Repository navigation
Conversation
Folds four Dependabot PRs into one: #1191, #1126, #1178, #1121. - @vercel/node 5.9.3 -> 5.10.2 (dev) - js-yaml 4.3.1 -> 4.3.2 (dev) - smol-toml 1.7.1 -> 1.9.1 (transitive) - devalue 5.8.1 -> 5.9.4 (transitive) - svgo 4.0.2 -> 4.1.0 (transitive) npm audit: 36 -> 29 findings (high 22 -> 15). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Iamfle4ka
added
the
site-tooling
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Replaces Dependabot's #1123, which failed to build. - astro 6.4.8 -> 7.3.8, @astrojs/starlight 0.38.5 -> 0.42.6, @astrojs/mdx 5.0.6 -> 8.0.3, sharp 0.33.5 -> 0.35.5, starlight-image-zoom 0.14 -> 0.16 (its peer range requires Starlight 0.42) - add @astrojs/markdown-remark: Astro 7 no longer installs it, and our remark plugins (strip-comments, beacon transforms) run on it. Starlight 0.42 lists it as a peer dependency. - compressHTML: true. Astro 7's new 'jsx' default dropped the space where text meets an inline element across a line break (404 partner emails, changelog). true is the Astro 6 behaviour. - 404.astro: close <StarlightPage>. Astro 6 closed it implicitly at end of file; the Astro 7 compiler rejects the unclosed tag. Rendered text of all 375 pages matches the Astro 6 build. npm audit: 29 -> 25 findings, critical 1 -> 0. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Collaborator
Author
|
@keboola-pr-reviewer review |
keboola-pr-reviewer-bot
left a comment
keboola-pr-reviewer-bot
left a comment
There was a problem hiding this comment.
Verdict: needs_human (risk 4/5) · profile connection-docs
Dependency-bump PR touching only package.json and package-lock.json, which the policy routes to a human regardless of size.
Impact flags: possible rollback re-introduction — see Check Run summary.
Concerns:
package.json: Manifest/lockfile change — policy requires human review for build toolingpackage-lock.json: Transitive majors (css-select 5→6, css-what 6→7, @vercel/build-utils 13→14) ride along; verify CI build
Suggested reviewers: @keboola/docs
chore(deps): Astro 7, Starlight 0.42, MDX 8, sharp 0.35
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Four open Dependabot PRs rolled into one, since #1191 and #1126 both bump
@vercel/nodeand would conflict on the lockfile.Supersedes #1191, #1126, #1178, #1121. Dependabot closes those on its own once this lands on main.
@vercel/nodejs-yamlsmol-tomldevaluesvgonpm auditgoes from 36 findings to 29 (high: 22 to 15). Most of what's left (astro critical, sharp high, the expressive-code chain) comes with the Astro 7 major from #1123, which needs a config migration and gets its own PR.Local
npm run build: passes, 374 pages.🤖 Generated with Claude Code