Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Aug 20, 2025

Bumps astro and @astrojs/mdx. These dependencies needed to be updated together.
Updates astro from 2.4.5 to 5.13.2

Release notes

Sourced from astro's releases.

astro@5.13.2

Patch Changes

  • 4d16de7 Thanks @​ematipico! - Improves the detection of remote paths in the _image endpoint. Now href parameters that start with // are considered remote paths.

  • Updated dependencies [4d16de7]:

    • @​astrojs/internal-helpers@​0.7.2
    • @​astrojs/markdown-remark@​6.3.6

astro@5.13.1

Patch Changes

astro@5.13.0

Minor Changes

  • #14173 39911b8 Thanks @​florian-lefebvre! - Adds an experimental flag staticImportMetaEnv to disable the replacement of import.meta.env values with process.env calls and their coercion of environment variable values. This supersedes the rawEnvValues experimental flag, which is now removed.

    Astro allows you to configure a type-safe schema for your environment variables, and converts variables imported via astro:env into the expected type. This is the recommended way to use environment variables in Astro, as it allows you to easily see and manage whether your variables are public or secret, available on the client or only on the server at build time, and the data type of your values.

    However, you can still access environment variables through process.env and import.meta.env directly when needed. This was the only way to use environment variables in Astro before astro:env was added in Astro 5.0, and Astro's default handling of import.meta.env includes some logic that was only needed for earlier versions of Astro.

    The experimental.staticImportMetaEnv flag updates the behavior of import.meta.env to align with Vite's handling of environment variables and for better ease of use with Astro's current implementations and features. This will become the default behavior in Astro 6.0, and this early preview is introduced as an experimental feature.

    Currently, non-public import.meta.env environment variables are replaced by a reference to process.env. Additionally, Astro may also convert the value type of your environment variables used through import.meta.env, which can prevent access to some values such as the strings "true" (which is converted to a boolean value), and "1" (which is converted to a number).

    The experimental.staticImportMetaEnv flag simplifies Astro's default behavior, making it easier to understand and use. Astro will no longer replace any import.meta.env environment variables with a process.env call, nor will it coerce values.

    To enable this feature, add the experimental flag in your Astro config and remove rawEnvValues if it was enabled:

    // astro.config.mjs
    import { defineConfig } from "astro/config";
    export default defineConfig({
    
    experimental: {
    staticImportMetaEnv: true
    
    
    rawEnvValues: false
    
    
    }
    });

Updating your project

If you were relying on Astro's default coercion, you may need to update your project code to apply it manually:

// src/components/MyComponent.astro
- const enabled: boolean = import.meta.env.ENABLED;

... (truncated)

Changelog

Sourced from astro's changelog.

2.10.14

Patch Changes

2.10.13

Patch Changes

2.10.12

Patch Changes

  • #8144 04caa99c4 Thanks @​lilnasy! - Fixed an issue where data entries' id included backslashes instead of forward slashes on Windows.

2.10.11

Patch Changes

2.10.10

Patch Changes

... (truncated)

Commits

Updates @astrojs/mdx from 0.19.1 to 4.3.4

Release notes

Sourced from @​astrojs/mdx's releases.

@​astrojs/mdx@​4.3.4

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.6

@​astrojs/mdx@​4.3.3

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.5

@​astrojs/mdx@​4.3.2

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.4

@​astrojs/mdx@​4.3.1

Patch Changes

  • Updated dependencies [6bd5f75]:
    • @​astrojs/markdown-remark@​6.3.3
Changelog

Sourced from @​astrojs/mdx's changelog.

4.3.4

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.6

4.3.3

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.5

4.3.2

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.4

4.3.1

Patch Changes

  • Updated dependencies [6bd5f75]:
    • @​astrojs/markdown-remark@​6.3.3

4.3.0

Minor Changes

  • #13809 3c3b492 Thanks @​ascorbic! - Increases minimum Node.js version to 18.20.8

    Node.js 18 has now reached end-of-life and should not be used. For now, Astro will continue to support Node.js 18.20.8, which is the final LTS release of Node.js 18, as well as Node.js 20 and Node.js 22 or later. We will drop support for Node.js 18 in a future release, so we recommend upgrading to Node.js 22 as soon as possible. See Astro's Node.js support policy for more details.

    ⚠️ Important note for users of Cloudflare Pages: The current build image for Cloudflare Pages uses Node.js 18.17.1 by default, which is no longer supported by Astro. If you are using Cloudflare Pages you should override the default Node.js version to Node.js 22. This does not affect users of Cloudflare Workers, which uses Node.js 22 by default.

Patch Changes

  • Updated dependencies []:
    • @​astrojs/markdown-remark@​6.3.2

4.2.6

Patch Changes

4.2.5

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) and [@astrojs/mdx](https://github.com/withastro/astro/tree/HEAD/packages/integrations/mdx). These dependencies needed to be updated together.

Updates `astro` from 2.4.5 to 5.13.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v2.md)
- [Commits](https://github.com/withastro/astro/commits/astro@5.13.2/packages/astro)

Updates `@astrojs/mdx` from 0.19.1 to 4.3.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/mdx/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/mdx@4.3.4/packages/integrations/mdx)

---
updated-dependencies:
- dependency-name: astro
  dependency-version: 5.13.2
  dependency-type: direct:development
- dependency-name: "@astrojs/mdx"
  dependency-version: 4.3.4
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 20, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Sep 17, 2025

Superseded by #68.

@dependabot dependabot bot closed this Sep 17, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/multi-4bbe907d1e branch September 17, 2025 19:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant