Repository navigation
chore(deps): upgrade to Astro 7 and refresh dependencies - #39
Merged
Merged
Conversation
- astro 6.4.8 -> 7.3.8 and @astrojs/mdx 6.0.3 -> 8.0.3 - @astrojs/markdown-remark 7.3.2, @astrojs/markdown-satteri 0.4.3 - @astrojs/sitemap 3.7.4, @astrojs/check 0.9.10 - astro-expressive-code 0.44.2, astro-icon 1.2.0 - bump vite override from 7 to 8 (Astro 7 ships Vite 8) Astro 7 defaults to the Sätteri markdown processor, so move the remark/rehype plugins into the unified() processor explicitly and keep @astrojs/markdown-remark installed. Set compressHTML: true to preserve the previous whitespace behavior. Load the mdast-util-to-hast type augmentation explicitly since it is no longer pulled in transitively, and add the expected src/icons directory for astro-icon 1.2.0.
Security: - override sharp to ^0.35.5 (libvips/libheif/librsvg CVEs) - override postcss-selector-parser to ^7.1.6 (quadratic selector parsing) - npm audit now reports 0 vulnerabilities Cleanup of unused dependencies: - @astrojs/rss (no RSS endpoint exists) - @fontsource-variable/jetbrains-mono, @fontsource-variable/sora (never imported) - cssnano, autoprefixer (no PostCSS config) - satori, satori-html, @resvg/resvg-js (no og-image route) - @pagefind/default-ui (no search UI) - remove the resvg optimizeDeps exclude and the dead pagefind type declaration
prettier-plugin-astro and prettier-plugin-tailwindcss were never loaded because the project has no Prettier config file, so prettier (run with --ignore-unknown) silently skipped .astro files anyway. Remove both plugins; the prettier binary stays for the format:code script.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Upgrades the Astro stack to the latest versions, fixes the peer dependency conflict that broke
npm install, patches all open security advisories, and removes dependencies that are no longer used.The original conflict:
@astrojs/mdx@6.0.3pinned@astrojs/markdown-satteri@0.3.0exactly, which is incompatible with any newer Sätteri release.Dependency upgrades
astro6.4.8 -> 7.3.8@astrojs/mdx6.0.3 -> 8.0.3@astrojs/markdown-remark7.2.2 -> 7.3.2@astrojs/markdown-satteri0.3.x -> 0.4.3@astrojs/sitemap3.7.3 -> 3.7.4@astrojs/check0.9.8 -> 0.9.10astro-expressive-code0.44.1 -> 0.44.2astro-icon1.1.5 -> 1.2.0viteoverride 7 -> 8 (Astro 7 ships Vite 8)Security (npm audit: 0 vulnerabilities)
sharpforced to^0.35.5(libvips / libheif / librsvg CVEs)postcss-selector-parserforced to^7.1.6(quadratic complexity in flat selector parsing)Removed unused dependencies
@astrojs/rss(no RSS endpoint exists)@fontsource-variable/jetbrains-mono,@fontsource-variable/sora(never imported)cssnano,autoprefixer(no PostCSS config)satori,satori-html,@resvg/resvg-js(noog-imageroute)@pagefind/default-ui(no search UI)optimizeDepsexclude and the dead pagefind type declarationMigration changes
unified()from@astrojs/markdown-remark, replacing the deprecatedmarkdown.remarkPlugins/rehypePlugins/remarkRehypeoptions.compressHTML: trueto keep the previous whitespace behavior (Astro 7 changed the default to'jsx').mdast-util-to-hasttype augmentation explicitly, since it is no longer pulled in transitively.src/iconsdirectory forastro-icon1.2.0.Test plan
rm -rf node_modules package-lock.json && npm install(no ERESOLVE)npm cinpm audit(0 vulnerabilities)npm run lintnpm run check(0 errors)npm run build(clean, no warnings)