deno_ast

0.8.5 -> 0.8.6, fixes unsoundness where could hand out aliased mutable references when a custom logger accessing triggers a reseed during trace/warn-level logging (GHSA-cq8v-f236-94qc, low) 1.10.1 -> 1.11.1, fixes an integer overflow in that could corrupt the tracked capacity and lead to out-of-bounds slices in release builds (GHSA-434x-w66g-qw3r, medium) Both are transitive dependencies pulled in through swc crates; only changes.

Small CI hardening: declares an explicit workflow-level on 2 workflow(s) that currently inherit the default broad read-write GITHUB_TOKEN. I inspected each file before including it; none publish, push, comment on issues/PRs, or otherwise write via the GitHub API, so the read-only default does not change behavior. Workflows that need to write (stale, release, gh-pages-deploy, publish actions, etc.) are intentionally left out of this PR. This is the post-CVE-2025-30066 hardening pattern for default token scope.

Problem When a diagnostic's highlighted span covers many lines, renders every line of the span with a full-width underline. For a rule like on a large executor body this produces snippets that are dozens of lines long, with carets running edge-to-edge under each line (including the leading indentation). Before (a 12-line executor): Change Rework so multi-line highlights render like / Biome: Frame cap + elision — spans longer than (5) source lines show their first two lines, a marker, and their last two lines. Carets on the endpoints only — only the first and last line of a multi-line span are underlined; interior lines are shown for context without carets. Indentation-aware underline — the last line's underline skips leading indentation so the carets sit under the offending code, not the whitespace. Gutter marker — a is drawn next to each line number that is part of a multi-line span so its extent stays visible. The marker column is only reserved when a multi-line highlight is present, so single-line diagnostics are byte-for-byte unchanged. After: Tests Adds unit tests for covering single-line, elided multi-line, short (non-elided) multi-line, and description-on-last-line rendering. Existing tests pass, and Deno's spec suite (82 tests) passes against a local build patched with this change.