astro@5.15.9
Breaking Changes📦 astroView on GitHub →
⚠ 1 breaking✨ 1 features🐛 3 fixes🔧 4 symbols
Summary
This patch release introduces stricter security for remote image data URIs, improves font build logging, and fixes bugs related to server islands and image service passthroughs.
⚠️ Breaking Changes
- Remote protocol checks for images now require explicit authorization for data URIs. To continue using data URIs, you must add a remotePattern with protocol 'data' to your config.
Migration Steps
- Update astro.config.mjs to include { protocol: 'data' } in images.remotePatterns if your project relies on data URIs for remote images.
✨ New Features
- Improved experimental Fonts API build log to display the total number of downloaded files.
🐛 Bug Fixes
- Added handling for invalid encrypted props and slots in server islands.
- Fixed wildcard hostname pattern matching to correctly reject hostnames without dots (e.g., preventing 'localhost' from matching '*.example.com').
- Fixed passthroughImageService to prevent it from incorrectly generating webp images.
🔧 Affected Symbols
images.remotePatternspassthroughImageServiceserver islandsexperimental.fonts