# Astro astro@7.4.5 — Release & Upgrade Intelligence
- **Product:** Astro (https://astro.build)
- **Version:** astro@7.4.5
- **Released:** Nov 02, 2026
- **Impact Score:** 3/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/astro/updates/astro-7.4.5/

## Executive Summary (TL;DR)
Astro 7.4.5 fixes environment variable string corruption for '$' characters during builds and resolves background process lockfile deletion issues in multi-user environments. It also enforces 400 status responses for invalid percent-encoded URLs and tightens dynamic element tag rendering in templates.

## Bug Fixes
- Prevented `astro dev status` and background server commands from deleting lock files when executed by users without process signaling permissions.
- Fixed corruption of `import.meta.env` values containing `$` sequences (such as `$$` or `$&`) during `astro build` when accessed directly.
- Updated handling of request paths with invalid percent-encoding to return a `400` status code instead of routing undecoded paths.
- Enforced stricter dynamic string tag name rendering in `.astro`, JSX, and MDX, throwing errors for invalid tag names like `''` or `'!--'`.

## Upgrade Command
```bash
npm install --save-exact astro@7.4.5
```