[ci] release (#12648)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.changeset/swift-pandas-serve.md

@@ -1,5 +0,0 @@
----
-'astro': patch
----
-
-Fixes an issue where the `checkOrigin` feature wasn't correctly checking the `content-type` header

examples/basics/package.json

@@ -11,6 +11,6 @@
     "astro": "astro"
   },
   "dependencies": {
-    "astro": "^4.16.16"
+    "astro": "^4.16.17"
   }
 }

examples/blog/package.json

@@ -14,6 +14,6 @@
     "@astrojs/mdx": "^3.1.9",
     "@astrojs/rss": "^4.0.9",
     "@astrojs/sitemap": "^3.2.1",
-    "astro": "^4.16.16"
+    "astro": "^4.16.17"
   }
 }

examples/component/package.json

@@ -15,7 +15,7 @@
   ],
   "scripts": {},
   "devDependencies": {
-    "astro": "^4.16.16"
+    "astro": "^4.16.17"
   },
   "peerDependencies": {
     "astro": "^4.0.0"

examples/container-with-vitest/package.json

@@ -12,7 +12,7 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "@astrojs/react": "^3.6.3",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",

examples/framework-alpine/package.json

@@ -14,6 +14,6 @@
     "@astrojs/alpinejs": "^0.4.0",
     "@types/alpinejs": "^3.13.11",
     "alpinejs": "^3.14.3",
-    "astro": "^4.16.16"
+    "astro": "^4.16.17"
   }
 }

examples/framework-lit/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@astrojs/lit": "^4.3.0",
     "@webcomponents/template-shadowroot": "^0.2.1",
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "lit": "^3.2.1"
   }
 }

examples/framework-multiple/package.json

@@ -18,7 +18,7 @@
     "@astrojs/vue": "^4.5.3",
     "@types/react": "^18.3.12",
     "@types/react-dom": "^18.3.1",
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "preact": "^10.25.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",

examples/framework-preact/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@astrojs/preact": "^3.5.4",
     "@preact/signals": "^1.3.0",
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "preact": "^10.25.0"
   }
 }

examples/framework-react/package.json

@@ -14,7 +14,7 @@
     "@astrojs/react": "^3.6.3",
     "@types/react": "^18.3.12",
     "@types/react-dom": "^18.3.1",
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "react": "^18.3.1",
     "react-dom": "^18.3.1"
   }

examples/framework-solid/package.json

@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "@astrojs/solid-js": "^4.4.4",
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "solid-js": "^1.9.3"
   }
 }

examples/framework-svelte/package.json

@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "@astrojs/svelte": "^6.0.2",
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "svelte": "^5.2.9"
   }
 }

examples/framework-vue/package.json

@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "@astrojs/vue": "^4.5.3",
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "vue": "^3.5.13"
   }
 }

examples/hackernews/package.json

@@ -12,6 +12,6 @@
   },
   "dependencies": {
     "@astrojs/node": "^8.3.4",
-    "astro": "^4.16.16"
+    "astro": "^4.16.17"
   }
 }

examples/integration/package.json

@@ -15,7 +15,7 @@
   ],
   "scripts": {},
   "devDependencies": {
-    "astro": "^4.16.16"
+    "astro": "^4.16.17"
   },
   "peerDependencies": {
     "astro": "^4.0.0"

examples/minimal/package.json

@@ -11,6 +11,6 @@
     "astro": "astro"
   },
   "dependencies": {
-    "astro": "^4.16.16"
+    "astro": "^4.16.17"
   }
 }

examples/portfolio/package.json

@@ -11,6 +11,6 @@
     "astro": "astro"
   },
   "dependencies": {
-    "astro": "^4.16.16"
+    "astro": "^4.16.17"
   }
 }

examples/ssr/package.json

@@ -14,7 +14,7 @@
   "dependencies": {
     "@astrojs/node": "^8.3.4",
     "@astrojs/svelte": "^6.0.2",
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "svelte": "^5.2.9"
   }
 }

examples/starlog/package.json

@@ -10,7 +10,7 @@
     "astro": "astro"
   },
   "dependencies": {
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "sass": "^1.81.0",
     "sharp": "^0.33.3"
   }

examples/toolbar-app/package.json

@@ -15,7 +15,7 @@
     "./app": "./dist/app.js"
   },
   "devDependencies": {
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "@types/node": "^18.17.8"
   }
 }

examples/with-markdoc/package.json

@@ -12,6 +12,6 @@
   },
   "dependencies": {
     "@astrojs/markdoc": "^0.11.5",
-    "astro": "^4.16.16"
+    "astro": "^4.16.17"
   }
 }

examples/with-mdx/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@astrojs/mdx": "^3.1.9",
     "@astrojs/preact": "^3.5.4",
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "preact": "^10.25.0"
   }
 }

examples/with-nanostores/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@astrojs/preact": "^3.5.4",
     "@nanostores/preact": "^0.5.2",
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "nanostores": "^0.11.3",
     "preact": "^10.25.0"
   }

examples/with-tailwindcss/package.json

@@ -14,7 +14,7 @@
     "@astrojs/mdx": "^3.1.9",
     "@astrojs/tailwind": "^5.1.2",
     "@types/canvas-confetti": "^1.6.4",
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "autoprefixer": "^10.4.20",
     "canvas-confetti": "^1.9.3",
     "postcss": "^8.4.49",

examples/with-vitest/package.json

@@ -12,7 +12,7 @@
     "test": "vitest"
   },
   "dependencies": {
-    "astro": "^4.16.16",
+    "astro": "^4.16.17",
     "vitest": "^2.1.6"
   }
 }

packages/astro/CHANGELOG.md

@@ -1,5 +1,11 @@
 # astro
 
+## 4.16.17
+
+### Patch Changes
+
+- [#12632](https://github.com/withastro/astro/pull/12632) [`e7d14c3`](https://github.com/withastro/astro/commit/e7d14c374b9d45e27089994a4eb72186d05514de) Thanks [@ematipico](https://github.com/ematipico)! - Fixes an issue where the `checkOrigin` feature wasn't correctly checking the `content-type` header
+
 ## 4.16.16
 
 ### Patch Changes

packages/astro/package.json

@@ -1,6 +1,6 @@
 {
   "name": "astro",
-  "version": "4.16.16",
+  "version": "4.16.17",
   "description": "Astro is a modern site builder with web best practices, performance, and DX front-of-mind.",
   "type": "module",
   "author": "withastro",

packages/astro/src/core/app/middlewares.ts

@@ -21,7 +21,7 @@ const FORM_CONTENT_TYPES = [
 export function createOriginCheckMiddleware(): MiddlewareHandler {
 	return defineMiddleware((context, next) => {
 		const { request, url } = context;
-		if (request.method === "GET") {
+		if (request.method === 'GET') {
 			return next();
 		}
 		const sameOrigin =
@@ -31,7 +31,7 @@ export function createOriginCheckMiddleware(): MiddlewareHandler {
 				request.method === 'DELETE') &&
 			request.headers.get('origin') === url.origin;
 
-		const hasContentType = request.headers.has('content-type')
+		const hasContentType = request.headers.has('content-type');
 		if (hasContentType) {
 			const formLikeHeader = hasFormLikeHeader(request.headers.get('content-type'));
 			if (formLikeHeader && !sameOrigin) {
@@ -47,7 +47,7 @@ export function createOriginCheckMiddleware(): MiddlewareHandler {
 			}
 		}
 
-		return next()
+		return next();
 	});
 }
 

packages/astro/test/csrf-protection.test.js

@@ -48,17 +48,20 @@ describe('CSRF origin check', () => {
 		assert.equal(response.status, 403);
 
 		request = new Request('http://example.com/api/', {
-			headers: { origin: 'http://loreum.com', 'content-type': 'application/x-www-form-urlencoded; some-other-value' },
+			headers: {
+				origin: 'http://loreum.com',
+				'content-type': 'application/x-www-form-urlencoded; some-other-value',
+			},
 			method: 'POST',
 		});
 		response = await app.render(request);
 		assert.equal(response.status, 403);
 
 		request = new Request('http://example.com/api/', {
-			headers: { origin: 'http://loreum.com', },
+			headers: { origin: 'http://loreum.com' },
 			method: 'POST',
 			credentials: 'include',
-			body: new Blob(["a=b"],{})
+			body: new Blob(['a=b'], {}),
 		});
 		response = await app.render(request);
 		assert.equal(response.status, 403);

pnpm-lock.yaml

@@ -142,7 +142,7 @@ importers:
   examples/basics:
     dependencies:
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
 
   examples/blog:
@@ -157,13 +157,13 @@ importers:
         specifier: ^3.2.1
         version: link:../../packages/integrations/sitemap
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
 
   examples/component:
     devDependencies:
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
 
   examples/container-with-vitest:
@@ -172,7 +172,7 @@ importers:
         specifier: ^3.6.3
         version: link:../../packages/integrations/react
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       react:
         specifier: ^18.3.1
@@ -203,7 +203,7 @@ importers:
         specifier: ^3.14.3
         version: 3.14.3
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
 
   examples/framework-lit:
@@ -215,7 +215,7 @@ importers:
         specifier: ^0.2.1
         version: 0.2.1
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       lit:
         specifier: ^3.2.1
@@ -245,7 +245,7 @@ importers:
         specifier: ^18.3.1
         version: 18.3.1
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       preact:
         specifier: ^10.25.0
@@ -275,7 +275,7 @@ importers:
         specifier: ^1.3.0
         version: 1.3.0(preact@10.25.0)
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       preact:
         specifier: ^10.25.0
@@ -293,7 +293,7 @@ importers:
         specifier: ^18.3.1
         version: 18.3.1
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       react:
         specifier: ^18.3.1
@@ -308,7 +308,7 @@ importers:
         specifier: ^4.4.4
         version: link:../../packages/integrations/solid
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       solid-js:
         specifier: ^1.9.3
@@ -320,7 +320,7 @@ importers:
         specifier: ^6.0.2
         version: link:../../packages/integrations/svelte
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       svelte:
         specifier: ^5.2.9
@@ -332,7 +332,7 @@ importers:
         specifier: ^4.5.3
         version: link:../../packages/integrations/vue
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       vue:
         specifier: ^3.5.13
@@ -344,25 +344,25 @@ importers:
         specifier: ^8.3.4
         version: 8.3.4(astro@packages+astro)
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
 
   examples/integration:
     devDependencies:
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
 
   examples/minimal:
     dependencies:
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
 
   examples/portfolio:
     dependencies:
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
 
   examples/ssr:
@@ -374,7 +374,7 @@ importers:
         specifier: ^6.0.2
         version: link:../../packages/integrations/svelte
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       svelte:
         specifier: ^5.2.9
@@ -383,7 +383,7 @@ importers:
   examples/starlog:
     dependencies:
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       sass:
         specifier: ^1.81.0
@@ -398,7 +398,7 @@ importers:
         specifier: ^18.17.8
         version: 18.19.50
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
 
   examples/with-markdoc:
@@ -407,7 +407,7 @@ importers:
         specifier: ^0.11.5
         version: link:../../packages/integrations/markdoc
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
 
   examples/with-mdx:
@@ -419,7 +419,7 @@ importers:
         specifier: ^3.5.4
         version: link:../../packages/integrations/preact
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       preact:
         specifier: ^10.25.0
@@ -434,7 +434,7 @@ importers:
         specifier: ^0.5.2
         version: 0.5.2(nanostores@0.11.3)(preact@10.25.0)
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       nanostores:
         specifier: ^0.11.3
@@ -455,7 +455,7 @@ importers:
         specifier: ^1.6.4
         version: 1.6.4
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       autoprefixer:
         specifier: ^10.4.20
@@ -473,7 +473,7 @@ importers:
   examples/with-vitest:
     dependencies:
       astro:
-        specifier: ^4.16.16
+        specifier: ^4.16.17
         version: link:../../packages/astro
       vitest:
         specifier: ^2.1.6