Bump @astrojs/node from 9.2.1 to 10.0.0 #56

Open

dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/astrojs/node-10.0.0 into main

dependabot[bot] commented

2026-03-24 19:34:09 +00:00

(Migrated from github.com)

Bumps @astrojs/node from 9.2.1 to 10.0.0.

Release notes

Sourced from @astrojs/node's releases.

@astrojs/node@10.0.0

Major Changes
#15654 a32aee6 Thanks @florian-lefebvre! - Removes the experimentalErrorPageHost option

This option allowed fetching a prerendered error page from a different host than the server is currently running on.

However, there can be security implications with prefetching from other hosts, and often more customization was required to do this safely. This has now been removed as a built-in option so that you can implement your own secure solution as needed and appropriate for your project via middleware.

What should I do?

If you were previously using this feature, you must remove the option from your adapter configuration as it no longer exists:
// astro.config.mjs
import { defineConfig } from 'astro/config'
import node from '@astrojs/node'
export default defineConfig({
adapter: node({
mode: 'standalone',

experimentalErrorPageHost: 'http://localhost:4321'
})
})
You can replicate the previous behavior by checking the response status in a middleware and fetching the prerendered page yourself:
// src/middleware.ts
import { defineMiddleware } from 'astro:middleware';
export const onRequest = defineMiddleware(async (ctx, next) => {
const response = await next();
if (response.status === 404 || response.status === 500) {
return fetch(http://localhost:4321/${response.status}.html);
}
return response;
});
Minor Changes
#15258 d339a18 Thanks @ematipico! - Stabilizes the adapter feature experimentalStatiHeaders. If you were using this feature in any of the supported adapters, you'll need to change the name of the flag:
export default defineConfig({
  adapter: netlify({
-    experimentalStaticHeaders: true
+    staticHeaders: true

... (truncated)

Changelog

Sourced from @astrojs/node's changelog.

10.0.0

Major Changes
#15654 a32aee6 Thanks @florian-lefebvre! - Removes the experimentalErrorPageHost option

This option allowed fetching a prerendered error page from a different host than the server is currently running on.

However, there can be security implications with prefetching from other hosts, and often more customization was required to do this safely. This has now been removed as a built-in option so that you can implement your own secure solution as needed and appropriate for your project via middleware.

What should I do?

If you were previously using this feature, you must remove the option from your adapter configuration as it no longer exists:
// astro.config.mjs
import { defineConfig } from 'astro/config'
import node from '@astrojs/node'
export default defineConfig({
adapter: node({
mode: 'standalone',

experimentalErrorPageHost: 'http://localhost:4321'
})
})
You can replicate the previous behavior by checking the response status in a middleware and fetching the prerendered page yourself:
// src/middleware.ts
import { defineMiddleware } from 'astro:middleware';
export const onRequest = defineMiddleware(async (ctx, next) => {
const response = await next();
if (response.status === 404 || response.status === 500) {
return fetch(http://localhost:4321/${response.status}.html);
}
return response;
});
Minor Changes
#15258 d339a18 Thanks @ematipico! - Stabilizes the adapter feature experimentalStatiHeaders. If you were using this feature in any of the supported adapters, you'll need to change the name of the flag:
export default defineConfig({
  adapter: netlify({
-    experimentalStaticHeaders: true

... (truncated)

Commits

48e5c4d [ci] release (#15808)
2ce9e74 chore: update docs links (#15732)
25560db [ci] release (beta) (#15773)
39ff2a5 Harden Node adapter HTTP server defaults and request body handling (#15759)
6414732 Spelling (#15601)
1567e8c Normalize static file paths before evaluating dotfile access rules (#15763)
02e24d9 Harden origin check port handling for consistency (#15777)
9b0def6 [ci] release (beta) (#15758)
3885e8d [ci] release (beta) (#15687)
20b05c0 fix(node): harden static file handler path resolution (#15745)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @astrojs/node since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@astrojs/node](https://github.com/withastro/astro/tree/HEAD/packages/integrations/node) from 9.2.1 to 10.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/withastro/astro/releases"><code>@astrojs/node</code>'s releases</a>.</em></p> <blockquote> <h2><code>@astrojs/node</code><a href="https://github.com/10"><code>@10</code></a>.0.0</h2> <h3>Major Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/withastro/astro/pull/15654">#15654</a> <a href="https://github.com/withastro/astro/commit/a32aee6eb8bb9ae46caf2249ff56df27db2d4e2a"><code>a32aee6</code></a> Thanks <a href="https://github.com/florian-lefebvre"><code>@florian-lefebvre</code></a>! - Removes the <code>experimentalErrorPageHost</code> option</p> <p>This option allowed fetching a prerendered error page from a different host than the server is currently running on.</p> <p>However, there can be security implications with prefetching from other hosts, and often more customization was required to do this safely. This has now been removed as a built-in option so that you can implement your own secure solution as needed and appropriate for your project via middleware.</p> <h4>What should I do?</h4> <p>If you were previously using this feature, you must remove the option from your adapter configuration as it no longer exists:</p> <pre lang="diff"><code>// astro.config.mjs import { defineConfig } from 'astro/config' import node from '@astrojs/node' <p>export default defineConfig({ adapter: node({ mode: 'standalone',</p> <ul> <li>experimentalErrorPageHost: 'http://localhost:4321' }) }) </code></pre></li> </ul> <p>You can replicate the previous behavior by checking the response status in a middleware and fetching the prerendered page yourself:</p> <pre lang="ts"><code>// src/middleware.ts import { defineMiddleware } from 'astro:middleware'; <p>export const onRequest = defineMiddleware(async (ctx, next) => { const response = await next(); if (response.status === 404 || response.status === 500) { return fetch(<code>http://localhost:4321/${response.status}.html</code>); } return response; }); </code></pre></p> </li> </ul> <h3>Minor Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/withastro/astro/pull/15258">#15258</a> <a href="https://github.com/withastro/astro/commit/d339a182b387a7a1b0d5dd0d67a0638aaa2b4262"><code>d339a18</code></a> Thanks <a href="https://github.com/ematipico"><code>@ematipico</code></a>! - Stabilizes the adapter feature <code>experimentalStatiHeaders</code>. If you were using this feature in any of the supported adapters, you'll need to change the name of the flag:</p> <pre lang="diff"><code>export default defineConfig({ adapter: netlify({ - experimentalStaticHeaders: true + staticHeaders: true </code></pre> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/withastro/astro/blob/main/packages/integrations/node/CHANGELOG.md"><code>@astrojs/node</code>'s changelog</a>.</em></p> <blockquote> <h2>10.0.0</h2> <h3>Major Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/withastro/astro/pull/15654">#15654</a> <a href="https://github.com/withastro/astro/commit/a32aee6eb8bb9ae46caf2249ff56df27db2d4e2a"><code>a32aee6</code></a> Thanks <a href="https://github.com/florian-lefebvre"><code>@florian-lefebvre</code></a>! - Removes the <code>experimentalErrorPageHost</code> option</p> <p>This option allowed fetching a prerendered error page from a different host than the server is currently running on.</p> <p>However, there can be security implications with prefetching from other hosts, and often more customization was required to do this safely. This has now been removed as a built-in option so that you can implement your own secure solution as needed and appropriate for your project via middleware.</p> <h4>What should I do?</h4> <p>If you were previously using this feature, you must remove the option from your adapter configuration as it no longer exists:</p> <pre lang="diff"><code>// astro.config.mjs import { defineConfig } from 'astro/config' import node from '@astrojs/node' <p>export default defineConfig({ adapter: node({ mode: 'standalone',</p> <ul> <li>experimentalErrorPageHost: 'http://localhost:4321' }) }) </code></pre></li> </ul> <p>You can replicate the previous behavior by checking the response status in a middleware and fetching the prerendered page yourself:</p> <pre lang="ts"><code>// src/middleware.ts import { defineMiddleware } from 'astro:middleware'; <p>export const onRequest = defineMiddleware(async (ctx, next) => { const response = await next(); if (response.status === 404 || response.status === 500) { return fetch(<code>http://localhost:4321/${response.status}.html</code>); } return response; }); </code></pre></p> </li> </ul> <h3>Minor Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/withastro/astro/pull/15258">#15258</a> <a href="https://github.com/withastro/astro/commit/d339a182b387a7a1b0d5dd0d67a0638aaa2b4262"><code>d339a18</code></a> Thanks <a href="https://github.com/ematipico"><code>@ematipico</code></a>! - Stabilizes the adapter feature <code>experimentalStatiHeaders</code>. If you were using this feature in any of the supported adapters, you'll need to change the name of the flag:</p> <pre lang="diff"><code>export default defineConfig({ adapter: netlify({ - experimentalStaticHeaders: true </code></pre> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/withastro/astro/commit/48e5c4d3518dbd82edff87fa628be9e46c9b21bf"><code>48e5c4d</code></a> [ci] release (<a href="https://github.com/withastro/astro/tree/HEAD/packages/integrations/node/issues/15808">#15808</a>)</li> <li><a href="https://github.com/withastro/astro/commit/2ce9e7477e38bca3e13a9b6993125c798377dd50"><code>2ce9e74</code></a> chore: update docs links (<a href="https://github.com/withastro/astro/tree/HEAD/packages/integrations/node/issues/15732">#15732</a>)</li> <li><a href="https://github.com/withastro/astro/commit/25560db01f1df5ffa51afd34cc94eaf3f8ec865f"><code>25560db</code></a> [ci] release (beta) (<a href="https://github.com/withastro/astro/tree/HEAD/packages/integrations/node/issues/15773">#15773</a>)</li> <li><a href="https://github.com/withastro/astro/commit/39ff2a565614250acae83d35bf196e0463857d9e"><code>39ff2a5</code></a> Harden Node adapter HTTP server defaults and request body handling (<a href="https://github.com/withastro/astro/tree/HEAD/packages/integrations/node/issues/15759">#15759</a>)</li> <li><a href="https://github.com/withastro/astro/commit/6414732a12a4dff3da224dfda56f0e26db0c98c4"><code>6414732</code></a> Spelling (<a href="https://github.com/withastro/astro/tree/HEAD/packages/integrations/node/issues/15601">#15601</a>)</li> <li><a href="https://github.com/withastro/astro/commit/1567e8cc9153f4e8089b2d942ffb73c14cca8031"><code>1567e8c</code></a> Normalize static file paths before evaluating dotfile access rules (<a href="https://github.com/withastro/astro/tree/HEAD/packages/integrations/node/issues/15763">#15763</a>)</li> <li><a href="https://github.com/withastro/astro/commit/02e24d952de29c1c633744e7408215bedeb4d436"><code>02e24d9</code></a> Harden origin check port handling for consistency (<a href="https://github.com/withastro/astro/tree/HEAD/packages/integrations/node/issues/15777">#15777</a>)</li> <li><a href="https://github.com/withastro/astro/commit/9b0def6ea1b20460874481cf8ccb575b6508636d"><code>9b0def6</code></a> [ci] release (beta) (<a href="https://github.com/withastro/astro/tree/HEAD/packages/integrations/node/issues/15758">#15758</a>)</li> <li><a href="https://github.com/withastro/astro/commit/3885e8da45efccf735518a26f9ef23b7267d1c0f"><code>3885e8d</code></a> [ci] release (beta) (<a href="https://github.com/withastro/astro/tree/HEAD/packages/integrations/node/issues/15687">#15687</a>)</li> <li><a href="https://github.com/withastro/astro/commit/20b05c042bde561f53d47348fd4cb2ec478bca23"><code>20b05c0</code></a> fix(node): harden static file handler path resolution (<a href="https://github.com/withastro/astro/tree/HEAD/packages/integrations/node/issues/15745">#15745</a>)</li> <li>Additional commits viewable in <a href="https://github.com/withastro/astro/commits/@astrojs/node@10.0.0/packages/integrations/node">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for <code>@astrojs/node</code> since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@astrojs/node&package-manager=npm_and_yarn&previous-version=9.2.1&new-version=10.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/TimCane/timcane.co.uk/network/alerts). </details>

TJC force-pushed dependabot/npm_and_yarn/astrojs/node-10.0.0 from b62a9ea0c5 to 5ae6f89741

2026-08-15 12:37:39 +01:00

Compare

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/npm_and_yarn/astrojs/node-10.0.0:dependabot/npm_and_yarn/astrojs/node-10.0.0

git switch dependabot/npm_and_yarn/astrojs/node-10.0.0

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff dependabot/npm_and_yarn/astrojs/node-10.0.0

git switch dependabot/npm_and_yarn/astrojs/node-10.0.0

git rebase main

git switch main

git merge --ff-only dependabot/npm_and_yarn/astrojs/node-10.0.0

git switch dependabot/npm_and_yarn/astrojs/node-10.0.0

git rebase main

git switch main

git merge --no-ff dependabot/npm_and_yarn/astrojs/node-10.0.0

git switch main

git merge --squash dependabot/npm_and_yarn/astrojs/node-10.0.0