deps(deps): bump astro from 5.16.0 to 5.16.3
Bumps [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) from 5.16.0 to 5.16.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/withastro/astro/releases">astro's releases</a>.</em></p>
<blockquote>
<h2>astro@5.16.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14889">#14889</a> <a href="https://github.com/withastro/astro/commit/4bceeb0c7183de4db0087316e2fc2d287f27ad01"><code>4bceeb0</code></a> Thanks <a href="https://github.com/florian-lefebvre"><code>@florian-lefebvre</code></a>! - Fixes actions types when using specific TypeScript configurations</p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14929">#14929</a> <a href="https://github.com/withastro/astro/commit/e0f277d9248d2fefbd0234b53f9dea8c9b750adb"><code>e0f277d</code></a> Thanks <a href="https://github.com/matthewp"><code>@matthewp</code></a>! - Fixes authentication bypass via double URL encoding in middleware</p>
<p>Prevents attackers from bypassing path-based authentication checks using multi-level URL encoding (e.g., <code>/%2561dmin</code> instead of <code>/%61dmin</code>). Pathnames are now validated after decoding to ensure no additional encoding remains.</p>
</li>
</ul>
<h2>astro@5.16.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14876">#14876</a> <a href="https://github.com/withastro/astro/commit/b43dc7f28d582f22a4b28aa3a712af247c908dc3"><code>b43dc7f</code></a> Thanks <a href="https://github.com/florian-lefebvre"><code>@florian-lefebvre</code></a>! - Fixes a vite warning log during builds when using npm</p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14884">#14884</a> <a href="https://github.com/withastro/astro/commit/10273e01357e515050f8233442a7252b51cad364"><code>10273e0</code></a> Thanks <a href="https://github.com/florian-lefebvre"><code>@florian-lefebvre</code></a>! - Fixes a case where setting the status of a page to <code>404</code> in ssr would show an empty page (or <code>404.astro</code> page if provided) instead of using the current page</p>
</li>
</ul>
<h2>astro@5.16.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14769">#14769</a> <a href="https://github.com/withastro/astro/commit/b43ee71bd0c3740f41bb641abf01e9cd970d32ee"><code>b43ee71</code></a> Thanks <a href="https://github.com/adriandlam"><code>@adriandlam</code></a>! - Fixes an unhandled rejection issue when using Astro with Vercel Workflow DevKit</p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14761">#14761</a> <a href="https://github.com/withastro/astro/commit/345eb22bbe449bc8aea1ebd4205fef0fc554a10b"><code>345eb22</code></a> Thanks <a href="https://github.com/ooga"><code>@ooga</code></a>! - Updates <code>button</code> attributes types to allow <code>command</code> and <code>commandfor</code></p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14866">#14866</a> <a href="https://github.com/withastro/astro/commit/65e214b07b84b67c4f5fc13646a5d99944bb10c2"><code>65e214b</code></a> Thanks <a href="https://github.com/GameRoMan"><code>@GameRoMan</code></a>! - Fixes <code>Astro.glob</code> to be correctly marked as deprecated</p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14894">#14894</a> <a href="https://github.com/withastro/astro/commit/1ad9a5b3e7301a6c05787879e413b82ca0268003"><code>1ad9a5b</code></a> Thanks <a href="https://github.com/delucis"><code>@delucis</code></a>! - Fixes support for Astro component rendering in Vitest test suites using a “client” environment such as <code>happy-dom</code> or <code>jsdom</code></p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14782">#14782</a> <a href="https://github.com/withastro/astro/commit/abed9294ce698980f22f8a3f6695670151915d9b"><code>abed929</code></a> Thanks <a href="https://github.com/florian-lefebvre"><code>@florian-lefebvre</code></a>! - Improves syncing</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md">astro's changelog</a>.</em></p>
<blockquote>
<h2>5.16.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14889">#14889</a> <a href="https://github.com/withastro/astro/commit/4bceeb0c7183de4db0087316e2fc2d287f27ad01"><code>4bceeb0</code></a> Thanks <a href="https://github.com/florian-lefebvre"><code>@florian-lefebvre</code></a>! - Fixes actions types when using specific TypeScript configurations</p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14929">#14929</a> <a href="https://github.com/withastro/astro/commit/e0f277d9248d2fefbd0234b53f9dea8c9b750adb"><code>e0f277d</code></a> Thanks <a href="https://github.com/matthewp"><code>@matthewp</code></a>! - Fixes authentication bypass via double URL encoding in middleware</p>
<p>Prevents attackers from bypassing path-based authentication checks using multi-level URL encoding (e.g., <code>/%2561dmin</code> instead of <code>/%61dmin</code>). Pathnames are now validated after decoding to ensure no additional encoding remains.</p>
</li>
</ul>
<h2>5.16.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14876">#14876</a> <a href="https://github.com/withastro/astro/commit/b43dc7f28d582f22a4b28aa3a712af247c908dc3"><code>b43dc7f</code></a> Thanks <a href="https://github.com/florian-lefebvre"><code>@florian-lefebvre</code></a>! - Fixes a vite warning log during builds when using npm</p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14884">#14884</a> <a href="https://github.com/withastro/astro/commit/10273e01357e515050f8233442a7252b51cad364"><code>10273e0</code></a> Thanks <a href="https://github.com/florian-lefebvre"><code>@florian-lefebvre</code></a>! - Fixes a case where setting the status of a page to <code>404</code> in ssr would show an empty page (or <code>404.astro</code> page if provided) instead of using the current page</p>
</li>
</ul>
<h2>5.16.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14769">#14769</a> <a href="https://github.com/withastro/astro/commit/b43ee71bd0c3740f41bb641abf01e9cd970d32ee"><code>b43ee71</code></a> Thanks <a href="https://github.com/adriandlam"><code>@adriandlam</code></a>! - Fixes an unhandled rejection issue when using Astro with Vercel Workflow DevKit</p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14761">#14761</a> <a href="https://github.com/withastro/astro/commit/345eb22bbe449bc8aea1ebd4205fef0fc554a10b"><code>345eb22</code></a> Thanks <a href="https://github.com/ooga"><code>@ooga</code></a>! - Updates <code>button</code> attributes types to allow <code>command</code> and <code>commandfor</code></p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14866">#14866</a> <a href="https://github.com/withastro/astro/commit/65e214b07b84b67c4f5fc13646a5d99944bb10c2"><code>65e214b</code></a> Thanks <a href="https://github.com/GameRoMan"><code>@GameRoMan</code></a>! - Fixes <code>Astro.glob</code> to be correctly marked as deprecated</p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14894">#14894</a> <a href="https://github.com/withastro/astro/commit/1ad9a5b3e7301a6c05787879e413b82ca0268003"><code>1ad9a5b</code></a> Thanks <a href="https://github.com/delucis"><code>@delucis</code></a>! - Fixes support for Astro component rendering in Vitest test suites using a “client” environment such as <code>happy-dom</code> or <code>jsdom</code></p>
</li>
<li>
<p><a href="https://redirect.github.com/withastro/astro/pull/14782">#14782</a> <a href="https://github.com/withastro/astro/commit/abed9294ce698980f22f8a3f6695670151915d9b"><code>abed929</code></a> Thanks <a href="https://github.com/florian-lefebvre"><code>@florian-lefebvre</code></a>! - Improves syncing</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/withastro/astro/commit/33333e8ca1d77141312ebc6b1ffa387713cc3994"><code>33333e8</code></a> [ci] release (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/14922">#14922</a>)</li>
<li><a href="https://github.com/withastro/astro/commit/aa58d05a836e25b7c3e9d9a7f35eadd3b340c883"><code>aa58d05</code></a> [ci] format</li>
<li><a href="https://github.com/withastro/astro/commit/e0f277d9248d2fefbd0234b53f9dea8c9b750adb"><code>e0f277d</code></a> fix: prevent authentication bypass via double URL encoding in middleware (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/14">#14</a>...</li>
<li><a href="https://github.com/withastro/astro/commit/4bceeb0c7183de4db0087316e2fc2d287f27ad01"><code>4bceeb0</code></a> fix: actions infer symbol (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/14889">#14889</a>)</li>
<li><a href="https://github.com/withastro/astro/commit/e82358cf7ed9e190efa0d7132b20a1ab80f1d8b9"><code>e82358c</code></a> [ci] release (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/14918">#14918</a>)</li>
<li><a href="https://github.com/withastro/astro/commit/0a2fe4378074fc421db0e6f92d17736c69956629"><code>0a2fe43</code></a> [ci] format</li>
<li><a href="https://github.com/withastro/astro/commit/b43dc7f28d582f22a4b28aa3a712af247c908dc3"><code>b43dc7f</code></a> fix(astro): assets vite build log (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/14876">#14876</a>)</li>
<li><a href="https://github.com/withastro/astro/commit/10273e01357e515050f8233442a7252b51cad364"><code>10273e0</code></a> fix: 404 status in ssr (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/14884">#14884</a>)</li>
<li><a href="https://github.com/withastro/astro/commit/6751a2e4cd4f7260f0f17d6f28bd38e9c9b9a503"><code>6751a2e</code></a> chore(cli): classes (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/14897">#14897</a>)</li>
<li><a href="https://github.com/withastro/astro/commit/09bbdbb1e62c388eb405eeea03554c15e01f2957"><code>09bbdbb</code></a> [ci] release (<a href="https://github.com/withastro/astro/tree/HEAD/packages/astro/issues/14845">#14845</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/withastro/astro/commits/astro@5.16.3/packages/astro">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
authored by