create-astro@5.2.6 astro-vscode@2.17.2

medium risk

withastro/astroOct 8, 2026 → Oct 8, 20260 days between releases

What's New

Removes automatic pre-approval for allowScripts and allowBuilds and switches bundling from esbuild to Oxc/Rolldown

Breaking Changes

  • Automatic pre-approval of allowScripts and allowBuilds is removed.
  • Direct dependency on esbuild is removed.

New Features

  • Internal code transforms now use Vite's Oxc-based transformWithOxc and Rolldown.

Improvements

  • Dependencies no longer run install scripts, removing the need for the workaround.
  • Internal tooling updated to Vite's Oxc-based transforms for bundling.

Upgrade Notes

Users should be aware that generated projects no longer automatically pre-approve allowScripts and allowBuilds. The extension has removed its direct dependency on esbuild in favor of Vite's Oxc-based transforms.

The Two Releases

create-astro@5.2.6

create-astro@5.2.6

Oct 8, 2026· 13 days ago

This patch release removes the automatic pre-approval of `allowScripts` and `allowBuilds` in generated projects, as Astro's dependencies no longer require the workaround to prevent install scripts from running.

Full release notes
astro-vscode@2.17.2

astro-vscode@2.17.2

Oct 8, 2026· 13 days ago

The VSCode extension updates its internal tooling to use Vite's Oxc-based `transformWithOxc` and Rolldown for code transformations, removing direct dependencies on esbuild.

Full release notes