Skip to content

fix(docs-site): make bun.lock the only lockfile and bump astro to 7.2.10 - #152

Merged
AojdevStudio merged 1 commit into
mainfrom
fix/docs-site-bun-lockfile
Sep 2, 2026
Merged

AojdevStudio merged 1 commit into
mainfrom
fix/docs-site-bun-lockfile

Conversation

@AojdevStudio

@AojdevStudio AojdevStudio commented Sep 2, 2026 •

Copy link
Copy Markdown
Owner

Problem

Six Dependabot alerts sit on docs-site/package-lock.json (astro, fast-uri, js-yaml, nanoid, postcss). The directory carried two lockfiles, and the npm one won in CI.

Fix

Drop package-lock.json, bump astro to 7.2.10, and refresh the transitive packages in bun.lock. withastro/action detects bun.lock on its own once the npm lockfile is gone, so the Docs workflow needs no change.

package before after alert fixed at
astro 7.0.9 7.2.10 7.1.0
nanoid 3.3.16 3.3.18 3.3.18
js-yaml 4.3.0 4.3.2 4.3.1
fast-uri 3.1.3 3.1.7 3.1.5
postcss 8.5.19 8.5.26 8.5.23

Local bun run build completed (21 pages). The Docs workflow on this PR is the CI proof.

Supersedes #148.

Changes made by Claude Fable 5.1 in Claude Code.

Summary by CodeRabbit

  • Chores
    • Updated the documentation site’s Astro framework dependency to version 7.2.10.

Dependabot alerts 190-195 sit on docs-site/package-lock.json (astro,
fast-uri, js-yaml, nanoid, postcss). The repo standard is bun, and
withastro/action already prefers bun.lock once package-lock.json is
gone, so drop the npm lockfile, bump astro past its advisory, and
refresh the transitive packages in bun.lock.

Supersedes Dependabot PR #148.
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

@coderabbitai

coderabbitai Bot commented Sep 2, 2026 •

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: 2f1609ce-b99e-4b13-af23-9dcb8488722b

📥 Commits

Reviewing files that changed from the base of the PR and between f512ee4 and fd60172.

⛔ Files ignored due to path filters (2)
  • docs-site/bun.lock is excluded by !**/*.lock
  • docs-site/package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • docs-site/package.json

Included review availability: Your plan provides up to 2 included reviews per hour; 0 remain after this review.


📝 Walkthrough

Walkthrough

The documentation site updates its pinned astro dependency from 7.0.9 to 7.2.10.

Changes

Documentation Site Dependency

Layer / File(s) Summary
Update Astro version
docs-site/package.json
The package manifest updates the pinned astro dependency from 7.0.9 to 7.2.10.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to fd601

The change removes the competing npm lockfile, updates Astro and related dependencies, and keeps the documentation build on the Bun lockfile; no actionable merge-blocking risk remains beyond normal checks and review.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly summarizes the two main changes: removing the npm lockfile so bun.lock is the only lockfile and updating Astro to 7.2.10.
Description check ✅ Passed The description explains what the PR changes, why the changes are needed, the affected dependency versions, the test performed, and the superseded issue. It does not include the template's Review Chec…
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Full details: Description check

Explanation

The description explains what the PR changes, why the changes are needed, the affected dependency versions, the test performed, and the superseded issue. It does not include the template's Review Checklist or Wiki impact sections, but the core required information is present.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/docs-site-bun-lockfile

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@AojdevStudio
AojdevStudio merged commit 171b6d6 into main Sep 2, 2026
18 checks passed
@AojdevStudio
AojdevStudio deleted the fix/docs-site-bun-lockfile branch September 2, 2026 18:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant