Skip to content

Update docusaurus to 3.10.2. - #407

Merged
garloff merged 7 commits into
mainfrom
feat/docusaurus-3.10
Nov 3, 2026
Merged

garloff merged 7 commits into
mainfrom
feat/docusaurus-3.10

Conversation

@garloff

@garloff garloff commented Nov 2, 2026

Copy link
Copy Markdown
Member

This is needed to avoid dependencies on outdated and vulnerable components that dependabot can thus not resolve.

Tinypool: Pollution gadets in 1.1.1 (#235, #236)
shellquote: command injection in 1.10.0 (#245)
DOMpurify: bypass in 3.4.14 (#263)
proxy-addr: IP spoofing in 2.0.7 (#239)

This is needed to avoid dependencies on outdated and vulnerable
components that dependabot can thus not resolve.

Tinypool: Pollution gadets in 1.1.1 (#235, #236)
shellquote: command injection in 1.10.0 (#245)
DOMpurify: bypass in 3.4.14 (#263)
proxy-addr: IP spoofing in 2.0.7 (#239)

Signed-off-by: Kurt Garloff <kurt@garloff.de>
@garloff garloff self-assigned this Nov 2, 2026
@garloff garloff added enhancement New feature or request security Issues or pull requests that are security-relevant labels Nov 2, 2026
Signed-off-by: Kurt Garloff <kurt@garloff.de>
Signed-off-by: Kurt Garloff <kurt@garloff.de>

@mbuechse mbuechse left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Low confidence on my end. I guess if it works on the staging branch (which we should check if we haven't already), then let's go. It's no use sticking to an old version.

@mbuechse

mbuechse commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Workflow to deploy on staging has been started.

@garloff

garloff commented Nov 3, 2026

Copy link
Copy Markdown
Member Author

Upon closer inspection of #392, this has the update to docusauus 3.10.2 already.
I suggest to merge this one first and then what remains from #392 (I will resolve conflicts), so we have two distinct steps which would simplify debugging should any problems arise.

@garloff
garloff merged commit 5be8cd2 into main Nov 3, 2026
7 checks passed
@garloff
garloff deleted the feat/docusaurus-3.10 branch November 3, 2026 06:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request security Issues or pull requests that are security-relevant

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants