chore(deps): bump cosmiconfig from 9.0.2 to 10.0.0

[dependabot]

Bumps cosmiconfig from 9.0.2 to 10.0.0.

Changelog

Sourced from cosmiconfig's changelog.

10.0.0

• Breaking change: The required version range is now ^22.18 || >=24.
• Breaking change: Remove typescript in favor of Node's own type stripping. This means that TypeScript 7 projects are supported, but non-erasable type syntax like namespace or enum is unsupported.
• Breaking change: JSON parsing uses the JSON.parse function directly. parse-json is no longer used for better error messages, since Node has improved theirs.
• Remove import-fresh dependency in favor of directly clearing the cache.
• Added support for UTF-16 config files

Commits

• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
cosmiconfig	[>= 6.a, < 7]
cosmiconfig	[>= 7.a, < 8]

[jimmyandrade]

@dependabot rebase

[Copilot]

Pull request overview

Updates the packages/webfont workspace to use cosmiconfig@10.0.0 (from 9.0.2) and refreshes the lockfile accordingly, keeping the standalone/CLI config-discovery dependency current.

Changes:

• Bump cosmiconfig dependency to 10.0.0 in packages/webfont/package.json.
• Update package-lock.json to reflect the new cosmiconfig version and its dependency graph changes.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
packages/webfont/package.json	Bumps cosmiconfig to 10.0.0 for the published webfont package workspace.
package-lock.json	Lockfile refresh to resolve cosmiconfig@10.0.0 and remove now-unused transitive dependencies.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.