Merge branch 'main' into release-security

Author: chenrui333

.github/workflows/test.yml

@@ -53,7 +53,7 @@ jobs:
     if: needs.changes.outputs.should-run-tests == 'true'
     name: Tests
     runs-on: ubuntu-24.04
-    container: ghcr.io/runatlantis/testing-env:latest@sha256:925d411e6297ae6e3a71ead5e0e1eac28df09d8d6c4880a246d8617ce2d37cbc
+    container: ghcr.io/runatlantis/testing-env:latest@sha256:ff2a5fb7691d65f9554e69823c55f01c6e34824b9be377199e1b7754ff5fa007
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1

.github/workflows/website.yml

@@ -19,6 +19,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  # Required: allow read access to the content for analysis.
+  contents: read
+
 jobs:
   changes:
     outputs:

package-lock.json

@@ -2,17 +2,17 @@
   "license": "Apache-2.0",
   "type": "module",
   "devDependencies": {
-    "@playwright/test": "^1.50.1",
-    "@types/node": "^22.13.4",
-    "@vueuse/core": "^12.7.0",
-    "markdown-it-footnote": "^4.0.0",
-    "markdownlint-cli": "^0.44.0",
-    "mermaid": "^11.4.1",
-    "sitemap-ts": "^1.7.3",
-    "vite": "^6.1.4",
-    "vitepress": "^1.6.3",
-    "vitepress-plugin-mermaid": "^2.0.16",
-    "vue": "^3.4.27"
+    "@playwright/test": "1.50.1",
+    "@types/node": "22.13.4",
+    "@vueuse/core": "12.7.0",
+    "markdown-it-footnote": "4.0.0",
+    "markdownlint-cli": "0.44.0",
+    "mermaid": "11.4.1",
+    "sitemap-ts": "1.8.0",
+    "vite": "6.2.6",
+    "vitepress": "1.6.3",
+    "vitepress-plugin-mermaid": "2.0.17",
+    "vue": "3.5.13"
   },
   "scripts": {
     "website:dev": "vitepress dev --host localhost --port 8080 runatlantis.io",