[codex] Update dependencies safely

[big-mon]

Summary

• Update workspace dependencies to current npm registry latest versions, including Astro 7, Tailwind CSS 4.3.1, Playwright 1.61.0, Shiki 4.2.0, React 19.2.7, and related lint/type tooling.
• Refresh pnpm-lock.yaml after resolving dependencies with lifecycle scripts disabled during the update step.
• Adjust build:packages:incremental so the production build also emits bundled package artifacts after TypeScript incremental builds. This keeps the OG image generator runtime compatible with Astro 7's stricter module resolution.

Supply Chain Checks

• Updated with pnpm update -r --latest --ignore-scripts.
• Confirmed pnpm outdated -r returned no remaining outdated direct dependencies.
• Checked direct dependency registry metadata: all selected versions match latest and none are marked deprecated.
• Searched the lockfile for publicly reported compromised npm package/version patterns, including compromised eslint-config-prettier/related versions, malicious is versions, and package names associated with the May 2026 Shai-Hulud-style campaign; no matches were found.
• npm audit was not run because it sends the repository dependency graph to the external npm audit service.

Validation

• pnpm validate:workspace
• pnpm build
• pnpm type-check
• pnpm lint
• git diff --check

Notes

GitHub reported existing Dependabot vulnerabilities on the default branch after push. This PR updates dependencies, but those repository alerts should still be reviewed in GitHub Security/Dependabot.

• npm ワークスペース依存関係を最新版に更新（Astro 7、Tailwind CSS 4.3.1、Playwright 1.61.0、Shiki 4.2.0、React 19.2.7 ほか）／ Astro 7 の厳格なモジュール解決要件に対応し、最新の機能と修正を取り込むため
• build:packages:incremental タスクを調整（TypeScript incremental build 後にパッケージの build:bundle を並列実行）／ Astro 7 の OG イメージジェネレータ実行時のモジュール解決要件を満たすため
• pnpm-lock.yaml を更新（ライフサイクルスクリプト無効化による依存関係解決）／ 新しい dependency graph を正確に反映させるため
• 供給チェーン検証を実施（公開されている脆弱パッケージをロックファイルから検索）／ セキュリティリスクを事前に排除するため
• pnpm validate:workspace、pnpm build、pnpm type-check、pnpm lint で検証完了／ 全ての更新が正常に統合されたことを確認するため

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: b4564542-a1f5-4d2d-b9da-0b2564a7e4a3

📥 Commits

Reviewing files that changed from the base of the PR and between aa0f1b4 and bce1361.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (4)

• apps/astro-blog/package.json
• package.json
• packages/content-processor/package.json
• packages/og-image-generator/package.json

---

📝 Walkthrough

Walkthrough

ルートの package.json にて build:packages:incremental スクリプトを変更し、tsc --build による型チェック後に pnpm --parallel で @estrivault/cloudinary-utils・@estrivault/content-processor・@estrivault/og-image-generator の build:bundle を並列実行するよう拡張した。あわせてルートおよび各ワークスペース（apps/astro-blog、packages/content-processor、packages/og-image-generator）の devDependencies・dependencies に含まれる複数パッケージのバージョンを更新した。

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/update-dependencies-safely

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[big-mon]

@codex review it

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	estrilda	bce1361	Commit Preview URL Branch Preview URL	Jun 22 2026, 06:01 PM

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Hooray!

Reviewed commit: bce13619b6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".