chore(deps)(deps-dev): bump lint-staged from 16.4.0 to 17.3.0

[dependabot]

Bumps lint-staged from 16.4.0 to 17.3.0.

Release notes

Sourced from lint-staged's releases.

v17.3.0

Minor Changes

• #1825 16b3f74 - It is now possible to run multiple tasks in parallel for a single glob by configuring it with an array of tasks (which run sequentially), and then placing another array inside it (where the tasks will run in parallel). The following demonstrates the order tasks will start in:

  {
    "*.ts": ["first", "second", ["third", "third"], "fourth"]
  }

  As a concrete example, lint-staged's own configuration is:

  /** @type {import('./lib/index.js').Configuration} */
  export default {
    "*": [
      [
        "oxfmt --check --no-error-on-unmatched-pattern",
        "oxlint --no-error-on-unmatched-pattern",
      ],
    ],
    "*.ts": () => "tsc",
  };

  which means:

  1. for all staged files, run the two commands in parallel with staged filenames appended, for example:
     • oxfmt --check --no-error-on-unmatched-pattern lib/index.js
     • oxlint --no-error-on-unmatched-pattern lib/index.js
  2. additionally, if any *.ts files are staged, run tsc without appending any arguments
  3. The two sets of commands also run in parallel

Patch Changes

• #1829 15f7e53 - During an in-progress merge, files that are unchanged from the branch being merged are now skipped. Technically, files are only included if there are staged changes against both HEAD and MERGE_HEAD.

v17.2.0

Minor Changes

• #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
  };

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.3.0

Minor Changes

• #1825 16b3f74 - It is now possible to run multiple tasks in parallel for a single glob by configuring it with an array of tasks (which run sequentially), and then placing another array inside it (where the tasks will run in parallel). The following demonstrates the order tasks will start in:

  {
    "*.ts": ["first", "second", ["third", "third"], "fourth"]
  }

  As a concrete example, lint-staged's own configuration is:

  /** @type {import('./lib/index.js').Configuration} */
  export default {
    "*": [
      [
        "oxfmt --check --no-error-on-unmatched-pattern",
        "oxlint --no-error-on-unmatched-pattern",
      ],
    ],
    "*.ts": () => "tsc",
  };

  which means:

  1. for all staged files, run the two commands in parallel with staged filenames appended, for example:
     • oxfmt --check --no-error-on-unmatched-pattern lib/index.js
     • oxlint --no-error-on-unmatched-pattern lib/index.js
  2. additionally, if any *.ts files are staged, run tsc without appending any arguments
  3. The two sets of commands also run in parallel

Patch Changes

• #1829 15f7e53 - During an in-progress merge, files that are unchanged from the branch being merged are now skipped. Technically, files are only included if there are staged changes against both HEAD and MERGE_HEAD.

17.2.0

Minor Changes

• #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
  };

... (truncated)

Commits

• d153443 Merge pull request #1828 from lint-staged/changeset-release/main
• 5162c14 chore(changeset): release
• a4db9a4 Merge pull request #1831 from lint-staged/linter-updates
• ea96cab style: enable oxlint "suspicious" category
• 2fae007 style: add @e18e/eslint-plugin
• 2280c38 Merge pull request #1829 from lint-staged/fix-merge-conflict-files
• 1453ae6 test: relax assertion so that it passes in worktree
• 15f7e53 fix: lint only files changed against HEAD and MERGE_HEAD, during a merge
• dedfc31 Merge pull request #1825 from lint-staged/parallel-tasks-inside-sequence
• 286e25c feat: allow running parallel tasks by nesting arrays
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.
• ⚠️ 5 packages with OpenSSF Scorecard issues.

View full job summary

[github-actions]

📊 Test Coverage Report

Metric	Coverage	CI Gate	Target
Lines	✅ 86.4% (11426/13228)	75%	80%
Statements	✅ 86.4% (11426/13228)	75%	80%
Branches	✅ 80.4% (1382/1719)	70%	80%
Functions	🟡 78.3% (257/328)	—	80%

🟡 CI gate passed — coverage below 80% target

Files below 80% coverage

File	Lines	Functions	Branches
src/middlewares/guardrail/GuardrailInterceptorHook.ts	76.6%	100.0%	73.0%
src/middlewares/guardrail/GuardrailMiddleware.ts	75.6%	66.7%	68.2%
src/middlewares/guardrail/GuardrailScanner.ts	93.4%	100.0%	64.3%
src/middlewares/guardrail/GuardrailWriteScannerHook.ts	71.0%	100.0%	78.2%
src/middlewares/guardrail/ModerationGuardHook.ts	74.8%	100.0%	58.8%
src/middlewares/guardrail/guards/canary-tracker.ts	98.0%	80.0%	66.7%
src/middlewares/guardrail/guards/content-moderation.ts	78.4%	100.0%	90.6%
src/middlewares/guardrail/guards/sensitive-paths.ts	94.1%	100.0%	77.3%
src/middlewares/guardrail/scanners/HeuristicScanner.ts	100.0%	100.0%	75.0%
src/middlewares/guardrail/scanners/RegexScanner.ts	90.3%	100.0%	78.6%
src/middlewares/guardrail/storage/ConfigStore.ts	88.0%	71.4%	80.0%
src/middlewares/guardrail/storage/DecisionLog.ts	70.3%	40.0%	100.0%
src/middlewares/hitl/Interceptor.ts	89.8%	83.3%	75.7%
src/middlewares/hitl/index.ts	85.8%	54.5%	66.7%
src/middlewares/hitl/script-content-loader.ts	47.8%	0.0%	100.0%
src/middlewares/hitl/tool-interceptor.ts	89.5%	100.0%	70.9%
src/middlewares/hitl/approval/ApprovalQueue.ts	79.7%	81.3%	78.6%
src/middlewares/hitl/approval/Arbitrator.ts	36.1%	25.0%	91.7%
src/middlewares/hitl/approval/TotpManager.ts	93.9%	87.5%	71.4%
src/middlewares/hitl/approval/approval-commands.ts	84.8%	100.0%	72.7%
src/middlewares/hitl/scoring/IrreversibilityScorer.ts	95.6%	100.0%	75.0%
src/middlewares/hitl/storage/BrowserSessionStore.ts	94.7%	100.0%	72.5%
src/middlewares/hitl/storage/DecisionLog.ts	70.6%	25.0%	100.0%
src/middlewares/hitl/storage/PolicyStore.ts	89.4%	85.7%	64.3%
src/middlewares/hitl/storage/StatsTracker.ts	91.2%	71.4%	80.0%
src/middlewares/pii-sanitizer/PiiSanitizerMiddleware.ts	75.7%	58.3%	74.2%
src/middlewares/pii-sanitizer/PolicyEngine.ts	96.6%	100.0%	70.6%
src/middlewares/pii-sanitizer/ScannerEngine.ts	70.0%	85.7%	87.5%
src/middlewares/pii-sanitizer/storage/DlpStore.ts	70.6%	18.2%	100.0%
src/middlewares/tool-call-limit/ToolCallLimitMiddleware.ts	86.8%	72.2%	86.4%
src/middlewares/tool-call-limit/storage/LimitPolicyStore.ts	74.6%	50.0%	75.0%

---

Generated by CI on commit c4aee57