Sourced from dependency-cruiser's releases.

v17.3.7

🐛 fixes

• a0955cd3 fix(analyze): also analyzes dependents when --reaches or --focus are the only reason to do so - thanks @​drewcpage for raising the issue that led to this fix!

👷 maintenance

• 1289ed68 build(npm): updates external dependencies
• d993ebdc refactor(config-utl): de-anonymize the one remaining anonymous function export
• 817b8706 refactor: renames code in the analysis step to 'analyze'

🧹 chores

• 67d16af4 chore: adds an override to prevent a transitive dependency from emitting annoying messages while our tests are running
• 4af00554 chore(npm): updates external devDependencies
• e166a58e chore(ci): moves workflow permissions to individual jobs
• c6e7a856 chore(codeql): excludes generated validation code from scrutiny

v17.3.6

🐛 fixes

• cd6fe3af fix(report/dot): makes the dot 'flat' reporter respect collapse patterns

🧑‍🏭 refactoring

• d58c78ad/ e884b1e1/ 58c01d1d/ refactor: replace memoize with internal Maps (#1040)
• 464388c0 refactor(cache): uses more appropriate Set for remembering which cache contexts were initialized
• a4a7a807 refactor(report/teamcity): passes the flowId instead of memoizing it

📖 documentation

• 9ca0ab0b doc: various updates to type annotations
• f3648f61 doc(cli): refreshes the documentation of the configuration scaffolding template
• 1b12e61a doc(cli): documents the 'ndjson' logging/ progress format
• cd52da95 doc(cli): updates progress performance-log sample
• 54becb36 doc(report/teamcity): uses same filename pattern for typedefs as used elsewhere in the src tree

👷 maintenance

• 64d42f95 chore(npm): updates external devDependencies
• a3a41f16 chore: tweaks dependency-cruiser configuration
• f924f5c5 chore(LICENSE): 2026
• 0a82fc36 chore(main): logs the 'report from cache' step as part of the 'report' step
• 60981148 chore(ci): uses content based cache strategy as it's faster for our self-scan
• f9b8565e chore(ci): updates known violations
• 120cc755 chore(progress): adds runId and user & system totals to the ndjson listener output

v17.3.5

👷 maintenance

• 2c72a14f perf(enrich/orphan): optimizes the data structure it exercises upon (#1037)
• c80252ed perf(enrich/derive/metrics): only create indexed graph once (#1036)
• 1dab573d perf(enrich/derive): uses better datastructure for deriving dependents (#1035)

... (truncated)

• c9ed5f1 17.3.7
• 1289ed6 build(npm): updates external dependencies
• a0955cd fix(analyze): also analyzes dependents when --reaches or --focus are the only...
• d993ebd refactor(config-utl): de-anonymize the one remaining anonymous function export
• 67d16af chore: adds an override to prevent a ransitive dependency from emitting annoy...
• 4af0055 chore(npm): updates external devDependencies
• 817b870 refactor: renames code in the analysis step to 'analyze'
• e166a58 chore(ci): moves workflow permissions to individual jobs
• c6e7a85 chore(codeql): excludes generated validation code from scrutiny
• 6372494 17.3.6
• Additional commits viewable in compare view

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for dependency-cruiser since your current version.

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)