[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dependency-cruiser	17.4.3 → 18.6.0

---

Release Notes

sverweij/dependency-cruiser (dependency-cruiser)

v18.6.0

Compare Source

✨ features

• 51467e4 feat(extract/transpile): compile svelte components that use top level await (#​1103) - thanks @​JonnyBGod for finding the issue and raising the pull request!

👷‍♂️ maintenance

• 14ca8a1 build(npm): updates external dependencies
• 3f4e5fe doc(SECURITY.md): adds direct link to raising an adivisory
• e35bded chore: renames copilot-instructions AGENTS.md

v18.5.0

Compare Source

✨ features

• 25ac2f7 feat(extract/tsc): adds support for imports inside module and namespace blocks (#​1095) - thanks to @​arpitjain099 for detecting the missing feature AND making the PR
• 918d919 feat(report/markdown): adds baseline stale table (#​1102)

👷 maintenance

• 10860b9 build(npm): updates external dependencies

v18.4.0

Compare Source

✨ features

To improve visibility of the state of the baseline (.dependency-cruiser-known-violations.json)...

• ...the err, err-html and markdown reporters now show the number of stale entries in the baseline.
  (c617e58/ e9ad4ce/ be91a27/ 993ac9d)
• ... the err, null, azure-devops and teamcity reporters can exit with a non-zero exit code when the baseline contains stale entries (set baseline.staleEntriesSeverity to error to enable).
  (#​1100 / 0dbd761)
• ... the new baseline-mode 'format' sorts the baseline so future diffs are easier to read after manual edits.
  (077d443/ 3e465ea)

Thanks to @​yunusdim and @​BPScott for the raising the issues and providing the suggestions and feedback that birthed these 🙇.

📖 documentation

• e41450b doc(cli): adds note to --baseline that severities are ignored on comparison

👷 maintenance

• 9f402bb/ ab42c71 chore(npm): updates all external devDependencies
• c9d8fb5 chore(npm): adds upem policy to prevent accidents when @​types/node publishes a super-old version as 'latest'

v18.3.1

Compare Source

🐛 fixes

• aed4479 fix(extract/swc): finds the swc Visitor when bun hands over the default export (#​1093) - thanks @​kurovskyiii for raising the issue and providing the fix in the pull request.

👷 maintenance

• 0b873f4 chore(npm): updates all external devDependencies

v18.3.0

Compare Source

✨ features

• Updates to the 'baseline' feature
  • feat: makes it possible to update the baseline "shrink-only", so violations that are fixed get removed, but no new ones are added (#​1088/ #​1091/ #​1085)
  • feat(cli): exposes the baseline feature as a regular --baseline option (with same functionality as depcruise-baseline command) (#​1084)
  • feat(baseline): when the baseline is updated show how many are new, same or removed (#​1079)
  • Thanks to @​yunusdim for the idea(s) to introduce these features.
• Improvements to processing with the 'swc' compiler
  • ee229c3 feat(extract/swc): adds support for parsing tsx/jsx (#​1086) thanks @​JPBuildsRoot for the issue & initial code that led to this feature
  • 2aa2e34 feat(extract/swc): adds support recognizing type-only imports (#​1087) thanks @​JPBuildsRoot for raising the issue that led to this feature

👷 maintenance

• ed21436/ ceb7d67 build(npm): updates external dependencies
• 1f28f44 perf(utl): initializes severity translation table only once
• 88c7cf9 docs: standardizes the command name for running the command to dependency-cruiser (#​1083)
• 9a8a3dd chore(doc): marks depcruise-baseline command as deprecated in favor of dependency-cruiser --baseline (#​1090)
• 400553d chore(report): takes x-dot-webpage out of experimental and names it dot-webpage (#​1089)

v18.2.0

Compare Source

✨ features

• e9f237f feat(utl/cache): also takes nested .gitignores into account (#​1072) - thanks @​jbmusso for raising the issue that led to this feature
• 530a486 feat: enables configurations in typescript (#​1077) - thanks @​christopher-buss, @​racbart and @​TranquilMarmot (back in 2021, when this was not really possible) for asking for this feature - and thanks @​christopher-buss for verifying the beta release of this feature.

👷 maintenance

• 718af4c/ 99d964f chore(npm): updates external devDependencies

v18.1.1

Compare Source

👷 maintenance

• 1ee565b/ 942cf96 build(npm): updates external dependencies
• f0061d1 fix: removes all unused catch parameters
• cbe062a/ c0250f8 chore(tools): uses node permission model
• 01c4743 fix(build): re-adds esbuild to the devDependencies
• e57d9fc chore: replaces eslint with oxlint (#​1074)

v18.1.0

Compare Source

✨ new functionality

• 65c432c feat: adds environment inconsistency checks (#​1070)
  dependency-cruiser now also warns at runtime if it detects typescript is needed, but (a usable version of the) typescript compiler isn't present (+ the same for babel and swc). It already did so on --init. Thanks @​kbarendrecht for the suggestion!
• 6bb22b6 feat(report/error-html): makes the table heads sticky

TypeScript 7 support: typescript@​7.1.0 is expected to ship with a public API - so that's the
first version in the TypeScript 7 (formerly tsgo) version range dependency-cruiser will be able
to support.

👷 maintenance

• f04f2fa build(npm): updates external dependencies

v18.0.0

Compare Source

🚨 breaking changes

• 40f42e9 chore!: drops support for nodejs 20 and 25 BREAKING (#​1060)

This is because we follow the Node.js release cycle who dropped support for version 20 and 25 (a while ago already).

🐛 fixes

• a25fe7f fix(graph-utl): makes the summary more deterministic (#​1066) - thanks @​Sebastian-G for raising the issue and providing the first feedback!

👷 maintenance

• 92d6a1f/ ee3dc3a/ c997444 build(npm): updates external dependencies
• 0d8becb refactor(config-utl): only imports json5 when it's used (#​1062)
• 793bd4d chore(ci): updates known violations
• 4191176 chore: updates copilot instructions

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[GraemeF]

Review of the dependency-cruiser 17.4.3 → 18.6.0 update.

• Age: 18.6.0 was published on 11 October, so it is more than three days old.
• Breaking change: 18.0.0's only breaking change drops support for Node 20 and 25. This repo runs dependency-cruiser under Bun from the root arch:check script, so the Node support range does not apply.
• Other notes: 18.1 to 18.6 add features and fixes. The baseline changes are opt-in, and the repo uses no baseline. 18.3 deprecates the depcruise-baseline command, which the repo does not call. No default that .dependency-cruiser.js relies on has changed.
• Checks: CI is green on the head commit, and the architecture check reports no dependency violations under 18.6.0. The branch is up to date with main.

It is a dev-only tool that gates the build, so nothing that ships changes. Safe to take.