chore(deps): bump the frontend group across 1 directory with 3 updates

[dependabot]

Bumps the frontend group with 3 updates in the / directory: @defra/interactive-map, govuk-frontend and liquidjs.

Updates @defra/interactive-map from 0.0.22-alpha to 0.0.23-alpha

Release notes

Sourced from @​defra/interactive-map's releases.

v0.0.23-alpha

What's Changed

• ReverseGeocode check fix by @​dannyleech in DEFRA/interactive-map#235
• Labels additions by @​dannyleech in DEFRA/interactive-map#238
• Keyboard listbox by @​dannyleech in DEFRA/interactive-map#239
• Focus fixes to button and panels by @​dannyleech in DEFRA/interactive-map#240
• Calls setWorkerUrl instead of constructor prop fix by @​dannyleech in DEFRA/interactive-map#242
• Rename registerPatterns/registerSymbols as addPatterns/Symbols to map by @​markfee in DEFRA/interactive-map#244
• Moved the patternRegistry helper methods into patternRegistry by @​markfee in DEFRA/interactive-map#248
• Interact plugin contiguous prop removed by @​dannyleech in DEFRA/interactive-map#249
• Moved the symbolRegistry helpers into symbolRegistry by @​markfee in DEFRA/interactive-map#251
• Dependency updates centred around v0.0.20 of theme by @​alexluckett in DEFRA/interactive-map#257
• Pixel ratio is set in one place only by @​markfee in DEFRA/interactive-map#255
• Use theme v0.0.22 by @​alexluckett in DEFRA/interactive-map#260
• Selected state on style change fix by @​dannyleech in DEFRA/interactive-map#259
• Hints feature added by @​dannyleech in DEFRA/interactive-map#262

Full Changelog: DEFRA/interactive-map@v0.0.22-alpha...v0.0.23-alpha

Commits

• 6937ad5 Feature/hint (#262)
• 564d226 Selected state on style chnage fix (#259)
• 54f1cf0 Merge pull request #260 from DEFRA/update-theme-v0.0.22
• ad1b7bd Use theme v0.0.22
• 387b7fb IM-247 pixelRatio is set in one place only (#255)
• f7b3f5c Merge pull request #257 from DEFRA/docs/update-theme-v20
• 07f2424 Move packages into devDependencies
• 4222668 Update docs theme to v0.0.20 with CSS fixes
• f498750 IM-253 moved back addSymbolToMap
• 96c0b82 IM-246 - moved the symbolRegistry helpers into symbolRegistry (#251)
• Additional commits viewable in compare view

Updates govuk-frontend from 5.14.0 to 6.1.0

Release notes

Sourced from govuk-frontend's releases.

GOV.UK Frontend v6.1.0

To install this version with npm, run npm install govuk-frontend@6.1.0. You can also find more information about how to stay up to date in our documentation.

New features

Use Sass functions to configure asset URLs

You can now use Sass functions from meta.get-function in addition to strings to configure:

• $govuk-image-url-function
• $govuk-font-url-function

This will allow the variables to be configured when loading GOV.UK Frontend as a module once we support @use and @forward.

We made this change in [pull request #6767: Use Sass functions to configure asset URLs](alphagov/govuk-frontend#6767).

Recommended changes

Use <COMPONENT_NAME>/_index.scss to import individual components

We've deprecated each component's _<COMPONENT_NAME>.scss files, which let you import an individual component’s CSS using a single Sass import. We'll remove the _<COMPONENT_NAME>.scss files in the next major release.

If you were using the _<COMPONENT_NAME>.scss files, use the component's _index.scss file instead. For example:

// Previously
@import "govuk/components/button/button";
// Now
@​import "govuk/components/button";

We made this change in [pull request #6761: Deprecate _<COMPONENT_NAME>.scss files](alphagov/govuk-frontend#6761).

Use color: govuk-functional-colour(text) to set the text colour

We've updated how the text colour changes to pure black when printing.

Previously, an additional print media query was included every time you used @include govuk-text-colour:

.my-element {
  color: var(--govuk-text-colour, #0b0c0c);
}
@​media print {
.my-element {
color: var(--govuk-print-text-colour, #000);
}
</tr></table>

... (truncated)

Changelog

Sourced from govuk-frontend's changelog.

v6.1.0 (Feature release)

To install this version with npm, run npm install govuk-frontend@6.1.0. You can also find more information about how to stay up to date in our documentation.

New features

Use Sass functions to configure asset URLs

You can now use Sass functions from meta.get-function as well as strings to configure:

• $govuk-image-url-function
• $govuk-font-url-function

This will allow the variables to be configured when loading GOV.UK Frontend as a module once we support @use and @forward.

We made this change in [pull request #6767: Use Sass functions to configure asset URLs](alphagov/govuk-frontend#6767).

Recommended changes

Use <COMPONENT_NAME>/_index.scss to import individual components

We've deprecated each component's _<COMPONENT_NAME>.scss files, which let you import an individual component’s CSS using a single Sass import. We'll remove the _<COMPONENT_NAME>.scss files in the next major release.

If you were using the _<COMPONENT_NAME>.scss files, use the component's _index.scss file instead. For example:

// Previously
@import "govuk/components/button/button";
// Now
@​import "govuk/components/button";

We made this change in [pull request #6761: Deprecate _<COMPONENT_NAME>.scss files](alphagov/govuk-frontend#6761).

Use color: govuk-functional-colour(text) to set the text colour

We've updated how the text colour changes to pure black when printing.

Previously, an additional print media query was included every time you used @include govuk-text-colour:

.my-element {
  color: var(--govuk-text-colour, #0b0c0c);
}
@​media print {
.my-element {
color: var(--govuk-print-text-colour, #000);
}
</tr></table>

... (truncated)

Commits

• 7221035 Release 6.1.0
• f0ef301 Bump the postcss group with 2 updates
• b4df849 Merge pull request #6805 from alphagov/dependabot/npm_and_yarn/govuk-prototyp...
• 087180d Bump puppeteer from 24.37.3 to 24.37.5 in the test group
• 9efe80c Bump govuk-prototype-kit from 13.18.1 to 13.19.0
• 83b5b87 Bump the babel group with 2 updates
• 3a24037 Use focus-text colour for text link focus state
• de10615 Merge pull request #6427 from alphagov/print-text-through-custom-properties
• 8ac4b45 Deprecate the govuk-text-colour mixin
• 8a68684 Use color: govuk-functional-colour(text) instead of the govuk-text-colour...
• Additional commits viewable in compare view

Updates liquidjs from 10.25.7 to 10.27.0

Release notes

Sourced from liquidjs's releases.

v10.27.0

10.27.0 (2026-05-15)

Features

• context: null-prototype scope frames via createScope (#899) (47d3f1b)

v10.26.0

10.26.0 (2026-05-14)

Bug Fixes

• date: cap strftime widths and account padding in memoryLimit (#895) (3129d46)
• enforce renderLimit for empty renderTemplates calls (#894) (5b9c346)
• propagate ownPropertyOnly into Context.spawn() for {% render %} (#893) (dbbf628)
• security: block Object.prototype filter/tag lookups (RCE) (#897) (457fae0)
• strip html newline tags (#892) (26ea285)
• strip_html: rewrite as linear single-pass scan to avoid ReDoS (#896) (3616a74)

Features

• add sha256 and hmac_sha256 filters for cryptographic operations (#889) (1c816d4)

Changelog

Sourced from liquidjs's changelog.

10.27.0 (2026-05-15)

Features

• context: null-prototype scope frames via createScope (#899) (47d3f1b)

10.26.0 (2026-05-14)

Bug Fixes

• date: cap strftime widths and account padding in memoryLimit (#895) (3129d46)
• enforce renderLimit for empty renderTemplates calls (#894) (5b9c346)
• propagate ownPropertyOnly into Context.spawn() for {% render %} (#893) (dbbf628)
• security: block Object.prototype filter/tag lookups (RCE) (#897) (457fae0)
• strip html newline tags (#892) (26ea285)
• strip_html: rewrite as linear single-pass scan to avoid ReDoS (#896) (3616a74)

Features

• add sha256 and hmac_sha256 filters for cryptographic operations (#889) (1c816d4)

Commits

• a8fd734 chore(release): 10.27.0 [skip ci]
• 47d3f1b feat(context): null-prototype scope frames via createScope (#899)
• c20c0af chore(release): 10.26.0 [skip ci]
• 457fae0 fix(security): block Object.prototype filter/tag lookups (RCE) (#897)
• 3616a74 fix(strip_html): rewrite as linear single-pass scan to avoid ReDoS (#896)
• 3129d46 fix(date): cap strftime widths and account padding in memoryLimit (#895)
• 5b9c346 fix: enforce renderLimit for empty renderTemplates calls (#894)
• dbbf628 fix: propagate ownPropertyOnly into Context.spawn() for {% render %} (#893)
• 26ea285 fix: strip html newline tags (#892)
• a55f543 docs(readme): add Freshet to Who's Using LiquidJS (#888)
• Additional commits viewable in compare view