Skip to content

Fix dependabot security alert and type errors - #345

Merged
edwardalee merged 4 commits into
mainfrom
dependabot
Jul 30, 2026
Merged

Fix dependabot security alert and type errors#345
edwardalee merged 4 commits into
mainfrom
dependabot

Conversation

@edwardalee

Copy link
Copy Markdown
Contributor

No description provided.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR aims to address a Dependabot security alert and clean up TypeScript type errors in the Docusaurus site codebase.

Changes:

  • Updates yarn.lock to introduce js-yaml@^4.1.0 (and argparse@^2.0.1) while still retaining a js-yaml@^3.13.1 resolution path.
  • Updates TypeScript configuration to exclude generated src-gen output from typechecking.
  • Tightens TypeScript typing in the remark placeholder replacement plugin and ref handling in the homepage slider.

Reviewed changes

Copilot reviewed 3 out of 5 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
yarn.lock Adds js-yaml@4.x / argparse@2.x entries, but still includes js-yaml@3.x via transitive deps.
tsconfig.json Excludes **/src-gen/** from TS processing.
src/remark/ReplaceTargetLanguagePlaceholder.ts Improves plugin typing and uses mdast node types for inserted text nodes.
src/components/HomepageSlider/index.tsx Fixes ref typing and avoids unsafe non-null assertion on current.
package.json Removes the previous js-yaml resolution entry.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread package.json
Comment thread src/components/HomepageSlider/index.tsx
@edwardalee
edwardalee merged commit 846b8cb into main Jul 30, 2026
2 checks passed
@edwardalee
edwardalee deleted the dependabot branch July 30, 2026 16:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants