@adobe/helix-html-pipeline 6.32.0 → 6.32.2

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [6.32.2](https://github.com/adobe/helix-html-pipeline/compare/v6.32.1...v6.32.2) (2026-09-17)
+
+
+### Bug Fixes
+
+* **urls:** use http protocol for localhost origins ([#1140](https://github.com/adobe/helix-html-pipeline/issues/1140)) ([d6c329a](https://github.com/adobe/helix-html-pipeline/commit/d6c329a4fb2985fc30b0b8146bf07a0aae5f8510))
+
+## [6.32.1](https://github.com/adobe/helix-html-pipeline/compare/v6.32.0...v6.32.1) (2026-09-15)
+
+
+### Bug Fixes
+
+* **deps:** update dependency @adobe/helix-markdown-support to v7.1.26 ([#1139](https://github.com/adobe/helix-html-pipeline/issues/1139)) ([17fd496](https://github.com/adobe/helix-html-pipeline/commit/17fd49628507d9b96cab939a3759356d17c99f02))
+
 # [6.32.0](https://github.com/adobe/helix-html-pipeline/compare/v6.31.4...v6.32.0) (2026-09-08)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/helix-html-pipeline",
-  "version": "6.32.0",
+  "version": "6.32.2",
   "description": "Helix HTML Pipeline",
   "main": "src/index.js",
   "types": "src/index.d.ts",
@@ -42,7 +42,7 @@
     "node": ">=16.x"
   },
   "dependencies": {
-    "@adobe/helix-markdown-support": "7.1.25",
+    "@adobe/helix-markdown-support": "7.1.26",
     "@adobe/helix-shared-utils": "3.0.2",
     "@adobe/mdast-util-gridtables": "4.0.19",
     "@adobe/remark-gridtables": "3.0.20",
@@ -83,10 +83,10 @@
     "eslint-plugin-import": "2.32.0",
     "esmock": "2.7.6",
     "husky": "9.1.7",
-    "js-yaml": "5.3.0",
+    "js-yaml": "5.4.1",
     "jsdom": "30.0.1",
     "junit-report-builder": "5.1.2",
-    "lint-staged": "17.3.0",
+    "lint-staged": "17.4.1",
     "mocha": "11.8.0",
     "mocha-multi-reporters": "1.5.1",
     "mocha-suppress-logs": "0.6.0",

package/src/robots-pipe.js

@@ -15,6 +15,7 @@ import { computeCodePathKey } from './steps/set-x-surrogate-key-header.js';
 import setCustomResponseHeaders from './steps/set-custom-response-headers.js';
 import { PipelineResponse } from './PipelineResponse.js';
 import initConfig from './steps/init-config.js';
+import { getOrigin } from './steps/utils.js';
 
 /**
  * Default robots.txt contents returned on inner/outer CDN.
@@ -89,7 +90,7 @@ function generateRobots(state) {
     'User-Agent: *',
     'Allow: /',
     '',
-    `Sitemap: https://${prodHost}/sitemap.xml`,
+    `Sitemap: ${getOrigin(prodHost)}/sitemap.xml`,
     '',
   ].join('\n');
   return new PipelineResponse(txt, {

package/src/sitemap-index-pipe.js

@@ -19,6 +19,7 @@ import { PipelineStatusError } from './PipelineStatusError.js';
 import { PipelineResponse } from './PipelineResponse.js';
 import initConfig from './steps/init-config.js';
 import { extractLastModified, recordLastModified, setLastModified } from './utils/last-modified.js';
+import { getOrigin } from './steps/utils.js';
 
 async function generateSitemapIndex(state) {
   const {
@@ -38,7 +39,7 @@ async function generateSitemapIndex(state) {
   const host = partition === 'preview'
     ? (previewHost || `${ref}--${repo}--${owner}.aem.page`)
     : (prodHost || liveHost || `${ref}--${repo}--${owner}.aem.live`);
-  const loc = (path) => (path.startsWith('/') ? `https://${host}${escape(path)}` : path);
+  const loc = (path) => (path.startsWith('/') ? `${getOrigin(host)}${escape(path)}` : path);
   const xml = [
     '<?xml version="1.0" encoding="utf-8"?>',
     '<sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">',

package/src/sitemap-pipe.js

@@ -19,6 +19,7 @@ import { PipelineStatusError } from './PipelineStatusError.js';
 import { PipelineResponse } from './PipelineResponse.js';
 import initConfig from './steps/init-config.js';
 import { extractLastModified, recordLastModified, setLastModified } from './utils/last-modified.js';
+import { getOrigin } from './steps/utils.js';
 
 async function generateSitemap(state) {
   const {
@@ -45,7 +46,7 @@ async function generateSitemap(state) {
     : (prodHost || liveHost || `${ref}--${repo}--${owner}.aem.live`);
   const safeNumber = (num) => parseInt(num, 10) || 0;
   const loc = ({ path, lastModified }) => `  <url>
-    <loc>https://${host}${escape(path)}</loc>
+    <loc>${getOrigin(host)}${escape(path)}</loc>
     <lastmod>${new Date(safeNumber(lastModified) * 1000).toISOString().substring(0, 10)}</lastmod>
   </url>`;
   const xml = [

package/src/steps/utils.js

@@ -198,6 +198,18 @@ export function resolveUrl(from, to) {
   return resolvedUrl.toString();
 }
 
+const LOCALHOST_REGEXP = /^(localhost|127\.0\.0\.1)(:\d+)?$/;
+
+/**
+ * Returns the origin for the given host, using `http` for loopback hosts
+ * (e.g. when developing locally against `localhost:3000`) and `https` otherwise.
+ * @param {string} host the host, optionally including a port
+ * @returns {string} the origin
+ */
+export function getOrigin(host) {
+  return `${LOCALHOST_REGEXP.test(host) ? 'http' : 'https'}://${host}`;
+}
+
 /**
  * Turns a relative into an absolute URL.
  * @param {PipelineState} state the request state
@@ -209,7 +221,7 @@ export function getAbsoluteUrl(state, url) {
   if (typeof url !== 'string') {
     return null;
   }
-  return resolveUrl(`https://${state.prodHost}${state.info?.path || '/'}`, url);
+  return resolveUrl(`${getOrigin(state.prodHost)}${state.info?.path || '/'}`, url);
 }
 
 /**