📦🔧：make the major dependency bump work

.github/workflows/codeql-analysis.yml

@@ -25,16 +25,16 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c4dd10e44af883a891fe31ced449bcb4a6728b9b # v3.37.6
+        uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
         with:
           languages: ${{ matrix.language }}
           queries: security-extended,security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c4dd10e44af883a891fe31ced449bcb4a6728b9b # v3.37.6
+        uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
         with:
           category: '/language:${{matrix.language}}'

.github/workflows/deploy.yml

@@ -24,9 +24,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out project repository
-        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Set up Node.js runtime
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: 'package.json'
       - name: Install
@@ -39,11 +39,11 @@ jobs:
         run: nps build
       - name: Setup Pages
         id: pages
-        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5.0.0
+        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
         with:
           path: _site
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

.github/workflows/lint-and-test.yml

@@ -9,9 +9,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out project repository
-        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Set up Node.js runtime
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: 'package.json'
       - name: Install
@@ -28,7 +28,7 @@ jobs:
       # You can check if a file with a listed file type is in the PR by doing:
       # if: ${{ steps.filter.outputs.md == 'true' }}
       # This will return true if there's a Markdown file the PR has changed.
-      - uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad # v3.0.4
+      - uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
         id: filter
         with:
           filters: |

.github/workflows/semgrep.yml

@@ -18,5 +18,5 @@ jobs:
     container:
       image: returntocorp/semgrep@sha256:98c2572fced2474539fd27cab3207ebd8e95e4e7aab4c3b381fdc5e2641d9941 # latest
     steps:
-    - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - run: semgrep ci

_assets/styles/_news.scss

@@ -25,9 +25,9 @@
   margin-left: -30px;
   background-color: $quaternary;
   box-shadow:
-    0 1px 5px rgba(0 0 0 / 30%),
-    inset 0 1px 0 rgba(255 255 255 / 20%),
-    inset 0 -1px 0 rgba(0 0 0 / 30%);
+    0 1px 5px rgb(0 0 0 / 30%),
+    inset 0 1px 0 rgb(255 255 255 / 20%),
+    inset 0 -1px 0 rgb(0 0 0 / 30%);
 
   &::before {
     position: absolute;
@@ -64,8 +64,8 @@
   font-weight: 700;
   line-height: 18px;
   color: tint-color($secondary, 20%);
-  text-shadow: 0 -1px 0 rgba(0 0 0 / 50%);
   text-transform: uppercase;
+  text-shadow: 0 -1px 0 rgb(0 0 0 / 50%);
 }
 
 @include media-breakpoint-down(sm) {
@@ -103,7 +103,7 @@
 }
 
 .post-date {
-  text-shadow: 0 -1px 0 rgba(0 0 0 / 10%);
+  text-shadow: 0 -1px 0 rgb(0 0 0 / 10%);
 }
 
 .post-author .author-name {

_data/eleventyDataSchema.mjs

@@ -4,7 +4,10 @@ export default function (data) {
   // Draft content, validate `draft` front matter
   const result = z
     .object({
-      draft: z.boolean().or(z.undefined()),
+      // `.optional()` rather than `.or(z.undefined())`: as of zod 4 a union
+      // with `undefined` no longer makes the key itself optional, so pages
+      // without `draft` front matter were rejected as "expected nonoptional".
+      draft: z.boolean().optional(),
     })
     .safeParse(data);
   if (result.error) {

biome.jsonc

@@ -1,13 +1,14 @@
 {
   "$schema": "./node_modules/@biomejs/biome/configuration_schema.json",
   "files": {
-    "ignore": [
-      "**/_site/",
-      "**/.git/",
-      "**/node_modules/",
-      "**/package.json",
-      "**/pnpm-lock.yaml",
-      "assets/js/vendor/"
+    "includes": [
+      "**",
+      "!**/_site/",
+      "!**/.git/",
+      "!**/node_modules/",
+      "!**/package.json",
+      "!**/pnpm-lock.yaml",
+      "!**/assets/js/vendor/**"
     ]
   },
   "formatter": {
@@ -19,11 +20,11 @@
     "lineWidth": 80,
     "attributePosition": "auto"
   },
-  "organizeImports": { "enabled": true },
+  "assist": { "actions": { "source": { "organizeImports": "on" } } },
   "linter": {
     "enabled": true,
     "rules": {
-      "recommended": true,
+      "preset": "recommended",
       "style": {
         "useNamingConvention": {
           "level": "error",
@@ -53,12 +54,12 @@
     }
   },
   "overrides": [
-    { "include": ["*.svg"] },
-    { "include": ["*.json"] },
+    { "includes": ["**/*.svg"] },
+    { "includes": ["**/*.json"] },
     {
-      "include": ["*.html"],
+      "includes": ["**/*.html"],
       "javascript": { "formatter": { "quoteStyle": "double" } }
     },
-    { "include": ["*.md"] }
+    { "includes": ["**/*.md"] }
   ]
 }

build/tasks/compile/build-images.mts

@@ -1,2 +1,3 @@
 import { imagize } from './imagize.mjs';
+
 await imagize();

build/utils.mts

@@ -16,7 +16,9 @@ import {
   relative as pathRelative,
 } from 'node:path';
 import { execute } from '@yarnpkg/shell';
+
 export { globby as glob } from 'globby';
+
 import { catchWrap } from '@isaacs/catcher';
 
 // -----------------------------------------------------------------------------

package.json

@@ -3,10 +3,10 @@
   "author": "The OpenINF Authors & Friends",
   "private": "true",
   "description": "The OpenINF portal, other static resources, and more static electricity",
-  "packageManager": "pnpm@10.34.5",
+  "packageManager": "pnpm@11.20.0",
   "engines": {
-    "node": "22.23.2",
-    "pnpm": "10.34.5"
+    "node": "24.19.0",
+    "pnpm": "11.20.0"
   },
   "exports": {
     "./build/constants": "./build/shared/constants.mjs",
@@ -25,34 +25,34 @@
   },
   "devDependencies": {
     "@11ty/eleventy": "3.1.6",
-    "@biomejs/biome": "1.9.4",
+    "@biomejs/biome": "2.5.6",
     "@cspell/dict-lorem-ipsum": "4.0.5",
     "@isaacs/catcher": "1.0.4",
     "@openinf/gh-file-importer": "2.0.1",
     "@shopify/prettier-plugin-liquid": "1.11.0",
-    "@tsconfig/node-lts": "22.0.4",
+    "@tsconfig/node-lts": "24.0.0",
     "@types/console-log-level": "1.4.5",
     "@types/gulp": "4.0.18",
     "@types/js-yaml": "4.0.9",
-    "@types/node": "22.20.1",
+    "@types/node": "24.13.3",
     "@yarnpkg/shell": "4.1.3",
     "autoprefixer": "10.5.4",
     "bootstrap": "5.3.8",
     "browser-sync": "3.0.4",
     "browserslist-lint": "0.4.0",
     "console-log-level": "1.4.1",
     "cspell": "10.0.1",
-    "cssnano": "7.1.9",
+    "cssnano": "8.0.2",
     "dictionary-en": "4.0.0",
     "dprint": "0.55.2",
     "editorconfig-checker": "6.1.1",
-    "globby": "14.1.0",
+    "globby": "16.2.2",
     "gulp": "5.0.1",
     "gulp-dart-sass": "1.1.0",
     "gulp-postcss": "10.0.0",
     "gulp-rename": "2.1.0",
     "gulp-sourcemaps": "3.0.0",
-    "markdown-it": "14.3.0",
+    "markdown-it": "15.0.0",
     "markdown-it-abbr": "2.0.0",
     "markdown-it-anchor": "9.2.1",
     "markdown-it-footnote": "4.0.0",
@@ -103,14 +103,14 @@
     "retext-syntax-mentions": "4.0.0",
     "retext-syntax-urls": "4.0.0",
     "strip-comments": "2.0.1",
-    "stylelint": "16.26.1",
-    "stylelint-config-recess-order": "6.1.0",
-    "stylelint-config-standard-scss": "14.0.0",
+    "stylelint": "17.14.1",
+    "stylelint-config-recess-order": "7.7.0",
+    "stylelint-config-standard-scss": "17.0.0",
     "tsx": "4.23.5",
-    "typescript": "5.9.3",
+    "typescript": "7.0.2",
     "unified": "11.0.5",
-    "vnu-jar": "24.10.17",
-    "zod": "3.25.76",
-    "zod-validation-error": "3.5.4"
+    "vnu-jar": "26.8.3",
+    "zod": "4.4.3",
+    "zod-validation-error": "5.0.0"
   }
 }