Bump the node-packages group across 1 directory with 3 updates

[dependabot]

Bumps the node-packages group with 3 updates in the / directory: npm, husky and sass.

Updates npm from 10.5.2 to 10.8.2

Changelog

Sourced from npm's changelog.

10.8.2 (2024-07-09)

Bug Fixes

• 3101a40 #7631 limit concurrent open files during 'npm cache verify' (#7631) (@​oikumene)
• 2273183 #7595 outdated: fixed wanted range for alias with version range (#7595) (@​milaninfy)
• 15be6dd #7574 don't try parsing workspaces if none exist (@​wraithgar)

Documentation

• ac937d4 #7616 install: add save-peer flag (#7616) (@​drew4237)
• 55639ef #7615 use git+https in package.com url examples (#7615) (@​MikeMcC399)
• 93883bb #7582 Improve manpage section for package.json funding properties (#7582) (@​kemitchell)
• 92e71e6 #7576 fix links to community discussions (#7576) (@​leobalter)

Dependencies

• 1c1adae #7636 npm-pick-manifest@9.1.0
• 5e4fa18 #7636 socks-proxy-agent@8.0.4
• d8fa116 #7636 https-proxy-agent@7.0.5
• 76dab91 #7636 normalize-package-data@6.0.2
• 094c4ea #7636 minimatch@9.0.5
• 1c8d41d #7636 @npmcli/git@5.0.8
• e5451e1 #7605 jackspeak@3.4.0
• 7b584d3 #7605 foreground-child@3.2.1
• 941d0d7 #7605 debug@4.3.5
• 8b8ce7a #7605 glob@10.4.2
• 4646768 #7605 npm-registry-fetch@17.1.0
• 6f0d7ce #7605 @npmcli/redact@2.0.1
• 29204c8 #7605 @npmcli/package-json@5.2.0
• 04d6910 #7574 @npmcli/package-json@5.1.1
• 4ef4830 #7574 remove read-package-json-fast

10.8.2 (2024-07-09)

Bug Fixes

• 3101a40 #7631 limit concurrent open files during 'npm cache verify' (#7631) (@​oikumene)
• 2273183 #7595 outdated: fixed wanted range for alias with version range (#7595) (@​milaninfy)
• 15be6dd #7574 don't try parsing workspaces if none exist (@​wraithgar)

Documentation

• ac937d4 #7616 install: add save-peer flag (#7616) (@​drew4237)
• 55639ef #7615 use git+https in package.com url examples (#7615) (@​MikeMcC399)
• 93883bb #7582 Improve manpage section for package.json funding properties (#7582) (@​kemitchell)
• 92e71e6 #7576 fix links to community discussions (#7576) (@​leobalter)

Dependencies

• 1c1adae #7636 npm-pick-manifest@9.1.0

... (truncated)

Commits

• dbe7d98 chore: release 10.8.2
• 1c1adae deps: npm-pick-manifest@9.1.0
• 5e4fa18 deps: socks-proxy-agent@8.0.4
• d8fa116 deps: https-proxy-agent@7.0.5
• 76dab91 deps: normalize-package-data@6.0.2
• 094c4ea deps: minimatch@9.0.5
• 1c8d41d deps: @​npmcli/git@​5.0.8
• 3101a40 fix: limit concurrent open files during 'npm cache verify' (#7631)
• 6f33d74 fix(arborist): safeguard against null node.target in flag calculation (#7579)
• 2490b49 chore: remove .github/workflows/benchmark.yml (#7621)
• Additional commits viewable in compare view

Updates husky from 9.0.11 to 9.1.1

Release notes

Sourced from husky's releases.

v9.1.1

Super saiyan god dog! It's over 9.0.0!

What's new

You can now run package commands directly, no need for npx or equivalents. It makes writing hooks more intuitive and is also slightly faster 🐺⚡️

# .husky/pre-commit
- npx jest
+ jest # ~0.2s faster

A new recipe has been added to the docs. Lint staged files without external dependencies (inspired by Prettier docs). Feel free to modify it.

# .husky/pre-commit
prettier $(git diff --cached --name-only --diff-filter=ACMR | sed 's| |\\ |g') --write --ignore-unknown
git update-index --again

For more advanced use cases, see lint-staged.

Fixes

• bunx husky init command
• Workaround for some hooks implementation on Windows

Deprecations

• #!/usr/bin/env sh and . "$(dirname -- "$0")/_/husky.sh" are deprecated. husky command will automatically remove them, no action required.
• If you're having code in ~/.huskyrc please move it to .config/husky/init.sh

Support for these will be removed in v10.

Friendly reminder

If Git hooks don't fit your workflow, you can disable Husky globally. Just add export HUSKY=0 to .config/husky/init.sh.

I've seen some confusion about this on X, so just a heads-up!

Sponsoring

Husky is downloaded over 45M times per month and used by ~1.5M projects. If your company wants to sponsor, you can do so here: GitHub Sponsors.

... (truncated)

Commits

• 2968998 9.1.1
• 902749b docs
• a25c6ce update vitepress
• bbfe8e3 Merge branch 'ccerrillo-fix-windows-path'
• eb54845 automatically rm deprecated code
• e8badd7 Small typo fix (#1471)
• a24ccbc 9.1.0
• 9085a9d v9.1.0 (#1467)
• b9f5889 automatically rm deprecated code
• 71e5dcb Small typo fix (#1471)
• Additional commits viewable in compare view

Updates sass from 1.75.0 to 1.77.8

Release notes

Sourced from sass's releases.

Dart Sass 1.77.8

To install Sass 1.77.8, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.77.5

To install Sass 1.77.5, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Fully trim redundant selectors generated by @extend.

See the full changelog for changes in earlier releases.

Dart Sass 1.77.4

To install Sass 1.77.4, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Embedded Sass

• Support passing Version input for fatalDeprecations as string over embedded protocol.

• Fix a bug in the JS Embedded Host where Version could be incorrectly accepted as input for silenceDeprecations and futureDeprecations in pure JS.

See the full changelog for changes in earlier releases.

Dart Sass 1.77.3

To install Sass 1.77.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Dart API

... (truncated)

Changelog

Sourced from sass's changelog.

1.77.8

• No user-visible changes.

1.77.7

• Declarations that appear after nested rules are deprecated, because the semantics Sass has historically used are different from the semantics specified by CSS. In the future, Sass will adopt the standard CSS semantics.

  See the Sass website for details.

• Potentially breaking bug fix: // in certain places such as unknown at-rule values was being preserved in the CSS output, leading to potentially invalid CSS. It's now properly parsed as a silent comment and omitted from the CSS output.

1.77.6

• Fix a few cases where comments and occasionally even whitespace wasn't allowed between the end of Sass statements and the following semicolon.

1.77.5

• Fully trim redundant selectors generated by @extend.

1.77.4

Embedded Sass

• Support passing Version input for fatalDeprecations as string over embedded protocol.

• Fix a bug in the JS Embedded Host where Version could be incorrectly accepted as input for silenceDeprecations and futureDeprecations in pure JS.

1.77.3

Dart API

• Deprecation.duplicateVariableFlags has been deprecated and replaced with Deprecation.duplicateVarFlags to make it consistent with the duplicate-var-flags name used on the command line and in the JS API.

1.77.2

• Don't emit deprecation warnings for functions and mixins beginning with __.

• Allow user-defined functions whose names begin with _ and otherwise look like vendor-prefixed functions with special CSS syntax.

... (truncated)

Commits

• be9c3ac Run Windows ARM64 releases on windows-latest instead (#2275)
• d4b1939 Run pub in verbose mode on windows-arm64
• c96b5e2 Fix windows-arm64 release (#2274)
• 7203d65 Deprecated mixed declarations (#2267)
• 1edc247 Avoid [this] in Dartdoc comments (#2273)
• a164889 Enable AOT build for windows-arm64 (#2270)
• 04b6251 Parse silent comments in _interpolatedDeclarationValue() (#2266)
• 860eb5a Fix linux-ia32, linux-arm-musl, and windows-arm64 releases (#2265)
• 7aae1e6 Fix a bug where comments were incorrectly forbidden in some cases (#2264)
• cf6f9d0 Build AOT releases with native arm64 runners (#2262)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions