astro@6.4.5

withastro/astroastro@6.4.5Jun 9, 2026by astrobot-houston

AI Summary

This patch release fixes issues related to the experimental logger destination, proxy header validation for `Astro.request.url`, and reverts a build time regression in runtime detection.

Key Highlights

Fixes the `experimental.logger` destination not being used for server startup messages.
Fixes `Astro.request.url` to correctly reflect `X-Forwarded-Proto`/`Host` headers behind proxies.
Reverts a change to `isNode` detection that caused a build time regression for Cloudflare adapter users.

Full Release Notes

### Patch Changes

-   [#16985](https://github.com/withastro/astro/pull/16985) [`4ecff32`](https://github.com/withastro/astro/commit/4ecff3268acb6ee3db719c4b38bbaead703ff4de) Thanks [@maximslo](https://github.com/maximslo)! - Fixes the `experimental.logger` destination not being used for the "Server listening on..." startup message. The logger is now resolved before the server starts listening, and `adapterLogger` re-creates itself when the underlying logger changes so the startup message uses the correct destination.

-   [#16947](https://github.com/withastro/astro/pull/16947) [`e0703a6`](https://github.com/withastro/astro/commit/e0703a6e815be829759ab7912f7024ee8424c3ac) Thanks [@ematipico](https://github.com/ematipico)! - Fixes `Astro.request.url` not reflecting validated `X-Forwarded-Proto`/`X-Forwarded-Host` headers when `security.allowedDomains` is configured. Previously, only `Astro.url` was updated with the forwarded origin while `Astro.request.url` retained the socket-derived URL, causing the two to diverge behind TLS-terminating proxies.

-   [#16997](https://github.com/withastro/astro/pull/16997) [`dc45246`](https://github.com/withastro/astro/commit/dc45246812afcaab60393e5236d27e95f98f5efa) Thanks [@matthewp](https://github.com/matthewp)! - Reverts a change to `isNode` runtime detection that caused a significant build time regression for Cloudflare adapter users with large prerendered sites