chore(deps): bump astro from 6.3.7 to 7.0.6

[dependabot]

Bumps astro from 6.3.7 to 7.0.6.

Release notes

Sourced from astro's releases.

astro@7.0.6

Patch Changes

• #17261 79aa99c Thanks @​astrobot-houston! - Fixes a false deprecation warning for markdown.gfm and markdown.smartypants when using the Container API

• #17247 f94280d Thanks @​chatman-media! - Fixes route generation throwing "Missing parameter" (or silently dropping the segment) when a dynamic param's value is 0. The generator used truthy checks instead of checking for undefined, so paginate(posts, { params: { categoryId: 0 } }) would crash even though 0 is a perfectly valid param value.

• #17278 6f11739 Thanks @​astrobot-houston! - Fixes missing CSS for virtual style modules (e.g., responsive image layout styles) in dev mode when JavaScript is disabled

• #17250 0b30b35 Thanks @​matthewp! - Fixes the security.checkOrigin check so it is applied consistently to Astro Actions and on-demand endpoints, regardless of how the request pipeline is composed. Previously, the origin check could be skipped in the composable astro/hono pipeline depending on the order of the middleware() primitive (or when it was omitted).

• #17274 8c3579b Thanks @​astrobot-houston! - Fixes missing render() type overload for live collection entries. Previously, calling render() on a LiveDataEntry produced a TypeScript error when using only live.config.ts without a content.config.ts.

• #17257 4208297 Thanks @​astrobot-houston! - Fixes astro check failing to find @astrojs/check and typescript when astro is installed in a directory outside the project tree (e.g. pnpm virtual store)

• #17272 b428648 Thanks @​matthewp! - Fixes island component paths so that extensionless imports (e.g. import { Counter } from '../components/Counter') resolve to the real file on disk, matching Vite's extension order and directory index resolution. This makes the include/exclude options of JSX renderer integrations (React, Preact, Solid) match components imported without a file extension, and removes the spurious React 19 "Invalid hook call" warning logged on every request in dev when include was set alongside another JSX renderer

• #17279 2aeaa44 Thanks @​astrobot-houston! - Fixes a bug where <Picture inferSize> with a remote image could fail with FailedToFetchRemoteImageDimensions when the image server rate-limits requests (e.g. HTTP 429). Remote dimensions are now resolved once per render instead of once per output format.

• #17251 5240e26 Thanks @​matthewp! - Hardens the handling of attribute rendering when using with custom elements.

• #17248 429bd62 Thanks @​astrobot-houston! - Fixes a crash when using Astro's getViteConfig with Vitest browser mode (e.g., Storybook vitest runner). Astro now skips dev server setup inside Vitest, preventing errors.

• #17260 14524c0 Thanks @​matthewp! - Fixes a regression where a <script> inside a component rendered through Astro.slots.render() was hoisted out of its original position instead of staying next to its component content

• Updated dependencies [eb6f97e]:

  • @​astrojs/internal-helpers@​0.10.1
  • @​astrojs/markdown-remark@​7.2.1
  • @​astrojs/markdown-satteri@​0.3.3

astro@7.0.5

Patch Changes

• #17242 9c05ba4 Thanks @​matthewp! - Fixes an error that could occur after the dev server restarts when using an adapter such as @astrojs/cloudflare, where a request would fail with a 500 referencing a missing pre-bundled dependency:

  The file does not exist at "node_modules/.vite/deps_ssr/astro_compiler-runtime.js?v=6419660d" which is in the optimize deps directory. The dependency might be incompatible with the dep optimizer. Try adding it to `optimizeDeps.exclude`.
  

• #17202 c6d254d Thanks @​matthewp! - Refactors path alias resolution to use Vite's native tsconfigPaths option

  This is an internal change with no expected impact on user projects. Astro now defers tsconfig and jsconfig paths alias resolution to Vite, keeping a small fallback for a few CSS cases Vite does not yet handle.

• #17123 72e29bd Thanks @​martrapp! - Fixes an issue where the ClientRouter wipes head elements after page transitions if the <head> contains a server:defer component.

• #17232 257505e Thanks @​matthewp! - Fixes a bug where <style> tags from components such as a content collection's Content could be silently dropped from the output when an await appeared before the component in an .astro file's markup.

• #17193 a7352fd Thanks @​jan-kubica! - Fixes the background dev server failing to start when astro is hoisted outside the project's node_modules (for example bun workspaces). The background process is now spawned from Astro's own resolved location instead of a path assumed under the project root.

• #17255 581d171 Thanks @​astrobot-houston! - Fixes prefetch not working for links inside server:defer components

astro@7.0.4

... (truncated)

Changelog

Sourced from astro's changelog.

7.0.6

Patch Changes

• #17261 79aa99c Thanks @​astrobot-houston! - Fixes a false deprecation warning for markdown.gfm and markdown.smartypants when using the Container API

• #17247 f94280d Thanks @​chatman-media! - Fixes route generation throwing "Missing parameter" (or silently dropping the segment) when a dynamic param's value is 0. The generator used truthy checks instead of checking for undefined, so paginate(posts, { params: { categoryId: 0 } }) would crash even though 0 is a perfectly valid param value.

• #17278 6f11739 Thanks @​astrobot-houston! - Fixes missing CSS for virtual style modules (e.g., responsive image layout styles) in dev mode when JavaScript is disabled

• #17250 0b30b35 Thanks @​matthewp! - Fixes the security.checkOrigin check so it is applied consistently to Astro Actions and on-demand endpoints, regardless of how the request pipeline is composed. Previously, the origin check could be skipped in the composable astro/hono pipeline depending on the order of the middleware() primitive (or when it was omitted).

• #17274 8c3579b Thanks @​astrobot-houston! - Fixes missing render() type overload for live collection entries. Previously, calling render() on a LiveDataEntry produced a TypeScript error when using only live.config.ts without a content.config.ts.

• #17257 4208297 Thanks @​astrobot-houston! - Fixes astro check failing to find @astrojs/check and typescript when astro is installed in a directory outside the project tree (e.g. pnpm virtual store)

• #17272 b428648 Thanks @​matthewp! - Fixes island component paths so that extensionless imports (e.g. import { Counter } from '../components/Counter') resolve to the real file on disk, matching Vite's extension order and directory index resolution. This makes the include/exclude options of JSX renderer integrations (React, Preact, Solid) match components imported without a file extension, and removes the spurious React 19 "Invalid hook call" warning logged on every request in dev when include was set alongside another JSX renderer

• #17279 2aeaa44 Thanks @​astrobot-houston! - Fixes a bug where <Picture inferSize> with a remote image could fail with FailedToFetchRemoteImageDimensions when the image server rate-limits requests (e.g. HTTP 429). Remote dimensions are now resolved once per render instead of once per output format.

• #17251 5240e26 Thanks @​matthewp! - Hardens the handling of attribute rendering when using with custom elements.

• #17248 429bd62 Thanks @​astrobot-houston! - Fixes a crash when using Astro's getViteConfig with Vitest browser mode (e.g., Storybook vitest runner). Astro now skips dev server setup inside Vitest, preventing errors.

• #17260 14524c0 Thanks @​matthewp! - Fixes a regression where a <script> inside a component rendered through Astro.slots.render() was hoisted out of its original position instead of staying next to its component content

• Updated dependencies [eb6f97e]:

  • @​astrojs/internal-helpers@​0.10.1
  • @​astrojs/markdown-remark@​7.2.1
  • @​astrojs/markdown-satteri@​0.3.3

7.0.5

Patch Changes

• #17242 9c05ba4 Thanks @​matthewp! - Fixes an error that could occur after the dev server restarts when using an adapter such as @astrojs/cloudflare, where a request would fail with a 500 referencing a missing pre-bundled dependency:

  The file does not exist at "node_modules/.vite/deps_ssr/astro_compiler-runtime.js?v=6419660d" which is in the optimize deps directory. The dependency might be incompatible with the dep optimizer. Try adding it to `optimizeDeps.exclude`.
  

• #17202 c6d254d Thanks @​matthewp! - Refactors path alias resolution to use Vite's native tsconfigPaths option

  This is an internal change with no expected impact on user projects. Astro now defers tsconfig and jsconfig paths alias resolution to Vite, keeping a small fallback for a few CSS cases Vite does not yet handle.

• #17123 72e29bd Thanks @​martrapp! - Fixes an issue where the ClientRouter wipes head elements after page transitions if the <head> contains a server:defer component.

• #17232 257505e Thanks @​matthewp! - Fixes a bug where <style> tags from components such as a content collection's Content could be silently dropped from the output when an await appeared before the component in an .astro file's markup.

• #17193 a7352fd Thanks @​jan-kubica! - Fixes the background dev server failing to start when astro is hoisted outside the project's node_modules (for example bun workspaces). The background process is now spawned from Astro's own resolved location instead of a path assumed under the project root.

... (truncated)

Commits

• a86160e [ci] release (#17256)
• f94280d Fix route generator throwing on a dynamic param value of 0 (#17247)
• 6f11739 fix(css): use raw module ID for virtual CSS cache lookup in dev mode (#17267)...
• 26c68f6 [ci] format
• 2aeaa44 Fix inferSize for remote images in the Picture component (#17279)
• b428648 Resolve extensionless imports in island component paths (#17272)
• 14524c0 Keep component scripts in place when rendered via Astro.slots.render() (#17260)
• 8c3579b fix: add render() type overload for live collection entries (#16688) (#17274)
• 94dd2aa [ci] format
• 5240e26 Validate attribute names on custom HTML elements during SSR (#17251)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Bundle size — PR vs main

PR HEAD (3f24263475a6ba2cb76cf242d7622e14b3be8035)

Package	dist (gzip)	dist (raw)
@triggery/cli	5374 B	55678 B
@triggery/codemod	10448 B	145256 B
@triggery/core	27455 B	343415 B
@triggery/devtools-bridge	553 B	10241 B
@triggery/devtools-panel	1430 B	15578 B
@triggery/devtools-redux	622 B	10846 B
@triggery/dom	672 B	14838 B
@triggery/eslint-plugin	5731 B	95065 B
@triggery/jotai	249 B	4464 B
@triggery/mobx	181 B	3708 B
@triggery/query	260 B	4544 B
@triggery/react	1741 B	38610 B
@triggery/reatom	239 B	3664 B
@triggery/redux	204 B	3473 B
@triggery/signals	285 B	4696 B
@triggery/socket	401 B	9646 B
@triggery/solid	896 B	20659 B
@triggery/testing	1033 B	19554 B
@triggery/vite	756 B	7436 B
@triggery/vue	1077 B	23617 B
@triggery/zustand	205 B	3758 B

Base (main)

Package	dist (gzip)	dist (raw)
@triggery/cli	5374 B	55678 B
@triggery/codemod	10448 B	145256 B
@triggery/core	27455 B	343415 B
@triggery/devtools-bridge	553 B	10241 B
@triggery/devtools-panel	1430 B	15578 B
@triggery/devtools-redux	622 B	10846 B
@triggery/dom	672 B	14838 B
@triggery/eslint-plugin	5731 B	95065 B
@triggery/jotai	249 B	4464 B
@triggery/mobx	181 B	3708 B
@triggery/query	260 B	4544 B
@triggery/react	1741 B	38610 B
@triggery/reatom	239 B	3664 B
@triggery/redux	204 B	3473 B
@triggery/signals	285 B	4696 B
@triggery/socket	401 B	9646 B
@triggery/solid	896 B	20659 B
@triggery/testing	1033 B	19554 B
@triggery/vite	756 B	7436 B
@triggery/vue	1077 B	23617 B
@triggery/zustand	205 B	3758 B

_{Measured by gzip -c | wc -c over emitted .js/.mjs files. Not a hard gate.}

[codspeed-hq]

Merging this PR will not alter performance

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 7 improved benchmarks
❌ 3 regressed benchmarks
✅ 75 untouched benchmarks
⏩ 133 skipped benchmarks¹

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Mode	Benchmark	BASE	HEAD	Efficiency
❌	Simulation	triggery (prod)	209 µs	516.5 µs	-59.54%
❌	Simulation	mobx	359.9 µs	529.5 µs	-32.03%
❌	Simulation	triggery (prod)	234.9 µs	317 µs	-25.92%
⚡	Simulation	triggery (prod)	365 µs	211.1 µs	+72.94%
⚡	Simulation	effector	741.5 µs	467.2 µs	+58.72%
⚡	Simulation	triggery	470.3 µs	307.1 µs	+53.16%
⚡	Simulation	triggery (prod)	397.2 µs	269 µs	+47.67%
⚡	Simulation	effector	580.9 µs	407.9 µs	+42.41%
⚡	Simulation	redux-saga	853.8 µs	675.6 µs	+26.38%
⚡	Simulation	effector	492.6 µs	390.4 µs	+26.18%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing dependabot/npm_and_yarn/astro-7.0.6 (3f24263) with main (6c7eecd)}

Footnotes

1. 133 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩