docs: move Chargeback360 page from /docs/apps/midigator to /docs/apps/chargeback360

[next-devin]

Why

The Chargeback360 app page (title "Chargeback360") was served at /docs/apps/midigator. Midigator is a separate legacy service NEXT deprecated years ago, so the URL pointed readers and search at the wrong product.

What changed

• content/docs/apps/midigator.mdx → content/docs/apps/chargeback360.mdx (page copy unchanged).
• Nav: content/docs/apps/meta.json (alphabetical, after campaigns-app) and the root content/docs/meta.json Apps section now list chargeback360.
• Permanent redirects in public/_redirects (the Cloudflare Workers assets redirect file the site already uses), placed above the section splats so the first match wins:
  • /docs/apps/midigator and /docs/apps/midigator/ → /docs/apps/chargeback360 (301)
  • /apps/midigator → /docs/apps/chargeback360 (301, one hop instead of chaining through the /apps/* splat)
• Six 2020–2021 changelog entries linked "Midigator" to the old URL. Link targets now point at /docs/apps/chargeback360; the historical Midigator prose is left as written.
• scripts/changelog-migration/ (deprecated migration tooling) mapped Chargeback360/Midigator mentions to the old path; its target URL is updated so the record matches the live slug.
• Unrelated security fix riding along: CI's security-audit started failing on a new advisory, sharp <0.35.5 (GHSA-wq5f-xc86-pv6w, librsvg CVE-2026-96889, high). sharp comes in through next and is pinned by the overrides block, so the override goes from 0.35.4 to 0.35.5. The lockfile changes only sharp and its @img/* platform packages. Main will hit the same audit failure on its next run, and so will other open PRs (e.g. docs: add the Taboola Pixel Events app page #62), until this or an equivalent bump merges.

Verification

• npm run build passes, including the prebuild link validation, capabilities, and markup checks. out/ has docs/apps/chargeback360.html and no midigator page, and no built page links the old path.
• After the sharp bump: npm audit --omit=dev reports 0 vulnerabilities, check-dependency-compatibility passes, and the build passes.
• Served out/ with wrangler dev:
  • /docs/apps/midigator → 301 → /docs/apps/chargeback360
  • /docs/apps/midigator/ → 301 → /docs/apps/chargeback360
  • /apps/midigator → 301 → /docs/apps/chargeback360
  • /docs/apps/chargeback360 → 200, title "Chargeback360 | Docs | Next Commerce"

Needs confirmation (Brett / Devin)

This PR does not change the page copy. Please confirm it is still accurate before or after merge:

• Chargeback360 is still listed under Apps in the store admin, and Apps > Chargeback360 > Install App is the current install path.
• Install still auto-creates the credentials the app needs.
• The described flow is current: Prevention Alerts with order matching and evidence for dispute responses, and Chargebacks with order matching that add cards to Block Lists.

Related

• NextCommerceCo/nextcommerce-site#194 adds an /apps/chargeback360 marketing page. Once this merges, that page can link to https://docs.nextcommerce.com/docs/apps/chargeback360 instead of the misleading midigator URL.
• Developer Docs is a separate repo and was not checked for links to the old path. The redirect covers any that exist.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	nextcommerce-docs	9f1b677	Commit Preview URL Branch Preview URL	Oct 07 2026, 08:42 AM

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Overview

This PR was previously reviewed at commit 39483a9782c60487df95bdc934f879fd28f02e31 (no issues found). The only subsequent change is commit 9f1b677 chore(deps): bump sharp override to 0.35.5 for GHSA-wq5f-xc86-pv6w, which:

• Updates package.json overrides.next.sharp from 0.35.4 to 0.35.5 (single line, scoped override for the noted advisory).
• Updates package-lock.json version/integrity lines only for sharp (0.35.4 → 0.35.5) and its @img/sharp-libvips-* platform packages (1.3.3 → 1.3.4). No other packages move versions.

Lockfile is generated and out of scope per review rules. The single package.json change is correctly scoped to the vulnerable transitive dep and matches the PR description (the unrelated sharp security bump riding along).

Files Reviewed (2 files)

• package.json
• package-lock.json

Previous Review Summary (commit 39483a9)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit 39483a9)

Status: No Issues Found | Recommendation: Merge

Overview

This PR renames the user-docs Chargeback360 page from /docs/apps/midigator to /docs/apps/chargeback360, updates six 2020–2021 changelog link targets, and adds three 301 redirects above the section splats in public/_redirects. Nav ordering is alphabetical in content/docs/apps/meta.json; content/docs/meta.json apps section keeps the pre-existing (non-alphabetical) ordering of other entries, only the renamed entry slot is changed. Migration tooling (scripts/changelog-migration/process.py, editing-rules.md) is also updated. All references to the old slug are confined to the intentional redirects.

Files Reviewed (11 files)

• content/docs/apps/chargeback360.mdx (renamed from midigator.mdx, copy unchanged)
• content/docs/apps/meta.json
• content/docs/meta.json
• public/_redirects
• content/changelog/2020-07-13-payments-subscriptions-orders-customers.mdx
• content/changelog/2021-06-01-payments-orders-dashboard-analytics.mdx
• content/changelog/2021-08-09-themes-subscriptions-payments-storefront.mdx
• content/changelog/2021-08-23-admin-api-checkout-offers-orders.mdx
• content/changelog/2021-09-20-admin-api-payments-orders-customers.mdx
• content/changelog/2021-11-01-subscriptions-payments-checkout-fulfillment.mdx
• scripts/changelog-migration/editing-rules.md
• scripts/changelog-migration/process.py

---

_{Reviewed by minimax-m3 · Input: 23.6K · Output: 1.6K · Cached: 140.6K}