Skip to content

chore(deps): bump dependencies - #34

Merged
lsimons merged 2 commits into
mainfrom
chore/bump-deps
Sep 19, 2026
Merged

lsimons merged 2 commits into
mainfrom
chore/bump-deps

Conversation

@lsimons

@lsimons lsimons commented Sep 19, 2026

Copy link
Copy Markdown
Owner

Convert every direct dependency in docs/package.json to an exact pin and regenerate docs/bun.lock so transitive dependencies refresh too. 7-day quiet period applied (nothing published after 2026-09-12).

Dependency Old New
astro ^7.3.1 7.3.2
@astrojs/starlight ^0.42.0 0.42.0 (pin only; 0.42.1/0.42.2 too recent)
sharp ^0.35.4 0.35.4 (pin only)
@astrojs/check ^0.9.10 0.9.10 (pin only)
playwright ^1.63.0 1.63.0 (pin only)
typescript ^6 6.0.3 (pin only; stays on 6.x)
@astrojs/markdown-remark - 7.3.1 (new; see below)

astro 7.3.2 made @astrojs/markdown-remark an optional peer dependency and now fails astro check/astro build when markdown.rehypePlugins is configured without it installed. Added it as a direct dependency, as the error message suggests.

Checks run locally via mise run ci: docs-install, docs-check (astro check), docs-build, docs-verify (base path + internal links), lint (prek hooks), audit (zizmor + actionlint). All passed.

Assisted-by: Claude:claude-fable-5-1
Co-Authored-By: lsimons-bot bot@leosimons.com

lsimons and others added 2 commits September 19, 2026 11:24
Convert every direct dependency to an exact pin and regenerate bun.lock
so transitive dependencies refresh too.

- astro: ^7.3.1 -> 7.3.2
- @astrojs/starlight: ^0.42.0 -> 0.42.0 (pin only; 0.42.1/0.42.2 are
  inside the 7-day quiet period)
- sharp: ^0.35.4 -> 0.35.4 (pin only)
- @astrojs/check: ^0.9.10 -> 0.9.10 (pin only)
- playwright: ^1.63.0 -> 1.63.0 (pin only)
- typescript: ^6 -> 6.0.3 (pin only; stays on 6.x by policy)
- @astrojs/markdown-remark: (new) 7.3.1 - astro 7.3.2 turned this into
  an optional peer dependency and now errors when `markdown.rehypePlugins`
  is configured without it installed.

Assisted-by: Claude:claude-fable-5-1
Co-Authored-By: lsimons-bot <bot@leosimons.com>
Regenerate bun.lock from scratch with
`bun update --minimum-release-age=604800` so transitive dependencies,
not just the direct pins, exclude anything published in the last week.
Direct pins in package.json are unchanged.

51 lock entries rolled back to older releases, notably:
- @astrojs/compiler-rs / compiler-binding*: 0.4.1 -> 0.4.0
- @astrojs/language-server: 2.17.0 -> 2.16.16 (drops @astrojs/astro2tsx,
  re-adds @astrojs/compiler 2.13.1)
- rolldown + @rolldown/binding-*: 1.2.9 -> 1.2.8
- zod: 4.6.5 -> 4.6.2
- prettier: 3.9.8 -> 3.9.6
- @babel/parser: 7.29.9 -> 7.29.8
- @clack/core 1.5.1 -> 1.5.0, @clack/prompts 1.8.1 -> 1.8.0
- @emnapi/core 1.11.3 -> 1.11.1, @emnapi/wasi-threads 1.2.3 -> 1.2.2
- @oxc-project/types 0.150.0 -> 0.149.0
- devalue 5.9.4 -> 5.9.2, fast-uri 3.1.8 -> 3.1.7, lru-cache 11.5.3 -> 11.5.2,
  magic-string 1.4.1 -> 1.3.1, p-limit 7.3.3 -> 7.3.2, p-timeout 7.0.2 -> 7.0.1,
  get-east-asian-width 1.7.0 -> 1.6.0

Assisted-by: Claude:claude-fable-5-1
Co-Authored-By: lsimons-bot <bot@leosimons.com>
@lsimons

lsimons commented Sep 19, 2026

Copy link
Copy Markdown
Owner Author

Second commit regenerates docs/bun.lock with bun update --minimum-release-age=604800 so transitive dependencies also respect the 7-day quiet period. Direct pins unchanged; 51 lock entries rolled back (see commit body). mise run ci (check, build, verify, lint, audit) passes.

@lsimons
lsimons merged commit 2aa2c5c into main Sep 19, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant