🐛 Add ignored vulnerabilities for VitePress dependency

[Friedinger]

This pull request adds a new ignored vulnerability to the osv-scanner.toml configuration, documenting the reason for ignoring it until a dependency can be upgraded. No other changes are included.

• docs/osv-scanner.toml: Added an entry to ignore vulnerability GHSA-g7r4-m6w7-qqqr, with a note explaining it's due to a dependency in VitePress v1 and will be tracked until an upgrade to v2 is available.

[coderabbitai]

Walkthrough

Adds an OSV Scanner configuration entry to temporarily ignore GHSA-g7r4-m6w7-qqqr while VitePress v1 depends on the affected esbuild version.

Changes

OSV vulnerability ignore

Layer / File(s)	Summary
Temporary vulnerability ignore docs/osv-scanner.toml	Adds an IgnoredVulns entry with the vulnerability ID and explanatory reason.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Poem

A bunny found a warning bright,
And tucked it safely out of sight.
“Just till VitePress hops anew,
Then we’ll revisit what to do.”
Carrots cheer the config light!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly reflects the main change: adding an ignored vulnerability entry for the VitePress dependency.
Description check	✅ Passed	The description matches the changeset and accurately explains the ignored vulnerability and its temporary reason.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/osv-scan-ignore

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

🧹 Nitpick comments (1)

docs/osv-scanner.toml (1)

1-3: 🔒 Security & Privacy | 🔵 Trivial | ⚡ Quick win

Bound this temporary vulnerability exception.

Because this is explicitly temporary, add an ignoreUntil review/expiry date instead of relying only on a prose reminder. OSV Scanner supports expiry dates for ignored vulnerabilities. (google.github.io)

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/osv-scanner.toml` around lines 1 - 3, Update the IgnoredVulns entry for
GHSA-g7r4-m6w7-qqqr with an OSV Scanner-supported ignoreUntil review/expiry
date, while preserving the existing reason and vulnerability ID.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@docs/osv-scanner.toml`:
- Around line 1-3: Update the IgnoredVulns entry for GHSA-g7r4-m6w7-qqqr with an
OSV Scanner-supported ignoreUntil review/expiry date, while preserving the
existing reason and vulnerability ID.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 0bf5320f-362b-4172-b280-1098d3b072b7

📥 Commits

Reviewing files that changed from the base of the PR and between 97e6ad2 and 600cb32.

📒 Files selected for processing (1)

• docs/osv-scanner.toml