Bump the development-dependencies group with 2 updates

[dependabot]

Bumps the development-dependencies group with 2 updates: @primer/primitives and eslint-plugin-github.

Updates @primer/primitives from 11.9.0 to 11.10.0

Release notes

Sourced from @​primer/primitives's releases.

@​primer/primitives@​11.10.0

Minor Changes

• #1402 2627836 Thanks @​janmaarten-a11y! - Differentiate fgColor.done from fgColor.upsell in the dark protanopia & deuteranopia theme.

  Previously both resolved to the same purple (base.color.purple.4 / #AB7DF8), making status indicators using done (e.g. closed-as-completed issues, merged PRs) visually indistinguishable from indicators using upsell (often used for "in progress" promotional UI). Under deutan/protan simulation, purple also collapses toward the same hue as open, success, and attention, leaving no perceptually safe chromatic slot for done.

  • fgColor.done in dark-protanopia-deuteranopia now resolves to base.color.neutral.10 (#B7BDC8), one step brighter than fgColor.closed / fgColor.muted (neutral.9) so the two neutral-coded states stay distinguishable by lightness.
  • fgColor.upsell in dark-protanopia-deuteranopia is pinned to base.color.purple.4 so promotional content keeps its purple, independent of the done change.

  The high-contrast variant of this theme is unchanged in this release because the available neutral scale slots are already occupied (closed, draft, and body text); a separate fix is being scoped for HC.

• #1412 3b20045 Thanks @​liuliu-dev! - Add 'Noto Sans Backtick Fix' before 'Noto Sans' in fontStack.system, fontStack.sansSerif, and fontStack.sansSerifDisplay. The new family name is a non-shadowing alias for a consumer-defined @font-face, fixing body text falling through to Helvetica/Arial on Linux Firefox (see primer/css#3107, github/primer#6890).

Changelog

Sourced from @​primer/primitives's changelog.

11.10.0

Minor Changes

• #1402 2627836 Thanks @​janmaarten-a11y! - Differentiate fgColor.done from fgColor.upsell in the dark protanopia & deuteranopia theme.

  Previously both resolved to the same purple (base.color.purple.4 / #AB7DF8), making status indicators using done (e.g. closed-as-completed issues, merged PRs) visually indistinguishable from indicators using upsell (often used for "in progress" promotional UI). Under deutan/protan simulation, purple also collapses toward the same hue as open, success, and attention, leaving no perceptually safe chromatic slot for done.

  • fgColor.done in dark-protanopia-deuteranopia now resolves to base.color.neutral.10 (#B7BDC8), one step brighter than fgColor.closed / fgColor.muted (neutral.9) so the two neutral-coded states stay distinguishable by lightness.
  • fgColor.upsell in dark-protanopia-deuteranopia is pinned to base.color.purple.4 so promotional content keeps its purple, independent of the done change.

  The high-contrast variant of this theme is unchanged in this release because the available neutral scale slots are already occupied (closed, draft, and body text); a separate fix is being scoped for HC.

• #1412 3b20045 Thanks @​liuliu-dev! - Add 'Noto Sans Backtick Fix' before 'Noto Sans' in fontStack.system, fontStack.sansSerif, and fontStack.sansSerifDisplay. The new family name is a non-shadowing alias for a consumer-defined @font-face, fixing body text falling through to Helvetica/Arial on Linux Firefox (see primer/css#3107, github/primer#6890).

Commits

• 3f51f80 Version Packages (#1403)
• 3b20045 add 'Noto Sans Backtick Fix' alias to sans-serif font stacks (#1412)
• 856b103 chore(deps-dev): bump style-dictionary from 5.0.4 to 5.4.4 (#1411)
• 61d8082 chore(deps-dev): bump postcss from 8.5.15 to 8.5.23 (#1410)
• ef53094 chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 (#1409)
• b447200 chore(deps-dev): bump ws from 8.20.1 to 8.21.1 (#1408)
• c305c51 chore(deps-dev): bump @​babel/core from 7.29.0 to 7.29.7 (#1404)
• 2627836 Differentiate fgColor.done from upsell in dark protanopia & deuteranopia (#1402)
• dfbda0f chore(deps-dev): bump vitest from 3.2.4 to 4.1.0 (#1400)
• e9dbbca chore(deps-dev): bump qs from 6.14.2 to 6.15.2 (#1399)
• Additional commits viewable in compare view

Updates eslint-plugin-github from 6.1.1 to 6.1.2

Release notes

Sourced from eslint-plugin-github's releases.

v6.1.2

What's Changed

• chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @​dependabot[bot] in github/eslint-plugin-github#718
• chore(deps): resolve npm audit vulnerabilities by @​dgreif in github/eslint-plugin-github#720
• chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates by @​dependabot[bot] in github/eslint-plugin-github#723
• Upgrade deps by @​gracepark in github/eslint-plugin-github#726

Full Changelog: github/eslint-plugin-github@v6.1.1...v6.1.2

Commits

• 03bfb7d Merge pull request #726 from github/gp/upgrade-dep
• d66f3e8 upgrade deps
• 259c9e1 chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 update...
• a95d9e7 chore(deps): resolve npm audit vulnerabilities (#720)
• add7174 chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#718)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: 8e02d2d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.