Skip to content

ECHOES-1421 [renovate] Update dependency style-dictionary to v5.5.0#720

Merged
gregaubert merged 1 commit into
mainfrom
renovate/design-tokens
Jul 3, 2026
Merged

ECHOES-1421 [renovate] Update dependency style-dictionary to v5.5.0#720
gregaubert merged 1 commit into
mainfrom
renovate/design-tokens

Conversation

@renovate

@renovate renovate Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
style-dictionary (source) 5.3.35.5.0 age confidence

Release Notes

style-dictionary/style-dictionary (style-dictionary)

v5.5.0

Compare Source

Minor Changes
  • b63dc05: Add emitEmptyFiles option to write output files even when no tokens match the file's filter, instead of skipping them.
Patch Changes
  • e319976: Fix regression to gracefully handle unparseable dimension tokens which is required to support custom dimension tokens from third party vendors like Tokens Studio.

v5.4.4

Compare Source

Patch Changes
  • 23b5e8d: Fix prototype pollution vulnerability in the convertTokenData utility function, this was introduced in version 4.3.0.
    Any token key that includes __proto__ will be ignored.
    See Security Advisory GHSA-vj5c-m527-mpff.

v5.4.3

Compare Source

Patch Changes
  • 371dbcb: Get proper deepmerge types in, fix small potential bug for StyleDictionary.extend(), flagged by type safety improvement.

v5.4.2

Compare Source

Patch Changes
  • 60d16e1: Fix sizeRem and sizePxToRem transform to keep the 0-valued tokens type number/string intact in the result (regression 5.4.0)

v5.4.1

Compare Source

Patch Changes
  • 46ec860: Fix size/rem transform stripping the unit from zero-magnitude dimension values (e.g. "0em"), which caused downstream CSS variables to serialize as undefined. Unit preservation now runs before the unitless-zero short-circuit.

v5.4.0

Compare Source

Minor Changes
  • edceda7: Add support for DTCG v2025.10 dimension token type object value, while remaining backwards compatible for dimension tokens using string values.

    All built-in transforms can now handle dimension tokens.

    This includes CSS shorthand transforms for composed token types such as typography, border and shadows, which can contain properties that are dimensions.

    {
      "spacing": {
        "$type": "dimension",
        "$value": { "value": 1, "unit": "px" }
      },
      "shadow": {
        "$type": "shadow",
        "$value": {
          "color": { "colorSpace": "srgb", "components": [0, 0, 0], "alpha": 0.4 },
          "offsetX": { "value": 2, "unit": "px" },
          "offsetY": { "value": 2, "unit": "px" },
          "blur": { "value": 4, "unit": "px" },
          "spread": { "value": 6, "unit": "px" }
        }
      }
    }
  • 3d5c140: Generate strict types (tuples) for the tokens of the same type

Patch Changes
  • edceda7: Fix very old bug where size/remToPt wasn't converting to pt unit, but rather to f (iOS float). Fixed this, added size/remToFloat to use the old behavior, and updated the ios transformGroup to use this instead. This is technically potentially "breaking" but because it is a bugfix, this is a patch.

Configuration

📅 Schedule: (in timezone CET)

  • Branch creation
    • Between 12:00 AM and 02:59 AM (* 0-2 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

  • If the PR is green: it means that the dependencies have been update successfully; double check the changelog and merge! When merging don't forget to squash the commit and add prefix the commit message witht the JIRA tickets that has been automatically created.
  • If the PR is red: something went wrong; double check the changelog and then either:
    • Fix the issues if the breaking changes are quick to fix or you have the time for it: make sure to add a new commit and not to modify the one from the Renovate
    • If the required changes are too big: create a JIRA ticket and assign it to the FEE squad, finally update the rennovate.json file to ignore the dependency and document the reason why it has been ignored, the Renovate PR can be closed.

To know more about the whole process, check our WebApp dependencies management xtranet page.

@renovate renovate Bot requested a review from gregaubert July 3, 2026 15:20
@netlify

netlify Bot commented Jul 3, 2026

Copy link
Copy Markdown

Deploy Preview for echoes-react ready!

Name Link
🔨 Latest commit 228bf46
🔍 Latest deploy log https://app.netlify.com/projects/echoes-react/deploys/6a47d324713a9f0008465e01
😎 Deploy Preview https://deploy-preview-720--echoes-react.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@hashicorp-vault-sonar-prod

hashicorp-vault-sonar-prod Bot commented Jul 3, 2026

Copy link
Copy Markdown

Renovate Jira issue ID: ECHOES-1421

@sonarqube-next

sonarqube-next Bot commented Jul 3, 2026

Copy link
Copy Markdown

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube

@gregaubert gregaubert changed the title [renovate] Update dependency style-dictionary to v5.5.0 ECHOES-1421 [renovate] Update dependency style-dictionary to v5.5.0 Jul 3, 2026
@gregaubert gregaubert merged commit 901b166 into main Jul 3, 2026
13 checks passed
@gregaubert gregaubert deleted the renovate/design-tokens branch July 3, 2026 15:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant