chore(deps-dev): bump clean-publish from 6.0.1 to 7.0.1

[dependabot]

Bumps clean-publish from 6.0.1 to 7.0.1.

Release notes

Sourced from clean-publish's releases.

7.0.1

• Fixed npm package size regression.

7.0.0

• Added pnpm-workspace.yaml to ignore files.
• Removed Node.js 20 support.

6.0.5

• Ignore oxfmt and oxlint configs.

6.0.4

• Ignore .prettierignore file.

6.0.3

• Added pnpm to ignore package.json fields.

6.0.2

• Ignore .claude folder.

Changelog

Sourced from clean-publish's changelog.

7.0.1

• Fixed npm package size regression.

7.0.0

• Added pnpm-workspace.yaml to ignore files.
• Removed Node.js 20 support.

6.0.5

• Ignore oxfmt and oxlint configs.

6.0.4

• Ignore .prettierignore file.

6.0.3

• Added pnpm to ignore package.json fields.

6.0.2

• Ignore .claude folder.

Commits

• f9b4c74 Release 7.0.1 version
• 6d94c70 Fix CI
• 6dbc75b Release 7.0.0 version
• 2c3e454 Remove Node.js 20 support
• ada140e Move from ESLint/Prettier to oxlint/oxfmt
• 302c2db Update dependencies
• 62c5e6b Merge pull request #167 from shashkovdanil/dependabot/npm_and_yarn/dompurify-...
• 3fc38e2 Bump dompurify from 3.3.3 to 3.4.1
• af2f9b7 Move to pnpm 11
• 538684b Add pnpm-workspace.yaml
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[update-docs]

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

[DeepDiver1975]

Reviewed as maintainer — dev-dependency major bump (clean-publish 6.0.1 → 7.0.1).

Dependency assessment: Low runtime risk. clean-publish is a publish-time cleanup tool used only to strip dev-only fields/files before npm publish; it has no effect on the shipped runtime code. The 7.0.0 breaking change ("Removed Node.js 20 support") does not affect this repo — the root package.json already requires node >=24.15.0. The remaining 6.x/7.x changes are just additional default ignore patterns (pnpm-workspace.yaml, .claude, oxlint/oxfmt configs, .prettierignore), which are harmless and generally desirable for the publish flow. No clean-publish config in this repo relies on options changed by the bump.

Blocking issues (not approving):

• Branch is conflicting (mergeStateStatus: DIRTY) — needs a rebase. Please run @dependabot rebase.
• Required build check is failing and check-tests-passed is failing; e2e is skipped as a consequence.

The dependency change itself is fine, but the PR cannot be merged while it conflicts and CI is red. Once rebased and green, this is a safe merge.

Changelog: dev-dependency bump → no changelog entry required (n/a).