chore(deps-dev): bump style-dictionary from 4.3.3 to 5.0.4

[dependabot]

Bumps style-dictionary from 4.3.3 to 5.0.4.

Release notes

Sourced from style-dictionary's releases.

v5.0.4

Patch Changes

• 7a238af: Fix an issue with token collisions being way to eager about complaining when values that are identical are "colliding". This cuts collision warnings by 75% or more.

v5.0.3

Patch Changes

• 3d070f5: Move patch-package to devDependencies and run in prepare instead of postinstall, so it only runs when npm installing locally and not for consumers.
• 71614da: Wrap structuredClone in loadFile in a try catch, in case we have a JS/TS config file with dynamic content.

v5.0.2

Patch Changes

• 8e413a2: Fix vulnerable dependencies, patch-package and its transitive tmp dependency in particular.
• 9f84a81: Remove node-sass from create-react-app example, dart-sass is used now usually.
• da19c8f: Small patch to allow no-destination "files" to not cause errors when using clean methods.

v5.0.1

Patch Changes

• 463b456: Simplify internal cleanFile(s) utils, fix a bug that would still attempt to unlink non-existent files in verbosity "silent" mode.
• 8f7c522: Fix loadFile to deep clone ES module exports to avoid unintended mutations

v5.0.0

Major Changes

• 02300b1: No longer allow references to non-token leaf nodes. References only work when referencing a Design Token (its value). Non-token nodes will also not make it to the output, because they are filtered out during the flattening process to tokenMap and tokenArray. Remove allowing references with .value suffix.
• f19a0cb: BREAKING: no longer possible to pass options to change the reference syntax {ref.foo}. The opening, closing and separator characters are now set to be aligned with the DTCG spec.
• 02300b1: BREAKING: minimum NodeJS version required is now v22.0.0 (LTS, at time of writing this). This is to support Set.prototype.union which we utilize in our token reference resolution utility, and it's important to use the cheaper built-in versus doing a union manually.

Minor Changes

• 02300b1: Support passing Token Map structure to getReferences and resolveReferences utils.
• b80e75b: When transform hooks throw errors, they will now be caught and error-handled by Style Dictionary. Instead of causing a fatal failure, the error is collected and logged as a warning at the end. With verbosity turned to "verbose", information about which tokens in which files are causing an error in which transform, to help debugging the problem. Sensible fallbacks are used when a transform cannot complete.

Patch Changes

• a23f353: SD will use posix style paths ('/') as much as possible and rely on node:fs to translate to win32 paths whenever a call to the filesystem is done. The exception is for dynamic imports of JS files (SD config, token files).
• a23f353: Allow buildPaths without a trailing slash, by making use of path.join() utility.
• 9bbbc8a: Dynamically import prettier and plugins so that they can be chunked separately by bundlers, and only imported on demand. This will significantly improve bundle size for users of Style Dictionary.

v5.0.0-rc.2

Patch Changes

... (truncated)

Changelog

Sourced from style-dictionary's changelog.

5.0.4

Patch Changes

• 7a238af: Fix an issue with token collisions being way to eager about complaining when values that are identical are "colliding". This cuts collision warnings by 75% or more.

5.0.3

Patch Changes

• 3d070f5: Move patch-package to devDependencies and run in prepare instead of postinstall, so it only runs when npm installing locally and not for consumers.
• 71614da: Wrap structuredClone in loadFile in a try catch, in case we have a JS/TS config file with dynamic content.

5.0.2

Patch Changes

• 8e413a2: Fix vulnerable dependencies, patch-package and its transitive tmp dependency in particular.
• 9f84a81: Remove node-sass from create-react-app example, dart-sass is used now usually.
• da19c8f: Small patch to allow no-destination "files" to not cause errors when using clean methods.

5.0.1

Patch Changes

• 463b456: Simplify internal cleanFile(s) utils, fix a bug that would still attempt to unlink non-existent files in verbosity "silent" mode.
• 8f7c522: Fix loadFile to deep clone ES module exports to avoid unintended mutations

5.0.0

Major Changes

• 02300b1: No longer allow references to non-token leaf nodes. References only work when referencing a Design Token (its value). Non-token nodes will also not make it to the output, because they are filtered out during the flattening process to tokenMap and tokenArray. Remove allowing references with .value suffix.
• f19a0cb: BREAKING: no longer possible to pass options to change the reference syntax {ref.foo}. The opening, closing and separator characters are now set to be aligned with the DTCG spec.
• 02300b1: BREAKING: minimum NodeJS version required is now v22.0.0 (LTS, at time of writing this). This is to support Set.prototype.union which we utilize in our token reference resolution utility, and it's important to use the cheaper built-in versus doing a union manually.

Minor Changes

• 02300b1: Support passing Token Map structure to getReferences and resolveReferences utils.
• b80e75b: When transform hooks throw errors, they will now be caught and error-handled by Style Dictionary. Instead of causing a fatal failure, the error is collected and logged as a warning at the end. With verbosity turned to "verbose", information about which tokens in which files are causing an error in which transform, to help debugging the problem. Sensible fallbacks are used when a transform cannot complete.

Patch Changes

• a23f353: SD will use posix style paths ('/') as much as possible and rely on node:fs to translate to win32 paths whenever a call to the filesystem is done. The exception is for dynamic imports of JS files (SD config, token files).
• a23f353: Allow buildPaths without a trailing slash, by making use of path.join() utility.

... (truncated)

Commits

• 62e3298 chore: release (#1564)
• 7a238af fix: don't collision warn for identical values (#1562)
• 0dba4cc chore: release (#1559)
• 29a5cc2 chore: move @​types/node to dev dependencies (#1560)
• 3d070f5 fix: move patch-package to dev deps and prepare script (#1557)
• 8e50b1d chore: fix docs output refs example (#1558)
• 71614da fix: wrap loadFile structuredClone in try catch (#1556)
• d7cec65 docs: fix v4 migration links (#1554)
• 3eea387 chore: release (#1537)
• da19c8f fix: error when cleaning buildPath dir & no-destination file (#1538)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
nimbus-documentation	Error			Sep 8, 2025 11:07pm
nimbus-storybook	Error			Sep 8, 2025 11:07pm

[changeset-bot]

⚠️ No Changeset found

Latest commit: 5280271

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.