fix: sync package-lock.json to unblock Vercel npm ci deploys

[hongyi-chen]

Problem

Production deployments on Vercel for the docs repo were erroring out.

Root cause

Vercel installs dependencies with npm ci (installCommand in vercel.json). npm ci requires package.json and package-lock.json to be fully in sync and fails hard otherwise. The lockfile committed in #413 (the brace-expansion CVE bump) was missing several optional transitive dependencies, so npm ci failed with EUSAGE at the install step — before the build ever ran:

npm error `npm ci` can only install packages when your package.json and
package-lock.json or npm-shrinkwrap.json are in sync.
npm error Missing: @emnapi/runtime@1.11.1 from lock file
npm error Missing: @emnapi/core@1.11.3 from lock file
npm error Missing: @emnapi/wasi-threads@1.2.3 from lock file

This was easy to miss locally because astro build on its own uses a loose npm install, which silently repairs the lockfile. The strict npm ci Vercel uses does not.

Fix

Regenerated package-lock.json with npm install so it is in sync with package.json again. Only the lockfile changes.

Verification

• npm ci — now exits 0 (previously failed with EUSAGE).
• npm run build — succeeds, 352 pages built, .vercel/output produced.

Note (not blocking)

vercel.json currently has 1,976 redirects. Vercel's route limit is 2,048, so this is under the cap for now but worth keeping an eye on as redirects are added — the repo convention puts every redirect in vercel.json.

Conversation: https://staging.warp.dev/conversation/8d303aee-c883-4f1a-a25c-dbca722787f8

Run: https://oz.staging.warp.dev/runs/019faf3e-8107-757b-ae33-89846d9abd23

This PR was generated with Oz.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview, Comment	Jul 29, 2026 7:08pm

[oz-for-oss]

@hongyi-chen

I'm starting a first review of this pull request.

You can view the conversation on Warp.

I completed the review and no human review was requested for this pull request.

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz

[oz-for-oss]

Overview

This PR refreshes package-lock.json so it is consistent with package.json for Vercel's npm ci install path, adding the missing optional @emnapi transitive entries and updating lockfile peer metadata.

Concerns

• No blocking correctness, security, or spec-alignment concerns found in the annotated diff. spec_context.md reports no approved or repository spec context for this PR.

Verdict

Found: 0 critical, 0 important, 0 suggestions

Approve

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz