Astro: [email protected] Release

Release date:
November 29, 2025
Previous version:
[email protected] (released November 27, 2025)
Magnitude:
168 Diff Delta
Contributors:
1 total committer
Data confidence:
Commits:

Top Contributors in [email protected]

ematipico

Directory Browser for [email protected]

All files are compared to previous version, [email protected]. Click here to browse diffs between other versions.

Loading File Browser...

Release Notes Published

Patch Changes

  • #14889 4bceeb0 Thanks @florian-lefebvre! - Fixes actions types when using specific TypeScript configurations

  • #14929 e0f277d Thanks @matthewp! - Fixes authentication bypass via double URL encoding in middleware

    Prevents attackers from bypassing path-based authentication checks using multi-level URL encoding (e.g., /%2561dmin instead of /%61dmin). Pathnames are now validated after decoding to ensure no additional encoding remains.