Home » Oreps » Astro » All Releases » astro@5.16.3 Release
withastro/astro
The web framework for content-driven websites. ⭐️ Star to support our work!
Watch
0
Commit Activity
Directory Browser
Velocity History
Releasesastro@5.16.3
Basic Details Issues Addressed Top Contributors Directory Browser Release Notes
Astro astro@5.16.3

Astro: astro@5.16.3 Release

Release date:
November 29, 2025
Previous version:
astro@5.16.2 (released November 27, 2025)
Magnitude:
168 Diff Delta
Contributors:
1 total committer
Data confidence:
Commits:
2 impacting commits

Top Contributors in astro@5.16.3

ematipico

Directory Browser for astro@5.16.3

All files are compared to previous version, astro@5.16.2. Click here to browse diffs between other versions.

Loading File Browser...

Release Notes Published

Patch Changes

  • #14889 4bceeb0 Thanks @florian-lefebvre! - Fixes actions types when using specific TypeScript configurations

  • #14929 e0f277d Thanks @matthewp! - Fixes authentication bypass via double URL encoding in middleware

    Prevents attackers from bypassing path-based authentication checks using multi-level URL encoding (e.g., /%2561dmin instead of /%61dmin). Pathnames are now validated after decoding to ensure no additional encoding remains.