Bump @phcdevworks/spectre-tokens from 4.3.0 to 4.5.0

[dependabot]

Bumps @phcdevworks/spectre-tokens from 4.3.0 to 4.5.0.

Release notes

Sourced from @​phcdevworks/spectre-tokens's releases.

Inset Shadow Scale

Contract change type: additive

Added

• shadows.inset scale (sm/md/lg/xl/2xl), generating --sp-shadow-inset-* CSS variables. Each step is a composed two-layer box-shadow value — a top-edge and a bottom-edge inset shadow sharing the corresponding outer shadows.* step's offset, blur, and negative spread — for section bands that need to feather both edges without the consumer hand-matching offset/blur/spread per edge. Requested by spectre-base's downstream child-theme integration (filed 2026-08-07, re-audited 2026-08-19), tracked in this repo's TODO.md under "Requested by Downstream". These values are left as DTCG $type: "string" (see TOKEN_CONTRACT.md "Unsupported Source Shapes") since the leading inset keyword doesn't fit the structured shadow $type parser.

Changed

• Updated the test runner from 4.1.10 to 4.1.11 and refreshed compatible transitive development dependencies in package-lock.json.

Standalone Tracking Scale

Contract change type: additive

Added

• Added the public tracking primitive namespace with seven standalone letter-spacing steps and matching --sp-tracking-* CSS variables.
• Added exhaustive JS, DTCG, and CSS parity coverage for the new namespace.

Changed

• Refreshed compatible transitive development dependencies.

Changelog

Sourced from @​phcdevworks/spectre-tokens's changelog.

[4.5.0] - 2026-08-19

Release Title: Inset Shadow Scale

Contract change type: additive

Added

• shadows.inset scale (sm/md/lg/xl/2xl), generating --sp-shadow-inset-* CSS variables. Each step is a composed two-layer box-shadow value — a top-edge and a bottom-edge inset shadow sharing the corresponding outer shadows.* step's offset, blur, and negative spread — for section bands that need to feather both edges without the consumer hand-matching offset/blur/spread per edge. Requested by spectre-base's downstream child-theme integration (filed 2026-08-07, re-audited 2026-08-19), tracked in this repo's TODO.md under "Requested by Downstream". These values are left as DTCG $type: "string" (see TOKEN_CONTRACT.md "Unsupported Source Shapes") since the leading inset keyword doesn't fit the structured shadow $type parser.

Changed

• Updated the test runner from 4.1.10 to 4.1.11 and refreshed compatible transitive development dependencies in package-lock.json.

[4.4.0] - 2026-08-18

Release Title: Standalone Tracking Scale

Contract change type: additive

Added

• tracking primitive namespace (tightest/tighter/tight/normal/ wide/wider/widest, -0.075em through 0.1em), generating --sp-tracking-* CSS variables. Confirmed downstream need from a production consumer (2026-08-15, tracked in spectre-ui's TODO.md): brand display type sets tight negative tracking (around -0.07em) distinct per heading level, and the only existing letter-spacing tokens are bundled per font-size step (font.{step}.letterSpacing, typography.heading.h{n}.letterSpacing), with no standalone scale a utility class or recipe option could point to independent of size. This is a generic step scale, not the consumer's exact brand value — unblocks spectre-ui adding standalone sp-tracking-* utilities.

Changed

• Refreshed compatible transitive development dependencies in package-lock.json.

Commits

• dfeec65 feat: release inset shadow scale
• 77bd986 feat: release standalone tracking scale
• 2f6f67a chore: refresh development dependencies
• e071129 chore: allow companywide workspace access
• 576ac90 chore: deny all Claude git commands
• a9b6371 docs: align release title mechanics
• d0550cd docs: keep shared git policy in agents guide
• 5f1b246 docs: require direct commits to main
• f06d161 docs: clarify git handoff policy
• 67c4969 chore: refresh development dependencies
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)