hubcio opened a new pull request, #65: URL: https://github.com/apache/iggy-website/pull/65
The site was twenty packages behind, carrying seven known vulnerabilities (five high) and blocking two Dependabot pull requests that cannot land on their own. npm audit now reports zero. Six bumps cross a major: TypeScript 5.9 to 7.0, fumadocs-mdx 14 to 15, lucide-react 0.563 to 1.32, sugar-high 0.9 to 2.0, beautiful-mermaid 0.1 to 1.1, and @types/node 25 to 26. Each was applied on its own and gated on a full static export, with the generated out/ tree diffed against a pre-bump baseline. A green build says nothing about whether the site still renders the same HTML, so the HTML was compared directly. Three files needed adapting. TypeScript 7 refuses to start with baseUrl set or with a non-relative path in paths, and its incremental artifact is now ignored. fumadocs 16.14 added a type field to PageTree.Root, which broke the guard telling a root apart from a folder in the docs footer. And beautiful-mermaid renamed renderMermaid to renderMermaidSVGAsync. Two regressions came with the upgrade and are fixed here rather than shipped. fumadocs-core 16.14 rebuilt structured-data extraction on mdast-util-to-markdown, so every search snippet displayed its markers: 2960 asterisk pairs, 7800 backticks, and io_uring split apart by an escape. A stringify option into remarkStructure restores plain text, and the rebuilt index matches the pre-bump one on every dimension checked, including token vocabulary and posting counts. Separately, Next 16.3 reversed the order of the two title tags its built-in 404 page emits, so a real not-found.tsx now replaces that page, leaving a single title and dropping an inline white background that fought the dark theme. Tailwind 4.3 also changed its own default font stack, which would have altered body text on Linux and Android, so the previous stacks are pinned explicitly. That exposed Geist being preloaded on every page since it was added, roughly 141 KB, without anything ever mapping --font-sans to it. The package is removed, and the mermaid renderer no longer asks for a family that was never registered. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
