deps(npm): bump prettier from 3.8.5 to 3.9.4

[dependabot]

Bumps prettier from 3.8.5 to 3.9.4.

Release notes

Sourced from prettier's releases.

3.9.4

• Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

• Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @​seiyab)
• TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @​evoactivity)

🔗 Changelog

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

Changelog

Sourced from prettier's changelog.

3.9.4

diff

Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

<!-- Input -->
<FancyButton [label]="title">
  @content (icon) {
    <span>Icon!</span>
  }
  @content (description) {
    <span>Description text</span>
  }
  <span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.3 -->
<FancyButton [label]="title">
@​content(icon) {
<span>Icon!</span>
}
@​content(description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>
<!-- Prettier 3.9.4 -->
<FancyButton [label]="title">
@​content (icon) {
<span>Icon!</span>
}
@​content (description) {
<span>Description text</span>
}
<span>Other children</span>
</FancyButton>

3.9.3

diff

Markdown: Fix unexpected removal of characters in liquid syntax (#19489 by @​seiyab)

</tr></table> 

... (truncated)

Commits

• b693cb2 Release 3.9.4
• 2e92ac0 Angular: Format @content(name) -> @content (name) to align with other blo...
• abed2c2 Bump Prettier dependency to 3.9.3
• 6cfbc00 Clean changelog_unreleased
• 3732e1d Release 3.9.3
• a74a7b0 Allow decorators to be used with declare on class fields (#19492)
• bd9e11a Correct text identification in liquid syntax (#19489)
• 269eee3 Bump Prettier dependency to 3.9.1
• ec7ccd1 Clean changelog_unreleased
• c47654c Release 3.9.1
• Additional commits viewable in compare view

[github-actions]

🤖 Claude Code Review

PR Code Review

Scope: This PR bumps prettier from 3.8.5 → 3.9.4 in package.json and package-lock.json. No application code, tests, or docs are touched.

Code Quality

• ✅ Style conventions — Only version strings changed; formatting is consistent with existing file structure.
• ✅ No commented-out code — N/A, no code changes.
• ✅ Meaningful variable names — N/A.
• ✅ DRY principle — N/A.
• ✅ Defects — No logic changes, no bugs introduced. package.json:19 and package-lock.json:14,4472 are consistent with each other (same version, matching integrity hash format). No mismatch between the two lockfile entries.
• ✅ Project CLAUDE.md — No ./.claude/CLAUDE.md exists in this repo, so nothing to flag.

Testing

• ❌ N/A — This is a devDependency version bump with no functional code change; unit/integration tests, edge cases, and coverage thresholds don't apply here. Recommend running the existing test/lint suite to confirm the new prettier version doesn't reformat any files differently (breaking changes between minor versions are rare but possible with new formatting rules).

Documentation

• ❌ CHANGELOG.md not updated — If this repo maintains a CHANGELOG for dependency bumps, this PR doesn't touch it. Verify project convention (many repos exclude devDependency-only bumps from CHANGELOG, so this may be a non-issue).
• ✅ Readme/API docs — N/A, no user-facing change.
• ✅ Inline comments — N/A.
• ✅ Markdown/CommonMark — No .md files changed in this diff.

Security

• ✅ No hardcoded credentials — Confirmed, only version bump.
• ✅ Input validation — N/A.
• ✅ Error handling — N/A.
• ✅ No sensitive data in logs — N/A.
• ✅ License files (.lic) — None found in the repository (searched excluding node_modules/.git); no AQAAAD-prefixed strings present in this diff.
• ⚠️ Supply-chain note (informational, not blocking): The integrity hash in package-lock.json:4472 for prettier 3.9.4 (sha512-yWG/o/4oJfo036EKAfK6ACAoDOfHeRHx4tuxkfBZiauURiaSmYwlpOr5LQqKtIkRD2z1PLteme2WoxEnj4tHTg==) should be verified against the published npm registry value if this wasn't generated by an automated dependency bot (e.g., Dependabot/Renovate) with its own verification pipeline. Given the commit history shows this is a routine automated bump (consistent with prior deps(npm): bump prettier commits), this is low risk.

Summary

This is a low-risk, routine devDependency bump. No blocking issues found. Suggest confirming CI passes (lint/format checks) with the new prettier version before merge, since minor version bumps can occasionally change formatting output on existing files.

Automated code review analyzing defects and coding standards

[github-actions]

🤖 Claude Code Review

PR Code Review — Dependency Bump: prettier 3.8.5 → 3.9.4

This PR is a routine devDependency version bump (likely Dependabot-generated), touching only package.json and package-lock.json. No application code, tests, or docs are changed.

Code Quality

• ✅ Style conventions — N/A, no source code changed. package.json (line 19) and package-lock.json (lines 14, 4472–4474) are correctly and consistently updated together (version, resolved URL, and integrity hash all match).
• ✅ No commented-out code — N/A, no code changed.
• ✅ Meaningful variable names — N/A.
• ✅ DRY principle — N/A.
• ✅ Defects — No logic changes; nothing to inspect for bugs/race conditions/crashes. prettier is a devDependency only, so this bump has no runtime/production impact — worst case is formatting differences in npm run format/lint-staged output.
• ✅ .claude/CLAUDE.md project memory — Not present in this repo, nothing to review here.

Testing

• ✅ N/A — no new functions, endpoints, or logic; nothing to unit/integration test. Existing test suite (vitest) is unaffected by a devDependency bump.
• ✅ Edge cases / coverage — N/A for a lockfile/version bump.

Documentation

• ⚠️ CHANGELOG.md not updated — the repo has a CHANGELOG.md, but this PR doesn't add an entry for the dependency bump. Minor — many teams exclude routine dependency bumps from CHANGELOG entries, so confirm this project's convention (check if other recent dependabot merges, e.g. 113b31e, 436c54d, 8a2b903, added CHANGELOG entries — if not, this is consistent with existing practice and not a real issue).
• ✅ README/API docs — N/A, no interface changes.
• ✅ Inline comments — N/A.
• ✅ Markdown/CommonMark formatting — N/A, no .md files touched in this diff.

Security

• ✅ No hardcoded credentials — none present.
• ✅ Input validation — N/A.
• ✅ Error handling — N/A.
• ✅ No sensitive data in logs — N/A.
• ✅ License files (.lic) / AQAAAD strings — none found in the diff or repo tree (checked working directory for *.lic files — none present).

Summary

Low-risk, mechanical devDependency bump with matching package.json/package-lock.json updates and a correctly matched integrity hash. No blocking issues found. The only thing worth a quick human check is whether this project's convention is to log dependency bumps in CHANGELOG.md — if prior dependency-bump commits (e.g. 113b31e, 436c54d) didn't touch the changelog either, this PR is consistent and fine to merge as-is.

Automated code review analyzing defects and coding standards