build(deps-dev): bump cspell from 8.15.1 to 8.15.2 (#2766)

Bumps [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) from 8.15.1 to 8.15.2.
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v8.15.2/packages/cspell)

---
updated-dependencies:
- dependency-name: cspell
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/npm-publish.yml

@@ -15,7 +15,7 @@ jobs:
             - uses: actions/setup-node@v4
               with:
                   node-version: "20.x"
-            - run: npm ci
+            - run: npm ci --force
             - run: npm run cspell
             - run: npm run prettier
             - run: npm run lint
@@ -28,7 +28,7 @@ jobs:
             - uses: actions/setup-node@v4
               with:
                   node-version: "20.x"
-            - run: npm ci
+            - run: npm ci --force
             - run: npm run build
 
     publish-npm:
@@ -40,7 +40,7 @@ jobs:
               with:
                   node-version: "20.x"
                   registry-url: https://registry.npmjs.org/
-            - run: npm ci
+            - run: npm ci --force
             - run: npm publish
               env:
                   NODE_AUTH_TOKEN: ${{secrets.npm_token}}

SECURITY.md

@@ -0,0 +1,24 @@
+# Security Policy
+
+## Supported Versions
+
+Use this section to tell people about which versions of your project are
+currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 9.0.x   | :white_check_mark: |
+
+## Reporting a Vulnerability
+
+We encourage responsible disclosure of security vulnerabilities. If you believe you have found a security vulnerability in this project, please report it via the [Security Tab](https://github.com/dolanmiu/docx/security/advisories)
+
+Please include the following information in your report:
+
+* A description of the vulnerability
+* Steps to reproduce the vulnerability
+* Impact of the vulnerability
+
+We will investigate all reported vulnerabilities and take appropriate action.
+
+We appreciate your help in keeping this project secure.

package.json

@@ -1,6 +1,6 @@
 {
     "name": "docx",
-    "version": "9.0.1",
+    "version": "9.0.2",
     "description": "Easily generate .docx files with JS/TS with a nice declarative API. Works for Node and on the Browser.",
     "type": "module",
     "main": "build/index.umd.js",
@@ -75,7 +75,7 @@
         "@typescript-eslint/eslint-plugin": "^7.0.0",
         "@typescript-eslint/parser": "^8.8.1",
         "@vitest/coverage-v8": "^1.1.0",
-        "@vitest/ui": "^1.1.0",
+        "@vitest/ui": "^2.1.2",
         "cspell": "^8.2.3",
         "docsify-cli": "^4.3.0",
         "eslint": "^8.23.0",
@@ -84,22 +84,22 @@
         "eslint-plugin-jsdoc": "^50.3.1",
         "eslint-plugin-no-null": "^1.0.2",
         "eslint-plugin-prefer-arrow": "^1.2.3",
-        "eslint-plugin-unicorn": "^50.0.1",
+        "eslint-plugin-unicorn": "^56.0.0",
         "execa": "^8.0.1",
-        "glob": "^10.2.7",
+        "glob": "^11.0.0",
         "inquirer": "^9.2.7",
-        "jsdom": "^24.0.0",
+        "jsdom": "^25.0.1",
         "pre-commit": "^1.2.2",
         "prettier": "^3.1.1",
         "tsconfig-paths": "^4.0.0",
         "tsx": "^4.7.0",
         "typedoc": "^0.25.4",
         "typescript": "5.3.3",
-        "unzipper": "^0.10.11",
+        "unzipper": "^0.12.3",
         "vite": "^5.0.10",
-        "vite-plugin-dts": "^3.3.1",
+        "vite-plugin-dts": "^4.2.4",
         "vite-plugin-node-polyfills": "^0.19.0",
-        "vite-tsconfig-paths": "^4.2.0",
+        "vite-tsconfig-paths": "^5.0.1",
         "vitest": "^1.1.0"
     },
     "engines": {