feat(remark-lint): add

.github/workflows/publish-packages.yml

@@ -72,13 +72,25 @@ jobs:
             # If a specific package is requested via workflow_dispatch, just publish that one
             echo "matrix={\"package\":[\"$PACKAGE\"]}" >> $GITHUB_OUTPUT
           else
-            # Otherwise, identify all packages with changes since the last commit
             CHANGED_PACKAGES=()
             for pkg in $(ls -d packages/*); do
               PKG_NAME=$(basename "$pkg")
-              # For manual runs, include all packages. For automatic runs, only include packages with changes
+              PKG_JSON="$pkg/package.json"
+
+              # Determine if the package has changed (or include all on manual trigger)
               if [ "$EVENT_NAME" == "workflow_dispatch" ] || ! git diff --quiet $COMMIT_SHA~1 $COMMIT_SHA -- "$pkg/"; then
-                CHANGED_PACKAGES+=("$PKG_NAME")
+                HAS_VERSION=$(jq 'has("version")' "$PKG_JSON")
+                if [ "$HAS_VERSION" == "false" ]; then
+                  # Include packages without version field
+                  CHANGED_PACKAGES+=("$PKG_NAME")
+                else
+                  # For packages with version field, include only if version changed
+                  OLD_VERSION=$(git show $COMMIT_SHA~1:$PKG_JSON | jq -r '.version')
+                  NEW_VERSION=$(jq -r '.version' "$PKG_JSON")
+                  if [ "$OLD_VERSION" != "$NEW_VERSION" ]; then
+                    CHANGED_PACKAGES+=("$PKG_NAME")
+                  fi
+                fi
               fi
             done
 
@@ -120,8 +132,12 @@ jobs:
         run: |
           # Install deps
           pnpm install --frozen-lockfile
-          # Create a unique version using the commit SHA as a prerelease identifier
-          npm version --no-git-tag-version 1.0.1-$COMMIT_SHA
+
+          HAS_VERSION=$(jq 'has("version")' package.json)
+          if [ "$HAS_VERSION" == "false" ]; then
+            # Only bump version if package has no version field
+            npm version --no-git-tag-version 1.0.1-$COMMIT_SHA
+          fi
 
           # Check if a custom publish script exists in package.json
           if jq -e '.scripts.publish' package.json > /dev/null; then

apps/site/.remarkrc.json

@@ -1,21 +1,3 @@
 {
-  "settings": {
-    "bullet": "-",
-    "resourceLink": true
-  },
-  "plugins": [
-    "remark-frontmatter",
-    "remark-preset-lint-node",
-    ["remark-gfm", false],
-    ["remark-lint-fenced-code-flag", false],
-    ["remark-lint-first-heading-level", false],
-    ["remark-lint-maximum-line-length", false],
-    ["remark-lint-no-file-name-articles", false],
-    ["remark-lint-no-literal-urls", false],
-    ["remark-lint-no-unused-definitions", false],
-    ["remark-lint-no-undefined-references", false],
-    ["remark-lint-prohibited-strings", false],
-    ["remark-lint-unordered-list-marker-style", "-"],
-    ["remark-preset-lint-node/remark-lint-nodejs-links.js", false]
-  ]
+  "plugins": ["remark-frontmatter", "@node-core/remark-lint"]
 }

apps/site/package.json

@@ -82,6 +82,7 @@
     "@eslint/eslintrc": "~3.3.1",
     "@flarelabs-net/wrangler-build-time-fs-assets-polyfilling": "^0.0.1",
     "@next/eslint-plugin-next": "15.4.4",
+    "@node-core/remark-lint": "workspace:*",
     "@opennextjs/cloudflare": "^1.6.4",
     "@playwright/test": "^1.54.1",
     "@testing-library/user-event": "~14.6.1",
@@ -95,17 +96,7 @@
     "global-jsdom": "^26.0.0",
     "handlebars": "4.7.8",
     "jsdom": "^26.0.0",
-    "remark-frontmatter": "5.0.0",
-    "remark-lint-fenced-code-flag": "^4.2.0",
-    "remark-lint-first-heading-level": "^4.0.1",
-    "remark-lint-maximum-line-length": "^4.1.1",
-    "remark-lint-no-file-name-articles": "^3.0.1",
-    "remark-lint-no-literal-urls": "^4.0.1",
-    "remark-lint-no-undefined-references": "^5.0.2",
-    "remark-lint-no-unused-definitions": "^4.0.2",
-    "remark-lint-prohibited-strings": "^4.0.0",
-    "remark-lint-unordered-list-marker-style": "^4.0.1",
-    "remark-preset-lint-node": "5.1.2",
+    "remark-frontmatter": "^5.0.0",
     "stylelint": "16.23.0",
     "stylelint-config-standard": "39.0.0",
     "stylelint-order": "7.0.0",

apps/site/pages/en/blog/npm/managing-node-js-dependencies-with-shrinkwrap.md

@@ -29,7 +29,7 @@ You can address a simple case of this problem by only depending on specific vers
 
 ## Shrinkwrapping packages
 
-That brings us to [npm shrinkwrap](https://npmjs.com/doc/shrinkwrap.html)<a href="#note1-note" id="note1-top">[1]</a>:
+That brings us to [npm shrinkwrap](https://npmjs.com/doc/shrinkwrap.html)<a href="#note1-note" id="note1-top">\[1]</a>:
 
 ```
 NAME
@@ -85,15 +85,15 @@ [email protected]
   └── [email protected]
 ```
 
-Then if B\@0.0.2 is published, then a fresh "npm install A" will install:
+Then if [email protected] is published, then a fresh "npm install A" will install:
 
 ```
 [email protected]
 └─┬ [email protected]
   └── [email protected]
 ```
 
-assuming the new version did not modify B's dependencies. Of course, the new version of B could include a new version of C and any number of new dependencies. As we said before, if A's author doesn't want that, she could specify a dependency on B\@0.0.1. But if A's author and B's author are not the same person, there's no way for A's author to say that she does not want to pull in newly published versions of C when B hasn't changed at all.
+assuming the new version did not modify B's dependencies. Of course, the new version of B could include a new version of C and any number of new dependencies. As we said before, if A's author doesn't want that, she could specify a dependency on [email protected]. But if A's author and B's author are not the same person, there's no way for A's author to say that she does not want to pull in newly published versions of C when B hasn't changed at all.
 
 In this case, A's author can use
 
@@ -117,7 +117,7 @@ This generates npm-shrinkwrap.json, which will look something like this:
 }
 ```
 
-The shrinkwrap command has locked down the dependencies based on what's currently installed in node_modules. **When "npm install" installs a package with a npm-shrinkwrap.json file in the package root, the shrinkwrap file (rather than package.json files) completely drives the installation of that package and all of its dependencies (recursively).** So now the author publishes A\@0.1.0, and subsequent installs of this package will use B\@0.0.1 and C\@0.1.0, regardless the dependencies and versions listed in A's, B's, and C's package.json files. If the authors of B and C publish new versions, they won't be used to install A because the shrinkwrap refers to older versions. Even if you generate a new shrinkwrap, it will still reference the older versions, since "npm shrinkwrap" uses what's installed locally rather than what's available in the registry.
+The shrinkwrap command has locked down the dependencies based on what's currently installed in node_modules. **When "npm install" installs a package with a npm-shrinkwrap.json file in the package root, the shrinkwrap file (rather than package.json files) completely drives the installation of that package and all of its dependencies (recursively).** So now the author publishes [email protected], and subsequent installs of this package will use [email protected] and [email protected], regardless the dependencies and versions listed in A's, B's, and C's package.json files. If the authors of B and C publish new versions, they won't be used to install A because the shrinkwrap refers to older versions. Even if you generate a new shrinkwrap, it will still reference the older versions, since "npm shrinkwrap" uses what's installed locally rather than what's available in the registry.
 
 ### Using shrinkwrapped packages
 
@@ -144,14 +144,14 @@ For more details, check out the full docs on [npm shrinkwrap](https://npmjs.com/
 
 ## Why not just check `node_modules` into git?
 
-One previously [proposed solution](http://www.mikealrogers.com/posts/nodemodules-in-git.html) is to "npm install" your dependencies during development and commit the results into source control. Then you deploy your app from a specific git SHA knowing you've got exactly the same bits that you tested in development. This does address the problem, but it has its own issues: for one, binaries are tricky because you need to "npm install" them to get their sources, but this builds the \[system-dependent\] binary too. You can avoid checking in the binaries and use "npm rebuild" at build time, but we've had a lot of difficulty trying to do this.<a href="#note2-note" id="note2-top">[2]</a> At best, this is second-class treatment for binary modules, which are critical for many important types of Node applications.<a href="#note3-note" id="note3-top">[3]</a>
+One previously [proposed solution](http://www.mikealrogers.com/posts/nodemodules-in-git.html) is to "npm install" your dependencies during development and commit the results into source control. Then you deploy your app from a specific git SHA knowing you've got exactly the same bits that you tested in development. This does address the problem, but it has its own issues: for one, binaries are tricky because you need to "npm install" them to get their sources, but this builds the \[system-dependent] binary too. You can avoid checking in the binaries and use "npm rebuild" at build time, but we've had a lot of difficulty trying to do this.<a href="#note2-note" id="note2-top">\[2]</a> At best, this is second-class treatment for binary modules, which are critical for many important types of Node applications.<a href="#note3-note" id="note3-top">\[3]</a>
 
-Besides the issues with binary modules, this approach just felt wrong to many of us. There's a reason we don't check binaries into source control, and it's not just because they're platform-dependent. (After all, we could build and check in binaries for all supported platforms and operating systems.) It's because that approach is error-prone and redundant: error-prone because it introduces a new human failure mode where someone checks in a source change but doesn't regenerate all the binaries, and redundant because the binaries can always be built from the sources alone. An important principle of software version control is that you don't check in files derived directly from other files by a simple transformation.<a href="#note4-note" id="note4-top">[4]</a>
+Besides the issues with binary modules, this approach just felt wrong to many of us. There's a reason we don't check binaries into source control, and it's not just because they're platform-dependent. (After all, we could build and check in binaries for all supported platforms and operating systems.) It's because that approach is error-prone and redundant: error-prone because it introduces a new human failure mode where someone checks in a source change but doesn't regenerate all the binaries, and redundant because the binaries can always be built from the sources alone. An important principle of software version control is that you don't check in files derived directly from other files by a simple transformation.<a href="#note4-note" id="note4-top">\[4]</a>
 Instead, you check in the original sources and automate the transformations via the build process.
 
 Dependencies are just like binaries in this regard: they're files derived from a simple transformation of something else that is (or could easily be) already available: the name and version of the dependency. Checking them in has all the same problems as checking in binaries: people could update package.json without updating the checked-in module (or vice versa). Besides that, adding new dependencies has to be done by hand, introducing more opportunities for error (checking in the wrong files, not checking in certain files, inadvertently changing files, and so on). Our feeling was: why check in this whole dependency tree (and create a mess for binary add-ons) when we could just check in the package name and version and have the build process do the rest?
 
-Finally, the approach of checking in node*modules doesn't really scale for us. We've got at least a dozen repos that will use restify, and it doesn't make sense to check that in everywhere when we could instead just specify which version each one is using. There's another principle at work here, which is **separation of concerns**: each repo specifies \_what* it needs, while the build process figures out _where to get it_.
+Finally, the approach of checking in nod&#x65;_&#x6D;odules doesn't really scale for us. We've got at least a dozen repos that will use restify, and it doesn't make sense to check that in everywhere when we could instead just specify which version each one is using. There's another principle at work here, which is **separation of concerns**: each repo specifies \_what_ it needs, while the build process figures out _where to get it_.
 
 ## What if an author republishes an existing version of a package?
 

apps/site/pages/en/blog/release/v0.10.33.md

@@ -20,14 +20,14 @@ the default allowed protocols do not include SSLv2 or SSLv3. Though you are
 still able to programatically consume those protocols if necessary.
 
 Included is the documentation that you can find at
-https://nodejs.org/api/tls.html#tls_protocol_support that describes how this
+https://nodejs.org/api/tls.html#tls\_protocol\_support that describes how this
 works going forward for client and server implementations.
 
 ---
 
 Node.js is compiled with SSLv2 and SSLv3 protocol support by default, but these
 protocols are **disabled**. They are considered insecure and could be easily
-compromised as was shown by [CVE-2014-3566][]. However, in some situations, it
+compromised as was shown by \[CVE-2014-3566]\[]. However, in some situations, it
 may cause problems with legacy clients/servers (such as Internet Explorer 6).
 If you wish to enable SSLv2 or SSLv3, run node with the `--enable-ssl2` or
 `--enable-ssl3` flag respectively. In future versions of Node.js SSLv2 and