Skip to content

chore(docs): patch unifont Undici advisories - #165

Merged
kattsushi merged 1 commit into
devfrom
chore/docs-unifont-undici-security
Aug 24, 2026
Merged

chore(docs): patch unifont Undici advisories#165
kattsushi merged 1 commit into
devfrom
chore/docs-unifont-undici-security

Conversation

@kattsushi

Copy link
Copy Markdown
Contributor

Closes #164

Summary

  • Resolve unifont's Undici dependency to patched 8.10.0 through a scoped pnpm override.
  • Remove five docs dependency advisories without upgrading Astro, unifont, or unrelated Undici lines.
  • Reduce the repository audit from 88 to 83 findings.

Changes

File Change
package.json Add scoped unifont>undici override.
pnpm-lock.yaml Replace only the unifont Undici edge and remove unused 8.7.0 resolution.

Type

  • Bug fix
  • New feature
  • Documentation only
  • Code refactoring
  • Maintenance/tooling
  • Breaking change

Test plan

  • Frozen installation passed without peer warnings.
  • Audit delta: 88 → 83 (−1 high, −4 moderate).
  • Docs dependency path resolves Undici 8.10.0.
  • Docs lint passed.
  • Fresh docs build generated all 53 pages.

Notes

  • Docs typecheck remains an existing no-op; no docs test target exists.
  • Unrelated Undici 7.x findings remain separate work units.

Contributor checklist

  • Linked approved issue chore(docs): patch unifont Undici advisories #164.
  • Selected exactly one PR type (type:chore).
  • No shell scripts were modified; shellcheck is not applicable.
  • Commit uses Conventional Commit format.
  • Commit contains no Co-Authored-By trailer.

@kattsushi kattsushi added the type:chore Maintenance/tooling work label Aug 24, 2026
@coderabbitai

coderabbitai Bot commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 84ce29e4-ad9c-4c6f-a3ec-cc90bc25a04e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@kattsushi
kattsushi merged commit 6c1c9a7 into dev Aug 24, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type:chore Maintenance/tooling work

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant