chore(deps): bump @equinor/fusion-wc-markdown from 1.5.1 to 1.6.4

[dependabot]

Bumps @equinor/fusion-wc-markdown from 1.5.1 to 1.6.4.

Release notes

Sourced from @​equinor/fusion-wc-markdown's releases.

@​equinor/fusion-wc-markdown@​1.6.4

Patch Changes

• #2355 6762433 Thanks @​dependabot! - Update TypeScript to 7.0.2

@​equinor/fusion-wc-markdown@​1.6.3

Patch Changes

• #2273 de5b4d8 Thanks @​asbjornhaland! - Security patch to override:

  • fast-uri <=3.1.1 to 3.1.2

@​equinor/fusion-wc-markdown@​1.6.2

Patch Changes

• #2261 abd3915 Thanks @​asbjornhaland! - Security patch to override:

  • picomatch >= 4.0.0, < 4.0.4 to 4.0.4
  • serialize-javascript < 7.0.5 to 7.0.5

Changelog

Sourced from @​equinor/fusion-wc-markdown's changelog.

1.6.4

Patch Changes

• #2355 6762433 Thanks @​dependabot! - Update TypeScript to 7.0.2

1.6.3

Patch Changes

• #2273 de5b4d8 Thanks @​asbjornhaland! - Security patch to override:

  • fast-uri <=3.1.1 to 3.1.2

1.6.2

Patch Changes

• #2261 abd3915 Thanks @​asbjornhaland! - Security patch to override:

  • picomatch >= 4.0.0, < 4.0.4 to 4.0.4
  • serialize-javascript < 7.0.5 to 7.0.5

1.6.1

Patch Changes

• #2226 0c2033a Thanks @​odinr! - Remove source maps from build output. Source maps were included in packages but referenced source files that were excluded from npm, making them broken and adding unnecessary size.

1.6.0

Minor Changes

• #2215 ba38e3c Thanks @​chdefrene! - Upgrade from TypeScript 5 to 6

Patch Changes

• Updated dependencies [ba38e3c]:
  • @​equinor/fusion-wc-icon@​2.4.0

Commits

• de6a45b chore: version packages (#2403)
• 6762433 chore(deps): bump typescript from 6.0.3 to 7.0.2 (#2355)
• dde7269 chore(deps): bump the prosemirror group across 1 directory with 4 updates (#2...
• b47577a chore(deps): bump marked from 18.0.4 to 18.0.9 (#2375)
• 9fc2ece chore(deps): bump marked from 18.0.3 to 18.0.4 (#2286)
• e5087e3 chore(deps): bump lit from 3.3.2 to 3.3.3 (#2277)
• a4437f4 chore: version packages (#2274)
• 28a2880 chore: version packages (#2262)
• 460d287 chore(deps): bump marked from 18.0.2 to 18.0.3 (#2259)
• dff08cf chore: version packages (#2227)
• Additional commits viewable in compare view

[changeset-bot]

⚠️ No Changeset found

Latest commit: c75a0e9

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[odinr]

🤖 Bip Bop - Dependency Update Verdict

Decision Snapshot

Signal	Notes
Recommendation	merge
Confidence	high

Work Done Since Research Checkpoint

• Branch action: rebased onto main (picked up an unrelated turbo cache fix for packages/cli build outputs that was causing an intermittent CI-only build failure)
• Validation rerun: pnpm build --force locally (pass); CI Check Code rerun after rebase (pass)
• PR state now: mergeable, REVIEW_REQUIRED

Existing Discussion Status

• Top-level PR comments reviewed: yes
• Review threads reviewed: yes (none)
• Open reviewer concerns: None
• Items judged outdated or already answered: None

Lens Calls

Security

• Call: clear
• Why it matters: release range 1.5.2–1.6.4 includes security-motivated overrides (fast-uri ≤3.1.1→3.1.2, picomatch 4.0.0–4.0.3→4.0.4, serialize-javascript <7.0.5→7.0.5) fixing known upstream advisories in transitive deps.
• Evidence:
  • Changelog entries for 1.6.2 and 1.6.3 in @equinor/fusion-wc-markdown (linked from PR body)
  • No new advisories on the target version

Code quality

• Call: clear
• Why it matters: routine maintenance releases (TypeScript 6→7 build tooling bump, source-map cleanup); no API surface changes to the web component itself.
• Evidence:
  • Changelog shows only "Patch Changes" entries across 1.5.2 → 1.6.4, no "Minor"/"Major" consumer-facing entries except the internal TS upgrade
  • Only pnpm-lock.yaml changed in this repo — no manifest edits required

Impact

• Call: clear
• Why it matters: change is scoped to cookbooks/app-react-router's resolved dependency graph; declared range ^1.5.0 already permits 1.6.4, so this is a lockfile-only refresh, not a manifest bump.
• Evidence:
  • gh pr view --json files shows a single changed file: pnpm-lock.yaml (+13/-13)
  • Full pnpm build --force succeeds locally and in CI after rebase

Rationale

Patch/minor-range dependency refresh with no manifest change, security-motivated fixes in the changelog, and a clean full-repo build. No blockers.

Blockers And Follow-Up

Blockers to clear before merge

None

Follow-up after merge

None

Issue handoff

none

Maintainer Confirmation

• Posting gate: Post this verdict summary to the PR before any approval or merge.
• Requested action: approve
• Confirmation prompt: Please confirm the next action before any rebase, push, approval, or merge.
• Decision note: Lockfile-only refresh within existing declared range (^1.5.0); per dependabot-pr.instructions.md "when to skip" rule, no changeset required.

[odinr]

Approved per dependency review verdict — see comment above.