astro@7.3.8 create-astro@5.2.6

medium risk

withastro/astroOct 8, 2026 → Oct 8, 20260 days between releases

What's New

Removes automatic pre-approval for scripts and builds in generated projects

Breaking Changes

  • Removes automatic pre-approval for `allowScripts` and `allowBuilds` in generated projects

Improvements

  • Dependencies no longer run install scripts, removing the need for the workaround

Upgrade Notes

Generated projects will no longer automatically approve `allowScripts` and `allowBuilds`. Manually approve these in `pnpm-workspace.yaml` if your dependencies require them.

The Two Releases

astro@7.3.8

astro@7.3.8

Oct 8, 2026· 13 days ago

A patch release addressing multiple bugs, including a refactoring to use Vite's Oxc and Rolldown for bundling, fixing `Astro.cache` issues during error rendering, and resolving compatibility issues with pnpm workspace approvals.

Full release notes
create-astro@5.2.6

create-astro@5.2.6

Oct 8, 2026· 13 days ago

This patch release removes the automatic pre-approval of `allowScripts` and `allowBuilds` in generated projects, as Astro's dependencies no longer require the workaround to prevent install scripts from running.

Full release notes