chore(deps-dev)(deps-dev): Bump dependency-cruiser from 17.4.3 to 18.2.0

[dependabot]

Bumps dependency-cruiser from 17.4.3 to 18.2.0.

Release notes

Sourced from dependency-cruiser's releases.

v18.2.0

✨ features

• e9f237fa feat(utl/cache): also takes nested .gitignores into account (#1072) - thanks @​jbmusso for raising the issue that led to this feature
• 530a486d feat: enables configurations in typescript (#1077) - thanks @​christopher-buss, @​racbart and @​TranquilMarmot (back in 2021, when this was not really possible) for asking for this feature - and thanks @​christopher-buss for verifying the beta release of this feature.

👷 maintenance

• 718af4c0/ 99d964ff chore(npm): updates external devDependencies

v18.2.0-beta-2

✨ features

• b5e0657b feat: enables configurations in typescript
• 85f7d25e feat: auto-search for typescript extensions as well

trying again - apparently 18.2.0-beta-1 never got published due to GitHub actions having a bad hair day yesterday.

v18.2.0-beta-1

✨ features

• b5e0657b feat: enables configurations in typescript

⚠️ Because GitHub (actions) had a bad hair day on this date, this version wasn't actually released to npmjs.

v18.1.1

👷 maintenance

• 1ee565bb/ 942cf969 build(npm): updates external dependencies
• f0061d15 fix: removes all unused catch parameters
• cbe062ae/ c0250f8d chore(tools): uses node permission model
• 01c47439 fix(build): re-adds esbuild to the devDependencies
• e57d9fc2 chore: replaces eslint with oxlint (#1074)

v18.1.0

✨ new functionality

• 65c432cc feat: adds environment inconsistency checks (#1070) dependency-cruiser now also warns at runtime if it detects typescript is needed, but (a usable version of the) typescript compiler isn't present (+ the same for babel and swc). It already did so on --init. Thanks @​kbarendrecht for the suggestion!
• 6bb22b6f feat(report/error-html): makes the table heads sticky

TypeScript 7 support: typescript@7.1.0 is expected to ship with a public API - so that's the first version in the TypeScript 7 (formerly tsgo) version range dependency-cruiser will be able to support.

👷 maintenance

• f04f2fad build(npm): updates external dependencies

... (truncated)

Commits

• ec60345 18.2.0
• 718af4c chore(npm): updates external devDependencies
• e9f237f feat(utl/cache): also takes nested .gitignores into account (#1072)
• 99d964f fix: refreshes package lock
• 530a486 feat: enables configurations in typescript (#1077)
• da355e4 18.1.1
• c0250f8 chore(tools): makes the tools work again on node 22
• 942cf96 build(npm): updates external dependencies
• cbe062a chore(tools): uses node permission model
• 01c4743 fix(build): re-adds esbuild to the devDependencies
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@prisma/composer@278

npm i https://pkg.pr.new/@prisma/composer-cli@278

npm i https://pkg.pr.new/@prisma/composer-prisma-cloud@278

commit: a3f1f42

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: bbca5c53-12f5-4cfd-a699-f481e3688d0a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[prisma-gizmo]

✅ Gizmo reviewed a3f1f42 — posted 0 inline comment(s) this pass.

Open findings: none

Change walkthrough

Bumps the root devDependency dependency-cruiser from ^17.4.3 to ^18.2.0 and regenerates pnpm-lock.yaml. This keeps the ADR-0028 domain/layer/plane lint gate on a current major.

The single breaking change in dependency-cruiser 18.0.0 is dropping Node.js 20 and 25 support (new engines range ^22||^24||>=26), which the repo satisfies everywhere the tool runs: .tool-versions pins node 24.16.0, and the CI job that verifies the floor runs exactly v22.18.0 (ci.yml:200). No config options were removed or renamed in the 18.x line, so dependency-cruiser.config.mjs works unchanged. Executing the bumped version (18.2.0 under node 22.18.0) against the repo's unchanged config cruised 431 modules / 1126 dependencies with no dependency violations — the same pnpm lint:deps step that ci.yml:28 runs on every PR and that lint-staged.config.mjs:15 triggers on config edits. Beyond the dependency-cruiser resolution itself, the regenerated lockfile picks up in-range transitive refreshes (acorn 8.18.0, commander 15, enhanced-resolve 5.24.5, watskeburt 6.0.0, plus postcss/nanoid, iconv-lite, saslprep, sql-escaper); dependency-cruiser is a root-only devDependency behind the lint scripts, so it never ships.

[prisma-gizmo]

New findings: none · trace

[prisma-gizmo]

All Gizmo review threads are resolved and the head commit has been reviewed. Approving.

[prisma-gizmo]

New findings: none · trace

[prisma-gizmo]

All Gizmo review threads are resolved and the head commit has been reviewed. Approving.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.