Bump astro from 4.12.2 to 6.1.10#85
Conversation
Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 4.12.2 to 6.1.10. - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG-v4.md) - [Commits](https://github.com/withastro/astro/commits/astro@6.1.10/packages/astro) --- updated-dependencies: - dependency-name: astro dependency-version: 6.1.10 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 3 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 61ec4b0. Configure here.
| "@astrojs/node": "^8.2.5", | ||
| "@sentry/astro": "8.9.2", | ||
| "astro": "^4.7.0", | ||
| "astro": "^6.1.10", |
There was a problem hiding this comment.
Astro 6 removed output: 'hybrid', breaking build
High Severity
Bumping astro to ^6.1.10 breaks the project because output: 'hybrid' was removed in Astro 5. The astro.config.mjs still uses this removed option, which will cause a build error. The migration requires removing output: 'hybrid' (static now supports per-route server rendering) or switching to output: 'server'.
Reviewed by Cursor Bugbot for commit 61ec4b0. Configure here.
| "@astrojs/node": "^8.2.5", | ||
| "@sentry/astro": "8.9.2", | ||
| "astro": "^4.7.0", | ||
| "astro": "^6.1.10", |
There was a problem hiding this comment.
Incompatible @astrojs/node version for Astro 6
High Severity
@astrojs/node ^8.2.5 is designed for Astro 4.x and has a peer dependency on astro ^4.x. Astro 6 requires @astrojs/node v10.x (which has astro ^6.0.0 as its peer dependency). This version mismatch will cause installation failures or runtime incompatibilities.
Reviewed by Cursor Bugbot for commit 61ec4b0. Configure here.
| "@astrojs/node": "^8.2.5", | ||
| "@sentry/astro": "8.9.2", | ||
| "astro": "^4.7.0", | ||
| "astro": "^6.1.10", |
There was a problem hiding this comment.
Incompatible @astrojs/check version for Astro 6
Medium Severity
@astrojs/check ^0.5.10 is built for Astro 4.x. Astro 6 requires @astrojs/check 0.9.x or later, which includes updates for the Astro 6 type system. The build script runs astro check before building, so this incompatibility will break the build pipeline.
Reviewed by Cursor Bugbot for commit 61ec4b0. Configure here.
Bumps astro from 4.12.2 to 6.1.10.
Release notes
Sourced from astro's releases.
... (truncated)
Changelog
Sourced from astro's changelog.
... (truncated)
Commits
c1f2e4f[ci] release (#16467)345fb9echore: fix flaky dev toolbar render time test (#16500)5120ecd[ci] format3d82220Add AEAD context binding to server island encryption (#16457)1bcb43bPrebundle dev toolbar entrypoint in client environment (#16480)93101cc[ci] format152700efix: strip sourceMappingURL from dev toolbar entrypoint during dep optimizati...bc83041refactor(astro): migrate test utils to typescript (#16492)5c543c5refactor(astro): add internal entry points for test (#16473)1058428Suppress content config warning for projects without content collections (#16...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for astro since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.