Skip to content

chore(deps): consolidate Dependabot updates (astro 7 / vite 8 migration)#117

Merged
jldeen merged 1 commit into
mainfrom
jldeen-consolidate-dependabot-prs
Jun 30, 2026
Merged

chore(deps): consolidate Dependabot updates (astro 7 / vite 8 migration)#117
jldeen merged 1 commit into
mainfrom
jldeen-consolidate-dependabot-prs

Conversation

@jldeen

@jldeen jldeen commented Jun 30, 2026

Copy link
Copy Markdown
Collaborator

Summary

Consolidates the two open Dependabot PRs into a single PR, and fixes the Astro 7 / Vite 8 migration that was blocking the astro major bump.

Replaces:

Dependency changes

Package From To
astro ^6.4.8 ^7.0.3
framer-motion ^12.40.0 ^12.42.0
preact ^10.29.2 ^10.29.3
tailwindcss ^4.3.1 ^4.3.2
@playwright/test ^1.61.0 ^1.61.1
@types/node ^26.0.0 ^26.0.1
baseline-browser-mapping ^2.10.38 ^2.10.40
vite (override) ^7 ^8
@tailwindcss/postcss → @tailwindcss/vite ^4.3.1 ^4.3.2

Why the migration was needed

Astro 7 upgrades to Vite 8, which broke astro build on the standalone #116:

  1. rollupOptions.input should not be an html file ... SSR error — the vite: "^7" override added in fix(security): force esbuild >=0.28.1 (GHSA-g7r4-m6w7-qqqr / alert #35) #114 (as a stopgap to avoid the Astro 7 jump while patching esbuild) forced a Vite/Astro version mismatch. Bumped the override to ^8.
  2. [postcss] ENOENT ... 'tailwindcss' — Vite 8's CSS pipeline can no longer resolve @import "tailwindcss" through postcss-import. Migrated Tailwind v4 to the official @tailwindcss/vite plugin: added the dep, wired it into astro.config.mjs, and removed @tailwindcss/postcss + postcss.config.mjs.

Also gitignored Playwright output dirs (test-results/, playwright-report/).

Validation

Run locally with Node:

  • npm run build — completes, Tailwind CSS present in output
  • npm run check (astro check) — 0 errors, 0 warnings
  • npm run test (Playwright) — 1 passed

Once this merges, #115 and #116 can be closed as superseded.

Co-authored-by: Copilot App 223556219+Copilot@users.noreply.github.com

…gration

Combines the two open Dependabot PRs into a single change:
- astro 6.4.8 -> 7.0.3 (#116)
- minor-and-patch group: framer-motion, preact, tailwindcss,
  @playwright/test, @tailwindcss/postcss->vite, @types/node,
  baseline-browser-mapping (#115)

Astro 7 upgrades to Vite 8, which broke the build:
- Bump the vite override from ^7 to ^8 (the ^7 pin from #114 forced a
  Vite/Astro mismatch -> 'rollupOptions.input should not be an html
  file' SSR error).
- Migrate Tailwind v4 from the PostCSS plugin to the official
  @tailwindcss/vite plugin. Vite 8's CSS pipeline could not resolve
  '@import "tailwindcss"' via postcss-import. Add @tailwindcss/vite,
  wire it into astro.config, drop @tailwindcss/postcss and
  postcss.config.mjs.

Ignore Playwright output dirs (test-results/, playwright-report/).

Verified with Node: astro build, astro check (0 errors), and the
Playwright suite all pass.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings June 30, 2026 07:34
@jldeen jldeen requested a review from Damovisa as a code owner June 30, 2026 07:34
GitHub Advanced Security started work on behalf of jldeen June 30, 2026 07:34 View session
GitHub Advanced Security finished work on behalf of jldeen June 30, 2026 07:35

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR consolidates multiple Dependabot updates and completes the Astro 7 / Vite 8 migration by switching Tailwind v4 to the @tailwindcss/vite plugin and removing the old PostCSS-based setup, unblocking astro build under Vite 8.

Changes:

  • Upgraded core dependencies (notably Astro 7) and updated the vite override to ^8 to resolve the Astro/Vite mismatch.
  • Migrated Tailwind v4 from @tailwindcss/postcss + postcss.config.mjs to the @tailwindcss/vite plugin wired through astro.config.mjs.
  • Added Playwright output directories to .gitignore.
Show a summary per file
File Description
postcss.config.mjs Removes the PostCSS config previously used for Tailwind.
package.json Updates dependencies (Astro 7, Vite override 8) and swaps Tailwind tooling dep to @tailwindcss/vite.
package-lock.json Regenerates lockfile to reflect the upgraded dependency graph (Astro 7 / Vite 8).
astro.config.mjs Registers the @tailwindcss/vite plugin in Astro’s Vite config.
.gitignore Ignores Playwright output directories (test-results/, playwright-report/).

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 3/5 changed files
  • Comments generated: 1
  • Review effort level: Low

Comment thread package.json
Comment on lines 13 to +17
"dependencies": {
"@astrojs/preact": "^6.0.0",
"@primer/react-brand": "^0.69.0",
"astro": "^6.4.8",
"framer-motion": "^12.40.0",
"astro": "^7.0.3",
"framer-motion": "^12.42.0",
@jldeen jldeen merged commit 74b7d90 into main Jun 30, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants