fix(deps): update dependency @lynx-js/css-serializer to v0.1.9

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@lynx-js/css-serializer (source)	0.1.7 → 0.1.9

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

lynx-family/lynx-stack (@​lynx-js/css-serializer)

v0.1.9

Compare Source

Patch Changes

• Point @lynx-js/source-field at src/index.ts, so a bundler in this repo can (#​3404)
  resolve the package without waiting for its dist/.

  @lynx-js/css-serializer has no build script - its dist/ is emitted by the
  repository's root tsc --build, which is a separate turbo task with no ordering
  relationship to any package's build. That was invisible while every consumer
  was itself type-checked rather than bundled, but @lynx-js/web-core bundles its
  client with rspack, and rspack resolving main: dist/index.js before the root
  build has emitted it fails outright.

  @rsbuild/plugin-source-build is already how this repository answers that -
  @lynx-js/web-elements and @lynx-js/web-worker-rpc declare the same field and
  are consumed straight from source. Declaring it here removes the ordering
  question rather than scheduling around it.

  The field is inert outside such a build: it is a plain, unknown top-level
  package.json key, so no exports map is introduced and no existing entry point
  or deep import changes.

v0.1.8

Compare Source

Patch Changes

• Replace node:path with pathe in generateHref so the package can be bundled for browsers. (#​3401)

  Hrefs resolved from a projectRoot or filename containing a backslash change, because pathe normalizes Windows separators on every platform. Pure POSIX inputs, including the defaults, are unaffected.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 702b465

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[claude]

Claude finished @junghyeonsu's task in 2m 23s —— View job

---

🤖 Renovate 의존성 분석 완료

🛡️ 공급망 보안 분석

Install Scripts 검사

패키지	Install Script 유무	위험 패턴	판정
@lynx-js/css-serializer	없음	없음	🟢 안전

패키지 신뢰도

패키지	출처	메인테이너	판정
@lynx-js/css-serializer	lynx-family/lynx-stack (공식 저장소)	Lynx 팀	🟢 신뢰 가능

npm audit 결과

✅ 알려진 취약점이 발견되지 않았습니다.

---

📦 업데이트 요약

패키지	이전 버전	새 버전	타입	영향도
@lynx-js/css-serializer	0.1.7	0.1.9	patch	🟢 안전

🔍 상세 분석

@lynx-js/css-serializer 0.1.7 → 0.1.9

주요 변경사항:

• v0.1.8: node:path를 pathe로 교체하여 브라우저 번들링 지원 개선
  • Windows 경로 구분자(\)가 포함된 입력의 동작이 변경될 수 있음 (pathe가 모든 플랫폼에서 정규화)
  • 순수 POSIX 입력(기본값 포함)은 영향 없음
• v0.1.9: @lynx-js/source-field 지원 추가
  • package.json에 src/index.ts를 가리키는 필드 추가로 bundler가 dist/ 빌드를 기다리지 않고 소스에서 직접 해결 가능
  • 기존 entry point와 deep import는 변경 없음 (하위 호환성 유지)

우리 코드 사용처:

• docs/package.json에만 의존성으로 명시됨 ("private": true 패키지)
• 코드베이스에서 직접 import/require하는 곳 없음
• 다른 @lynx-js/* 패키지들 (@lynx-js/web-core 등)의 의존성으로 간접 포함

영향도: 🟢 안전

분석:

• Breaking change 없음 (patch 업데이트)
• docs는 private 패키지이므로 외부 릴리스에 영향 없음
• 브라우저 호환성 및 빌드 성능 개선이 주 목적
• 기존 API/동작 변경 없이 내부 구현만 개선

---

🧪 테스트 권고

• bun --filter @seed-design/docs build 실행으로 docs 빌드 검증 권장
• Lynx 예제가 정상 작동하는지 확인 (의존성이 간접적으로 사용될 수 있음)

📝 Changeset 처리

패키지	필요 여부	타입	파일	판단 근거
@seed-design/docs	불필요	-	-	"private": true 패키지로 릴리스되지 않음

판단 상세:

• docs/package.json은 private 패키지이므로 npm에 게시되지 않음
• @lynx-js/css-serializer는 docs의 의존성일 뿐, SEED Design의 public API에 영향 없음
• changeset 생성 불필요

🎯 결론

✅ 머지 안전

이 의존성 업데이트는 다음 이유로 안전하게 머지 가능합니다:

1. 보안: Install scripts 없음, 알려진 취약점 없음, 신뢰할 수 있는 출처
2. 영향도: Breaking change 없는 patch 업데이트
3. 범위: private 패키지(docs)의 간접 의존성으로 외부 릴리스에 영향 없음
4. 개선 사항: 브라우저 호환성 및 빌드 성능 향상

권장 조치:

• docs 빌드 테스트 후 머지
• 특별한 마이그레이션 작업 불필요

---

[github-actions]

Alpha Preview (Stackflow SPA)

• Branch Preview URL: https://renovate-lynx-js-css-seriali.seed-design-stackflow-spa.pages.dev
• Preview URL: https://8f6364cc.seed-design-stackflow-spa.pages.dev
• Commit: 702b465

[github-actions]

Alpha Preview (Storybook)

• Branch Preview URL: https://renovate-lynx-js-css-seriali.seed-design-storybook.pages.dev
• Preview URL: https://b676ad6e.seed-design-storybook.pages.dev
• Commit: 702b465

[github-actions]

Alpha Preview (Docs)

• Branch Preview URL: https://renovate-lynx-js-css-seriali.seed-design.pages.dev
• Preview URL: https://5c601f1b.seed-design.pages.dev
• Commit: 702b465

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.