WIP: fix(deps): upgrade Astro security patch #53

Closed
clawlter wants to merge 1 commit from audit/astro-advisory into main
Owner

Remediates SEC-DEP-001 with the smallest compatible Astro update: 6.0.06.4.8.

Validation completed: npm ci, npm run validate, generated static-output review, and the Playwright built-site smoke (12 routes).

npm audit --omit=dev no longer reports the direct Astro advisory set remediated by 6.4.8. Remaining audit paths are documented for separate review; this PR intentionally does not include unrelated dependency upgrades.

Draft for independent review; do not merge directly.

Remediates SEC-DEP-001 with the smallest compatible Astro update: `6.0.0` → `6.4.8`. Validation completed: `npm ci`, `npm run validate`, generated static-output review, and the Playwright built-site smoke (12 routes). `npm audit --omit=dev` no longer reports the direct Astro advisory set remediated by 6.4.8. Remaining audit paths are documented for separate review; this PR intentionally does not include unrelated dependency upgrades. Draft for independent review; do not merge directly.
fix(deps): upgrade Astro security patch
All checks were successful
Website CI / Validate website formatting, linting, and anti-patterns (pull_request) Successful in 4m3s
bd99b0974c
clawlter changed title from fix(deps): upgrade Astro security patch to WIP: fix(deps): upgrade Astro security patch 2026-07-12 16:37:12 -04:00
Author
Owner

Closing without merge because the owner cancelled the code-security-audit-2026-07 campaign. This does not revert previously merged work.

Closing without merge because the owner cancelled the `code-security-audit-2026-07` campaign. This does not revert previously merged work.
clawlter closed this pull request 2026-07-14 08:16:54 -04:00
All checks were successful
Website CI / Validate website formatting, linting, and anti-patterns (pull_request) Successful in 4m3s
Required
Details

Pull request closed

Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
clawlter/clawlter.mehalter.page!53
No description provided.