chore(deps): bump BenSheridanEdwards/StyleProof from 4.4.21 to 4.7.4

[dependabot]

Bumps BenSheridanEdwards/StyleProof from 4.4.21 to 4.7.4.

Release notes

Sourced from BenSheridanEdwards/StyleProof's releases.

v4.7.4

Fixed

• Forced interaction states are sampled in the CDP session that applies them. The computed-style subtree read no longer crosses into Playwright's separate protocol session after forcing :hover, :focus, or :active. This removes intermittent phantom state deltas on unchanged controls in hydrated apps.

v4.7.3

Fixed

• Forced interaction states settle before their computed styles are read. Capture now flushes each :hover, :focus, and :active transition through the same CDP session that applied it before reading the page. Independent base and head processes can no longer disagree about unchanged interaction styles because a CDP state transition was still pending.

v4.7.2

Fixed

• Cold npm base captures use one Playwright module instance. The isolated exact StyleProof runtime now shares the adopter base worktree's locked @playwright/test package. The Playwright CLI, adopter config/spec, and StyleProof runner therefore cannot load two package instances and collapse a valid baseline into an all-new-surface report.

v4.7.1

Fixed

• Cold npm base captures no longer re-resolve unrelated application dependencies. styleproof-ci now installs its exact capture runtime under the ephemeral session directory and links only the styleproof package into the base worktree. The adopter's dependency tree remains exactly as produced by npm ci, so a ranged dependency cannot drift on the base side and be misreported as a pull-request visual change.
• Demo font settling no longer deadlocks its map-store dogfood capture. Font readiness now has an external five-second bound instead of consuming the full capture timeout when Chromium leaves its readiness promise pending.
• Generated scroll settling no longer awaits page-owned timers. The helper now advances scrolling from the Playwright process with a fixed traversal bound, preventing a stalled page clock from deadlocking crawl capture.

v4.7.0

Added

... (truncated)

Changelog

Sourced from BenSheridanEdwards/StyleProof's changelog.

Changelog

All notable changes to StyleProof are documented here.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Fixed

• styleproof-map no longer selects consumer tests that merely mention "styleproof capture". Playwright compiles a plain --grep string as new RegExp(pattern, 'gi') — case-insensitive — and matches it against the whole title path, so the bare styleproof capture selector swept in any spec whose title mentioned StyleProof capture in prose. Combined with styleproof-ci --spec-ref, which overlays the head harness onto the base checkout, such a spec then ran against the base application, failed, and took the entire base capture down with it — leaving every surface without a baseline while the head capture reported success. The selector is now a case-sensitive, word-bounded regex literal, and it lives beside the test.describe titles it has to agree with rather than being a second independent string literal.

[4.7.4] - 2026-08-01

Fixed

• Forced interaction states are sampled in the CDP session that applies them. The computed-style subtree read no longer crosses into Playwright's separate protocol session after forcing :hover, :focus, or :active. This removes intermittent phantom state deltas on unchanged controls in hydrated apps.

[4.7.3] - 2026-08-01

Fixed

• Forced interaction states settle before their computed styles are read. Capture now flushes each :hover, :focus, and :active transition through the same CDP session that applied it before reading the page. Independent base and head processes can no longer disagree about unchanged interaction styles because a CDP state transition was still pending.

[4.7.2] - 2026-07-31

Fixed

• Cold npm base captures use one Playwright module instance. The isolated exact StyleProof runtime now shares the adopter base worktree's locked @playwright/test package. The Playwright CLI, adopter config/spec, and StyleProof runner therefore cannot load two package instances and collapse a valid baseline into an all-new-surface report.

... (truncated)

Commits

• 8162814 fix(capture): sample forced states in one CDP session (#339)
• 65ba27d fix(capture): settle forced states before reading styles (#336)
• b3b47aa fix(ci): share adopter Playwright in exact runtime (#335)
• 71d236f fix(ci): isolate npm base capture dependencies
• 6bb25e9 chore(release): prepare 4.7.0 (#332)
• 517b109 fix(deps): resolve the fast-uri high-severity audit advisory (#331)
• 4f8ae3b feat(init): prune reports by API with a retention and size-budget sweep (#329)
• 82afbea feat(action): publish reports through the git-data API (#328)
• 35a74dd test(action): dogfood CERTIFICATION_FAILED end-to-end (#327)
• 4b1e654 ci: bump actions/setup-node from 6 to 7 (#312)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Fallow audit report

Found 1 finding.

Details

Severity	Rule	Location	Description
minor	fallow/unused-dev-dependency	package.json:49	Package '@lhci/cli' is in devDependencies but never imported

Generated by fallow.

[github-actions]

Fallow audit report

0 inline findings selected for GitHub review.

[github-actions]

🗺️ StyleProof report

📊 View the side-by-side visual report →

---

No visual changes detected — the StyleProof check is green.