[pull] main from withastro:main#420

Merged

pull[bot] merged 7 commits intocode:mainfrom

Mar 4, 2026

Commits on Mar 4, 2026

fix(session): reject unrecognized session IDs from cookies (#15752)
ascorbic
authored
fix(node): harden static file handler path resolution (#15745)
matthewp
authored
refactor astro-attrs.test.js to unit tests (#15557)
rururux
authored
Harden redirect handling for catch-all parameters (#15743)
matthewp
authored
Ensure cookies set by middleware are included in error page responses (#15744)

matthewp
and
astro-security-bot
authored
Harden Astro.clientAddress when using from Node adapter (#15742)
matthewp
authored
Fix Cloudflare adapter deployment for static sites (#15694)

matthewp
and
sarah11918
authored