Skip to content

docs: upgrade website dependencies and CI#968

Merged
delei merged 17 commits into
apache:mainfrom
delei:website-dependabot
Jul 26, 2026
Merged

docs: upgrade website dependencies and CI#968
delei merged 17 commits into
apache:mainfrom
delei:website-dependabot

Conversation

@delei

@delei delei commented Jul 26, 2026

Copy link
Copy Markdown
Member

Purpose of the pull request

Fix the vulnerabilities identified by Dependabot.

What's changed?

  • bump Docusaurus to v3.10.2 and related dependencies
  • update Node.js version requirement to 24.0
  • update the CI workflow for build the website and deploy documents
  • update ci and pnpm-lock.yaml
  • fixed the issue with the date values in the markdown

Result

pnpm audit

Please first comment out the md-lint scripts in the package.json file.

$ pnpm audit --registry https://registry.npmjs.org
No known vulnerabilities found

markdownlint-cli2

$ markdownlint-cli2 --config ./.markdownlint-cli2.jsonc "./**/*.md" "#node_modules"
markdownlint-cli2 v0.23.1 (markdownlint v0.41.1)
Finding: ./**/*.md !node_modules website/**/*.md !**/node_modules/** !**/target/** !**/dist/**
Linting: 123 files
Summary: 0 issues in 0 files

Checklist

  • I have read the Contributor Guide.
  • I have written the necessary doc or comment.
  • I have added the necessary unit tests and all cases have passed.

@delei
delei marked this pull request as draft July 26, 2026 10:01
@delei delei changed the title doc: upgrade website dependencies and CI docs: upgrade website dependencies and CI Jul 26, 2026
@delei
delei marked this pull request as ready for review July 26, 2026 10:17
@alaahong
alaahong requested a review from Copilot July 26, 2026 10:21

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the documentation website toolchain and CI automation to address Dependabot-reported vulnerabilities by upgrading Docusaurus and related Node/pnpm dependencies, aligning Node requirements, and adjusting docs/translation metadata.

Changes:

  • Upgrade Docusaurus (and related frontend deps) and raise the website Node.js requirement to >= 24.
  • Update GitHub Actions workflows for docs CI/preview/deploy to use newer actions and pnpm, and tighten installs with --frozen-lockfile.
  • Adjust docs i18n labels and blog frontmatter (removing explicit date) to address markdown/date parsing issues.

Reviewed changes

Copilot reviewed 13 out of 14 changed files in this pull request and generated 4 comments.

Show a summary per file
File Description
website/README.md Updates documented Node.js requirement for local site builds.
website/pnpm-workspace.yaml Updates pnpm workspace-level config (build allowlist + dependency overrides).
website/package.json Bumps Docusaurus/React-related dependencies and sets Node/pnpm engine requirements.
website/i18n/zh-cn/docusaurus-plugin-content-docs/current.json Adds new sidebar category label translation.
website/i18n/en/docusaurus-plugin-content-docs/current.json Adds new sidebar category label translation.
website/community/contribution/contribute-doc.md Updates Node.js requirement in contribution docs.
website/i18n/zh-cn/docusaurus-plugin-content-docs-community/current/contribution/contribute-doc.md Updates Node.js requirement in Chinese contribution docs.
website/blog/2026-02-27-apache-fesod-2-0-1-incubating-released.md Removes explicit blog date frontmatter entry.
website/i18n/zh-cn/docusaurus-plugin-content-blog/2026-02-27-apache-fesod-2-0-1-incubating-released.md Removes explicit blog date frontmatter entry (Chinese).
.github/workflows/preview-docs.yml Updates docs preview workflow tooling versions and install strictness.
.github/workflows/deploy-docs.yml Updates docs deploy workflow tooling versions and install strictness.
.github/workflows/ci-docs.yml Updates docs CI workflow tooling versions and uses --frozen-lockfile.
.github/dependabot.yml Adds npm updates for /website and attempts to add grouping/cooldown policy.

Comment on lines +32 to 36
- name: Setup pnpm
uses: pnpm/action-setup@v6
with:
version: 10
version: 11
run_install: false
Comment on lines +33 to 36
- uses: pnpm/action-setup@v6
with:
version: 10
version: 11
run_install: false
Comment on lines 36 to 40
- name: Setup pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@v6
with:
version: 10
version: 11
run_install: false
Comment thread .github/dependabot.yml Outdated
Co-authored-by: Copilot Autofix powered by AI <[email protected]>

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 13 out of 14 changed files in this pull request and generated no new comments.

@alaahong alaahong self-assigned this Jul 26, 2026

@alaahong alaahong left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@delei
delei merged commit c36bd52 into apache:main Jul 26, 2026
12 checks passed
@delei
delei deleted the website-dependabot branch July 26, 2026 10:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants