chore(deps-dev): bump dependency-cruiser from 17.4.3 to 18.4.0

[dependabot]

Bumps dependency-cruiser from 17.4.3 to 18.4.0.

Release notes

Sourced from dependency-cruiser's releases.

v18.4.0

✨ features

To improve visibility of the state of the baseline (.dependency-cruiser-known-violations.json)...

• ...the err, err-html and markdown reporters now show the number of stale entries in the baseline. (c617e580/ e9ad4ce6/ be91a27c/ 993ac9df)
• ... the err, null, azure-devops and teamcity reporters can exit with a non-zero exit code when the baseline contains stale entries (set baseline.staleEntriesSeverity to error to enable).
  (#1100 / 0dbd7610)
• ... the new baseline-mode 'format' sorts the baseline so future diffs are easier to read after manual edits. (077d4431/ 3e465ea1)

Thanks to @​yunusdim and @​BPScott for the raising the issues and providing the suggestions and feedback that birthed these 🙇.

📖 documentation

• e41450b9 doc(cli): adds note to --baseline that severities are ignored on comparison

👷 maintenance

• 9f402bbb/ ab42c712 chore(npm): updates all external devDependencies
• c9d8fb5d chore(npm): adds upem policy to prevent accidents when @​types/node publishes a super-old version as 'latest'

v18.3.1

🐛 fixes

• aed44794 fix(extract/swc): finds the swc Visitor when bun hands over the default export (#1093) - thanks @​kurovskyiii for raising the issue and providing the fix in the pull request.

👷 maintenance

• 0b873f48 chore(npm): updates all external devDependencies

v18.3.0

✨ features

• Updates to the 'baseline' feature
  • feat: makes it possible to update the baseline "shrink-only", so violations that are fixed get removed, but no new ones are added (#1088/ #1091/ #1085)
  • feat(cli): exposes the baseline feature as a regular --baseline option (with same functionality as depcruise-baseline command) (#1084)
  • feat(baseline): when the baseline is updated show how many are new, same or removed (#1079)
  • Thanks to @​yunusdim for the idea(s) to introduce these features.
• Improvements to processing with the 'swc' compiler
  • ee229c36 feat(extract/swc): adds support for parsing tsx/jsx (#1086) thanks @​JPBuildsRoot for the issue & initial code that led to this feature
  • 2aa2e34e feat(extract/swc): adds support recognizing type-only imports (#1087) thanks @​JPBuildsRoot for raising the issue that led to this feature

👷 maintenance

• ed21436e/ ceb7d676 build(npm): updates external dependencies
• 1f28f44a perf(utl): initializes severity translation table only once

... (truncated)

Commits

• 7c22858 18.4.0
• 9f402bb chore(npm): updates all external devDependencies
• 993ac9d feat(report/markdown): adds baseline stale count (#1101)
• c9d8fb5 chore(npm): adds upem policy to prevent accidents when @​types/node publishes ...
• 0dbd761 feat: adds option to make stale entries in the baseline a non-zero-exit-code ...
• be91a27 feat(report/err-html): adds baseline stale count and table (#1099)
• e9ad4ce feat(report/err): adds stale baseline count (#1098)
• c617e58 feat(analyze): adds baseline stats to the summary (#1097)
• 3e465ea feat(baseline): renames baseline-mode 'view' to 'format' & sorts the baseline...
• 077d443 feat(baseline): adds dry-run ('view') mode (#1096)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)