Fix to e2e error and github runner secret for dependabot PRs

Author: webstackdev

.github/workflows/deployment-preview.yml

@@ -35,6 +35,7 @@ jobs:
       SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
       VERCEL_ORG_ID: ${{ vars.VERCEL_ORG_ID }}
       VERCEL_PROJECT_ID: ${{ vars.VERCEL_PROJECT_ID }}
+      VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
       WEBMENTION_IO_TOKEN: ${{ secrets.WEBMENTION_IO_TOKEN }}
 
     # Secrets are not available to forked PRs. Also, we don't want to deploy untrusted forks.
@@ -74,12 +75,18 @@ jobs:
           {"projectId":"$VERCEL_PROJECT_ID","orgId":"$VERCEL_ORG_ID","settings":{"framework":"astro","installCommand":"npm ci --force"}}
           EOF
 
+      - name: Skip preview deployment when Vercel token is unavailable
+        if: env.VERCEL_TOKEN == ''
+        run: |
+          echo "Skipping Vercel preview deployment because VERCEL_TOKEN is unavailable for this event."
+          echo "This is expected for Dependabot pull requests and other untrusted contexts where GitHub withholds secrets."
+
       - name: Vercel build (preview)
-        env:
-          VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
-        run: vercel build --token=${VERCEL_TOKEN}
+        if: env.VERCEL_TOKEN != ''
+        run: vercel build --token="${VERCEL_TOKEN}"
 
       - name: Deploy to Vercel (preview)
+        if: env.VERCEL_TOKEN != ''
         uses: ./.github/actions/deploy-to-vercel-action
         with:
           GITHUB_TOKEN: ${{ github.token }}

.github/workflows/deployment-production.yml

@@ -71,7 +71,7 @@ jobs:
         env:
           VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
           NODE_ENV: production
-        run: vercel build --prod --token=${VERCEL_TOKEN}
+        run: vercel build --prod --token="${VERCEL_TOKEN}"
 
       ##
       # This requires Playwright to succeed when triggering e2e tests from a merge_group

.github/workflows/playwright.yml

@@ -160,7 +160,7 @@ jobs:
 
       - name: Upload Playwright report
         if: always()
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: playwright-report
           path: playwright-report/

.github/workflows/test.yml

@@ -75,7 +75,7 @@ jobs:
 
       - name: Upload test coverage
         if: always() && hashFiles('coverage/coverage-summary.json') != ''
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: test-coverage
           path: coverage/

@types/window.d.ts

@@ -112,6 +112,11 @@ declare global {
      * Exposes client environment helper values for diagnostics fixtures.
      */
     environmentClientValues?: EnvironmentClientValues
+
+    /**
+     * Tracks one-time Vercel analytics injection across Astro view transitions.
+     */
+    __webstackAnalyticsInjected?: boolean
   }
 }
 

package.json

@@ -141,7 +141,7 @@
     "astro-link-validator": "github:rodgtr1/astro-link-validator",
     "astro-og-canvas": "^0.11.0",
     "astro-vtbot": "^2.1.12",
-    "baseline-browser-mapping": "^2.10.18",
+    "baseline-browser-mapping": "^2.10.19",
     "canvas-confetti": "^1.9.4",
     "confusing-browser-globals": "1.0.11",
     "cross-env": "^10.1.0",
@@ -243,7 +243,7 @@
     "unist-util-is": "^6.0.1",
     "unist-util-visit": "^5.1.0",
     "uuid": "^13.0.0",
-    "vercel": "^51.2.0",
+    "vercel": "^51.2.1",
     "vite": "^7.3.2",
     "vitest": "4.1.4",
     "vitest-axe": "0.1.0",