Skip to content

Migrate website to Rspress and Zephyr#320

Draft
zackarychapple wants to merge 1 commit into
swc-project:mainfrom
zackarychapple:codex/migrate-website-rspress-zephyr
Draft

Migrate website to Rspress and Zephyr#320
zackarychapple wants to merge 1 commit into
swc-project:mainfrom
zackarychapple:codex/migrate-website-rspress-zephyr

Conversation

@zackarychapple

Copy link
Copy Markdown

Summary

  • Replace the Next.js/Nextra website with an Rspress v2 site configured for Zephyr Cloud deployment.
  • Move static assets under the Rspress content root and convert navigation/sidebar metadata to Rspress JSON metadata.
  • Add Rspress compatibility components, client redirects for legacy routes, and a static compatibility redirect for the previously broken /docs/getting-started/getting-started.html URL.
  • Replace the old Vercel footer branding with "Powered by Zephyr Cloud".
  • Update the root build script so Zephyr builds the swc-site package without running the unrelated plugins app Turbo build.

Why

Zephyr needs the Rspress SSG output to include all static files. The site now builds with ssg: true, uses zephyr-rspress-plugin, and deploys the rendered doc_build output.

The broad client redirect rule for /docs was also rewriting valid docs paths into nested paths like /docs/getting-started/getting-started.html; the redirect patterns are now exact-path regexes, and that nested path has a real static redirect file for compatibility.

Validation

@vercel

vercel Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
website Error Error Jul 8, 2026 5:33am

Request Review

@vercel

vercel Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

@zackarychapple is attempting to deploy a commit to the SWC Project Team on Vercel.

A member of the Team first needs to authorize it.

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​rspress/​plugin-client-redirects@​2.0.16801006698100
Addedzephyr-rspress-plugin@​1.1.274100999980
Added@​rspress/​core@​2.0.16941008198100
Addedreact@​19.2.71001008497100
Addedreact-chartjs-2@​5.3.11001009285100
Addedchart.js@​4.5.11001008685100
Addedreact-dom@​19.2.71001009298100

View full report

@socket-security

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @emnapi/runtime is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/next@15.4.9npm/zephyr-rspress-plugin@1.1.2npm/@rspress/core@2.0.16npm/sharp@0.33.5npm/eslint-config-next@15.3.0npm/@emnapi/runtime@1.11.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@emnapi/runtime@1.11.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm webpack is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/zephyr-rspress-plugin@1.1.2npm/webpack@5.108.4

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/webpack@5.108.4. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants