chore(deps-dev): bump impeccable from 3.5.0 to 3.6.0

[dependabot]

Bumps impeccable from 3.5.0 to 3.6.0.

Release notes

Sourced from impeccable's releases.

Skill 3.6.0

• Project design hooks. /impeccable hooks installs and repairs a project-local detector hook for Claude, Codex, and Cursor. Claude and Codex get post-edit reminders, Cursor can block proposed writes before they land, and /impeccable hooks on now handles manifest setup and consent instead of leaving users to wire files by hand.

• Hook findings are actionable, not noisy. Hook runs track clean, pending, and fresh findings, cache duplicate reports, audit their own activity, and now frame detector output as findings requiring review: fix true issues, but use context judgment for intentional designs such as literal bounce motion. Narrow ignore flows through ignore-value, ignore-file, and ignore-rule keep confirmed exceptions out of source comments. Shared config lives in .impeccable/config.json, with local consent and overrides in .impeccable/config.local.json.

• Svelte-native Live Mode. Svelte and SvelteKit variants now preview as temporary framework components with params stored in params.json, then accept back into the selected source component. That keeps stateful pages closer to their real shape and avoids the HMR resets caused by string-injected previews.

• Manual and browser Live Mode got sturdier. Manual text edits have dedicated evidence, apply, and discard routes; Live Mode preserves insertion anchors and mapped-list accept cleanup; and the browser payload is split into DOM helpers, UI primitives, vocabulary, and manual-apply modules instead of one giant script.

• Detector accuracy improved across the bundled skill. Hidden and unrendered elements are skipped in browser rules, sr-only and visually hidden text no longer trips text-overflow, repeated kicker false positives are reduced in card and list contexts, oversized H1 detection now requires viewport dominance, clipped overflow distinguishes decorative viewports from escaping content, OKLCH alpha parses correctly, Sass files count as CSS-like detector inputs, transparent borders or shadows no longer trigger the GPT thin-border rule, and page-level numbered-marker checks no longer treat JS, TS, JSX, TSX, or CSS implementation literals as visible page copy.

CLI 3.6.0

• Contrast findings stop assuming white. Text over a gradient, over an image, or under something else was scored against an assumed white ground, which manufactured low-contrast findings on perfectly legible pages. The engine now measures the real gradient body ground, accounts for image-backed text and for elements occluded by what sits above them, and declines to guess at all when a background genuinely cannot be read.

• Waivers you can scope. data-impeccable-ignore silences the element that carries it rather than a whole rule across the file, and ignore-file honors the scope flags you pass it.

• Two more providers. Hermes Agent and Google Antigravity install like the rest.

• Fewer false positives elsewhere. Quoted transition values in JSX no longer read as layout transitions, documented sidecar shadow colors are allowed inside shadow contexts, and broken-image findings stop firing on commented-out source.

• Installs and scans that behave. Explicitly selected providers install without --force, the post-install next step points at your agent chat instead of the terminal, Windows installs skip the POSIX hook guard, Blade files turn up in directory scans, and a missing static-HTML parser dependency warns instead of quietly scanning nothing.

• Paths with quotes or spaces stop breaking commands. Four places built shell commands by wrapping values in double quotes, which is not shell quoting. They now quote properly.

• DESIGN.md frontmatter reads correctly. Quote escapes in YAML scalars are unescaped, so a design system carrying quoted values parses instead of losing them.

Commits

• 2c33196 Release: skill v4.1.0, CLI v3.6.0, extension v1.3.2 (#584)
• 103343d Sync generated provider output
• 19ed691 Merge pull request #583 from pbakaus/fix/build-path-consent-in-init
• 43f418a Merge pull request #582 from pbakaus/fix/build-path-flip-inspiration-stack
• ae56d71 Name the image-gen sources and the unanswered default
• 1f0169d Clear the render clock when a poll generation goes stale
• f2f1cdb Resolve every zoom target in one handler, and stamp each poll generation
• 2935d89 Sync generated provider output
• 940b272 Merge pull request #581 from pbakaus/fix/issue-580-svelte-variant-mount
• 83e8b46 Ask the build path as its own question, and record only a real answer
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)