fix: keep docs overrides aligned with dependency updates

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

Author: jeremi

docs/site/package-lock.json

@@ -97,12 +97,12 @@
     "remark-gfm": "^4.0.1",
     "remark-parse": "^11.0.0",
     "starlight-llms-txt": "^0.12.0",
-    "tar": "^7.5.19",
+    "tar": "^7.5.22",
     "turndown": "7.2.4",
     "turndown-plugin-gfm": "1.0.2",
     "typescript": "^6.0.3",
     "unified": "^11.0.5",
-    "yaml": "^2.8.1"
+    "yaml": "^2.9.1"
   },
   "overrides": {
     "url-template": "^3.1.1",
@@ -118,8 +118,8 @@
     "sharp": "^0.35.5",
     "smol-toml": "^1.7.1",
     "svgo": "^4.0.2",
-    "tar": "^7.5.19",
-    "yaml": "^2.8.1",
+    "tar": "$tar",
+    "yaml": "$yaml",
     "starlight-llms-txt": {
       "astro": "$astro"
     }

docs/site/package.json

@@ -0,0 +1,41 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import { mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { test } from 'node:test';
+import { fileURLToPath } from 'node:url';
+
+const here = dirname(fileURLToPath(import.meta.url));
+const docsPackage = JSON.parse(readFileSync(resolve(here, '../package.json'), 'utf8'));
+
+test('direct dependency updates remain installable with tar and yaml overrides', () => {
+  const fixture = mkdtempSync(join(tmpdir(), 'registry-docs-overrides-'));
+  try {
+    for (const [name, version] of [['tar', '7.5.22'], ['yaml', '2.9.1']]) {
+      const packageDir = join(fixture, name);
+      mkdirSync(packageDir);
+      writeFileSync(join(packageDir, 'package.json'), JSON.stringify({ name, version }));
+    }
+    writeFileSync(join(fixture, 'package.json'), JSON.stringify({
+      name: 'registry-docs-overrides-test',
+      version: '1.0.0',
+      private: true,
+      devDependencies: {
+        tar: 'file:./tar',
+        yaml: 'file:./yaml',
+      },
+      overrides: {
+        tar: docsPackage.overrides.tar,
+        yaml: docsPackage.overrides.yaml,
+      },
+    }));
+
+    const result = spawnSync('npm', [
+      'install', '--package-lock-only', '--offline', '--ignore-scripts', '--no-audit', '--no-fund',
+    ], { cwd: fixture, encoding: 'utf8' });
+    assert.equal(result.status, 0, result.stderr || result.error?.message);
+  } finally {
+    rmSync(fixture, { recursive: true, force: true });
+  }
+});