[dependabot][all](deps): Bump the "dependabot-all" group with 2 updates across multiple ecosystems

[dependabot]

Bumps the dependabot-all group with 1 update: actions/checkout.

Updates actions/checkout from 6.0.3 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

• block checking out fork pr for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462
• getting ready for checkout v7 release by @​aiqiaoy in actions/checkout#2464
• update error wording by @​aiqiaoy in actions/checkout#2467

New Contributors

• @​aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in actions/checkout#2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in actions/checkout#2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in actions/checkout#2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in actions/checkout#2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in actions/checkout#2459
• upgrade module to esm and update dependencies by @​aiqiaoy in actions/checkout#2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in actions/checkout#2462

v6.0.3

• Fix checkout init for SHA-256 repositories by @​yaananth in actions/checkout#2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in actions/checkout#2414

v6.0.2

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

• Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

• Persist creds to a separate file by @​ericsciple in actions/checkout#2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

• Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

• Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

• Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

• docs: update README.md by @​motss in actions/checkout#1971
• Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
• Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
• Update README.md by @​nebuk89 in actions/checkout#2194
• Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
• Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

• url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
• Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

... (truncated)

Commits

• 9c091bb update error wording (#2467)
• 1044a6d getting ready for checkout v7 release (#2464)
• f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)
• d914b26 upgrade module to esm and update dependencies (#2463)
• 537c7ef Bump @​actions/core and @​actions/tool-cache and Remove uuid (#2459)
• 130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461)
• 7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460)
• 0f9f3aa Bump actions/publish-immutable-action (#2458)
• f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454)
• See full diff in compare view

Bumps the dependabot-all group with 77 updates:

Package	From	To
git-cliff	2.12.0	2.13.1
sort-package-json	3.6.1	4.0.0
prettier	3.8.1	3.9.1
prettier-plugin-jsdoc	1.8.0	1.8.1
prettier-plugin-multiline-arrays	4.1.5	4.1.9
prettier-plugin-powershell	2.0.11	2.1.6
prettier-plugin-tailwindcss	0.7.2	0.8.0
@augment-vir/assert	31.68.3	31.73.2
@augment-vir/common	31.68.3	31.73.2
@augment-vir/core	31.68.3	31.73.2
@babel/code-frame	7.27.1	7.29.7
@babel/helper-validator-identifier	7.28.5	7.29.7
@babel/runtime	7.28.4	7.29.7
@date-vir/duration	8.2.1	8.6.1
glob	10.4.5	10.5.0
@oozcitak/dom	2.0.1	2.0.2
@oozcitak/infra	2.0.1	2.0.2
@oozcitak/url	2.0.1	3.0.0
@types/debug	4.1.12	4.1.13
@types/http-cache-semantics	4.0.4	4.2.0
@types/katex	0.16.7	0.16.8
@types/lodash	4.17.20	4.17.24
@types/luxon	3.7.1	3.7.2
@types/node	22.19.1	22.20.0
@ungap/structured-clone	1.3.0	1.3.2
acorn	8.15.0	8.17.0
picomatch	2.3.1	2.3.2
basic-ftp	5.0.5	5.3.1
brace-expansion	2.0.2	2.1.1
cheerio	1.1.2	1.2.0
ci-info	4.3.1	4.4.0
comment-parser	1.4.1	1.4.7
css-selector-parser	3.2.0	3.3.0
dead-or-alive	1.0.4	1.0.5
undici	6.22.0	7.28.0
decode-named-character-reference	1.2.0	1.3.0
deepcopy-esm	2.1.1	2.1.2
dot-properties	1.1.0	1.1.1
esbuild	0.27.0	0.27.7
execa	9.6.0	9.6.1
expect-type	1.3.0	1.4.0
fast-content-type-parse	2.0.1	3.0.0
git-cliff-darwin-arm64	2.12.0	2.13.1
git-cliff-darwin-x64	2.12.0	2.13.1
git-cliff-linux-arm64	2.12.0	2.13.1
git-cliff-linux-x64	2.12.0	2.13.1
git-cliff-windows-arm64	2.12.0	2.13.1
git-cliff-windows-x64	2.12.0	2.13.1
htmlparser2	10.0.0	10.1.0
ip-address	10.1.0	10.2.0
js-yaml	4.1.1	4.3.0
jsox	1.2.123	1.2.125
katex	0.16.25	0.16.47
marked	17.0.0	17.0.6
mdast-util-from-markdown	2.0.2	2.0.3
mdast-util-to-hast	13.2.0	13.2.1
minipass	7.1.2	7.1.3
mlly	1.8.0	1.8.2
needle	3.3.1	3.5.0
netmask	2.0.2	2.1.1
node-sql-parser	5.3.13	5.4.0
normalize-url	8.1.0	8.1.1
property-information	7.1.0	7.2.0
proxy-vir	2.0.2	2.0.3
rollup	4.53.2	4.62.2
sax	1.4.3	1.6.0
semver	7.7.3	7.8.5
socks	2.8.7	2.8.9
spdx-license-ids	3.0.22	3.0.23
sql-formatter	15.7.3	15.8.2
sucrase	3.35.0	3.35.1
tinyglobby	0.2.15	0.2.17
typed-event-target	4.3.0	4.3.1
typescript	5.9.3	6.0.3
ufo	1.6.1	1.6.4
validator	13.15.23	13.15.35
xmlbuilder2	4.0.0	4.0.3

Updates git-cliff from 2.12.0 to 2.13.1

Release notes

Sourced from git-cliff's releases.

Release v2.13.1

2.13.1 - 2026-04-26

🐛 Bug Fixes

• (cd) Prepare embedded assets before PyPI and crates.io packaging - (b99a232)

Release v2.13.0

2.13.0 - 2026-04-26

⛰️ Features

• (config) Support more configuration file locations (#1448) - (7d90eee)
• (context) Add per-commit statistics (#1487) - (9d43a15)
• (context) Expose determined bump type in release context (#1483) - (3e97e75)
• (docker) Apply latest tag to stable only (#1371) - (9d2a52a)
• (git) Add configurable commit processing order (#1485) - (ead5587)
• (remote) Add environment variable for offline execution (#1427) - (2d53920)
• (tracing) Migrate logging to tracing (#1488) - (b71d250)

🐛 Bug Fixes

• (args) Correctly parse multiple env values for include/exclude paths (#1450) - (f1874b8)
• (cd) Publish musl wheels to PyPI by matching matrix.build.NAME (#1490) - (9b5e732)
• (cli) Warn when --with-commit does not change version (#1484) - (3d6a7cb)
• (docs) Use updated usage of doc_auto_cfg and fix internal link (#1373) - (0a0a795)
• (npm) Use require.resolve to resolve binary path (#1392) - (39cd76e)
• (remote) Deserialize GitLab API data models safely (#1368) - (954106f)

🚜 Refactor

• (deps) Replace dirs_next with etcetera (#1477) - (ee8bfd1)

📚 Documentation

• (website) Add highlights for 2.13.0 (#1491) - (3a6195f)
• (website) Add more-examples section for templates (#1472) - (e588472)

⚡ Performance

• (ci) Add caching where applicable (#1486) - (bd074d9)

🧪 Testing

... (truncated)

Changelog

Sourced from git-cliff's changelog.

2.13.1 - 2026-04-26

🐛 Bug Fixes

• (cd) Prepare embedded assets before PyPI and crates.io packaging - (b99a232)

2.13.0 - 2026-04-26

⛰️ Features

• (config) Support more configuration file locations (#1448) - (7d90eee)
• (context) Add per-commit statistics (#1487) - (9d43a15)
• (context) Expose determined bump type in release context (#1483) - (3e97e75)
• (docker) Apply latest tag to stable only (#1371) - (9d2a52a)
• (git) Add configurable commit processing order (#1485) - (ead5587)
• (remote) Add environment variable for offline execution (#1427) - (2d53920)
• (tracing) Migrate logging to tracing (#1488) - (b71d250)

🐛 Bug Fixes

• (args) Correctly parse multiple env values for include/exclude paths (#1450) - (f1874b8)
• (cd) Publish musl wheels to PyPI by matching matrix.build.NAME (#1490) - (9b5e732)
• (cli) Warn when --with-commit does not change version (#1484) - (3d6a7cb)
• (docs) Use updated usage of doc_auto_cfg and fix internal link (#1373) - (0a0a795)
• (npm) Use require.resolve to resolve binary path (#1392) - (39cd76e)
• (remote) Deserialize GitLab API data models safely (#1368) - (954106f)

🚜 Refactor

• (deps) Replace dirs_next with etcetera (#1477) - (ee8bfd1)

📚 Documentation

• (website) Add highlights for 2.13.0 (#1491) - (3a6195f)
• (website) Add more-examples section for templates (#1472) - (e588472)

⚡ Performance

• (ci) Add caching where applicable (#1486) - (bd074d9)

🧪 Testing

• (fixture) Add test fixture for skipped contributors (#1481) - (68b59a5)
• (fixtures) Add include-path multi-value handling tests (#1456) - (dbe670c)
• (website) Add site crawler for console error (#1444) - (e7057dd)

⚙️ Miscellaneous Tasks

• (ci) Add github token to the profiler job (#1359) - (91e65f5)

... (truncated)

Commits

• 5d3a670 chore(release): prepare for v2.13.1
• b99a232 fix(cd): prepare embedded assets before PyPI and crates.io packaging
• d235492 chore(release): prepare for v2.13.0
• 3a6195f docs(website): add highlights for 2.13.0 (#1491)
• 9b5e732 fix(cd): publish musl wheels to PyPI by matching matrix.build.NAME (#1490)
• b71d250 feat(tracing): migrate logging to tracing (#1488)
• 9d43a15 feat(context): add per-commit statistics (#1487)
• ead5587 feat(git): add configurable commit processing order (#1485)
• 3e97e75 feat(context): expose determined bump type in release context (#1483)
• bd074d9 perf(ci): add caching where applicable (#1486)
• Additional commits viewable in compare view

Updates sort-package-json from 3.6.1 to 4.0.0

Release notes

Sourced from sort-package-json's releases.

v4.0.0

4.0.0 (2026-06-03)

• refactor!: drop support for Nodejs 20 (#412) (d51292c)

BREAKING CHANGES

• This drops support for Nodejs 20, and drops the polyfill for Object.groupBy - instead calling it directly. This means this version will fail to run in Nodejs 20 contexts without an Object.groupBy polyfill.

Going forward and issues relating to support for Nodejs 20 will be closed, our minimum supported Nodejs version is 22 - which we will aim to support until April 2027, when it becomes EOL.

v3.7.1

3.7.1 (2026-06-03)

Bug Fixes

• revert "chore: drop support for Nodejs 20 (#412)" (c22cfe8)

v3.7.0

3.7.0 (2026-06-02)

Features

• sort wireit (#402) (0f2dc7a)

Commits

• d51292c refactor!: drop support for Nodejs 20 (#412)
• c22cfe8 fix: revert "chore: drop support for Nodejs 20 (#412)"
• 0f2dc7a feat: sort wireit (#402)
• 94c3904 chore: drop support for Nodejs 20 (#412)
• 7622c1a chore: exclude git-hooks-list (#392)
• See full diff in compare view

Updates prettier from 3.8.1 to 3.9.1

Release notes

Sourced from prettier's releases.

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

• Fix Flow variance annotation print (#19022 by @​marcoww6)

🔗 Changelog

3.8.4

• Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @​byplayer)

🔗 Changelog

3.8.3

• SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @​kovsu)

🔗 Changelog

3.8.2

• Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.1

diff

CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

Bug details prettier/prettier#18016

3.9.0

diff

🔗 Release Notes

3.8.5

diff

Flow: Support readonly as a variance annotation (#19022 by @​marcoww6)

Flow now accepts readonly as a property variance annotation, equivalent to + (covariant/read-only).

// Input
type T = {
  readonly foo: string,
};
// Prettier 3.8.4
SyntaxError
// Prettier 3.8.5
type T = {
readonly foo: string,
};

3.8.4

diff

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (#17746 by @​byplayer)

Prettier was removing blank lines between list items and their nested sub-lists, converting loose lists into tight lists and changing their semantic meaning.

<!-- Input -->
- a
</tr></table> 

... (truncated)

Commits

• c47654c Release 3.9.1
• 06159aa Fix bug in release script
• 4bc5ab4 Update file-entry-cache to 11.1.5 (#19483)
• b7fd58b Release @prettier/plugin-oxc@0.2.0 and @prettier/plugin-hermes@0.2.0
• 3006400 Revert changes in release script
• 7bef7db Git blame ignore 3.9.0
• bb817b1 Bump Prettier dependency to 3.9.0
• 05cf896 Clean changelog_unreleased
• 79f6cdf Disable finished steps
• 3613b1e Add blog post for v3.9 (#19414)
• Additional commits viewable in compare view

Updates prettier-plugin-jsdoc from 1.8.0 to 1.8.1

Changelog

Sourced from prettier-plugin-jsdoc's changelog.

1.8.1 (2026-05-26)

Bug Fixes

• handle parser re-entry from chaining plugins (#262) (a8b84fe), closes #254
• improve plugin search logic to prevent infinite recursion (#255) (7699758)
• respecting quote style in type imports (#257) (c930e0d)

Commits

• See full diff in compare view

Updates prettier-plugin-multiline-arrays from 4.1.5 to 4.1.9

Release notes

Sourced from prettier-plugin-multiline-arrays's releases.

v4.1.9

Previous: v4.1.8 Compare: v4.1.8...v4.1.9

Commits

• 3483778 (electrovir): [patch] update deps and configs and fix license string

v4.1.8

Previous: v4.1.7 Compare: v4.1.7...v4.1.8

Commits

• 5bb660d (electrovir): [patch] fix GitHub issue #71

v4.1.7

Previous: v4.1.6 Compare: v4.1.6...v4.1.7

Commits

• e85a620 (electrovir): [patch] fix GitHub issue #70 in an automated test
• 04e323e (electrovir): [dev] repro GitHub issue #70 in an automated test

v4.1.6

Previous: v4.1.5 Compare: v4.1.5...v4.1.6

Commits

• 2cdaef0 (electrovir): [patch] fix GitHub issue #69
• 08bf44c (electrovir): [dev] repro issue #69 in an automated test
• 8861a83 (electrovir): [patch] update deps, configs, linting, and internal formatting

Commits

• 3483778 [patch] update deps and configs and fix license string
• 5bb660d [patch] fix GitHub issue #71
• e85a620 [patch] fix GitHub issue #70 in an automated test
• 04e323e [dev] repro GitHub issue #70 in an automated test
• 2cdaef0 [patch] fix GitHub issue #69
• 08bf44c [dev] repro issue #69 in an automated test
• 8861a83 [patch] update deps, configs, linting, and internal formatting
• See full diff in compare view

Updates prettier-plugin-powershell from 2.0.11 to 2.1.6

Release notes

Sourced from prettier-plugin-powershell's releases.

v2.1.6

[2.1.6] - 2026-06-27

• Commit Range: ➡️ 7541af3...b25b443

📦 Dependencies

• 7a7ef03 — [dependency] Update the npm_and_yarn group across 1 directory with 3 updates

[dependency] Updates the npm_and_yarn group with 2 updates in the / directory: @​apidevtools/json-schema-ref-parser and undici.

Updates @apidevtools/json-schema-ref-parser from 11.1.0 to 15.4.0

• Release notes
• Commits

Updates minimatch from 9.0.3 to 9.0.9

• Changelog
• Commits

Updates undici from 7.27.1 to 7.28.0

• Release notes
• Commits

Updates undici from 8.3.0 to 8.5.0

• Release notes
• Commits

---

updated-dependencies:

• dependency-name: "@​apidevtools/json-schema-ref-parser" dependency-version: 15.4.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: minimatch dependency-version: 9.0.9 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: undici dependency-version: 7.28.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: undici dependency-version: 8.5.0 dependency-type: indirect dependency-group: npm_and_yarn ...

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prettier-plugin-powershell since your current version.

Updates prettier-plugin-tailwindcss from 0.7.2 to 0.8.0

Release notes

Sourced from prettier-plugin-tailwindcss's releases.

v0.8.0

Changed

• Require at least Prettier 3.7.x (#420)

Added

• Export public sorting APIs to /sorter (#438)

Fixed

• Remove top-level await (#420)
• Improve load-time performance (#420)
• Improve config resolution caching with directory-based cache (#432)
• Load compatible plugins on demand and tighten plugin detection (#437)
• Load v3/v4 modules only when needed (#439)
• Remove recast/ast-types deps and optimize dynamic JS attribute handling (#440)
• Remove unused deps (#441)
• Use the plugin that has already been imported rather than dynamically importing it again (#442)
• Skip visiting non-node children (#443)
• Optimize whitespace-only class detection (#429)
• Fix v3 config loading with Jiti re-exports (#448)
• Collapse whitespace in template literals with adjacent quasis (#427)
• Improve canCollapseWhitespaceIn handling for "tailwindPreserveWhitespace": true (#428)

v0.7.4

Same as v0.7.2, since v0.7.3 contained breaking changes.

v0.7.3

Changed

• Remove top-level await (#420)
• Improve load-time performance (#420)

Fixed

• Collapse whitespace in template literals with adjacent quasis (#427)

Changelog

Sourced from prettier-plugin-tailwindcss's changelog.

[0.8.0] - 2026-04-27

Changed

• Require at least Prettier 3.7.x (#420)

Added

• Export public sorting APIs to /sorter (#438)

Fixed

• Remove top-level await (#420)
• Improve load-time performance (#420)
• Improve config resolution caching with directory-based cache (#432)
• Load compatible plugins on demand and tighten plugin detection (#437)
• Load v3/v4 modules only when needed (#439)
• Remove recast/ast-types deps and optimize dynamic JS attribute handling (#440)
• Remove unused deps (#441)
• Use the plugin that has already been imported rather than dynamically importing it again (#442)
• Skip visiting non-node children (#443)
• Optimize whitespace-only class detection (#429)
• Fix v3 config loading with Jiti re-exports (#448)
• Collapse whitespace in template literals with adjacent quasis (#427)
• Improve canCollapseWhitespaceIn handling for "tailwindPreserveWhitespace": true (#428)

Commits

• f77532e 0.8.0
• 4815377 Update the changelog for recent PRs (#449)
• 0a7ddcb Fix insiders tags sometimes published to latest channel (#453)
• 8066e85 release on published event
• 3b0ed57 move --silent flag before the script
• f7d2598 0.7.3
• 9a51191 merge release.yml and release-insiders.yml
• 3997fbd Use explicit import() expressions in plugin load arrays for bundler compatibi...
• 125a8bc Fix v3 config loading with Jiti re-exports (#448)
• 2ac6e70 Enable minify: "dce-only in tsdown (#447)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prettier-plugin-tailwindcss since your current version.

Updates @augment-vir/assert from 31.68.3 to 31.73.2

Release notes

Sourced from @​augment-vir/assert's releases.

v31.73.2

Previous: v31.73.1 Compare: v31.73.1...v31.73.2

Commits

• 9b4b3d475 (electrovir): [patch] update deps
• 25dd035be (electrovir): [patch] only infer mergeDeep type param from the first arg
• f49527b6b (electrovir): [dev] more CI test fixes
• 885816efc (electrovir): [dev] fix CI tests

v31.73.1

Previous: v31.73.0 Compare: v31.73.0...v31.73.1

Commits

• 093948afd (electrovir): [patch] bump patch version
• 598392f2c (Wadlo): [patch] make expectPlaywrightScreenshot fail on mismatch in CI (#16) A failed screenshot comparison previously only threw when process.env.CI was unset; in CI it silently rewrote the (ephemeral) baseline and passed, so screenshot baselines were never enforced in CI. The condition was an inverted check — it should throw in CI and only auto-write locally. Fix the condition so a mismatch throws (writing expected/actual/diff debug artifacts) when process.env.CI is set, and still auto-writes the baseline on local runs. Add an e2e test that sets process.env.CI='true' and asserts the mismatch throws. Co-authored-by: Claude Opus 4.8 noreply@anthropic.com

v31.73.0

Previous: v31.72.1 Compare: v31.72.1...v31.73.0

Commits

• cfb3ca432 (electrovir): [minor] add listenToElementDisconnect to @​augment-vir/web

v31.72.1

Previous: v31.72.0 Compare: v31.72.0...v31.72.1

Commits

• ecf3e74ba (electrovir): [patch] fix getOrSet and getOrSetFromMap type inference

v31.72.0

Previous: v31.71.4 Compare: v31.71.4...v31.72.0

Commits

... (truncated)

Commits

• 9b4b3d4 [patch] update deps
• 25dd035 [patch] only infer mergeDeep type param from the first arg
• f49527b [dev] more CI test fixes
• 885816e [dev] fix CI tests
• 093948a [patch] bump patch version
• 598392f [patch] make expectPlaywrightScreenshot fail on mismatch in CI (#16)
• cfb3ca4 [minor] add listenToElemen...

  Description has been truncated

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	prettier-plugin-powershell@​2.0.11 ⏵ 2.1.6			+1	+1
	git-cliff@​2.12.0 ⏵ 2.13.1	+1
	prettier-plugin-jsdoc@​1.8.0 ⏵ 1.8.1	+1
	prettier-plugin-multiline-arrays@​4.1.5 ⏵ 4.1.9	+1
	sort-package-json@​3.6.1 ⏵ 4.0.0	+1
	prettier-plugin-tailwindcss@​0.7.2 ⏵ 0.8.0	-1
	prettier@​3.8.1 ⏵ 3.9.1	+1		+1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm cheerio is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → npm/markdown-link-check@3.14.2 → npm/cheerio@1.2.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/cheerio@1.2.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm execa is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → npm/git-cliff@2.13.1 → npm/execa@9.6.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/execa@9.6.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm htmlparser2 is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → npm/markdown-link-check@3.14.2 → npm/htmlparser2@10.1.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/htmlparser2@10.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm node-sql-parser is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → npm/prettier-plugin-sql@0.20.0 → npm/node-sql-parser@5.4.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/node-sql-parser@5.4.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm validator is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package-lock.json → npm/markdown-link-check@3.14.2 → npm/validator@13.15.35 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/validator@13.15.35. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.79%. Comparing base (6349f8d) to head (0cd65c1).
✅ All tests successful. No failed tests found.

❌ Your project check has failed because the head coverage (92.98%) is below the target coverage (95.00%). You can increase the head coverage or adjust the target coverage.

Flag	Coverage Δ
pwsh-macos-latest	92.06% <ø> (ø)
pwsh-ubuntu-latest	91.60% <ø> (ø)
pwsh-windows-latest	92.79% <ø> (ø)
windows-powershell-51	92.79% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

@@            Coverage Diff             @@
##             main      #22      +/-   ##
==========================================
- Coverage   92.98%   92.79%   -0.20%     
==========================================
  Files          55       55              
  Lines        1512     1512              
==========================================
- Hits         1406     1403       -3     
- Misses        106      109       +3     

Components	Coverage Δ
Core Module	92.98% <ø> (ø)
Test Suite	∅ <ø> (∅)
Utility Scripts	∅ <ø> (∅)
Configuration & Build	∅ <ø> (∅)

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6349f8d...0cd65c1. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[github-actions]

Greetings, thanks for opening a pull request, I'll look when I can.