper

• #18493 3773941 Thanks @​astro-factory! - Fixes scoped styles of unused Astro components being included in the build when those components are re-exported from a barrel file

• #18512 1151b9e Thanks @​jp-knj! - Fixes CSP hashes added with Astro.csp from components rendered inside <body> being left out of the CSP <meta> element in static builds, including MDX pages

• Updated dependencies [6cf3423, edfbf4a]:

  • @​astrojs/telemetry@​3.4.2
  • @​astrojs/markdown-satteri@​0.4.6

7.4.2

Patch Changes

• #18430 dda9ec3 Thanks @​Abhirup-99! - Speeds up content sync with experimental.collectionStorage: "chunked" by computing each character's UTF-8 width from its code point instead of encoding every character through TextEncoder. On a store of ~44k entries this cuts the chunking step from about 60 seconds to well under a second, with byte-identical output.

• #18438 5e0eaa4 Thanks @​astro-factory! - Fixes astro dev with @astrojs/cloudflare failing with Calling `require` for "node-fetch" when a server dependency such as cross-fetch requires node-fetch

• #18376 a4e201d Thanks @​okxint! - Fixes astro dev treating a stale lock file containing a Linux thread ID as a running Astro server. A successful process lookup with no matching PID now marks the lock as stale, preventing astro dev stop and astro dev --force from killing the unrelated process that owns the thread.

... (truncated)

Commits

• 883e672 [ci] release (#18540)
• df838da astro add: configure tagged official adapters (#18344)
• fda754d [ci] release (#18478)
• 776b9a6 Prevent memory cache from storing empty 404/500 responses that would be rerou...
• d060ff9 Fix transition:name styles silently dropped in dev when component is nested u...
• 290b196 Merge commit from fork
• d0240b9 fix(cli): drop shell: true from astro info package manager calls to avoid DEP...
• 7524889 Fix type errors in shipped components under the strictest TypeScript preset...
• d53d823 [ci] format
• 6dbd737 fix(assets): avoid duplicate 1x candidate in Picture source srcset when densi...
• Additional commits viewable in compare view

[DeDuva]

Validation failed — not merging. astro 7.4.0 → 7.4.2 (astro-minor-patch group, /docs), head 7c24d946.

Stage: local validation in a clean worktree of this PR's head — cd docs && npm ci succeeded, npm run build exited 1.

Error:

> astro build && npx pagefind --site dist

Node.js v22.22.0 is not supported by Astro!
Please upgrade Node.js to a supported version: ">=22.23.4"

Likely cause — a Node floor raised inside a patch release. astro@7.4.0 declares engines.node >=22.22.0; astro@7.4.2 declares >=22.23.4. Astro enforces this itself at startup, so it is a hard build failure rather than the advisory EBADENGINE warning npm prints. This repository's root package.json declares engines.node >=22.5.0 and docs/package.json declares no engines at all, so nothing in the tree records the new floor.

Why CI did not catch it. docs-quality is the only check that runs for docs/** changes here, and it only runs markdownlint-cli2 and cspell — it never installs docs/'s dependencies or builds the site. The workflow that does build the docs, Squad Docs — Build & Deploy, is currently disabled_manually. So a green tick on this PR says nothing about whether the docs still build.

Also note: this PR has gone to CONFLICTING against dev since #189 merged docs/package-lock.json in this run.

Recommended next action (nothing was changed here): decide the Node floor first — raising engines.node to >=22.23.4 (and declaring engines in docs/package.json) would make the requirement explicit for contributors, since CI's node-version: 22 silently resolves to a new enough 22.x while a developer on 22.5–22.23.3 cannot build the docs at all. Re-enabling the docs build workflow would also stop this class of change from passing unexamined.

@dependabot rebase

[DeDuva]

Verdict updated on a new head — still not merging, but for a narrower reason. astro 7.4.0 → 7.4.2 (astro-minor-patch group, /docs). Head is now 0f79dbe8; my previous comment on this PR refers to 7c24d946, which Dependabot rebased away immediately after that comment asked it to. The PR is no longer CONFLICTING — it is MERGEABLE / CLEAN and still merges cleanly against dev at 056df7b (verified with git merge-tree).

What changed since last week: nothing in this PR. The runner did. Local validation in a clean worktree of 0f79dbe8 now passes:

Command	Result
cd docs && npm ci	exit 0, 350 packages, tracked files unmodified
npm run build	exit 0 — Astro build + Pagefind indexed 170 pages
npm audit --package-lock-only	0 vulnerabilities

That is only because this runner's Node moved from 22.22.0 to 22.23.4, which is exactly the floor astro@7.4.2 requires. The underlying problem is unchanged, and it is the reason this is still not an automatic merge.

The finding, re-confirmed independently of the previous comment — straight from registry metadata rather than from the build output:

astro@7.4.0 engines.node = >=22.22.0
astro@7.4.1 engines.node = >=22.22.0
astro@7.4.2 engines.node = >=22.23.4

A Node floor raised inside a patch release. Astro enforces it itself at startup, so on an older 22.x it is a hard build failure, not an advisory EBADENGINE warning. This repository declares engines.node >=22.5.0 at the root and docs/package.json declares no engines at all, so after this merge nothing in the tree would record the real floor — and dev's docs would be unbuildable for any contributor on Node 22.5 – 22.23.3, a range the repository currently advertises as supported.

This is the "documented breaking behaviour despite a nominally non-breaking version" case, so the update is held for a human rather than merged on green.

Why CI will not tell you either way. docs-quality is the only check that runs for docs/** changes here, and it installs just markdownlint-cli2 and cspell via npm install --no-save before running markdownlint and cspell. It never installs docs/'s own dependencies and never builds the site. The workflow that does, Squad Docs — Build & Deploy, is disabled_manually. Separately, every setup-node in squad-ci.yml pins node-version: 22, which silently resolves to a new-enough 22.x — so CI would stay green on this change no matter what the floor said.

Recommended next action (nothing was changed here). Decide the Node floor first: raise the root engines.node to >=22.23.4 and declare engines in docs/package.json so the requirement is explicit for contributors, then this PR is a plain patch bump. Re-enabling the docs build workflow — or giving docs-quality a real cd docs && npm ci && npm run build step — would stop this whole class of change from passing unexamined, which is the more durable fix.