Skip to content

Bump the production-dependencies group across 1 directory with 2 updates - #52

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-c8a5831c47
Closed

Bump the production-dependencies group across 1 directory with 2 updates#52
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-c8a5831c47

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 2 updates in the / directory: @astrojs/cloudflare and astro.

Updates @astrojs/cloudflare from 14.1.7 to 14.2.0

Release notes

Sourced from @​astrojs/cloudflare's releases.

@​astrojs/cloudflare@​14.2.0

Minor Changes

  • #16194 2a59663 Thanks @​Daedalus-Icarus! - Adds opt-in build-time image optimization for the cloudflare-binding image service.

    When enabled, the Cloudflare IMAGES binding transforms static images in the workerd prerender environment, and the optimized bytes are written directly to the output directory. If the binding fails, it falls back to Sharp.

    To opt in, use the compound configuration form:

    export default defineConfig({
      adapter: cloudflare({
        imageService: { build: 'cloudflare-binding', runtime: 'cloudflare-binding' },
      }),
    });

    The string shorthand imageService: 'cloudflare-binding' preserves the current runtime-only behavior and is unaffected.

  • #16871 90c98ae Thanks @​adamchal! - When session: false is set in astro.config, the adapter no longer auto-wires the Cloudflare KV session driver. Combined with the matching astro change, this lets the session runtime tree-shake out of the Worker bundle.

  • #17084 961bbe5 Thanks @​matthewp! - Supports Astro's experimental incremental static builds. When experimental.incrementalBuild is enabled, the adapter skips unchanged pages between builds.

Patch Changes

  • #17576 0a79753 Thanks @​alexanderniebuhr! - Fixes /_image returning 500 in dev mode when using imageService: 'custom'. Astro's default dev image endpoint imports vite and node:fs, which cannot be loaded inside workerd. The custom and fallback cases now use the generic fetch-based endpoint in dev, matching the other image service modes. A user-configured image.endpoint is left untouched.

    Additionally, a dev-time warning is now logged when imageService: 'custom' resolves to the Sharp service (including when no image.service is configured), since Sharp's native binding cannot run inside workerd in dev or production.

  • #17481 0c32649 Thanks @​ondraulehla! - Fixes a crash on /_image cache hits when the Cloudflare cache provider is enabled. Responses served from the Workers Cache API have immutable headers, and the request handler crashed with "Can't modify immutable headers" when applying its default Cloudflare-CDN-Cache-Control: no-store header to them. The handler now rebuilds the response with mutable headers when needed.

  • #17347 ce83c39 Thanks @​astrobot-houston! - Fixes imageService: 'compile' producing unoptimized images when prerenderEnvironment is set to 'node'

  • #17594 2b8915a Thanks @​astrobot-houston! - Fixes a type-checking error when using app.use(cf()) from @astrojs/cloudflare/hono in projects with wrangler types-generated ExecutionContext declarations

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.3
Changelog

Sourced from @​astrojs/cloudflare's changelog.

14.2.0

Minor Changes

  • #16194 2a59663 Thanks @​Daedalus-Icarus! - Adds opt-in build-time image optimization for the cloudflare-binding image service.

    When enabled, the Cloudflare IMAGES binding transforms static images in the workerd prerender environment, and the optimized bytes are written directly to the output directory. If the binding fails, it falls back to Sharp.

    To opt in, use the compound configuration form:

    export default defineConfig({
      adapter: cloudflare({
        imageService: { build: 'cloudflare-binding', runtime: 'cloudflare-binding' },
      }),
    });

    The string shorthand imageService: 'cloudflare-binding' preserves the current runtime-only behavior and is unaffected.

  • #16871 90c98ae Thanks @​adamchal! - When session: false is set in astro.config, the adapter no longer auto-wires the Cloudflare KV session driver. Combined with the matching astro change, this lets the session runtime tree-shake out of the Worker bundle.

  • #17084 961bbe5 Thanks @​matthewp! - Supports Astro's experimental incremental static builds. When experimental.incrementalBuild is enabled, the adapter skips unchanged pages between builds.

Patch Changes

  • #17576 0a79753 Thanks @​alexanderniebuhr! - Fixes /_image returning 500 in dev mode when using imageService: 'custom'. Astro's default dev image endpoint imports vite and node:fs, which cannot be loaded inside workerd. The custom and fallback cases now use the generic fetch-based endpoint in dev, matching the other image service modes. A user-configured image.endpoint is left untouched.

    Additionally, a dev-time warning is now logged when imageService: 'custom' resolves to the Sharp service (including when no image.service is configured), since Sharp's native binding cannot run inside workerd in dev or production.

  • #17481 0c32649 Thanks @​ondraulehla! - Fixes a crash on /_image cache hits when the Cloudflare cache provider is enabled. Responses served from the Workers Cache API have immutable headers, and the request handler crashed with "Can't modify immutable headers" when applying its default Cloudflare-CDN-Cache-Control: no-store header to them. The handler now rebuilds the response with mutable headers when needed.

  • #17347 ce83c39 Thanks @​astrobot-houston! - Fixes imageService: 'compile' producing unoptimized images when prerenderEnvironment is set to 'node'

  • #17594 2b8915a Thanks @​astrobot-houston! - Fixes a type-checking error when using app.use(cf()) from @astrojs/cloudflare/hono in projects with wrangler types-generated ExecutionContext declarations

  • Updated dependencies []:

    • @​astrojs/underscore-redirects@​1.0.3
Commits
  • 60e9432 [ci] release (#17558)
  • a2240c4 fix(test): provide experimental config in Cloudflare session-false test (#17606)
  • 961bbe5 Experimental incremental static builds (#17084)
  • 90c98ae feat(session): add session: false to opt out of session support (#16871)
  • 2b8915a fix(cloudflare): inline executionCtx type in HonoCloudflareContextLike to avo...
  • 0a79753 fix(cloudflare): use workerd-safe dev image endpoint for custom image service...
  • 2a59663 Add opt-in Cloudflare binding image optimization during build (#16194)
  • 0c32649 fix(cloudflare): don't mutate immutable headers on cached responses (#17481)
  • ce83c39 fix(@​astrojs/cloudflare): fix imageService: 'compile' silent noop with `pre...
  • See full diff in compare view

Updates astro from 7.1.6 to 7.2.0

Release notes

Sourced from astro's releases.

astro@7.2.0

Minor Changes

  • #17174 0224a3a Thanks @​matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

    This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.

    astro preview --background

    When a preview server is running in the background, you can inspect or stop it with new astro preview subcommands:

    astro preview status
    astro preview logs
    astro preview logs --follow
    astro preview stop

    If Astro detects that astro preview is being run by an AI coding agent, background mode is enabled automatically. This matches the existing behavior for astro dev, allowing agents to continue working after the preview server starts while still receiving the server URL and process ID.

    To opt out of automatic background mode for preview servers, set ASTRO_PREVIEW_BACKGROUND=0 before running astro preview.

  • #17532 7f94895 Thanks @​florian-lefebvre! - Adds support for paths relative to your project root in logger.entrypoint

    Previously, pointing logger.entrypoint at a custom log handler living in your own project required building an absolute URL. You can now write the path directly:

    // astro.config.mjs
    import { defineConfig } from 'astro/config';
    export default defineConfig({
    logger: {
    
    entrypoint: new URL('./src/logger.js', import.meta.url),
    
    
    entrypoint: './src/logger.js',
    },
    });

Paths starting with ./ or ../ are resolved against your project root. Package specifiers such as @org/astro-logger, absolute paths, and URL entrypoints keep working as before.

  • #17084 961bbe5 Thanks @​matthewp! - Widens the AstroPrerenderer render() return type so prerenderers can report incremental-build metadata

    A prerenderer's render() may now resolve to either a Response (as before) or a PrerenderResult object that pairs the response with the content entries and optimized-image transforms the page resolved. This lets prerenderers that render out of process (for example, in an adapter's runtime like workerd) report those dependencies back to the build, so incremental static builds can track and replay them for skipped pages.

    import type { AstroPrerenderer, PrerenderResult } from 'astro';
    const prerenderer: AstroPrerenderer = {

  • ... (truncated)

    Changelog

    Sourced from astro's changelog.

    7.2.0

    Minor Changes

    • #17174 0224a3a Thanks @​matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

      This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.

      astro preview --background

      When a preview server is running in the background, you can inspect or stop it with new astro preview subcommands:

      astro preview status
      astro preview logs
      astro preview logs --follow
      astro preview stop

      If Astro detects that astro preview is being run by an AI coding agent, background mode is enabled automatically. This matches the existing behavior for astro dev, allowing agents to continue working after the preview server starts while still receiving the server URL and process ID.

      To opt out of automatic background mode for preview servers, set ASTRO_PREVIEW_BACKGROUND=0 before running astro preview.

    • #17532 7f94895 Thanks @​florian-lefebvre! - Adds support for paths relative to your project root in logger.entrypoint

      Previously, pointing logger.entrypoint at a custom log handler living in your own project required building an absolute URL. You can now write the path directly:

      // astro.config.mjs
      import { defineConfig } from 'astro/config';
      export default defineConfig({
      logger: {
      
      entrypoint: new URL('./src/logger.js', import.meta.url),
      
      
      entrypoint: './src/logger.js',
      },
      });

    Paths starting with ./ or ../ are resolved against your project root. Package specifiers such as @org/astro-logger, absolute paths, and URL entrypoints keep working as before.

  • #17084 961bbe5 Thanks @​matthewp! - Widens the AstroPrerenderer render() return type so prerenderers can report incremental-build metadata

    A prerenderer's render() may now resolve to either a Response (as before) or a PrerenderResult object that pairs the response with the content entries and optimized-image transforms the page resolved. This lets prerenderers that render out of process (for example, in an adapter's runtime like workerd) report those dependencies back to the build, so incremental static builds can track and replay them for skipped pages.

    import type { AstroPrerenderer, PrerenderResult } from 'astro';

  • ... (truncated)

    Commits

    @dependabot dependabot Bot added the dependencies Dependency updates label Aug 10, 2026
    @dependabot
    dependabot Bot requested a review from sametbasbug as a code owner August 10, 2026 03:12
    @dependabot dependabot Bot added the dependencies Dependency updates label Aug 10, 2026
    @dependabot dependabot Bot changed the title Bump the production-dependencies group with 2 updates Bump the production-dependencies group across 1 directory with 2 updates Aug 10, 2026
    @dependabot
    dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-c8a5831c47 branch from 34db870 to cbe3454 Compare August 10, 2026 12:52
    Bumps the production-dependencies group with 2 updates in the / directory: [@astrojs/cloudflare](https://github.com/withastro/astro/tree/HEAD/packages/integrations/cloudflare) and [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro).
    
    
    Updates `@astrojs/cloudflare` from 14.1.7 to 14.2.0
    - [Release notes](https://github.com/withastro/astro/releases)
    - [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/cloudflare/CHANGELOG.md)
    - [Commits](https://github.com/withastro/astro/commits/@astrojs/cloudflare@14.2.0/packages/integrations/cloudflare)
    
    Updates `astro` from 7.1.6 to 7.2.0
    - [Release notes](https://github.com/withastro/astro/releases)
    - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
    - [Commits](https://github.com/withastro/astro/commits/astro@7.2.0/packages/astro)
    
    ---
    updated-dependencies:
    - dependency-name: "@astrojs/cloudflare"
      dependency-version: 14.2.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: production-dependencies
    - dependency-name: astro
      dependency-version: 7.2.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: production-dependencies
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-c8a5831c47 branch from cbe3454 to b1975a8 Compare August 10, 2026 13:41
    sametbasbug added a commit that referenced this pull request Aug 10, 2026
    Merging #52 and #53 separately would have been two more production
    deploys on top of the wordmark fix, since every push to main deploys.
    Resolving both into a single lockfile costs one.
    
    astro 7.1.6 -> 7.2.0 and @astrojs/cloudflare 14.1.7 -> 14.2.0 are the
    only ones that touch what ships; the rest are tooling. @astrojs/check
    0.9.10 still accepts this astro, so the peer range that keeps TypeScript
    7 out is unchanged.
    
    Verified: full build green (2810 site, 557 browser, 81 production config
    assertions), astro check clean over 182 files, and the worker bundle
    dry-run builds under the new adapter.
    
    Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
    @dependabot @github

    dependabot Bot commented on behalf of github Aug 10, 2026

    Copy link
    Copy Markdown
    Contributor Author

    Looks like these dependencies are no longer updatable, so this is no longer needed.

    @dependabot dependabot Bot closed this Aug 10, 2026
    @dependabot
    dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-c8a5831c47 branch August 10, 2026 19:46
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    dependencies Dependency updates

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    0 participants