chore(deps): update all dependencies to latest

[finallyjay]

Summary

Routine dependency refresh (2026-08-04), plus security cleanup of the overrides block.

Updated packages

Package	Old	New
@astrojs/vercel	^11.0.0	^11.0.4
@playwright/test	^1.61.1	^1.62.1
playwright	^1.60.0	^1.62.1
@tailwindcss/vite	^4.3.1	^4.3.3
tailwindcss	^4.3.0	^4.3.3
oxfmt	^0.56.0	^0.62.0
oxlint	^1.71.0	^1.77.0
sharp (transitive via astro)	0.34.5	0.35.3

• astro was already at the latest (7.1.6); no change.
• sharp bumped via npm audit fix, resolving GHSA-f88m-g3jw-g9cj (inherited libvips CVEs-2026-33327/33328/35590/35591). This should also close Dependabot alert deps: bump astro from 7.0.2 to 7.1.6 #17. npm audit is now clean.

Overrides

• Removed esbuild: ^0.28.1 — stale: astro and @astrojs/vercel now require ^0.28.0 natively, which resolves to 0.28.1 without the override.
• Kept path-to-regexp: ^6.3.0 — still needed: @vercel/routing-utils@5.3.3 pins the ReDoS-vulnerable 6.1.0 exactly. The selector stays scoped within major 6 (6.3.0 is the latest 6.x).

Checks run

• npm run lint (oxlint) — pass
• npm run format:check (oxfmt) — pass
• npm run build (astro build, Vercel adapter) — pass
• npx playwright test (chromium, headless) — 5/5 passed
• npm audit — 0 vulnerabilities

Skipped

Nothing skipped — no bumps had to be reverted.

Note for local test runs: Astro 7's dev server daemonizes when stdout is piped, so Playwright's webServer launch reports "exited early"; starting astro dev beforehand and relying on reuseExistingServer works (CI is unaffected: reuseExistingServer: !process.env.CI plus foreground behavior there).

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
daily-dev-roulette	Ready	Preview	Aug 4, 2026 9:04am

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: ef6423fd-1796-4ec6-b116-99af7a9aa899

📥 Commits

Reviewing files that changed from the base of the PR and between 9409dde and fca5733.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

• package.json

📜 Recent review details

⏰ Context from checks skipped due to timeout. (3)

• GitHub Check: copilot-pull-request-reviewer
• GitHub Check: ci
• GitHub Check: Analyze (javascript-typescript)

🔇 Additional comments (3)

package.json (3)

18-21: LGTM!

---

22-28: LGTM!

---

26-26: 📐 Maintainability & Code Quality

The dependency oxlint@1.77.0 is a published version and is current. The npm registry confirms that version 1.77.0 is the latest published release of oxlint as of August 3, 2026. No action is required.

---

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Updated platform, testing, styling, formatting, and linting tools to newer versions.
  • Includes improvements and compatibility updates from the latest supported releases.

Walkthrough

The pull request updates seven dependency version ranges in package.json, including Astro Vercel, Playwright, Tailwind CSS, Oxfmt, and Oxlint.

Changes

Dependency Version Updates

Layer / File(s)	Summary
Update package versions package.json	Updates runtime and development dependency versions for deployment, testing, styling, formatting, and linting tools.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• finallyjay/daily-dev-roulette#14: Updates overlapping npm dependencies in package.json.

Suggested reviewers: copilot

Poem

A rabbit checks the package rows,
New versions hop where old code goes.
Playwright bounds through tests anew,
Tailwind wears a greener hue.
Oxfmt and Oxlint tidy the trail,
While Vercel follows the update trail.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the primary dependency updates, although it broadly says all dependencies were updated.
Description check	✅ Passed	The description clearly explains the dependency updates, security remediation, override changes, and validation results.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/update-deps-2026-08-04

---

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

Pull request overview

Routine dependency refresh for the Astro/Vercel project, updating core dev tooling (Playwright, Tailwind, Ox tools) and refreshing the lockfile (including sharp via transitive updates) while simplifying the overrides block.

Changes:

• Bumped @astrojs/vercel, Playwright, Tailwind, and Ox (formatter/linter) packages to newer versions.
• Removed the esbuild override while retaining an override for path-to-regexp to avoid a vulnerable pinned version downstream.
• Updated package-lock.json accordingly, including newer transitive versions (notably sharp/libvips-related packages).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updates direct dependency versions and trims overrides (removes esbuild, keeps path-to-regexp).
package-lock.json	Refreshes the resolved dependency graph and transitive versions to match the updated ranges and audit fix results.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.