chore(deps): update Astro

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@astrojs/cloudflare (source)	12.6.12 → 12.6.13
@astrojs/mdx (source)	4.3.13 → 4.3.14
@astrojs/rss (source)	4.0.15 → 4.0.19
@astrojs/sitemap (source)	3.7.0 → 3.7.4
astro (source)	5.17.3 → 5.18.2

---

Release Notes

withastro/astro (@​astrojs/cloudflare)

v12.6.13

Compare Source

Patch Changes

• Updated dependencies [c2cd371]:
  • @​astrojs/internal-helpers@​0.7.6
  • @​astrojs/underscore-redirects@​1.0.0

withastro/astro (@​astrojs/rss)

v4.0.19

Compare Source

Patch Changes

• #​17209 fbcfa03 Thanks @​matthewp! - Hardens RSS feed generation by escaping the source and enclosure item fields. These fields are now serialized as structured XML values, ensuring that special characters in values like source.title and enclosure.type are always treated as text rather than markup, consistent with how other feed fields are handled.

v4.0.18

Compare Source

Patch Changes

• #​16037 fdd2c5a Thanks @​blimmer! - Unpin fast-xml-parser to ^5.5.7 to resolve entity expansion CVEs

v4.0.17

Compare Source

Patch Changes

• #​15830 8d3f3aa Thanks @​Princesseuh! - Pin fast-xml-parser to 5.4.1 in order to fix an upstream bug

v4.0.16

Compare Source

Patch Changes

• #​15187 bbb5811 Thanks @​matthewp! - Update to Astro 6 beta

• #​14956 0ff51df Thanks @​matthewp! - Updates usage of zod to own dependency rather than relying on astro/zod

• #​15561 413b0f7 Thanks @​renovate! - Updates fast-xml-parser to v5.3.6

• #​15283 daf41c6 Thanks @​eldair! - Updates validation to use Zod v4

• #​15373 14252b2 Thanks @​renovate! - Updates zod to v4

withastro/astro (@​astrojs/sitemap)

v3.7.4

Compare Source

Patch Changes

• #​17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"

v3.7.3

Compare Source

Patch Changes

• #​16837 783c4a6 Thanks @​jdevalk! - Improves <lastmod> accuracy in the sitemap index. Each <sitemap> entry in sitemap-index.xml is now stamped with the most recent lastmod of the URLs in the child sitemap it points to, instead of repeating a single global date on every entry. When a child sitemap has no per-URL lastmod, the entry falls back to the lastmod option as before. This gives search engines a per-file freshness signal, so they can tell which child sitemaps actually changed without refetching all of them.

v3.7.2

Compare Source

Patch Changes

• #​15455 babf57f Thanks @​AhmadYasser1! - Fixes i18n fallback pages missing from the generated sitemap when using fallbackType: 'rewrite'.

v3.7.1

Compare Source

Patch Changes

• #​15187 bbb5811 Thanks @​matthewp! - Update to Astro 6 beta

• #​14956 0ff51df Thanks @​matthewp! - Updates usage of zod to own dependency rather than relying on astro/zod

• #​15036 f125a73 Thanks @​florian-lefebvre! - Updates how routes are retrieved to avoid relying on a deprecated API

• #​15373 14252b2 Thanks @​renovate! - Updates zod to v4

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "before 9am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🚀 Preview Ready

Your changes have been deployed to a preview environment.

Preview URL	https://pr-73-hq.diz.workers.dev
Commit	d51f32b

Note

This preview will be updated on each push to this PR.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: f136c820-99cc-4ca3-aa02-ff3c99a45d7a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}