Skip to content

chore(docs): patch Astro SVGO advisory - #163

Merged
kattsushi merged 1 commit into
devfrom
chore/astro-svgo-security
Aug 24, 2026
Merged

chore(docs): patch Astro SVGO advisory#163
kattsushi merged 1 commit into
devfrom
chore/astro-svgo-security

Conversation

@kattsushi

Copy link
Copy Markdown
Contributor

Closes #162

Summary

  • Resolve Astro's SVGO dependency to patched 4.0.2 through a scoped pnpm override.
  • Remove one high-severity docs build advisory without upgrading Astro or unrelated SVGO consumers.
  • Reduce the repository audit from 89 to 88 findings.

Changes

File Change
package.json Add scoped astro>svgo override.
pnpm-lock.yaml Replace only Astro's SVGO 4.0.1 resolution with 4.0.2.

Type

  • Bug fix
  • New feature
  • Documentation only
  • Code refactoring
  • Maintenance/tooling
  • Breaking change

Test plan

  • Frozen installation passed without peer warnings.
  • Audit delta: 89 → 88 (−1 high).
  • Docs lint passed.
  • Fresh docs build generated all 53 pages.
  • Astro remains at 7.2.4; unrelated SVGO 3.3.3 remains unchanged.

Notes

  • Docs typecheck remains an existing no-op because its referenced tsconfig uses noEmit: true.
  • The unrelated Nx/SVGR SVGO advisory remains a separate work unit.

Contributor checklist

  • Linked approved issue chore(docs): patch Astro SVGO advisory #162.
  • Selected exactly one PR type (type:chore).
  • No shell scripts were modified; shellcheck is not applicable.
  • Commit uses Conventional Commit format.
  • Commit contains no Co-Authored-By trailer.

@coderabbitai

coderabbitai Bot commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: ded9541d-1b44-4dd3-96b7-0e1fd934b6dd

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@kattsushi kattsushi added the type:chore Maintenance/tooling work label Aug 24, 2026
@kattsushi
kattsushi merged commit 8fd64da into dev Aug 24, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type:chore Maintenance/tooling work

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant