astro 5.2.5 → 5.3.0

package/dist/content/content-layer.js

@@ -153,7 +153,7 @@ ${contentConfig.error.message}`);
       logger.info("Content config changed");
       shouldClear = true;
     }
-    if (previousAstroVersion && previousAstroVersion !== "5.2.5") {
+    if (previousAstroVersion && previousAstroVersion !== "5.3.0") {
       logger.info("Astro version changed");
       shouldClear = true;
     }
@@ -161,8 +161,8 @@ ${contentConfig.error.message}`);
       logger.info("Clearing content store");
       this.#store.clearAll();
     }
-    if ("5.2.5") {
-      await this.#store.metaStore().set("astro-version", "5.2.5");
+    if ("5.3.0") {
+      await this.#store.metaStore().set("astro-version", "5.3.0");
     }
     if (currentConfigDigest) {
       await this.#store.metaStore().set("content-config-digest", currentConfigDigest);

package/dist/core/app/middlewares.js

@@ -4,26 +4,27 @@ const FORM_CONTENT_TYPES = [
   "multipart/form-data",
   "text/plain"
 ];
+const SAFE_METHODS = ["GET", "HEAD", "OPTIONS"];
 function createOriginCheckMiddleware() {
   return defineMiddleware((context, next) => {
     const { request, url, isPrerendered } = context;
     if (isPrerendered) {
       return next();
     }
-    if (request.method === "GET") {
+    if (SAFE_METHODS.includes(request.method)) {
       return next();
     }
-    const sameOrigin = (request.method === "POST" || request.method === "PUT" || request.method === "PATCH" || request.method === "DELETE") && request.headers.get("origin") === url.origin;
+    const isSameOrigin = request.headers.get("origin") === url.origin;
     const hasContentType = request.headers.has("content-type");
     if (hasContentType) {
       const formLikeHeader = hasFormLikeHeader(request.headers.get("content-type"));
-      if (formLikeHeader && !sameOrigin) {
+      if (formLikeHeader && !isSameOrigin) {
         return new Response(`Cross-site ${request.method} form submissions are forbidden`, {
           status: 403
         });
       }
     } else {
-      if (!sameOrigin) {
+      if (!isSameOrigin) {
         return new Response(`Cross-site ${request.method} form submissions are forbidden`, {
           status: 403
         });

package/dist/core/build/index.js

@@ -113,7 +113,8 @@ class AstroBuilder {
   async build({ viteConfig }) {
     await runHookBuildStart({ config: this.settings.config, logging: this.logger });
     this.validateConfig();
-    this.logger.info("build", `output: ${blue('"' + this.settings.buildOutput + '"')}`);
+    this.logger.info("build", `output: ${blue('"' + this.settings.config.output + '"')}`);
+    this.logger.info("build", `mode: ${blue('"' + this.settings.buildOutput + '"')}`);
     this.logger.info("build", `directory: ${blue(fileURLToPath(this.settings.config.outDir))}`);
     if (this.settings.adapter) {
       this.logger.info("build", `adapter: ${green(this.settings.adapter.name)}`);

package/dist/core/build/plugins/plugin-manifest.js

@@ -41,9 +41,7 @@ function vitePluginManifest(options, internals) {
           `import { deserializeManifest as _deserializeManifest } from 'astro/app'`,
           `import { _privateSetManifestDontUseThis } from 'astro:ssr-manifest'`
         ];
-        const resolvedDriver = await resolveSessionDriver(
-          options.settings.config.experimental?.session?.driver
-        );
+        const resolvedDriver = await resolveSessionDriver(options.settings.config.session?.driver);
         const contents = [
           `const manifest = _deserializeManifest('${manifestReplace}');`,
           `if (manifest.sessionConfig) manifest.sessionConfig.driverModule = ${resolvedDriver ? `() => import(${JSON.stringify(resolvedDriver)})` : "null"};`,
@@ -232,7 +230,7 @@ function buildManifest(opts, internals, staticFiles, encodedKey) {
     checkOrigin: (settings.config.security?.checkOrigin && settings.buildOutput === "server") ?? false,
     serverIslandNameMap: Array.from(settings.serverIslandNameMap),
     key: encodedKey,
-    sessionConfig: settings.config.experimental.session
+    sessionConfig: settings.config.session
   };
 }
 export {