Repository navigation
fix(docs-site): make bun.lock the only lockfile and bump astro to 7.2.10 - #152
Conversation
Dependabot alerts 190-195 sit on docs-site/package-lock.json (astro, fast-uri, js-yaml, nanoid, postcss). The repo standard is bun, and withastro/action already prefers bun.lock once package-lock.json is gone, so drop the npm lockfile, bump astro past its advisory, and refresh the transitive packages in bun.lock. Supersedes Dependabot PR #148.
|
Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits. |
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Team Run ID: ⛔ Files ignored due to path filters (2)
📒 Files selected for processing (1)
Included review availability: Your plan provides up to 2 included reviews per hour; 0 remain after this review. 📝 WalkthroughWalkthroughThe documentation site updates its pinned ChangesDocumentation Site Dependency
Estimated code review effort: 1 (Trivial) | ~2 minutes Merge Risk: ⚪ Minimal · up to The change removes the competing npm lockfile, updates Astro and related dependencies, and keeps the documentation build on the Bun lockfile; no actionable merge-blocking risk remains beyond normal checks and review. 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
Full details: Description checkExplanation The description explains what the PR changes, why the changes are needed, the affected dependency versions, the test performed, and the superseded issue. It does not include the template's Review Checklist or Wiki impact sections, but the core required information is present. Full details: Docstring CoverageExplanation No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.) ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Problem
Six Dependabot alerts sit on
docs-site/package-lock.json(astro, fast-uri, js-yaml, nanoid, postcss). The directory carried two lockfiles, and the npm one won in CI.Fix
Drop
package-lock.json, bump astro to 7.2.10, and refresh the transitive packages inbun.lock. withastro/action detectsbun.lockon its own once the npm lockfile is gone, so the Docs workflow needs no change.Local
bun run buildcompleted (21 pages). The Docs workflow on this PR is the CI proof.Supersedes #148.
Changes made by Claude Fable 5.1 in Claude Code.
Summary by CodeRabbit