From 4afdeb354c93502f58749fbc901fded0e6060422 Mon Sep 17 00:00:00 2001 From: Wessel Verheij Date: Sun, 13 Sep 2026 20:46:02 +0200 Subject: [PATCH] chore(deps): take the three exactly-pinned packages to their current release MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit @astrojs/sitemap 3.7.3 to 3.7.4, and both @fontsource-variable faces 5.2.6 to 5.3.0. All three are pinned to an exact version rather than by range, so `npm update` cannot reach them — which is why they had gone stale while astro, carried by `^7.1.4`, had not: main already resolves it to 7.3.2. package.json moves by those three version literals and nothing else. No package is promoted out of the transitive tree into a direct dependency, which is what `npm install @latest` does and why it was not used. The lock also drops stream-replace-string, which sitemap 3.7.4 no longer requires. typescript stays at 5.7.3. 7.0.2 is a major, and @astrojs/check declares a typescript peer of `^5.0.0 || ^6.0.0`, so taking it would break the type-check that the ci workflow gates on. Verified: `astro check` reports 0 errors, 0 warnings and 0 hints across 69 files, `npm audit` reports zero vulnerabilities, and the site builds all 33 pages — the same count as before the bump. Spec: GOV-R12 Signed-off-by: Wessel Verheij --- package-lock.json | 32 ++++++++++++-------------------- package.json | 6 +++--- 2 files changed, 15 insertions(+), 23 deletions(-) diff --git a/package-lock.json b/package-lock.json index 36b22e7..9cda234 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,13 +9,13 @@ "version": "0.1.0", "license": "Hippocratic-3.0", "dependencies": { - "@fontsource-variable/inter": "5.2.6", - "@fontsource-variable/jetbrains-mono": "5.2.6", + "@fontsource-variable/inter": "5.3.0", + "@fontsource-variable/jetbrains-mono": "5.3.0", "astro": "^7.1.4" }, "devDependencies": { "@astrojs/check": "^0.9.10", - "@astrojs/sitemap": "3.7.3", + "@astrojs/sitemap": "3.7.4", "typescript": "5.7.3" }, "engines": { @@ -319,14 +319,13 @@ } }, "node_modules/@astrojs/sitemap": { - "version": "3.7.3", - "resolved": "https://registry.npmjs.org/@astrojs/sitemap/-/sitemap-3.7.3.tgz", - "integrity": "sha512-f8euLVsyeAmAkSm/1M2Kb8sL8byQmfgbvBNaHFItCheTj/IpiJYSEWVcqDHZ/yEHxiS7+w87mQkzwZaPHmk5GA==", + "version": "3.7.4", + "resolved": "https://registry.npmjs.org/@astrojs/sitemap/-/sitemap-3.7.4.tgz", + "integrity": "sha512-LbKNC24bdUWcQf/pThB6qLlSqHojxGjZDURIzFocY8rlWnAn2t74nnhnK6S5x0NHriHoAduLEpVjRykmeGiVvA==", "dev": true, "license": "MIT", "dependencies": { "sitemap": "^9.0.0", - "stream-replace-string": "^2.0.0", "zod": "^4.3.6" } }, @@ -1118,18 +1117,18 @@ } }, "node_modules/@fontsource-variable/inter": { - "version": "5.2.6", - "resolved": "https://registry.npmjs.org/@fontsource-variable/inter/-/inter-5.2.6.tgz", - "integrity": "sha512-jks/bficUPQ9nn7GvXvHtlQIPudW7Wx8CrlZoY8bhxgeobNxlQan8DclUJuYF2loYRrGpfrhCIZZspXYysiVGg==", + "version": "5.3.0", + "resolved": "https://registry.npmjs.org/@fontsource-variable/inter/-/inter-5.3.0.tgz", + "integrity": "sha512-OupL48va4JNofb97w6NYeF9S7W/kHNKM0Er8Dem5nqi4jeOLrVJDoE8tZEpnMJmtkvNbB1EIPPwHcdkF6b1oUA==", "license": "OFL-1.1", "funding": { "url": "https://github.com/sponsors/ayuhito" } }, "node_modules/@fontsource-variable/jetbrains-mono": { - "version": "5.2.6", - "resolved": "https://registry.npmjs.org/@fontsource-variable/jetbrains-mono/-/jetbrains-mono-5.2.6.tgz", - "integrity": "sha512-1pvtyK6H1paBOixbtZ9xfQgArVQ4SJMW3WSGZPOd5PiW3yg0t8umwKnjDMzW2ofb7qSdiXnsnIaHPT36vEOdlg==", + "version": "5.3.0", + "resolved": "https://registry.npmjs.org/@fontsource-variable/jetbrains-mono/-/jetbrains-mono-5.3.0.tgz", + "integrity": "sha512-F32xpS2NsGYoQi2ADSkKTgpJj7ozajsGgDJ8woTnqjmIB+dxDIqImjl4pXZVEExu8UFZ2ndhmX18EBS/hdz3Lw==", "license": "OFL-1.1", "funding": { "url": "https://github.com/sponsors/ayuhito" @@ -4275,13 +4274,6 @@ "url": "https://github.com/sponsors/wooorm" } }, - "node_modules/stream-replace-string": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/stream-replace-string/-/stream-replace-string-2.0.0.tgz", - "integrity": "sha512-TlnjJ1C0QrmxRNrON00JvaFFlNh5TTG00APw23j74ET7gkQpTASi6/L2fuiav8pzK715HXtUeClpBTw2NPSn6w==", - "dev": true, - "license": "MIT" - }, "node_modules/string-width": { "version": "8.2.2", "resolved": "https://registry.npmjs.org/string-width/-/string-width-8.2.2.tgz", diff --git a/package.json b/package.json index 7ecef53..453f2ec 100644 --- a/package.json +++ b/package.json @@ -17,13 +17,13 @@ "sync": "astro sync" }, "dependencies": { - "@fontsource-variable/inter": "5.2.6", - "@fontsource-variable/jetbrains-mono": "5.2.6", + "@fontsource-variable/inter": "5.3.0", + "@fontsource-variable/jetbrains-mono": "5.3.0", "astro": "^7.1.4" }, "devDependencies": { "@astrojs/check": "^0.9.10", - "@astrojs/sitemap": "3.7.3", + "@astrojs/sitemap": "3.7.4", "typescript": "5.7.3" } }