# Astro astro@7.4.3 — Release & Upgrade Intelligence
- **Product:** Astro (https://astro.build)
- **Version:** astro@7.4.3
- **Released:** Oct 28, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/astro/updates/astro-7.4.3/

## Executive Summary (TL;DR)
Astro astro@7.4.3. Source highlight: CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into `script-src` and `style-src`.

## Bug Fixes
- CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into `script-src` and `style-src`.
- Fixes `<Image>` and `<Picture>` emitting duplicate `srcset` candidates when `densities` contains equivalent values such as `1` and `'1x'`
- Fix unhandled `AbortError` rejection when `ClientRouter` skips a pending view transition
- Fixes an uncaught `TypeError` in the browser when a `server:defer` island request fails due to a network error. The fallback content is kept, as it is for non-200 responses.
- Fixes a `DEP0190` deprecation warning printed by `astro info` on Node.js 24 and later
- Fixes `memoryCache()` serving an empty body for cached pages that return an empty `404` or `500` response. These responses now render the `404` or `500` error page on every request.

## Upgrade Command
```bash
npm install --save-exact astro@7.4.3
```