Skip to content

[C3] Bump create-astro from 4.13.2 to 5.0.0 in /packages/create-cloudflare/src/frameworks#12907

Merged
edmundhung merged 2 commits intomainfrom
dependabot/npm_and_yarn/packages/create-cloudflare/src/frameworks/create-astro-5.0.0
Mar 16, 2026
Merged

[C3] Bump create-astro from 4.13.2 to 5.0.0 in /packages/create-cloudflare/src/frameworks#12907
edmundhung merged 2 commits intomainfrom
dependabot/npm_and_yarn/packages/create-cloudflare/src/frameworks/create-astro-5.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 15, 2026

Bumps create-astro from 4.13.2 to 5.0.0.

Release notes

Sourced from create-astro's releases.

create-astro@5.0.0

Major Changes

Patch Changes

  • #15187 bbb5811 Thanks @​matthewp! - Update to Astro 6 beta

  • #15344 9d87f77 Thanks @​matthewp! - Fixes a hang that could occur when the npm registry is slow or unresponsive by adding a 10 second timeout to the version check

  • #15350 d758b68 Thanks @​matthewp! - Errors when --add and --no-install flags are used together, as --add requires dependencies to be installed

  • #15264 11efb05 Thanks @​florian-lefebvre! - Lower the Node version requirement to allow running on Stackblitz until it supports v22

  • #15419 a18d727 Thanks @​ematipico! - Fixes an issue where --add could accept any kind of string, leading to different errors. Now --add accepts only values of valid integrations and adapters.

  • #15419 a18d727 Thanks @​ematipico! - Fixes an issue where the add command could accept any arbitrary value, leading the possible command injections. Now add and --add accepts values that are only acceptable npmjs.org names.

Changelog

Sourced from create-astro's changelog.

5.0.0

Major Changes

Patch Changes

  • #15187 bbb5811 Thanks @​matthewp! - Update to Astro 6 beta

  • #15344 9d87f77 Thanks @​matthewp! - Fixes a hang that could occur when the npm registry is slow or unresponsive by adding a 10 second timeout to the version check

  • #15350 d758b68 Thanks @​matthewp! - Errors when --add and --no-install flags are used together, as --add requires dependencies to be installed

  • #15264 11efb05 Thanks @​florian-lefebvre! - Lower the Node version requirement to allow running on Stackblitz until it supports v22

  • #15419 a18d727 Thanks @​ematipico! - Fixes an issue where --add could accept any kind of string, leading to different errors. Now --add accepts only values of valid integrations and adapters.

  • #15419 a18d727 Thanks @​ematipico! - Fixes an issue where the add command could accept any arbitrary value, leading the possible command injections. Now add and --add accepts values that are only acceptable npmjs.org names.

5.0.0-beta.4

Patch Changes

  • #15419 a18d727 Thanks @​ematipico! - Fixes an issue where --add could accept any kind of string, leading to different errors. Now --add accepts only values of valid integrations and adapters.

  • #15419 a18d727 Thanks @​ematipico! - Fixes an issue where the add command could accept any arbitrary value, leading the possible command injections. Now add and --add accepts values that are only acceptable npmjs.org names.

5.0.0-beta.3

Patch Changes

  • #15344 9d87f77 Thanks @​matthewp! - Fixes a hang that could occur when the npm registry is slow or unresponsive by adding a 10 second timeout to the version check

  • #15350 d758b68 Thanks @​matthewp! - Errors when --add and --no-install flags are used together, as --add requires dependencies to be installed

5.0.0-beta.2

Patch Changes

5.0.0-beta.1

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for create-astro since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Open with Devin

@dependabot dependabot bot added c3 Relating to C3 (create-cloudflare) package dependencies Used by dependabot to mark PRs as updates to dependencies. skip-pr-description-validation Skip validation of the required PR description format labels Mar 15, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 15, 2026 06:07
@dependabot dependabot bot added c3 Relating to C3 (create-cloudflare) package dependencies Used by dependabot to mark PRs as updates to dependencies. skip-pr-description-validation Skip validation of the required PR description format labels Mar 15, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Mar 15, 2026

🦋 Changeset detected

Latest commit: cd0317b

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@workers-devprod
Copy link
Copy Markdown
Contributor

workers-devprod commented Mar 15, 2026

Codeowners approval required for this PR:

  • ✅ @cloudflare/wrangler
Show detailed file reviewers

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 15, 2026

✅ All changesets look good

Copy link
Copy Markdown
Contributor

@devin-ai-integration devin-ai-integration bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 1 additional finding.

Open in Devin Review

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new bot commented Mar 15, 2026

create-cloudflare

npm i https://pkg.pr.new/create-cloudflare@12907

@cloudflare/kv-asset-handler

npm i https://pkg.pr.new/@cloudflare/kv-asset-handler@12907

miniflare

npm i https://pkg.pr.new/miniflare@12907

@cloudflare/pages-shared

npm i https://pkg.pr.new/@cloudflare/pages-shared@12907

@cloudflare/unenv-preset

npm i https://pkg.pr.new/@cloudflare/unenv-preset@12907

@cloudflare/vite-plugin

npm i https://pkg.pr.new/@cloudflare/vite-plugin@12907

@cloudflare/vitest-pool-workers

npm i https://pkg.pr.new/@cloudflare/vitest-pool-workers@12907

@cloudflare/workers-editor-shared

npm i https://pkg.pr.new/@cloudflare/workers-editor-shared@12907

wrangler

npm i https://pkg.pr.new/wrangler@12907

commit: cd0317b

@edmundhung
Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [create-astro](https://github.com/withastro/astro/tree/HEAD/packages/create-astro) from 4.13.2 to 5.0.0.
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/create-astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/create-astro@5.0.0/packages/create-astro)

---
updated-dependencies:
- dependency-name: create-astro
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/packages/create-cloudflare/src/frameworks/create-astro-5.0.0 branch from b66551d to 8a666ff Compare March 16, 2026 12:04
The following dependency versions have been updated:

| Dependency   | From   | To    |
| ------------ | ------ | ----- |
| create-astro | 4.13.2 | 5.0.0 |
@github-project-automation github-project-automation bot moved this from Untriaged to Approved in workers-sdk Mar 16, 2026
@edmundhung edmundhung merged commit 92402f6 into main Mar 16, 2026
38 of 39 checks passed
@edmundhung edmundhung deleted the dependabot/npm_and_yarn/packages/create-cloudflare/src/frameworks/create-astro-5.0.0 branch March 16, 2026 14:45
@github-project-automation github-project-automation bot moved this from Approved to Done in workers-sdk Mar 16, 2026
petebacondarwin pushed a commit that referenced this pull request Mar 17, 2026
…flare/src/frameworks (#12907)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Wrangler automated PR updater <wrangler@cloudflare.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

c3 Relating to C3 (create-cloudflare) package dependencies Used by dependabot to mark PRs as updates to dependencies. skip-pr-description-validation Skip validation of the required PR description format

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants