Bump tmp, @tokens-studio/sd-transforms and style-dictionary

[dependabot]

Removes tmp. It's no longer used after updating ancestor dependencies tmp, @tokens-studio/sd-transforms and style-dictionary. These dependencies need to be updated together.

Removes tmp

Updates @tokens-studio/sd-transforms from 1.2.3 to 1.3.0

Release notes

Sourced from @​tokens-studio/sd-transforms's releases.

v1.3.0

Minor Changes

• a8f4c73: - Supporting color modifier value calculations
  • Changing the default color precision to the ColorJS default of 5
  • Updating the integration tests to use vitest instead of mocha chai

v1.2.12

Patch Changes

• 9801a8f: Specify version range for SD peer dep to specifically support the 5.0.0 release candidates.

v1.2.11

Patch Changes

• 59d9d7f: Migrate to latest Style Dictionary v4 and allow v5 in peerDependencies for now, as v5 doesn't plan to be a breaking change for packages like this one.

v1.2.9

Patch Changes

• e0aab62: Fix ts/size/px transform to handle multi-value token values such as 'button.padding': { value: '4 8' }.

v1.2.8

Patch Changes

• 5de4025: Addressed issue #316 about letterSpacing. LetterSpacing is no longer a dimension token. Also, the expand composition test token has been modify to test if the letterSpacing still works properly.

v1.2.7

Patch Changes

• fb3c7d3: Export TransformOption type to be publicly available (#319)
• 26cf7f9: -Made the font weight case insensitive; Extra checks for style and weight values, confusions cleared up in the code; Font style and value are not both mandatory, it is fine if only one is specified; If font style is not provided, the style field will take the weight value; The bug from issue #267 is fixed.

v1.2.6

Patch Changes

• b4461f4: Ensure that shadow value is still of type object (either Object or Array) before attempting to resolve math for each property/item.

v1.2.5

Patch Changes

• 61af02f: Check for color transforms that the value is of type string, since other color object types could occur from previously ran transforms.

v1.2.4

Patch Changes

• b9aee1e: Fix lineHeight transform to keep numbers as numbers, and not stringify them.

Changelog

Sourced from @​tokens-studio/sd-transforms's changelog.

1.3.0

Minor Changes

• a8f4c73: - Supporting color modifier value calculations
  • Changing the default color precision to the ColorJS default of 5
  • Updating the integration tests to use vitest instead of mocha chai

1.2.12

Patch Changes

• 9801a8f: Specify version range for SD peer dep to specifically support the 5.0.0 release candidates.

1.2.11

Patch Changes

• 59d9d7f: Migrate to latest Style Dictionary v4 and allow v5 in peerDependencies for now, as v5 doesn't plan to be a breaking change for packages like this one.

1.2.10

Patch Changes

• ab40f11: avoid checkAndEvaluateMath returning NaN

1.2.9

Patch Changes

• e0aab62: Fix ts/size/px transform to handle multi-value token values such as 'button.padding': { value: '4 8' }.

1.2.8

Patch Changes

• 5de4025: Addressed issue #316 about letterSpacing. LetterSpacing is no longer a dimension token. Also, the expand composition test token has been modify to test if the letterSpacing still works properly.

1.2.7

Patch Changes

• fb3c7d3: Export TransformOption type to be publicly available (#319)
• 26cf7f9: -Made the font weight case insensitive; Extra checks for style and weight values, confusions cleared up in the code; Font style and value are not both mandatory, it is fine if only one is specified; If font style is not provided, the style field will take the weight value; The bug from issue #267 is fixed.

1.2.6

Patch Changes

• b4461f4: Ensure that shadow value is still of type object (either Object or Array) before attempting to resolve math for each property/item.

... (truncated)

Commits

• f233ad3 Version Packages (#355)
• a8f4c73 fix: use default ColorJS precision and support math in modifiers
• 3b1b5c3 Version Packages (#347)
• 9801a8f fix: allow peer dep 5.0.0-rc release candidate (#346)
• 56cb9d5 chore: fix repo url normalize git (#345)
• 35d02be Version Packages (#344)
• 59d9d7f fix: upgrade to latest SD and allow v5 (#343)
• 6723a1b Version Packages (#338)
• ab40f11 fix: avoid checkAndEvaluateMatch returning NaN (#337)
• 54aedc6 chore: fix README compat table (#335)
• Additional commits viewable in compare view

Updates style-dictionary from 4.1.0 to 5.0.4

Release notes

Sourced from style-dictionary's releases.

v5.0.4

Patch Changes

• 7a238af: Fix an issue with token collisions being way to eager about complaining when values that are identical are "colliding". This cuts collision warnings by 75% or more.

v5.0.3

Patch Changes

• 3d070f5: Move patch-package to devDependencies and run in prepare instead of postinstall, so it only runs when npm installing locally and not for consumers.
• 71614da: Wrap structuredClone in loadFile in a try catch, in case we have a JS/TS config file with dynamic content.

v5.0.2

Patch Changes

• 8e413a2: Fix vulnerable dependencies, patch-package and its transitive tmp dependency in particular.
• 9f84a81: Remove node-sass from create-react-app example, dart-sass is used now usually.
• da19c8f: Small patch to allow no-destination "files" to not cause errors when using clean methods.

v5.0.1

Patch Changes

• 463b456: Simplify internal cleanFile(s) utils, fix a bug that would still attempt to unlink non-existent files in verbosity "silent" mode.
• 8f7c522: Fix loadFile to deep clone ES module exports to avoid unintended mutations

v5.0.0

Major Changes

• 02300b1: No longer allow references to non-token leaf nodes. References only work when referencing a Design Token (its value). Non-token nodes will also not make it to the output, because they are filtered out during the flattening process to tokenMap and tokenArray. Remove allowing references with .value suffix.
• f19a0cb: BREAKING: no longer possible to pass options to change the reference syntax {ref.foo}. The opening, closing and separator characters are now set to be aligned with the DTCG spec.
• 02300b1: BREAKING: minimum NodeJS version required is now v22.0.0 (LTS, at time of writing this). This is to support Set.prototype.union which we utilize in our token reference resolution utility, and it's important to use the cheaper built-in versus doing a union manually.

Minor Changes

• 02300b1: Support passing Token Map structure to getReferences and resolveReferences utils.
• b80e75b: When transform hooks throw errors, they will now be caught and error-handled by Style Dictionary. Instead of causing a fatal failure, the error is collected and logged as a warning at the end. With verbosity turned to "verbose", information about which tokens in which files are causing an error in which transform, to help debugging the problem. Sensible fallbacks are used when a transform cannot complete.

Patch Changes

• a23f353: SD will use posix style paths ('/') as much as possible and rely on node:fs to translate to win32 paths whenever a call to the filesystem is done. The exception is for dynamic imports of JS files (SD config, token files).
• a23f353: Allow buildPaths without a trailing slash, by making use of path.join() utility.
• 9bbbc8a: Dynamically import prettier and plugins so that they can be chunked separately by bundlers, and only imported on demand. This will significantly improve bundle size for users of Style Dictionary.

v5.0.0-rc.2

Patch Changes

... (truncated)

Changelog

Sourced from style-dictionary's changelog.

5.0.4

Patch Changes

• 7a238af: Fix an issue with token collisions being way to eager about complaining when values that are identical are "colliding". This cuts collision warnings by 75% or more.

5.0.3

Patch Changes

• 3d070f5: Move patch-package to devDependencies and run in prepare instead of postinstall, so it only runs when npm installing locally and not for consumers.
• 71614da: Wrap structuredClone in loadFile in a try catch, in case we have a JS/TS config file with dynamic content.

5.0.2

Patch Changes

• 8e413a2: Fix vulnerable dependencies, patch-package and its transitive tmp dependency in particular.
• 9f84a81: Remove node-sass from create-react-app example, dart-sass is used now usually.
• da19c8f: Small patch to allow no-destination "files" to not cause errors when using clean methods.

5.0.1

Patch Changes

• 463b456: Simplify internal cleanFile(s) utils, fix a bug that would still attempt to unlink non-existent files in verbosity "silent" mode.
• 8f7c522: Fix loadFile to deep clone ES module exports to avoid unintended mutations

5.0.0

Major Changes

• 02300b1: No longer allow references to non-token leaf nodes. References only work when referencing a Design Token (its value). Non-token nodes will also not make it to the output, because they are filtered out during the flattening process to tokenMap and tokenArray. Remove allowing references with .value suffix.
• f19a0cb: BREAKING: no longer possible to pass options to change the reference syntax {ref.foo}. The opening, closing and separator characters are now set to be aligned with the DTCG spec.
• 02300b1: BREAKING: minimum NodeJS version required is now v22.0.0 (LTS, at time of writing this). This is to support Set.prototype.union which we utilize in our token reference resolution utility, and it's important to use the cheaper built-in versus doing a union manually.

Minor Changes

• 02300b1: Support passing Token Map structure to getReferences and resolveReferences utils.
• b80e75b: When transform hooks throw errors, they will now be caught and error-handled by Style Dictionary. Instead of causing a fatal failure, the error is collected and logged as a warning at the end. With verbosity turned to "verbose", information about which tokens in which files are causing an error in which transform, to help debugging the problem. Sensible fallbacks are used when a transform cannot complete.

Patch Changes

• a23f353: SD will use posix style paths ('/') as much as possible and rely on node:fs to translate to win32 paths whenever a call to the filesystem is done. The exception is for dynamic imports of JS files (SD config, token files).
• a23f353: Allow buildPaths without a trailing slash, by making use of path.join() utility.

... (truncated)

Commits

• 62e3298 chore: release (#1564)
• 7a238af fix: don't collision warn for identical values (#1562)
• 0dba4cc chore: release (#1559)
• 29a5cc2 chore: move @​types/node to dev dependencies (#1560)
• 3d070f5 fix: move patch-package to dev deps and prepare script (#1557)
• 8e50b1d chore: fix docs output refs example (#1558)
• 71614da fix: wrap loadFile structuredClone in try catch (#1556)
• d7cec65 docs: fix v4 migration links (#1554)
• 3eea387 chore: release (#1537)
• da19c8f fix: error when cleaning buildPath dir & no-destination file (#1538)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[mhewson]

This PR was intentionally excluded from the Dependabot rollup (#263) because style-dictionary v4→v5 is a breaking major version upgrade.

The build fails with 71 token reference errors when upgrading to v5, because the token reference format changed between versions. Migrating will require dedicated work on style-dictionary/build.ts and the platform configs.

This should be addressed in a separate migration spike.