chore: add minimum release age (4320m) for supply-chain security (#482)

* chore: add minimum release age (4320m) for supply-chain security

Adds a minimum release age setting so freshly published package versions
must age before they can be installed. This reduces exposure to
compromised packages published as part of supply-chain attacks.

* Migrate docs to Starlight

Author: nie7321

.github/dependabot.yml

@@ -6,7 +6,7 @@ updates:
       interval: daily
 
   - package-ecosystem: npm
-    directory: "/"
+    directory: "/docs"
     schedule:
       interval: daily
 

.github/workflows/deploy-docs.yml

@@ -11,29 +11,31 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [20.x]
+        node-version: [24.x]
 
     steps:
     - uses: actions/checkout@v4
 
     - name: Install pnpm
       uses: pnpm/action-setup@v4
       with:
-        version: 8.x.x
+        version: 10.x.x
 
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ matrix.node-version }}
         cache: 'pnpm'
+        cache-dependency-path: docs/pnpm-lock.yaml
 
     - name: Install and Build 🔧
       run: |
+        cd docs
         pnpm install
-        pnpm docs:build
+        pnpm build
 
     - name: Deploy 🚀
       uses: JamesIves/github-pages-deploy-action@v4
       with:
         branch: gh-pages
-        folder: docs/.vuepress/dist
+        folder: docs/dist

.github/workflows/test-docs.yml

@@ -10,23 +10,25 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [20.x]
+        node-version: [24.x]
 
     steps:
     - uses: actions/checkout@v4
 
     - name: Install pnpm
       uses: pnpm/action-setup@v4
       with:
-        version: 8.x.x
+        version: 10.x.x
 
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ matrix.node-version }}
         cache: 'pnpm'
+        cache-dependency-path: docs/pnpm-lock.yaml
 
     - name: Install and Build 🔧
       run: |
+        cd docs
         pnpm install
-        pnpm docs:build
+        pnpm build

.gitignore

@@ -1,4 +1,5 @@
-/node_modules
+/docs/.astro
+/docs/node_modules
 /public/hot
 /public/storage
 /storage/*.key
@@ -22,7 +23,4 @@ yarn-error.log
 .vapor/
 /.idea
 composer.lock
-/docs/.vuepress/dist
-/docs/.vuepress/.cache
-/docs/.vuepress/.temp
-/docs/.build
+/docs/dist