socket-security[bot]
commented
5 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/astro@4.7.0 | Transitive: environment, eval, filesystem, network, shell | +195 |
31 MB | fredkschott |
🚮 Removed packages: npm/astro@4.6.2
sonarcloud[bot]
No data about Coverage
This PR contains the following updates:
4.6.2->4.7.0Release Notes
withastro/astro (astro)
### [`v4.7.0`](https://togithub.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#470) [Compare Source](https://togithub.com/withastro/astro/compare/astro@4.6.4...astro@4.7.0) ##### Minor Changes - [#10665](https://togithub.com/withastro/astro/pull/10665) [`7b4f284`](https://togithub.com/withastro/astro/commit/7b4f2840203fe220758934f1366485f788727f0d) Thanks [@Princesseuh](https://togithub.com/Princesseuh)! - Adds new utilities to ease the creation of toolbar apps including `defineToolbarApp` to make it easier to define your toolbar app and `app` and `server` helpers for easier communication between the toolbar and the server. These new utilities abstract away some of the boilerplate code that is common in toolbar apps, and lower the barrier of entry for app authors. For example, instead of creating an event listener for the `app-toggled` event and manually typing the value in the callback, you can now use the `onAppToggled` method. Additionally, communicating with the server does not require knowing any of the Vite APIs anymore, as a new `server` object is passed to the `init` function that contains easy to use methods for communicating with the server. ```diff import { defineToolbarApp } from "astro/toolbar"; export default defineToolbarApp({ init(canvas, app, server) { - app.addEventListener("app-toggled", (e) => { - console.log(`App is now ${state ? "enabled" : "disabled"}`);. - }); + app.onToggled(({ state }) => { + console.log(`App is now ${state ? "enabled" : "disabled"}`); + }); - if (import.meta.hot) { - import.meta.hot.send("my-app:my-client-event", { message: "world" }); - } + server.send("my-app:my-client-event", { message: "world" }) - if (import.meta.hot) { - import.meta.hot.on("my-server-event", (data: {message: string}) => { - console.log(data.message); - }); - } + server.on<{ message: string }>("my-server-event", (data) => { + console.log(data.message); // data is typed using the type parameter + }); }, }) ``` Server helpers are also available on the server side, for use in your integrations, through the new `toolbar` object: ```ts "astro:server:setup": ({ toolbar }) => { toolbar.on<{ message: string }>("my-app:my-client-event", (data) => { console.log(data.message); toolbar.send("my-server-event", { message: "hello" }); }); } ``` This is a backwards compatible change and your your existing dev toolbar apps will continue to function. However, we encourage you to build your apps with the new helpers, following the [updated Dev Toolbar API documentation](https://docs.astro.build/en/reference/dev-toolbar-app-reference/). - [#10734](https://togithub.com/withastro/astro/pull/10734) [`6fc4c0e`](https://togithub.com/withastro/astro/commit/6fc4c0e420da7629b4cfc28ee7efce1d614447be) Thanks [@Princesseuh](https://togithub.com/Princesseuh)! - Astro will now automatically check for updates when you run the dev server. If a new version is available, a message will appear in the terminal with instructions on how to update. Updates will be checked once per 10 days, and the message will only appear if the project is multiple versions behind the latest release. This behavior can be disabled by running `astro preferences disable checkUpdates` or setting the `ASTRO_DISABLE_UPDATE_CHECK` environment variable to `false`. - [#10762](https://togithub.com/withastro/astro/pull/10762) [`43ead8f`](https://togithub.com/withastro/astro/commit/43ead8fbd5112823118060175c7a4a22522cc325) Thanks [@bholmesdev](https://togithub.com/bholmesdev)! - Enables type checking for JavaScript files when using the `strictest` TS config. This ensures consistency with Astro's other TS configs, and fixes type checking for integrations like Astro DB when using an `astro.config.mjs`. If you are currently using the `strictest` preset and would like to still disable `.js` files, set `allowJS: false` in your `tsconfig.json`. ##### Patch Changes - [#10861](https://togithub.com/withastro/astro/pull/10861) [`b673bc8`](https://togithub.com/withastro/astro/commit/b673bc850593d5af25793d0358c00797477fa373) Thanks [@mingjunlu](https://togithub.com/mingjunlu)! - Fixes an issue where `astro build` writes type declaration files to `outDir` when it's outside of root directory. - [#10684](https://togithub.com/withastro/astro/pull/10684) [`8b59d5d`](https://togithub.com/withastro/astro/commit/8b59d5d078ff40576b8cbee432279c6ad044a1a9) Thanks [@PeterDraex](https://togithub.com/PeterDraex)! - Update sharp to 0.33 to fix issue with Alpine Linux ### [`v4.6.4`](https://togithub.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#464) [Compare Source](https://togithub.com/withastro/astro/compare/astro@4.6.3...astro@4.6.4) ##### Patch Changes - [#10846](https://togithub.com/withastro/astro/pull/10846) [`3294f7a`](https://togithub.com/withastro/astro/commit/3294f7a343e036d2ad9ac8d5f792ad0d4f43a399) Thanks [@matthewp](https://togithub.com/matthewp)! - Prevent getCollection breaking in vitest - [#10856](https://togithub.com/withastro/astro/pull/10856) [`30cf82a`](https://togithub.com/withastro/astro/commit/30cf82ac3e970a6a3c0f07db1340dd7152d1c35d) Thanks [@robertvanhoesel](https://togithub.com/robertvanhoesel)! - Prevents inputs with a name attribute of action or method to break ViewTransitions' form submission - [#10833](https://togithub.com/withastro/astro/pull/10833) [`8d5f3e8`](https://togithub.com/withastro/astro/commit/8d5f3e8656027023f9fda51c66b0213ffe16d3a5) Thanks [@renovate](https://togithub.com/apps/renovate)! - Updates `esbuild` dependency to v0.20. This should not affect projects in most cases. - [#10801](https://togithub.com/withastro/astro/pull/10801) [`204b782`](https://togithub.com/withastro/astro/commit/204b7820e6de22d97fa2a7b988180c42155c8387) Thanks [@rishi-raj-jain](https://togithub.com/rishi-raj-jain)! - Fixes an issue where images in MD required a relative specifier (e.g. `./`) Now, you can use the standard `` syntax in MD files for images colocated in the same folder: no relative specifier required! There is no need to update your project; your existing images will still continue to work. However, you may wish to remove any relative specifiers from these MD images as they are no longer necessary: ```diff -  +  ``` - [#10841](https://togithub.com/withastro/astro/pull/10841) [`a2df344`](https://togithub.com/withastro/astro/commit/a2df344bff15647c2bfb3f49e3f7b66aa069d6f4) Thanks [@martrapp](https://togithub.com/martrapp)! - Due to regression on mobile WebKit browsers, reverts a change made for JavaScript animations during view transitions. ### [`v4.6.3`](https://togithub.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#463) [Compare Source](https://togithub.com/withastro/astro/compare/astro@4.6.2...astro@4.6.3) ##### Patch Changes - [#10799](https://togithub.com/withastro/astro/pull/10799) [`dc74afca9f5eebc2d61331298d6ef187d92051e0`](https://togithub.com/withastro/astro/commit/dc74afca9f5eebc2d61331298d6ef187d92051e0) Thanks [@martrapp](https://togithub.com/martrapp)! - Fixes an issue with persisted non-text input fields that have the focus during view transition navigation. - [#10773](https://togithub.com/withastro/astro/pull/10773) [`35e43ecdaae7adc4b9a0b974192a033568cfb3f0`](https://togithub.com/withastro/astro/commit/35e43ecdaae7adc4b9a0b974192a033568cfb3f0) Thanks [@lilnasy](https://togithub.com/lilnasy)! - Improves performance for frequent use of small components. - [#10763](https://togithub.com/withastro/astro/pull/10763) [`63132771373ce1510be3e8814897accc0bf62ef8`](https://togithub.com/withastro/astro/commit/63132771373ce1510be3e8814897accc0bf62ef8) Thanks [@matthewp](https://togithub.com/matthewp)! - Invalidate CC cache manifest when lockfile or config changes - [#10811](https://togithub.com/withastro/astro/pull/10811) [`77822a822b04b5113726f713df104e8667333c59`](https://togithub.com/withastro/astro/commit/77822a822b04b5113726f713df104e8667333c59) Thanks [@AvinashReddy3108](https://togithub.com/AvinashReddy3108)! - Update list of available integrations in the `astro add` CLI help.Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.