[VdustR]

Upgrade the documentation toolchain to the official patched releases for the seven accepted alerts in #12. The workspace already uses exact overrides; this keeps the change limited to six packages and their necessary lockfile edges.

• compression 1.8.1 → 1.8.2; Joi 17.13.7 → 17.13.8; proxy-addr 2.0.7 → 2.0.8; source-map-js 1.2.1 → 1.2.2.
• Consolidate selector parser 6.1.4/7.1.6 on 7.1.6; upgrade Docusaurus tinypool 1.1.1 → 2.1.2. Tinypool 2 drops Node 18, already excluded by this repository. Add normal SSG-style worker and cssnano compatibility checks for these major overrides.
• No application source or public package dependency changes. GitHub Pages deploys on main; an npm release is unnecessary for these documentation-only dependencies.

Validation: frozen-lockfile install; installed versions and main-file SHA-256 readback; ordinary Joi validation, proxy trust lookup, source-map round trip and HTTP gzip response; 43 tests passed with pnpm test --no-file-parallelism; root/doc type checks; package and Docusaurus builds. The first parallel local run hit an existing two-second brace-expansion timeout under load; CI will run the unchanged default test command on Node 20.19.0. No exploit reproduction was performed. These are upgrade/compatibility results, not vulnerability tests.

Closes #12.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 317c4a8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[VdustR]

@codex review. Please independently review the dependency overrides and normal worker/CSS compatibility tests for regressions and scope. Use read-only source/advisory analysis; do not run exploit, RCE, memory-corruption, ASan or Valgrind research.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-15T04:03:04.375967Z	317c4a8	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Keep them coming!

Reviewed commit: 317c4a8b64

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".