Skip to content

chore(deps): dependabot wave 5 — astro 5→6 + drop Cloudflare for Node… - #40

Merged
deepagent-ai merged 1 commit into
devfrom
chore/dependabot-wave5-astro
Jul 9, 2026
Merged

deepagent-ai merged 1 commit into
devfrom
chore/dependabot-wave5-astro

Conversation

@deepagent-ai

Copy link
Copy Markdown
Contributor

… adapter

Clears all 17 remaining web alerts (16 astro medium/high + 1 @astrojs/cloudflare low). The astro high advisories are only patched in 6.x, so a major bump was required; the third-party docs theme blocked it and Cloudflare's adapter broke under astro 6's prerender pipeline.

  • astro 5.7.13 → 6.4.8; coordinated @astrojs bumps: solid-js 6.0.1, markdown-remark 6.3.11, starlight 0.40.0, check 0.9.9
  • remove toolbeam-docs-theme (pinned to astro ^5, no astro-6 release, and it dragged astro 5 back into the lockfile): drop its Starlight plugin and switch the Header override to Starlight's built-in @astrojs/starlight/components/Header
  • replace @astrojs/cloudflare with @astrojs/node 10.1.4 (standalone) — we deploy locally/self-hosted, not to Cloudflare. The whole web app (docs + the SSR /s/[id] share route) runs under one Node server
  • image.service = noop to preserve the adapter's prior passthrough behavior (avoids a new Sharp native dep)

Verified: astro build completes — 631 pages prerendered, search index + sitemap generated, standalone Node server built. astro resolves to a single 6.4.8; no @astrojs/cloudflare or toolbeam left in bun.lock.

Follow-up (not in this dep-cleanup wave): infra/app.ts still deploys web via sst.cloudflare.x.Astro; that deployment wiring needs a separate pass to match the Node adapter.

Issue for this PR

Closes #

Type of change

  • Bug fix
  • New feature
  • Refactor / code improvement
  • Documentation

What does this PR do?

Please provide a description of the issue, the changes you made to fix it, and why they work. It is expected that you understand why your changes work and if you do not understand why at least say as much so a maintainer knows how much to value the PR.

If you paste a large clearly AI generated description here your PR may be IGNORED or CLOSED!

How did you verify your code works?

Screenshots / recordings

If this is a UI change, please include a screenshot or recording.

Checklist

  • I have tested my changes locally
  • I have not included unrelated changes in this PR

If you do not follow this template your PR will be automatically rejected.

… adapter

Clears all 17 remaining web alerts (16 astro medium/high + 1 @astrojs/cloudflare
low). The astro high advisories are only patched in 6.x, so a major bump was
required; the third-party docs theme blocked it and Cloudflare's adapter broke
under astro 6's prerender pipeline.

- astro 5.7.13 → 6.4.8; coordinated @astrojs bumps: solid-js 6.0.1,
  markdown-remark 6.3.11, starlight 0.40.0, check 0.9.9
- remove toolbeam-docs-theme (pinned to astro ^5, no astro-6 release, and it
  dragged astro 5 back into the lockfile): drop its Starlight plugin and switch
  the Header override to Starlight's built-in @astrojs/starlight/components/Header
- replace @astrojs/cloudflare with @astrojs/node 10.1.4 (standalone) — we deploy
  locally/self-hosted, not to Cloudflare. The whole web app (docs + the SSR
  /s/[id] share route) runs under one Node server
- image.service = noop to preserve the adapter's prior passthrough behavior
  (avoids a new Sharp native dep)

Verified: `astro build` completes — 631 pages prerendered, search index +
sitemap generated, standalone Node server built. astro resolves to a single
6.4.8; no @astrojs/cloudflare or toolbeam left in bun.lock.

Follow-up (not in this dep-cleanup wave): infra/app.ts still deploys web via
sst.cloudflare.x.Astro; that deployment wiring needs a separate pass to match
the Node adapter.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@deepagent-ai
deepagent-ai merged commit 806d15b into dev Jul 9, 2026
4 of 11 checks passed
@deepagent-ai
deepagent-ai deleted the chore/dependabot-wave5-astro branch July 9, 2026 12:57
@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown

This PR doesn't fully meet our contributing guidelines and PR template.

What needs to be fixed:

  • No "Type of change" checkbox is checked. Please select at least one.
  • No issue referenced. Please add Closes #<number> linking to the relevant issue.
  • "How did you verify your code works?" section is empty. Please explain how you tested.
  • Not all checklist items are checked. Please confirm you have tested locally and have not included unrelated changes.

Please edit this PR description to address the above within 2 hours, or it will be automatically closed.

If you believe this was flagged incorrectly, please let a maintainer know.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown

Thanks for your contribution!

This PR doesn't have a linked issue. All PRs must reference an existing issue.

Please:

  1. Open an issue describing the bug/feature (if one doesn't exist)
  2. Add Fixes #<number> or Closes #<number> to this PR description

See CONTRIBUTING.md for details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant