From e82fa0177b919da0cc861ef3c7f7b1c59afd1806 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 1 Jul 2026 10:12:29 +0000 Subject: [PATCH 1/2] chore(deps): bump @shikijs/twoslash from 3.22.0 to 4.3.0 Bumps [@shikijs/twoslash](https://github.com/shikijs/shiki/tree/HEAD/packages/twoslash) from 3.22.0 to 4.3.0. - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v4.3.0/packages/twoslash) --- updated-dependencies: - dependency-name: "@shikijs/twoslash" dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- package.json | 2 +- pnpm-lock.yaml | 66 ++++++++++++++++++++++++++++++++++++++++++++------ 2 files changed, 59 insertions(+), 9 deletions(-) diff --git a/package.json b/package.json index 1834a1c..d46a98c 100644 --- a/package.json +++ b/package.json @@ -29,7 +29,7 @@ "@fontsource-variable/brygada-1918": "^5.2.8", "@fontsource-variable/inter": "^5.2.8", "@mdx-js/mdx": "3.1.1", - "@shikijs/twoslash": "^3.22.0", + "@shikijs/twoslash": "^4.3.0", "@tailwindcss/postcss": "4.3.1", "@types/react": "^19.2.17", "@types/unist": "^3.0.3", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index af300f6..796717a 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -30,8 +30,8 @@ importers: specifier: 3.1.1 version: 3.1.1 '@shikijs/twoslash': - specifier: ^3.22.0 - version: 3.22.0(typescript@5.8.3) + specifier: ^4.3.0 + version: 4.3.0(typescript@5.8.3) '@tailwindcss/postcss': specifier: 4.3.1 version: 4.3.1 @@ -1449,6 +1449,10 @@ packages: resolution: {integrity: sha512-Hc87Ab1Ld/vEbZRCbwx344I5v+4RU8CVToUTRkqXL1+TjbuOp9U5Xa0M23V4GEWHxVn+yO5otb+HkQVm3ptWQQ==} engines: {node: '>=20'} + '@shikijs/core@4.3.0': + resolution: {integrity: sha512-EooU3i9F6IAE8kEu+AnGf9DFZWkQBZ+hJn3tLVbsH+61mtQiva5biai66fAA6nvFPXkLgvrh7BrR7YcJU83xQQ==} + engines: {node: '>=20'} + '@shikijs/engine-javascript@3.22.0': resolution: {integrity: sha512-jdKhfgW9CRtj3Tor0L7+yPwdG3CgP7W+ZEqSsojrMzCjD1e0IxIbwUMDDpYlVBlC08TACg4puwFGkZfLS+56Tw==} @@ -1474,6 +1478,10 @@ packages: resolution: {integrity: sha512-NOq+DtUkVBJtZMVXL5A0vI0Xk8nvDYaXetFHSJFlOqjDZIVhIPRYFdGkSoElDqNuegikcc3A76SNUa8dTqtAYA==} engines: {node: '>=20'} + '@shikijs/primitive@4.3.0': + resolution: {integrity: sha512-CPkz64PTa5diRW1ggzMZH9VM/du4RNChYgVtgqrFcgruvIybmCvySv8GkiHSczUHXYuuR8TdKEwFx+UnZMpgdg==} + engines: {node: '>=20'} + '@shikijs/themes@3.22.0': resolution: {integrity: sha512-o+tlOKqsr6FE4+mYJG08tfCFDS+3CG20HbldXeVoyP+cYSUxDhrFf3GPjE60U55iOkkjbpY2uC3It/eeja35/g==} @@ -1481,8 +1489,9 @@ packages: resolution: {integrity: sha512-RX8IHYeLv8Cu2W6ruc3RxUqWn0IYCqSrMBzi/uRGAmfyDNOnNO5BF/Px7o97n4XTpmFTo5GbRaazuOWj+2ak2w==} engines: {node: '>=20'} - '@shikijs/twoslash@3.22.0': - resolution: {integrity: sha512-GO27UPN+kegOMQvC+4XcLt0Mttyg+n16XKjmoKjdaNZoW+sOJV7FLdv2QKauqUDws6nE3EQPD+TFHEdyyoUBDw==} + '@shikijs/twoslash@4.3.0': + resolution: {integrity: sha512-9tM/GWduKcWCU2jJIUqJZBxnyX/6iXtWov5rWmqcTnokHWIOxBL6nktx+HuzqB7/v3ApTahKT/TfRqBl+mFsOQ==} + engines: {node: '>=20'} peerDependencies: typescript: '>=5.5.0' @@ -1493,6 +1502,10 @@ packages: resolution: {integrity: sha512-VT/MKtlpOhEPZloSH3Pb9WCZEBDoQVMa9jedp5UAwmJOar1DVc9DRODAxmYPW9M93IK4ryuqRejFfmlvlVDemw==} engines: {node: '>=20'} + '@shikijs/types@4.3.0': + resolution: {integrity: sha512-oc8b9U2SYvofKZk8e/737nIX0qwf6eV2vHFATeObAu7r+mUVpLs8Re0BmVkIjAWAYgkmG/CzLNo7rzuBzRu/wQ==} + engines: {node: '>=20'} + '@shikijs/vscode-textmate@10.0.2': resolution: {integrity: sha512-83yeghZ2xxin3Nj8z1NMd/NCuca+gsYXswywDy5bHvwlWL8tpTQmzGeUuHd9FC3E/SBEMvzJRwWEOz5gGes9Qg==} @@ -5154,11 +5167,19 @@ packages: twoslash-protocol@0.3.8: resolution: {integrity: sha512-HmvAHoiEviK8LqvAQyc9/irkdvwTUiR1fHmNwH/0gq8EHxyBt4PWVPixjEXg6wJu1u6yBrILEWXGK9Kw58/8yQ==} + twoslash-protocol@0.3.9: + resolution: {integrity: sha512-9/iwp+CXOnjFMPQuPL5PkuRbZnDoNpBvtJCLs9t8kDYkL3YHujbvnHfZA1i5fApDftVEdBw+T/4F+dH5kIzpYQ==} + twoslash@0.3.8: resolution: {integrity: sha512-OeDz0kDl8sqPUN3nr7gqcvOs70f5lZsdhKYTX3/SgB9OvdadzzoYJI/4SBXhXV1HG8E9fLc+e17itoRYTxmoig==} peerDependencies: typescript: ^5.5.0 || ^6.0.0 + twoslash@0.3.9: + resolution: {integrity: sha512-rDclk+OtzuTX+tnea7DYLCkqGQ3eP0IyfD+kzUJ7t46X/NzlaxwrhecmEBNuSCuEn3V+n1PhcjUUQQ7gUJzX5Q==} + peerDependencies: + typescript: ^5.5.0 || ^6.0.0 + type-check@0.4.0: resolution: {integrity: sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==} engines: {node: '>= 0.8.0'} @@ -6627,6 +6648,14 @@ snapshots: '@types/hast': 3.0.4 hast-util-to-html: 9.0.5 + '@shikijs/core@4.3.0': + dependencies: + '@shikijs/primitive': 4.3.0 + '@shikijs/types': 4.3.0 + '@shikijs/vscode-textmate': 10.0.2 + '@types/hast': 3.0.4 + hast-util-to-html: 9.0.5 + '@shikijs/engine-javascript@3.22.0': dependencies: '@shikijs/types': 3.22.0 @@ -6663,6 +6692,12 @@ snapshots: '@shikijs/vscode-textmate': 10.0.2 '@types/hast': 3.0.4 + '@shikijs/primitive@4.3.0': + dependencies: + '@shikijs/types': 4.3.0 + '@shikijs/vscode-textmate': 10.0.2 + '@types/hast': 3.0.4 + '@shikijs/themes@3.22.0': dependencies: '@shikijs/types': 3.22.0 @@ -6671,11 +6706,11 @@ snapshots: dependencies: '@shikijs/types': 4.2.0 - '@shikijs/twoslash@3.22.0(typescript@5.8.3)': + '@shikijs/twoslash@4.3.0(typescript@5.8.3)': dependencies: - '@shikijs/core': 3.22.0 - '@shikijs/types': 3.22.0 - twoslash: 0.3.8(typescript@5.8.3) + '@shikijs/core': 4.3.0 + '@shikijs/types': 4.3.0 + twoslash: 0.3.9(typescript@5.8.3) typescript: 5.8.3 transitivePeerDependencies: - supports-color @@ -6690,6 +6725,11 @@ snapshots: '@shikijs/vscode-textmate': 10.0.2 '@types/hast': 3.0.4 + '@shikijs/types@4.3.0': + dependencies: + '@shikijs/vscode-textmate': 10.0.2 + '@types/hast': 3.0.4 + '@shikijs/vscode-textmate@10.0.2': {} '@shuding/opentype.js@1.4.0-beta.0': @@ -11384,6 +11424,8 @@ snapshots: twoslash-protocol@0.3.8: {} + twoslash-protocol@0.3.9: {} + twoslash@0.3.8(typescript@5.8.3): dependencies: '@typescript/vfs': 1.6.4(typescript@5.8.3) @@ -11392,6 +11434,14 @@ snapshots: transitivePeerDependencies: - supports-color + twoslash@0.3.9(typescript@5.8.3): + dependencies: + '@typescript/vfs': 1.6.4(typescript@5.8.3) + twoslash-protocol: 0.3.9 + typescript: 5.8.3 + transitivePeerDependencies: + - supports-color + type-check@0.4.0: dependencies: prelude-ls: 1.2.1 From b1c258100fac2475cfcbebb00293d7c5afe4266b Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 2 Jul 2026 10:14:34 +0000 Subject: [PATCH 2/2] ci: skip Vercel preview deploy for Dependabot PRs (no secrets access) Dependabot PRs run from the same repo (not a fork), so the deploy step's fork-only guard let it through even though GitHub withholds repository secrets from dependabot-actor runs. That caused deploy.mjs to fail with 'missing --token'. Treat dependabot[bot] runs the same as fork PRs: build/lint/typecheck/test still run, but preview deploy and lighthouse are skipped until a maintainer adds the 'trusted' label. Co-Authored-By: Claude Sonnet 5 --- .github/workflows/ci.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ee676d3..4072a65 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -96,7 +96,7 @@ jobs: - name: Deploy Preview to Vercel if: ${{ github.event_name != 'push' && github.event_name != 'workflow_dispatch' && - (!github.event.pull_request.head.repo.fork || + ((!github.event.pull_request.head.repo.fork && github.actor != 'dependabot[bot]') || (github.event_name == 'pull_request_target' && contains(github.event.pull_request.labels.*.name, 'trusted'))) }} run: node .github/scripts/deploy.mjs --token=${{ secrets.VERCEL_TOKEN }} @@ -104,7 +104,7 @@ jobs: - name: Create GitHub Preview Deployment if: ${{ github.event_name != 'push' && github.event_name != 'workflow_dispatch' && - (!github.event.pull_request.head.repo.fork || + ((!github.event.pull_request.head.repo.fork && github.actor != 'dependabot[bot]') || (github.event_name == 'pull_request_target' && contains(github.event.pull_request.labels.*.name, 'trusted'))) }} uses: chrnorm/deployment-action@500aa6a23c81ffa1acf71072aee3cfa2cc2e556a @@ -132,7 +132,7 @@ jobs: needs: build-and-deploy runs-on: ubuntu-latest if: - ${{ !github.event.pull_request.head.repo.fork || + ${{ (!github.event.pull_request.head.repo.fork && github.actor != 'dependabot[bot]') || (github.event_name == 'pull_request_target' && contains(github.event.pull_request.labels.*.name, 'trusted')) }} steps: