Skip to content

fix(deps): address missing and outdated dependencies#4921

Merged
nicolethoen merged 1 commit intopatternfly:mainfrom
nicolethoen:fix/documentation-framework-dependencies
Feb 4, 2026
Merged

fix(deps): address missing and outdated dependencies#4921
nicolethoen merged 1 commit intopatternfly:mainfrom
nicolethoen:fix/documentation-framework-dependencies

Conversation

@nicolethoen
Copy link
Collaborator

This PR addresses the missing Rspack dependencies in the @patternfly/documentation-framework
package and consolidates multiple Snyk security updates.

Primary Fix

  • Added @rspack/core: ^1.5.6 to @patternfly/documentation-framework dependencies (fixes
    missing dependency issue)
  • Added @rspack/dev-server: ^1.1.4 to @patternfly/documentation-framework dependencies
  • Removed @rspack/cli, @rspack/core, and @rspack/dev-server from root devDependencies
    (moved to where they're actually used)
  • Fixed yaml.safeLoad()yaml.load() in parseMD.js (required for js-yaml v4
    compatibility)

Security Updates Included

This PR consolidates the following Snyk security PRs:

✅ Fully Resolved PRs

✅ Partially Resolved PRs

  • #4894 - Fix for 1 vulnerability
    • @patternfly/patternfly-doc-core: 1.15.3 → 1.15.5 (already merged)
    • astro: 5.16.0 → 5.16.3 (superseded by update to 5.16.10)

Changes by Package

Root package.json:

  • Removed @rspack/cli, @rspack/core, @rspack/dev-server from devDependencies

packages/documentation-framework/package.json:

  • Added @rspack/core: ^1.5.6
  • Added @rspack/dev-server: ^1.1.4
  • Updated express: 4.21.2 → 4.22.0
  • Updated glob: 11.0.3 → 11.1.0
  • Updated js-yaml: 3.14.0 → 4.1.1
  • Updated webpack-bundle-analyzer: 4.10.2 → 5.2.0

packages/documentation-framework/scripts/md/parseMD.js:

  • Fixed breaking change: yaml.safeLoad()yaml.load()

packages/site/package.json:

  • Updated astro: 5.15.9 → 5.16.10

@patternfly-build
Copy link
Collaborator

Preview: https://pf-org--pr-4921-site.surge.sh

@nicolethoen nicolethoen merged commit 7fce04a into patternfly:main Feb 4, 2026
5 checks passed
@patternfly-build
Copy link
Collaborator

Your changes have been released in:

  • @patternfly/ast-helpers@1.4.0-alpha.335
  • @patternfly/documentation-framework@6.33.9

Thanks for your contribution! 🎉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants