Skip to content

chore: upgrade VitePress, wrangler, and pin patched deps - #256

Merged
yanglbme merged 1 commit into
mainfrom
chore/upgrade-deps-fix-security
Aug 24, 2026
Merged

chore: upgrade VitePress, wrangler, and pin patched deps#256
yanglbme merged 1 commit into
mainfrom
chore/upgrade-deps-fix-security

Conversation

@yanglbme

Copy link
Copy Markdown
Member

Summary

  • Upgrade VitePress ^2.0.0-alpha.172.0.0-alpha.19 (Vite 8)
  • Upgrade TypeScript ^7.0.2, Vue ^3.5.41, wrangler ^4.125.0, @cloudflare/workers-types ^5.20260823.1
  • Pin vite 8.2.2, esbuild 0.28.2, postcss 8.5.26, nanoid 3.3.18 in pnpm-workspace.yaml
  • Declare engines.node as ^20.19.0 || >=22.12.0

Test plan

  • pnpm typecheck
  • pnpm docs:build
  • pnpm audit --registry https://registry.npmjs.org — 0 vulnerabilities

Made with Cursor

Bump VitePress to 2.0.0-alpha.19, TypeScript 7, wrangler, and workers-types.
Pin vite/esbuild/postcss/nanoid to patched versions via pnpm-workspace.yaml.

Co-authored-by: Cursor <cursoragent@cursor.com>
Copilot AI lite review requested due to automatic review settings August 24, 2026 12:11
@yanglbme
yanglbme merged commit bb7c150 into main Aug 24, 2026
1 check passed
@yanglbme
yanglbme deleted the chore/upgrade-deps-fix-security branch August 24, 2026 12:14

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the repository’s docs/build toolchain dependencies (VitePress/Vite, TypeScript, Vue, Cloudflare wrangler/workers-types) and applies workspace-level override pins for several patched transitive dependencies.

Changes:

  • Upgraded VitePress to 2.0.0-alpha.19 (bringing in Vite 8) and updated related frontend/tooling deps (TypeScript 7, Vue 3.5.41).
  • Upgraded Cloudflare tooling (wrangler, @cloudflare/workers-types) and refreshed the lockfile accordingly.
  • Switched PNPM overrides from ranges to exact pins for vite, esbuild, postcss, and nanoid.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File Description
pnpm-workspace.yaml Pins specific dependency versions via PNPM overrides.
pnpm-lock.yaml Lockfile updates reflecting the upgraded toolchain and pinned overrides.
package.json Updates core devDependencies and declares supported Node.js engine range.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread package.json
Comment on lines +3 to +5
"engines": {
"node": "^20.19.0 || >=22.12.0"
},
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants