Erin/astro switch

.devcontainer/Dockerfile

@@ -0,0 +1,10 @@
+FROM node:24-slim
+RUN apt update && apt install -y --no-install-recommends ca-certificates git git-lfs sudo \
+ && echo "node ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/node \
+ && chmod 0440 /etc/sudoers.d/node
+RUN corepack enable
+WORKDIR /app
+
+USER node
+
+CMD ["/bin/bash"]

.devcontainer/devcontainer.json

@@ -0,0 +1,41 @@
+// For format details, see https://aka.ms/devcontainer.json. For config options, see the
+// README at: https://github.com/devcontainers/templates/tree/main/src/docker-existing-dockerfile
+{
+    "name": "Existing Dockerfile",
+    "build": {
+        // Sets the run context to one level up instead of the .devcontainer folder.
+        "context": "..",
+        // Update the 'dockerFile' property if you aren't using the standard 'Dockerfile' filename.
+        "dockerfile": "./Dockerfile"
+    },
+
+    // Features to add to the dev container. More info: https://containers.dev/features.
+    // "features": {},
+
+    // Use 'forwardPorts' to make a list of ports inside the container available locally.
+    // "forwardPorts": [],
+
+    // Explicitly publish port (required for Podman to forward it).
+    "runArgs": ["-p=4321:4321"],
+
+    "postCreateCommand": "",
+
+    "mounts": ["source=devcontainer-bash-history,target=/history,type=volume"],
+
+    // Configure tool-specific properties.
+    "customizations": {
+        "vscode": {
+            "extensions": [
+                "astro-build.astro-vscode",
+                "unifiedjs.vscode-mdx",
+                "Vue.volar"
+            ]
+        }
+    },
+
+    "remoteUser": "node",
+    "updateRemoteUserUID": true
+
+    // Uncomment to connect as an existing user other than the container default. More info: https://aka.ms/dev-containers-non-root.
+    // "remoteUser": "devcontainer"
+}

.git-blame-ignore-revs

@@ -0,0 +1,5 @@
+# first pass of prettier
+0e21576c024b26dc134de42335d81f278e5b9f10
+
+# another minor format
+488d8aae38e9df19808a745e88cc82990e3f3418

.github/dependabot.yml

@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    reviewers:
+      - "system76/web-engineering"
+
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    reviewers:
+      - "system76/web-engineering"

.github/workflows/ci.yml

@@ -3,24 +3,26 @@ name: CI
 on:
   pull_request:
     types: [opened, reopened, synchronize]
-  push:
-    branches:
-      - '!master'
 
 jobs:
-  Build:
+  Lint:
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #v6.0.3
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 #v6.0.8
+
+      - name: Setup Node
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #v6.4.0
         with:
-            lfs: true
+          node-version: 24
+          cache: pnpm
 
-      - name: Install mdBook
-        env:
-          MDBOOK_VERSION: 0.5.2
-        run: curl -sSL https://github.com/rust-lang/mdBook/releases/download/v${MDBOOK_VERSION}/mdbook-v${MDBOOK_VERSION}-x86_64-unknown-linux-gnu.tar.gz | tar -xz --directory=/usr/local/bin
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile --dev
 
-      - name: Build
-        run: mdbook build
+      - name: Format check
+        run: pnpm format:check

.github/workflows/deploy-prod.yml

@@ -11,21 +11,47 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #v6.0.3
         with:
+            fetch-depth: 0
             lfs: true
 
-      - name: Install mdBook
+      - name: Setup pnpm
+        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 #v6.0.8
+
+      - name: Setup Node
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #v6.4.0
+        with:
+          node-version: 24
+          cache: pnpm
+
+      - name: Restore cache from S3
+        run: |
+          aws s3 cp s3://${{ secrets.STAGING_AWS_S3_BUCKET }}/cache/${{ github.event.repository.name }}/astro-cache.tar.zst astro-cache.tar.zst || true
+          tar -xf astro-cache.tar.zst --use-compress-program "zstdmt" || true
         env:
-          MDBOOK_VERSION: 0.5.2
-        run: curl -sSL https://github.com/rust-lang/mdBook/releases/download/v${MDBOOK_VERSION}/mdbook-v${MDBOOK_VERSION}-x86_64-unknown-linux-gnu.tar.gz | tar -xz --directory=/usr/local/bin
+          AWS_ACCESS_KEY_ID: ${{ secrets.STAGING_AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.STAGING_AWS_SECRET_ACCESS_KEY }}
+          AWS_DEFAULT_REGION: ${{ secrets.STAGING_AWS_REGION }}
+
+      - name: Install
+        run: pnpm install --frozen-lockfile --prod
 
       - name: Build
-        run: mdbook build
+        run: pnpm build
+
+      - name: Save cache to S3
+        run: |
+          tar -cf astro-cache.tar.zst node_modules/.astro --use-compress-program "zstdmt" || true
+          aws s3 cp astro-cache.tar.zst s3://${{ secrets.STAGING_AWS_S3_BUCKET }}/cache/${{ github.event.repository.name }}/astro-cache.tar.zst || true
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.STAGING_AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.STAGING_AWS_SECRET_ACCESS_KEY }}
+          AWS_DEFAULT_REGION: ${{ secrets.STAGING_AWS_REGION }}
 
       - name: Deploy
-        run: aws s3 sync ./book s3://${{ secrets.PRODUCTION_AWS_S3_BUCKET }}/tech-docs --delete
+        run: aws s3 sync ./dist s3://${{ secrets.PRODUCTION_AWS_S3_BUCKET }}/tech-docs --delete
         env:
           AWS_ACCESS_KEY_ID: ${{ secrets.PRODUCTION_AWS_ACCESS_KEY_ID }}
           AWS_SECRET_ACCESS_KEY: ${{ secrets.PRODUCTION_AWS_SECRET_ACCESS_KEY }}
-          AWS_DEFAULT_REGION: ${{ secrets.PRODUCTION_AWS_REGION }}
+          AWS_DEFAULT_REGION: ${{ secrets.PRODUCTION_AWS_REGION }}

.github/workflows/deploy-staging.yml

@@ -11,20 +11,46 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 #v6.0.3
         with:
+            fetch-depth: 0
             lfs: true
 
-      - name: Install mdBook
+      - name: Setup pnpm
+        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 #v6.0.8
+
+      - name: Setup Node
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #v6.4.0
+        with:
+          node-version: 24
+          cache: pnpm
+
+      - name: Restore cache from S3
+        run: |
+          aws s3 cp s3://${{ secrets.STAGING_AWS_S3_BUCKET }}/cache/${{ github.event.repository.name }}/astro-cache.tar.zst astro-cache.tar.zst || true
+          tar -xf astro-cache.tar.zst --use-compress-program "zstdmt" || true
         env:
-          MDBOOK_VERSION: 0.5.2
-        run: curl -sSL https://github.com/rust-lang/mdBook/releases/download/v${MDBOOK_VERSION}/mdbook-v${MDBOOK_VERSION}-x86_64-unknown-linux-gnu.tar.gz | tar -xz --directory=/usr/local/bin
+          AWS_ACCESS_KEY_ID: ${{ secrets.STAGING_AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.STAGING_AWS_SECRET_ACCESS_KEY }}
+          AWS_DEFAULT_REGION: ${{ secrets.STAGING_AWS_REGION }}
+
+      - name: Install
+        run: pnpm install --frozen-lockfile --prod
 
       - name: Build
-        run: mdbook build
+        run: pnpm build
+
+      # - name: Save cache to S3
+      #   run: |
+      #     tar -cf astro-cache.tar.zst node_modules/.astro --use-compress-program "zstdmt"
+      #     aws s3 cp astro-cache.tar.zst s3://${{ secrets.STAGING_AWS_S3_BUCKET }}/cache/${{ github.event.repository.name }}/astro-cache.tar.zst
+      #   env:
+      #     AWS_ACCESS_KEY_ID: ${{ secrets.STAGING_AWS_ACCESS_KEY_ID }}
+      #     AWS_SECRET_ACCESS_KEY: ${{ secrets.STAGING_AWS_SECRET_ACCESS_KEY }}
+      #     AWS_DEFAULT_REGION: ${{ secrets.STAGING_AWS_REGION }}
 
       - name: Deploy
-        run: aws s3 sync ./book s3://${{ secrets.STAGING_AWS_S3_BUCKET }}/tech-docs --delete
+        run: aws s3 sync ./dist s3://${{ secrets.STAGING_AWS_S3_BUCKET }}/tech-docs --delete
         env:
           AWS_ACCESS_KEY_ID: ${{ secrets.STAGING_AWS_ACCESS_KEY_ID }}
           AWS_SECRET_ACCESS_KEY: ${{ secrets.STAGING_AWS_SECRET_ACCESS_KEY }}