socket-security[bot]
commented
1 month ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/astro@4.15.4 | Transitive: environment, eval, filesystem, network, shell, unsafe | +315 |
62.7 MB | fredkschott |
🚮 Removed packages: npm/astro@4.15.3)
This PR contains the following updates:
4.15.3->4.15.4Release Notes
withastro/astro (astro)
### [`v4.15.4`](https://redirect.github.com/withastro/astro/blob/HEAD/packages/astro/CHANGELOG.md#4154) ##### Patch Changes - [#11879](https://redirect.github.com/withastro/astro/pull/11879) [`bd1d4aa`](https://redirect.github.com/withastro/astro/commit/bd1d4aaf8262187b4f132d7fe0365902131ddf1a) Thanks [@matthewp](https://redirect.github.com/matthewp)! - Allow passing a cryptography key via ASTRO_KEY For Server islands Astro creates a cryptography key in order to hash props for the islands, preventing accidental leakage of secrets. If you deploy to an environment with rolling updates then there could be multiple instances of your app with different keys, causing potential key mismatches. To fix this you can now pass the `ASTRO_KEY` environment variable to your build in order to reuse the same key. To generate a key use: astro create-key This will print out an environment variable to set like: ASTRO_KEY=PIAuyPNn2aKU/bviapEuc/nVzdzZPizKNo3OqF/5PmQ= - [#11935](https://redirect.github.com/withastro/astro/pull/11935) [`c58193a`](https://redirect.github.com/withastro/astro/commit/c58193a691775af5c568e461c63040a42e2471f7) Thanks [@Princesseuh](https://redirect.github.com/Princesseuh)! - Fixes `astro add` not using the proper export point when adding certain adaptersConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.