chore(deps-dev): bump style-dictionary from 3.9.2 to 5.0.2

[dependabot]

Bumps style-dictionary from 3.9.2 to 5.0.2.

Release notes

Sourced from style-dictionary's releases.

v5.0.2

Patch Changes

• 8e413a2: Fix vulnerable dependencies, patch-package and its transitive tmp dependency in particular.
• 9f84a81: Remove node-sass from create-react-app example, dart-sass is used now usually.
• da19c8f: Small patch to allow no-destination "files" to not cause errors when using clean methods.

v5.0.1

Patch Changes

• 463b456: Simplify internal cleanFile(s) utils, fix a bug that would still attempt to unlink non-existent files in verbosity "silent" mode.
• 8f7c522: Fix loadFile to deep clone ES module exports to avoid unintended mutations

v5.0.0

Major Changes

• 02300b1: No longer allow references to non-token leaf nodes. References only work when referencing a Design Token (its value). Non-token nodes will also not make it to the output, because they are filtered out during the flattening process to tokenMap and tokenArray. Remove allowing references with .value suffix.
• f19a0cb: BREAKING: no longer possible to pass options to change the reference syntax {ref.foo}. The opening, closing and separator characters are now set to be aligned with the DTCG spec.
• 02300b1: BREAKING: minimum NodeJS version required is now v22.0.0 (LTS, at time of writing this). This is to support Set.prototype.union which we utilize in our token reference resolution utility, and it's important to use the cheaper built-in versus doing a union manually.

Minor Changes

• 02300b1: Support passing Token Map structure to getReferences and resolveReferences utils.
• b80e75b: When transform hooks throw errors, they will now be caught and error-handled by Style Dictionary. Instead of causing a fatal failure, the error is collected and logged as a warning at the end. With verbosity turned to "verbose", information about which tokens in which files are causing an error in which transform, to help debugging the problem. Sensible fallbacks are used when a transform cannot complete.

Patch Changes

• a23f353: SD will use posix style paths ('/') as much as possible and rely on node:fs to translate to win32 paths whenever a call to the filesystem is done. The exception is for dynamic imports of JS files (SD config, token files).
• a23f353: Allow buildPaths without a trailing slash, by making use of path.join() utility.
• 9bbbc8a: Dynamically import prettier and plugins so that they can be chunked separately by bundlers, and only imported on demand. This will significantly improve bundle size for users of Style Dictionary.

v5.0.0-rc.2

Patch Changes

• a9c0461: SD will use posix style paths ('/') as much as possible and rely on node:fs to translate to win32 paths whenever a call to the filesystem is done. The exception is for dynamic imports of JS files (SD config, token files).
• a9c0461: Allow buildPaths without a trailing slash, by making use of path.join() utility.
• 3a91a3f: Dynamically import prettier and plugins so that they can be chunked separately by bundlers, and only imported on demand. This will significantly improve bundle size for users of Style Dictionary.

v5.0.0-rc.1

Major Changes

• 7909466: BREAKING: no longer possible to pass options to change the reference syntax {ref.foo}. The opening, closing and separator characters are now set to be aligned with the DTCG spec.

Minor Changes

... (truncated)

Changelog

Sourced from style-dictionary's changelog.

5.0.2

Patch Changes

• 8e413a2: Fix vulnerable dependencies, patch-package and its transitive tmp dependency in particular.
• 9f84a81: Remove node-sass from create-react-app example, dart-sass is used now usually.
• da19c8f: Small patch to allow no-destination "files" to not cause errors when using clean methods.

5.0.1

Patch Changes

• 463b456: Simplify internal cleanFile(s) utils, fix a bug that would still attempt to unlink non-existent files in verbosity "silent" mode.
• 8f7c522: Fix loadFile to deep clone ES module exports to avoid unintended mutations

5.0.0

Major Changes

• 02300b1: No longer allow references to non-token leaf nodes. References only work when referencing a Design Token (its value). Non-token nodes will also not make it to the output, because they are filtered out during the flattening process to tokenMap and tokenArray. Remove allowing references with .value suffix.
• f19a0cb: BREAKING: no longer possible to pass options to change the reference syntax {ref.foo}. The opening, closing and separator characters are now set to be aligned with the DTCG spec.
• 02300b1: BREAKING: minimum NodeJS version required is now v22.0.0 (LTS, at time of writing this). This is to support Set.prototype.union which we utilize in our token reference resolution utility, and it's important to use the cheaper built-in versus doing a union manually.

Minor Changes

• 02300b1: Support passing Token Map structure to getReferences and resolveReferences utils.
• b80e75b: When transform hooks throw errors, they will now be caught and error-handled by Style Dictionary. Instead of causing a fatal failure, the error is collected and logged as a warning at the end. With verbosity turned to "verbose", information about which tokens in which files are causing an error in which transform, to help debugging the problem. Sensible fallbacks are used when a transform cannot complete.

Patch Changes

• a23f353: SD will use posix style paths ('/') as much as possible and rely on node:fs to translate to win32 paths whenever a call to the filesystem is done. The exception is for dynamic imports of JS files (SD config, token files).
• a23f353: Allow buildPaths without a trailing slash, by making use of path.join() utility.
• 9bbbc8a: Dynamically import prettier and plugins so that they can be chunked separately by bundlers, and only imported on demand. This will significantly improve bundle size for users of Style Dictionary.

4.4.0

Minor Changes

• f2395f3: Add a 'flat' option to the javascriptEsm format
• 2f13dcb: Added support for using the selector option as a string or string array in the css/variables formatter. When an array is provided, the CSS variables will be nested within the specified selectors in order

Patch Changes

• ee85609: fix misaligned comments in typescript/es6-declarations
• 6ff17ec: If several preprocessors are defined in the SD configuration, the execution of the preprocessors is now guaranteed in the exact order in which they were configured in the SD configuration.

... (truncated)

Commits

• 3eea387 chore: release (#1537)
• da19c8f fix: error when cleaning buildPath dir & no-destination file (#1538)
• 8e413a2 fix: fix vulnerabilities (#1549)
• 22c2669 chore: links to v3 old docs (#1545)
• 9f84a81 fix: remove node-sass from example (#1536)
• bbe9df4 chore: release (#1530)
• 318839e chore: update node versions workflows (#1531)
• 463b456 fix: no throw for cleaning non-existent files in silent mode (#1529)
• 215f9d8 chore: changed the build workflow icon (#1527)
• a4e3ab6 Update README.md (#1520)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🔭🐙🐈 Test this branch here: https://db-ui.github.io/base/review/dependabot-npm_and_yarn-style-dictionary-5.0.2

[dependabot]

Superseded by #755.