Update May 13, 2026 tracked by Updatify @astrojs/internal-helpers@0.9.1 Patch Changes #16544 d365c97 Thanks @matthewp! - Tightens isRemotePath() to reject control characters after a leading slash and fixes the dev image endpoint origin check Read the original release on Astro ↗