Skip to content

fix(security): upgrade Astro and protect site builds - #3

Merged
leandromqrs merged 1 commit into
mainfrom
fix/website-security
Nov 1, 2026
Merged

leandromqrs merged 1 commit into
mainfrom
fix/website-security

Conversation

@leandromqrs

Copy link
Copy Markdown
Member

Summary

  • Upgrade Astro, Starlight, Cloudflare adapter and Sharp to address critical and high dependency advisories.
  • Keep wiki search working and adapt Workers and GitHub Pages builds to the Astro 7 output layout.
  • Pin deployment actions and run the required build check on pull requests without deploying previews to production.

Validation

  • npm run validate and npm run build:pages with Node 22.23.4
  • Wrangler dry runs for the website and Aurora Workers
  • Local Worker served the release API and wiki; browser search for Sirius returned results
  • npm audit: no critical or high advisories; 14 moderate development-tool advisories remain

Main requires an independent approval and the build check. Other local website changes are not included.

Update the Astro stack to address critical and high dependency advisories. Preserve wiki search while adapting the static assets and Worker entry points to the new build layout.

Run the Pages build for pull requests and pin deployment actions so branch protection can require a reproducible check before merging.
@leandromqrs
leandromqrs merged commit e703322 into main Nov 1, 2026
2 checks passed
@leandromqrs
leandromqrs deleted the fix/website-security branch November 1, 2026 01:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant