Astro 7.2.1

Breaking: Astro 7.2.1 ships today. August 11, 2026. A patch release, five days after 7.2.0. All fixes, no new APIs.

Here is what changed.

Client-Side Fixes

• CSS hot module replacement now works after navigating between pages with ClientRouter
• <video> and <audio> elements work again after view-transition navigation
• Middleware HMR now reacts to changes in imported modules, not just direct edits to the middleware file

CSP Fix

Using security.csp with experimental.clientPrerender and data-astro-prefetch links no longer triggers CSP violations. The injected speculation rules script now uses a static source: "document" approach with a CSS selector, producing a deterministic payload that gets hashed into the CSP script-src directive at build time.

Content Collections

• reference() fields no longer silently accept entry IDs that do not exist — Astro now logs an error for missing references after loaders finish syncing
• getCollection() and getEntry() are faster for entries without local image references

Build Fixes

• Dev prerender environments (e.g. /_image with @astrojs/cloudflare prerenderEnvironment: "node") no longer return 500 when a prerendered catch-all route exists
• experimental.incrementalBuild no longer re-renders unchanged routes that import more than one asset — the dependency hash is now based on file names instead of build order
• Markdown options documentation improved with links to the Markdown guide and official processors

Patch release. Update your lockfile.