Pin vite 6.4.2 for docs site to resolve Dependabot alert.

VitePress 1.6.4 requires vite ^5.4.14, which has no backport for
GHSA-4w7w-66w2-5vf9. An npm override keeps VitePress 1.x while
using a patched vite. Deploy workflow now watches package files.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
rmcrackan
2026-05-19 09:40:44 -04:00
parent 8f3f069d54
commit 1e3daa40dc
3 changed files with 248 additions and 157 deletions

View File

@@ -10,6 +10,8 @@ on:
- docs/**
- .vitepress/**
- index.md
- package.json
- package-lock.json
# Allows you to run this workflow manually from the Actions tab
workflow_dispatch: