chore(deps): bump astro, @astrojs/cloudflare and @astrojs/mdx in /astro-blog-starter-template by dependabot[bot] · Pull Request #1065 · cloudflare/templates

dependabot · 2026-07-21T05:26:06Z

Bumps astro, @astrojs/cloudflare and @astrojs/mdx. These dependencies needed to be updated together.
Updates astro from 5.16.9 to 7.2.2

Release notes

Sourced from astro's releases.

astro@7.2.2

Patch Changes

#17611 9bc3207 Thanks @thelazylamaGit! - Fixes component styles rendered from content entries remaining stale until a second save when an adapter uses Astro's fallback development environment

#17634 2267eee Thanks @astrobot-houston! - Fixes incremental builds dropping optimized images for cached pages when using a collectStaticImages prerenderer (e.g. @astrojs/cloudflare with compile-time image optimization)

#17650 4cdf128 Thanks @astrobot-houston! - Fixes intermittent ImageNotFound errors during build on projects with many images. The build now limits concurrent image file reads to avoid exhausting OS file descriptors (EMFILE) and retries transient I/O errors with backoff. Non-transient errors are no longer silently swallowed.

#17683 2378221 Thanks @astrobot-houston! - Fixes prerenderConflictBehavior not applying to content collection duplicate ID warnings in the glob() and file() loaders. Setting it to 'error' now throws during content sync, and 'ignore' suppresses the warning.

#17659 90c6ea4 Thanks @astrobot-houston! - Fixes the Fonts API breaking experimental.incrementalBuild caching by embedding a build-local, randomly-assigned server port in generated code used for the dependency hash

#17630 fd1d9ee Thanks @ericclemmons! - Fixes incremental builds becoming prohibitively slow for sites with many pages or content entries that share a large dependency graph.

#17690 93beecc Thanks @NgoQuocViet2001! - Prevents files in directories whose names start with pages from being treated as page routes

#17671 09f0dc7 Thanks @tarikermis! - Fixes astro dev refusing to start after a Docker container restart when an unrelated process reuses the PID from a persisted lock file. Astro now checks the process command across platforms, so stale lock files are cleaned up and --force does not signal the unrelated process.

astro@7.2.1

Patch Changes

#17612 7133730 Thanks @thelazylamaGit! - Fixes CSS hot module replacement after navigating between pages with ClientRouter

#17628 4ada248 Thanks @astrobot-houston! - Fixes a CSP violation when using both security.csp and experimental.clientPrerender with data-astro-prefetch links. The dynamically injected <script type="speculationrules"> now uses a static "source": "document" approach with a CSS selector, producing a deterministic payload that is hashed and included in the CSP script-src directive at build time.

#17605 89e4647 Thanks @ashleigh-yeoman! - Fixes middleware HMR not responding to changes in imported modules. Previously, only direct edits to the middleware file would trigger a reload.

#17582 bd2c1a5 Thanks @astrobot-houston! - Fixes a regression where content collection reference() fields silently accepted entry IDs that don't exist, such as an ID that doesn't match a loader's slugified version of it. Astro now logs an error for references that point to a missing entry after all loaders finish syncing.

#17661 97b0cc7 Thanks @ArmandPhilippot! - Improves Markdown options documentation with links to the Markdown guide and official processors.

#17349 4328c73 Thanks @astrobot-houston! - Fixes an issue where requests handled by the dev prerender environment (e.g. /_image with @astrojs/cloudflare's prerenderEnvironment: 'node') returned a 500 when a prerendered catch-all route existed, because non-prerendered route modules were imported in an environment where their runtime-specific APIs are unavailable

#17603 722eed6 Thanks @astrobot-houston! - Fixes <video> and <audio> elements being non-functional after navigating via view transitions (<ClientRouter />)

#17616 3a890d2 Thanks @lazerg! - Fixes experimental.incrementalBuild re-rendering unchanged routes that import more than one asset. The route's dependency hash depended on the order the assets finished building, so two builds of identical sources could produce different hashes. The hash is now based on the file name each asset resolves to.

#17547 fba468c Thanks @dmgawel! - Improves getCollection() and getEntry() performance for entries without local image references

#17602 16e0d9d Thanks @astrobot-houston! - Fixes a build error caused by hash collisions in generated content collection image import identifiers

astro@7.2.0

Minor Changes
#17174 0224a3a Thanks @matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.

... (truncated)

Changelog

Sourced from astro's changelog.

7.2.2

Patch Changes

#17611 9bc3207 Thanks @thelazylamaGit! - Fixes component styles rendered from content entries remaining stale until a second save when an adapter uses Astro's fallback development environment

#17634 2267eee Thanks @astrobot-houston! - Fixes incremental builds dropping optimized images for cached pages when using a collectStaticImages prerenderer (e.g. @astrojs/cloudflare with compile-time image optimization)

#17650 4cdf128 Thanks @astrobot-houston! - Fixes intermittent ImageNotFound errors during build on projects with many images. The build now limits concurrent image file reads to avoid exhausting OS file descriptors (EMFILE) and retries transient I/O errors with backoff. Non-transient errors are no longer silently swallowed.

#17683 2378221 Thanks @astrobot-houston! - Fixes prerenderConflictBehavior not applying to content collection duplicate ID warnings in the glob() and file() loaders. Setting it to 'error' now throws during content sync, and 'ignore' suppresses the warning.

#17659 90c6ea4 Thanks @astrobot-houston! - Fixes the Fonts API breaking experimental.incrementalBuild caching by embedding a build-local, randomly-assigned server port in generated code used for the dependency hash

#17630 fd1d9ee Thanks @ericclemmons! - Fixes incremental builds becoming prohibitively slow for sites with many pages or content entries that share a large dependency graph.

#17690 93beecc Thanks @NgoQuocViet2001! - Prevents files in directories whose names start with pages from being treated as page routes

#17671 09f0dc7 Thanks @tarikermis! - Fixes astro dev refusing to start after a Docker container restart when an unrelated process reuses the PID from a persisted lock file. Astro now checks the process command across platforms, so stale lock files are cleaned up and --force does not signal the unrelated process.

7.2.1

Patch Changes

#17612 7133730 Thanks @thelazylamaGit! - Fixes CSS hot module replacement after navigating between pages with ClientRouter

#17628 4ada248 Thanks @astrobot-houston! - Fixes a CSP violation when using both security.csp and experimental.clientPrerender with data-astro-prefetch links. The dynamically injected <script type="speculationrules"> now uses a static "source": "document" approach with a CSS selector, producing a deterministic payload that is hashed and included in the CSP script-src directive at build time.

#17605 89e4647 Thanks @ashleigh-yeoman! - Fixes middleware HMR not responding to changes in imported modules. Previously, only direct edits to the middleware file would trigger a reload.

#17582 bd2c1a5 Thanks @astrobot-houston! - Fixes a regression where content collection reference() fields silently accepted entry IDs that don't exist, such as an ID that doesn't match a loader's slugified version of it. Astro now logs an error for references that point to a missing entry after all loaders finish syncing.

#17661 97b0cc7 Thanks @ArmandPhilippot! - Improves Markdown options documentation with links to the Markdown guide and official processors.

#17349 4328c73 Thanks @astrobot-houston! - Fixes an issue where requests handled by the dev prerender environment (e.g. /_image with @astrojs/cloudflare's prerenderEnvironment: 'node') returned a 500 when a prerendered catch-all route existed, because non-prerendered route modules were imported in an environment where their runtime-specific APIs are unavailable

#17603 722eed6 Thanks @astrobot-houston! - Fixes <video> and <audio> elements being non-functional after navigating via view transitions (<ClientRouter />)

#17616 3a890d2 Thanks @lazerg! - Fixes experimental.incrementalBuild re-rendering unchanged routes that import more than one asset. The route's dependency hash depended on the order the assets finished building, so two builds of identical sources could produce different hashes. The hash is now based on the file name each asset resolves to.

#17547 fba468c Thanks @dmgawel! - Improves getCollection() and getEntry() performance for entries without local image references

#17602 16e0d9d Thanks @astrobot-houston! - Fixes a build error caused by hash collisions in generated content collection image import identifiers

7.2.0

Minor Changes

#17174 0224a3a Thanks @matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

... (truncated)

Commits

14f8f87 [ci] release (#17673)
93beecc Fix page directory boundary detection (#17690)
2378221 fix(content): apply prerenderConflictBehavior to content collection duplicate...
fd1d9ee fix(build): Optimize incremental builds with shared content graph hashing (#1...
8df416a test: skip type check tests in ecosystem-ci (#17587)
09f0dc7 Detect stale dev server lock files after PID reuse (#17671)
2267eee fix: preserve restored image transforms when merging adapter-collected images...
4cdf128 fix(assets): prevent EMFILE errors on large image builds with concurrency lim...
90c6ea4 fix(fonts): strip volatile server address from incremental build hash (#17659)
9bc3207 fix(dev): apply the dev CSS plugin to the fallback Astro environment (#17611)
Additional commits viewable in compare view

Updates @astrojs/cloudflare from 12.6.12 to 14.2.1

Release notes

Sourced from @astrojs/cloudflare's releases.

@astrojs/cloudflare@14.2.1

Patch Changes

#17627 ba6a9f6 Thanks @astrobot-houston! - Fixes the astro peer dependency range from ^7.0.0 to ^7.2.0. The adapter imports symbols (beginContentEntryCollection, beginImageCollection, endContentEntryCollection, endImageCollection) from astro/app that were added in Astro 7.2.0, so earlier versions fail at build time with a MISSING_EXPORT error.

Updated dependencies [0891ac9]:

@astrojs/underscore-redirects@1.0.4

@astrojs/cloudflare@14.2.0

Minor Changes
#16194 2a59663 Thanks @Daedalus-Icarus! - Adds opt-in build-time image optimization for the cloudflare-binding image service.

When enabled, the Cloudflare IMAGES binding transforms static images in the workerd prerender environment, and the optimized bytes are written directly to the output directory. If the binding fails, it falls back to Sharp.

To opt in, use the compound configuration form:
export default defineConfig({
  adapter: cloudflare({
    imageService: { build: 'cloudflare-binding', runtime: 'cloudflare-binding' },
  }),
});
The string shorthand imageService: 'cloudflare-binding' preserves the current runtime-only behavior and is unaffected.
#16871 90c98ae Thanks @adamchal! - When session: false is set in astro.config, the adapter no longer auto-wires the Cloudflare KV session driver. Combined with the matching astro change, this lets the session runtime tree-shake out of the Worker bundle.

#17084 961bbe5 Thanks @matthewp! - Supports Astro's experimental incremental static builds. When experimental.incrementalBuild is enabled, the adapter skips unchanged pages between builds.
Patch Changes

#17576 0a79753 Thanks @alexanderniebuhr! - Fixes /_image returning 500 in dev mode when using imageService: 'custom'. Astro's default dev image endpoint imports vite and node:fs, which cannot be loaded inside workerd. The custom and fallback cases now use the generic fetch-based endpoint in dev, matching the other image service modes. A user-configured image.endpoint is left untouched.

Additionally, a dev-time warning is now logged when imageService: 'custom' resolves to the Sharp service (including when no image.service is configured), since Sharp's native binding cannot run inside workerd in dev or production.

#17481 0c32649 Thanks @ondraulehla! - Fixes a crash on /_image cache hits when the Cloudflare cache provider is enabled. Responses served from the Workers Cache API have immutable headers, and the request handler crashed with "Can't modify immutable headers" when applying its default Cloudflare-CDN-Cache-Control: no-store header to them. The handler now rebuilds the response with mutable headers when needed.

#17347 ce83c39 Thanks @astrobot-houston! - Fixes imageService: 'compile' producing unoptimized images when prerenderEnvironment is set to 'node'

#17594 2b8915a Thanks @astrobot-houston! - Fixes a type-checking error when using app.use(cf()) from @astrojs/cloudflare/hono in projects with wrangler types-generated ExecutionContext declarations

Updated dependencies []:

@astrojs/underscore-redirects@1.0.3

@astrojs/cloudflare@14.1.7

Patch Changes

#17543 bbc1ec9 Thanks @ematipico! - Fixes a bug where Cloudflare couldn't load chunked collections via experimental.collectionStorage: 'chunked'.

... (truncated)

Changelog

Sourced from @astrojs/cloudflare's changelog.

14.2.1

Patch Changes

#17627 ba6a9f6 Thanks @astrobot-houston! - Fixes the astro peer dependency range from ^7.0.0 to ^7.2.0. The adapter imports symbols (beginContentEntryCollection, beginImageCollection, endContentEntryCollection, endImageCollection) from astro/app that were added in Astro 7.2.0, so earlier versions fail at build time with a MISSING_EXPORT error.

Updated dependencies [0891ac9]:

@astrojs/underscore-redirects@1.0.4

14.2.0

Minor Changes
#16194 2a59663 Thanks @Daedalus-Icarus! - Adds opt-in build-time image optimization for the cloudflare-binding image service.

When enabled, the Cloudflare IMAGES binding transforms static images in the workerd prerender environment, and the optimized bytes are written directly to the output directory. If the binding fails, it falls back to Sharp.

To opt in, use the compound configuration form:
export default defineConfig({
  adapter: cloudflare({
    imageService: { build: 'cloudflare-binding', runtime: 'cloudflare-binding' },
  }),
});
The string shorthand imageService: 'cloudflare-binding' preserves the current runtime-only behavior and is unaffected.
#16871 90c98ae Thanks @adamchal! - When session: false is set in astro.config, the adapter no longer auto-wires the Cloudflare KV session driver. Combined with the matching astro change, this lets the session runtime tree-shake out of the Worker bundle.

#17084 961bbe5 Thanks @matthewp! - Supports Astro's experimental incremental static builds. When experimental.incrementalBuild is enabled, the adapter skips unchanged pages between builds.
Patch Changes

#17576 0a79753 Thanks @alexanderniebuhr! - Fixes /_image returning 500 in dev mode when using imageService: 'custom'. Astro's default dev image endpoint imports vite and node:fs, which cannot be loaded inside workerd. The custom and fallback cases now use the generic fetch-based endpoint in dev, matching the other image service modes. A user-configured image.endpoint is left untouched.

Additionally, a dev-time warning is now logged when imageService: 'custom' resolves to the Sharp service (including when no image.service is configured), since Sharp's native binding cannot run inside workerd in dev or production.

#17481 0c32649 Thanks @ondraulehla! - Fixes a crash on /_image cache hits when the Cloudflare cache provider is enabled. Responses served from the Workers Cache API have immutable headers, and the request handler crashed with "Can't modify immutable headers" when applying its default Cloudflare-CDN-Cache-Control: no-store header to them. The handler now rebuilds the response with mutable headers when needed.

#17347 ce83c39 Thanks @astrobot-houston! - Fixes imageService: 'compile' producing unoptimized images when prerenderEnvironment is set to 'node'

#17594 2b8915a Thanks @astrobot-houston! - Fixes a type-checking error when using app.use(cf()) from @astrojs/cloudflare/hono in projects with wrangler types-generated ExecutionContext declarations

Updated dependencies []:

@astrojs/underscore-redirects@1.0.3

14.1.7

... (truncated)

Commits

d081033 [ci] release (#17608)
7c4bf1b Add Cloudflare Actions build regression coverage (#17137)
ba6a9f6 fix(cloudflare): bump astro peer dependency to ^7.2.0 (#17627)
4328c73 Fix /_image 500 when catch-all prerendered route is combined with prerenderEn...
60e9432 [ci] release (#17558)
a2240c4 fix(test): provide experimental config in Cloudflare session-false test (#17606)
961bbe5 Experimental incremental static builds (#17084)
90c98ae feat(session): add session: false to opt out of session support (#16871)
2b8915a fix(cloudflare): inline executionCtx type in HonoCloudflareContextLike to avo...
0a79753 fix(cloudflare): use workerd-safe dev image endpoint for custom image service...
Additional commits viewable in compare view

Updates @astrojs/mdx from 4.3.13 to 7.0.5

Release notes

Sourced from @astrojs/mdx's releases.

@astrojs/mdx@7.0.5

Patch Changes

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

@astrojs/markdown-remark@7.2.2

@astrojs/mdx@7.0.4

Patch Changes

#17514 41a00dd Thanks @gtritchie! - Fixes a bug where the integration was emitting React-cased attribute names.

@astrojs/mdx@7.0.3

Patch Changes

#17341 64b0d66 Thanks @Princesseuh! - Fixes custom pre components not applying to syntax-highlighted code blocks when using the Sätteri Markdown processor with MDX.

@astrojs/mdx@7.0.2

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

@astrojs/markdown-remark@7.2.1

@astrojs/mdx@7.0.1

Patch Changes

#17249 02b73b0 Thanks @ematipico! - Fixes an issue where the peerDependencies field used incorrect dependencies.

Changelog

Sourced from @astrojs/mdx's changelog.

7.0.5

Patch Changes

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

@astrojs/markdown-remark@7.2.2

7.0.4

Patch Changes

#17514 41a00dd Thanks @gtritchie! - Fixes a bug where the integration was emitting React-cased attribute names.

7.0.3

Patch Changes

#17341 64b0d66 Thanks @Princesseuh! - Fixes custom pre components not applying to syntax-highlighted code blocks when using the Sätteri Markdown processor with MDX.

7.0.2

Patch Changes

Updated dependencies [eb6f97e]:

@astrojs/internal-helpers@0.10.1

@astrojs/markdown-remark@7.2.1

7.0.1

Patch Changes

#17249 02b73b0 Thanks @ematipico! - Fixes an issue where the peerDependencies field used incorrect dependencies.

7.0.0

Major Changes

#15819 cafec4e Thanks @delucis! - Upgrade to Vite v8

Minor Changes
#17093 4585fe5 Thanks @Princesseuh! - Replaces the import entrypoint of getContainerRenderer()

A new container-renderer entrypoint exporting getContainerRenderer() has been added to the following integrations: React, Preact, Svelte, SolidJS, Vue, and MDX. This prevents bundlers from trying to bundle unrelated exports from the package root when only the Container API is used.

If you are using the Container API, update your import statements to use the new entrypoint. The following example updates the getContainerRenderer() import for React:
- import { getContainerRenderer } from '@astrojs/react';

... (truncated)

Commits

b0535ca [ci] release (#17528)
112d3ea [ci] release (#17469)
41a00dd fix(mdx): emit HTML attribute casing on the Sätteri MDX path (#17514)
dec7692 [ci] release (#17338)
64b0d66 fix(satteri): route highlighted code blocks through MDX pre components (#17341)
a86160e [ci] release (#17256)
7d8ec1f [ci] release (#17237)
02b73b0 fix: peer deps of packages (#17249)
0a054e7 chore(head): normalize html charset declarations (#17197)
2bfb179 chore: simpler package.json types (#17229)
Additional commits viewable in compare view

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/astro-blog-starter-template/multi-2159b973fa branch 2 times, most recently from 44f86a6 to dbac2da Compare August 14, 2026 14:57

dependabot Bot force-pushed the dependabot/npm_and_yarn/astro-blog-starter-template/multi-2159b973fa branch from dbac2da to e4c5786 Compare August 14, 2026 15:37

Navigation Menu

Uh oh!

chore(deps): bump astro, @astrojs/cloudflare and @astrojs/mdx in /astro-blog-starter-template - #1065

chore(deps): bump astro, @astrojs/cloudflare and @astrojs/mdx in /astro-blog-starter-template#1065
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/astro-blog-starter-template/multi-2159b973fa

dependabot Bot commented on behalf of github Jul 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

astro@7.2.2

Patch Changes

astro@7.2.1

Patch Changes

astro@7.2.0

Minor Changes

7.2.2

Patch Changes

7.2.1

Patch Changes

7.2.0

Minor Changes

@​astrojs/cloudflare@​14.2.1

Patch Changes

@​astrojs/cloudflare@​14.2.0

Minor Changes

Patch Changes

@​astrojs/cloudflare@​14.1.7

Patch Changes

14.2.1

Patch Changes

14.2.0

Minor Changes

Patch Changes

14.1.7

@​astrojs/mdx@​7.0.5

Patch Changes

@​astrojs/mdx@​7.0.4

Patch Changes

@​astrojs/mdx@​7.0.3

Patch Changes

@​astrojs/mdx@​7.0.2

Patch Changes

@​astrojs/mdx@​7.0.1

Patch Changes

7.0.5

Patch Changes

7.0.4

Patch Changes

7.0.3

Patch Changes

7.0.2

Patch Changes

7.0.1

Patch Changes

7.0.0

Major Changes

Minor Changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 21, 2026 •

edited

Loading

`@astrojs/cloudflare@14`.2.1

`@astrojs/cloudflare@14`.2.0

`@astrojs/cloudflare@14`.1.7

`@astrojs/mdx@7`.0.5

`@astrojs/mdx@7`.0.4

`@astrojs/mdx@7`.0.3

`@astrojs/mdx@7`.0.2

`@astrojs/mdx@7`.0.1