Consolidate Dependabot updates; migrate ESLint 10 and Tailwind 4 (PER-15131)

.github/workflows/algolia_crawl.yml

@@ -8,6 +8,10 @@ on:
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
+# Least-privilege default token: this job only checks out the repo and runs the crawl.
+permissions:
+  contents: read
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job called "build"
@@ -18,11 +22,13 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        with:
+          persist-credentials: false
 
       # wait until Netlify deploy is done
       - name: Wait for Netlify Deploy
-        uses: probablyup/wait-for-netlify-action@3.2.0
+        uses: probablyup/wait-for-netlify-action@cbf0a098c3c7a0363234cf7b8979a7c4c0ea7a2c # v3.4.0
         id: waitForDeployment
         with:
           site_id: ${{ secrets.NETLIFY_SITE_ID }}
@@ -31,7 +37,7 @@ jobs:
 
         # Crawl the website
       - name: Algolia crawler creation and crawl
-        uses: algolia/algoliasearch-crawler-github-actions@v1.0.10
+        uses: algolia/algoliasearch-crawler-github-actions@3ae4def15d82c60aa02b0e528b50167593cbaaf6 # v1.1.13
         id: algolia_crawler
         with: # mandatory parameters
           crawler-user-id: ${{ secrets.CRAWLER_USER_ID }}

babel.config.js

@@ -1,3 +1,3 @@
 module.exports = {
-  presets: ['@docusaurus/babel/preset'],
+  presets: ["@docusaurus/babel/preset"],
 };

docs/how-to/use-audit-logs/troubleshooting.mdx

@@ -3,7 +3,6 @@ sidebar_position: 4
 title: Troubleshooting
 ---
 
-import ReactPlayer from "react-player";
 import NoZoomImage from "@site/src/components/NoZoomImage";
 
 There are **several reasons** why you might be **unable to see logs** in the audit log page.

docs/tutorials/player_with_controlls.js

@@ -1,19 +1,7 @@
-import React from "react";
+import React, { useRef } from "react";
 import ReactPlayer from "react-player";
-import { useRef } from "react";
 
 export const PlayerWithControlls = () => {
-  let player = useRef(null);
-  return(
-    <>
-      <ReactPlayer
-        controls
-        ref={(p) => {
-          player = p;
-        }}
-        url="/video/Mcdonalds-onboarding.mp4"
-      />
-      {/* <a onClick={() => player.seekTo(12.7)}>Seek to 12.7</a> */}
-    </>
-  );
+  const player = useRef(null);
+  return <ReactPlayer ref={player} controls src="/video/Mcdonalds-onboarding.mp4" />;
 };

docusaurus.config.js

@@ -1,4 +1,3 @@
-/* eslint-disable spellcheck/spell-checker */
 // @ts-check
 // Note: type annotations allow type checking and IDEs autocompletion
 // require("@babel/register")({
@@ -59,7 +58,10 @@ const config = {
         },
         blog: false, // disables docusaurus blog
         theme: {
-          customCss: require.resolve("./src/css/custom.scss"),
+          customCss: [
+            require.resolve("./src/css/tailwind.css"),
+            require.resolve("./src/css/custom.scss"),
+          ],
         },
       },
     ],
@@ -549,7 +551,7 @@ const config = {
               "/ai-security/mcp-permissions/overview/",
               "/ai-security/mcp-permissions/",
             ],
-            to: "/permit-mcp-gateway/guide/"
+            to: "/permit-mcp-gateway/guide/",
           },
         ],
       },
@@ -561,9 +563,8 @@ const config = {
       return {
         name: "docusaurus-tailwindcss",
         configurePostCss(postcssOptions) {
-          // Appends TailwindCSS and AutoPrefixer.
-          postcssOptions.plugins.push(require("tailwindcss"));
-          postcssOptions.plugins.push(require("autoprefixer"));
+          // Tailwind CSS v4 PostCSS plugin (handles vendor prefixing itself).
+          postcssOptions.plugins.push(require("@tailwindcss/postcss"));
           return postcssOptions;
         },
       };
@@ -595,7 +596,7 @@ const config = {
       mermaid: {
         options: {
           themeVariables: {
-            edgeLabelBackground: '#EEEEEE',
+            edgeLabelBackground: "#EEEEEE",
           },
         },
       },

eslint.config.js

@@ -0,0 +1,41 @@
+const react = require("eslint-plugin-react");
+const prettierRecommended = require("eslint-plugin-prettier/recommended");
+
+// Flat config for ESLint 9+/10. Mirrors the previous .eslintrc.js:
+// react/recommended + prettier/recommended, JS/JSX only. The spellcheck plugin
+// was dropped (unmaintained, no flat-config support); cspell.json covers spelling.
+module.exports = [
+  {
+    ignores: ["build/**", ".docusaurus/**", ".cache-loader/**", "node_modules/**", "static/**"],
+  },
+  {
+    ...react.configs.flat.recommended,
+    files: ["**/*.{js,jsx,mjs,cjs}"],
+  },
+  {
+    // React 17+ automatic JSX runtime — disables react-in-jsx-scope / jsx-uses-react.
+    ...react.configs.flat["jsx-runtime"],
+    files: ["**/*.{js,jsx,mjs,cjs}"],
+  },
+  prettierRecommended,
+  {
+    files: ["**/*.{js,jsx,mjs,cjs}"],
+    languageOptions: {
+      ecmaVersion: "latest",
+      sourceType: "module",
+      parserOptions: {
+        ecmaFeatures: { jsx: true },
+      },
+    },
+    settings: {
+      // Pinned (not "detect") because eslint-plugin-react@7's version-detection
+      // path calls the context.getFilename() API removed in ESLint 10.
+      react: { version: "19.2.7" },
+    },
+    rules: {
+      "react/prop-types": "off",
+      "no-unused-vars": ["warn", { vars: "all", args: "after-used", ignoreRestSiblings: false }],
+      "prettier/prettier": ["error", { endOfLine: "auto" }],
+    },
+  },
+];