Dep Updates 2026-03-29

Summary by cubic

Upgrade dev dependency ultracite to ^7.4.0 and update bun.lock to pick up upstream fixes. No runtime impact; this introduces the transitive dependency cross-spawn from ultracite@7.4.0.

^{Written for commit 8e8d2e1. Summary will update on new commits.}

Greptile Summary

This PR bumps the dev-only dependency ultracite from ^7.3.2 to ^7.4.0. ultracite is used exclusively as a linting and formatting tool (via the lint, format, and fix scripts), so there is no impact on the production build or runtime behaviour.

• package.json: version constraint updated to ^7.4.0
• bun.lock: resolved entry updated; ultracite@7.4.0 introduces one new transitive dependency, cross-spawn@^7.0.6, which is a well-known, widely-audited package for cross-platform child process spawning
• No production dependencies, source files, or configuration files were modified

Confidence Score: 5/5

Safe to merge — only a dev-tooling dependency is updated with no production impact

All changes are confined to a single devDependency (ultracite) and its lock file entry. No source code, runtime dependencies, or build configuration was modified. The new transitive dependency (cross-spawn) is a widely-used, well-maintained package with no known security issues.

No files require special attention

Important Files Changed

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[package.json] -->|devDependency bump| B["ultracite ^7.3.2 → ^7.4.0"]
    B --> C["bun.lock resolves ultracite@7.4.0"]
    C --> D["New transitive dep: cross-spawn@^7.0.6"]
    D --> E["Used by lint / format / fix scripts only"]
    E --> F["No impact on production build or runtime"]

_{Reviews (1): Last reviewed commit: "dep updates 2026-03-29" | Re-trigger Greptile}