deps: bump @cldmv/configs from 1.2.4 to 1.3.0 in the minor group

[dependabot]

Bumps the minor group with 1 update: @cldmv/configs.

Updates @cldmv/configs from 1.2.4 to 1.3.0

Release notes

Sourced from @​cldmv/configs's releases.

v1.3.0

@cldmv/configs v1.3.0 Changelog

Release Date: October 2026 Release Type: Minor Branch: release/1.3.0

---

Overview

The package grows from one shared config to five. It adds prettier.json (CLDMV's house Prettier settings), prettierignore (the generic Prettier ignore list), eslint.config.mjs (the fleet's flat ESLint config) and vitest.config.mjs (a base Vitest settings object), published as @cldmv/configs/prettier.json, @cldmv/configs/prettierignore, @cldmv/configs/eslint.config.mjs and @cldmv/configs/vitest.config.mjs. A repository extends them from its own .configs/ files instead of keeping a copy of the same settings that every CLDMV repository already carried. The Prettier values and the ESLint rules are the ones the fleet already uses, so a repository that adopts them sees no change.

The package also gains dependencies. ESLint configs are code, so eslint.config.mjs imports the ESLint plugins it configures; those six packages are now regular dependencies. eslint, vitest and the jsonv Prettier plugin are optional peer dependencies, needed only by repositories that use the matching config. Until now the package had no dependencies at all.

The package also gains a command-line tool, cldmv-configs, so a repository adopts the shared configs with one command and can detect drift: init creates the stubs and scripts, check reports drift, and sync refreshes the Prettier ignore list. The ignore list moves to a managed-block shape so that a refresh never touches a repository's own lines.

fix-headers.json is unchanged from v1.2.5.

---

✨ Features

Shared Prettier config

prettier.json sits at the package root, is exposed through exports as ./prettier.json, and is listed in files:

Setting	Value	Why
useTabs, tabWidth	true, 2	Tab indentation, counted as two columns when measuring width
printWidth	140	Wide lines keep short call chains and object literals on one line
trailingComma	"none"	No trailing commas
quoteProps	"preserve"	Object-key quoting stays as written
bracketSpacing	true	{ a: 1 }
overrides for *.xml	printWidth: 300	XML markup does not wrap readably at 140
overrides for *.md	proseWrap: "preserve"	Markdown paragraphs are never re-flowed; one paragraph per line
overrides for *.jsonv	parser: "jsonv"	Parse .jsonv files with the jsonv plugin
plugins	["@cldmv/prettier-plugin-jsonv"]	Provides the jsonv parser

A consuming repository creates .configs/prettier.config.mjs:

import base from "@cldmv/configs/prettier.json" with { type: "json" };
export default base;

and runs Prettier with --config .configs/prettier.config.mjs. Prettier fails to start when a config names a plugin that is not installed, so repositories without .jsonv files either install the plugin or spread the base and drop plugins and the *.jsonv override; the README shows both.

Generic Prettier ignore

... (truncated)

Commits

• c1b8e91 release: v1.3.0 - add the shared prettier.json config
• 91ec1ea release: v1.2.5 - bump the patch group across 1 directory with 4 updates
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cldmv-bot]

Auto-approved by CLDMV-bot: minor bump from 1.2.4 to 1.3.0.