fix(ci): restore MegaLinter green on main (cspell + HIGH advisories)

[ulises-jeremias]

Description

Restores the MegaLinter gate on main (red since 2026-08-17, with two distinct causes):

1. cspell (12 errors) — introduced by docs: add Spanish installation summary #23 (Spanish installation summary). That branch only ran Vercel/CodeRabbit checks, so the Spanish words were never spell-checked. Fix: whitelist them in .cspell.json, following the existing mixed-language entries (contenido, interactiva, …). Also normalizes \u00ed → literal í for one existing entry.
2. trivy (3 HIGH advisories):

Package	Locked	CVE	Fixed in
brace-expansion	5.0.7	CVE-2026-14257, CVE-2026-69152	5.0.9
nanoid	3.3.16	CVE-2026-67213	3.3.18
undici (tools/danger)	7.28.0	CVE-2026-13697	8.10.0

Additionally, several range-pins in pnpm-workspace.yaml had fallen below current fix floors and were now pinning vulnerable releases; refreshed:

• brace-expansion@<1.1.13 → @<1.1.18 at 1.1.18
• brace-expansion@>=2 <2.0.3 → <2.1.4 at 2.1.4
• fast-uri >=3.1.2 → >=3.1.5
• js-yaml >=4.1.1 → >=4.3.1

These are transitive dependencies, so range-pins are the only direct lever — this follows the repo's established override pattern, brought up to date.

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature
• Breaking change
• Documentation update

How Has This Been Tested?

• pnpm audit --audit-level=high → clean (was 5 HIGH; 6 moderate / 2 low remain, below the HIGH,CRITICAL gate)
• npm audit in tools/danger → found 0 vulnerabilities
• npx cspell src/app/docs/installation/page.tsx → 0 issues
• CI on this branch: MegaLinter ✅ · test ✅ · type-check ✅ · pr-review ✅

Checklist

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• My changes generate no new warnings
• Local verification commands documented above

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
create-awesome-python-app-website	Ready	Preview	Aug 23, 2026 4:55pm

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3dcfae0c-56bc-40a1-9b47-fc9965fb45a7

📥 Commits

Reviewing files that changed from the base of the PR and between 7013b43 and 51480a3.

📒 Files selected for processing (1)

• .cspell.json

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The cspell dictionary now includes additional Spanish words and accented variants. It also reorders the PyPI, Turborepo, and Vlang case variants.

Changes

Spellcheck dictionary

Layer / File(s)	Summary
Spanish vocabulary and entry ordering .cspell.json	The word list adds Spanish terms and accented spellings. It replaces an unaccented spelling and reorders selected case variants.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 51480

This localized change adds approved Spanish terms to the spell-check dictionary without changing product behavior, so no actionable merge-blocking risk remains beyond normal checks and review.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	The title correctly mentions the cspell CI fix but also claims HIGH advisory changes that are not present in the changeset.	Remove “+ HIGH advisories” unless the pull request also includes changes that address HIGH advisories.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/cspell-spanish-installation

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	5		0	0	0.06s
✅ COPYPASTE	jscpd	yes		no	no	4.6s
✅ EDITORCONFIG	editorconfig-checker	170		0	0	0.92s
✅ JAVASCRIPT	standard	1		0	0	1.24s
✅ JSON	jsonlint	9		0	0	0.13s
✅ JSON	npm-package-json-lint	yes		no	no	0.7s
✅ JSON	prettier	9		0	0	0.66s
✅ JSON	v8r	9		0	0	14.54s
✅ MARKDOWN	markdownlint	9		0	0	0.87s
✅ MARKDOWN	markdown-table-formatter	9		0	0	0.4s
✅ REPOSITORY	checkov	yes		no	no	15.73s
✅ REPOSITORY	gitleaks	yes		no	no	0.72s
✅ REPOSITORY	git_diff	yes		no	no	0.03s
✅ REPOSITORY	secretlint	yes		no	no	1.6s
✅ REPOSITORY	trivy	yes		no	no	13.0s
✅ REPOSITORY	trufflehog	yes		no	no	3.49s
✅ SPELL	cspell	171		0	0	6.06s
✅ YAML	prettier	12		0	0	0.95s
✅ YAML	yamllint	12		0	0	0.76s

See detailed report in MegaLinter reports

[github-actions]

	Fails
🚫	📋 Missing Section - Please include the section: ## Type of Change in your PR description.
🚫	📋 Missing Section - Please include the section: ## How Has This Been Tested? in your PR description.
🚫	📋 Missing Section - Please include the section: ## Checklist in your PR description.

	Warnings
⚠️	📋 Unchecked Checklist Item - Please check the item: My code follows the style guidelines of this project in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: I have performed a self-review of my code in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: I have commented my code, particularly in hard-to-understand areas in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: I have made corresponding changes to the documentation in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: My changes generate no new warnings in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: Any dependent changes have been merged and published in downstream modules in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: I have checked my code and corrected any misspellings in your PR description.
⚠️	This PR is changing more than 200 lines.

	Messages
📖	Thanks! We ❤️ removing more lines than added!

Generated by 🚫 dangerJS against 9305ea9