chore(deps-dev): bump the development-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the development-dependencies group with 5 updates in the / directory:

Package	From	To
@types/react-dom	19.2.4	19.2.5
firebase	12.17.1	12.18.0
lint-staged	17.3.0	17.4.1
sass	1.102.0	1.103.1
sharp	0.35.3	0.35.4

Updates @types/react-dom from 19.2.4 to 19.2.5

Commits

• See full diff in compare view

Updates firebase from 12.17.1 to 12.18.0

Release notes

Sourced from firebase's releases.

firebase@12.18.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@​2.15.0

Minor Changes

• d4b83fd #10267 - Imagen methods and types have been removed due to Imagen models being shut down. As a replacement, you can migrate your apps to use Gemini Image models (the "Nano Banana" models).

Patch Changes

• 589b24b #10293 - Updated many top-level devDependencies.

• 7fc34cb #10248 - Fixed incorrect detection of LanguageModel that prevented usage of on-device models in Chrome Extensions.

• Updated dependencies [589b24b]:

  • @​firebase/app-check-interop-types@​0.3.5
  • @​firebase/component@​0.7.5
  • @​firebase/logger@​0.5.2
  • @​firebase/util@​1.15.3

firebase@12.18.0

Minor Changes

• f52201b #9942 (fixes #9807) - Add more details to FunctionsError. Add HTTP status code to the message field and add url to customData.

• d4b83fd #10267 - Imagen methods and types have been removed due to Imagen models being shut down. As a replacement, you can migrate your apps to use Gemini Image models (the "Nano Banana" models).

Patch Changes

• 589b24b #10293 - Updated many top-level devDependencies.

• 72632ee #10270 - Fix issue preventing App Check tokens from being properly recognized when sent in Firebase SQL Connect Realtime requests

• Updated dependencies [d80fb9a, 589b24b, 44d336b, 981204d, f52201b, d4b83fd, 2e22761, 72632ee, 7fc34cb]:

  • @​firebase/app-check@​0.13.1
  • @​firebase/firestore-compat@​0.4.13
  • @​firebase/remote-config@​0.9.2
  • @​firebase/auth-compat@​0.6.10
  • @​firebase/analytics@​0.10.24
  • @​firebase/firestore@​4.17.1
  • @​firebase/auth@​1.13.5
  • @​firebase/app@​0.16.1
  • @​firebase/ai@​2.15.0
  • @​firebase/analytics-compat@​0.2.30
  • @​firebase/app-check-compat@​0.4.7
  • @​firebase/app-compat@​0.5.17
  • @​firebase/app-types@​0.9.6

... (truncated)

Commits

• 6cde0c0 Version Packages (#10316)
• ade2b70 Merge main into release
• 589b24b chore(deps): mass dependency update round 3 (#10293)
• d80fb9a feat(app-check): Update debug token console log message (#10262)
• ae9adcb Remove pashanka from auth owners (#10304)
• 317dcd9 docs(firestore): fix api extractor tsdoc syntax and release tag warnings (#10...
• 31b3f14 chore(firestore): clean up unused external imports and configure rollup exter...
• f063aad chore: add agents.md (#10302)
• 44d336b fix(auth): remove visibilitychange listener from IndexedDBLocalPersistence (#...
• 19693de chore(deps): remove some deps and replace with native solutions (#10294)
• Additional commits viewable in compare view

Updates lint-staged from 17.3.0 to 17.4.1

Release notes

Sourced from lint-staged's releases.

v17.4.1

17.4.1

Patch Changes

• #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

• #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

  // lint-staged.config.ts
  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': ['prettier --check', 'eslint'],
  })

• #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

  By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

• #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

• #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Changelog

Sourced from lint-staged's changelog.

17.4.1

Patch Changes

• #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

• #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

  // lint-staged.config.ts
  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': ['prettier --check', 'eslint'],
  })

• #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

  By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

• #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

• #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

Commits

• d0c1517 Merge pull request #1841 from lint-staged/changeset-release/main
• f061335 chore(changeset): release
• d2721af Merge pull request #1840 from lint-staged/updates
• efe5b63 ci: update Changesets action because it failed to publish
• cd76ce3 build: update dependencies
• ea195e1 Merge pull request #1837 from lint-staged/changeset-release/main
• a6a0d61 chore(changeset): release
• 0a09098 Merge pull request #1832 from lint-staged/add-all-flag
• 7fd685b fix: further fix parsing options logic
• 510a27c feat: add --all flag for including all files tracked by Git instead of just...
• Additional commits viewable in compare view

Updates sass from 1.102.0 to 1.103.1

Release notes

Sourced from sass's releases.

Dart Sass 1.103.1

To install Sass 1.103.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.103.0

To install Sass 1.103.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.103.1

• No user-visible changes.

1.103.0

• Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

Commits

• 62243d4 Set committer metadata when creating a tag (#2838)
• ed4dcc7 Use more dot shorthands (#2837)
• ac3d928 Support analogous sets of missing channels (#2810)
• 1e0cf28 Merge pull request #2834 from ntkme/fix-release
• f3bd86a Merge pull request #2835 from sass/dart-sdk-version
• 287f9ba Code review
• 91831b8 Fix dartdoc error
• 0971ea9 Bump bufbuild/buf-action from 1.4.0 to 1.5.0 in /.github/util/initialize (#2826)
• c45223b Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.2 (#2828)
• cbb1db1 Bump dart-lang/setup-dart from 1.7.2 to 1.8.0 (#2829)
• Additional commits viewable in compare view

Updates sharp from 0.35.3 to 0.35.4

Release notes

Sourced from sharp's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

• Bound resize dimensions to coordinate limit.

• Bound composite left and top to coordinate limit. #4564 @​metsw24-max

• Round palette bit depth up for png and gif colours. #4569 @​metsw24-max

• Ensure tiff.subifd input option is used. #4572 @​metsw24-max

• Ensure info.pages is correct when limiting input page range. #4578 @​metsw24-max

• Improve support for input Streams finishing before output is requested. #4584 @​Jaybhade

v0.35.4-rc.0

• Upgrade to libvips v8.18.6 for upstream bug fixes.

• Bound resize dimensions to coordinate limit.

• Bound composite left and top to coordinate limit. #4564 @​metsw24-max

• Round palette bit depth up for png and gif colours. #4569 @​metsw24-max

• Ensure tiff.subifd input option is used. #4572 @​metsw24-max

• Ensure info.pages is correct when limiting input page range. #4578 @​metsw24-max

• Improve support for input Streams finishing before output is requested. #4584 @​Jaybhade

Commits

• 7f1a0a2 Release v0.35.4
• f927818 Upgrade to sharp-libvips v1.3.3
• e802092 Prerelease v0.35.4-rc.0
• e13eb2f CI: Fix wasm32 build (#4589)
• a82a0b3 Upgrade to libvips v8.18.6
• 8044fe4 Bound resize dimensions to coordinate limit
• 147f859 Docs: changelog entries for #4578 #4584
• ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
• 7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
• ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions