Bump the npm group across 1 directory with 6 updates

[dependabot]

Bumps the npm group with 6 updates in the / directory:

Package	From	To
autoprefixer	10.4.19	10.4.20
postcss	8.4.40	8.4.41
trix	2.1.3	2.1.4
globals	15.8.0	15.9.0
husky	9.1.3	9.1.4
lint-staged	15.2.7	15.2.8

Updates autoprefixer from 10.4.19 to 10.4.20

Release notes

Sourced from autoprefixer's releases.

10.4.20

• Fixed fit-content prefix for Firefox.

Changelog

Sourced from autoprefixer's changelog.

10.4.20

• Fixed fit-content prefix for Firefox.

Commits

• dae6eb4 Release 10.4.20 version
• ee43652 Fix fit-content for Firefox
• cf80824 Update dependencies
• 49d5ec6 Move to pnpm 9
• See full diff in compare view

Updates postcss from 8.4.40 to 8.4.41

Release notes

Sourced from postcss's releases.

8.4.41

• Fixed types (by @​nex3 and @​querkmachine).
• Cleaned up RegExps (by @​bluwy).

Changelog

Sourced from postcss's changelog.

8.4.41

• Fixed types (by @​nex3 and @​querkmachine).
• Cleaned up RegExps (by @​bluwy).

Commits

• 57e0211 Release 8.4.41 version
• f27134f Update dependencies
• 146d31c Merge pull request #1952 from nex3/rule-props
• 3707c3b Merge remote-tracking branch 'origin/main' into rule-props
• 9ab3619 Declare Input.toJSON()
• be59ad4 Remove dead website
• 165154b Update dependencies
• 6127a44 Declaration#variable do not have setter
• 536726d Fix type
• 58fa0ef Sort keys
• Additional commits viewable in compare view

Updates trix from 2.1.3 to 2.1.4

Release notes

Sourced from trix's releases.

v2.1.4

What's Changed

• Fix XSS vulnerability on paste by @​afcapel in basecamp/trix#1156

Full Changelog: basecamp/trix@2.1.3...v2.1.4

Commits

• 9579e33 v2.1.4
• 7656f57 Merge pull request #1156 from basecamp/paste-vuln
• 626a4f4 Support browsers where getHTML is not supported
• c8dbd3d Ensure we always sanitize HTML we set as innerHTML
• beabac2 Drop defunct bin/release superseded by yarn release
• b29b663 bin/release: upload .map files to release
• 90c1006 bin/release: narrow release files
• See full diff in compare view

Updates globals from 15.8.0 to 15.9.0

Release notes

Sourced from globals's releases.

v15.9.0

• Update globals (#258) f72b047

sindresorhus/globals@v15.8.0...v15.9.0

Commits

• b1d88b8 15.9.0
• f72b047 Update globals (#258)
• df410c8 Add automated job to create es yearly globals (#257)
• See full diff in compare view

Updates husky from 9.1.3 to 9.1.4

Release notes

Sourced from husky's releases.

v9.1.4

• Improve deprecation notice

Commits

• fc549e0 9.1.4
• 9891ace clarify deprecation message
• See full diff in compare view

Updates lint-staged from 15.2.7 to 15.2.8

Release notes

Sourced from lint-staged's releases.

v15.2.8

Patch Changes

• f0480f0 Thanks @​iiroj! - In the previous version the native git rev-parse --show-toplevel command was taken into use for resolving the current git repo root. This version switched the --show-toplevel flag with --show-cdup, because on Git installed via MSYS2 the former was returning absolute paths that do not work with Node.js child_process. The new flag returns a path relative to the working directory, avoiding the issue.

  The GitHub Actions workflow has been updated to install Git via MSYS2, to ensure better future compatibility; using the default Git binary in the GitHub Actions runner was working correctly even with MSYS2.

Changelog

Sourced from lint-staged's changelog.

15.2.8

Patch Changes

• f0480f0 Thanks @​iiroj! - In the previous version the native git rev-parse --show-toplevel command was taken into use for resolving the current git repo root. This version switched the --show-toplevel flag with --show-cdup, because on Git installed via MSYS2 the former was returning absolute paths that do not work with Node.js child_process. The new flag returns a path relative to the working directory, avoiding the issue.

  The GitHub Actions workflow has been updated to install Git via MSYS2, to ensure better future compatibility; using the default Git binary in the GitHub Actions runner was working correctly even with MSYS2.

Commits

• 52f6eef chore(changeset): release (#1462)
• 8d8fe23 build: update repository url in package.json
• f0480f0 Revert "chore(changeset): release (#1461)"
• 1da81c0 chore(changeset): release (#1461)
• cc04e08 ci: add required permission for provenance generation
• fa2dac8 Revert "chore(changeset): release (#1455)"
• 8325985 chore(changeset): release (#1455)
• 92f295f build(deps): update dependencies (#1460)
• 5293c09 build: generate provenance statements for npm package (#1459)
• f184fff Merge pull request #1454 from Falcion/master
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.