chore(deps): bump human-format from 1.2.1 to 1.4.0

[dependabot]

Bumps human-format from 1.2.1 to 1.4.0.

Changelog

Sourced from human-format's changelog.

[1.4.0] - 2026-10-10

Added

• parse.bytes() parses byte sizes with SI (kB = 1000) or binary (KiB = 1024) prefixes in any case, e.g. 10mb, and rejects other units.
• SI prefixes adopted in 2022: R (ronna, 10²⁷), Q (quetta, 10³⁰), r (ronto, 10⁻²⁷) and q (quecto, 10⁻³⁰), e.g. 1e30 gives 1 Q instead of 1000000 Y.

Changed

• Formatting is about twice as fast: options are no longer copied on each call.

Fixed

• Options set to undefined use their default, e.g. { unit: undefined } gave 1 undefined. { maxDecimals: undefined } now rounds to 2 decimals instead of disabling rounding.
• maxDecimals: "auto" rounds once, e.g. 123456789 gives 123 M instead of 124 M.
• Infinities are formatted without prefix, e.g. Infinity instead of Infinity Y.
• Formatting throws for negative numbers given as strings ("-5"), like for any other string.

[1.3.0] - 2026-10-10

Added

• rounding option: "round" (default), "floor" or "ceil", e.g. to never display a value above the input (#46).

Fixed

• Works in ES5 environments without Number.isNaN (e.g. Internet Explorer).
• parse() reads exponent notation as part of the number (1e3 gave 1e18, e being exa), rejects digits after the prefix (1k5), and with the unit option, rejects any other unit (5 apples). The parsed unit no longer includes trailing spaces (#57).
• parse() avoids some floating point errors, e.g. 8.3M gives 8300000 instead of 8300000.000000001 (#29).
• decimals switches to the next prefix when rounding reaches it, e.g. 999999 gives 1 M instead of 1000 k (#56).
• parse() accepts an incorrectly cased prefix whose lowercase form is a prefix itself, e.g. 100K (#31).
• Types: index.d.ts no longer fails to compile without skipLibCheck (export = mixed with other exports).
• Types: without scale, prefixes are checked against the SI scale (binary for bytes()) instead of accepting any string.
• Types: Scale#parse() returns the scale's prefixes, or undefined when the string does not match.
• Types: parse.raw() takes an options object, like at runtime, instead of a strict boolean.

Commits

• 267daf9 1.4.0
• b65d64a feat: parse.bytes()
• eaf1fe2 feat: ronna and quetta SI prefixes
• ecad032 fix: format infinities without prefix
• 31a68d0 fix: round once with maxDecimals auto
• 17f4558 chore(README): add npm version and bundle size badges
• 4c762f5 chore(README): list features and options, fix tagline
• c655b8d fix: use defaults for options set to undefined
• 7c57393 fix: reject negative numbers given as strings
• f23c36c perf: read options without copying them
• Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)