@astrojs/markdown-remark@7.3.1

withastro/astro@astrojs/markdown-remark@7.3.1Sep 8, 2026by astrobot-houston

AI Summary

A dependency update for the markdown-remark adapter that addresses the MDX script/style rendering security fix.

Key Highlights

  • Fixed MDX script/style rendering to escape dynamic values (use set:html to override)

Full Release Notes

### Patch Changes

-   [#17896](https://github.com/withastro/astro/pull/17896) [`a548223`](https://github.com/withastro/astro/commit/a548223607b9bb146d5d90ddda495343f9a2a739) Thanks [@matthewp](https://github.com/matthewp)! - Fixes `<script>`/`<style>` rendering in MDX so that only literal content (including content injected by remark/rehype plugins) is treated as trusted markup. A dynamic value passed as a `<script>`/`<style>` child (e.g. `<script>{value}</script>`) is now escaped like any other element's content instead of being rendered raw. Use `set:html` to explicitly opt a dynamic value back into raw rendering.