Update dependency style-dictionary to v5

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
style-dictionary (source)	4.4.0 → 5.5.3

---

Release Notes

style-dictionary/style-dictionary (style-dictionary)

v5.5.3

Compare Source

Patch Changes

• 863685d: Limit nested composite token expansion to the configured type filters.
• 2aced93: Preserve alpha precision in the color/css transform.

v5.5.2

Compare Source

Patch Changes

• b65ea0b: Disallow output literal "undefined" for tokens with descriptions when commentStyle is set to none.

v5.5.1

Compare Source

Patch Changes

• ef1dbc8: Add better prototype pollution mitigation for convertTokenData utility.
  See GitHub Advisory GHSA-xmr7-549p-98w3

v5.5.0

Compare Source

Minor Changes

• b63dc05: Add emitEmptyFiles option to write output files even when no tokens match the file's filter, instead of skipping them.

Patch Changes

• e319976: Fix regression to gracefully handle unparseable dimension tokens which is required to support custom dimension tokens from third party vendors like Tokens Studio.

v5.4.4

Compare Source

Patch Changes

• 23b5e8d: Fix prototype pollution vulnerability in the convertTokenData utility function, this was introduced in version 4.3.0.
  Any token key that includes __proto__ will be ignored.
  See Security Advisory GHSA-vj5c-m527-mpff.

v5.4.3

Compare Source

Patch Changes

• 371dbcb: Get proper deepmerge types in, fix small potential bug for StyleDictionary.extend(), flagged by type safety improvement.

v5.4.2

Compare Source

Patch Changes

• 60d16e1: Fix sizeRem and sizePxToRem transform to keep the 0-valued tokens type number/string intact in the result (regression 5.4.0)

v5.4.1

Compare Source

Patch Changes

• 46ec860: Fix size/rem transform stripping the unit from zero-magnitude dimension values (e.g. "0em"), which caused downstream CSS variables to serialize as undefined. Unit preservation now runs before the unitless-zero short-circuit.

v5.4.0

Compare Source

Minor Changes

• edceda7: Add support for DTCG v2025.10 dimension token type object value, while remaining backwards compatible for dimension tokens using string values.

  All built-in transforms can now handle dimension tokens.

  This includes CSS shorthand transforms for composed token types such as typography, border and shadows, which can contain properties that are dimensions.

  {
    "spacing": {
      "$type": "dimension",
      "$value": { "value": 1, "unit": "px" }
    },
    "shadow": {
      "$type": "shadow",
      "$value": {
        "color": { "colorSpace": "srgb", "components": [0, 0, 0], "alpha": 0.4 },
        "offsetX": { "value": 2, "unit": "px" },
        "offsetY": { "value": 2, "unit": "px" },
        "blur": { "value": 4, "unit": "px" },
        "spread": { "value": 6, "unit": "px" }
      }
    }
  }

• 3d5c140: Generate strict types (tuples) for the tokens of the same type

Patch Changes

• edceda7: Fix very old bug where size/remToPt wasn't converting to pt unit, but rather to f (iOS float). Fixed this, added size/remToFloat to use the old behavior, and updated the ios transformGroup to use this instead. This is technically potentially "breaking" but because it is a bugfix, this is a patch.

v5.3.3

Compare Source

Patch Changes

• 52817e1: Fix vulnerability in bundled version of glob -> minimatch.

v5.3.2

Compare Source

Patch Changes

• a7986d2: Support DTCG inset boolean property in shadow/css/shorthand transform, in addition to the existing type: "inset" format.
  Don't put invalid inset values in shadow/css/shorthand box-shadow values, they are ignored now. E.g. if you put type: "innerShadow" or some other unrecognized string.

v5.3.1

Compare Source

Patch Changes

• 9f51f0d: Fix shadow and border CSS shorthands to also support latest DTCG color module. Add platform options to configure how the shorthand transforms stringify the color property.

v5.3.0

Compare Source

Minor Changes

• b5adbc0: Add support for DTCG v2025.10 structured color format in color transformers.

  New features:

  • All color transformers now support both legacy string format and DTCG object format with colorSpace, components, alpha, and optional hex fallback properties
  • Support for all 14 DTCG color spaces: srgb, srgb-linear, display-p3, a98-rgb, prophoto-rgb, rec2020, xyz-d50, xyz-d65, lab, lch, oklab, oklch, hsl, hwb
  • New color/oklch transformer - outputs modern CSS oklch() function
  • New color/oklab transformer - outputs modern CSS oklab() function
  • New color/p3 transformer - outputs CSS color(display-p3 ...) function
  • New color/lch transformer - outputs modern CSS lch() function

  Types:

  • Added DTCGColorSpace and DTCGColorValue TypeScript types

  Hex fallback support:
  When a DTCG color object includes a hex property, it will be used as a fallback when the color is out-of-gamut for sRGB, allowing designers to provide pre-computed sRGB approximations.

Patch Changes

• 1187f60: Update vulnerable transitive lodash dependency inside @​bundled-es-modules/glob

v5.2.0

Compare Source

Minor Changes

• 752a50c: Add (wip) sort option to formattedVariables and formats css, scss, less, stylus. See format docs on how to use it.

Patch Changes

• 6e9164e: Small bugfix where formatting.commentStyle was not taken into account for fileHeader comments when possible.

v5.1.4

Compare Source

Patch Changes

• a9c11a2: Fix of a regression bug caused by sizeRem transform throwing an error for NaN values. Because a string was thrown instead of an Error, this wasn't handled correctly by the transforms wrapper utility. Now we handle this scenario, and we also changed it to throw an actual Error.

v5.1.3

Compare Source

Patch Changes

• 6e306bc: Upgrade glob@​11.1.0 forked package to fix vulnerability in origin package.

v5.1.1

Compare Source

Patch Changes

• 65745da: Fix outputReferences for tokens with 'value' in their name. Previously, references to tokens like object_type.value_chain were incorrectly resolved because the code removed the first occurrence of .value instead of only the trailing suffix.

v5.1.0

Compare Source

Minor Changes

• 97a209a: Add new size/compose/{sp,dp} transforms

Patch Changes

• dbcdae3: Fix fontName parsing to handle double quotes
• c47600d: Export expand DTCGTypesMap for extension use cases.

v5.0.4

Compare Source

Patch Changes

• 7a238af: Fix an issue with token collisions being way to eager about complaining when values that are identical are "colliding". This cuts collision warnings by 75% or more.

v5.0.3

Compare Source

Patch Changes

• 3d070f5: Move patch-package to devDependencies and run in prepare instead of postinstall, so it only runs when npm installing locally and not for consumers.
• 71614da: Wrap structuredClone in loadFile in a try catch, in case we have a JS/TS config file with dynamic content.

v5.0.2

Compare Source

Patch Changes

• 8e413a2: Fix vulnerable dependencies, patch-package and its transitive tmp dependency in particular.
• 9f84a81: Remove node-sass from create-react-app example, dart-sass is used now usually.
• da19c8f: Small patch to allow no-destination "files" to not cause errors when using clean methods.

v5.0.1

Compare Source

Patch Changes

• 463b456: Simplify internal cleanFile(s) utils, fix a bug that would still attempt to unlink non-existent files in verbosity "silent" mode.
• 8f7c522: Fix loadFile to deep clone ES module exports to avoid unintended mutations

v5.0.0

Compare Source

Major Changes

• 02300b1: No longer allow references to non-token leaf nodes. References only work when referencing a Design Token (its value).
  Non-token nodes will also not make it to the output, because they are filtered out during the flattening process to tokenMap and tokenArray.
  Remove allowing references with .value suffix.
• f19a0cb: BREAKING: no longer possible to pass options to change the reference syntax {ref.foo}. The opening, closing and separator characters are now set to be aligned with the DTCG spec.
• 02300b1: BREAKING: minimum NodeJS version required is now v22.0.0 (LTS, at time of writing this). This is to support Set.prototype.union which we utilize in our token reference resolution utility, and it's important to use the cheaper built-in versus doing a union manually.

Minor Changes

• 02300b1: Support passing Token Map structure to getReferences and resolveReferences utils.
• b80e75b: When transform hooks throw errors, they will now be caught and error-handled by Style Dictionary.
  Instead of causing a fatal failure, the error is collected and logged as a warning at the end.
  With verbosity turned to "verbose", information about which tokens in which files are causing an error in which transform, to help debugging the problem.
  Sensible fallbacks are used when a transform cannot complete.

Patch Changes

• a23f353: SD will use posix style paths ('/') as much as possible and rely on node:fs to translate to win32 paths whenever a call to the filesystem is done. The exception is for dynamic imports of JS files (SD config, token files).
• a23f353: Allow buildPaths without a trailing slash, by making use of path.join() utility.
• 9bbbc8a: Dynamically import prettier and plugins so that they can be chunked separately by bundlers, and only imported on demand. This will significantly improve bundle size for users of Style Dictionary.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.