@astrojs/language-server@2.16.11
withastro/astro@astrojs/language-server@2.16.11Jul 2, 2026by astrobot-houston
AI Summary
A patch release updating internal Volar dependencies to address a critical denial-of-service vulnerability in YAML.
Key Highlights
- Resolved CVE-2026-33532 (YAML DoS vulnerability)
- Updated YAML to version 2.8.3
- Updated volar-service-* dependencies to 0.0.71
Full Release Notes
### Patch Changes - [#17059](https://github.com/withastro/astro/pull/17059) [`60cb289`](https://github.com/withastro/astro/commit/60cb289faa8f9e0056a4de7ecca6ec420abd147f) Thanks [@dupontcyborg](https://github.com/dupontcyborg)! - Update volar-service-\* dependencies from 0.0.70 to 0.0.71 to pull in yaml-language-server 1.23.0 and yaml 2.8.3, resolving CVE-2026-33532 (GHSA-48c2-rrv3-qjmp), a denial-of-service vulnerability in yaml <2.8.3.