deps(npm)(deps-dev): bump globals from 17.7.0 to 17.8.0

[dependabot]

Bumps globals from 17.7.0 to 17.8.0.

Release notes

Sourced from globals's releases.

v17.8.0

• Update globals (2026-07-01) (#347) 7394811

---

sindresorhus/globals@v17.7.0...v17.8.0

Commits

• 36c7659 17.8.0
• 7394811 Update globals (2026-07-01) (#347)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Assignees

The following users could not be added as assignees: Coding-Dev-Tools/engineers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🤖 Automated Code Review

✅ Ruff Lint — No issues

⚠️ Ruff Format — Formatting needed

unformatted: File would be reformatted
   --> src/api_contract_guardian/cli.py:1:1
    |
20  |
    -     warnings.warn(
    -         "revenueholdings-license not installed; license checks skipped", stacklevel=2
    -     )
21  +     warnings.warn("revenueholdings-license not installed; license checks skipped", stacklevel=2)
22  |     _has_rh = False
--------------------------------------------------------------------------------
53  |
    - def _validate_output_format(
    -     format_name: str, allowed: tuple[str, ...], command: str
    - ) -> str:
54  + def _validate_output_format(format_name: str, allowed: tuple[str, ...], command: str) -> str:
55  |     """Reject unsupported output formats before the command runs."""
56  |     if format_name not in allowed:
57  |         allowed_list = ", ".join(allowed)
    -         raise typer.BadParameter(
    -             f"Unsupported {command} format '{format_name}'. Choose from: {allowed_list}"
    -         )
58  +         raise typer.BadParameter(f"Unsupported {command} format '{format_name}'. Choose from: {allowed_list}")
59  |     return format_name
--------------------------------------------------------------------------------
93  |     global _require_license_strict
    -     _require_license_strict = require_license_flag or bool(
    -         os.environ.get("REVENUEHOLDINGS_REQUIRE_LICENSE")
    -     )
94  +     _require_license_strict = require_license_flag or bool(os.environ.get("REVENUEHOLDINGS_REQUIRE_LICENSE"))
95  |

✅ Secret Detection — Clean

✅ Large Files — Within limits

📊 Diff Stats — 2 file(s) changed

 package-lock.json | 8 ++++----
 package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

---

Verdict: ⚠️ Warnings — Lint/format issues found. Recommend fixing before merge.

Automated by Coding-Dev-Tools/.github reusable workflow.

[Coding-Dev-Tools]

✅ APPROVE — routine Dependabot bump

Reviewed: package.json and package-lock.json, globals 17.7.0 → 17.8.0

Assessment

• Scope: Dev dependency bump for with lockfile updates
• CI: All checks green — 5 checks passed
• Risk: Minimal — minor version bump of globals dev dependency
• Security: No known vulnerabilities; standard npm registry package

Verdict: Safe to merge.

---

Automated review by Pre-PR Code Analyzer (Hermes cron) — 2026-08-09T

[Coding-Dev-Tools]

✅ APPROVE — routine Dependabot bump

Reviewed: package.json and package-lock.json, globals 17.7.0 to 17.8.0

Assessment

• Scope: Dev dependency bump for globals with lockfile updates
• CI: All checks green — 5 checks passed
• Risk: Minimal — minor version bump of globals dev dependency
• Security: No known vulnerabilities; standard npm registry package

Verdict: Safe to merge.

---

Automated review by Pre-PR Code Analyzer (Hermes cron) — 2026-08-09