dependabot-npm(deps): bump stylescape from 0.3.18 to 0.4.0

[dependabot]

Bumps stylescape from 0.3.18 to 0.4.0.

Changelog

Sourced from stylescape's changelog.

[0.4.0] - 2026-08-11

Merges the new branch — the layered-architecture rewrite — into dev, on top of the 0.3.12–0.3.18 maintenance line. This release is breaking for every theme and site that consumes the core.

Breaking

• SCSS entry layout replaced. src/scss/ is now numbered by cascade layer (01-core → 11-reset → 12-lexicon → 13-rhythm → 21-typography → 22-flow → 23-layout → 24-appearance → 31-modules → 32-utilities → 33-overrides, plus 91-development). The old classes/, variables/, mixins/, functions/, maps/, root/, tags/ and dev/ trees, and icons.scss, are gone.
• Class names follow the SSX prefix taxonomy. Chrome and components emit ss-c-, with ss-u-, ss-a-, ss-l-, ss-t- and ss-f- for utilities, appearance, layout, typography and flow. Consumers still on unprefixed legacy selectors must migrate; the 32-utilities/ compat shims cover the common cases.
• package.json exports rewritten. The eight stale ./scss/<dir> subpaths (classes, dev, functions, maps, mixins, root, tags, variables) and ./scss/icons all pointed at directories that no longer exist. They are replaced by a single ./scss/* pattern that resolves any cascade layer, e.g. stylescape/scss/31-modules.
• Colour tokens are emitted as --ss-color-* at :root from 12-lexicon/_color-tokens.scss; module configs read them via var() rather than hard-coded values.

Added

• 31-modules/button/_button.output.scss: short-form size aliases (--xs/--sm/--md/--lg/--xl) and the spelled-out --small/--large variants are now first-class selectors, comma-grouped with the canonical --size-* form. Downstream templates that adopted the shorter names (notably semiosys, with 46 .ss-c-button--small hits) no longer need rewriting at upgrade time.
• 31-modules/badge/_badge.config.scss + _badge.output.scss: added info and danger color variants. --danger is an alias for --error to keep semantic naming consistent with the alert and button modules. --info uses the existing --ss-color-info / --ss-color-on-info tokens.

Changed

• 01-core/_prefix.scss: governance comment now cites the canonical spec path (ssx/doc/naming.md) instead of the legacy ssx/prefix.md that never existed. The six-prefix taxonomy (ss-c-, ss-u-, ss-a-, ss-l-, ss-t-, ss-f-) is now the explicit contract.
• 01-core/_layers.scss: each step of the 10-step conceptual progression is annotated with its @layer ss.<layer> and ss-<x>-* prefix, so the

... (truncated)

Commits

• 9a6ceb6 fix(deps): make bare npm install resolve without --legacy-peer-deps
• f333b07 Merge branch 'new' into dev — layered architecture, release 0.4.0
• 5abaef3 dependabot-npm(deps-dev): bump @​eslint/js from 9.39.4 to 10.0.1 (#371)
• 3e804eb dependabot-devcontainer(deps): bump ghcr.io/devcontainers/features/node (#391)
• ab8f473 dependabot-npm(deps-dev): bump vite from 7.3.1 to 8.0.3 (#385)
• 3f00411 dependabot-npm(deps-dev): bump typescript from 5.9.3 to 6.0.2 (#384)
• a2f3081 dependabot-npm(deps-dev): bump eslint from 9.34.0 to 10.1.0 (#383)
• a70f289 dependabot-npm(deps-dev): bump jsdom from 27.4.0 to 29.0.1 (#382)
• 1fc24ee dependabot-github-actions(deps): bump actions/download-artifact (#369)
• 74acc13 chore: sync workspace changes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.