chore(deps): bump the frontend group across 1 directory with 3 updates

[dependabot]

Bumps the frontend group with 3 updates in the / directory: @defra/interactive-map, govuk-frontend and liquidjs.

Updates @defra/interactive-map from 0.0.22-alpha to 0.0.23-alpha

Release notes

Sourced from @​defra/interactive-map's releases.

v0.0.23-alpha

What's Changed

• ReverseGeocode check fix by @​dannyleech in DEFRA/interactive-map#235
• Labels additions by @​dannyleech in DEFRA/interactive-map#238
• Keyboard listbox by @​dannyleech in DEFRA/interactive-map#239
• Focus fixes to button and panels by @​dannyleech in DEFRA/interactive-map#240
• Calls setWorkerUrl instead of constructor prop fix by @​dannyleech in DEFRA/interactive-map#242
• Rename registerPatterns/registerSymbols as addPatterns/Symbols to map by @​markfee in DEFRA/interactive-map#244
• Moved the patternRegistry helper methods into patternRegistry by @​markfee in DEFRA/interactive-map#248
• Interact plugin contiguous prop removed by @​dannyleech in DEFRA/interactive-map#249
• Moved the symbolRegistry helpers into symbolRegistry by @​markfee in DEFRA/interactive-map#251
• Dependency updates centred around v0.0.20 of theme by @​alexluckett in DEFRA/interactive-map#257
• Pixel ratio is set in one place only by @​markfee in DEFRA/interactive-map#255
• Use theme v0.0.22 by @​alexluckett in DEFRA/interactive-map#260
• Selected state on style change fix by @​dannyleech in DEFRA/interactive-map#259
• Hints feature added by @​dannyleech in DEFRA/interactive-map#262

Full Changelog: DEFRA/interactive-map@v0.0.22-alpha...v0.0.23-alpha

Commits

• 6937ad5 Feature/hint (#262)
• 564d226 Selected state on style chnage fix (#259)
• 54f1cf0 Merge pull request #260 from DEFRA/update-theme-v0.0.22
• ad1b7bd Use theme v0.0.22
• 387b7fb IM-247 pixelRatio is set in one place only (#255)
• f7b3f5c Merge pull request #257 from DEFRA/docs/update-theme-v20
• 07f2424 Move packages into devDependencies
• 4222668 Update docs theme to v0.0.20 with CSS fixes
• f498750 IM-253 moved back addSymbolToMap
• 96c0b82 IM-246 - moved the symbolRegistry helpers into symbolRegistry (#251)
• Additional commits viewable in compare view

Updates govuk-frontend from 5.14.0 to 6.2.0

Release notes

Sourced from govuk-frontend's releases.

GOV.UK Frontend v6.2.0

To install this version with npm, run npm install govuk-frontend@6.2.0. You can also find more information about how to stay up to date in our documentation.

New features

Use @use to include GOV.UK Frontend styles in Sass

You can now include GOV.UK Frontend as a Sass module with @use or @forward.

@import was deprecated in Dart Sass v1.88.0, and the Sass team will remove it in Dart Sass v3.0.0.

We also plan to deprecate and eventually remove support for @import from GOV.UK Frontend in future releases.

We recommend you migrate to using Sass modules instead of @import everywhere in your Sass, unless your service depends on other Sass libraries that use @import. Mixing @use and @import can lead to duplicated CSS or configuration not being applied due to how Sass loads the included stylesheets.

To include all the styles from GOV.UK Frontend in your compiled stylesheet, replace @import with @use in your Sass file:

// Previously
@import "node_modules/govuk-frontend/dist/govuk";
// Now
// Outputs GOV.UK Frontend's CSS (@use) and
// makes the Sass API available without namespacing (as *)
@​use "node_modules/govuk-frontend/dist/govuk" as *;

To configure any of GOV.UK Frontend's settings when including it in your Sass file, you should now use a with clause listing each setting you want to modify to your @use rule:

// Previously
$govuk-assets-path: "/path/to/assets/";
@import "node_modules/govuk-frontend/dist/govuk";
// Now
@​use "node_modules/govuk-frontend/dist/govuk" as * with (
$govuk-assets-path: "/path/to/assets/"
);

You can also include specific parts of GOV.UK Frontend using Sass.

See the GOV.UK Frontend documentation for more information on including GOV.UK Frontend in your Sass build.

We made this change in [pull request #6862: Migration to Sass modules](alphagov/govuk-frontend#6862).

Use shorter pkg: URLs to include individual files in Sass

... (truncated)

Changelog

Sourced from govuk-frontend's changelog.

v6.2.0 (Feature release)

To install this version with npm, run npm install govuk-frontend@6.2.0. You can also find more information about how to stay up to date in our documentation.

New features

Use @use to include GOV.UK Frontend styles in Sass

You can now include GOV.UK Frontend as a Sass module with @use or @forward.

@import was deprecated in Dart Sass v1.88.0, and the Sass team will remove it in Dart Sass v3.0.0.

We also plan to deprecate and eventually remove support for @import from GOV.UK Frontend in future releases.

We recommend you migrate to using Sass modules instead of @import everywhere in your Sass, unless your service depends on other Sass libraries that use @import. Mixing @use and @import can lead to duplicated CSS or configuration not being applied due to how Sass loads the included stylesheets.

To include all the styles from GOV.UK Frontend in your compiled stylesheet, replace @import with @use in your Sass file:

// Previously
@import "node_modules/govuk-frontend/dist/govuk";
// Now
// Outputs GOV.UK Frontend's CSS (@use) and
// makes the Sass API available without namespacing (as *)
@​use "node_modules/govuk-frontend/dist/govuk" as *;

To configure any of GOV.UK Frontend's settings when including it in your Sass file, you should now use a with clause listing each setting you want to modify to your @use rule:

// Previously
$govuk-assets-path: "/path/to/assets/";
@import "node_modules/govuk-frontend/dist/govuk";
// Now
@​use "node_modules/govuk-frontend/dist/govuk" as * with (
$govuk-assets-path: "/path/to/assets/"
);

You can also include specific parts of GOV.UK Frontend using Sass.

See the GOV.UK Frontend documentation for more information on including GOV.UK Frontend in your Sass build.

We made this change in [pull request #6862: Migration to Sass modules](alphagov/govuk-frontend#6862).

Use shorter pkg: URLs to include individual files in Sass

... (truncated)

Commits

• cd590d4 Release 6.2.0
• f9fed3e Merge pull request #7137 from alphagov/dependabot/npm_and_yarn/html-validate-...
• a16cdbc Add missing names to input component examples
• bacda24 Bump html-validate from 10.11.2 to 11.4.0
• 95ea2ef Bump the babel group with 2 updates
• 5181124 Bump rollup from 4.60.3 to 4.60.4 in the rollup group across 1 directory
• 84352e0 Correct typo in $govuk-success-colour deprecation message
• cbf7fa1 Bump @​babel/preset-env from 7.29.2 to 7.29.5 in the babel group
• b7ebd0b Release 6.2.0-rc.0
• 1077dad Update the CHANGELOG entry using postversion hook
• Additional commits viewable in compare view

Updates liquidjs from 10.25.7 to 10.27.0

Release notes

Sourced from liquidjs's releases.

v10.27.0

10.27.0 (2026-05-15)

Features

• context: null-prototype scope frames via createScope (#899) (47d3f1b)

v10.26.0

10.26.0 (2026-05-14)

Bug Fixes

• date: cap strftime widths and account padding in memoryLimit (#895) (3129d46)
• enforce renderLimit for empty renderTemplates calls (#894) (5b9c346)
• propagate ownPropertyOnly into Context.spawn() for {% render %} (#893) (dbbf628)
• security: block Object.prototype filter/tag lookups (RCE) (#897) (457fae0)
• strip html newline tags (#892) (26ea285)
• strip_html: rewrite as linear single-pass scan to avoid ReDoS (#896) (3616a74)

Features

• add sha256 and hmac_sha256 filters for cryptographic operations (#889) (1c816d4)

Changelog

Sourced from liquidjs's changelog.

10.27.0 (2026-05-15)

Features

• context: null-prototype scope frames via createScope (#899) (47d3f1b)

10.26.0 (2026-05-14)

Bug Fixes

• date: cap strftime widths and account padding in memoryLimit (#895) (3129d46)
• enforce renderLimit for empty renderTemplates calls (#894) (5b9c346)
• propagate ownPropertyOnly into Context.spawn() for {% render %} (#893) (dbbf628)
• security: block Object.prototype filter/tag lookups (RCE) (#897) (457fae0)
• strip html newline tags (#892) (26ea285)
• strip_html: rewrite as linear single-pass scan to avoid ReDoS (#896) (3616a74)

Features

• add sha256 and hmac_sha256 filters for cryptographic operations (#889) (1c816d4)

Commits

• a8fd734 chore(release): 10.27.0 [skip ci]
• 47d3f1b feat(context): null-prototype scope frames via createScope (#899)
• c20c0af chore(release): 10.26.0 [skip ci]
• 457fae0 fix(security): block Object.prototype filter/tag lookups (RCE) (#897)
• 3616a74 fix(strip_html): rewrite as linear single-pass scan to avoid ReDoS (#896)
• 3129d46 fix(date): cap strftime widths and account padding in memoryLimit (#895)
• 5b9c346 fix: enforce renderLimit for empty renderTemplates calls (#894)
• dbbf628 fix: propagate ownPropertyOnly into Context.spawn() for {% render %} (#893)
• 26ea285 fix: strip html newline tags (#892)
• a55f543 docs(readme): add Freshet to Who's Using LiquidJS (#888)
• Additional commits viewable in compare view