chore(deps-dev): bump style-dictionary from 3.9.2 to 5.0.3

[dependabot]

Bumps style-dictionary from 3.9.2 to 5.0.3.

Release notes

Sourced from style-dictionary's releases.

v5.0.3

Patch Changes

• 3d070f5: Move patch-package to devDependencies and run in prepare instead of postinstall, so it only runs when npm installing locally and not for consumers.
• 71614da: Wrap structuredClone in loadFile in a try catch, in case we have a JS/TS config file with dynamic content.

v5.0.2

Patch Changes

• 8e413a2: Fix vulnerable dependencies, patch-package and its transitive tmp dependency in particular.
• 9f84a81: Remove node-sass from create-react-app example, dart-sass is used now usually.
• da19c8f: Small patch to allow no-destination "files" to not cause errors when using clean methods.

v5.0.1

Patch Changes

• 463b456: Simplify internal cleanFile(s) utils, fix a bug that would still attempt to unlink non-existent files in verbosity "silent" mode.
• 8f7c522: Fix loadFile to deep clone ES module exports to avoid unintended mutations

v5.0.0

Major Changes

• 02300b1: No longer allow references to non-token leaf nodes. References only work when referencing a Design Token (its value). Non-token nodes will also not make it to the output, because they are filtered out during the flattening process to tokenMap and tokenArray. Remove allowing references with .value suffix.
• f19a0cb: BREAKING: no longer possible to pass options to change the reference syntax {ref.foo}. The opening, closing and separator characters are now set to be aligned with the DTCG spec.
• 02300b1: BREAKING: minimum NodeJS version required is now v22.0.0 (LTS, at time of writing this). This is to support Set.prototype.union which we utilize in our token reference resolution utility, and it's important to use the cheaper built-in versus doing a union manually.

Minor Changes

• 02300b1: Support passing Token Map structure to getReferences and resolveReferences utils.
• b80e75b: When transform hooks throw errors, they will now be caught and error-handled by Style Dictionary. Instead of causing a fatal failure, the error is collected and logged as a warning at the end. With verbosity turned to "verbose", information about which tokens in which files are causing an error in which transform, to help debugging the problem. Sensible fallbacks are used when a transform cannot complete.

Patch Changes

• a23f353: SD will use posix style paths ('/') as much as possible and rely on node:fs to translate to win32 paths whenever a call to the filesystem is done. The exception is for dynamic imports of JS files (SD config, token files).
• a23f353: Allow buildPaths without a trailing slash, by making use of path.join() utility.
• 9bbbc8a: Dynamically import prettier and plugins so that they can be chunked separately by bundlers, and only imported on demand. This will significantly improve bundle size for users of Style Dictionary.

v5.0.0-rc.2

Patch Changes

• a9c0461: SD will use posix style paths ('/') as much as possible and rely on node:fs to translate to win32 paths whenever a call to the filesystem is done. The exception is for dynamic imports of JS files (SD config, token files).
• a9c0461: Allow buildPaths without a trailing slash, by making use of path.join() utility.
• 3a91a3f: Dynamically import prettier and plugins so that they can be chunked separately by bundlers, and only imported on demand. This will significantly improve bundle size for users of Style Dictionary.

v5.0.0-rc.1

... (truncated)

Changelog

Sourced from style-dictionary's changelog.

5.0.3

Patch Changes

• 3d070f5: Move patch-package to devDependencies and run in prepare instead of postinstall, so it only runs when npm installing locally and not for consumers.
• 71614da: Wrap structuredClone in loadFile in a try catch, in case we have a JS/TS config file with dynamic content.

5.0.2

Patch Changes

• 8e413a2: Fix vulnerable dependencies, patch-package and its transitive tmp dependency in particular.
• 9f84a81: Remove node-sass from create-react-app example, dart-sass is used now usually.
• da19c8f: Small patch to allow no-destination "files" to not cause errors when using clean methods.

5.0.1

Patch Changes

• 463b456: Simplify internal cleanFile(s) utils, fix a bug that would still attempt to unlink non-existent files in verbosity "silent" mode.
• 8f7c522: Fix loadFile to deep clone ES module exports to avoid unintended mutations

5.0.0

Major Changes

• 02300b1: No longer allow references to non-token leaf nodes. References only work when referencing a Design Token (its value). Non-token nodes will also not make it to the output, because they are filtered out during the flattening process to tokenMap and tokenArray. Remove allowing references with .value suffix.
• f19a0cb: BREAKING: no longer possible to pass options to change the reference syntax {ref.foo}. The opening, closing and separator characters are now set to be aligned with the DTCG spec.
• 02300b1: BREAKING: minimum NodeJS version required is now v22.0.0 (LTS, at time of writing this). This is to support Set.prototype.union which we utilize in our token reference resolution utility, and it's important to use the cheaper built-in versus doing a union manually.

Minor Changes

• 02300b1: Support passing Token Map structure to getReferences and resolveReferences utils.
• b80e75b: When transform hooks throw errors, they will now be caught and error-handled by Style Dictionary. Instead of causing a fatal failure, the error is collected and logged as a warning at the end. With verbosity turned to "verbose", information about which tokens in which files are causing an error in which transform, to help debugging the problem. Sensible fallbacks are used when a transform cannot complete.

Patch Changes

• a23f353: SD will use posix style paths ('/') as much as possible and rely on node:fs to translate to win32 paths whenever a call to the filesystem is done. The exception is for dynamic imports of JS files (SD config, token files).
• a23f353: Allow buildPaths without a trailing slash, by making use of path.join() utility.
• 9bbbc8a: Dynamically import prettier and plugins so that they can be chunked separately by bundlers, and only imported on demand. This will significantly improve bundle size for users of Style Dictionary.

4.4.0

Minor Changes

... (truncated)

Commits

• 0dba4cc chore: release (#1559)
• 29a5cc2 chore: move @​types/node to dev dependencies (#1560)
• 3d070f5 fix: move patch-package to dev deps and prepare script (#1557)
• 8e50b1d chore: fix docs output refs example (#1558)
• 71614da fix: wrap loadFile structuredClone in try catch (#1556)
• d7cec65 docs: fix v4 migration links (#1554)
• 3eea387 chore: release (#1537)
• da19c8f fix: error when cleaning buildPath dir & no-destination file (#1538)
• 8e413a2 fix: fix vulnerabilities (#1549)
• 22c2669 chore: links to v3 old docs (#1545)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🔭🐙🐈 Test this branch here: https://db-ui.github.io/base/review/dependabot-npm_and_yarn-style-dictionary-5.0.3

[dependabot]

Superseded by #756.