[dependabot]

Bumps the astro group with 3 updates in the / directory: @astrojs/cloudflare, @cloudflare/nimbus-docs and astro.

Updates @astrojs/cloudflare from 14.4.3 to 14.4.4

Release notes

Sourced from @​astrojs/cloudflare's releases.

@​astrojs/cloudflare@​14.4.4

Patch Changes

• #18552 549f88e Thanks @​astro-factory! - Fixes a dev dependency scan error caused by object keys named import in frontmatter, such as the import option of import.meta.glob()
• Updated dependencies []:
  • @​astrojs/underscore-redirects@​1.0.4

Changelog

Sourced from @​astrojs/cloudflare's changelog.

14.4.4

Patch Changes

• #18552 549f88e Thanks @​astro-factory! - Fixes a dev dependency scan error caused by object keys named import in frontmatter, such as the import option of import.meta.glob()
• Updated dependencies []:
  • @​astrojs/underscore-redirects@​1.0.4

Commits

• d354ffb [ci] release (#18547)
• 549f88e fix(cloudflare): don't hoist object keys named import in frontmatter dep sc...
• See full diff in compare view

Updates @cloudflare/nimbus-docs from 0.19.1 to 0.19.2

Release notes

Sourced from @​cloudflare/nimbus-docs's releases.

@​cloudflare/nimbus-docs@​0.19.2

Patch Changes

• #309 6c20aff Thanks @​MohamedH1998! - API pages show every union branch. Inline branches open with their fields at <base>.<position> (source.2.iban), anchored and citable. A branch that is itself a union carries variant.union, and a named branch carries name and title beside label. Field nesting no longer stops at six levels; a list stops at 25,000 fields with a build warning. x-nimbus-order on an operation orders its section.

  ApiFieldView.anchor is now optional: it is set only on the page that owns the field, so render id={field.anchor}. A custom component that requires a string needs updating.

• #307 adbb51d Thanks @​MohamedH1998! - A <link rel="canonical"> in a page's or the site's head is the page's only canonical: Nimbus no longer adds its own beside it, and og:url and the structured data follow it.

• #308 c29ffa5 Thanks @​MohamedH1998! - With Astro's experimental incremental build, a page is rebuilt when its sidebar, breadcrumbs or prev/next links change, not only when its own file does. A page whose loader gives no digest is rendered every build. The first build after upgrading renders every page once.

Changelog

Sourced from @​cloudflare/nimbus-docs's changelog.

0.19.2

Patch Changes

• #309 6c20aff Thanks @​MohamedH1998! - API pages show every union branch. Inline branches open with their fields at <base>.<position> (source.2.iban), anchored and citable. A branch that is itself a union carries variant.union, and a named branch carries name and title beside label. Field nesting no longer stops at six levels; a list stops at 25,000 fields with a build warning. x-nimbus-order on an operation orders its section.

  ApiFieldView.anchor is now optional: it is set only on the page that owns the field, so render id={field.anchor}. A custom component that requires a string needs updating.

• #307 adbb51d Thanks @​MohamedH1998! - A <link rel="canonical"> in a page's or the site's head is the page's only canonical: Nimbus no longer adds its own beside it, and og:url and the structured data follow it.

• #308 c29ffa5 Thanks @​MohamedH1998! - With Astro's experimental incremental build, a page is rebuilt when its sidebar, breadcrumbs or prev/next links change, not only when its own file does. A page whose loader gives no digest is rendered every build. The first build after upgrading renders every page once.

Commits

• 8a5d24f chore: bump package versions
• 2bc9ac8 Merge pull request #309 from cloudflare/feat/api-operation-order
• e0ae8f9 fix: name the schema when its field list is cut
• 95c2bbc docs: qualify how far a named union opens
• 80c710c test: drop a test of an unused coordinate helper
• 632f63d fix: open a named union one level
• bec19f9 fix: anchor only the fields a page owns
• 1ef2962 fix: keep a named branch's content on its own page
• 7549dec Merge pull request #308 from cloudflare/fix/incremental-nav-cache-key
• bacef5d fix: anchor and cite inline branch fields
• Additional commits viewable in compare view

Updates astro from 7.4.4 to 7.4.5

Release notes

Sourced from astro's releases.

astro@7.4.5

Patch Changes

• #18558 fac3c50 Thanks @​astro-factory! - Fixes astro dev status and other background server commands deleting the lock file of a running dev or preview server when run from a sandbox or as another user that is not permitted to signal its process

• #18559 10dae2f Thanks @​astro-factory! - Fixes import.meta.env values containing $ sequences (such as $$ or $&) being corrupted in astro build when server code reads the import.meta.env object directly, for example with const { MY_SECRET } = import.meta.env

• #18544 e3bec3d Thanks @​skezo! - Fixes request paths with invalid percent-encoding (e.g. /%C0%AF or a bare %) being logged as an Invalid URL encoding error and routed with the undecoded path. These requests now return a 400, the same as a path that is encoded too many times.

• #18520 e023aba Thanks @​matthewp! - Makes rendering of string tag names stricter and consistent across .astro dynamic tags, JSX, and MDX. Only the leading part of the string that is a valid element name is rendered, so characters such as / or = can no longer change the generated markup. A string that does not start with a valid element name (for example '!--' or '') now throws an error instead of producing invalid HTML.

Changelog

Sourced from astro's changelog.

7.4.5

Patch Changes

• #18558 fac3c50 Thanks @​astro-factory! - Fixes astro dev status and other background server commands deleting the lock file of a running dev or preview server when run from a sandbox or as another user that is not permitted to signal its process

• #18559 10dae2f Thanks @​astro-factory! - Fixes import.meta.env values containing $ sequences (such as $$ or $&) being corrupted in astro build when server code reads the import.meta.env object directly, for example with const { MY_SECRET } = import.meta.env

• #18544 e3bec3d Thanks @​skezo! - Fixes request paths with invalid percent-encoding (e.g. /%C0%AF or a bare %) being logged as an Invalid URL encoding error and routed with the undecoded path. These requests now return a 400, the same as a path that is encoded too many times.

• #18520 e023aba Thanks @​matthewp! - Makes rendering of string tag names stricter and consistent across .astro dynamic tags, JSX, and MDX. Only the leading part of the string that is a valid element name is rendered, so characters such as / or = can no longer change the generated markup. A string that does not start with a valid element name (for example '!--' or '') now throws an error instead of producing invalid HTML.

Commits

• d354ffb [ci] release (#18547)
• 10dae2f fix(env): preserve $ in import.meta.env values when the env object is inlin...
• fac3c50 Preserve dev server lock file when process signal check returns EPERM (#18558)
• e023aba Make string tag name rendering stricter and consistent (#18520)
• e3bec3d Reject request paths with invalid percent-encoding with a 400 (#18544)
• See full diff in compare view

[cloudflare-workers-and-pages]

🚀 Deploying Preview to Cloudflare 🚀

Preview Deployments by commit

Status	Deployment URL	Commit	Updated (UTC)	See this deployment's details
Build: Failed ❌ View logs ↗		91f90c3	2026-11-06T21:47:49.994Z	View logs ↗
Build: Failed ❌ View logs ↗		a9e64b6	2026-11-06T21:29:05.382Z	View logs ↗
Build: Failed ❌ View logs ↗		2363685	2026-11-06T03:15:27.047Z	View logs ↗