chore(deps-dev): bump globals from 17.8.0 to 17.9.0

[dependabot]

Bumps globals from 17.8.0 to 17.9.0.

Release notes

Sourced from globals's releases.

v17.9.0

• Update globals (2026-08-01) (#348) 5a958ed

---

sindresorhus/globals@v17.8.0...v17.9.0

Commits

• 8e7b935 17.9.0
• 5a958ed Update globals (2026-08-01) (#348)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automerge, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Terrain · pre-flight

Clear — nothing blocks this merge.

Insufficient data to assess change risk confidently.

Metric	Value
Changed files	2 (0 source · 0 test)

BLOCK fails the merge · GATE required check · WATCH informational · NOTE quiet hint

---

Pre-existing issues (1)

• package.json [GATE] — Dependency manifest package.json has 8 of 8 deps using moving-target version specs (no version pin, range, or latest). Unpinned specs let an install resolve to a different version than was tested, so a dependency bump can change behavior with no manifest edit or review.

---

Limitations

• No coverage artifacts provided; protection gaps reflect missing data, not measured absence. Provide --coverage to improve accuracy.
• Mixed test cultures reduce cross-framework optimization confidence. Consider standardizing on fewer frameworks.

_{ran locally · no API key · no network · Terrain · terrain pr --json}

Targeted Test Results

No tests selected — change affects only non-code files.

[github-actions]

Terrain AI Risk Review

Metric	Value
AI surfaces	16
Eval scenarios	66
Impacted scenarios	0
Uncovered surfaces	16

Decision: BLOCKED — AI risk review found blocking signals.

Reason: eval execution failed: exec: pytest: executable file not found in /home/runner/go/bin:/opt/hostedtoolcache/go/1.23.12/x64/bin:/snap/bin:/home/runner/.local/bin:/opt/pipx_bin:/home/runner/.cargo/bin:/home/runner/.config/composer/vendor/bin:/usr/local/.ghcup/bin:/home/runner/.dotnet/tools:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin

[dependabot]

Superseded by #229.