website: Various updates to node and website deps (#8768)

Replaces https://github.com/open-policy-agent/opa/pull/8762

Original dependabot updates:

Bumps the website group in /docs with 9 updates:

| Package | From | To |
| --- | --- | --- |
|
[@floating-ui/react](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react)
| `0.27.18` | `0.27.19` |
|
[@iconify/react](https://github.com/iconify/iconify/tree/HEAD/components/react)
| `6.0.0` | `6.0.2` |
| [@mermaid-js/layout-elk](https://github.com/mermaid-js/mermaid) |
`0.1.9` | `0.2.1` |
| [eslint](https://github.com/eslint/eslint) | `9.39.2` | `10.4.1` |
| [glob](https://github.com/isaacs/node-glob) | `11.1.0` | `13.0.6` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) |
`0.21.0` | `0.22.1` |
| [recharts](https://github.com/recharts/recharts) | `3.7.0` | `3.8.1` |
|
[baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping)
| `2.10.20` | `2.10.33` |


I have also made some updates to use node 24.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Charlie Egan <charlie_egan@apple.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/dependabot.yml

@@ -28,6 +28,11 @@ updates:
           - "*"
     cooldown:
       default-days: 7
+    # Remove when @docusaurus/theme-mermaid widens its peer range to accept
+    # @mermaid-js/layout-elk >=0.2.0.
+    ignore:
+      - dependency-name: "@mermaid-js/layout-elk"
+        versions: [">=0.2.0"]
   - package-ecosystem: npm
     directory: /e2e/api/compile/prisma
     schedule:

.github/workflows/pull-request.yaml

@@ -215,7 +215,10 @@ jobs:
         go-version-file: .go-version
 
     - name: Install Node
+      # docs/.nvmrc is the source of truth for the Node version across the repo.
       uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      with:
+        node-version-file: docs/.nvmrc
 
     - name: Download generated artifacts
       uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
@@ -526,8 +529,15 @@ jobs:
       with:
         persist-credentials: false
 
+    - name: Install Node
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      with:
+        node-version-file: docs/.nvmrc
+        cache: npm
+        cache-dependency-path: docs/package-lock.json
+
     - name: Build docs
-      run: make docs-install docs-build
+      run: make docs-ci docs-build
 
   docs-fmt-check:
     name: Docs Format Check
@@ -540,8 +550,15 @@ jobs:
       with:
         persist-credentials: false
 
+    - name: Install Node
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      with:
+        node-version-file: docs/.nvmrc
+        cache: npm
+        cache-dependency-path: docs/package-lock.json
+
     - name: Check docs formatting
-      run: make docs-install docs-fmt-check
+      run: make docs-ci docs-fmt-check
 
   docs-lint-check:
     name: Docs Lint Check
@@ -554,8 +571,15 @@ jobs:
       with:
         persist-credentials: false
 
+    - name: Install Node
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      with:
+        node-version-file: docs/.nvmrc
+        cache: npm
+        cache-dependency-path: docs/package-lock.json
+
     - name: Lint docs
-      run: make docs-install docs-lint-check
+      run: make docs-ci docs-lint-check
 
   docs-markdownlint-check:
     name: Docs Markdownlint Check
@@ -568,8 +592,15 @@ jobs:
       with:
         persist-credentials: false
 
+    - name: Install Node
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      with:
+        node-version-file: docs/.nvmrc
+        cache: npm
+        cache-dependency-path: docs/package-lock.json
+
     - name: Check markdown linting
-      run: make docs-install docs-markdownlint-check
+      run: make docs-ci docs-markdownlint-check
 
   docs-gen-check:
     name: Docs Gen Check

docs/.nvmrc

@@ -0,0 +1 @@
+24

docs/docusaurus.config.js

@@ -508,7 +508,6 @@ The Linux Foundation has registered trademarks and uses trademarks. For a list o
 
           async loadContent() {
             const capabilitiesDir = path.resolve(__dirname, "../capabilities");
-            let sortedVersions = [];
 
             const dirents = await fs.readdir(capabilitiesDir, { withFileTypes: true });
 
@@ -518,7 +517,7 @@ The Linux Foundation has registered trademarks and uses trademarks. For a list o
 
             const validVersions = versionStrings.filter(v => semver.valid(v));
 
-            sortedVersions = semver.sort(validVersions);
+            const sortedVersions = semver.sort(validVersions);
 
             return { versions: sortedVersions };
           },

docs/package.json

@@ -15,24 +15,25 @@
     "@docusaurus/plugin-google-gtag": "^3.10.1",
     "@docusaurus/preset-classic": "^3.10.1",
     "@docusaurus/theme-mermaid": "^3.10.1",
-    "@floating-ui/react": "^0.27.16",
-    "@iconify/react": "^6.0.0",
+    "@eslint/js": "^10.0.1",
+    "@floating-ui/react": "^0.27.19",
+    "@iconify/react": "^6.0.2",
     "@mermaid-js/layout-elk": "^0.1.9",
-    "eslint": "^9.39.2",
-    "glob": "^11.0.3",
-    "js-yaml": "^4.1.0",
-    "markdownlint-cli2": "^0.21.0",
+    "eslint": "^10.4.1",
+    "glob": "^13.0.6",
+    "js-yaml": "^4.2.0",
+    "markdownlint-cli2": "^0.22.1",
     "md-front-matter": "^1.0.4",
     "raw-loader": "^4.0.2",
     "react-markdown": "^10.1.0",
-    "recharts": "3.7.0",
+    "recharts": "3.8.1",
     "turndown": "^7.2.4",
     "turndown-plugin-gfm": "^1.0.2"
   },
   "engines": {
-    "node": ">=22.0.0"
+    "node": ">=24.0.0"
   },
   "devDependencies": {
-    "baseline-browser-mapping": "^2.9.19"
+    "baseline-browser-mapping": "^2.10.33"
   }
 }

netlify.toml

@@ -4,7 +4,9 @@ command = "make netlify-latest"
 edge_functions = "docs/functions"
 
 [build.environment]
-NODE_VERSION = "22.16.0"
+# Keep in sync with docs/.nvmrc — that file is the source of truth for the
+# Node version, but Netlify only auto-detects .nvmrc at the repo root.
+NODE_VERSION = "24"
 # some examples in v1/test/cases/testdata/v0/cryptox509* flag the netlify
 # secret scan
 SECRETS_SCAN_OMIT_PATHS = "v1/test/cases,v1/topdown/crypto_test.go"