@liquidcommerce/elements-sdk 2.7.41 → 2.7.42

package/dist/types/modules/checkout/styles/express-checkout.style.d.ts

@@ -0,0 +1 @@
+export declare const getExpressCheckoutStyles: () => string;

package/dist/types/modules/checkout/styles/express-completion.style.d.ts

@@ -0,0 +1 @@
+export declare const getExpressCompletionStyles: () => string;

package/dist/types/modules/ui-components/alert/alert.component.d.ts

@@ -1,24 +1,24 @@
 import { BaseComponent, type IOnStoreChanged } from '@/core/base-component.service';
 import type { StorePaths } from '@/core/store/interfaces/core.interface';
+export type AlertLevel = 'success' | 'warning' | 'error';
 export interface IAlertComponentParams {
-    errorStorePath: StorePaths;
-    fromEvents?: boolean;
+    storePaths: StorePaths[];
     showFirstEvent?: boolean;
     autoHideDelay?: number;
 }
 export declare class AlertComponent extends BaseComponent<IAlertComponentParams, null> {
     private hideTimeout;
-    private elements;
-    private lastAnnouncedKey;
+    private lastAnnounced;
     get hostClasses(): string[];
     beforeSetupStoreWatchers(): void;
-    afterRender(): void;
     onStoreWatch(changes: IOnStoreChanged[]): void;
-    private getErrorMessages;
-    private createErrorElement;
-    private scheduleHide;
-    private hideAllErrors;
-    private updateAlert;
+    afterRender(): void;
     protected template(): HTMLElement[];
+    private getAlerts;
+    private discard;
+    private createAlert;
+    private createDismissButton;
+    private scheduleSuccessHide;
+    private announce;
     disconnectedCallback(): void;
 }

package/dist/types/modules/ui-components/input/input.component.d.ts

@@ -22,7 +22,7 @@ export interface IInputComponentParams {
     label?: string;
     ariaLabel?: string;
     name: string;
-    autocomplete?: boolean;
+    autocomplete?: boolean | string;
     disabled?: boolean;
 }
 export declare class InputComponent extends BaseComponent<IInputComponentParams, null> {

package/dist/types/utils/format.d.ts

@@ -13,3 +13,7 @@ export declare function normalizeEngravingLines(lines: readonly (string | null |
 export declare function normalizeText<T extends string | null | undefined>(value: T): T;
 export declare function normalizeEmail<T extends string | null | undefined>(value: T): T;
 export declare function normalizeCode<T extends string | null | undefined>(value: T): T;
+export declare function formatPaymentMethodLabel(card: {
+    brand?: string | null;
+    last4?: string | null;
+} | null | undefined): string;

package/docs/v1/api/actions/checkout-actions.md

@@ -532,7 +532,9 @@ After `lce:actions.checkout_loaded`, call
 `await elements.actions.checkout.updateCustomerInfo(fields, { saveIfValid: true })`
 to validate and prepare complete account details, then show their editable summary.
 Supply names, email, a US phone number, and a real `birthDate` in `MM/DD/YYYY` format
-(age 21+, year 1930 or later). A shipping street must already be selected.
+(age 21+, year 1930 or later). The `birthDate` may be blank when the partner does not require a
+date of birth (`checkout.layout.requireBirthDate: false`); a supplied one is still validated.
+A shipping street must already be selected.
 Omitted apartment and delivery instructions retain their existing checkout values.
 Partial or invalid details stay in the form; backend validation failures reject the
 promise, show the checkout error, and keep details editable. The host should handle that rejection.

package/docs/v1/api/client.md

@@ -64,6 +64,55 @@ const client = await ElementsCheckout('YOUR_API_KEY', {
 });
 ```
 
+The checkout-only client exposes `injectCheckout()`, `injectExpressCheckout()`, `actions.checkout`
+and `destroy()`.
+
+#### injectExpressCheckout()
+
+Injects only the Apple Pay and Google Pay wallet buttons, anywhere on the page, without the rest of
+the checkout UI. Confirming the wallet sheet places the order outright — the wallet's contact and
+billing details are sent to the checkout, so the shopper never fills a checkout form.
+
+```typescript
+injectExpressCheckout(params: IInjectExpressCheckoutParams): Promise<IInjectedComponent | null>
+```
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `containerId` | string | Yes | ID of an element that already exists in the DOM |
+| `checkoutId` | string | No | Checkout token to bind the buttons to. Omit to use the checkout already loaded |
+| `variant` | `'buttons' \| 'section'` | No | `'buttons'` (default) is the wallet row alone; `'section'` adds the "Express Checkout" heading and OR divider |
+
+A checkout is prepared at injection time rather than when a button is tapped: Stripe gives the
+wallet's click handler one second to open its sheet, which is not enough time to create a checkout
+and a payment session. Without a `checkoutId` the checkout already in the store is reused, so the
+buttons can be injected beside a checkout the page has already loaded; the checkout-only client has
+no cart to fall back on, so it throws when there is no loaded checkout to attach to. Inject again
+with a new token whenever the address or fulfillment changes — the amounts the sheet shows come from
+the checkout the buttons were prepared against.
+
+The buttons only render where the shopper's platform offers a wallet, and the block hides itself
+entirely otherwise. Subscribe to `lce:actions.checkout_express_checkout_availability` to know which
+state you are in. Both wallets require an HTTPS origin on a domain registered with Stripe, each
+subdomain separately — see the
+[checkout component guide](../guides/checkout-component.md#express-checkout-apple-pay-and-google-pay).
+
+```javascript
+await client.injectExpressCheckout({
+  containerId: 'express-checkout-container'
+});
+```
+
+The full client exposes the same component as `injectExpressCheckoutElement()`, with the same
+parameters. It differs in one way: with no `checkoutId` and no checkout loaded, it prepares one from
+the current cart rather than throwing.
+
+```javascript
+await client.injectExpressCheckoutElement({
+  containerId: 'pdp-express-checkout'
+});
+```
+
 ### ElementsBuilder()
 
 Initialize the builder client, which exposes manual `inject*` / `update*` methods for fully programmatic composition.

package/docs/v1/api/configuration.md

@@ -335,6 +335,7 @@ interface ICheckoutLayout {
   emailOptIn: ICheckoutMarketingOptIn;
   smsOptIn: ICheckoutMarketingOptIn;
   allowGiftCards: boolean;
+  requireBirthDate?: boolean;
   legalMessage: ICheckoutLegalMessage;
   continueShoppingUrl: string;
   exitUrl: string;
@@ -350,6 +351,7 @@ interface ICheckoutLayout {
 | `emailOptIn` | `ICheckoutMarketingOptIn` | Email marketing opt-in configuration |
 | `smsOptIn` | `ICheckoutMarketingOptIn` | SMS marketing opt-in configuration |
 | `allowGiftCards` | `boolean` | Enable gift card payment option |
+| `requireBirthDate` | `boolean` | Whether the shopper must enter a date of birth to place an order. Defaults to `true`. When `false` the form's field is optional and express checkout does not ask for it |
 | `legalMessage` | `ICheckoutLegalMessage` | Legal/terms message configuration |
 | `continueShoppingUrl` | `string` | URL for "Continue Shopping" link |
 | `exitUrl` | `string` | URL for exit/back navigation |
@@ -546,7 +548,7 @@ interface IElementsGTMConfig {
 }
 ```
 
-If your site loads its own GTM container through Google tag gateway for advertisers, set `gatewayUrl` to that first-party path (e.g. `'https://www.yoursite.com/metrics/'` or `'/metrics/'`) so the SDK recognizes the container instead of treating the page as having none. Declarative equivalent: `data-gtm-gateway-url`. An empty or non-string value drops the whole `gtm` config with a console warning.
+If your site loads its own GTM container through Google tag gateway for advertisers, set `gatewayUrl` to that first-party path (e.g. `'https://www.yoursite.com/metrics/'` or `'/metrics/'`) so the SDK recognizes the container before GTM has booted it. It affects detection only: your container receives SDK events through `dataLayer` with or without it. Declarative equivalent: `data-gtm-gateway-url`. An empty or non-string value drops the whole `gtm` config with a console warning.
 
 See [Analytics → Google tag gateway](../reference/analytics.md#google-tag-gateway).
 

package/docs/v1/api/typescript-types.md

@@ -80,9 +80,16 @@ Checkout-only client interface returned by `ElementsCheckout()`.
 ```typescript
 interface IElementsCheckoutClient {
   injectCheckout(params: IInjectCheckoutParams): Promise<IInjectedComponent | null>;
+  injectExpressCheckout(params: IInjectExpressCheckoutParams): Promise<IInjectedComponent | null>;
   actions: { checkout: IElementsCheckoutActions };
   destroy(): void;
 }
+
+interface IInjectExpressCheckoutParams {
+  containerId: string;
+  checkoutId?: string;              // omit to use the checkout already loaded
+  variant?: 'section' | 'buttons';  // 'buttons' is the default outside the checkout element
+}
 ```
 
 ---
@@ -440,7 +447,9 @@ After `lce:actions.checkout_loaded`, call
 `await elements.actions.checkout.updateCustomerInfo(fields, { saveIfValid: true })`
 to validate and prepare complete account details, then show their editable summary.
 Supply names, email, a US phone number, and a real `birthDate` in `MM/DD/YYYY` format
-(age 21+, year 1930 or later). A shipping street must already be selected.
+(age 21+, year 1930 or later). The `birthDate` may be blank when the partner does not require a
+date of birth (`checkout.layout.requireBirthDate: false`); a supplied one is still validated.
+A shipping street must already be selected.
 Omitted apartment and delivery instructions retain their existing checkout values.
 Partial or invalid details stay in the form; backend validation failures reject the
 promise, show the checkout error, and keep details editable. The host should handle that rejection.

package/docs/v1/guides/accessibility.md

@@ -105,6 +105,7 @@ Content that appears or changes without navigation is announced through a shared
 | Cart or checkout opened / closed | "Shopping cart opened" / "Shopping cart closed" |
 | Panel closed (product) | "Closed. Back to product options." |
 | Item added / removed, promo applied, totals changed | The new state, e.g. "Promo code SPRING applied, $5.00 off" |
+| Express checkout payment failed | "Express checkout failed. …" |
 | Product list filtered or searched | "12 products found, showing 12" |
 | Validation failed | The field name and the error, interrupting (assertive) |
 | Carousel image changed | "Image 2 of 4" |
@@ -120,6 +121,14 @@ on render, and a live region recreated with its text already in place is not ann
   `aria-selected` / `aria-checked` — not toggle buttons with `aria-pressed`, which would describe
   each choice as an independent on/off switch. Product sizes are a `listbox`; the delivery options
   under each method are a `radiogroup`.
+- Checkout's **Delivery Method** section is an accordion whose header is a real `button` carrying
+  `aria-expanded`, and whose two methods are a `radiogroup` of `radio` cards. Choosing one re-prices
+  the order, so selection does not follow focus here either: arrow keys move between the methods and
+  `Enter` / `Space` commits, rather than committing a switch the shopper was only passing through.
+  A method that cannot fulfil is `aria-disabled` and not activatable, but the **Change Location**
+  button inside it stays reachable — it is the way out of that state, so it must not be sealed in
+  with the option it sits under. Each card names the method, its fee and its timing, or, when it
+  cannot fulfil, the reason why.
 - The delivery-method controls are a `tablist` of `tab`s. Only one method's options are rendered at
   a time, so the selected tab carries `aria-controls` and the region it swaps in is the matching
   `tabpanel`, labelled by that tab; the inactive tab points at nothing, because there is nothing
@@ -163,6 +172,26 @@ element on a page labels its own sections.
 The checkout element has its own outline and is not covered by the above. Where any element's
 top-level heading sits in **your** page's outline is yours to place.
 
+### Express checkout
+
+The Apple Pay and Google Pay buttons are rendered by Stripe inside an iframe, so their own labels
+and keyboard behaviour are Stripe's. What the SDK owns around them:
+
+- The **"Express Checkout" heading** is an `h3`, matching the other checkout section headings. It is
+  rendered only by the `section` variant; injected on their own the buttons carry no heading, and the
+  host page's own outline supplies it.
+- The **`OR` divider** is decorative and carries `aria-hidden="true"`, so "OR" is not announced as
+  content between the buttons and the section below.
+- When the shopper's device offers **no wallet**, the heading and the divider are removed from the
+  accessibility tree along with the buttons, so no orphan rule or empty heading is left behind. The block is also removed on a gift order, which express cannot place, and where a
+  payment method is already bound to the checkout. It is offered to every shopper otherwise.
+- The **wallet sheet is browser UI**, not an SDK overlay: the browser owns focus while it is open and
+  returns it to the button that opened it. Dismissing the sheet changes nothing in the page, so
+  nothing is announced.
+- Failures are announced assertively, because the shopper has just authorised a payment and the sheet
+  that showed the error has already closed. Confirming the sheet places the order outright, so there
+  is nothing to announce on the success path beyond the order confirmation itself.
+
 ### Images and icons
 
 - Product photos use the product name as their alt text; a photo painted as a CSS background is

package/docs/v1/guides/checkout-component.md

@@ -371,6 +371,17 @@ window.addEventListener('lce:actions.checkout_item_quantity_decrease', (event) =
 });
 ```
 
+### Delivery Method
+
+Fires when the shopper switches a single-item checkout between same-day delivery and shipping.
+
+```javascript
+window.addEventListener('lce:actions.checkout_delivery_method_updated', (event) => {
+  const { fulfillmentType, previousFulfillmentType } = event.detail.data;
+  console.log(`Delivery method: ${previousFulfillmentType} to ${fulfillmentType}`);
+});
+```
+
 ### Tips
 
 ```javascript
@@ -402,6 +413,16 @@ window.addEventListener('lce:actions.checkout_submit_failed', (event) => {
 });
 ```
 
+### Express Checkout
+
+```javascript
+// Wallet availability settled or changed (always fires at least once per block)
+window.addEventListener('lce:actions.checkout_express_checkout_availability', (event) => {
+  const { data } = event.detail;
+  console.log(data.available ? `Wallets: ${data.wallets.join(', ')}` : 'No wallets available');
+});
+```
+
 ### Promo Codes
 
 ```javascript
@@ -496,13 +517,63 @@ const client = await Elements('YOUR_API_KEY', {
 
 The SDK uses Stripe for payment processing. Payment form is embedded and handles:
 - Credit/debit cards
-- Apple Pay (when available)
-- Google Pay (when available)
 - PCI compliance
 - 3D Secure authentication
 
 No additional Stripe integration code needed - it's built-in.
 
+### Express checkout (Apple Pay and Google Pay)
+
+Apple Pay and Google Pay are offered as express checkout buttons at the top of the checkout, above
+the gift toggle. Tapping one collects the shopper's contact and billing details from the wallet and
+places the order without them completing the checkout forms.
+
+Express checkout is offered to every shopper whose platform can show a wallet. Each wallet is
+requested with Stripe's `always` policy, so the button renders wherever the device supports it rather
+than only where Stripe judges it good for conversion. The block hides itself entirely — heading,
+buttons and divider — in four cases: the device or browser offers no wallet, the order is a
+gift, a payment method is already bound to the checkout, or Stripe.js fails to load. Subscribe to
+[`lce:actions.checkout_express_checkout_availability`](./events.md) to know which state you are in.
+
+Two things are required outside the SDK:
+
+- **The page must be served over HTTPS.** Stripe requires this in development as well as production;
+  the wallet buttons do not render on a plain-HTTP page.
+- **Every domain that serves the buttons must be registered with Stripe** for the account issuing the
+  publishable key, in both sandbox and live mode. Stripe requires this for Apple Pay and Google Pay
+  alike, and it covers subdomains: `shop.example.com` is registered separately from `example.com`.
+  Registering in live mode registers the sandbox too. This applies per partner domain.
+
+Approving the wallet sheet hands the order to the **express completion view**, which replaces the
+checkout form the moment the sheet closes. The view saves the shopper's name, email and phone from
+the wallet as the checkout's customer and binds the approved payment method; the wallet's billing
+address goes to Stripe with that payment method, and the order's own billing address stays the one
+the checkout already holds. Then it asks for the one thing no wallet returns — the shopper's **date
+of birth** — with the same 21+ validation as the form, and places the order from its **Complete
+order** button. A date the shopper already typed into the form is used instead, and the view goes
+straight to placing the order. When the partner has turned off **Require date of birth** in the
+builder (`checkout.layout.requireBirthDate: false`), the view skips the step and places the order as
+soon as the payment method is bound. A shopper can step **back to checkout** from the view; the
+payment method stays bound, and the form asks for the date of birth itself when one is required.
+
+If the wallet sheet itself fails — a declined authorisation, or a total that changed while it was
+open — the sheet reports the reason and nothing is handed on. Anything that fails after the sheet
+has closed is reported on the view, with a retry. The order is placed only for the checkout and the
+total the sheet was opened for: the server verifies both against the wallet's intent at completion,
+so a total that moved in between is refused there as well and the shopper approves again.
+
+The wallet tap is also refused, with nothing charged, when a cart is below a retailer's minimum
+purchase amount — the same condition that keeps the Place Order button disabled. Presale checkouts
+are exempt from it, as they are there.
+
+Express checkout is not offered on a gift order: a gift needs the recipient's name, email, phone and
+message, and no wallet returns any of them. Turning on "Send as a gift" hides the block, and turning
+it back off restores it.
+
+The buttons are not confined to the checkout element. Inject them anywhere on the page with
+`injectExpressCheckoutElement()` on the full client, or `injectExpressCheckout()` on the
+checkout-only client.
+
 ## Checkout Flow
 
 ### Standard Flow
@@ -623,6 +694,7 @@ window.addEventListener('lce:actions.checkout_submit_failed', () => {
 checkout: {
   layout: {
     allowGiftCards: true,       // Show gift card input
+    requireBirthDate: true,     // Require a date of birth to place an order
     emailOptIn: {
       show: true,              // Show email opt-in checkbox
       checked: false,            // Default unchecked
@@ -691,7 +763,9 @@ After `lce:actions.checkout_loaded`, call
 `await elements.actions.checkout.updateCustomerInfo(fields, { saveIfValid: true })`
 to validate and prepare complete account details, then show their editable summary.
 Supply names, email, a US phone number, and a real `birthDate` in `MM/DD/YYYY` format
-(age 21+, year 1930 or later). A shipping street must already be selected.
+(age 21+, year 1930 or later). The `birthDate` may be blank when the partner does not require a
+date of birth (`checkout.layout.requireBirthDate: false`); a supplied one is still validated.
+A shipping street must already be selected.
 Omitted apartment and delivery instructions retain their existing checkout values.
 Partial or invalid details stay in the form; backend validation failures reject the
 promise, show the checkout error, and keep details editable. The host should handle that rejection.

package/docs/v1/guides/events.md

@@ -706,6 +706,22 @@ window.addEventListener('lce:actions.checkout_item_engraving_updated', (event) =
 });
 ```
 
+### `lce:actions.checkout_delivery_method_updated`
+
+Fires when the shopper moves a single-item checkout between same-day delivery and shipping. The order
+is re-priced, so the totals change with it.
+
+**Data includes:** `cartId`, `fulfillmentType`, `previousFulfillmentType`, `fulfillmentId`.
+
+**Example**
+
+```javascript
+window.addEventListener('lce:actions.checkout_delivery_method_updated', (event) => {
+  const { data } = event.detail;
+  console.log('Delivery method now', data.fulfillmentType);
+});
+```
+
 ### `lce:actions.checkout_tip_updated`
 
 Fires when delivery tips are updated.
@@ -858,6 +874,25 @@ window.addEventListener('lce:actions.checkout_gift_card_failed', (event) => {
 });
 ```
 
+### `lce:actions.checkout_express_checkout_availability`
+
+Fires once the express checkout block has settled which wallet buttons the shopper can reach, and
+again whenever that changes. It always fires at least once per block. `available` is `false` on a
+device or browser that offers no wallet, on a gift order, when a payment method is already bound to
+the checkout, and when Stripe.js cannot load; in every case the SDK hides the whole block including
+its divider.
+
+**Data includes:** `cartId`, `available`, `wallets`.
+
+**Example**
+
+```javascript
+window.addEventListener('lce:actions.checkout_express_checkout_availability', (event) => {
+  const { data } = event.detail;
+  console.log(data.available ? `Wallets: ${data.wallets.join(', ')}` : 'No wallets available');
+});
+```
+
 ### `lce:actions.checkout_product_add_success`
 
 Fires when products are added to checkout via the actions API.

package/docs/v1/guides/theming.md

@@ -168,6 +168,7 @@ customTheme: {
         text: 'Receive SMS updates about your order and exclusive deals.'
       },
       allowGiftCards: true,
+      requireBirthDate: true,
       legalMessage: { show: true, text: 'By placing your order, you agree to our Terms of Service and Privacy Policy.' },
       continueShoppingUrl: 'https://yoursite.com/shop',
       exitUrl: 'https://yoursite.com',

package/docs/v1/reference/analytics.md

@@ -52,7 +52,17 @@ The SDK detects an already-present partner/host GTM container rather than replac
 
 ### Google tag gateway
 
-If your site loads its own GTM container first-party through [Google tag gateway for advertisers](https://developers.google.com/tag-platform/tag-manager/gateway/get-started) (e.g. `https://www.yoursite.com/metrics/` instead of `https://www.googletagmanager.com/gtm.js?id=GTM-XXXX`), tell the SDK where that path is so it recognizes your container:
+[Google tag gateway for advertisers](https://developers.google.com/tag-platform/tag-manager/gateway/get-started) serves your Google tags from your own domain instead of Google's. Your GTM container loads from a first-party path such as `https://www.yoursite.com/metrics/` instead of `https://www.googletagmanager.com/gtm.js?id=GTM-XXXX`, and its measurement requests (e.g. GA4 `/g/collect` hits) go out through that same path. Your CDN or load balancer forwards them to Google, so they are less likely to be blocked than requests to Google's domains.
+
+#### How the SDK works with it
+
+- The SDK pushes every event to the page's `window.dataLayer`. Your container reads that same `dataLayer`, so it receives SDK events whether it loads from Google or from your gateway. Keep the default `dataLayer` name: a container renamed with `&l=` never sees them.
+- The SDK never loads your container and proxies nothing. The LiquidCommerce container still loads from `googletagmanager.com`.
+- To send SDK events to your own GA4 property, add a Custom Event trigger in your container on the [event names](#events) below and a GA4 Event tag that fires on it. The SDK puts `items`, `value` and `currency` at the top level of each event, not inside an `ecommerce` object, so map them with Data Layer Variables rather than the GA4 tag's "Send Ecommerce data" option.
+
+#### `gatewayUrl`
+
+Tell the SDK your gateway path so it can recognize your container:
 
 ```javascript
 const client = await Elements('YOUR_API_KEY', {
@@ -62,7 +72,9 @@ const client = await Elements('YOUR_API_KEY', {
 
 Or declaratively, on the script tag: `data-gtm-gateway-url="/metrics/"`.
 
-A gateway script URL usually carries no container ID, so without this setting the SDK cannot match the script tag to your partner container. A script with the same origin whose path starts with that value is matched to your partner container by container ID: an `id=` query parameter must equal your partner container ID, and a script without one counts only once GTM's `window.google_tag_manager` registry lists your container ID (or while no container has booted yet). A gateway serving a different container or a GA4/Ads tag is therefore never taken for yours. Relative values resolve against the current page. The setting affects detection only — the SDK never loads your container, and the LiquidCommerce container still loads from `googletagmanager.com`.
+A gateway script URL usually carries no container ID, so until GTM has booted your container this setting is the only way the SDK can match the script tag to it. Once matched, your container ID is added to each event's `send_to` targets. The setting is optional: events reach your container through `dataLayer` without it.
+
+A script with the same origin whose path starts with that value is matched to your partner container by container ID: an `id=` query parameter must equal your partner container ID, and a script without one counts only once GTM's `window.google_tag_manager` registry lists your container ID (or while no container has booted yet). A gateway serving a different container or a GA4/Ads tag is therefore never taken for yours. Relative values resolve against the current page.
 
 When both the LiquidCommerce container and a partner container are initialized, events are sent to both using GA4's `send_to` targeting (a dual-container send). Only containers that are actually initialized are added to `send_to`, so events are never routed to a container that failed to load.
 

package/package.json

@@ -3,7 +3,7 @@
   "description": "LiquidCommerce Elements SDK",
   "license": "UNLICENSED",
   "author": "LiquidCommerce Team",
-  "version": "2.7.41",
+  "version": "2.7.42",
   "homepage": "https://docs.liquidcommerce.co/elements-sdk",
   "repository": {
     "type": "git",
@@ -14,7 +14,7 @@
   },
   "module": "./dist/index.esm.js",
   "types": "./dist/types/index.d.ts",
-  "packageManager": "pnpm@11.24.0",
+  "packageManager": "pnpm@12.9.1",
   "exports": {
     ".": {
       "types": "./dist/types/index.d.ts",
@@ -109,7 +109,7 @@
     "theming"
   ],
   "devDependencies": {
-    "@biomejs/biome": "^2.5.14",
+    "@biomejs/biome": "^2.5.15",
     "@commitlint/cli": "^21.2.3",
     "@commitlint/config-conventional": "^21.2.3",
     "@playwright/test": "1.63.0",
@@ -126,18 +126,18 @@
     "@semantic-release/npm": "^13.2.0",
     "@semantic-release/release-notes-generator": "^14.1.1",
     "@types/core-js": "^2.5.8",
-    "@types/node": "^26.6.3",
+    "@types/node": "^26.6.4",
     "conventional-changelog": "8.1.3",
     "husky": "^9.1.7",
-    "jsdom": "30.1.1",
+    "jsdom": "30.1.2",
     "process": "^0.11.10",
-    "rollup": "^4.63.5",
+    "rollup": "^4.64.0",
     "rollup-obfuscator": "^4.1.1",
     "rollup-plugin-typescript2": "^0.37.0",
     "semantic-release": "^25.0.9",
     "ts-node": "^10.9.2",
     "typescript": "6.0.3",
-    "vitest": "5.0.2"
+    "vitest": "5.0.3"
   },
   "engines": {
     "node": ">=22"