Skip to content

chore(docs): update docs-site dependencies - #1247

Merged
Wibias merged 1 commit into
lidge-jun:devfrom
Wibias:docs-site-deps-update
Aug 8, 2026
Merged

chore(docs): update docs-site dependencies#1247
Wibias merged 1 commit into
lidge-jun:devfrom
Wibias:docs-site-deps-update

Conversation

@Wibias

@Wibias Wibias commented Aug 8, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Update the docs site toolchain to current releases: astro 7.0.3 → 7.2.0, @astrojs/starlight 0.41.1 → 0.41.7, sharp 0.35.2 → 0.35.3, simple-icons 16.25.0 → 16.28.0, @fontsource-variable/geist 5.2.9 → 5.3.0.
  • Resolve 5 bun audit findings (4 high, 1 moderate) introduced by the transitive toolchain by adding overrides: svgo 4.0.2, nanoid ^3.3.18, postcss 8.5.26.
  • No application code changes; the diff is docs-site/package.json + docs-site/bun.lock only.

Validation

  • bun run build (docs-site) — pass, 221 pages generated, Pagefind index + sitemap complete
  • bun audit (docs-site) — pass, 0 vulnerabilities after overrides
  • bun install --frozen-lockfile --dry-run — pass, lockfile consistent

Review notes

  • The astro 7.1/7.2 features (preview --background, logger.entrypoint relative paths, deferRender, collectionStorage chunked) are not used by this site; the bump is a maintenance update.
  • The overrides pin transitive packages that astro/starlight depend on loosely; verified the build is clean with them.

Summary by CodeRabbit

  • Chores
    • Updated documentation-site dependencies for improved compatibility and maintenance.
    • Added version overrides for supporting build and optimization tools.

Bump docs-site packages to current releases:
- astro 7.0.3 -> 7.2.0 (preview --background, logger.entrypoint paths, deferRender, collectionStorage chunked, assorted fixes)
- @astrojs/starlight 0.41.1 -> 0.41.7 (RTL code examples, schema extension fixes, a11y fixes)
- sharp 0.35.2 -> 0.35.3 (validation hardening, overflow bounds)
- simple-icons 16.25.0 -> 16.28.0 (new icons)
- @fontsource-variable/geist 5.2.9 -> 5.3.0 (font update)

Resolve bun audit findings (4 high, 1 moderate) via overrides:
- svgo 4.0.2 (GHSA-2p49-hgcm-8545)
- nanoid ^3.3.18 (GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8)
- postcss 8.5.26 (GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849)
@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

Deterministic PR hygiene checks passed.

@github-actions github-actions Bot added the chore Maintenance, CI, tests, refactors, or build changes (not a user-facing bug or feature). label Aug 8, 2026
@coderabbitai

coderabbitai Bot commented Aug 8, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 334b9e4a-0fe2-4bd1-a45c-79027c927696

📥 Commits

Reviewing files that changed from the base of the PR and between 21c6a40 and 07fd198.

⛔ Files ignored due to path filters (1)
  • docs-site/bun.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • docs-site/package.json

📝 Walkthrough

Walkthrough

The documentation site package manifest updates several dependency versions and adds overrides for SVGO, Nanoid, and PostCSS.

Changes

Documentation Site Dependencies

Layer / File(s) Summary
Update documentation site dependencies
docs-site/package.json
Updates Starlight, Geist, Astro, Sharp, and Simple Icons versions. Adds overrides for SVGO, Nanoid, and PostCSS.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested reviewers: ingwannu, lidge-jun

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the dependency updates made to the docs-site toolchain.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@Wibias

Wibias commented Aug 8, 2026

Copy link
Copy Markdown
Collaborator Author

[GD] Merge ready

PR: #1247 — chore(docs): update docs-site dependencies
Head: 07fd1980dev (mergeStateStatus: CLEAN)
Linked issues: none

Reviews

  • Humans (owners first): none
  • Bots: CodeRabbit — 0 actionable comments ("No actionable comments were generated"); all 5 pre-merge checks passed
  • Own bug + security + spec/standards: pre-open gate ready (17/17 blockers cleared by evidence); supply_chain done via bun audit (0 vulnerabilities after overrides: svgo 4.0.2, nanoid ^3.3.18, postcss 8.5.26); remaining lenses/surfaces n/a — diff is dependency manifest + lockfile only

Tip freshness

  • Updated from dev: already current (head 1 ahead, 0 behind)
  • Compiles/tests against tip: bun run build — pass (221 pages); bun audit — pass (0 vulnerabilities); bun install --frozen-lockfile --dry-run — pass
  • Conflicts: none

Checks

  • Local/CLI: build + audit + frozen-lockfile dry-run green on 07fd1980
  • Required CI: green on 07fd1980enforce-target, hygiene, label, react-doctor all pass
  • Policy: code-owner enforcement / stale approvals / merge-queue: n/a (no reviews, no queue)

Residual

none

Ready to merge.

@Wibias
Wibias merged commit fb3cb40 into lidge-jun:dev Aug 8, 2026
7 checks passed
@Wibias
Wibias deleted the docs-site-deps-update branch August 8, 2026 02:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore Maintenance, CI, tests, refactors, or build changes (not a user-facing bug or feature).

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant