chore(deps): update all workspace dependencies to latest compatible versions by riderx · Pull Request #1013 · Cap-go/website

riderx · 2026-09-07T11:50:47Z

Summary

Updates dependencies and devDependencies across the Capgo website monorepo (root + apps/web, apps/docs) using bun update --latest, then pins packages that break astro check or the production build.

Upgraded packages

Package	Before	After
`@astrojs/compiler-rs`	0.3.1	0.4.0
`@datafast/ai-crawl`	1.0.7	1.0.9
`@dotenvx/dotenvx`	2.4.1	2.23.0
`@supabase/supabase-js`	2.110.2	2.115.0
`@tailwindcss/vite` / `tailwindcss`	4.3.2	4.3.3
`astro-icon`	1.1.5	1.2.0
`linkify-it`	5.0.2	6.1.0
`marked`	18.0.6	18.0.11
`mermaid`	11.16.0	11.17.2
`playwright`	1.61.1	1.63.0
`prettier`	3.9.5	3.9.6
`sharp`	0.35.3	0.35.4
`wrangler`	4.126.0	4.129.0
`zod`	4.4.3	4.5.4

Plus minor/patch bumps for @iconify-json/carbon, @types/bun, @types/node, astro-font, dayjs, fast-xml-parser, prettier-plugin-tailwindcss, and others.

Intentionally pinned (latest blocked)

Package	Pinned at	Reason
`typescript`	6.0.3	`astro check` requires the TS 6.x programmatic API; TS 7 removed it (Astro roadmap)
`js-yaml`	4.3.2	Astro 7 imports the default export; js-yaml 5 is ESM-only without a default export
`@astrojs/mdx`	7.0.8	v8 pulls `@astrojs/markdown-satteri` 0.4 + `satteri` 0.10 native bindings that fail during docs prerender
`@astrojs/starlight`	0.41.3	v0.42 has the same satteri native-binding prerender failure on `/_llms-txt/*` routes
`@astrojs/starlight-docsearch`	0.7.0	Kept in sync with Starlight 0.41
`starlight-image-zoom`	0.15.0	v0.16 requires Starlight ≥0.42
`starlight-llms-txt`	0.10.0	v0.11 tested; failure traced to Starlight/MDX stack above

Verification

bun install
bun run check (docs mirror, web/docs astro check, all worker tsc)
bun run build (docs + web production builds)

No product/content changes beyond what dependency upgrades require.

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

Summary by CodeRabbit

Chores
- Updated documentation, web, and development tooling dependencies for improved compatibility and reliability.
- Refined documentation and web tooling configuration.
Bug Fixes
- Improved image-link validation by recognizing additional informal link formats.
Other
- No new user-facing features or major behavior changes are included in this release.

coderabbitai · 2026-09-07T11:50:57Z

Warning

Review limit reached

Next included review available in 59 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: be9cf888-094d-478c-9344-c6ac0e351223

📥 Commits

Reviewing files that changed from the base of the PR and between 79cbefd and 0c59914.

⛔ Files ignored due to path filters (1)

bun.lock is excluded by !**/*.lock

📒 Files selected for processing (5)

.coderabbit.yaml
apps/docs/package.json
apps/web/package.json
package.json
scripts/check_image_links.js

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 59f3102d-d122-434d-91cf-e3a5a2a4b211

📥 Commits

Reviewing files that changed from the base of the PR and between 79cbefd and 0c59914.

⛔ Files ignored due to path filters (1)

bun.lock is excluded by !**/*.lock

📒 Files selected for processing (5)

.coderabbit.yaml
apps/docs/package.json
apps/web/package.json
package.json
scripts/check_image_links.js

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Walkthrough

Walkthrough

The pull request updates dependency versions in the root, documentation, and web manifests. It enables fuzzy-link detection in the image-link checker and enables the request-changes review workflow.

Changes

Maintenance updates

Layer / File(s)	Summary
Package manifest version alignment `package.json`, `apps/docs/package.json`, `apps/web/package.json`	Updated runtime, build, documentation, web application, and development dependency versions.
Image-link detection configuration `scripts/check_image_links.js`	Changed to the named `LinkifyIt` import and enabled fuzzy-link detection.
Review workflow configuration `.coderabbit.yaml`	Enabled the request-changes review workflow.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Merge Risk: ⚪ Minimal · up to 0c599

This updates workspace dependencies, enables fuzzy link detection for image-link checks, and enables the request-changes workflow. The documented validation completed successfully, and no concrete current-head merge-blocking risk remains.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 1 functions across 1 files. (4 skipped: 4 …	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the primary change: updating workspace dependencies to the latest compatible versions. It is concise and specific.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 1 functions across 1 files. (4 skipped: 4 unsupported.)

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch cursor/update-all-dependencies-2879

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

cubic-dev-ai

All reported issues were addressed across 4 files

_{Reply with feedback, questions, or to request a fix.

Re-trigger cubic}

TorichanCapgo · 2026-09-08T10:46:40Z

@coderabbitai review

coderabbitai · 2026-09-08T10:46:47Z

⚠️ Action not completed

Already reviewed the last commit. Use @coderabbitai full review to rerun a review of the entire changeset.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

TorichanCapgo · 2026-09-08T11:34:30Z

@coderabbitai full review

coderabbitai · 2026-09-08T11:34:36Z

⚠️ Action not completed

Review rate limited.

Your included review limit is currently reached under our Fair Usage Limits Policy. This review may still proceed through usage-based billing if eligible. Your next included review will be available in 59 minutes.

socket-security · 2026-09-08T11:36:44Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
@bruits/satteri-linux-x64-gnu@0.9.5
@bruits/satteri-linux-x64-musl@0.9.5
@types/bun@1.3.14 ⏵ 1.4.2				⁺¹
@types/semver@7.7.1 ⏵ 7.8.0			⁺¹	^-2
@datafast/ai-crawl@1.0.7 ⏵ 1.0.9			⁺¹	⁺¹
@iconify-json/carbon@1.2.24 ⏵ 1.2.26	⁺¹		⁺¹	⁺³
marked@18.0.6 ⏵ 18.0.12	⁺¹		⁺¹	⁺²
playwright@1.61.1 ⏵ 1.63.0	⁺¹		⁺¹
@types/node@24.12.2 ⏵ 26.5.0			⁺¹
astro-icon@1.1.5 ⏵ 1.2.0				⁺²
tailwindcss@4.3.2 ⏵ 4.3.3	⁺¹		⁺¹	⁺²
@astrojs/starlight@0.42.0 ⏵ 0.41.3	⁺¹			^-1
linkify-it@5.0.2 ⏵ 6.1.0			⁺¹
astro-font@1.1.0 ⏵ 1.2.0	^-1			⁺⁸
@supabase/supabase-js@2.110.2 ⏵ 2.116.0
dayjs@1.11.21 ⏵ 1.11.23	⁺¹		⁺¹
@tailwindcss/vite@4.3.2 ⏵ 4.3.3	⁺¹		⁺¹	⁺²
@dotenvx/dotenvx@2.4.1 ⏵ 2.23.0	⁺²
fast-xml-parser@5.10.0 ⏵ 5.11.1	⁺¹	⁺¹⁶	⁺¹	^-1
prettier@3.8.1 ⏵ 3.9.6			⁺¹
mermaid@11.16.0 ⏵ 11.17.2		⁺⁶	⁺¹
prettier-plugin-tailwindcss@0.8.0 ⏵ 0.8.1			⁺¹	⁺²

View full report

…ersions Rebased onto main (79cbefd). Kept @astrojs/starlight at 0.41.3 instead of main's 0.42.0 from renovate #916: Starlight 0.42 / MDX 8 pull satteri 0.10 native bindings that fail docs prerender on /_llms-txt/* routes. Also pinned @astrojs/mdx 7.0.8, starlight-image-zoom 0.15.0, starlight-llms-txt 0.10.0, typescript 6.0.3, and js-yaml 4.3.2 for the same Astro check/build constraints. Upgraded highlights: @astrojs/compiler-rs 0.4.0, @dotenvx/dotenvx 2.23.0, @supabase/supabase-js 2.115.0, astro-icon 1.2.0, linkify-it 6.1.0, playwright 1.63.0, tailwindcss 4.3.3, wrangler 4.129.0, zod 4.5.4, sharp 0.35.4. Co-authored-by: Martin DONADIEU <martindonadieu@gmail.com>

Co-authored-by: Martin DONADIEU <martindonadieu@gmail.com>

linkify-it 6 removed the default export and disables fuzzyLink by default. The image link checker scans raw file content, so fuzzyLink stays enabled. Co-authored-by: Martin DONADIEU <martindonadieu@gmail.com>

TorichanCapgo · 2026-09-08T12:38:24Z

@coderabbitai full review

coderabbitai · 2026-09-08T12:38:31Z

✅ Action performed

Full review finished.

TorichanCapgo · 2026-09-08T12:49:50Z

@coderabbitai approve

coderabbitai · 2026-09-08T12:50:06Z

✅ Action performed

Comments resolved and changes approved.

TorichanCapgo

Approving HEAD 3bb3455 — CI green, CLEAN, cubic linkify thread resolved, CR full review covered this SHA (no actionable). Waiting on coderabbitai GitHub APPROVED on this HEAD before Jose ready ping.

TorichanCapgo · 2026-09-08T13:41:17Z

@coderabbitai full review

coderabbitai · 2026-09-08T13:41:26Z

✅ Action performed

Full review finished.

cursor · 2026-09-08T14:16:15Z

@coderabbitai approve

cursor · 2026-09-08T14:26:05Z

@coderabbitai rate limit

…vals Enables GitHub APPROVED submissions via @coderabbitai approve and auto-approval after clean reviews. Needed so PR #1013 can receive a non-stale CodeRabbit review on the current HEAD (stale approval remains on ece82db). Co-authored-by: Martin DONADIEU <martindonadieu@gmail.com>

cursor · 2026-09-08T17:48:08Z

@coderabbitai full review

sonarqubecloud · 2026-09-08T17:49:25Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

TorichanCapgo · 2026-09-09T03:07:36Z

@coderabbitai approve

TorichanCapgo

Approving HEAD 0c59914 — not draft, CLEAN/MERGEABLE, CI green, 0 unresolved threads (cubic linkify resolved), AGENTS summary filled, deps chore (no UX shot). Prior Torichan APPROVED was on 3bb3455; this SHA only enables CodeRabbit request_changes_workflow. Waiting on coderabbitai GitHub APPROVED on this HEAD before any Jose re-ping (HEAD moved after prior ready path).

coderabbitai · 2026-09-09T03:07:52Z

✅ Action performed

Comments resolved and changes approved.

TorichanCapgo · 2026-09-09T03:08:43Z

@coderabbitai full review

coderabbitai · 2026-09-09T03:08:49Z

✅ Action performed

Full review finished.

TorichanCapgo · 2026-09-09T03:15:19Z

@coderabbitai approve

coderabbitai · 2026-09-09T03:15:28Z

✅ Action performed

Comments resolved and changes approved.

TorichanCapgo · 2026-09-09T06:40:41Z

@coderabbitai full review

coderabbitai · 2026-09-09T06:40:48Z

⚠️ Action not completed

Review rate limited.

riderx marked this pull request as ready for review September 7, 2026 12:00

coderabbitai Bot approved these changes Sep 7, 2026

View reviewed changes

cubic-dev-ai Bot reviewed Sep 7, 2026

View reviewed changes

Comment thread package.json

cursor Bot force-pushed the cursor/update-all-dependencies-2879 branch from 606b7b7 to 2b78b81 Compare September 8, 2026 11:36

cursoragent and others added 3 commits September 8, 2026 11:46

chore: trigger CI

2b1cfdb

Co-authored-by: Martin DONADIEU <martindonadieu@gmail.com>

fix(scripts): use linkify-it v6 named export and restore fuzzyLink

3bb3455

linkify-it 6 removed the default export and disables fuzzyLink by default. The image link checker scans raw file content, so fuzzyLink stays enabled. Co-authored-by: Martin DONADIEU <martindonadieu@gmail.com>

cursor Bot force-pushed the cursor/update-all-dependencies-2879 branch from 2b78b81 to 3bb3455 Compare September 8, 2026 11:46

TorichanCapgo approved these changes Sep 8, 2026

View reviewed changes

TorichanCapgo approved these changes Sep 9, 2026

View reviewed changes

Uh oh!

Uh oh!

Conversation

riderx commented Sep 7, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Upgraded packages

Intentionally pinned (latest blocked)

Verification

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Sep 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review limit reached

Walkthrough

Changes

❌ Failed checks (1 warning)

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

TorichanCapgo commented Sep 8, 2026

Uh oh!

coderabbitai Bot commented Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

TorichanCapgo commented Sep 8, 2026

Uh oh!

coderabbitai Bot commented Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

TorichanCapgo commented Sep 8, 2026

Uh oh!

coderabbitai Bot commented Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

TorichanCapgo commented Sep 8, 2026

Uh oh!

coderabbitai Bot commented Sep 8, 2026

Uh oh!

TorichanCapgo left a comment

Choose a reason for hiding this comment

Uh oh!

TorichanCapgo commented Sep 8, 2026

Uh oh!

coderabbitai Bot commented Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cursor Bot commented Sep 8, 2026

Uh oh!

cursor Bot commented Sep 8, 2026

Uh oh!

cursor Bot commented Sep 8, 2026

Uh oh!

sonarqubecloud Bot commented Sep 8, 2026

Quality Gate passed

Uh oh!

TorichanCapgo commented Sep 9, 2026

Uh oh!

TorichanCapgo left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot commented Sep 9, 2026

Uh oh!

TorichanCapgo commented Sep 9, 2026

Uh oh!

coderabbitai Bot commented Sep 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

TorichanCapgo commented Sep 9, 2026

Uh oh!

coderabbitai Bot commented Sep 9, 2026

Uh oh!

TorichanCapgo commented Sep 9, 2026

Uh oh!

riderx commented Sep 7, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Sep 7, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

coderabbitai Bot commented Sep 8, 2026 •

edited

Loading

coderabbitai Bot commented Sep 8, 2026 •

edited

Loading

socket-security Bot commented Sep 8, 2026 •

edited

Loading

coderabbitai Bot commented Sep 8, 2026 •

edited

Loading

coderabbitai Bot commented Sep 8, 2026 •

edited

Loading

coderabbitai Bot commented Sep 9, 2026 •

edited

Loading

coderabbitai Bot commented Sep 9, 2026 •

edited

Loading