Skip to content

Chore(deps): Bump the dev-tooling group across 1 directory with 14 updates - #155

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tooling-83744ef157
Open

Chore(deps): Bump the dev-tooling group across 1 directory with 14 updates#155
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tooling-83744ef157

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-tooling group with 14 updates in the / directory:

Package From To
@fortawesome/fontawesome-free 7.0.0 7.3.1
@compodoc/compodoc 1.1.26 2.0.0
@figma/code-connect 1.5.3 2.0.1
@inquirer/prompts 7.0.0 8.7.2
@schematics/angular 22.1.7 22.1.8
@types/diff 7.0.2 8.0.0
@types/node 26.2.0 26.6.2
jsdom 28.1.0 30.1.0
prettier 3.9.6 3.9.8
sass 1.101.0 1.104.1
style-dictionary 5.5.0 5.5.5
typescript 6.0.3 7.0.2
vitest 4.1.10 5.0.1
zod 4.4.3 4.6.5

Updates @fortawesome/fontawesome-free from 7.0.0 to 7.3.1

Release notes

Sourced from @​fortawesome/fontawesome-free's releases.

Release 7.3.1

Change log available at https://fontawesome.com/docs/changelog/

Release 7.3.0

Change log available at https://fontawesome.com/docs/changelog/

Release 7.2.0

Change log available at https://fontawesome.com/changelog

Release 7.1.0

Change log available at https://fontawesome.com/docs/changelog/

Release 7.0.1

Change log available at https://fontawesome.com/docs/changelog/

Commits
Maintainer changes

This version was pushed to npm by fortawesome-admin, a new releaser for @​fortawesome/fontawesome-free since your current version.


Updates @compodoc/compodoc from 1.1.26 to 2.0.0

Release notes

Sourced from @​compodoc/compodoc's releases.

2.0.0

Main features:

Top 3:

  • Standalone-aware route graph generation for Angular apps using provideRouter, including standalone components, inline lazy routes, and default-export route files, alongside traditional NgModule routing.
  • Modern Angular support across the compiler and generated docs, including signal inputs, signal aliases, standalone metadata, styleUrl, and injectable providedIn / inheritance metadata.
  • More accurate TypeScript and JSDoc rendering for complex projects, covering advanced type syntax, inherited documentation, examples, custom tags, and richer interface docs.

Other notable changes:

  • Clickable navigation for dependency graph nodes.
  • More robust CLI and coverage workflows, including single-file inputs, coverage exclusions, Windows absolute paths, watch path normalization, and duplicate component-name handling.
  • Security and runtime hardening, including ReDoS fixes in signal parsing and escaping of dangerous component template content.
  • Modernized package/runtime baseline with IE11/Babel legacy output removed and @​compodoc/live-server no longer required.

Features

Bug fixes

CLI, coverage and tooling

  • fix(tools): npm RFC #868 (77be307), closes #1738
  • test(cli): guard duplicate component name inputs (3266772), closes #1390
  • fix(cli): support single file source argument (0e03704), closes #1384
  • fix(coverage): support absolute Windows paths (d303e4e), closes #1272
  • fix(watch): normalize changed file paths (7f4b74f), closes #1488
  • fix(cli): keep coverage enabled for coverage test mode (0d983b8), closes #1360
  • fix(cli): resolve namespace barrel spread declarations (79d7044), closes #623

JSDoc and rendered documentation

  • chore(app): support throws and inherited docs (2138b1b), closes #450 (2138b1b), closes #242
  • fix(jsdoc): avoid crash on deprecated tag parsing (50e87d6), closes #1300
  • fix: preserve generic type parameters in docs (eb34354), closes #555
  • fix: use nearest JSDoc comment for variable docs (edb95aa), closes #1274
  • fix(jsdoc): support indented @​example fenced code blocks (02d2311), closes #1403
  • fix(markdown): normalize Bitbucket commit links in rendered changelog pages (133aa91), closes #1404
  • fix(jsdoc): preserve description for custom JSDoc tags and add rawdescription on miscellaneous symbols (55489d9), closes #1601

Routing and route graph parsing

... (truncated)

Changelog

Sourced from @​compodoc/compodoc's changelog.

2.0.0

Main features:

Top 3:

  • Standalone-aware route graph generation for Angular apps using provideRouter, including standalone components, inline lazy routes, and default-export route files, alongside traditional NgModule routing.
  • Modern Angular support across the compiler and generated docs, including signal inputs, signal aliases, standalone metadata, styleUrl, and injectable providedIn / inheritance metadata.
  • More accurate TypeScript and JSDoc rendering for complex projects, covering advanced type syntax, inherited documentation, examples, custom tags, and richer interface docs.

Other notable changes:

  • Clickable navigation for dependency graph nodes.
  • More robust CLI and coverage workflows, including single-file inputs, coverage exclusions, Windows absolute paths, watch path normalization, and duplicate component-name handling.
  • Security and runtime hardening, including ReDoS fixes in signal parsing and escaping of dangerous component template content.
  • Modernized package/runtime baseline with IE11/Babel legacy output removed and @​compodoc/live-server no longer required.

Features

Bug fixes

CLI, coverage and tooling

  • fix(tools): npm RFC #868 (77be307), closes #1738
  • test(cli): guard duplicate component name inputs (3266772), closes #1390
  • fix(cli): support single file source argument (0e03704), closes #1384
  • fix(coverage): support absolute Windows paths (d303e4e), closes #1272
  • fix(watch): normalize changed file paths (7f4b74f), closes #1488
  • fix(cli): keep coverage enabled for coverage test mode (0d983b8), closes #1360
  • fix(cli): resolve namespace barrel spread declarations (79d7044), closes #623

JSDoc and rendered documentation

  • chore(app): support throws and inherited docs (2138b1b), closes #450 (2138b1b), closes #242
  • fix(jsdoc): avoid crash on deprecated tag parsing (50e87d6), closes #1300
  • fix: preserve generic type parameters in docs (eb34354), closes #555
  • fix: use nearest JSDoc comment for variable docs (edb95aa), closes #1274
  • fix(jsdoc): support indented @​example fenced code blocks (02d2311), closes #1403
  • fix(markdown): normalize Bitbucket commit links in rendered changelog pages (133aa91), closes #1404
  • fix(jsdoc): preserve description for custom JSDoc tags and add rawdescription on miscellaneous symbols (55489d9), closes #1601

... (truncated)

Commits

Updates @figma/code-connect from 1.5.3 to 2.0.1

Release notes

Sourced from @​figma/code-connect's releases.

Code Connect 2.0.1

Fixed

General

  • figma connect preview now accepts the template file of a component declared in a .figma.batch.json file. Previously it rejected the template path with "Not a valid Code Connect file", so the only way to preview a batch component was to preview every component in the batch file at once.

Code Connect 2.0.0

[!WARNING] Framework-specific parsers will no longer receive updates or support. Template files are now the only actively maintained way of using Code Connect. See our migration guide for more information and instructions on migrating parser-based Code Connect: https://developers.figma.com/docs/code-connect/templates-migration-guide/

Breaking changes

  • Framework-specific parsers can now only be used by figma connect migrate and figma connect unpublish. Other commands exit with guidance to migrate parser-based Code Connect to template files. If you wish to continue using framework-specific parsers, install Code Connect v1 with npm install --save-dev @figma/code-connect@1.

Fixed

General

  • Performance optimizations for figma connect preview
Changelog

Sourced from @​figma/code-connect's changelog.

Code Connect v2.0.1 (10 September 2026)

Fixed

General

  • figma connect preview now accepts the template file of a component declared in a .figma.batch.json file. Previously it rejected the template path with "Not a valid Code Connect file", so the only way to preview a batch component was to preview every component in the batch file at once.

Code Connect v2.0.0 (18 August 2026)

[!WARNING] Framework-specific parsers will no longer receive updates or support. Template files are now the only actively maintained way of using Code Connect. See our migration guide for more information and instructions on migrating parser-based Code Connect: https://developers.figma.com/docs/code-connect/templates-migration-guide/

Breaking changes

  • Framework-specific parsers can now only be used by figma connect migrate and figma connect unpublish. Other commands exit with guidance to migrate parser-based Code Connect to template files. If you wish to continue using framework-specific parsers, install Code Connect v1 with npm install --save-dev @figma/code-connect@1.

Fixed

General

  • Performance optimizations for figma connect preview
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​figma/code-connect since your current version.


Updates @inquirer/prompts from 7.0.0 to 8.7.2

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.2

What's new

  • Fixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach keypress handlers after the prompt was done, cancelled, or aborted (@inquirer/core, #2255, closes #1816).
  • confirm() now trims surrounding whitespace from answers before matching yes/no keywords (@inquirer/confirm, #2254).

Included

  • @inquirer/checkbox@^5.2.5
  • @inquirer/confirm@^6.3.2
  • @inquirer/editor@^5.3.3
  • @inquirer/expand@^5.1.5
  • @inquirer/input@^5.1.6
  • @inquirer/number@^4.2.3
  • @inquirer/password@^5.2.2
  • @inquirer/rawlist@^5.3.5
  • @inquirer/search@^4.3.3
  • @inquirer/select@^5.2.5

@​inquirer/prompts@​8.7.1

What's new

  • All bundled prompts now pin @inquirer/type to an exact version in their published manifests. Since these type definitions leak into consumers' tsc runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (#2247, fixes #2244).

Included

  • @inquirer/checkbox@^5.2.4
  • @inquirer/confirm@^6.3.1
  • @inquirer/editor@^5.3.2
  • @inquirer/expand@^5.1.4
  • @inquirer/input@^5.1.5
  • @inquirer/number@^4.2.2
  • @inquirer/password@^5.2.1
  • @inquirer/rawlist@^5.3.4
  • @inquirer/search@^4.3.2
  • @inquirer/select@^5.2.4

@​inquirer/prompts@​8.7.0

What's new

  • password gains the toggleMask option (ctrl+t to reveal the typed value).
  • confirm now matches localized yes/no answers per-locale.
  • Prettified prompt and theme types for better IDE display.
  • Added inquirer-grouped-checkbox to the community prompts list (#2236).

Included

... (truncated)

Commits
  • cbdb34b chore: Publish new release
  • 8340d2d fix(@​inquirer/core): clear hook effects before settling prompts
  • 2475e07 test(@​inquirer/core): cover hook cleanup error semantics
  • 15cd8d3 fix(confirm): ignore surrounding whitespace in answers
  • 9cb0da6 chore(deps): Bump github/codeql-action/analyze from 4.37.7 to 4.37.9
  • 1c750bc chore(deps-dev): Bump the build group with 3 updates (#2251)
  • 81f1525 chore(deps-dev): Bump @​types/node in the types group (#2252)
  • 7c27f26 chore(deps-dev): Bump oxfmt in the formatting group (#2249)
  • 6119088 chore(deps): Bump github/codeql-action/init from 4.37.7 to 4.37.9 (#2250)
  • 0d167c0 chore(deps-dev): Bump the linting group with 4 updates (#2248)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​inquirer/prompts since your current version.


Updates @schematics/angular from 22.1.7 to 22.1.8

Release notes

Sourced from @​schematics/angular's releases.

22.1.8

@​angular/build

Commit Description
fix - a6e30fa378 disable strictPort when port 0 is used in dev-server
perf - 35a5d4aa49 avoid full JSON parsing when updating sourcemap ignore list
perf - 48cc43cbf2 read rendered module length once per module in chunk optimizer (#34045)
Changelog

Sourced from @​schematics/angular's changelog.

22.1.8 (2026-09-10)

@​angular/build

Commit Type Description
a6e30fa378 fix disable strictPort when port 0 is used in dev-server
35a5d4aa49 perf avoid full JSON parsing when updating sourcemap ignore list
48cc43cbf2 perf read rendered module length once per module in chunk optimizer (#34045)

Commits
  • f69e446 release: cut the v22.1.8 release
  • 2500e4f build: replace pnpm -s shorthand with --silent for improved readability
  • fa9fc6e build: set verifyDepsBeforeRun to warn in pnpm workspace configuration
  • 61cfc6d test(@​angular/build): prevent flakiness in incremental-watch e2e test
  • ca322ca build: update cross-repo angular dependencies
  • 1bbcd86 build: update pnpm to v11.26.0
  • b496e4a refactor: replace -s flag with --silent in husky prepare-commit-msg script
  • 87a1610 test(@​angular/build): fix flakiness in dev-server rebuild error detection test
  • 57c9a4a test(@​angular-devkit/build-angular): prevent flakiness in live-reload proxies...
  • a6e30fa fix(@​angular/build): disable strictPort when port 0 is used in dev-server
  • Additional commits viewable in compare view

Updates @types/diff from 7.0.2 to 8.0.0

Commits

Updates @types/node from 26.2.0 to 26.6.2

Commits

Updates jsdom from 28.1.0 to 30.1.0

Release notes

Sourced from jsdom's releases.

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

  • Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)
  • Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.
  • Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.
  • Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)
  • Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)
  • Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)
  • Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)
  • Changed window.close() to preserve access to the document and its DOM through retained references.
  • Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)
  • Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)
  • Fixed document.querySelector() failing to find a matching element when an earlier element has the same ID but does not match the rest of the selector. (@​vojtisprime11)
  • Fixed :focus matching in shadow trees. (@​asamuzaK)
  • Fixed DOM insertion and replacement, including valid document.replaceChildren() calls, invalid document element and doctype placements, and mutations during element.replaceWith().
  • Fixed the ordering of script execution, custom element callbacks, iframe loading, and mutation observer notifications during DOM insertion, including in shadow trees.
  • Fixed queued events and navigation continuing after window.close() or iframe removal, and prevented new scripts, resource loads, timers, and animation frames from starting in destroyed documents. (@​scttcper)
  • Fixed parent documents waiting indefinitely for loading to finish when a child iframe removes itself during loading.
  • Fixed request cancellation across redirects, during pending requestInterceptor() callbacks, and when reusing an XMLHttpRequest after aborting it.
  • Fixed resource loading and JSDOM.fromURL() potentially hanging when response handling throws and response stream cleanup does not finish.
  • Fixed successful cached resource loads being treated as aborted.
  • Fixed getComputedStyle() and document.styleSheets using the wrong stylesheet order after inserting or updating <style> elements.
  • Fixed getComputedStyle() ignoring nested @import and @media rules in imported stylesheets, and returning stale results after imports finish loading.
  • Fixed style invalidation, stylesheet removal, and frame source updates in shadow trees.
  • Fixed repeated getComputedStyle() calls changing case-sensitive background URLs, and inconsistent resolution of border shorthands containing system colors. (@​scttcper)
  • Fixed computed border widths, including borderless elements incorrectly reporting 16px, which regressed in v30.0.0. (@​Alberto-BaseNet)
  • Fixed getComputedStyle() to resolve 'font-weight' keywords to numeric values. (@​tianrking)
  • Fixed getComputedStyle() to convert lengths to pixels inside CSS math functions containing percentages, and to resolve percentages in 'font-size' math functions. (@​soroushm)
  • Fixed serialization of min() and max() containing nested calc(), which regressed in v30.0.0. (@​asamuzaK)
  • Fixed CSS values mixing lengths or percentages with math functions, such as 'grid-template-columns' values containing both 100px and calc(). (@​rome-xi)
  • Fixed parsing of 'background' and 'border' shorthands with adjacent components, such as url(a.png)no-repeat, including a crash when parsing inline styles. Also fixed handling of invalid shorthand assignments and escaped or unusual characters in CSS declarations. (@​asamuzaK)
  • Fixed parsing of unitless zero values in 'flex' shorthands, such as 35 1 0, and rejection of negative 'flex-basis' lengths and percentages. (@​asamuzaK)
  • Fixed shorthand style assignments producing extra mutation records and custom element callbacks for intermediate values. (@​scttcper)
  • Fixed Range and Selection handling of CDATA sections, including boundary offsets and range cloning, extraction, deletion, insertion, and stringification. (@​scttcper)
  • Fixed text.normalize() incorrectly removing the text node or merging its siblings. (@​scttcper)
  • Fixed cloning and importing CDATA sections and processing instructions whose contents have been modified, and serialization of CDATA sections adopted into HTML documents.
  • Fixed stale named-property collections on window, and incorrect named access from empty or namespaced id="" and name="" values. (@​scttcper)
  • Fixed elements in documents created with DOMParser or document.implementation.createHTMLDocument() appearing as named properties on window and being retained in memory. (@​Iaotle)
  • Fixed memory leaks from mutation observers retaining observed nodes, abort signals retaining removed event listeners, and storage event tracking retaining closed windows. (@​scttcper)
  • Fixed storage events being sent to windows created after the storage change, and ensured surviving recipients still receive events when the source document is destroyed.
  • Fixed attribute lookups after namespace prefix changes, and namespaced attributes incorrectly affecting ID lookups and element behavior. (@​scttcper)
  • Fixed input.list in detached element trees. (@​scttcper)
  • Fixed attr.ownerDocument after setting an attribute node on an element in another document or adopting its element. (@​Kjubikstronk)

... (truncated)

Commits
  • 556b11f 30.1.0
  • 9547fbf Tie queued tasks to document lifetime
  • 3be65d9 Disable unused HTML reports in the WPT runner
  • d555e61 Replace SymbolTree with a DOM-specific tree
  • f28983d Clone CDATA and processing instructions without revalidation
  • 33e4fa7 Invalidate computed styles after CSS imports load
  • ec6fd5b Select storage event recipients at mutation time
  • bcc037a Honor script type and legacy event attributes
  • faa5c4f Preserve currentScript across nested scripts
  • 8d7a37f Avoid quadratic HTML collection iteration
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jsdom since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates prettier from 3.9.6 to 3.9.8

Release notes

Sourced from prettier's releases.

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
  second paragraph at six spaces that wraps
  onto another line here.

<!-- Prettier 3.9.6 -->

 
short first line.
second paragraph at six spaces that wraps
    onto another line here.



<!-- Prettier 3.9.7 -->

 
short first line.
second paragraph at six spaces that wraps
onto another line here.

JavaScript: Fix embedded template literal idempotency (#19725 by @​fisker)

... (truncated)

Commits

Updates sass from 1.101.0 to 1.104.1

Release notes

Sourced from sass's releases.

Dart Sass 1.104.1

To install Sass 1.104.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

  • Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

Command Line Interface

  • Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

  • Sass now sets the modification time of output files to the time compilation started rather than the time it ended. This ensures that, if a source file is modified during compilation, --watch and --update mode will recompile the outputs to include the new source file contents.

See the full changelog for changes in earlier releases.

Dart Sass 1.104.0

To install Sass 1.104.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Potentially breaking compatibility fix: Colors now convert the special values NaN and negative zero, as well as infinity and negative infinity for polar-hue channels, to 0 as per the CSS spec.

  • The special value negative zero is now serialized as -0 instead of 0 for greater compatibility when using it in CSS calculations.

See the full changelog for changes in earlier releases.

Dart Sass 1.103.1

To install Sass 1.103.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.103.0

To install Sass 1.103.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.104.1

  • Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

  • Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

Command Line Interface

  • Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

  • Sass now sets the modification time of output files to the time compilation started rather than the time it ended. This ensures that, if a source file is modified during compilation, --watch and --update mode will recompile the outputs to include the new source file contents.

1.104.0

  • Potentially breaking compatibility fix: Colors now convert the special values NaN and negative zero, as well as infinity and negative infinity for polar-hue channels, to 0 as per the CSS spec.

  • The special value negative zero is now serialized as -0 instead of 0 for greater compatibility when using it in CSS calculations.

1.103.1

  • No user-visible changes.

1.103.0

  • Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

1.102.0

  • Use the 2.4 gamma transfer function for rec2020, as specified by the latest draft of CSS Color 4.

1.101.7

  • No user-visible changes.

... (truncated)

Commits
  • da84fb5 Fix --watch not recompiling sources modified during a compilation (#2850)
  • 8a287a7 Merge pull request #2859 from sass/fix-auto-merge
  • 6033b46 Add explicit versions to .github/util actions
  • cc71d43 Only auto-merge dependabot PRs once the tests pass
  • 49ddc4f Revert "Bump dart-lang/setup-dart in /.github/util/initialize"
  • 71a127d Avoid duplicating loud comments that appear before @use (#2854)
  • f19baab Merge pull request #2857 from sass/dependabot/github_actions/dot-github/util/...
  • f5263e2 Bump dart-lang/setup-dart in /.github/util/initialize
  • 3018c0d Merge pull request #2856 from sass/dependabot/github_actions/dart-lang/setup-...
  • 5d74adb Bump dart-lang/setup-dart from 1.8.0 to 1.8.1
  • Additional commits viewable in compare view

Updates style-dictionary from 5.5.0 to 5.5.5

Release notes

Sourced from style-dictionary's releases.

v5.5.5

Patch Changes

  • bc51123: Fix prototype pollution GHSA-cr3w-v879-f973 for nested objects created by the convertTokenData utility in "object" output mode.

v5.5.4

Patch Changes

  • 0170a9a: Patch @​bundled-es-modules/glob which fixes a transitive dependency vulnerability (glob->url->qs).

v5.5.3

Patch Changes

  • 863685d: Limit nested composite token expansion to the configured type filters.
  • 2aced93: Preserve alpha precision in the color/css transform.

v5.5.2

Patch Changes

  • b65ea0b: Disallow output literal "undefined" for tokens with descriptions when commentStyle is set to none.

v5.5.1

Patch Changes

Changelog

Sourced from style-dictionary's changelog.

5.5.5

Patch Changes

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 24, 2026
@dependabot
Chore(deps): Bump the dev-tooling group across 1 directory with 14 up…
c9e73ed 
…dates

Bumps the dev-tooling group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome) | `7.0.0` | `7.3.1` |
| [@compodoc/compodoc](https://github.com/compodoc/compodoc) | `1.1.26` | `2.0.0` |
| [@figma/code-connect](https://github.com/figma/code-connect) | `1.5.3` | `2.0.1` |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `7.0.0` | `8.7.2` |
| [@schematics/angular](https://github.com/angular/angular-cli) | `22.1.7` | `22.1.8` |
| [@types/diff](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/diff) | `7.0.2` | `8.0.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.6.2` |
| [jsdom](https://github.com/jsdom/jsdom) | `28.1.0` | `30.1.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.8` |
| [sass](https://github.com/sass/dart-sass) | `1.101.0` | `1.104.1` |
| [style-dictionary](https://github.com/style-dictionary/style-dictionary) | `5.5.0` | `5.5.5` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `5.0.1` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |



Updates `@fortawesome/fontawesome-free` from 7.0.0 to 7.3.1
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases)
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md)
- [Commits](FortAwesome/Font-Awesome@7.0.0...7.3.1)

Updates `@compodoc/compodoc` from 1.1.26 to 2.0.0
- [Release notes](https://github.com/compodoc/compodoc/releases)
- [Changelog](https://github.com/compodoc/compodoc/blob/develop/CHANGELOG.md)
- [Commits](compodoc/compodoc@1.1.26...v2.0.0)

Updates `@figma/code-connect` from 1.5.3 to 2.0.1
- [Release notes](https://github.com/figma/code-connect/releases)
- [Changelog](https://github.com/figma/code-connect/blob/main/CHANGELOG.md)
- [Commits](figma/code-connect@v1.5.3...v2.0.1)

Updates `@inquirer/prompts` from 7.0.0 to 8.7.2
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@7.0.0...@inquirer/prompts@8.7.2)

Updates `@schematics/angular` from 22.1.7 to 22.1.8
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v22.1.7...v22.1.8)

Updates `@types/diff` from 7.0.2 to 8.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/diff)

Updates `@types/node` from 26.2.0 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `jsdom` from 28.1.0 to 30.1.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v28.1.0...v30.1.0)

Updates `prettier` from 3.9.6 to 3.9.8
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.8)

Updates `sass` from 1.101.0 to 1.104.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.101.0...1.104.1)

Updates `style-dictionary` from 5.5.0 to 5.5.5
- [Release notes](https://github.com/style-dictionary/style-dictionary/releases)
- [Changelog](https://github.com/style-dictionary/style-dictionary/blob/main/CHANGELOG.md)
- [Commits](style-dictionary/style-dictionary@v5.5.0...v5.5.5)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `vitest` from 4.1.10 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

---
updated-dependencies:
- dependency-name: "@compodoc/compodoc"
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-tooling
- dependency-name: "@figma/code-connect"
  dependency-version: 2.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-tooling
- dependency-name: "@fortawesome/fontawesome-free"
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.7.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-tooling
- dependency-name: "@schematics/angular"
  dependency-version: 22.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@types/diff"
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-tooling
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: jsdom
  dependency-version: 30.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-tooling
- dependency-name: prettier
  dependency-version: 3.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: sass
  dependency-version: 1.104.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: style-dictionary
  dependency-version: 5.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-tooling
- dependency-name: vitest
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-tooling
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-tooling-83744ef157 branch from 33ef7b7 to c9e73ed Compare September 24, 2026 14:55

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants