v2068: Migrate Sidebars previews and patch DOMPurify

Samebase-Source-Repository: samebase/samebase
Samebase-Source-Commit: 7884296639df77b24c4f9e3242c46fff9b12325b
Samebase-Source-Path: apps/sidebars-example

Author: github-actions[bot]

README.md

@@ -27,7 +27,6 @@ pnpm run dev
 pnpm run build
 pnpm run check
 pnpm run deploy:dry-run
-pnpm run deploy:preview:dry-run
 pnpm run format
 pnpm run format:check
 pnpm run lint
@@ -38,14 +37,20 @@ pnpm run typecheck
 ## Cloudflare deployment
 
 Use the repository root as the Cloudflare Workers Builds root directory. Run `pnpm run build`, then
-`pnpm run deploy` for `main` or `pnpm run deploy:preview` for other branches. The deploy script uses
-the connected Worker name that Cloudflare supplies and does not repeat the build during Workers
-Builds.
-
-For a local upload check, set `CLOUDFLARE_WORKER_NAME` to `samebase-sidebars-example`, then run one
-of the dry-run commands above. `wrangler.jsonc` publishes `dist/client` with the standard Samebase
-observability and SPA settings. `public/_redirects` maps `/` to its prerendered HTML file while
-`index.html` remains the SPA fallback.
+`pnpm run deploy` for `main` or `pnpm run deploy:preview` for other branches. Wrangler uses the
+connected Worker name that Cloudflare supplies. Enable native Worker Previews for the existing
+connection as described in the
+[migration guide](https://samebase.com/docs/cloudflare-previews-migration). This app does not use
+Convex or deploy keys.
+
+Build before a manual deploy. Use `pnpm run deploy --name samebase-sidebars-example` for production
+or `pnpm run deploy:preview --worker-name samebase-sidebars-example` for a preview. For a local
+check without an upload, run `pnpm run deploy:dry-run --name samebase-sidebars-example`. It builds
+the app before the production dry run. Worker Previews has no dry-run mode.
+
+`wrangler.jsonc` publishes `dist/client` with the standard Samebase observability and SPA settings.
+`public/_redirects` maps `/` to its prerendered HTML file while `index.html` remains the SPA
+fallback.
 
 ## Architecture
 

package.json

@@ -10,14 +10,12 @@
   },
   "type": "module",
   "scripts": {
-    "build": "vp run build:cloudflare",
+    "build": "vp run build:app",
     "build:app": "vp build",
-    "build:cloudflare": "vp run build:app",
     "check": "vp check && vp run typecheck && vp test && vp run build:app",
-    "deploy": "node ./scripts/deploy-cloudflare.ts deploy",
-    "deploy:preview": "node ./scripts/deploy-cloudflare.ts preview",
-    "deploy:dry-run": "node ./scripts/deploy-cloudflare.ts deploy --dry-run",
-    "deploy:preview:dry-run": "node ./scripts/deploy-cloudflare.ts preview --dry-run",
+    "deploy": "wrangler deploy",
+    "deploy:preview": "wrangler preview",
+    "deploy:dry-run": "vp run build:app && wrangler deploy --dry-run",
     "dev": "vp dev",
     "format": "vp fmt",
     "format:check": "vp fmt --check",
@@ -44,7 +42,7 @@
     "typescript": "5.9.2",
     "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
     "vite-plus": "0.3.0",
-    "wrangler": "4.92.0"
+    "wrangler": "4.136.2"
   },
   "engines": {
     "node": ">=24.11.0",