Merge branch 'master' into dependabot/npm_and_yarn/webpack-5.102.1

dannystaple · web-flow · commit df0d81551b73 · 2025-11-04T11:11:28.000Z
diff --git a/.github/scripts/new_post.sh b/.github/scripts/new_post.sh
@@ -5,7 +5,6 @@
 
 set -eu -o pipefail
 
-
 function slug_from_title_and_date {
     echo "$POST_DAY-$1" | tr '[:upper:]' '[:lower:]' | tr -s ' ' '-' | tr -s '[:punct:]' '-'
 }
diff --git a/.github/workflows/on_call_build_site.yaml b/.github/workflows/on_call_build_site.yaml
@@ -17,21 +17,23 @@ jobs:
       DOCKER_BUILDKIT: 1
       COMPOSE_DOCKER_CLI_BUILD: 1
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
       - name: Login to Docker
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ github.token }}
 
       - name: Build base image
+        env:
+          push_tag: ${{inputs.push_tag || 'temp' }}
         run: |
-          docker build --target base -t ghcr.io/orionrobots/orionrobots-site.base:${{ inputs.push_tag || 'temp' }} .
+          docker build --target base -t "ghcr.io/orionrobots/orionrobots-site.base:${push_tag}" .
 
       - name: Build the site with docker compose
         run: |
@@ -42,20 +44,22 @@ jobs:
           tar -czf _site.tar.gz _site
 
       - name: upload site artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: _site
           path: _site.tar.gz
           if-no-files-found: error
 
       - name: upload httpd.conf artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: httpd.conf
           path: .github/scripts/staging/httpd.conf
           if-no-files-found: error
 
       - name: Push base image
         if: inputs.push_tag
+        env:
+          push_tag: ${{inputs.push_tag }}
         run: |
-          docker push ghcr.io/orionrobots/orionrobots-site.base:${{ inputs.push_tag }}
+          docker push "ghcr.io/orionrobots/orionrobots-site.base:${push_tag}"
diff --git a/.github/workflows/on_call_staging_test.yaml b/.github/workflows/on_call_staging_test.yaml
@@ -14,18 +14,18 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - name: Fetch site artifact
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: _site
       - name: extract site artifact
         run: |
           tar -xzf _site.tar.gz
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
 
       - name: Login to Docker
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -54,8 +54,8 @@ jobs:
           curl -I -f http://localhost:8080/wiki/lego || exit_code=1
           
           # Run BDD integration tests using docker compose
-          echo "## BDD Test Results" >> $GITHUB_STEP_SUMMARY
-          echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
+          echo "## BDD Test Results" >> "$GITHUB_STEP_SUMMARY"
+          echo "\`\`\`" >> "$GITHUB_STEP_SUMMARY"
           docker compose -f docker-compose.yml -f docker-compose.ci.yml run test 2>&1 | tee bdd_output.txt
           bdd_result=$?
           
@@ -64,13 +64,13 @@ jobs:
           awk '
             /^> orionrobots\.github\.io@/ { found=1 }
             found { print }
-          ' bdd_output.txt >> $GITHUB_STEP_SUMMARY
-          echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
+          ' bdd_output.txt >> "$GITHUB_STEP_SUMMARY"
+          echo "\`\`\`" >> "$GITHUB_STEP_SUMMARY"
           
           if [ $bdd_result -eq 0 ]; then
-            echo "✅ BDD tests passed" >> $GITHUB_STEP_SUMMARY
+            echo "✅ BDD tests passed" >> "$GITHUB_STEP_SUMMARY"
           else
-            echo "❌ BDD tests failed" >> $GITHUB_STEP_SUMMARY
+            echo "❌ BDD tests failed" >> "$GITHUB_STEP_SUMMARY"
             exit_code=1
           fi
           
diff --git a/.github/workflows/on_pr_lint.yaml b/.github/workflows/on_pr_lint.yaml
@@ -28,10 +28,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout source code
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Lint Code Base
         continue-on-error: true
-        uses: oxsecurity/megalinter/flavors/cupcake@v9.0.1
+        uses: oxsecurity/megalinter/flavors/cupcake@v9.1.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/on_push_to_master_test_and_deploy.yaml b/.github/workflows/on_push_to_master_test_and_deploy.yaml
@@ -49,7 +49,7 @@ jobs:
     needs: staging_test
     steps:
       - name: Fetch site artifact
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: _site
 
@@ -58,7 +58,7 @@ jobs:
           tar -xzf _site.tar.gz
 
       - name: Fetch httpd conf artifact
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: httpd.conf
           path: .github/scripts/staging/httpd.conf
@@ -88,16 +88,15 @@ jobs:
       - uses: actions/checkout@v5
 
       - name: Check for workflow changes
-        # tj-actions/changed-files v44.5.7
-        uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62
+        uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0
         id: filter
         with:
           files: |
             .github/workflows/**
 
       # see https://github.com/mcdeck/netlify-cms-oauth-provider-php
       - name: Checkout the netlify-cms-oauth-provider-php
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           repository: mcdeck/netlify-cms-oauth-provider-php
           path: netlify-cms-oauth-provider-php
diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,5 @@
 # Development build - minimal context needed since content is volume-mounted
-FROM node:24-bullseye AS base
+FROM node:25-bullseye AS base
 
 # Create app directory
 WORKDIR /app/src
diff --git a/content/2025/10/18-discovery-magic/18-discovery-magic.md b/content/2025/10/18-discovery-magic/18-discovery-magic.md
@@ -0,0 +1,18 @@
+---
+title: Worlds undiscovered
+date: 2025-09-11
+tags:
+  - Exploration
+  - Learning
+  - Discovery
+  - Robot building
+---
+I still hear phrases like "ruining the magic" when it comes to understanding how stuff like technology, natural processes or cosmic phenomena work. However, I've a different take on this.  
+
+When you understand how some bit of tech works (for example, a mobile phone screen), then sure that no longer feels like magic.
+
+But there's a new awe that comes, "now I know how to make one, or integrate one, or how that thing works, what else might I do with it". Ideas may start to flood in, you may start to recognise the principles elsewhere, and the more you have learned, the more this happens. This continuous personal revelation can be pretty motivating and inspiring. The "Oh!" moments as stuff starts to slot in. The bit where that one tiny bit of maths that escaped you suddenly clicks, and a whole group of other conjectures come from it, which maybe lead you to understand concepts that never quite made sense before.  
+
+There's a phrase that I used to describe programming, but it pretty much describes any realm of exploration and discovery, that there are always "Worlds undiscovered" - new ways to use what you now know, new things to build from the blocks you have, or from the parts in those blocks you can now see, or places to discover from the place you had. And it might be just that tiny incremental bit of understanding, on the edge of your grasp from where you are now - it need not be an arctic trek.
+
+Keep exploring - be it worlds, places, technology, maths, philosophy, science - there are always Worlds Undiscovered!
diff --git a/dev.Dockerfile b/dev.Dockerfile
@@ -1,6 +1,6 @@
 # Minimal development Dockerfile
 # Only installs npm dependencies since content is volume-mounted
-FROM node:24-bullseye AS base
+FROM node:25-bullseye AS base
 
 # Create app directory
 WORKDIR /app/src
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -44,9 +44,9 @@
     "markdown-it-attrs": "^4.3.1",
     "mini-css-extract-plugin": "^2.9.1",
     "moment": "^2.30.1",
-    "playwright": "^1.55.0",
+    "playwright": "^1.56.1",
     "postcss-loader": "^8.1.1",
-    "sass": "^1.89.1",
+    "sass": "^1.93.3",
     "sass-loader": "^16.0.2",
     "slugify": "^1.6.6",
     "source-map-loader": "^5.0.0",

Original file line number	Diff line number	Diff line change
`@@ -5,7 +5,6 @@`
`5`	`5`
`6`	`6`	`set -eu -o pipefail`
`7`	`7`
`8`		`-`
`9`	`8`	`function slug_from_title_and_date {`
`10`	`9`	`echo "$POST_DAY-$1" \| tr '[:upper:]' '[:lower:]' \| tr -s ' ' '-' \| tr -s '[:punct:]' '-'`
`11`	`10`	`}`