Skip to content

chore(site): bump dependencies to resolve CVEs - #2063

Merged
Quang Nguyen (nddq) merged 1 commit into
mainfrom
chore/update-site-deps
Feb 17, 2026
Merged

chore(site): bump dependencies to resolve CVEs#2063
Quang Nguyen (nddq) merged 1 commit into
mainfrom
chore/update-site-deps

Conversation

@nddq

Copy link
Copy Markdown
Member

Description

Bump all Docusaurus site dependencies to latest compatible versions to resolve 2 high-severity qs vulnerabilities.

Related Issue

N/A

Checklist

  • I have read the contributing documentation.
  • I signed and signed-off the commits (git commit -S -s ...).
  • I have correctly attributed the author(s) of the code.
  • I have tested the changes locally.
  • I have followed the project's style guidelines.
  • I have updated the documentation, if necessary.
  • I have added tests, if applicable.

Screenshots (if applicable) or Testing Completed

  • npm audit → 0 vulnerabilities
  • npm run build → clean build, no warnings

- Bump all @docusaurus/* packages to ^3.9.2
- Bump @mdx-js/react, clsx, docusaurus-lunr-search, prism-react-renderer,
  @types/react, and typescript to latest compatible versions
- Fix 2 high-severity qs vulnerabilities via npm audit fix
- Replace require.resolve() calls with plain string paths in config
- Fix sidebar path reference from .js to .ts
- Migrate deprecated onBrokenMarkdownLinks to markdown.hooks
- Remove stale overrides for trim and got
- Update engines.node to >=18.0.0 (Docusaurus 3 minimum)
- Remove orphaned site/site/package-lock.json
- Remove unused CSS classes from index.module.css

Signed-off-by: Quang Nguyen <nguyenquang@microsoft.com>
@github-actions

Copy link
Copy Markdown

Retina Code Coverage Report

Total coverage no change

@nddq
Quang Nguyen (nddq) added this pull request to the merge queue Feb 17, 2026
Merged via the queue into main with commit b41e4ee Feb 17, 2026
32 checks passed
@nddq
Quang Nguyen (nddq) deleted the chore/update-site-deps branch February 17, 2026 17:59
Laksh (lakshk98) pushed a commit to lakshk98/retina that referenced this pull request Aug 4, 2026
## Description

Bump all Docusaurus site dependencies to latest compatible versions to
resolve 2 high-severity `qs` vulnerabilities.

## Related Issue

N/A

## Checklist

- [x] I have read the [contributing
documentation](https://retina.sh/docs/Contributing/overview).
- [x] I signed and signed-off the commits (`git commit -S -s ...`).
- [x] I have correctly attributed the author(s) of the code.
- [x] I have tested the changes locally.
- [x] I have followed the project's style guidelines.
- [x] I have updated the documentation, if necessary.
- [x] I have added tests, if applicable.

## Screenshots (if applicable) or Testing Completed

- `npm audit` → 0 vulnerabilities
- `npm run build` → clean build, no warnings

Signed-off-by: Quang Nguyen <nguyenquang@microsoft.com>
Laksh (lakshk98) pushed a commit to lakshk98/retina that referenced this pull request Aug 4, 2026
## Description

Bump all Docusaurus site dependencies to latest compatible versions to
resolve 2 high-severity `qs` vulnerabilities.

## Related Issue

N/A

## Checklist

- [x] I have read the [contributing
documentation](https://retina.sh/docs/Contributing/overview).
- [x] I signed and signed-off the commits (`git commit -S -s ...`).
- [x] I have correctly attributed the author(s) of the code.
- [x] I have tested the changes locally.
- [x] I have followed the project's style guidelines.
- [x] I have updated the documentation, if necessary.
- [x] I have added tests, if applicable.

## Screenshots (if applicable) or Testing Completed

- `npm audit` → 0 vulnerabilities
- `npm run build` → clean build, no warnings

Signed-off-by: Quang Nguyen <nguyenquang@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants