[apify-deps]

Summary

Dependency sweep — in-range lockfile freshening for website/pnpm-lock.yaml (pnpm update -r):

• oxlint ^1.90.0 → ^1.91.0
• rimraf ^6.1.3 → ^6.1.4
• plus transitive/peer bumps within existing ranges

No @apify-packages/* dependency in this repo, so the first-party catch-up step doesn't apply. No overrides/resolutions block exists in pnpm-workspace.yaml, so there was nothing to prune.

✅ Dismissed (don't apply to our usage)

• katex (low) — not_used: only renders our own reviewed docs markdown at build time via micromark-extension-math; we never accept untrusted LaTeX input, so the prototype-pollution trust-bypass is unreachable. (alert #193)
• re2js (high) — tolerable_risk: no fix available — [email protected] (latest) exact-pins [email protected]. Only reachable via pnpm lint:md in CI; the ReDoS is a CI-job DoS only, no code-exec/data access, and fork-PR runs have no secrets. (alert #196)

🚩 Flagged — needs review

• decode-uri-component 0.4.1 → 0.5.1 (high / medium) — 0.x line jump, out of range for every consumer: pinned by [email protected] (latest 8.x line, caps at ^0.4.1) via @apify/[email protected] (latest) via @apify/[email protected] (latest). Needs a new pnpm override or an upstream query-string major. No tracking PR found. (alert #197, alert #176)
• tinypool 1.1.1 → 2.1.2 (critical ×2) — major bump needed; pinned by @docusaurus/[email protected] (latest 3.x, declares ^1.0.2). The other copy in the tree ([email protected], via oxfmt) is already past the patched floor. No tracking PR found. (alert #192, alert #191)

Note: branched as chore/deps-sweep-2 — the prior chore/deps-sweep branch's PR (#1113) was already closed, so per convention this sweep used the next suffix instead of reopening it.

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.76%. Comparing base (793991b) to head (6c1ad3a).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1230      +/-   ##
==========================================
- Coverage   93.84%   93.76%   -0.08%     
==========================================
  Files          54       54              
  Lines        3800     3800              
==========================================
- Hits         3566     3563       -3     
- Misses        234      237       +3     

Flag	Coverage Δ
e2e	31.47% <ø> (ø)
integration	51.39% <ø> (-0.03%)	⬇️
unit	90.94% <ø> (-0.06%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.