chore: Remove unused dependencies and bump vulnerable packages (#1898)

`pnpm audit` on `main`: **184 advisories** (4 critical, 71 high). After
this PR: **40** (2 critical, 17 high), all of which are pinned by `next`
14 or `contentlayer` 0.3.4.

## Changes

- **Remove `baseai` / `@baseai/core`**, the `baseai/` memory config,
`docs-chatbot.md`, and the `pnpm sync` script. The Langbase chatbot was
replaced by runLLM and nothing imports these. They alone pulled in
`hono` (34 advisories), `tar` (12, incl. 1 critical), `xlsx` (2 high, no
fix available), `form-data`, `yaml`, `uuid`, and most of the `minimatch`
/ `brace-expansion` hits.
- **Remove `js-yaml`** from direct dependencies: never imported by
`src/` or `dev/`.
- **`mermaid` 11.12 → 11.16**: carries the `dompurify` XSS fixes, the
only vulnerable code that actually ships to visitors' browsers.
- **`sharp` 0.32 → 0.35** (devDep, build only): libvips / libheif CVEs.
- Re-resolve vulnerable transitives within their existing semver ranges
(`minimatch`, `brace-expansion`, `picomatch`, `nanoid`, `protobufjs`,
`@grpc/grpc-js`, ...). Lockfile loses ~2,000 lines.
- `.gitignore`: add `/logs` for script output, drop the stale
`**/.baseai/` entry.

## Verification

- Clicked through Vercel preview, checked Mermaid diagrams, search, nav
menu, it all works

With `node 20.20` / `pnpm 10.25` (per `.tool-versions`):

- `npx tsc --noEmit` clean, `pnpm lint` clean
- `pnpm build`: 521 documents, 526 static pages, `dev/check-links` /
`check-filenames` / `check-images` / `generate-mermaid-icons` all pass;
route table unchanged
- Both pages with Mermaid diagrams (`admin/architecture`,
`self-hosted/sourcegraph-nginx-mermaid`) render correctly under `next
start` in headless Chrome
- `pnpm why baseai hono tar xlsx` → not found; `rg baseai` → only the
AGENTS.md history note

---------

Co-authored-by: Amp <amp@ampcode.com>

Author: marcleblanc2

.gitignore

@@ -46,8 +46,8 @@ next-env.d.ts
 # We ignore the generated file as it should always be generated
 public/changelog.rss
 
-# baseai
-**/.baseai/
+# script output
+/logs
 
 # env file
 .env

AGENTS.md

@@ -41,14 +41,7 @@ To update the runLLM assistant ID or other settings, modify the Script component
 />
 ```
 
-### Previous Integration
-
-Previously used **Langbase** with custom React components. This has been completely removed:
-
--   Removed `@langbase/components` and `langbase` packages
--   Removed custom chat components (`src/app/chat.tsx`, `src/components/ChatBot/`)
--   Removed API routes (`src/app/api/chat/`)
--   Removed memory creation scripts
+The previous **Langbase** / `baseai` chatbot integration has been fully removed (packages, components, API routes, `baseai/` memory config, and the `pnpm sync` script).
 
 ## Important Notes
 

baseai/baseai.config.ts

@@ -11,15 +11,12 @@
 		"check-filenames": "node dev/check-filenames.mjs",
 		"check-images": "node dev/check-images.mjs",
 		"generate-mermaid-logos": "node dev/generate-aws-icons.mjs",
-		"baseai": "baseai",
-		"sync": "npx baseai@latest deploy -m memory-sg-docs-live",
 		"format": "prettier --config ./prettier.config.js --cache --cache-strategy metadata --write=true '**/{*.{js?(on),ts?(x),md,mdx,s?css},.*.js?(on)}'"
 	},
 	"browserslist": "defaults, not ie <= 11",
 	"dependencies": {
 		"@algolia/autocomplete-core": "^1.13.0",
 		"@algolia/client-search": "^4.22.1",
-		"@baseai/core": "^0.9.41",
 		"@docsearch/react": "^3.5.2",
 		"@headlessui/react": "^1.7.17",
 		"@heroicons/react": "^2.1.1",
@@ -43,11 +40,10 @@
 		"fast-glob": "^3.3.2",
 		"feed": "^4.2.2",
 		"github-slugger": "^2.0.0",
-		"js-yaml": "^4.1.0",
 		"kbar": "0.1.0-beta.44",
 		"lucide-react": "^0.372.0",
 		"mdx": "^0.3.1",
-		"mermaid": "^11.12.2",
+		"mermaid": "^11.16.1",
 		"next": "^14.2.23",
 		"next-contentlayer": "^0.3.4",
 		"next-themes": "^0.2.1",
@@ -71,13 +67,12 @@
 		"unist-util-visit": "^5.0.0"
 	},
 	"devDependencies": {
-		"baseai": "^0.9.41",
 		"dotenv": "^16.4.7",
 		"eslint": "8.45.0",
 		"eslint-config-next": "13.4.16",
 		"glob": "^11.0.3",
 		"prettier": "^3.1.1",
 		"prettier-plugin-tailwindcss": "^0.5.9",
-		"sharp": "^0.32.6"
+		"sharp": "^0.35.4"
 	}
 }