chore(deps)(deps): bump @marcbachmann/cel-js from 7.6.1 to 8.0.0

[dependabot]

Bumps @marcbachmann/cel-js from 7.6.1 to 8.0.0.

Release notes

Sourced from @​marcbachmann/cel-js's releases.

v8.0.0

8.0.0 (2026-07-07)

Bug Fixes

• rename Evaluator.eval() to run() so cel-js can be bundled under SES (86cd972)

BREAKING CHANGES

• Custom macro registrations need to use evaluator.run instead of evaluator.eval.

SES's static "direct eval" check (used by MetaMask Snaps and other lockdown environments) rejects any bundle that contains a bare eval( token. The Evaluator's recursive node-evaluation method was named eval, so minified cel-js output gets rejected and the library can't be bundled into a snap.

Rename that method to run (definition + all internal call sites in operators/macros/optional, plus the README and index.d.ts examples). evaluate is already the public string-expression entry point (Environment.evaluate / the top-level evaluate()), so run avoids the clash.

Commits

• 86cd972 fix: rename Evaluator.eval() to run() so cel-js can be bundled under SES
• 19d1a99 chore(deps): update dependency globals from 17.6.0 to v17.7.0
• 2bff81f fix(deps): update dependency bench-node from 0.14.0 to ^0.15.0
• 0bbf424 chore(deps): update dependency globals from 17.5.0 to v17.6.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
spec	Ready	Preview, Comment	Jul 13, 2026 2:29am

[github-actions]

📓 Docs Drift Check

This PR changes 1 package(s): @objectstack/formula.

4 hand-written doc(s) reference the affected code and may need an implementation-accuracy re-verification:

• content/docs/data-modeling/formulas.mdx (via @objectstack/formula)
• content/docs/data-modeling/validation.mdx (via @objectstack/formula)
• content/docs/plugins/packages.mdx (via @objectstack/formula)
• content/docs/protocol/objectui/record-alert.mdx (via @objectstack/formula)

Advisory only. To re-verify, run the docs-accuracy-audit workflow scoped to these files:
node scripts/docs-audit/affected-docs.mjs origin/main → pass the list as args.docs.