[claude]

Requested by David Babenko-Sanders · Slack thread

Bumps oxfmt from 0.44.0 to 0.71.0, the newest release that clears the 7-day yarn age gate. No files needed reformatting.

🤖 Generated with Claude Code

https://claude.ai/code/session_01HGH7qvg6KN4YWnCMqMeQR5

---

Generated by Claude Code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	oxfmt@​0.44.0 ⏵ 0.71.0	+8			+1

View full report

[claude]

Looks good, straightforward devDependency version bump.

What was reviewed: package.json change bumping oxfmt from ^0.44.0 to ^0.71.0; confirmed yarn.lock diff is a mechanical regeneration matching this bump (all @ oxfmt/binding-* packages and the oxfmt entry itself updated in lockstep, no unrelated dependency changes); oxfmt is a formatter, used only as a devDependency, not part of the runtime or security-sensitive surface.

Extended reasoning...

Two-file diff: package.json devDependency bump for oxfmt (0.44.0 to 0.71.0) and the corresponding yarn.lock regeneration (binding packages and resolved versions updated consistently, no other packages touched). oxfmt is a dev-only code formatter with no runtime or security surface. The change is small, mechanical, and matches the PR description exactly, so it warrants approval.