chore(deps): bump safe website-dependencies subset - #1634
Conversation
….14 / ZBSearch migration) Ships the non-breaking bumps from dependabot PR #1631, holding back the fumadocs 16.14 major that requires a website source migration. Bumped: - fumadocs-mdx ^15.2.1 -> ^15.2.2 (resolves 15.2.3; builds cleanly) - lucide-react ^1.27.0 -> ^1.28.0 (resolves 1.31.0) - next 16.2.12 -> 16.3.0 - postcss ^8.5.25 -> ^8.5.26 (override ^8.5.22 governs resolution) Held (defer to a dedicated migration PR): - fumadocs-core ^16.12.1 (16.14 replaces Orama with ZBSearch) - fumadocs-ui ^16.12.1 (pairs with core) fumadocs-mdx 15.2.3 does NOT pull core 16.14 transitively; type-check and next build both pass. esbuild stays 0.28.1, so allowBuilds is unchanged. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Plus Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (2)
🚧 Files skipped from review as they are similar to previous changes (1)
📝 WalkthroughWalkthroughThe website dependency updates raise versions for ChangesWebsite dependency updates
Estimated code review effort: 1 (Trivial) | ~2 minutes Possibly related PRs
Suggested reviewers: 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Deploying openspec-docs with
|
| Latest commit: |
444eb2d
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://cdf21ce5.openspec-docs.pages.dev |
| Branch Preview URL: | https://chore-website-deps-safe-subs.openspec-docs.pages.dev |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@website/package.json`:
- Line 31: Regenerate website/pnpm-lock.yaml to synchronize the postcss
dependency with the ^8.5.26 requirement in website/package.json, ensuring the
lockfile specifies that range and resolves a compatible 8.5.26-or-newer version.
🪄 Autofix
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro Plus
Run ID: 66922539-839f-4921-a733-e31ddc2d44fc
⛔ Files ignored due to path filters (1)
website/pnpm-lock.yamlis excluded by!**/pnpm-lock.yaml
📒 Files selected for processing (1)
website/package.json
alfred-openspec
left a comment
alfred-openspec
left a comment
There was a problem hiding this comment.
package.json declares postcss ^8.5.26, but the pnpm override remains ^8.5.22 and the lockfile importer resolves 8.5.25. Frozen install succeeds only because the override replaces the declared range, so this PR does not actually apply the PostCSS bump. Please align the override/importer and lock to 8.5.26 or newer, or drop the manifest bump, then rerun the website checks.
…o 8.5.26) The manifest declared postcss ^8.5.26 but the pnpm override stayed ^8.5.22, so the importer resolved 8.5.25 and the declared bump had no effect. Raise the override (website/pnpm-workspace.yaml + website/package.json pnpm.overrides) to ^8.5.26 and re-lock so postcss resolves 8.5.26 everywhere. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
@alfred-openspec addressed: the postcss bump is now real. Raised the pnpm override from |
alfred-openspec
left a comment
alfred-openspec
left a comment
There was a problem hiding this comment.
The PostCSS override, workspace config, importer, and lock now consistently resolve 8.5.26. Fumadocs remains on the compatible 16.12 line, frozen install plus type-check and production build pass locally, and the hosted matrix is green. Approved.
2 participants
Status
LGTM — supersedes the non-breaking bumps from dependabot #1631.
What was missing / motivation
Dependabot #1631 bundled 6 website dependency updates, but the fumadocs
16.14 major in that group replaces Orama with ZBSearch and requires a
components/search.tsxmigration. As a bundle it fails type-check andCloudflare Pages. Pushing to a dependabot branch makes it self-close, so
this is a hand-authored branch carrying only the safe subset.
What it does
Bumps the non-breaking deps and holds fumadocs at 16.12.1.
Bumped:
^15.2.1->^15.2.2(resolves 15.2.3)^1.27.0->^1.28.0(resolves 1.31.0)16.2.12->16.3.0^8.5.25->^8.5.26(the^8.5.22override governs the resolved version)Held (deferred to a dedicated migration PR):
^16.12.1— 16.14 swaps Orama for ZBSearch^16.12.1— pairs with coreProof it works
pnpm run types:check— passes (exit 0)pnpm run build(next build) — passes, all 26 doc pages prerenderpnpm install --frozen-lockfile(website + root) — cleanvitest run test/pnpm-workspace-config.test.ts— 3/3 passallowBuildsunchangedNotes
Follow-up: fumadocs-core/ui 16.14 + the Orama->ZBSearch
search.tsxmigration lands in its own PR. Closes dependabot #1631 in favor of this split.Summary by CodeRabbit