chore(deps): update dependency astro to v5.15.8 - autoclosed

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
astro (source)	dependencies	patch	5.15.6 -> 5.15.8

By merging this PR, the issue #69 will be automatically resolved and closed:

Severity	CVSS Score	Vulnerability
High	7.1	CVE-2025-64764
Medium	5.3	CVE-2025-64765

---

Release Notes

withastro/astro (astro)

v5.15.8

Compare Source

Patch Changes

• #​14772 00c579a Thanks @​matthewp! - Improves the security of Server Islands slots by encrypting them before transmission to the browser, matching the security model used for props. This improves the integrity of slot content and prevents injection attacks, even when component templates don't explicitly support slots.

  Slots continue to work as expected for normal usage—this change has no breaking changes for legitimate requests.

• #​14771 6f80081 Thanks @​matthewp! - Fix middleware pathname matching by normalizing URL-encoded paths

  Middleware now receives normalized pathname values, ensuring that encoded paths like /%61dmin are properly decoded to /admin before middleware checks. This prevents potential security issues where middleware checks might be bypassed through URL encoding.

v5.15.7

Compare Source

Patch Changes

• #​14765 03fb47c Thanks @​florian-lefebvre! - Fixes a case where process.env wouldn't be properly populated during the build

• #​14690 ae7197d Thanks @​fredriknorlin! - Fixes a bug where Astro's i18n fallback system with fallbackType: 'rewrite' would not generate fallback files for pages whose filename started with a locale key.

---

• If you want to rebase/retry this PR, check this box