Skip to content

chore(deps): remove obsolete gh-pages deployment tool - #236

Merged
infeng merged 1 commit into
masterfrom
maintenance/week6-retire-gh-pages
Sep 9, 2026
Merged

chore(deps): remove obsolete gh-pages deployment tool#236
infeng merged 1 commit into
masterfrom
maintenance/week6-retire-gh-pages

Conversation

@infeng

@infeng infeng commented Sep 9, 2026

Copy link
Copy Markdown
Owner

The repository still installs gh-pages@2.1.1 and exposes a legacy branch-based npm run deploy, although #235 moved the demo to release-triggered GitHub Pages Actions. The unused CLI is also the dependency behind critical Dependabot alert #166 (GHSA-8mmm-9v2q-x3f9).

Remove the CLI, its exclusive lockfile entries, and the obsolete deploy/predeploy scripts. Pages continues to build with npm run doc in the existing Actions workflow. The v1 lockfile format and every surviving locked dependency record are preserved. This development-tool cleanup does not require a package release.

Validation:

  • Clean npm ci --ignore-scripts --registry=https://registry.npmjs.org/ on Node.js 24.16.0.
  • npm run verify: 42 tests, lint, library/types build, default-export check, demo build, SSR build and hydration check, and 14-file package dry run all passed.
  • Confirmed node_modules/gh-pages is absent, retained lock records are identical to the baseline, both lockfiles use only the public npm registry, and git diff --check passes.

@infeng
infeng merged commit 76556fb into master Sep 9, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant