Change8

@astrojs/internal-helpers@0.7.5

Breaking Changes
📦 astroView on GitHub →
1 breaking🐛 1 fixes🔧 2 symbols

Summary

This patch release introduces stricter security for image data URIs requiring explicit configuration and fixes a bug in wildcard hostname pattern matching.

⚠️ Breaking Changes

  • Remote protocol checks for images now require explicit authorization for data URIs. Data URIs will no longer work by default for remote images.

Migration Steps

  1. To allow data URIs for remote images, update astro.config.mjs to include { protocol: 'data' } in the images.remotePatterns array.

🐛 Bug Fixes

  • Fixed wildcard hostname pattern matching to correctly reject hostnames without dots (e.g., preventing 'localhost' from matching '*.example.com').

🔧 Affected Symbols

images.remotePatternsastro.config.mjs