build(deps-dev): bump style-dictionary from 3.9.2 to 5.5.0

[dependabot]

Bumps style-dictionary from 3.9.2 to 5.5.0.

Release notes

Sourced from style-dictionary's releases.

v5.5.0

Minor Changes

• b63dc05: Add emitEmptyFiles option to write output files even when no tokens match the file's filter, instead of skipping them.

Patch Changes

• e319976: Fix regression to gracefully handle unparseable dimension tokens which is required to support custom dimension tokens from third party vendors like Tokens Studio.

v5.4.4

Patch Changes

• 23b5e8d: Fix prototype pollution vulnerability in the convertTokenData utility function, this was introduced in version 4.3.0. Any token key that includes __proto__ will be ignored. See Security Advisory GHSA-vj5c-m527-mpff.

v5.4.3

Patch Changes

• 371dbcb: Get proper deepmerge types in, fix small potential bug for StyleDictionary.extend(), flagged by type safety improvement.

v5.4.2

Patch Changes

• 60d16e1: Fix sizeRem and sizePxToRem transform to keep the 0-valued tokens type number/string intact in the result (regression 5.4.0)

v5.4.1

Patch Changes

• 46ec860: Fix size/rem transform stripping the unit from zero-magnitude dimension values (e.g. "0em"), which caused downstream CSS variables to serialize as undefined. Unit preservation now runs before the unitless-zero short-circuit.

v5.4.0

Minor Changes

• edceda7: Add support for DTCG v2025.10 dimension token type object value, while remaining backwards compatible for dimension tokens using string values.

  All built-in transforms can now handle dimension tokens.

  This includes CSS shorthand transforms for composed token types such as typography, border and shadows, which can contain properties that are dimensions.

  {
    "spacing": {
      "$type": "dimension",
      "$value": { "value": 1, "unit": "px" }
    },
    "shadow": {
      "$type": "shadow",
      "$value": {
        "color": { "colorSpace": "srgb", "components": [0, 0, 0], "alpha": 0.4 },

... (truncated)

Changelog

Sourced from style-dictionary's changelog.

5.5.0

Minor Changes

• b63dc05: Add emitEmptyFiles option to write output files even when no tokens match the file's filter, instead of skipping them.

Patch Changes

• e319976: Fix regression to gracefully handle unparseable dimension tokens which is required to support custom dimension tokens from third party vendors like Tokens Studio.

5.4.4

Patch Changes

• 23b5e8d: Fix prototype pollution vulnerability in the convertTokenData utility function, this was introduced in version 4.3.0. Any token key that includes __proto__ will be ignored. See Security Advisory GHSA-vj5c-m527-mpff.

5.4.3

Patch Changes

• 371dbcb: Get proper deepmerge types in, fix small potential bug for StyleDictionary.extend(), flagged by type safety improvement.

5.4.2

Patch Changes

• 60d16e1: Fix sizeRem and sizePxToRem transform to keep the 0-valued tokens type number/string intact in the result (regression 5.4.0)

5.4.1

Patch Changes

• 46ec860: Fix size/rem transform stripping the unit from zero-magnitude dimension values (e.g. "0em"), which caused downstream CSS variables to serialize as undefined. Unit preservation now runs before the unitless-zero short-circuit.

5.4.0

Minor Changes

• edceda7: Add support for DTCG v2025.10 dimension token type object value, while remaining backwards compatible for dimension tokens using string values.

  All built-in transforms can now handle dimension tokens.

  This includes CSS shorthand transforms for composed token types such as typography, border and shadows, which can contain properties that are dimensions.

  {
    "spacing": {
      "$type": "dimension",

... (truncated)

Commits

• 9a9cca0 chore: release (#1712)
• fafbc7d chore: fix vulnerable dev deps (#1711)
• b63dc05 feat: add emitEmptyFiles option to write files even when no tokens match (#1700)
• e319976 fix: gracefully handle unparseable dimension token values (#1710)
• 1c90088 chore: release (#1703)
• 23b5e8d fix: prototype pollution in convertTokenData utility GHSA-vj5c-m527-mpff (#1702)
• 5345c8c chore: release (#1698)
• 371dbcb fix: deepmerge types + tiny extend() bugfix (#1697)
• 508087d chore: fix vulnerable dev deps (#1696)
• 437fdc3 chore: release (#1695)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for style-dictionary since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
style-dictionary	[>= 4.a, < 5]

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
example	Error		Jul 8, 2026 12:53pm

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud