release: website on Astro 7 and security updates

package.json

@@ -14,13 +14,24 @@
   },
   "devDependencies": {
     "typescript": "^5.7.0",
-    "vitest": "^3.0.0",
+    "vitest": "^4.1.11",
     "@changesets/cli": "^2.27.0"
   },
   "engines": {
     "node": ">=22",
     "pnpm": ">=9"
   },
   "packageManager": "pnpm@9.15.0",
-  "license": "MIT"
+  "license": "MIT",
+  "pnpm": {
+    "supportedArchitectures": {
+      "os": [
+        "current"
+      ],
+      "cpu": [
+        "current",
+        "wasm32"
+      ]
+    }
+  }
 }

packages/core/package.json

@@ -29,7 +29,7 @@
   },
   "devDependencies": {
     "typescript": "^5.7.0",
-    "vitest": "^3.0.0"
+    "vitest": "^4.1.11"
   },
   "repository": {
     "type": "git",

packages/server/package.json

@@ -47,7 +47,7 @@
   },
   "devDependencies": {
     "typescript": "^5.7.0",
-    "vitest": "^3.0.0",
+    "vitest": "^4.1.11",
     "@types/express": "^5.0.0"
   },
   "repository": {

packages/widget/package.json

@@ -26,10 +26,10 @@
   },
   "devDependencies": {
     "typescript": "^5.7.0",
-    "vite": "^6.0.0",
+    "vite": "^6.4.3",
     "terser": "^5.37.0",
-    "vitest": "^3.0.0",
-    "happy-dom": "^16.0.0"
+    "vitest": "^4.1.11",
+    "happy-dom": "^20.14.5"
   },
   "repository": {
     "type": "git",

website/astro.config.mjs

@@ -8,7 +8,15 @@ import cloudflare from '@astrojs/cloudflare';
 export default defineConfig({
   // Static docs; only /api/chat and /api/visitors run in the Cloudflare Worker.
   output: 'static',
-  adapter: cloudflare(),
+  // 'compile' optimizes images at build time, as before; the v14 default would
+  // switch to the Cloudflare Images binding.
+  // Prerender the docs in Node: Starlight's Markdown pipeline (Satteri) runs
+  // its native build there instead of the wasm one.
+  adapter: cloudflare({ imageService: 'compile', prerenderEnvironment: 'node' }),
+  // Astro 7 defaults to 'jsx' whitespace rules; keep the previous output.
+  compressHTML: true,
+  // No Astro sessions, so the adapter doesn't add a SESSION KV namespace.
+  session: false,
   env: {
     // Read per request with getSecret(). On Workers these are Worker secrets,
     // which don't exist at build time, so import.meta.env would bake in

website/package.json

@@ -11,20 +11,20 @@
     "deploy": "astro build && wrangler deploy"
   },
   "dependencies": {
-    "@astrojs/cloudflare": "^12.6.13",
-    "@astrojs/react": "^4.4.2",
-    "@astrojs/sitemap": "^3.7.1",
-    "@astrojs/starlight": "^0.34.0",
-    "@chatcops/core": "^0.2.0",
-    "@chatcops/server": "^0.2.0",
+    "@astrojs/cloudflare": "^14.3.3",
+    "@astrojs/react": "^7.0.0",
+    "@astrojs/sitemap": "^3.7.4",
+    "@astrojs/starlight": "^0.42.5",
+    "@chatcops/core": "workspace:^",
+    "@chatcops/server": "workspace:^",
     "@chatcops/widget": "workspace:^",
-    "@tailwindcss/vite": "^4.2.1",
-    "astro": "^5.7.0",
+    "@tailwindcss/vite": "^4.3.3",
+    "astro": "^7.3.5",
     "motion": "^12.35.0",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
-    "sharp": "^0.33.0",
-    "tailwindcss": "^4.2.1"
+    "sharp": "^0.35.4",
+    "tailwindcss": "^4.3.3"
   },
   "devDependencies": {
     "@fontsource/inter": "^5.1.0",
@@ -33,6 +33,6 @@
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "typescript": "^5.7.0",
-    "wrangler": "^4.141.0"
+    "wrangler": "^4.146.0"
   }
 }

website/wrangler.jsonc

@@ -5,7 +5,7 @@
   // static assets in dist/, /api/chat and /api/visitors run in the Worker.
   // Workers Builds builds from the repo root (`pnpm -r build`, the widget
   // package has to build first) and deploys from here.
-  "main": "./dist/_worker.js/index.js",
+  "main": "@astrojs/cloudflare/entrypoints/server",
   "compatibility_date": "2026-09-24",
   "compatibility_flags": ["nodejs_compat"],
   "assets": {