Prepare LogStruct 0.2.2 release

.github/dependabot.yml

@@ -27,6 +27,10 @@ updates:
       interval: weekly
     cooldown:
       default-days: 7
+    ignore:
+      # Upgrade Node's runtime and type declarations together.
+      - dependency-name: '@types/node'
+        update-types: [version-update:semver-major]
     groups:
       minor-and-patch:
         update-types: [minor, patch]

CHANGELOG.md

@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.2] - 2026-10-21
+
+### Changed
+
+- **Development**: Update Prettier, cspell and pnpm's setup action. The development tools require Node.js 22.18 or later in the 22.x series.
+- **Docs**: Upgrade the site to Next.js 16 and align its Node type declarations with the Node.js 22 runtime used in CI.
+
 ### Fixed
 
 - **Filtering**: Nested URL query parameters such as `password[]` and `token[value]` are filtered, including URL-encoded names and paths in Rails' `filter_parameters`.
@@ -18,6 +25,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Docs**: Correct the supported security release series and contributor instructions for releases, generated log types and schema fields. Describe size limits as limits per value, not a guarantee on total formatting time. Ensure the site's integration tests run when a local Watchman installation is broken.
 - **Development**: `task ci` verifies committed RBI files, matching GitHub CI, instead of downloading new annotations concurrently with typechecking.
 - **Generation**: A failed formatter or Sorbet JSON export stops code generation instead of leaving incomplete artifacts with a successful exit status.
+- **Development**: Update the locked `crass` dependency to 1.0.7, which fixes a denial-of-service issue in CSS number parsing.
 
 ## [0.2.1] - 2026-10-18
 

DEVELOPMENT.md

@@ -1,5 +1,7 @@
 # Development Guidelines
 
+The development tools require Node.js 22.18 or later in the 22.x series and pnpm 10.18.3. Keep the docs site's `@types/node` major version aligned with the Node.js runtime used in CI.
+
 # Sorbet Usage
 
 - `T::Sig` is not available globally, we must extend it whenever we need it (we're building a library, not an application.)

Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    logstruct (0.2.1)
+    logstruct (0.2.2)
       actionpack (>= 7.1)
       activesupport (>= 7.1)
       globalid (>= 1.0)
@@ -118,7 +118,7 @@ GEM
     concurrent-ruby (1.3.8)
     connection_pool (2.5.0)
     content_disposition (1.0.0)
-    crass (1.0.6)
+    crass (1.0.7)
     dalli (3.2.8)
     date (3.4.1)
     debug (1.10.0)

docs/AGENTS.md

@@ -2,7 +2,8 @@
 
 ## Project Structure & Module Organization
 
-- This directory contains the Next.js docs (TypeScript, React 19, Next 15).
+- This directory contains the Next.js docs (TypeScript, React 19, Next 16).
+- Keep `@types/node` on the same major version as the Node.js runtime used in CI. Upgrade the runtime and its types together.
 - Key paths:
   - `app/` – routes, server and client components
   - `components/` – shared UI components

docs/README.md

@@ -13,7 +13,7 @@ This is the documentation website for the LogStruct gem, built with Next.js and
 
 ### Prerequisites
 
-- Node.js 22 and pnpm 10.18.3 (the versions used in CI)
+- Node.js 22.18 or later in the 22.x series and pnpm 10.18.3 (CI uses Node.js 22)
 - The repository's Ruby version, Bundler and Task, with `bundle install` completed at the repository root
 
 ### Getting Started

docs/package.json

@@ -45,7 +45,7 @@
     "@playwright/test": "^1.64.0",
     "@tailwindcss/postcss": "^4.3.3",
     "@types/jest": "^30.0.0",
-    "@types/node": "^24.19.2",
+    "@types/node": "^22.20.5",
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
     "jest": "^30.5.2",