chore(docs): update docs-site dependencies - #1247
Conversation
Bump docs-site packages to current releases: - astro 7.0.3 -> 7.2.0 (preview --background, logger.entrypoint paths, deferRender, collectionStorage chunked, assorted fixes) - @astrojs/starlight 0.41.1 -> 0.41.7 (RTL code examples, schema extension fixes, a11y fixes) - sharp 0.35.2 -> 0.35.3 (validation hardening, overflow bounds) - simple-icons 16.25.0 -> 16.28.0 (new icons) - @fontsource-variable/geist 5.2.9 -> 5.3.0 (font update) Resolve bun audit findings (4 high, 1 moderate) via overrides: - svgo 4.0.2 (GHSA-2p49-hgcm-8545) - nanoid ^3.3.18 (GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8) - postcss 8.5.26 (GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849)
|
✅ Deterministic PR hygiene checks passed. |
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Plus Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
📝 WalkthroughWalkthroughThe documentation site package manifest updates several dependency versions and adds overrides for SVGO, Nanoid, and PostCSS. ChangesDocumentation Site Dependencies
Estimated code review effort: 1 (Trivial) | ~5 minutes Suggested reviewers: 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
[GD] Merge ready PR: #1247 — chore(docs): update docs-site dependencies Reviews
Tip freshness
Checks
Residualnone Ready to merge. |
Summary
bun auditfindings (4 high, 1 moderate) introduced by the transitive toolchain by adding overrides: svgo 4.0.2, nanoid ^3.3.18, postcss 8.5.26.docs-site/package.json+docs-site/bun.lockonly.Validation
bun run build(docs-site) — pass, 221 pages generated, Pagefind index + sitemap completebun audit(docs-site) — pass, 0 vulnerabilities after overridesbun install --frozen-lockfile --dry-run— pass, lockfile consistentReview notes
Summary by CodeRabbit