chore(deps-dev): bump baseline-browser-mapping from 2.10.37 to 2.11.25 - #6910

# Source: Repository UI (base)
language: en-US
# Source: Repository UI (base)
tone_instructions: 'Review as a USWDS core engineer: plain language, specific, evidence first. Hedge non-blocking asks ("I think it would be good to..."). Never comment on formatting or naming style. Never render a screen reader verdict.'
# Source: Repository UI (base)
early_access: false
# Source: defaults
enable_free_tier: true
# Source: defaults
inheritance: false
reviews:
  # Source: Repository UI (base)
  profile: quiet
  # Source: Repository UI (base)
  request_changes_workflow: false
  # Source: Repository UI (base)
  high_level_summary: true
  # Source: defaults
  high_level_summary_instructions: ''
  # Source: defaults
  high_level_summary_placeholder: '`@coderabbitai` summary'
  # Source: Repository UI (base)
  high_level_summary_in_walkthrough: true
  # Source: defaults
  auto_title_placeholder: '`@coderabbitai`'
  # Source: defaults
  auto_title_instructions: ''
  # Source: defaults
  review_status: true
  # Source: defaults
  review_details: false
  # Source: defaults
  review_progress: true
  # Source: defaults
  commit_status: true
  # Source: defaults
  fail_commit_status: false
  # Source: defaults
  collapse_walkthrough: true
  # Source: defaults
  changed_files_summary: true
  # Source: Repository UI (base)
  sequence_diagrams: false
  # Source: Repository UI (base)
  estimate_code_review_effort: true
  # Source: Repository UI (base)
  assess_linked_issues: true
  # Source: defaults
  related_issues: true
  # Source: defaults
  related_prs: true
  # Source: defaults
  suggested_labels: true
  # Source: Repository UI (base)
  labeling_instructions:
    - label: 'Is: Breaking 🔴'
      instructions: Apply when the diff changes a JavaScript API, changes markup or content in a component, significantly changes a component's display, flips a $theme-* default, or changes built CSS order or specificity.
    - label: 'Affects: Accessibility 🟡'
      instructions: Apply when the diff changes ARIA attributes, focus management, keyboard handling, screen reader text, or form error association.
    - label: 'Affects: Markup 🟡'
      instructions: Apply when a *.twig template's markup changes.
    - label: 'Affects: Settings'
      instructions: Apply when a $theme-* setting is added, renamed, or changes default.
    - label: 'Context: Sass'
      instructions: Apply when the change is primarily in *.scss files.
    - label: 'Context: JavaScript'
      instructions: Apply when the change is primarily in *.js files.
    - label: 'Affects: Testing'
      instructions: Apply when the change is limited to test files or test tooling.
    - label: 'Affects: Compiling'
      instructions: Apply when the change touches gulpfile.js, tasks/, vite.config.*, webpack.twig.config.js, or the build pipeline.
    - label: 'Affects: Documentation'
      instructions: Apply when the change is limited to documentation files.
  # Source: defaults
  mutually_exclusive_groups: {}
  # Source: Repository UI (base)
  auto_apply_labels: false
  # Source: Repository UI (base)
  suggested_reviewers: false
  # Source: defaults
  auto_assign_reviewers: false
  # Source: defaults
  suggested_reviewers_instructions: []
  # Source: Repository UI (base)
  in_progress_fortune: false
  # Source: Repository UI (base)
  poem: false
  # Source: defaults
  enable_prompt_for_ai_agents: true
  # Source: Repository UI (base)
  path_filters:
    - '!COMMUNITY.md'
    - '**/package-lock.json'
  # Source: Repository UI (base)
  path_instructions:
    - path: '**/*'
      instructions: |-
        Apply the cascade test to every finding before posting it: does this change what every downstream consumer inherits, or is it how you would have written it? If the latter, drop it.
        Never comment on: formatting, indentation, quote style or line length (Prettier, ESLint and .editorconfig own these); naming in isolation, unless it contradicts a convention already used in the repo; runtime micro-performance; missing JSDoc on pre-existing code; diff size; refactoring opportunities unrelated to the change; hypothetical future requirements.
        Never render a verdict on screen reader or assistive technology behavior. Name the test matrix that a specialist should run instead.
        Base branch is develop. main and library--main publish to npm.
    - path: packages/**/*.js
      instructions: |-
        Component and core JavaScript. Mocha with jsdom-global, not Jest or Vitest; sinon is available.
        Blocking findings:
        1. innerHTML or insertAdjacentHTML that interpolates any value without the Sanitizer.escapeHTML tagged template from packages/uswds-core/src/js/utils/sanitizer.js. ESLint's no-unsanitized rules are errors but are disabled in *.spec.js, so lint is not the safety net here — read the production file. Precedents: usa-file-input, usa-combo-box, usa-table, usa-date-picker.
        2. Reimplementing an existing uswds-core utility. The inventory is select, select-or-matches, behavior, focus-trap, keymap, active-element, debounce, toggle, toggle-form-input, toggle-field-mask, validate-input, is-in-viewport, is-ios-device, scrollbar-width, sanitizer, plus events.js (CLICK) and config.js (prefix). Point at the file path.
        3. Teardown asymmetry. Every addEventListener, matchMedia listener and observer added during init or the component lifecycle must be removed in teardown.
        4. Unguarded input at a boundary: event handlers that assume an event type without an instanceof check, data-* attributes trusted without validation, a platform API used without a fallback when it is unavailable. The established validation pattern is packages/uswds-core/src/js/utils/validate-input.js.
        5. A changed early-return or falsy guard that now lets code run in a state it previously skipped.
        In *.spec.js files: verify the test would fail on develop, not just that a test exists. Do not ask for DRY extraction until the same setup appears in three or more files — the events.js triplicate in usa-combo-box, usa-date-picker and usa-date-range-picker is the threshold example. The tests.forEach([document.body, componentRoot]) pattern is the intended idiom, not duplication.
        In *.stories.js files: review the story only for whether it demonstrates a new variant. Story metadata is not the component's test coverage.
    - path: packages/**/*.scss
      instructions: |-
        Sass. Blocking findings:
        1. A literal replacing a token function — color(), units(), family(), font-size(), spacing(), radius(), measure(). Consumers who override $theme-* settings lose the ability to theme any de-themed value. Name the token to use instead; if the intent was more contrast, suggest a darker or lighter token rather than a hex value.
        2. A new or changed $theme-* setting without SASSDoc, without a `@warn` in the `@else` fallback for unrecognized values, and without an entry in packages/uswds-core/src/styles/_notifications.scss. New settings are public API and need a uswds-site companion PR.
        3. New `@if/`@else branching on a setting with no sass-true coverage.
        4. A setting value that breaks compilation when overridden — a setting must degrade, not throw.
        5. A rule that raises selector specificity or changes the source order of the built CSS. Flag it as a semver question for the maintainers, even when :where() keeps specificity nominally flat.
        Prefer fixes in the shared placeholder or mixin over a per-component patch when the same problem affects other components.
    - path: packages/**/*.twig
      instructions: Shipped templates. Any change to markup structure, element order, or text content is potentially a breaking change under this repo's definition. Flag it for maintainer classification and state that the design-versus-code split is theirs to make; do not conclude it yourself. Twig variable names are consumed by webpack and are public API.
    - path: packages/**/src/test/**/*.html
      instructions: jsdom test fixtures. Review only for whether the fixture matches the component's real markup. Do not lint the HTML.
    - path: package.json
      instructions: dependencies holds exactly one runtime package, lit. Any addition there is blocking unless the PR body explains why it must ship to consumers. devDependencies additions are routine, but a new import must not rely on a transitive dependency — it needs its own entry.
    - path: package-lock.json
      instructions: Do not review the lockfile line by line. Note only whether it is in sync with package.json, since CI runs npm ci.
    - path: .github/workflows/**
      instructions: 'Blocking: an unpinned third-party action (this repo pins to commit SHAs), a permissions block wider than the job needs, and any pull_request_target job that checks out or executes PR code. The existing pull_request_target usage in verify-commit-signatures.yml is deliberate and documented — it never checks out the fork.'
    - path: .agents/**
      instructions: Repo-local agent tooling. Review the .mjs scripts as code, with tests under scripts/*.spec.mjs. For SKILL.md and reference documents, flag only claims that contradict the code they describe. Do not edit or second-guess the review calibration itself.
    - path: '**/*.md'
      instructions: Check documentation against the code changed in the same PR. Do not comment on wording, heading style or line length.
  # Source: defaults
  abort_on_close: true
  # Source: defaults
  disable_cache: false
  slop_detection:
    # Source: defaults
    enabled: true
    # Source: defaults
    include_all_authors: false
  auto_review:
    # Source: Repository UI (base)
    enabled: true
    # Source: defaults
    description_keyword: ''
    # Source: Repository UI (base)
    auto_incremental_review: true
    # Source: Repository UI (base)
    auto_pause_after_reviewed_commits: 5
    # Source: defaults
    ignore_title_keywords: []
    # Source: defaults
    labels: []
    # Source: Repository UI (base)
    drafts: false
    # Source: defaults
    base_branches: []
    # Source: Repository UI (base)
    ignore_usernames:
      - dependabot[bot]
      - dependabot
      - github-actions[bot]
      - github-actions
  finishing_touches:
    docstrings:
      # Source: Repository UI (base)
      enabled: false
    unit_tests:
      # Source: Repository UI (base)
      enabled: false
    simplify:
      # Source: Repository UI (base)
      enabled: false
    autofix:
      # Source: Repository UI (base)
      enabled: false
    fix_ci:
      # Source: Repository UI (base)
      enabled: false
    resolve_merge_conflict:
      # Source: Repository UI (base)
      enabled: false
    # Source: defaults
    custom: []
  pre_merge_checks:
    # Source: defaults
    override_requested_reviewers_only: false
    docstrings:
      # Source: Repository UI (base)
      mode: 'off'
      # Source: defaults
      threshold: 80
    title:
      # Source: Repository UI (base)
      mode: warning
      # Source: Repository UI (base)
      requirements: 'Title must follow "USWDS - <Package or Area>: <Brief statement>", for example "USWDS - Button: Increase font size", per .github/PULL_REQUEST_TEMPLATE.md.'
    description:
      # Source: Repository UI (base)
      mode: warning
    issue_assessment:
      # Source: Repository UI (base)
      mode: warning
    # Source: Repository UI (base)
    custom_checks:
      - mode: warning
        name: Breaking change declared
        instructions: |-
          Pass when the description contains exactly one of the three template statements: "This is not a breaking change.", ":warning: This is potentially a breaking change.", or ":warning: This is a breaking change."
          Fail when none is present, when more than one is present, or when the description claims the change is not breaking while the diff does any of: changes an exported JavaScript API or a data-* attribute name in packages/*/src/index.js; changes markup or text content in a *.twig template; renames or removes a .usa-* class; flips the default of a $theme-* setting; raises selector specificity or changes the source order of built CSS.
          When failing on the second condition, name the file and line that triggered it. Do not classify design impact — say that the design-versus-code classification is the maintainers' call.
          Pass for documentation-only changes.
      - mode: warning
        name: No new runtime dependency
        instructions: |-
          Pass when the "dependencies" field of package.json is unchanged.
          Fail when the PR adds an entry under "dependencies" without the PR description filling in the Dependency updates table and stating why the package must ship to consumers. Name the package.
          Also fail when a new import in production JavaScript under packages/**/src/**/*.js resolves to a package absent from package.json, which means it relies on a transitive dependency. Exclude files under **/test/**, *.spec.js, and *.stories.js.
          Ignore lockfile-only changes and devDependencies.
      - mode: warning
        name: Regression test targets the change
        instructions: |-
          Applies when the PR fixes a bug or changes behavior in production JavaScript under packages/**/src/**/*.js or in packages/**/*.scss. Exclude files under **/test/**, *.spec.js, and *.stories.js from the production JavaScript scope.
          Pass when the diff adds or modifies a Mocha *.spec.js or a sass-true test that exercises the specific code path this PR changes, and whose assertions would not hold on develop.
          Fail when there is no test, when the added test asserts only behavior that already existed on develop, or when new `@if/`@else branching on a $theme-* setting has no sass-true coverage. Name the untested path.
          Pass for documentation-only, workflow-only, dependency-only, and Storybook-story-only changes.
      - mode: warning
        name: New API surface follow-ups
        instructions: |-
          Applies when the diff adds a $theme-* setting, a public Sass mixin or function forwarded through uswds-core, a data-* attribute constant, or a .usa-* class or modifier.
          Pass when all of the following are present: SASSDoc on new mixins and functions; a `@warn` fallback for unrecognized setting values; an entry in packages/uswds-core/src/styles/_notifications.scss; and a Related pull requests section naming a uswds-site companion PR or stating that one is still needed.
          Fail listing only the missing items, and say this is a release checklist rather than a code defect.
      - mode: warning
        name: Accessibility verification declared
        instructions: |-
          Applies when the diff changes ARIA attributes, focus management, keyboard handling, screen reader text, or form error association.
          Pass when the description names the assistive technology and browser combinations that were tested and what was verified, per the author's checklist in the PR template.
          Fail when that matrix is missing, and list the scenarios that need coverage. Never state whether the announcement behavior is correct — that verdict requires hands-on AT and belongs to an accessibility specialist.
      - mode: warning
        name: Theme token discipline
        instructions: |-
          Applies to *.scss under packages/.
          Fail when a literal replaces a call to color(), units(), family(), font-size(), spacing(), radius() or measure(), or when a new declaration hardcodes a hex color, a px or rem length, or a font family where the same file uses a token function for that property. Name the token that should be used instead.
          Pass when every new value comes from a token function.
  # Source: defaults
  post_merge_actions: []
  tools:
    ast-grep:
      # Source: defaults
      enabled: true
      # Source: defaults
      rule_dirs: []
      # Source: defaults
      util_dirs: []
      # Source: defaults
      essential_rules: true
      # Source: defaults
      packages: []
    shellcheck:
      # Source: defaults
      enabled: true
    ruff:
      # Source: defaults
      enabled: true
    markdownlint:
      # Source: Repository UI (base)
      enabled: false
    github-checks:
      # Source: defaults
      enabled: true
    languagetool:
      # Source: Repository UI (base)
      enabled: false
      # Source: defaults
      enabled_rules: []
      # Source: defaults
      disabled_rules: []
      # Source: defaults
      enabled_categories: []
      # Source: defaults
      disabled_categories: []
      # Source: defaults
      enabled_only: false
      # Source: defaults
      level: default
    biome:
      # Source: Repository UI (base)
      enabled: false
    hadolint:
      # Source: defaults
      enabled: true
    swiftlint:
      # Source: defaults
      enabled: true
    phpstan:
      # Source: defaults
      enabled: true
      # Source: defaults
      level: default
    phpmd:
      # Source: defaults
      enabled: true
    phpcs:
      # Source: defaults
      enabled: true
    golangci-lint:
      # Source: defaults
      enabled: true
    yamllint:
      # Source: Repository UI (base)
      enabled: false
    gitleaks:
      # Source: Repository UI (base)
      enabled: true
    trufflehog:
      # Source: defaults
      enabled: true
    checkov:
      # Source: defaults
      enabled: true
    tflint:
      # Source: defaults
      enabled: true
    detekt:
      # Source: defaults
      enabled: true
    eslint:
      # Source: Repository UI (base)
      enabled: true
      # Source: Repository UI (base)
      config_file: eslint.config.mjs
      e18e:
        # Source: defaults
        enabled: true
    flake8:
      # Source: defaults
      enabled: true
    fbinfer:
      # Source: defaults
      enabled: true
      # Source: defaults
      enable_java: false
    fortitudeLint:
      # Source: defaults
      enabled: true
    rubocop:
      # Source: defaults
      enabled: true
    buf:
      # Source: defaults
      enabled: true
    regal:
      # Source: defaults
      enabled: true
    actionlint:
      # Source: Repository UI (base)
      enabled: true
    zizmor:
      # Source: Repository UI (base)
      enabled: true
    pmd:
      # Source: defaults
      enabled: true
    clang:
      # Source: defaults
      enabled: true
    cppcheck:
      # Source: defaults
      enabled: true
    vale:
      # Source: defaults
      enabled: true
    verilator:
      # Source: defaults
      enabled: true
    opengrep:
      # Source: Repository UI (base)
      enabled: false
    semgrep:
      # Source: Repository UI (base)
      enabled: false
    circleci:
      # Source: Repository UI (base)
      enabled: true
    clippy:
      # Source: defaults
      enabled: true
    sqlfluff:
      # Source: defaults
      enabled: true
    squawk:
      # Source: defaults
      enabled: true
    trivy:
      # Source: defaults
      enabled: true
    prismaLint:
      # Source: defaults
      enabled: true
    pylint:
      # Source: defaults
      enabled: true
    oxc:
      # Source: Repository UI (base)
      enabled: false
    shopifyThemeCheck:
      # Source: defaults
      enabled: true
    luacheck:
      # Source: defaults
      enabled: true
    brakeman:
      # Source: defaults
      enabled: true
    dotenvLint:
      # Source: defaults
      enabled: true
    htmlhint:
      # Source: Repository UI (base)
      enabled: false
    stylelint:
      # Source: Repository UI (base)
      enabled: true
    checkmake:
      # Source: defaults
      enabled: true
    osvScanner:
      # Source: defaults
      enabled: true
    oasdiff:
      # Source: defaults
      enabled: true
    reactDoctor:
      # Source: defaults
      enabled: true
    presidio:
      # Source: defaults
      enabled: true
    blinter:
      # Source: defaults
      enabled: true
    smartyLint:
      # Source: defaults
      enabled: true
    emberTemplateLint:
      # Source: defaults
      enabled: true
    skillspector:
      # Source: defaults
      enabled: true
    psscriptanalyzer:
      # Source: defaults
      enabled: true
chat:
  # Source: Repository UI (base)
  art: false
  # Source: Repository UI (base)
  allow_non_org_members: true
  # Source: Repository UI (base)
  auto_reply: false
  integrations:
    jira:
      # Source: defaults
      usage: auto
      # Source: defaults
      issue_template: ''
    linear:
      # Source: defaults
      usage: auto
knowledge_base:
  # Source: defaults
  opt_out: false
  web_search:
    # Source: defaults
    enabled: true
  code_guidelines:
    # Source: Repository UI (base)
    enabled: true
    # Source: Repository UI (base)
    filePatterns:
      - files: .agents/skills/uswds-code-review/references/uswds-anchors.md
        applyTo: packages/**,src/**,tasks/**
      - files: .agents/skills/uswds-accessibility/SKILL.md
        applyTo: packages/**/*.js,packages/**/*.twig,packages/**/*.scss
  learnings:
    # Source: Repository UI (base)
    scope: local
    # Source: defaults
    approval_delay: 0
  issues:
    # Source: Repository UI (base)
    scope: local
  jira:
    # Source: defaults
    usage: auto
    # Source: defaults
    project_keys: []
    # Source: defaults
    excluded_project_keys: []
  linear:
    # Source: defaults
    usage: auto
    # Source: defaults
    team_keys: []
  pull_requests:
    # Source: Repository UI (base)
    scope: local
  mcp:
    # Source: defaults
    usage: auto
    # Source: defaults
    disabled_servers: []
  # Source: defaults
  automatic_linking_mode: disabled
  # Source: defaults
  automatic_repository_linking: false
  # Source: defaults
  linked_repositories: []
code_generation:
  docstrings:
    # Source: defaults
    language: en-US
    # Source: defaults
    path_instructions: []
  unit_tests:
    # Source: defaults
    path_instructions: []
issue_enrichment:
  auto_enrich:
    # Source: defaults
    enabled: false
  planning:
    # Source: defaults
    enabled: true
    auto_planning:
      # Source: defaults
      enabled: true
      # Source: defaults
      labels: []
  labeling:
    # Source: defaults
    labeling_instructions: []
    # Source: defaults
    auto_apply_labels: false