Merge pull request #104 from maxatwork/codex/fix-security-alerts

[codex] fix security alerts

Author: maxatwork

.github/workflows/ci.yml

@@ -16,7 +16,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node-version: [18, 20, 22]
+        node-version: [22.14.0]
 
     steps:
       - name: Checkout
@@ -47,7 +47,7 @@ jobs:
         run: npm run pack:dry-run
 
   docs-e2e:
-    name: docs-e2e (node 20)
+    name: docs-e2e (node 22.14.0)
     runs-on: ubuntu-latest
 
     steps:
@@ -57,7 +57,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22.14.0
           cache: npm
 
       - name: Install

.github/workflows/pages.yml

@@ -35,7 +35,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22.14.0
           cache: npm
 
       - name: Install

apps/docs/package.json

@@ -9,30 +9,29 @@
     "test": "vitest run",
     "test:e2e": "playwright test",
     "lint": "eslint \"src/**/*.{ts,tsx}\" \"test/**/*.{ts,tsx}\" \"test-e2e/**/*.ts\"",
-    "typecheck": "astro check",
+    "typecheck": "astro sync && tsc --noEmit",
     "clean": "rimraf dist .astro"
   },
   "dependencies": {
+    "@astrojs/react": "^5.0.2",
     "@form2js/core": "3.4.0",
     "@form2js/dom": "3.4.0",
     "@form2js/form-data": "3.4.0",
     "@form2js/jquery": "3.4.0",
     "@form2js/js2form": "3.4.0",
     "@form2js/react": "3.4.0",
-    "@astrojs/react": "^4.4.0",
-    "astro": "^5.7.0",
+    "astro": "^6.1.1",
     "jquery": "^3.7.1",
-    "rehype-stringify": "^10.0.1",
     "react": "^19.1.1",
     "react-dom": "^19.1.1",
+    "rehype-stringify": "^10.0.1",
     "remark-gfm": "^4.0.1",
     "remark-parse": "^11.0.0",
     "remark-rehype": "^11.1.2",
     "unified": "^11.0.5",
     "zod": "^4.1.5"
   },
   "devDependencies": {
-    "@astrojs/check": "^0.9.4",
     "@playwright/test": "^1.54.2",
     "@types/jquery": "^3.5.33",
     "@types/react": "^19.1.12",

apps/docs/test/playground-shell.test.tsx

@@ -136,12 +136,11 @@ declare global {
 
 let container: HTMLDivElement;
 let root: ReturnType<typeof createRoot>;
-let consoleErrorSpy: ReturnType<typeof vi.spyOn>;
 
 beforeEach(() => {
   globalThis.IS_REACT_ACT_ENVIRONMENT = true;
   resetMockVariants();
-  consoleErrorSpy = vi.spyOn(console, "error").mockImplementation(() => undefined);
+  vi.spyOn(console, "error").mockImplementation(() => undefined);
   container = document.createElement("div");
   document.body.append(container);
   root = createRoot(container);
@@ -154,8 +153,7 @@ afterEach(() => {
   });
   container.remove();
   resetMockVariants();
-  consoleErrorSpy.mockRestore();
-  vi.clearAllMocks();
+  vi.restoreAllMocks();
 });
 
 function renderShell(): void {