Bump bpmn-js from 18.7.0 to 18.8.0

[dependabot]

Bumps bpmn-js from 18.7.0 to 18.8.0.

Release notes

Sourced from bpmn-js's releases.

v18.8.0

• chore(CHANGELOG): update to v18.8.0 8f05ce41
• chore: update actions/setup-node action to v6 ec9aa3b5
• chore: update github/codeql-action action to v4 5ee509a2
• feat: copy isCollection property of data objects 55d11eaf
• feat: allow copying data object references 108bdf88

---

bpmn-io/bpmn-js@v18.7.0...v18.8.0

Changelog

Sourced from bpmn-js's changelog.

18.8.0

• FEAT: allow copying data object references and isCollection property (#2348)

Commits

• b599735 18.8.0
• 8f05ce4 chore(CHANGELOG): update to v18.8.0
• ec9aa3b chore: update actions/setup-node action to v6
• 5ee509a chore: update github/codeql-action action to v4
• 55d11ea feat: copy isCollection property of data objects
• 108bdf8 feat: allow copying data object references
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[github-actions]

🚀 Deployment Status: Building 🔵

🔗 Quick Actions:

• 📊 Watch build progress
• 🔄 Restart build

---

📝 Recent Change Summary

Latest commit: b4e09f9 - Bump bpmn-js from 18.7.0 to 18.8.0
Build started: 2025-10-27 06:51:41 UTC

---

📊 Overall Progress

Branch: dependabot/npm_and_yarn/bpmn-js-18.8.0
Status: 🔵 Building in progress
Preview URL (after completion): https://litlfred.github.io/sgex/dependabot-npm_and_yarn-bpmn-js-18.8.0/

---

💡 Build started for commit b4e09f9. Will update when complete.

[github-actions]

🚀 Deployment Status: Successfully Deployed 🟢

📊 Deployment Information

Workflow: Deploy Feature Branch (🔀 Pull Request)
Action ID: 18832389908
Commit: ccdcd4c (view changes)
Workflow Step: Successfully Deployed

🌐 Preview URLs

🔗 Quick Actions

📦 Build Artifacts Status

Artifact	Status	Description	Type
workflow-event-log	🟢 Available	GitHub event metadata with links	.log
build-logs	🟢 Available	Complete timestamped build output	.txt
webpack-stats	🟢 Available	Webpack compilation statistics	.json
bundle-report	🟢 Available	Bundle size analysis and recommendations	.txt
build-step-log	🟢 Available	Build step console output	.log
bundle-analysis-step-log	🟢 Available	Bundle analysis console output	.log

🟢 All artifacts available! Click artifact names above or visit workflow artifacts section.

How to download:

1. Click any artifact name in the table above
2. Or visit the workflow run page and scroll to "Artifacts"
3. Each artifact contains a single log file (no zip extraction needed)

---

📊 Overall Progress

Branch: dependabot/npm_and_yarn/bpmn-js-18.8.0
Status: 🟢 Live and accessible
Status: Deployment complete - site is ready for testing

---

📋 Deployment Timeline

• 2025-10-27 06:51:34 UTC - 🟢 Build Started - Initializing
• 2025-10-27 06:51:56 UTC - 🟢 Environment Setup Complete - In progress
• 2025-10-27 06:51:57 UTC - 🟢 Building Application - In progress
• 2025-10-27 06:53:25 UTC - 🟢 Deploying to GitHub Pages - In progress
• 2025-10-27 06:53:32 UTC - 🟢 Verifying Deployment - In progress
• 2025-10-27 06:58:34 UTC - 🟢 Successfully Deployed - Site is live

---

💡 This comment is automatically updated as the deployment progresses.

[github-actions]

🔍 Framework Compliance Report

Generated: 2025-10-27 06:51:38 UTC
Status: Action Required

📊 Summary

Status	Count	Percentage
🟢 Compliant	2/22	9%
🟠 Partial	20/22	91%
🔴 Non-compliant	0/22	0%

📦 Nested Layouts (4 components)

• 🟠 QuestionnaireEditor (5 layouts)
• 🟠 ActorEditor (3 layouts)
• 🟠 DocumentationViewer (3 layouts)
• 🟠 PagesManager (2 layouts)

---

⚠️ Recommendations

Consider addressing partial compliance issues to improve code quality.

📚 Resources:

• Page Framework Documentation
• View Full Workflow Logs

💡 This comment is automatically updated when compliance checks run.

[github-actions]

🔒 Dependency Security Check Results

✅ **No vulnerabilities found!**

All dependencies have been scanned and no security vulnerabilities were detected.

```
found 0 vulnerabilities
```

---

### ✅ Security Status: CLEAN
Your changes maintain the security posture of the project. Great job! 🎉

[github-actions]

🔒 Security Check Report

🟢 5 passed • 🟡 2 warnings

Security Checks

Check	Status	Details
NPM Audit	🟢	No vulnerabilities found
Outdated Dependencies	🟡	7 outdated packages (1 major versions behind)
ESLint Security	🟢	No security-related linting issues
Security Headers	🟡	Some security headers missing in source
License Compliance	🟢	No problematic licenses detected
Secret Scanning	🟢	No potential secrets detected in code
Framework Compliance	🟢	Framework compliance checks passed

🔍 Action Items

⚠️ Outdated Dependencies - 7 outdated packages (1 major versions behind)

Details:
Major version updates needed for:

• react-syntax-highlighter

Recommendation: Review outdated packages and update where possible

⚠️ Security Headers - Some security headers missing in source

Details:

Recommendation: Ensure all security headers are properly defined

---

⚠️ Security Status: WARNINGS

Some security warnings were detected. Please review the action items above.

Last checked: Mon, 27 Oct 2025 06:51:51 GMT

---

This security check is automatically run on every PR build. Learn more about our security checks