Skip to content

chore: upgrade VitePress and pin patched transitive deps - #32

Merged
yanglbme merged 1 commit into
mainfrom
chore/upgrade-deps-fix-security
Aug 24, 2026
Merged

chore: upgrade VitePress and pin patched transitive deps#32
yanglbme merged 1 commit into
mainfrom
chore/upgrade-deps-fix-security

Conversation

@yanglbme

Copy link
Copy Markdown
Member

Summary

  • Upgrade VitePress 2.0.0-alpha.172.0.0-alpha.19 (Vite 8)
  • Keep TypeScript ^6.0.3 because vue-tsc@3.3.11 cannot load TypeScript 7 (./lib/tsc export)
  • Upgrade Vue ^3.5.41 and vue-tsc ^3.3.11
  • Pin vite 8.2.2, esbuild 0.28.2, postcss 8.5.26, nanoid 3.3.18 in pnpm-workspace.yaml
  • Declare engines.node as ^20.19.0 || >=22.12.0
  • Raise Vite chunkSizeWarningLimit for the lazy-loaded local search index

Test plan

  • pnpm docs:typecheck
  • pnpm docs:build
  • pnpm audit --registry https://registry.npmjs.org — 0 vulnerabilities

Made with Cursor

Bump VitePress to 2.0.0-alpha.19 with Vite 8. Keep TypeScript 6 for vue-tsc
compatibility, pin postcss/nanoid/esbuild, and raise the local-search chunk limit.

Co-authored-by: Cursor <cursoragent@cursor.com>
Copilot AI lite review requested due to automatic review settings August 24, 2026 12:11
@yanglbme
yanglbme merged commit 391d41b into main Aug 24, 2026
1 check passed

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the documentation toolchain dependencies to newer VitePress/Vite/Vue/TypeScript versions and pins several transitive dependencies to known patched releases, while adjusting Node engine requirements and Vite build warnings for the docs site.

Changes:

  • Upgrade VitePress to 2.0.0-alpha.19 (Vite 8), plus related Vue and vue-tsc updates; keep TypeScript pinned at ^6.0.3.
  • Pin patched transitive dependencies via pnpm overrides (vite, esbuild, postcss, nanoid) and update the lockfile accordingly.
  • Declare supported Node versions and increase Vite chunkSizeWarningLimit for docs builds.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File Description
pnpm-workspace.yaml Pins transitive dependencies via overrides and updates the release-age exclusion to the new Vite version.
pnpm-lock.yaml Regenerates lockfile to reflect the upgraded/pinned dependency graph.
package.json Updates dev dependency versions and declares Node engine constraints.
docs/.vitepress/config.mts Raises Vite build chunkSizeWarningLimit to reduce warnings for large lazy-loaded chunks (e.g., search index).
Files not reviewed (1)
  • pnpm-lock.yaml: Generated file

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@yanglbme
yanglbme deleted the chore/upgrade-deps-fix-security branch August 24, 2026 12:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants