chore(deps): bump picomatch and knip

[dependabot]

Bumps picomatch to 2.3.2 and updates ancestor dependency knip. These dependencies need to be updated together.

Updates picomatch from 2.3.1 to 2.3.2

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

• fix: exception when glob pattern contains constructor by @​Jason3S in micromatch/picomatch#144
• Fix for CVE-2026-33671
• Fix for CVE-2026-33672

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

• Changelogs are for humans, not machines.
• There should be an entry for every single version.
• The same types of changes should be grouped.
• Versions and sections should be linkable.
• The latest version comes first.
• The release date of each versions is displayed.
• Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

• Added for new features.
• Changed for changes in existing functionality.
• Deprecated for soon-to-be removed features.
• Removed for now removed features.
• Fixed for any bug fixes.
• Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

• Fix bad text values in parse #126, thanks to @​connor4312

Changed

• Remove process global to work outside of node #129, thanks to @​styfle
• Add sideEffects to package.json #128, thanks to @​frandiox
• Removed os, make compatible browser environment. See #124, thanks to @​gwsbhqt

3.0.1

Fixes

... (truncated)

Commits

• 81cba8d Publish 2.3.2
• fc1f6b6 Merge commit from fork
• eec17ae Merge commit from fork
• 78f8ca4 Merge pull request #156 from micromatch/backport-144
• 3f4f10e Merge pull request #144 from Jason3S/jdent-object-properties
• See full diff in compare view

Updates knip from 5.6.1 to 5.88.1

Release notes

Sourced from knip's releases.

Release 5.88.1

• Bump GitHub actions to their latest versions (#1624) (bf2ffca61184504734145b01db29da095c62064b) - thanks @​deining!
• Prettier config for other formatters (e.g. unified-prettier) (e034cbdeb48733b0cbb38e33c6d816d7bc82a99c)
• Fix module/namespace regression (resolve #1603) (394bcbaaea3e01adff3583044d2b72378e1134af)
• Fix counter type and --fix exit code (37b6f60133c406d07fcbae69cdc3a17808060e1f)
• Restore all ecosystem tests (4d2cd9b423a0ce365e71fb35707f2753bb8fbd04)
• Release knip@5.88.1 (8c25e4b7ff5c43d348082030600b1ba8677486af)

Release 5.88.0

• Add Sanity plugin (#1608) (f777834a6db8530f7588e24a916f47b5d5b75673) - thanks @​jonahsnider!
• feat: detect duplicated package.json dependencies (#1611) (dec15a7e5a37ae97732f83ca091f6373b3a62eda) - thanks @​Zamiell!
• fix: docusaurus faster (#1616) (c7a0128ca67b66e58b045d44468e61bed5492bfa) - thanks @​Zamiell!
• feat: raycast plugin (#1619) (52c77eedb75a565fa8ad2869af45131d51692504) - thanks @​TkDodo!
• fix: docusaurus scripts and stylesheets (#1618) (9fa485f121d9853db4758442c738aa962e17174f) - thanks @​Zamiell!
• Improve getPackageNameFromModuleSpecifier performance (817180ebd38d4ba51db4ec53e482a4c726edc0d1)
• Mark Nuxt extends entries as dependencies (96f178f96490045ad5ae766193d7bbc726a5896f)
• Simplify devDependency duplicate detection logic (99a7c9bffdfcb6ed3b58db762e00a47d1349c81d)
• Add patch for argos (cecab2183959c60a46860a32f9c6654a9f8aa6b0)
• Fix conflict and iterate on docusaurus plugin (d3d8cae3b3707f36ce6d5b6b1836735c020dc86c)
• Iterate on raycast plugin (4948bf81102c8347930ebb344365d07ea350b404)
• Oxfmt now supports .ts config files (#1621) (27a4813a9362a6da0ab344feb9f61baa4fdc4472) - thanks @​DaniFoldi!
• Fix typos (#1622) (386b4775579f678cc8f7793da9c652d8bd98f6fc) - thanks @​deining!
• docs: bump astro to newly released version 6 (#1623) (f941db9f03c64e60941b0217375dc0657344c563) - thanks @​deining!
• pnpm dedupe (d1a90891a15613fa322b52ce6a199ee668833fef)
• Release knip@5.88.0 (7aeb857f540af593051d003acdf4d52eef3b0d70)

Release 5.87.0

• Add pkg as built-in pnpm command (#1597) (32ee5591e) - thanks @​azat-io!
• Add oxlint.config.ts to oxlint plugin (#1598) (2951050e5) - thanks @​DaniFoldi!
• Add oxfmt plugin (#1599) (6bd980742) - thanks @​DaniFoldi!
• Head banger (7930467e3)
• Add sanity to the list (4ee3d0ddd)
• Fix minor lint issue (9e0dcd974)
• Flatten test() (d010c5597)
• Make toPosix a no-op on non-Windows platforms (b37112361)
• Replace isBuiltin with startsWith('node:') in sanitizeSpecifier (e7b100aef)
• Skip picomatch recompilation when gitignore adds no new patterns (c7870dba6)
• Incrementally compile picomatch matchers during gitignore walk (9948284fb)
• Identify binaries called by find -exec (#1601) (f7367fd48) - thanks @​t3chguy!
• Identify that @babel/runtime is needed when @babel/plugin-transform-runtime is used (#1602) (ef4da0691) - thanks @​t3chguy!
• Rename package-manager → resolvers, move find (0bd97f01f)
• Streamline babel plugin impl (3cc192e08)
• Detect local $schema references in changesets plugin (resolve #1335) (3a180820f)
• Resolve Nx run-commands from cwd (resolve #1595) (e71c9acc9)
• Fix up issue types table (resolve #1376) (20a3762d5)
• Skip optional peerDep issues for installed deps (resolve #1545) (f554d2f30)
• Add dim highlight opts for enum/class members, duplicates (resolve #1567) (35ce4229f)
• Cache isGitIgnored results (75942dd0a)
• Don't report unused files outside project set (resolve #1606) (fef625da8)
• Fix openapi-ts dependency resolution (#1607) (663825ef4) - thanks @​jonahsnider!

... (truncated)

Commits

• 8c25e4b Release knip@5.88.1
• 37b6f60 Fix counter type and --fix exit code
• 394bcba Fix module/namespace regression (resolve #1603)
• bf2ffca Bump GitHub actions to their latest versions (#1624)
• 7aeb857 Release knip@5.88.0
• 386b477 Fix typos (#1622)
• 27a4813 Oxfmt now supports .ts config files (#1621)
• 4948bf8 Iterate on raycast plugin
• d3d8cae Fix conflict and iterate on docusaurus plugin
• 99a7c9b Simplify devDependency duplicate detection logic
• Additional commits viewable in compare view