Skip to content

[pull] main from withastro:main#425

Merged
pull[bot] merged 9 commits intocode:mainfrom
withastro:main
Mar 5, 2026
Merged

[pull] main from withastro:main#425
pull[bot] merged 9 commits intocode:mainfrom
withastro:main

Conversation

@pull
Copy link

@pull pull bot commented Mar 5, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

matthewp and others added 9 commits March 5, 2026 10:19
…15763)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
…15764)

* Improve form action handling consistency during error page rendering

* Update changeset with more detailed description

---------

Co-authored-by: bugbot <bugbot@astro.build>
Co-authored-by: astro-security-bot <astro-security-bot@users.noreply.github.com>
* spelling: ; otherwise,

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: "..."

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: a new

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: a special

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: a

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: accessed

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: adapter

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: all bugs

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: also need to

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: an

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: and

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: astro

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: attributes

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: audited

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: available

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: baked

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: best-effort

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: build,

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: caches

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: can

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: cannot

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: case-insensitive

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: case.

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: cause

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: centauri

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: chevron

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: cloudflare

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: committed

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: components

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: condition to

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: config

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: consistently

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: convoluted

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: could not

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: desperately

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: devtoolbar

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: ensure

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: entrypoint

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: equals

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: example -- use rfc6761 domain

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: exist

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: external

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: failure

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: fall back

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: flexible

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: frontmatter

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: has no

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: highlighting

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: image

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: implicitly

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: import,

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: impractical

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: include

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: incorrect

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: infrastructure

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: initialization

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: issue

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: its

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: javascript

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: labelable

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: loaded

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: long and short

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: lorem

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: lowercase

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: maintenance

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: malformed

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: markdown

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: middleware

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: mistaken

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: necessary

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: neither-nor

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: nonexistent

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: occurred

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: occurrences

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: of

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: open graph

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: optimized

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: otherwise,

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: out-of-date

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: overridden

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: packages

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: parsed

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: past,

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: performance

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: plugin

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: pre-text

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: preexisting

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: prerendered

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: project

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: punctuation

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: re-export

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: redirects

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: registries

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: rehype

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: replacements

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: resolved

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: safeguard

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: serverless

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: set up

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: significantly

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: solely

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: some

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: stylesheet

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: surname

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: that is

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: that

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: the github

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: to be

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: to take effect

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: transitions

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: typescript

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: unnecessary

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: uppercase

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: use case

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: user's requested...to

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: whether or not

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: with

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: work around

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: workaround

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

* spelling: your

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

---------

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
Co-authored-by: Armand Philippot <59021693+ArmandPhilippot@users.noreply.github.com>
* fix: calculate the correct value for clientAddress

* address feedback
* Normalize backslash characters in URL pathname after decoding

* Update ssr-request test to expect normalized pathname in middleware

Duplicate slashes are now collapsed before middleware runs, so the
middleware and test need to check for the normalized path instead of
the raw path with duplicate slashes.

* Simplify slash normalization with collapseDuplicateSlashes helper

* Address PR review feedback: clarify comment ordering, simplify test fixtures

---------

Co-authored-by: astro-security[bot] <houston@astro.build>
…15759)

* Harden Node adapter HTTP server defaults and add global body size limit

* Make bodySizeLimit a user-configurable option in the Node adapter

* Update changeset: bump @astrojs/node to minor for new bodySizeLimit option

* Update .changeset/harden-node-server-defaults.md

Co-authored-by: Sarah Rainsberger <5098874+sarah11918@users.noreply.github.com>

* Remove timeout defaults

* Remove timeout hardening tests

---------

Co-authored-by: astro-actions[bot] <houston@astro.build>
Co-authored-by: Sarah Rainsberger <5098874+sarah11918@users.noreply.github.com>
@pull pull bot locked and limited conversation to collaborators Mar 5, 2026
@pull pull bot added the ⤵️ pull label Mar 5, 2026
@pull pull bot merged commit 39ff2a5 into code:main Mar 5, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants