chore(deps): bump the other-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the other-dependencies group with 4 updates in the / directory: @carbon/icons-react, tailwind-merge, lint-staged and yaml.

Updates @carbon/icons-react from 11.87.0 to 11.89.0

Release notes

Sourced from @​carbon/icons-react's releases.

v11.89.0

v11.89.0 (2025-8-13)

babel-preset-carbon@0.8.0

Housekeeping 🏠

• chore(release): v11.89.0 (#20225) (d66cc6afb)
• chore(release): v11.89.0-rc.0 (#20104) (babd7a969)
• chore: make babel-preset-carbon package public (#20088) (42516efa0)

eslint-config-carbon@3.25.0

Housekeeping 🏠

• chore(release): v11.89.0 (#20225) (d66cc6afb)
• chore(release): v11.89.0-rc.0 (#20104) (babd7a969)

typescript-config-carbon@0.6.0

Housekeeping 🏠

• chore(release): v11.89.0 (#20225) (d66cc6afb)
• chore(deps): upgrade rimraf and accessibility-checker to latest versions (#20136) (9c70b96b8)

@carbon/cli@11.32.0

Bug fixes 🐛

• fix: resolve @​octokit CVE-2025-25290, CVE-2025-25289, CVE-2025-25285 (#20082) (636688b9d)

Housekeeping 🏠

• chore(release): v11.89.0 (#20225) (d66cc6afb)
• chore(release): v11.89.0-rc.1 (#20146) (573fc72ac)
• chore(cli): migrate @carbon/cli to ESM (#20078) (ff525122f)
• chore(release): v11.89.0-rc.0 (#20104) (babd7a969)
• chore(ci): add v10 release automation (#20056) (814b506ff)

@carbon/cli-reporter@10.8.0

Housekeeping 🏠

• chore(release): v11.89.0 (#20225) (d66cc6afb)
• chore(release): v11.89.0-rc.1 (#20146) (573fc72ac)
• chore(cli): migrate @carbon/cli to ESM (#20078) (ff525122f)

@carbon/colors@11.38.0

Housekeeping 🏠

• chore(release): v11.89.0 (#20225) (d66cc6afb)
• chore(deps): upgrade rimraf and accessibility-checker to latest versions (#20136) (9c70b96b8)
• chore(release): v11.89.0-rc.1 (#20146) (573fc72ac)
• chore(cli): migrate @carbon/cli to ESM (#20078) (ff525122f)
• chore(release): v11.89.0-rc.0 (#20104) (babd7a969)

@carbon/elements@11.73.0

... (truncated)

Commits

• d66cc6a chore(release): v11.89.0 (#20225)
• 9c70b96 chore(deps): upgrade rimraf and accessibility-checker to latest versions ...
• 573fc72 chore(release): v11.89.0-rc.1 (#20146)
• babd7a9 chore(release): v11.89.0-rc.0 (#20104)
• 6568a33 chore(release): v11.88.0 (#20046)
• See full diff in compare view

Updates tailwind-merge from 3.6.0 to 3.7.0

Release notes

Sourced from tailwind-merge's releases.

tailwind-merge@3.7.0

New Features

• Prepare some upcoming changes by @​dcastil in dcastil/tailwind-merge#713
  • Theme getters returned by fromTheme now expose the theme key they read as a themeKey property, so tooling can identify the referenced theme scale without calling the getter.
  • Release tags now include the package name, starting with tailwind-merge@3.7.0.

Bug Fixes

• Fix arbitrary values using color() or light-dark() being classified as lengths instead of colors by @​ddussi in dcastil/tailwind-merge#712
• Fix bare bg-conic not merging with other background image classes by @​dcastil in dcastil/tailwind-merge#708
• Fix columns-auto not conflicting with other columns classes by @​dcastil in dcastil/tailwind-merge#707
• Fix container sizes like inline-2xl not merging by @​dcastil in dcastil/tailwind-merge#706
• Fix max-h-none missing in max-h class group by @​mutewinter in dcastil/tailwind-merge#704
• Fix axis shorthands like px not overriding logical sides like ps by @​dcastil in dcastil/tailwind-merge#705
• Fix leading-none being removed when the leading theme scale is overridden by @​chatman-media in dcastil/tailwind-merge#689
• Fix deprecated shadow-inner being classified as shadow color instead of shadow by @​dcastil in dcastil/tailwind-merge#703

Documentation

• Add Deno to install instructions by @​bartlomieju in dcastil/tailwind-merge#687
• Add missing text-shadow theme key to configuration docs by @​dcastil in dcastil/tailwind-merge@3e6d208

Other

• Switch package manager from yarn to pnpm by @​dcastil in dcastil/tailwind-merge#680
• Harden CI security by @​dcastil in dcastil/tailwind-merge#679

Full Changelog: v3.6.0...v3.7.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​openclaw, @​sourcegraph, @​cesarvcanal, @​CasperKristiansson, @​jbisasky, @​frontendmasters and more via @​thnxdev for sponsoring tailwind-merge! ❤️

Commits

• 511d68a tailwind-merge@3.7.0
• 2461127 Release tooling: Pass the namespaced tag prefix and commit message to pnpm's ...
• 9d41508 add changelog for tailwind-merge@3.7.0
• c78a80f Configurator: Reuse runtime lookups during pruning
• 49c317d Monorepo: Fix contributing link and include package coverage
• 7b565ca Configurator: prune a generated config to a project's used classes (core step)
• d83e013 Releases: auto-re-pin tag-pinned links on every version bump
• b71fd41 Docs: pin every in-repo file link to a release tag instead of main
• ee29441 Docs: point the ThemeObject JSDoc link at the packaged docs location
• 9521b10 Releases: per-package pipeline with namespaced tags
• Additional commits viewable in compare view

Updates lint-staged from 17.5.0 to 17.6.0

Release notes

Sourced from lint-staged's releases.

v17.6.0

Minor Changes

• #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*': {
  title: 'Fail if PDF files are committed',
  task: async (filepaths, { log }) => {
  const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
  if (pdfFiles.length > 0) {
  log('PDF files should not be committed: %s', pdfFiles)
  throw new Error('Failed')
  }
  },
  },
  })

• #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

  If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

• #1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

• #1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
  })

• #1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

• #1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

v17.5.1

Patch Changes

• #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

  A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

Changelog

Sourced from lint-staged's changelog.

17.6.0

Minor Changes

• #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*': {
  title: 'Fail if PDF files are committed',
  task: async (filepaths, { log }) => {
  const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
  if (pdfFiles.length > 0) {
  log('PDF files should not be committed: %s', pdfFiles)
  throw new Error('Failed')
  }
  },
  },
  })

• #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

  If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

• #1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

• #1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
  })

• #1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

• #1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

17.5.1

Patch Changes

• #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

... (truncated)

Commits

• 48f9f4e Merge pull request #1857 from lint-staged/changeset-release/main
• 16b2e21 chore(changeset): release
• 195f156 docs: improve changeset
• 0ba6261 fix: create hidden directory only when required
• 66ac2de docs: fixes to changesets
• 80af8d7 Merge pull request #1863 from lint-staged/fix-issues
• e433488 fix: handle task editing a symlinked file to a regular file, and --fail-on-ch...
• e5019b3 fix: handle trailing newlines when detecting changed files
• 74efec8 ci: run Cygwin and MSYS2 tests on Node.js 26
• 655b7dc fix: use TypeScript types instead of JSDoc
• Additional commits viewable in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

• Limit recursive merge aliases (#685, #713)
• Simplify line unfolding during quoted string parsing (#714)

Commits

• 1440ecd 2.9.1
• c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
• d11ce77 fix: Limit recursive merge aliases (#713)
• c5f49f4 chore: Update docs-slate
• See full diff in compare view

[netlify]

✅ Deploy Preview for metal-stack-io ready!

Name	Link
🔨 Latest commit	37bb80c
🔍 Latest deploy log	https://app.netlify.com/projects/metal-stack-io/deploys/6abcceccdcc6380008c8b017
😎 Deploy Preview	https://deploy-preview-355--metal-stack-io.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[vknabel]

@dependabot rebase