chore(deps): (deps): bump the production group with 6 updates

[dependabot]

Bumps the production group with 6 updates:

Package	From	To
fs-extra	11.3.5	11.3.6
semver	7.8.4	7.8.5
@napi-rs/wasm-runtime	1.1.5	1.1.6
@tybys/wasm-util	0.10.2	0.10.3
nanoid	3.3.12	3.3.15
postcss	8.5.15	8.5.16

Updates fs-extra from 11.3.5 to 11.3.6

Changelog

Sourced from fs-extra's changelog.

11.3.6 / 2026-06-29

• Fix handling of symlinked destination ancestors in copy/move methods (#1071, #1073)
• Docs typo fixed (#1074)

Commits

• 62a4e72 11.3.6
• 01c0ca6 Fix copy/move recursing into source through a symlinked dest ancestor (#1073)
• 7268250 docs: fix typo in README.md (seperate → separately) (#1074)
• 2fd7b6c chore: Add Node 26 to the test matrix (#1072)
• See full diff in compare view

Updates semver from 7.8.4 to 7.8.5

Release notes

Sourced from semver's releases.

v7.8.5

7.8.5 (2026-06-19)

Bug Fixes

• 9c8692a #878 include prereleases in tilde range lower bound with includePrerelease (#878) (@​chatman-media)

Changelog

Sourced from semver's changelog.

7.8.5 (2026-06-19)

Bug Fixes

• 9c8692a #878 include prereleases in tilde range lower bound with includePrerelease (#878) (@​chatman-media)

Commits

• 6e05b76 chore: release 7.8.5 (#879)
• 9c8692a fix: include prereleases in tilde range lower bound with includePrerelease (#...
• See full diff in compare view

Updates @napi-rs/wasm-runtime from 1.1.5 to 1.1.6

Changelog

Sourced from @​napi-rs/wasm-runtime's changelog.

1.1.6 (2026-06-24)

Note: Version bump only for package @​napi-rs/wasm-runtime

Commits

• b77119e chore(release): publish
• 8c87f47 chore(deps): update @​tybys/wasm-util to 0.10.3 (#3348)
• See full diff in compare view

Updates @tybys/wasm-util from 0.10.2 to 0.10.3

Commits

• See full diff in compare view

Updates nanoid from 3.3.12 to 3.3.15

Release notes

Sourced from nanoid's releases.

3.3.15

• Fixed npm provenance error.

3.3.14

• Fixed random pool corruption on big ID sizes.

3.3.13

• Reduced npm package size.

Changelog

Sourced from nanoid's changelog.

3.3.15

• Fixed npm provenance error.

3.3.14

• Fixed random pool corruption on big ID sizes.

3.3.13

• Reduced npm package size.

Commits

• 6819724 Release 3.3.15 version
• fb0b137 Fix tag for v3
• e084bc9 Back-port new release system and fix pre-commit hook
• 7e32945 Release 3.3.14 version
• 6bd27b8 Another way to deal with pool damage
• 41ad2ac Reduce ID size
• 87591ad Fix pnpm 11 support
• 2e83043 Release 3.3.13 version
• e4eeaf7 Ignore .claude in npm
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nanoid since your current version.

Updates postcss from 8.5.15 to 8.5.16

Release notes

Sourced from postcss's releases.

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

Changelog

Sourced from postcss's changelog.

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

Commits

• 92ccc93 Release 8.5.16 version
• 818bdd6 Update formatting
• 46e4510 Fix Input#origin() returning incorrect position (#2036)
• 34942ce Fix tests
• d4feed6 Don't clone root-less child nodes in container constructor (#2097)
• da323fc Revert version update to fix old Node.js on CI
• 8863369 Update dependencies
• 3828982 Preserve node raws when rehydrating a JSON AST (#2100)
• d1e80b8 Fix Node#rangeBy() ignoring index 0 (#2091)
• b91e4a6 Fix Node.js 26 tests
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	fs-extra@​11.3.6
	semver@​7.8.5

View full report