npm / @astrojs/netlify
@astrojs/netlify
What changed in @astrojs/netlify 7 to 8, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.
9 breaking3 security1 new APIs and options4 behavior and defaults1 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli init@astrojs/netlify 83 changes
Security 2
Astro: Netlify Image CDN allowlist bypass enables SSRF
@astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escaped
Fixes and other changes 1
Netlify Image CDN patterns with pathnames ending in /** now match only paths below that directory, consistent with Astro pattern matching; /public/** no longer matches /public-assets/.
@astrojs/netlify 715 changes
Breaking changes 9
The default changes from true to 'jsx', stripping HTML whitespace using JSX rules; set it to true to keep the previous behavior.
This deprecated option still works, but now requires @astrojs/markdown-remark to be installed.
This deprecated option still works, but now requires @astrojs/markdown-remark to be installed.
This deprecated option still works, but now requires @astrojs/markdown-remark to be installed.
Queued rendering is now the default, so projects no longer need the experimental flag to enable it.
The Rust-based compiler replaces the Go-based compiler as the default and only compiler; it rejects unclosed tags and no longer corrects semantically invalid HTML.
Sätteri is now the default Markdown pipeline for .md and .mdx files; the remark/rehype pipeline is no longer installed by default.
Astro now treats this file as advanced routing configuration and automatically imports it; rename an unrelated existing file or configure fetchFile.
Astro v7 upgrades its development server and production bundler to Vite 8. Projects using Vite-specific plugins, configuration, or APIs may need updates for breaking changes.
Security 1
@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN config
New APIs and options 1
Set a different filename or null to disable advanced routing when src/fetch.ts is used for another purpose or routing features are not needed.
Behavior and default changes 4
Advanced routing is enabled by default, so its experimental flag is no longer needed.
Route caching is stable; move cache and routeRules out of the experimental block in Astro config.
The experimental flag is no longer needed for the logging system; configure the logger directly in the top-level Astro config field.
Set this to unified() from @astrojs/markdown-remark to keep using the unified Markdown pipeline and its plugins.