Update dependencies, integrate and improve PR #317, and fix security vulnerabilities

[Copilot]

This PR updates all dependencies to their latest versions, integrates and improves the phonetrack article from PR #317, fixes all security vulnerabilities, and provides documentation on the status of PR #321.

🎯 Changes Made

PR #317 Integration ✅

Successfully integrated and improved the phonetrack article from PR #317, which provides a comprehensive guide on importing Google Location History data into Phonetrack/Nextcloud. The article has been added to the site, completed with all missing sections, and builds correctly.

Added and improved: src/posts/importer-google-location-phonetrack.md

Article improvements:

• Completed all TODO sections with detailed step-by-step instructions
• Better structure with clear sections and subsections (Conclusion, Resources, etc.)
• Enabled table of contents for easier navigation
• Improved JavaScript script with French comments and better variable naming
• Enhanced SQL query formatting and clarity
• Added performance warnings and best practices
• Fixed typos and improved overall readability

PR #321 Status ⚠️

After investigation, PR #321 (site rework from 2022) cannot be merged cleanly due to extensive merge conflicts across 204 files. The PR is marked as "dirty" by GitHub and would require significant manual conflict resolution. See UPGRADE_NOTES.md for detailed analysis and recommendations.

🔧 Major Dependency Updates

Updated to the latest major versions while maintaining compatibility:

• Eleventy v2.0.1 → v3.1.2
  • Migrated RSS feed filters: rssLastUpdatedDate → getNewestCollectionItemDate | dateToRfc3339
  • Updated date filters: rssDate → dateToRfc3339 in feed.njk and sitemap.njk
• Rollup v3.29.5 → v4.52.4
• @rollup/plugin-commonjs v25.0.2 → v28.0.8
• @rollup/plugin-node-resolve v15.1.0 → v16.0.3
• Prettier v2.8.8 → v3.6.2
• jsdom v22.1.0 → v27.0.0
• html-validate v8.0.5 → v10.1.2
• concurrently v8.2.0 → v9.2.1
• cross-env v7.0.3 → v10.1.0
• markdown-it-anchor v8.6.7 → v9.2.0

🔒 Security Fixes

Fixed all 23 npm security vulnerabilities (now 0 vulnerabilities):

• Removed unused html-minifier package (had high severity ReDoS vulnerability)
• Updated make-dir-cli to v4.0.0 to fix trim-newlines vulnerability
• Fixed vulnerabilities in: @babel/runtime, brace-expansion, braces, browserify-sign, cipher-base, cross-spawn, ejs, elliptic, form-data, image-size, and micromatch

📊 Performance & Optimization

• Build time: ~2.2 seconds for 63 files
• CSS size: 17KB (already compressed)
• All existing security headers maintained (CSP, HSTS, X-Frame-Options, etc.)
• CodeQL security scan: ✅ Passed

📚 Documentation

Added UPGRADE_NOTES.md documenting:

• Complete list of dependency updates
• Status and analysis of PRs phonetrack article #317 and wip #321
• Known issues (Sass deprecation warnings from stalfos dependency)
• Recommendations for future maintenance

✅ Testing

• All builds complete successfully
• RSS feed and sitemap generate correctly
• New phonetrack article renders properly with improved content
• No security vulnerabilities detected
• All 63 HTML files generated correctly

📝 Notes

Sass Deprecation Warnings: The build produces deprecation warnings about @import rules from the third-party stalfos dependency. These are not blocking issues and will need to be addressed when the upstream library is updated or when migrating to Dart Sass 3.0.0.

image-size: Kept at v1.2.1 (v2.0.2 available) as the new version requires API migration changes in src/transforms/parse-transform.js.

Closes #369
Related: #317, #321

Original prompt

Mets à jour les dépendances, termine les PR ~321 et #317 et optimise le site

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[sylvainmetayer]

@copilot Propose une relecture de l'article src/posts/importer-google-location-phonetrack.md avec tes modifications

[Copilot]

@copilot Propose une relecture de l'article src/posts/importer-google-location-phonetrack.md avec tes modifications

J'ai revu et amélioré l'article avec les modifications suivantes :

Améliorations structurelles :

• Meilleure organisation avec sections et sous-sections claires
• Ajout d'une section "Conclusion" et "Ressources"
• Activation de la table des matières (noToc: false)
• Instructions étape par étape plus détaillées

Corrections et complétion :

• Complété toutes les sections TODO
• Amélioré les commentaires du script JavaScript (en français)
• Ajout d'instructions détaillées pour l'import via l'interface Phonetrack
• Clarification du processus de consolidation des données
• Ajout d'une section nettoyage

Améliorations du contenu :

• Corrections typographiques (kms → kilomètres, peut-être → peut être)
• Meilleure mise en forme des requêtes SQL
• Amélioration de la lisibilité globale
• Ajout de notes d'avertissement pour les performances

Commit : bc4994d (fichier modifié dans ce commit)