From 0911a6b8a158791bfa4d0d152eae5391f65a51dd Mon Sep 17 00:00:00 2001 From: sriram veeraghanta Date: Fri, 19 Jun 2026 01:07:04 +0530 Subject: [PATCH 1/3] chore: upgrade pnpm to 11.8.0 and resolve audit vulnerabilities - Bump packageManager to pnpm@11.8.0 (with verified integrity hash) - Move pnpm overrides from package.json to pnpm-workspace.yaml - Fix 3 advisories surfaced by `pnpm audit`: - vite 6.4.2 -> 6.4.3 (GHSA-fx2h-pf6j-xcff high, GHSA-v6wh-96g9-6wx3) - postcss override ^8.5.10 (GHSA-qx2v-qp2m-jg93) pnpm audit now reports no known vulnerabilities; build passes. --- package.json | 8 +----- pnpm-lock.yaml | 69 +++++++++++++++++++++++---------------------- pnpm-workspace.yaml | 7 +++++ 3 files changed, 44 insertions(+), 40 deletions(-) diff --git a/package.json b/package.json index da4a8c6c..f86e7922 100644 --- a/package.json +++ b/package.json @@ -34,11 +34,5 @@ "engines": { "node": ">=24.0.0" }, - "packageManager": "pnpm@10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319", - "pnpm": { - "overrides": { - "esbuild": "^0.25.0", - "vite": "6.4.2" - } - } + "packageManager": "pnpm@11.8.0+sha512.c1f5e7c4cb241c8f174b743851d82f42b802324afc8b0f116b96adb15aa06664948dde36960a3ba1079ba5b4b29dd0140135b94b5b5f5263592249d68e555f26" } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 64b657bb..00e7c561 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -6,7 +6,8 @@ settings: overrides: esbuild: ^0.25.0 - vite: 6.4.2 + vite: 6.4.3 + postcss: ^8.5.10 importers: @@ -14,10 +15,10 @@ importers: dependencies: '@tailwindcss/vite': specifier: ^4.2.1 - version: 4.2.1(vite@6.4.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)) + version: 4.2.1(vite@6.4.3(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)) '@voidzero-dev/vitepress-theme': specifier: ^4.8.4 - version: 4.8.4(focus-trap@7.8.0)(vite@6.4.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1))(vitepress@1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.8)(search-insights@2.17.3))(vue@3.5.30) + version: 4.8.4(focus-trap@7.8.0)(vite@6.4.3(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1))(vitepress@1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.15)(search-insights@2.17.3))(vue@3.5.30) lucide-vue-next: specifier: ^0.577.0 version: 0.577.0(vue@3.5.30) @@ -29,10 +30,10 @@ importers: version: 4.2.1 vitepress: specifier: ^1.6.3 - version: 1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.8)(search-insights@2.17.3) + version: 1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.15)(search-insights@2.17.3) vitepress-plugin-tabs: specifier: ^0.8.0 - version: 0.8.0(vitepress@1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.8)(search-insights@2.17.3))(vue@3.5.30) + version: 0.8.0(vitepress@1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.15)(search-insights@2.17.3))(vue@3.5.30) vue: specifier: ^3.5.13 version: 3.5.30 @@ -759,7 +760,7 @@ packages: '@tailwindcss/vite@4.2.1': resolution: {integrity: sha512-TBf2sJjYeb28jD2U/OhwdW0bbOsxkWPwQ7SrqGf9sVcoYwZj7rkXljroBO9wKBut9XnmQLXanuDUeqQK0lGg/w==} peerDependencies: - vite: 6.4.2 + vite: 6.4.3 '@tanstack/virtual-core@3.14.0': resolution: {integrity: sha512-JLANqGy/D6k4Ujmh8Tr25lGimuOXNiaVyXaCAZS0W+1390sADdGnyUdSWNIfd49gebtIxGMij4IktRVzrdr12Q==} @@ -798,12 +799,13 @@ packages: '@ungap/structured-clone@1.3.0': resolution: {integrity: sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g==} + deprecated: Potential CWE-502 - Update to 1.3.1 or higher '@vitejs/plugin-vue@5.2.4': resolution: {integrity: sha512-7Yx/SXSOcQq5HiiV3orevHUFn+pmMB4cgbEkDYgnkUWb0WfeQ/wa2yFv6D5ICiCQOVpjA7vYDXrC7AGO8yjDHA==} engines: {node: ^18.0.0 || >=20.0.0} peerDependencies: - vite: 6.4.2 + vite: 6.4.3 vue: ^3.2.25 '@voidzero-dev/vitepress-theme@4.8.4': @@ -1139,6 +1141,7 @@ packages: lucide-vue-next@0.577.0: resolution: {integrity: sha512-py05bAfv9SHVJqscbiOnjcnLlEmOffA58a+7XhZuFxrs6txe1E8VoR1ngWGTYO+9aVKABAz8l3ee3PqiQN9QPA==} + deprecated: Package deprecated. Please use @lucide/vue instead. peerDependencies: vue: '>=3.0.1' @@ -1175,8 +1178,8 @@ packages: mitt@3.0.1: resolution: {integrity: sha512-vKivATfr97l2/QBCYAkXYDbrIWPM2IIKEl7YPhjCvKlG3kE2gm+uBo6nEXK3M5/Ffh/FLpKExzOQ3JJoJGFKBw==} - nanoid@3.3.11: - resolution: {integrity: sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==} + nanoid@3.3.12: + resolution: {integrity: sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==} engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} hasBin: true @@ -1205,8 +1208,8 @@ packages: resolution: {integrity: sha512-IQ7TZdoaqbT+LCpShg46jnZVlhWD2w6iQYAcYXfHARZ7X1t/UGhhceQDs5X0cGqKvYlHNOuv7Oa1xmb0oQuA3w==} engines: {node: '>=4'} - postcss@8.5.8: - resolution: {integrity: sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==} + postcss@8.5.15: + resolution: {integrity: sha512-FfR8sjd4em2T6fb3I2MwAJU7HWVMr9zba+enmQeeWFfCbm+UOC/0X4DS8XtpUTMwWMGbjKYP7xjfNekzyGmB3A==} engines: {node: ^10 || ^12 || >=14} preact@10.29.0: @@ -1312,8 +1315,8 @@ packages: vfile@6.0.3: resolution: {integrity: sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==} - vite@6.4.2: - resolution: {integrity: sha512-2N/55r4JDJ4gdrCvGgINMy+HH3iRpNIz8K6SFwVsA+JbQScLiC+clmAxBgwiSPgcG9U15QmvqCGWzMbqda5zGQ==} + vite@6.4.3: + resolution: {integrity: sha512-NTKlcQjlAK7MlQoyb6LgaqHc8sso/pVyUJYWMws3jg21uTJw/LddqIFPcPqP6PzpgbIcZyKI85sFE4HBrQDA8A==} engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0} hasBin: true peerDependencies: @@ -1363,7 +1366,7 @@ packages: hasBin: true peerDependencies: markdown-it-mathjax3: ^4 - postcss: ^8 + postcss: ^8.5.10 peerDependenciesMeta: markdown-it-mathjax3: optional: true @@ -1929,12 +1932,12 @@ snapshots: postcss-selector-parser: 6.0.10 tailwindcss: 4.2.1 - '@tailwindcss/vite@4.2.1(vite@6.4.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1))': + '@tailwindcss/vite@4.2.1(vite@6.4.3(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1))': dependencies: '@tailwindcss/node': 4.2.1 '@tailwindcss/oxide': 4.2.1 tailwindcss: 4.2.1 - vite: 6.4.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1) + vite: 6.4.3(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1) '@tanstack/virtual-core@3.14.0': {} @@ -1972,12 +1975,12 @@ snapshots: '@ungap/structured-clone@1.3.0': {} - '@vitejs/plugin-vue@5.2.4(vite@6.4.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1))(vue@3.5.30)': + '@vitejs/plugin-vue@5.2.4(vite@6.4.3(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1))(vue@3.5.30)': dependencies: - vite: 6.4.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1) + vite: 6.4.3(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1) vue: 3.5.30 - '@voidzero-dev/vitepress-theme@4.8.4(focus-trap@7.8.0)(vite@6.4.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1))(vitepress@1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.8)(search-insights@2.17.3))(vue@3.5.30)': + '@voidzero-dev/vitepress-theme@4.8.4(focus-trap@7.8.0)(vite@6.4.3(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1))(vitepress@1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.15)(search-insights@2.17.3))(vue@3.5.30)': dependencies: '@docsearch/css': 4.6.2 '@docsearch/js': 4.6.2 @@ -1985,7 +1988,7 @@ snapshots: '@iconify/vue': 5.0.0(vue@3.5.30) '@rive-app/canvas-lite': 2.37.3 '@tailwindcss/typography': 0.5.19(tailwindcss@4.2.1) - '@tailwindcss/vite': 4.2.1(vite@6.4.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)) + '@tailwindcss/vite': 4.2.1(vite@6.4.3(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)) '@vue/shared': 3.5.30 '@vueuse/core': 14.2.1(vue@3.5.30) '@vueuse/integrations': 14.2.1(focus-trap@7.8.0)(vue@3.5.30) @@ -1994,7 +1997,7 @@ snapshots: minisearch: 7.2.0 reka-ui: 2.9.6(vue@3.5.30) tailwindcss: 4.2.1 - vitepress: 1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.8)(search-insights@2.17.3) + vitepress: 1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.15)(search-insights@2.17.3) vue: 3.5.30 transitivePeerDependencies: - '@vue/composition-api' @@ -2034,7 +2037,7 @@ snapshots: '@vue/shared': 3.5.30 estree-walker: 2.0.2 magic-string: 0.30.21 - postcss: 8.5.8 + postcss: 8.5.15 source-map-js: 1.2.1 '@vue/compiler-ssr@3.5.30': @@ -2354,7 +2357,7 @@ snapshots: mitt@3.0.1: {} - nanoid@3.3.11: {} + nanoid@3.3.12: {} ohash@2.0.11: {} @@ -2399,9 +2402,9 @@ snapshots: cssesc: 3.0.0 util-deprecate: 1.0.2 - postcss@8.5.8: + postcss@8.5.15: dependencies: - nanoid: 3.3.11 + nanoid: 3.3.12 picocolors: 1.1.1 source-map-js: 1.2.1 @@ -2550,12 +2553,12 @@ snapshots: '@types/unist': 3.0.3 vfile-message: 4.0.3 - vite@6.4.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1): + vite@6.4.3(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1): dependencies: esbuild: 0.25.12 fdir: 6.5.0(picomatch@4.0.4) picomatch: 4.0.4 - postcss: 8.5.8 + postcss: 8.5.15 rollup: 4.59.0 tinyglobby: 0.2.16 optionalDependencies: @@ -2564,12 +2567,12 @@ snapshots: jiti: 2.6.1 lightningcss: 1.31.1 - vitepress-plugin-tabs@0.8.0(vitepress@1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.8)(search-insights@2.17.3))(vue@3.5.30): + vitepress-plugin-tabs@0.8.0(vitepress@1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.15)(search-insights@2.17.3))(vue@3.5.30): dependencies: - vitepress: 1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.8)(search-insights@2.17.3) + vitepress: 1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.15)(search-insights@2.17.3) vue: 3.5.30 - vitepress@1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.8)(search-insights@2.17.3): + vitepress@1.6.4(@algolia/client-search@5.49.2)(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1)(postcss@8.5.15)(search-insights@2.17.3): dependencies: '@docsearch/css': 3.8.2 '@docsearch/js': 3.8.2(@algolia/client-search@5.49.2)(search-insights@2.17.3) @@ -2578,7 +2581,7 @@ snapshots: '@shikijs/transformers': 2.5.0 '@shikijs/types': 2.5.0 '@types/markdown-it': 14.1.2 - '@vitejs/plugin-vue': 5.2.4(vite@6.4.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1))(vue@3.5.30) + '@vitejs/plugin-vue': 5.2.4(vite@6.4.3(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1))(vue@3.5.30) '@vue/devtools-api': 7.7.9 '@vue/shared': 3.5.30 '@vueuse/core': 12.8.2 @@ -2587,10 +2590,10 @@ snapshots: mark.js: 8.11.1 minisearch: 7.2.0 shiki: 2.5.0 - vite: 6.4.2(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1) + vite: 6.4.3(@types/node@25.6.0)(jiti@2.6.1)(lightningcss@1.31.1) vue: 3.5.30 optionalDependencies: - postcss: 8.5.8 + postcss: 8.5.15 transitivePeerDependencies: - '@algolia/client-search' - '@types/node' diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index c5739b74..b35901ac 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,2 +1,9 @@ +allowBuilds: + esbuild: true + vue-demi: true ignoredBuiltDependencies: - esbuild +overrides: + esbuild: ^0.25.0 + vite: 6.4.3 + postcss: ^8.5.10 From 710d1416adfc9f084b6d40c7e88a4154cfddb924 Mon Sep 17 00:00:00 2001 From: sriram veeraghanta Date: Fri, 19 Jun 2026 01:12:44 +0530 Subject: [PATCH 2/3] docs: target PRs at master, bump pnpm version note, add CLAUDE.md symlink - AGENTS.md: open PRs against `master` (was `preview`) - AGENTS.md: package manager note pnpm 10 -> 11.8.0 - Add CLAUDE.md -> AGENTS.md symlink so Claude Code loads the conventions --- AGENTS.md | 4 ++-- CLAUDE.md | 1 + 2 files changed, 3 insertions(+), 2 deletions(-) create mode 120000 CLAUDE.md diff --git a/AGENTS.md b/AGENTS.md index ad0c3641..02cd1169 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -9,7 +9,7 @@ This is the [Plane](https://plane.so) product documentation site, built with [Vi | Tool | Version/Notes | | --------------- | --------------- | | Framework | VitePress 1.6.3 | -| Package manager | pnpm 10 | +| Package manager | pnpm 11.8.0 | | Node | >=24.0.0 | | Formatting | oxfmt | | Styling | Tailwind CSS v4 | @@ -84,7 +84,7 @@ Run `pnpm fix:format` before committing. CI checks formatting via `pnpm check:fo ## Branches and PRs - Default/main branch: `master` -- Active development and review happens on the `preview` branch — open PRs targeting `preview`, not `master`. +- Open PRs targeting `master`. - Branch naming: use short descriptive slugs (e.g., `fix/csv-importer-typo`, `docs/add-milestones-page`). - Commit messages: `: short description` — link to an issue where applicable (e.g., `docs: add recurring work items page (#412)`). diff --git a/CLAUDE.md b/CLAUDE.md new file mode 120000 index 00000000..47dc3e3d --- /dev/null +++ b/CLAUDE.md @@ -0,0 +1 @@ +AGENTS.md \ No newline at end of file From fc34b04f9f2edd16d2df86ce0443d066dec6c678 Mon Sep 17 00:00:00 2001 From: sriram veeraghanta Date: Fri, 19 Jun 2026 01:16:24 +0530 Subject: [PATCH 3/3] fix: format --- AGENTS.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/AGENTS.md b/AGENTS.md index 02cd1169..7d0a65bd 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -9,7 +9,7 @@ This is the [Plane](https://plane.so) product documentation site, built with [Vi | Tool | Version/Notes | | --------------- | --------------- | | Framework | VitePress 1.6.3 | -| Package manager | pnpm 11.8.0 | +| Package manager | pnpm 11.8.0 | | Node | >=24.0.0 | | Formatting | oxfmt | | Styling | Tailwind CSS v4 |