Skip to content

NXT-20806: Updated major package dependencies to fix security vulnerabilities - #278

Merged
daniel-stoian-lgp merged 1 commit into
developfrom
feature/NXT-20806
Oct 12, 2026
Merged

daniel-stoian-lgp merged 1 commit into
developfrom
feature/NXT-20806

Conversation

@ion-andrusciac-lgp

@ion-andrusciac-lgp ion-andrusciac-lgp commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Checklist

  • I have read and understand the contribution guide
  • A CHANGELOG entry is included
  • I have run automated testing and it is passed
  • Documentation was added or is not needed
  • This is an API breaking change

Issue Resolved / Feature Added

Updated package dependencies to fix security vulnerabilities

Resolution

Updated dependencies (the Breaking Changes does not affect our repo):

Additional Considerations

  • Changed width of the header container to 100vw to fill the entire screen on PC and Mobile
  • Changed media max-width to 800px; otherwise, when the screen is resized, the styling is not applied as expected
  • Changed comment type in return statement
  • @astrojs/react supports the React Compiler, which automatically memoizes components and values to reduce unnecessary re-renders. Enabling it requires installing oxc-transform-react, but this currently introduces npm peer dependency warnings: @astrojs/react expects oxc-transform-react@^0.145.0, while its @vitejs/plugin-react dependency expects oxc-transform-react@^0.152.0. Furthermore, the compiler is unlikely to provide a meaningful performance improvement in our documentation site, since the only client-side React component is LivePreview, which primarily renders static components and has little state-driven work to optimize.

Links

NXT-20806

Comments

Enact-DCO-1.0-Signed-off-by: Ion Andrusciac ion.andrusciac@lgepartner.com

@daniel-stoian-lgp
daniel-stoian-lgp merged commit ea227e7 into develop Oct 12, 2026
4 checks passed
@daniel-stoian-lgp
daniel-stoian-lgp deleted the feature/NXT-20806 branch October 12, 2026 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants