Skip to content

chore: upgrade VitePress and pin patched transitive deps - #6

Merged
yanglbme merged 1 commit into
mainfrom
chore/upgrade-deps-fix-security
Aug 24, 2026
Merged

chore: upgrade VitePress and pin patched transitive deps#6
yanglbme merged 1 commit into
mainfrom
chore/upgrade-deps-fix-security

Conversation

@yanglbme

Copy link
Copy Markdown
Member

Summary

  • Upgrade VitePress ^2.0.0-alpha.172.0.0-alpha.19 (Vite 8)
  • Pin vite 8.2.2, esbuild 0.28.2, postcss 8.5.26, nanoid 3.3.18 via npm overrides
  • Declare engines.node as ^20.19.0 || >=22.12.0
  • Keep npm lockfile / CI (npm ci)

Test plan

  • npm install
  • npm run docs:build
  • npm audit — 0 vulnerabilities

Made with Cursor

Bump VitePress to 2.0.0-alpha.19 with Vite 8, and pin postcss/nanoid/esbuild
to patched versions. Declare the Node engines required by Vite 8.

Co-authored-by: Cursor <cursoragent@cursor.com>
Copilot AI lite review requested due to automatic review settings August 24, 2026 12:11
@yanglbme
yanglbme merged commit c545991 into main Aug 24, 2026
1 check passed
@yanglbme
yanglbme deleted the chore/upgrade-deps-fix-security branch August 24, 2026 12:13

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades the documentation toolchain (VitePress/Vite) and uses npm overrides to pin specific transitive dependency versions, while also declaring a stricter supported Node.js engine range.

Changes:

  • Upgrade vitepress from ^2.0.0-alpha.17 to 2.0.0-alpha.19.
  • Add engines.node constraint: ^20.19.0 || >=22.12.0.
  • Add npm overrides to pin vite, esbuild, postcss, and nanoid, and update the lockfile accordingly.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Pins VitePress and adds Node engine + overrides for patched transitive deps.
package-lock.json Updates locked dependency graph to match the new VitePress/Vite versions and overrides.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants