[Snyk] Upgrade astro from 2.1.2 to 4.7.1

[onokatio]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade astro from 2.1.2 to 4.7.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 213 versions ahead of your current version.

• The recommended version was released on 24 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Improper Access Control SNYK-JS-VITE-6531286	130	Proof of Concept
	Improper Access Control SNYK-JS-UNDICI-6564963	130	No Known Exploit
	Improper Authorization SNYK-JS-UNDICI-6564964	130	No Known Exploit
	Permissive Cross-domain Policy with Untrusted Domains SNYK-JS-UNDICI-6252336	130	No Known Exploit

Release notes

Package name: astro

• 4.7.1 - 2024-05-02
• 4.7.0 - 2024-04-25
• 4.6.4 - 2024-04-23
• 4.6.3 - 2024-04-18
• 4.6.2 - 2024-04-16
• 4.6.1 - 2024-04-12
• 4.6.0 - 2024-04-11
• 4.5.18 - 2024-04-10
• 4.5.17 - 2024-04-09
• 4.5.16 - 2024-04-04
• 4.5.15 - 2024-04-03
• 4.5.14 - 2024-04-02
• 4.5.13 - 2024-04-02
• 4.5.12 - 2024-03-28
• 4.5.11 - 2024-03-28
• 4.5.10 - 2024-03-26
• 4.5.9 - 2024-03-22
• 4.5.8 - 2024-03-20
• 4.5.7 - 2024-03-20
• 4.5.6 - 2024-03-18
• 4.5.5 - 2024-03-15
• 4.5.4 - 2024-03-14
• 4.5.3 - 2024-03-13
• 4.5.2 - 2024-03-12
• 4.5.1 - 2024-03-11
• 4.5.0 - 2024-03-11
• 4.4.15 - 2024-03-08
• 4.4.14 - 2024-03-07
• 4.4.13 - 2024-03-06
• 4.4.12 - 2024-03-06
• 4.4.11 - 2024-03-04
• 4.4.10 - 2024-03-04
• 4.4.9 - 2024-03-02
• 4.4.8 - 2024-03-01
• 4.4.7 - 2024-03-01
• 4.4.6 - 2024-02-28
• 4.4.5 - 2024-02-26
• 4.4.4 - 2024-02-23
• 4.4.3 - 2024-02-22
• 4.4.2 - 2024-02-21
• 4.4.1 - 2024-02-20
• 4.4.0 - 2024-02-15
• 4.3.7 - 2024-02-13
• 4.3.6 - 2024-02-12
• 4.3.5 - 2024-02-07
• 4.3.4 - 2024-02-07
• 4.3.3 - 2024-02-06
• 4.3.2 - 2024-02-02
• 4.3.1 - 2024-02-01
• 4.3.0 - 2024-02-01
  

  Minor Changes

  • #11055 b92de22 Thanks @ niklas-wortmann! - Updates the devtools type to allow passing VueDevToolsOptions

    For more customization, you can pass options that the Vue DevTools Vite Plugin supports. (Note: appendTo is not supported.) For example, you can set launchEditor to your preferred editor if you are not using Visual Studio Code:

    import { defineConfig } from 'astro/config';
    import vue from '@ astrojs/vue';

    export default defineConfig({
    // ...
    integrations: [
    vue({
    devtools: { launchEditor: 'webstorm' },
    }),
    ],
    });

• 4.2.8 - 2024-01-31
• 4.2.7 - 2024-01-30
• 4.2.6 - 2024-01-26
• 4.2.5 - 2024-01-26
• 4.2.4 - 2024-01-24
• 4.2.3 - 2024-01-22
• 4.2.2 - 2024-01-22
• 4.2.1 - 2024-01-18
• 4.2.0 - 2024-01-18
• 4.1.3 - 2024-01-16
• 4.1.2 - 2024-01-11
• 4.1.1 - 2024-01-05
• 4.1.0 - 2024-01-04
• 4.0.9 - 2024-01-02
• 4.0.8 - 2023-12-27
• 4.0.7 - 2023-12-20
• 4.0.6 - 2023-12-15
• 4.0.5 - 2023-12-14
• 4.0.4 - 2023-12-11
• 4.0.3 - 2023-12-06
• 4.0.2 - 2023-12-06
• 4.0.1 - 2023-12-05
• 4.0.0 - 2023-12-05
• 4.0.0-beta.7 - 2023-12-04
• 4.0.0-beta.6 - 2023-12-04
• 4.0.0-beta.5 - 2023-12-04
• 4.0.0-beta.4 - 2023-12-01
• 4.0.0-beta.3 - 2023-12-01
• 4.0.0-beta.2 - 2023-11-29
• 4.0.0-beta.1 - 2023-11-28
• 4.0.0-beta.0 - 2023-11-27
• 3.6.5 - 2024-03-01
• 3.6.4 - 2023-11-30
• 3.6.3 - 2023-11-28
• 3.6.2 - 2023-11-28
• 3.6.1 - 2023-11-27
• 3.6.0 - 2023-11-22
• 3.5.7 - 2023-11-21
• 3.5.6 - 2023-11-21
• 3.5.5 - 2023-11-16
• 3.5.4 - 2023-11-14
• 3.5.3 - 2023-11-12
• 3.5.2 - 2023-11-10
• 3.5.1 - 2023-11-10
• 3.5.0 - 2023-11-09
• 3.4.4 - 2023-11-08
• 3.4.3 - 2023-11-02
• 3.4.2 - 2023-11-01
• 3.4.1 - 2023-11-01
• 3.4.0 - 2023-10-26
  

  Minor Changes

  • #11071 8ca7c73 Thanks @ bholmesdev! - Adds two new functions experimental_getActionState() and experimental_withState() to support the React 19 useActionState() hook when using Astro Actions. This introduces progressive enhancement when calling an Action with the withState() utility.

    This example calls a like action that accepts a postId and returns the number of likes. Pass this action to the experimental_withState() function to apply progressive enhancement info, and apply to useActionState() to track the result:

    import { actions } from 'astro:actions';
    import { experimental_withState } from '@ astrojs/react/actions';

    export function Like({ postId }: { postId: string }) {
    const [state, action, pending] = useActionState(
    experimental_withState(actions.like),
    0 // initial likes
    );

    return (
    <form action={action}>
    <input type="hidden" name="postId" value={postId} />
    <button disabled={pending}>{state} ❤️</button>
    </form>
    );
    }

    You can also access the state stored by useActionState() from your action handler. Call experimental_getActionState() with the API context, and optionally apply a type to the result:

    import { defineAction, z } from 'astro:actions';
    import { experimental_getActionState } from '@ astrojs/react/actions';

    export const server = {
    like: defineAction({
    input: z.object({
    postId: z.string(),
    }),
    handler: async ({ postId }, ctx) => {
    const currentLikes = experimental_getActionState<number>(ctx);
    // write to database
    return currentLikes + 1;
    },
    }),
    };

• 3.3.4 - 2023-10-24
• 3.3.3 - 2023-10-23
• 3.3.2 - 2023-10-18
• 3.3.1 - 2023-10-16
• 3.3.0 - 2023-10-12
• 3.2.4 - 2023-10-10
• 3.2.3 - 2023-10-05
• 3.2.2 - 2023-10-02
• 3.2.1 - 2023-10-02
• 3.2.0 - 2023-09-28
• 3.1.4 - 2023-09-25
• 3.1.3 - 2023-09-25
• 3.1.2 - 2023-09-21
• 3.1.1 - 2023-09-19
• 3.1.0 - 2023-09-14
• 3.0.13 - 2023-09-12
• 3.0.12 - 2023-09-08
• 3.0.11 - 2023-09-08
• 3.0.10 - 2023-09-06
• 3.0.9 - 2023-09-06
• 3.0.8 - 2023-09-04
• 3.0.7 - 2023-09-01
• 3.0.6 - 2023-09-01
• 3.0.5 - 2023-08-31
• 3.0.4 - 2023-08-31
• 3.0.3 - 2023-08-30
• 3.0.2 - 2023-08-30
• 3.0.1 - 2023-08-30
  

  Patch Changes

  • #10813 3cc3e2c Thanks @ Xetera! - Omitting compiler-internal symbol from user components to fix breaking error messages
• 3.0.0 - 2023-08-30
• 3.0.0-rc.11 - 2023-08-29
• 3.0.0-rc.10 - 2023-08-29
• 3.0.0-rc.9 - 2023-08-29
• 3.0.0-rc.8 - 2023-08-28
• 3.0.0-rc.7 - 2023-08-25
• 3.0.0-rc.6 - 2023-08-25
• 3.0.0-rc.5 - 2023-08-22
• 3.0.0-beta.4 - 2023-08-18
• 3.0.0-beta.3 - 2023-08-18
• 3.0.0-beta.2 - 2023-08-14
• 3.0.0-beta.1 - 2023-08-11
• 3.0.0-beta.0 - 2023-08-03
• 2.10.15 - 2023-08-29
• 2.10.14 - 2023-08-24
• 2.10.13 - 2023-08-23
• 2.10.12 - 2023-08-18
• 2.10.11 - 2023-08-18
• 2.10.10 - 2023-08-18
• 2.10.9 - 2023-08-15
• 2.10.8 - 2023-08-15
• 2.10.7 - 2023-08-11
• 2.10.6 - 2023-08-11
• 2.10.5 - 2023-08-10
• 2.10.4 - 2023-08-09
• 2.10.3 - 2023-08-07
• 2.10.2 - 2023-08-07
• 2.10.1 - 2023-08-03
• 2.10.0 - 2023-08-03
• 2.9.7 - 2023-08-01
• 2.9.6 - 2023-07-28
• 2.9.5 - 2023-07-28
• 2.9.4 - 2023-07-27
• 2.9.3 - 2023-07-25
• 2.9.2 - 2023-07-24
• 2.9.1 - 2023-07-21
• 2.9.0 - 2023-07-20
• 2.8.5 - 2023-07-19
• 2.8.4 - 2023-07-18
• 2.8.3 - 2023-07-14
• 2.8.2 - 2023-07-13
• 2.8.1 - 2023-07-11
• 2.8.0 - 2023-07-06
• 2.7.4 - 2023-07-05
• 2.7.3 - 2023-07-03
• 2.7.2 - 2023-06-29
• 2.7.1 - 2023-06-27
• 2.7.0 - 2023-06-22
• 2.6.6 - 2023-06-20
• 2.6.5 - 2023-06-19
• 2.6.4 - 2023-06-13
• 2.6.3 - 2023-06-10
• 2.6.2 - 2023-06-09
• 2.6.1 - 2023-06-06
• 2.6.0 - 2023-06-06
• 2.5.7 - 2023-06-02
• 2.5.6 - 2023-05-30
• 2.5.5 - 2023-05-23
• 2.5.4 - 2023-05-23
• 2.5.3 - 2023-05-22
• 2.5.2 - 2023-05-22
• 2.5.1 - 2023-05-20
• 2.5.0 - 2023-05-18
• 2.4.5 - 2023-05-11
• 2.4.4 - 2023-05-09
• 2.4.3 - 2023-05-08
• 2.4.2 - 2023-05-05
• 2.4.1 - 2023-05-04
• 2.4.0 - 2023-05-04
• 2.3.4 - 2023-05-02
• 2.3.3 - 2023-05-01
• 2.3.2 - 2023-04-27
• 2.3.1 - 2023-04-25
• 2.3.0 - 2023-04-13
• 2.2.3 - 2023-04-12
• 2.2.2 - 2023-04-11
• 2.2.1 - 2023-04-07
• 2.2.0 - 2023-04-05
• 2.1.9 - 2023-03-31
• 2.1.8 - 2023-03-28
• 2.1.7 - 2023-03-24
• 2.1.6 - 2023-03-24
• 2.1.5 - 2023-03-22
• 2.1.4 - 2023-03-21
• 2.1.3 - 2023-03-13
• 2.1.2 - 2023-03-08

from astro GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[onokatio]

あとでrenovate入れる