chore(deps-dev): Bump the npm group with 2 updates

[dependabot]

Bumps the npm group with 2 updates: @vercel/ncc and prettier.

Updates @vercel/ncc from 0.38.4 to 0.44.0

Release notes

Sourced from @​vercel/ncc's releases.

0.44.0

0.44.0 (2026-06-09)

Features

• read permissions pr.yml (#1323) (5ea625e)

0.43.0

0.43.0 (2026-06-09)

Changes

• BREAKING CHANGE: add Node 24 and 26 support, remove 20 (#1318) (#1305)
• switch npm releases to trusted publishing (OIDC) (#1325) (#1327) (#1328) (#1329) (#1330) (#1331) (#1332)
• switch package management to pnpm (#1321)
• fix predictable global cache directory in /tmp enables symlink/hijack risks (#1314)
• reorder extension resolution to prioritise TypeScript over JSON (#1315)
• support TypeScript 6 transpile builds (#1316)

Commits

• 88be21f chore(deps): Bump actions/checkout from 5 to 6 (#1300)
• 5ea625e feat: read permissions pr.yml (#1323)
• a1ff315 feat: remove npm devDependency (#1332)
• 9e077ab feat: add publishConfig to package.json (#1331)
• 7290aa7 feat(ci): upgrade python and remove LLVM LTO flags from MSVC build to fix Nod...
• a428a10 feat: publish using node@24 (#1329)
• 3192116 feat: use canonical package repository metadata (#1328)
• 4461a52 feat: lock semantic-release publish dependencies (#1327)
• e00b2de feat: switch npm releases to trusted publishing (OIDC) (#1325)
• 5f8f509 feat: delete .github/CODEOWNERS (#1324)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vercel/ncc since your current version.

Updates prettier from 3.8.3 to 3.8.4

Release notes

Sourced from prettier's releases.

3.8.4

• Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @​byplayer)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.4

diff

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (#17746 by @​byplayer)

Prettier was removing blank lines between list items and their nested sub-lists, converting loose lists into tight lists and changing their semantic meaning.

<!-- Input -->
- a


b


c

d



<!-- Prettier 3.8.3 -->

a

b


c

d



<!-- Prettier 3.8.4 -->


a

b



c

d

Commits

• 1c6ba55 Release 3.8.4
• 4a673dc Fix blank lines between list items and nested sub-lists being removed in Mark...
• 074aaed Replace main branch in changelog link with tags (#19054)
• c22a003 Bump Prettier dependency to 3.8.3
• 07bad1f Clean changelog_unreleased
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

LGTM — routine dev-only dependency bumps (ncc and prettier patches), no runtime impact.

Extended reasoning...

Overview

This PR bumps two dev dependencies via Dependabot: @vercel/ncc from 0.38.4 to 0.44.0 and prettier from 3.8.3 to 3.8.4. Only package.json and pnpm-lock.yaml are touched.

Security risks

None identified. These are dev-only build/formatting tools. One ncc release note even mentions a security fix (predictable global cache directory in /tmp). Maintainer attribution shifts to GitHub Actions / OIDC trusted publishing, which is a positive signal.

Level of scrutiny

Low scrutiny appropriate. The ncc bump crosses several minors and includes a breaking change (drops Node 20, adds Node 24/26 support), but package.json already declares engines.node: >=24, so the breaking change is compatible. The extension-resolution reorder (TS over JSON) and TypeScript 6 transpile support also align with this repo, which uses TypeScript 6.0.3. Prettier is a patch release for a markdown list-rendering fix.

Other factors

The bug hunting system found no issues. check-dist and the test/typecheck/lint suite will catch any practical regressions caused by the ncc upgrade since the action ships a bundled dist directory. No outstanding reviewer comments. Standard dependabot upgrade.

[github-actions]

Experiment Results: cec8e40

Experiment	Status	Actions
Uppercase (py)	✅ Pass	View GitHub Action Run · View in Langfuse
Uppercase (ts)	✅ Pass	View GitHub Action Run · View in Langfuse
Mixed dir (node)	✅ Pass	View GitHub Action Run · View in Langfuse
Mixed dir (python)	✅ Pass	View GitHub Action Run · View in Langfuse
Regression fixture	❌ Regression	View GitHub Action Run · View in Langfuse

Details

✅ Uppercase (py) (Source)

Score	Value
avg_accuracy	1.000

Item results (3)

Item	Input	Expected	Output	exact_match
1	langfuse	LANGFUSE	LANGFUSE	1.000
2	world	WORLD	WORLD	1.000
3	hello	HELLO	HELLO	1.000

✅ Uppercase (ts) (Source)

Score	Value
avg_accuracy	1.000

Item results (3)

Item	Input	Expected	Output	exact_match
1	langfuse	LANGFUSE	LANGFUSE	1.000
2	world	WORLD	WORLD	1.000
3	hello	HELLO	HELLO	1.000

✅ Mixed dir (node) (Source)

Score	Value
avg_accuracy	1.000

Item results (3)

Item	Input	Expected	Output	exact_match
1	langfuse	LANGFUSE	LANGFUSE	1.000
2	world	WORLD	WORLD	1.000
3	hello	HELLO	HELLO	1.000

✅ Mixed dir (python) (Source)

Score	Value
avg_accuracy	1.000

Item results (3)

Item	Input	Expected	Output	exact_match
1	langfuse	LANGFUSE	LANGFUSE	1.000
2	world	WORLD	WORLD	1.000
3	hello	HELLO	HELLO	1.000

❌ Regression fixture (Source)

RegressionError: synthetic regression triggered by e2e fixture

Item results (3)

Item	Input	Expected	Output	exact_match
1	langfuse	LANGFUSE	LANGFUSE	1.000
2	world	WORLD	WORLD	1.000
3	hello	HELLO	HELLO	1.000