chore: deps upgrade + Docusaurus 3.10 hardening#112
Merged
Conversation
Upgrades: - Docusaurus core/preset/theme-search-algolia 3.6.3 -> ^3.10.0 - @docusaurus/module-type-aliases ^3.10.0 - @mdx-js/react 3.0.0 -> ^3.1.1 - posthog-docusaurus ^2.0.5, clsx ^2.1.1, prism-react-renderer ^2.4.1 - Node engine >=16.14 -> >=20.0 (Docusaurus 3.9 dropped Node 18) Vulnerabilities: 40 (4 low, 26 moderate, 10 high) -> 0 via: - Docusaurus 3.10 cascade - npm overrides for serialize-javascript ^7.0.5 (high-sev RCE/XSS in deep copy-webpack-plugin / css-minimizer-webpack-plugin transitives) - npm override for webpackbar ^7.0.0 (v6 used pre-strict ProgressPlugin schema, broke build under newer webpack) New Docusaurus features adopted: - @docusaurus/faster (Rspack/SWC/LightningCSS) via future.faster + the required future.v4.removeLegacyPostBuildHeadAttribute flag - storage namespace to avoid localStorage collisions across versioned docs - onBrokenAnchors: throw (CI safety net for cross-references) - sitemap lastmod from git, drop priority/changefreq (v4 default, SEO win) - colorMode.respectPrefersColorScheme (auto follow OS dark/light) - markdown.hooks.onBrokenMarkdownLinks (replaces deprecated top-level) Cleanups uncovered by Faster: - Deleted babel.config.js (SWC handles JS now; build emitted notice) - Moved scarf tracking pixel from headTags to an inline plugin using injectHtmlTags -> postBodyTags. The <img> in <head> was invalid HTML5 and produced 128 HTML minifier warnings under the strict SWC minifier (browsers tolerated it, tracking still fired). Now warning-free. v4 prep: - :::caution -> :::warning in docs/Server-Admin-Onboarding.md (2 places)
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
- node-version: 18 -> 24 (latest LTS as of Apr 2026) Required: serialize-javascript ^7.0.5 (security override) uses the global crypto API which only exists in Node 19+, so the prior Node 18 runner failed with "ReferenceError: crypto is not defined" - actions/checkout@v3 -> v4 - actions/setup-node@v3 -> v4 Both v3 actions were on the deprecated Node 20 runtime - peaceiris/actions-gh-pages@v3 -> v4 package.json engines stays >=20.0 (Docusaurus 3.10's floor) so users running 20/22/24 locally remain supported; CI just runs latest LTS.
Vercel was emitting two warnings on every deploy:
- "engines >=20.0 ... will automatically upgrade when a new major
Node.js Version is released"
- "Node.js Version defined in your Project Settings (22.x) will not
apply, Node.js Version 24.x will be used instead"
Open-ended ranges trigger Vercel's auto-upgrade behaviour. Pin to
24.x to match CI and the runtime Vercel is already selecting.
Heads-up: the Vercel Project Settings still need to be flipped from
22.x to 24.x to clear the second warning.
jbrunton96
approved these changes
Apr 17, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Upgrades:
Vulnerabilities: 40 (4 low, 26 moderate, 10 high) -> 0 via:
New Docusaurus features adopted:
Cleanups uncovered by Faster:
v4 prep: