build(deps): bump color-shorthand-hex-to-six-digit from 5.2.0 to 5.2.5

[dependabot]

Bumps color-shorthand-hex-to-six-digit from 5.2.0 to 5.2.5.

Changelog

Sourced from color-shorthand-hex-to-six-digit's changelog.

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

5.2.3 (2026-09-06)

Performance Improvements

• Recorded a 24.02% higher normalized benchmark score than v5.2.1 (878,026 → 1,088,908).

5.2.2 (2026-09-01)

Bug Fixes

• preserve complete ID selectors (7c79358)
• preserve complete resource fragments (3776e95)
• preserve converted object graphs (0bb3c08)
• preserve object data properties (b1da33a)
• publish recursive conversion types (f01a9da)

Performance Improvements

• avoid unnecessary context scans (b23b596)

5.2.1 (2026-08-22)

Performance Improvements

• Recorded a 8.6% higher normalized benchmark score than v5.1.3 (808,501 → 878,026).
• optimise package hot paths and JSON editing (f3112bd)

Commits

• c8f9795 chore: prepare npm release
• 6fa3e72 chore: prepare npm release
• 572d1e1 chore(changelogs): add thousands separators
• 76b0226 chore(changelogs): restore recorded performance improvements
• f5127e2 chore(perf): record serial benchmark results
• 8202972 chore: setup refresh
• 62e9177 chore: prepare npm release
• 54128fd chore: setup refresh
• eb6f96b docs: for changelog mention both raw md from gh and website page
• fe1d79e docs(color-shorthand-hex-to-six-digit): advertise no third-party dependencies
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: faa4da2c-31ad-41eb-9166-547708a64b2f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	color-shorthand-hex-to-six-digit@​5.2.0 ⏵ 5.2.5			+2	+5

View full report