fix: update astro to resolve CVE-2026-45028

[dannyneira]

Summary

• Update direct dependency astro from ^6.1.8 to ^6.1.10.
• Update package-lock.json so astro resolves to 6.1.10, the patched version for CVE-2026-45028.
• No workaround or override was needed.

Security

• Advisory: GHSA-xr5h-phrj-8vxv
• GitHub Advisory: GHSA-xr5h-phrj-8vxv
• Dependabot alert: https://github.com/warpdotdev/docs/security/dependabot/8
• Dependency relationship: direct runtime dependency

Verification

• npx -y npm@10 audit --json no longer reports astro.
• npx -y npm@10 ci
• npx -y npm@10 run typecheck
• npx -y npm@10 run build

Conversation: https://staging.warp.dev/conversation/8e180e72-2d88-4a5f-b30b-1cd561dcca12
Run: https://oz.staging.warp.dev/runs/019e83e9-da97-7dab-8218-52c764eda608
This PR was generated with Oz.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview, Comment	Jun 1, 2026 4:10pm

[oz-for-oss]

@dannyneira

I'm starting a first review of this pull request.

You can view the conversation on Warp.

I completed the review and no human review was requested for this pull request.

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz

[oz-for-oss]

Overview

This PR updates the direct Astro dependency from ^6.1.8 to ^6.1.10 and refreshes the lockfile entries for Astro and its updated transitive dependencies. The change matches the stated CVE remediation and the lockfile version, resolved tarball, and integrity metadata are internally consistent with the package update.

Concerns

• No correctness, dependency-consistency, spec-drift, or security concerns were found in the changed lines.

Verdict

Found: 0 critical, 0 important, 0 suggestions

Approve

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz