Dev server: dependency scan fails when a `.astro` frontmatter comment contains a literal `<script` (7.3.2+)

Astro Info

Astro                    v7.3.3
Node                     v26.8.2
System                   macOS (arm64)
Package Manager          pnpm
Output                   server
Adapter                  @astrojs/node
Integrations             none

If this issue only occurs in one browser, which browser is a problem?

n/a, dev server issue

Describe the Bug

Since 7.3.2, astro dev logs this on the first request after a cold start:

[vite] (!) Failed to run dependency scan. Skipping dependency pre-bundling.

whenever any .astro file in the project has the <script inside a frontmatter comment. In our storefront it was a comment like this, above a function that builds a third-party embed:

// a userId with no scriptCdn emits `<script src="">`; see notes.ts

It only reproduces on a cold Vite cache. With node_modules/.vite present the scan never runs and the server starts clean, so you see the error on one machine and not another, or once after a pnpm install and then never again. Delete node_modules/.vite before each attempt.

Works in 7.3.1, but both 7.3.2 and 7.3.3 has the issue. Same Vite version used for all tests (8.2.2 in the repo we found the issue, 8.3.0 in the reproduction repo).

Looks similar to https://github.com/withastro/astro/issues/17697, but not involving @astrojs/cloudflare

What's the expected result?

The dependency scan should complete and pre-bundling should happen.

Link to Minimal Reproducible Example

https://github.com/gismya/astro-scan-repro

Participation

• I am willing to submit a pull request for this issue.