[pull] main from withastro:main#425

Merged

pull[bot] merged 9 commits intocode:mainfrom

Mar 5, 2026

Commits on Mar 5, 2026

Normalize static file paths before evaluating dotfile access rules (#15763)

matthewp
and
github-actions[bot]
authored
Improve form action handling consistency during error page rendering (#15764)

matthewp
and
bugbot
authored
fix(env): add validation against vite.envPrefix (#15780)
ematipico
authored
Harden error page response merging to strip framing headers (#15776)

matthewp
and
astro-security-bot
authored
Spelling (#15601)

jsoref
and
ArmandPhilippot
authored
fix: calculate the correct value for clientAddress (#15778)
ematipico
authored
Normalize backslash characters in URL pathname after decoding (#15757)

matthewp
and
astro-security[bot]
authored
[ci] format

matthewp
authored and
astrobot-houston
committed
Harden Node adapter HTTP server defaults and request body handling (#15759)

authored