Bump the dev-dependencies group with 2 updates

[dependabot]

Bumps the dev-dependencies group with 2 updates: lightningcss-cli and prettier.

Updates lightningcss-cli from 1.32.0 to 1.33.0

Release notes

Sourced from lightningcss-cli's releases.

v1.33.0

Added

• Add support for ::highlight by @​lucasweng in parcel-bundler/lightningcss#970
• Add support for @​position-try at-rule by @​mattcosta7 in parcel-bundler/lightningcss#1238 #851
• Add support for ::search-text and :current::search-text (#1212) by @​lucinadin in parcel-bundler/lightningcss#1213
• Collapse light-dark(x, x) to x by @​cscnk52 in parcel-bundler/lightningcss#1183
• Supports :target-before/after/current pseudo-class by @​yisibl in parcel-bundler/lightningcss#1185
• Support for the alpha() relative color function by @​yisibl in parcel-bundler/lightningcss#1266

Fixed

• Print unknown at-rules in the same location by @​RobinMalfait in parcel-bundler/lightningcss#1233
• Fix #rrggbbaa support on older versions of android by @​fkeiler in parcel-bundler/lightningcss#1198
• Replace atty with std::io::IsTerminal by @​fkeiler in parcel-bundler/lightningcss#1197
• Bump dependencies (cssparser, const-str) by @​noahbald in parcel-bundler/lightningcss#1200
• Fix minification of negative scientific notation dimensions by @​ssssota in parcel-bundler/lightningcss#1192
• Change serde attribute to be conditional for ResolveResult enum File variant by @​FlorianDevP in parcel-bundler/lightningcss#1251
• Add external to return type of resolve by @​sapphi-red in parcel-bundler/lightningcss#1261

Commits

• c6a0c3c bump rust toolchain
• 1d680fa v1.33.0
• eda315f update ast
• e575845 update compat data
• 91bfa3f Support for the alpha() relative color function (#1266)
• 0f44690 perf: add conditional rule CodSpeed benchmark (#1271)
• a55b05d ci(perf): Add CodSpeed benchmarks (#1243)
• ee703ba fix(types): add external to return type of resolve (#1261)
• ec16529 ci: add permissions: contents: read to test (#1253)
• faf2ca8 Fix conditional serde attribute for ResolveResult enum File variant (#1251)
• Additional commits viewable in compare view

Updates prettier from 3.9.5 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @​fisker)
• Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

1. Install the plugin:

   yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

• 8f0c950 Release 3.9.6
• e910764 Update changelog
• ec3f1c7 Update typescript-eslint to v8.65.0 (#19675)
• 73d2efc Update Yuku parser to v0.7.0 (#19664)
• dd5e24e Preserve quotes for TSMethodSignature nodes named new (#19621)
• c03ab4e Update dependency eslint-plugin-unicorn to v72 (#19633)
• b74dd53 Update Yuku parser to v0.6.5 (#19654)
• f1b594e Update dependency eslint-plugin-simple-import-sort to v14 (#19655)
• 0d9dfb6 Update Yuku parser to v0.6.4 (#19650)
• 3bbb815 Remove typescript-only directory (#19636)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
npm/lightningcss-cli	1.33.0	Unknown	Unknown
npm/lightningcss-cli-android-arm64	1.33.0	Unknown	Unknown
npm/lightningcss-cli-darwin-arm64	1.33.0	Unknown	Unknown
npm/lightningcss-cli-darwin-x64	1.33.0	Unknown	Unknown
npm/lightningcss-cli-freebsd-x64	1.33.0	Unknown	Unknown
npm/lightningcss-cli-linux-arm-gnueabihf	1.33.0	Unknown	Unknown
npm/lightningcss-cli-linux-arm64-gnu	1.33.0	Unknown	Unknown
npm/lightningcss-cli-linux-arm64-musl	1.33.0	Unknown	Unknown
npm/lightningcss-cli-linux-x64-gnu	1.33.0	Unknown	Unknown
npm/lightningcss-cli-linux-x64-musl	1.33.0	Unknown	Unknown
npm/lightningcss-cli-win32-arm64-msvc	1.33.0	Unknown	Unknown
npm/lightningcss-cli-win32-x64-msvc	1.33.0	Unknown	Unknown
npm/prettier	3.9.6	🟢 6.6	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Code-Review ⚠️ 2 Found 5/17 approved changesets -- score normalized to 2 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy 🟢 10 security policy file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• package-lock.json

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​lightningcss-cli@​1.32.0 ⏵ 1.33.0				+6
	npm/​prettier@​3.9.5 ⏵ 3.9.6	+1		+1

View full report