chore(deps): bump @cucumber/gherkin from 39.1.0 to 40.0.0 in /frontend

[dependabot]

Bumps @cucumber/gherkin from 39.1.0 to 40.0.0.

Release notes

Sourced from @​cucumber/gherkin's releases.

v40.0.0

Changed

• [.Net] Replaced FluentAssertions with AwesomeAssertions
• [JavaScript] BREAKING CHANGE: Switch to ESM (#610)

Changelog

Sourced from @​cucumber/gherkin's changelog.

[40.0.0] - 2026-06-10

Changed

• [.Net] Replaced FluentAssertions with AwesomeAssertions
• [JavaScript] BREAKING CHANGE: Switch to ESM (#610)

Commits

• 105ce5f Prepare release v40.0.0
• 684e2cd Bump otp-version for Elixir workflows (#612)
• 6201733 Update dependency astral-sh/uv to v0.11.20
• 2b6077c Update module github.com/cucumber/messages/go/v33 to v33.0.2
• 5b4eabe Switch to ESM (#610)
• c331044 java: Restore lower bound for messages
• 5401273 Update module github.com/cucumber/messages/go/v32 to v33 (#609)
• bc2d5f3 Update cucumber ecosystem to v33 (#608)
• ffc2f94 Update ruby/setup-ruby action to v1.312.0
• f09dc3f Update shivammathur/setup-php action to v2.37.2
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: javascript. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[claude]

Dependabot Assessment

Dependency: @cucumber/gherkin 39.1.0 → 40.0.0
Bump type: Major
Location: frontend/ (npm dev dependency)

Risk assessment: This is a major bump with an explicit JavaScript breaking change — the package switched from CommonJS to ES Modules (BREAKING CHANGE: Switch to ESM). While Vite handles ESM natively and the practical impact may be low (this is a dev/test dependency, not production runtime code), the declared breaking change on a major version requires human verification.

Additionally, several CI checks are still pending (Test, Security Audit, Pre-commit, build/build), so a CI green light cannot be confirmed yet.

Decision: Flagging for human review.

Reasons:

• Major version bump (39 → 40)
• Declared breaking change in the changelog (ESM switch)
• CI checks not yet complete

A human should verify CI passes and confirm the ESM switch does not break the frontend build or any tooling that imports this package.