plutonium 0.62.2 → 0.64.0

data/src/js/drag/sortable.js

@@ -0,0 +1,186 @@
+// Shared native HTML5 drag-and-drop mechanics.
+//
+// Deliberately knows nothing about kanban columns, tables, WIP limits, or
+// Turbo. Consumers wire it to their own DOM contract and own the transport
+// (which element is draggable, what a "drop" means, what gets POSTed where).
+//
+// Everything here is a pure function over an event / element / geometry — no
+// module state, so two controllers can be live on the same page without
+// interfering.
+//
+// Consumers: kanban_controller.js, positioned_controller.js
+
+// Returns the 0-based insertion index for a drop at `clientY` among `items`,
+// by comparing the cursor against each item's vertical midpoint: the drop goes
+// BEFORE the first item whose midpoint is below the cursor, or after all of
+// them when the cursor is below every midpoint.
+//
+// `items` must already exclude the dragged element itself — otherwise a
+// same-container reorder computes an index that counts the item being moved.
+export function computeDropIndex(clientY, items) {
+  for (let i = 0; i < items.length; i++) {
+    const rect = items[i].getBoundingClientRect()
+    if (clientY < rect.top + rect.height / 2) return i
+  }
+  return items.length
+}
+
+// Horizontal variant of the above, for grid / card layouts that flow in rows
+// rather than stacking in a column.
+//
+// Scoped to ONE visual row. A wrapped grid gives every row the same left edge,
+// so an X comparison across rows is meaningless — the caller narrows to a row
+// first and passes only that row's items (see positioned_controller's
+// #dropIndex, which does exactly that).
+export function computeDropIndexHorizontal(clientX, items) {
+  for (let i = 0; i < items.length; i++) {
+    const rect = items[i].getBoundingClientRect()
+    if (clientX < rect.left + rect.width / 2) return i
+  }
+  return items.length
+}
+
+// Applies the drag payload + the dragging class to `element`.
+//
+// The class change is deferred one frame ON PURPOSE: the browser captures the
+// drag ghost image from the element's rendered state during dragstart, so
+// adding an opacity class synchronously produces an already-faded ghost. One
+// requestAnimationFrame is enough for the ghost to be snapshotted first and the
+// source element to then dim in place.
+//
+// `payload` is written to text/plain so a drop OUTSIDE the consumer's own
+// container still carries data natively instead of erroring.
+// `dragImage` names the element the browser should ghost. Pass it whenever the
+// draggable node is a HANDLE inside the thing being moved rather than the thing
+// itself: the browser ghosts whatever carries draggable="true", so a table's
+// grip button drags a picture of the grip and the row appears not to move at
+// all. Consumers whose whole element is draggable (a kanban card) can omit it —
+// the default ghost is already the right picture.
+export function beginDrag(event, element, { draggingClass, payload, dragImage = null }) {
+  event.dataTransfer.effectAllowed = "move"
+  event.dataTransfer.setData("text/plain", payload)
+
+  if (dragImage) {
+    // Anchor the ghost where the pointer actually grabbed, so it tracks under
+    // the cursor instead of snapping its corner to it.
+    const rect = dragImage.getBoundingClientRect()
+    event.dataTransfer.setDragImage(dragImage, event.clientX - rect.left, event.clientY - rect.top)
+  }
+
+  requestAnimationFrame(() => element.classList.add(draggingClass))
+}
+
+// Undoes beginDrag's visual half. Callers own the rest of their teardown
+// (highlights, hints, cached references) — this only knows about the class it
+// added, plus the insertion marker, which no caller should have to remember to
+// clean up separately.
+export function endDrag(element, { draggingClass }) {
+  element.classList.remove(draggingClass)
+  hideInsertionMarker()
+}
+
+// ─── insertion marker ────────────────────────────────────────────────────────
+//
+// A line showing WHERE the drop will land. Without it the only feedback during
+// a drag is the ghost following the cursor, which says what you are moving but
+// never where it will end up — the user is guessing until they release.
+//
+// One marker element, created lazily and reused, parked on <body> and
+// positioned in viewport coordinates (position: fixed). Deliberately NOT
+// inserted between the items it points at: a table would need a full-width
+// placeholder <tr> to sit between rows, and mutating the collection's own DOM
+// mid-drag fights the Turbo stream that replaces it on drop.
+
+const MARKER_ID = "pu-drag-insertion-marker"
+
+function insertionMarker() {
+  let marker = document.getElementById(MARKER_ID)
+  if (!marker) {
+    marker = document.createElement("div")
+    marker.id = MARKER_ID
+    marker.className = "pu-drag-marker"
+    // Decorative: it duplicates information the drag itself conveys, and a
+    // live region announcing every dragover would flood a screen reader.
+    marker.setAttribute("aria-hidden", "true")
+    document.body.appendChild(marker)
+  }
+  return marker
+}
+
+// Draws the marker at insertion point `index` within `items` — the same index
+// computeDropIndex/computeDropIndexHorizontal return, so the line always agrees
+// with where the drop actually goes.
+//
+// `items` must exclude the dragged element, exactly as it does for the index
+// computation. `axis` is "vertical" for stacked rows/cards (a horizontal rule
+// between them) and "horizontal" for grids (a vertical rule between cards).
+// `container` is the fallback for an empty target — an empty kanban column
+// still needs to say "it lands here".
+// BETWEEN two items the line is centred in the gap the layout already leaves,
+// so it gets equal air on both sides whatever that spacing is — a board's roomy
+// column and a table's tight rows both come out balanced with no per-consumer
+// tuning. `gap` only covers the two ENDS, where there is no facing item to
+// measure against and the clearance has to be invented. One marker element is
+// shared by every consumer, so an unset gap must RESET the property rather than
+// inherit whichever consumer drew last.
+export function showInsertionMarker(items, index, { axis = "vertical", container = null, gap = null } = {}) {
+  const marker = insertionMarker()
+
+  if (gap) {
+    marker.style.setProperty("--pu-drag-marker-gap", gap)
+  } else {
+    marker.style.removeProperty("--pu-drag-marker-gap")
+  }
+
+  const vertical = axis !== "horizontal"
+  const near = rect => (vertical ? rect.top : rect.left)
+  const far = rect => (vertical ? rect.bottom : rect.right)
+
+  // `span` supplies the cross-axis extent (a row's width, a card's height);
+  // `offset` is where the line sits along the drag axis.
+  let span
+  let offset
+  let edge
+  if (items.length === 0) {
+    if (!container) return hideInsertionMarker()
+    span = container.getBoundingClientRect()
+    offset = near(span)
+    edge = "leading"
+  } else if (index <= 0) {
+    span = items[0].getBoundingClientRect()
+    offset = near(span)
+    edge = "leading"
+  } else if (index >= items.length) {
+    span = items[items.length - 1].getBoundingClientRect()
+    offset = far(span)
+    edge = "trailing"
+  } else {
+    span = items[index].getBoundingClientRect()
+    offset = (far(items[index - 1].getBoundingClientRect()) + near(span)) / 2
+    edge = "between"
+  }
+
+  if (vertical) {
+    marker.style.left = `${span.left}px`
+    marker.style.top = `${offset}px`
+    marker.style.width = `${span.width}px`
+    marker.style.height = ""
+  } else {
+    marker.style.left = `${offset}px`
+    marker.style.top = `${span.top}px`
+    marker.style.height = `${span.height}px`
+    marker.style.width = ""
+  }
+
+  marker.dataset.axis = axis
+  // Which edge the line is anchored to. "between" is already centred in a real
+  // gap and only needs the line's own thickness taken off; the ends have to be
+  // pushed clear of the single item they touch.
+  marker.dataset.edge = edge
+  marker.style.display = "block"
+}
+
+export function hideInsertionMarker() {
+  const marker = document.getElementById(MARKER_ID)
+  if (marker) marker.style.display = "none"
+}

data/yarn.lock

@@ -268,14 +268,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@braintree/sanitize-url@npm:^7.1.1":
-  version: 7.1.1
-  resolution: "@braintree/sanitize-url@npm:7.1.1"
-  checksum: 10c0/fdfc1759c4244e287693ce1e9d42d649423e7c203fdccf27a571f8951ddfe34baa5273b7e6a8dd3007d7676859c7a0a9819be0ab42a3505f8505ad0eefecf7c1
+"@braintree/sanitize-url@npm:^7.1.2":
+  version: 7.1.2
+  resolution: "@braintree/sanitize-url@npm:7.1.2"
+  checksum: 10c0/62f2aa0cf58626e3880b2dc1025c42064b4639abd157ae4e1c35f4c2f5031e9273772046a423979845069c814e27ff818e8e669280dc53585e6f033d5b7a59cb
   languageName: node
   linkType: hard
 
-"@chevrotain/types@npm:~11.1.1":
+"@chevrotain/types@npm:~11.1.2":
   version: 11.1.2
   resolution: "@chevrotain/types@npm:11.1.2"
   checksum: 10c0/c0c4679a3d407df34e18d5adfa7ac599b4a2bfddbf68da6e43678b9b3e16ab911de7766b37b9fc466261c3dead3db1b620e2e344f800fa9f0f381720475eda8f
@@ -812,12 +812,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@mermaid-js/parser@npm:^1.1.1":
-  version: 1.1.1
-  resolution: "@mermaid-js/parser@npm:1.1.1"
+"@mermaid-js/parser@npm:^1.2.1":
+  version: 1.2.1
+  resolution: "@mermaid-js/parser@npm:1.2.1"
   dependencies:
-    "@chevrotain/types": "npm:~11.1.1"
-  checksum: 10c0/66414d9d66f3a86a6751427cb8890a00beaaee2b7eba34c21b34b60cdaf9237d21e9b50b9bf1f560a01a600ee332d33b949fd8f12cbda3238aba50edc0dfdf15
+    "@chevrotain/types": "npm:~11.1.2"
+  checksum: 10c0/a28e72f874670accb15e057b1802ac917f5d80d3e9b4be9a5094833ee0239d1290ff31c2d50236e909cbd42bea4550c7872d2bfcec0bc0588df6e34ba5dc0498
   languageName: node
   linkType: hard
 
@@ -891,6 +891,7 @@ __metadata:
     dompurify: "npm:^3.4.11"
     esbuild: "npm:^0.28.1"
     esbuild-plugin-manifest: "npm:^1.0.3"
+    feed: "npm:^6.0.0"
     flowbite-typography: "npm:^1.0.5"
     lodash.debounce: "npm:^4.0.8"
     marked: "npm:^15.0.3"
@@ -2791,10 +2792,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"cytoscape@npm:^3.33.1":
-  version: 3.33.3
-  resolution: "cytoscape@npm:3.33.3"
-  checksum: 10c0/f0d01f682d3e443cbeea9aa294ccd6934442362df3ce259e7b0fe3b9a8ce534d901840c503db8b53da814542bc1508f7f14a69e4fe725f919c25483a7200efe7
+"cytoscape@npm:^3.34.0":
+  version: 3.34.1
+  resolution: "cytoscape@npm:3.34.1"
+  checksum: 10c0/1fefc274d8fbbb59273606d71e7875bfe6d7b7f3cafbd5af0083b1b19a431af93440c7273c0896ce5002ccdd54e28cfa4b0d54638017c69ebba0c1860a1c282b
   languageName: node
   linkType: hard
 
@@ -3170,10 +3171,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dayjs@npm:^1.11.19":
-  version: 1.11.20
-  resolution: "dayjs@npm:1.11.20"
-  checksum: 10c0/8af525e2aa100c8db9923d706c42b2b2d30579faf89456619413a5c10916efc92c2b166e193c27c02eb3174b30aa440ee1e7b72b0a2876b3da651d204db848a0
+"dayjs@npm:^1.11.21":
+  version: 1.11.23
+  resolution: "dayjs@npm:1.11.23"
+  checksum: 10c0/69ab04bf19c676e44ab50cc2fca223d265f3dafd107151ef3b0f3ad74d360c37caa602abe62f87cb25d90bd9f6bee003698af47df5b0dbf10a998b7b5f3bb3f1
   languageName: node
   linkType: hard
 
@@ -3271,15 +3272,15 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dompurify@npm:^3.3.1, dompurify@npm:^3.4.11":
-  version: 3.4.11
-  resolution: "dompurify@npm:3.4.11"
+"dompurify@npm:^3.3.3, dompurify@npm:^3.4.11":
+  version: 3.4.14
+  resolution: "dompurify@npm:3.4.14"
   dependencies:
     "@types/trusted-types": "npm:^2.0.7"
   dependenciesMeta:
     "@types/trusted-types":
       optional: true
-  checksum: 10c0/31439481c7e8fc3805d40c376936fd66936620fb1b1a31a2ec097f6165412c37f2d868e082c9ceba62bb37661c1ea132a5db4d5213434317e30df68d4aca9cc9
+  checksum: 10c0/feca07ece3805d1d4e33e847c11196888dcdc97b2afe0bb8a2fd11de4e62bfdc434c2403ee3fb3c7771e903325041d062febec6c5518796391fdc0419a90a873
   languageName: node
   linkType: hard
 
@@ -3613,6 +3614,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"fastdom@npm:1.0.12":
+  version: 1.0.12
+  resolution: "fastdom@npm:1.0.12"
+  dependencies:
+    strictdom: "npm:^1.0.1"
+  checksum: 10c0/d1727eb5d803aa0e1dc9a98b2eef1f138bad3776fa7471145216dba34f435f86e8e514658d0b1717fa83a987f44a8d26f2353a515f2bf782f32d3c9ead6d1994
+  languageName: node
+  linkType: hard
+
 "fault@npm:^2.0.0":
   version: 2.0.1
   resolution: "fault@npm:2.0.1"
@@ -3634,6 +3644,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"feed@npm:^6.0.0":
+  version: 6.0.0
+  resolution: "feed@npm:6.0.0"
+  dependencies:
+    xml-js: "npm:^1.6.11"
+  checksum: 10c0/0cfabb62037cc97bb935b778a5d98fae808e27d5842173774c0cd07a276e7e881b5f0dccb0575214938218af9a0cad3039a20b48db966799b72d9fde49048cb5
+  languageName: node
+  linkType: hard
+
 "fill-range@npm:^7.1.1":
   version: 7.1.1
   resolution: "fill-range@npm:7.1.1"
@@ -3903,9 +3922,9 @@ __metadata:
   linkType: hard
 
 "ip-address@npm:^10.0.1":
-  version: 10.2.0
-  resolution: "ip-address@npm:10.2.0"
-  checksum: 10c0/5a00aada6e922c9c69dfc800ed5d0fa3348675ebdeed0e1575f503f27ca385b5f534363c9af7ad1daf64c1f1409388cdd3cc2e9b9b0fe1c924a431378d55075a
+  version: 10.5.0
+  resolution: "ip-address@npm:10.5.0"
+  checksum: 10c0/c6616bc99c90b552dad2beb850ca697c1ea3e2b89662d652a4439cd72a549b0c9af100a54be0d25be86599e2b089db87ef5303157d142e5b4c21bd2a1301dfa7
   languageName: node
   linkType: hard
 
@@ -4009,14 +4028,14 @@ __metadata:
   linkType: hard
 
 "js-yaml@npm:^3.13.1":
-  version: 3.15.0
-  resolution: "js-yaml@npm:3.15.0"
+  version: 3.15.1
+  resolution: "js-yaml@npm:3.15.1"
   dependencies:
     argparse: "npm:^1.0.7"
     esprima: "npm:^4.0.0"
   bin:
     js-yaml: bin/js-yaml.js
-  checksum: 10c0/ca966bd354ac5b1b7a4694ebdba46526796aa3a6a99529fa540af2abf85918bd155a50ccc0166b413130a00622999973754458ec01e7095bc902177bfdbd5b64
+  checksum: 10c0/6c693b8c59ffe12021df3b36994b090df19d920826dd810baab81652b40861e1974509dd11fe92225ab4c00cc14de053300c94db015c2c0e211edea39b118737
   languageName: node
   linkType: hard
 
@@ -4033,14 +4052,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"katex@npm:^0.16.25":
-  version: 0.16.46
-  resolution: "katex@npm:0.16.46"
+"katex@npm:^0.16.47":
+  version: 0.16.47
+  resolution: "katex@npm:0.16.47"
   dependencies:
     commander: "npm:^8.3.0"
   bin:
     katex: cli.js
-  checksum: 10c0/c0a1006e0decae978832cfe19c4e316eceebb047dc0f918be041c956b67fd35791a6e0a868ef5f51eaf600d2c62e53114dbc94a34a89e11f95fcf24b0abd2d5f
+  checksum: 10c0/b10f4d0651c60771a48444879e4227255e26e2b2ec061b1ee4b08934863ad2324ba8dbb772455f7768aeb14dfcc13bcd309174a0ddd5ef954a607f644a197710
   languageName: node
   linkType: hard
 
@@ -4200,11 +4219,11 @@ __metadata:
   linkType: hard
 
 "linkify-it@npm:^5.0.1":
-  version: 5.0.1
-  resolution: "linkify-it@npm:5.0.1"
+  version: 5.0.2
+  resolution: "linkify-it@npm:5.0.2"
   dependencies:
     uc.micro: "npm:^2.0.0"
-  checksum: 10c0/d06d04f1ed03be131740fc900a5e74ea1f49886b052213599e306d469d5ffe2303db76dd8f771de9f28e2b0b38852de22ec46ae597d245f8b66439b0ceb19b10
+  checksum: 10c0/dd70b1735a13d41a2cff0a058ac3771166038f23f6aff004dd53873cf985c64b107902fe0b544a5b3d1ff6e63249cf9c648fb3ae9f285481db48f56887adb0d6
   languageName: node
   linkType: hard
 
@@ -4488,31 +4507,32 @@ __metadata:
   linkType: hard
 
 "mermaid@npm:^11.15.0":
-  version: 11.15.0
-  resolution: "mermaid@npm:11.15.0"
+  version: 11.17.0
+  resolution: "mermaid@npm:11.17.0"
   dependencies:
-    "@braintree/sanitize-url": "npm:^7.1.1"
+    "@braintree/sanitize-url": "npm:^7.1.2"
     "@iconify/utils": "npm:^3.0.2"
-    "@mermaid-js/parser": "npm:^1.1.1"
+    "@mermaid-js/parser": "npm:^1.2.1"
     "@types/d3": "npm:^7.4.3"
     "@upsetjs/venn.js": "npm:^2.0.0"
-    cytoscape: "npm:^3.33.1"
+    cytoscape: "npm:^3.34.0"
     cytoscape-cose-bilkent: "npm:^4.1.0"
     cytoscape-fcose: "npm:^2.2.0"
     d3: "npm:^7.9.0"
     d3-sankey: "npm:^0.12.3"
     dagre-d3-es: "npm:7.0.14"
-    dayjs: "npm:^1.11.19"
-    dompurify: "npm:^3.3.1"
+    dayjs: "npm:^1.11.21"
+    dompurify: "npm:^3.3.3"
     es-toolkit: "npm:^1.45.1"
-    katex: "npm:^0.16.25"
+    fastdom: "npm:1.0.12"
+    katex: "npm:^0.16.47"
     khroma: "npm:^2.1.0"
     marked: "npm:^16.3.0"
     roughjs: "npm:^4.6.6"
     stylis: "npm:^4.3.6"
     ts-dedent: "npm:^2.2.0"
     uuid: "npm:^11.1.0 || ^12 || ^13 || ^14.0.0"
-  checksum: 10c0/9085b47c30b66a1e94e07c93951d9e53e5c89ec8c9fff8814233bddeecf6b8eaf9036d3168e4d1360c3f5d07cd051c666da96860eb0f22f064bd749499a0c83f
+  checksum: 10c0/43c9a51bb93482cf882119595828900567a737401ad52b91c6fd415f839302b56080102376536cbb285d7aad3eb31b101e92e18d604647915195c1e10b879ec5
   languageName: node
   linkType: hard
 
@@ -4924,21 +4944,21 @@ __metadata:
   languageName: node
   linkType: hard
 
-"nanoid@npm:^3.3.12":
-  version: 3.3.15
-  resolution: "nanoid@npm:3.3.15"
+"nanoid@npm:^3.3.16":
+  version: 3.3.18
+  resolution: "nanoid@npm:3.3.18"
   bin:
     nanoid: bin/nanoid.cjs
-  checksum: 10c0/e0b12e3a1d361f74150fa4b25631d0ae29f7162dab01a12f0f1be1f53b7a2a219f9b729504e474d4821207d0fe349bd3c97569ab5cf7ec2fff6aa94711956c93
+  checksum: 10c0/b994b4e396730f8be2520923284e2040d61eaee55cc6d4935ef6d38d34bafdc46133eda4d3faea5073bda545aa6079d82b886caeac5c731cf9ac18bcc1301425
   languageName: node
   linkType: hard
 
 "nanoid@npm:^5.0.9":
-  version: 5.1.6
-  resolution: "nanoid@npm:5.1.6"
+  version: 5.1.16
+  resolution: "nanoid@npm:5.1.16"
   bin:
     nanoid: bin/nanoid.js
-  checksum: 10c0/27b5b055ad8332cf4f0f9f6e2a494aa7e5ded89df4cab8c8490d4eabefe72c4423971d2745d22002868b1d50576a5e42b7b05214733b19f576382323282dd26e
+  checksum: 10c0/04b4f96237f5639716da0e98f453361b313bebaf458bb67dea2d384724fc8b3340a28f032a4373052150bcf3b801d122e291d81ae4fc522969f55c134f4401a3
   languageName: node
   linkType: hard
 
@@ -5601,13 +5621,13 @@ __metadata:
   linkType: hard
 
 "postcss@npm:^8.4.43, postcss@npm:^8.5.10, postcss@npm:^8.5.14, postcss@npm:^8.5.6":
-  version: 8.5.16
-  resolution: "postcss@npm:8.5.16"
+  version: 8.5.25
+  resolution: "postcss@npm:8.5.25"
   dependencies:
-    nanoid: "npm:^3.3.12"
+    nanoid: "npm:^3.3.16"
     picocolors: "npm:^1.1.1"
     source-map-js: "npm:^1.2.1"
-  checksum: 10c0/625de7a02f662f3a340964d14b487bd5097adf16f5f171e257d19005ba37aea8768ee446557500e88e91ca46b4d14d6cb4a0bf033c6ec0c8c0b660d85719f1ef
+  checksum: 10c0/0a12c1e74b456c57122e81f684e02fd98ff4d57526f794d10c996df1147158808f5ae373ac82b988c8de6cbbaa82dbd7b13803b14f5dd3cf7cc6a42ccad5c9f2
   languageName: node
   linkType: hard
 
@@ -5783,14 +5803,14 @@ __metadata:
 
 "resolve@patch:resolve@npm%3A^1.1.7#optional!builtin<compat/resolve>":
   version: 1.22.10
-  resolution: "resolve@patch:resolve@npm%3A1.22.10#optional!builtin<compat/resolve>::version=1.22.10&hash=c3c19d"
+  resolution: "resolve@patch:resolve@npm%3A1.22.10#optional!builtin<compat/resolve>::version=1.22.10&hash=9bd1a5"
   dependencies:
     is-core-module: "npm:^2.16.0"
     path-parse: "npm:^1.0.7"
     supports-preserve-symlinks-flag: "npm:^1.0.0"
   bin:
     resolve: bin/resolve
-  checksum: 10c0/52a4e505bbfc7925ac8f4cd91fd8c4e096b6a89728b9f46861d3b405ac9a1ccf4dcbf8befb4e89a2e11370dacd0160918163885cbc669369590f2f31f4c58939
+  checksum: 10c0/da5c4a85971e6eeb821805d117092321c6c257a6e1e45382c0b7ef41368a7e98690e01a08bac88b111443410a49e2fb17d1802ac5c51c8fc5532d77bef9f4be9
   languageName: node
   linkType: hard
 
@@ -5947,6 +5967,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"sax@npm:^1.2.4":
+  version: 1.6.1
+  resolution: "sax@npm:1.6.1"
+  checksum: 10c0/c91a71043d60da50fdf1e2cee936fc7ad4c9376afb8d1022aef5655f279433640859ec06b3b49abfcbe578fc7da2828cc1661e45aaedf835f5393496193437fa
+  languageName: node
+  linkType: hard
+
 "sax@npm:^1.5.0":
   version: 1.6.0
   resolution: "sax@npm:1.6.0"
@@ -6135,6 +6162,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"strictdom@npm:^1.0.1":
+  version: 1.0.1
+  resolution: "strictdom@npm:1.0.1"
+  checksum: 10c0/3006ffccaa89ecc0ce2679d2726b7ea4901faa91152bf0211d11685de1c710f09a178c9dbc5ab1496e6101b686192595ff2aa78f128a814fd838793e4f29edc5
+  languageName: node
+  linkType: hard
+
 "string-width@npm:^3.0.0, string-width@npm:^3.1.0":
   version: 3.1.0
   resolution: "string-width@npm:3.1.0"
@@ -6246,8 +6280,8 @@ __metadata:
   linkType: hard
 
 "svgo@npm:^4.0.0":
-  version: 4.0.1
-  resolution: "svgo@npm:4.0.1"
+  version: 4.0.2
+  resolution: "svgo@npm:4.0.2"
   dependencies:
     commander: "npm:^11.1.0"
     css-select: "npm:^5.1.0"
@@ -6258,7 +6292,7 @@ __metadata:
     sax: "npm:^1.5.0"
   bin:
     svgo: ./bin/svgo.js
-  checksum: 10c0/f61f9957b42e0c97593b49a01f3b93cb239b2e818efccb056fcc866d622704d9021c4ef8bd0287264c3e4f33da60e4af14d841b4a624b87ff8888e3b896d13d5
+  checksum: 10c0/d58c9446d2701dd57ef62a29b4299b157cfc32e2282f82fc68dd7cdca2e1efdf0d8bb0fb30ba0499f322d20b6304be277ffbc60a6b6a75489fa30c5300694b9a
   languageName: node
   linkType: hard
 
@@ -6284,15 +6318,15 @@ __metadata:
   linkType: hard
 
 "tar@npm:^7.5.4":
-  version: 7.5.19
-  resolution: "tar@npm:7.5.19"
+  version: 7.5.22
+  resolution: "tar@npm:7.5.22"
   dependencies:
     "@isaacs/fs-minipass": "npm:^4.0.0"
     chownr: "npm:^3.0.0"
     minipass: "npm:^7.1.2"
     minizlib: "npm:^3.1.0"
     yallist: "npm:^5.0.0"
-  checksum: 10c0/7022e8cb04a8ceccc0689f2c731743fa2aab2e3c3f559f7dbc37b65ef7d5913049b427284eded2ec0765c5db5ff72dd7939fe2ae15785ff422cef2116c95d798
+  checksum: 10c0/1311f6be85a8157ac4c9147bae43e13923d2a1aae15e4aa1bd5239e4e03d2cf53cfe103dde7f35832fbb4c938b042856bc8e9a0afd29abd05e2d1608788c4fea
   languageName: node
   linkType: hard
 
@@ -6703,6 +6737,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"xml-js@npm:^1.6.11":
+  version: 1.6.11
+  resolution: "xml-js@npm:1.6.11"
+  dependencies:
+    sax: "npm:^1.2.4"
+  bin:
+    xml-js: ./bin/cli.js
+  checksum: 10c0/c83631057f10bf90ea785cee434a8a1a0030c7314fe737ad9bf568a281083b565b28b14c9e9ba82f11fc9dc582a3a907904956af60beb725be1c9ad4b030bc5a
+  languageName: node
+  linkType: hard
+
 "y18n@npm:^4.0.0":
   version: 4.0.3
   resolution: "y18n@npm:4.0.3"