Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-15252993
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.
This PR is being reviewed by Cursor Bugbot
Details
You are on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle.
To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.
| "@docusaurus/core": "^2.3.1", | ||
| "@docusaurus/preset-classic": "^2.3.1", | ||
| "@docusaurus/core": "^3.0.0", | ||
| "@docusaurus/preset-classic": "^3.0.0", |
There was a problem hiding this comment.
React 16 incompatible with Docusaurus v3 upgrade
High Severity
Upgrading @docusaurus/core and @docusaurus/preset-classic from v2 to ^3.0.0 requires React 18+, but react and react-dom remain pinned at ^16.14.0. Docusaurus v3 has a peer dependency on react >= 18, so this will fail to install (peer dependency conflict) or fail at runtime. Both react and react-dom need to be upgraded to ^18.0.0 as part of this major version bump.


Snyk has created this PR to fix 1 vulnerabilities in the yarn dependencies of this project.
Snyk changed the following file(s):
website/package.jsonNote for zero-installs users
If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the
.yarn/cache/directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to runyarnto update the contents of the./yarn/cachedirectory.If you are not using zero-install you can ignore this as your flow should likely be unchanged.
Vulnerabilities that will be fixed with an upgrade:
SNYK-JS-AXIOS-15252993
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Prototype Pollution
Note
Medium Risk
Major-version dependency upgrade that can introduce breaking changes in the docs site build/runtime. The lockfile does not appear updated, which may cause inconsistent installs in CI or for developers.
Overview
Upgrades the website’s Docusaurus dependencies by bumping
@docusaurus/coreand@docusaurus/preset-classicfrom^2.3.1to^3.0.0to address a reported vulnerability.Written by Cursor Bugbot for commit 492edb2. This will update automatically on new commits. Configure here.