Skip to content

Update audited ADR dependencies and remove unmaintained Markdown packages#60

Draft
phodal with Copilot wants to merge 6 commits into
masterfrom
copilot/update-adrs-dependencies
Draft

Update audited ADR dependencies and remove unmaintained Markdown packages#60
phodal with Copilot wants to merge 6 commits into
masterfrom
copilot/update-adrs-dependencies

Conversation

Copilot AI commented Jul 13, 2026

Copy link
Copy Markdown

PNPM audit reported high-risk paths through sharp, markdown-toc, and related transitive dependencies. This updates supported dependencies and removes unmaintained packages without patched releases.

  • Dependency updates

    • Upgrade sharp to ^0.32.6.
    • Upgrade walk-sync to ^2.2.0.
    • Remove unused @lisnote/image-generator.
  • Remove unpatched Markdown dependencies

    • Remove markdown and markdown-toc.
    • Use the existing remarkable dependency for Markdown parsing, status extraction, and ToC generation.
  • Safe heading anchors

    • Generate deterministic, URI-encoded heading IDs and ToC links.
    • Preserve duplicate-heading handling and add coverage for generated ToC anchors.
return `${indent}${bullet} [${heading.content}](#${encodeURIComponent(heading.slug)})`

Copilot AI changed the title [WIP] Update ADR dependencies to no-risk versions Update audited ADR dependencies and remove unmaintained Markdown packages Jul 13, 2026
Copilot AI requested a review from phodal July 13, 2026 00:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

PNPM Audit flags some dependencies in ADR as high risk.

2 participants