build(deps-dev): bump oxfmt to 0.71.0

[claude]

Requested by David Babenko-Sanders · Slack thread

Bumps oxfmt from 0.44.0 to 0.71.0, the newest release that clears the 7-day yarn age gate. No files needed reformatting.

🤖 Generated with Claude Code

https://claude.ai/code/session_01HGH7qvg6KN4YWnCMqMeQR5

---

Generated by Claude Code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	oxfmt@​0.44.0 ⏵ 0.71.0	+8			+1

View full report

[claude]

Looks good, straightforward devDependency version bump.

What was reviewed: package.json/yarn.lock diff for the oxfmt ^0.44.0 → ^0.71.0 bump — confirmed it's a formatter-only devDependency with no app code changes; checked the lockfile updates are consistent (binary packages, tinypool transitive bump, new optional peerDependencies declared by oxfmt itself).

Extended reasoning...

The change only touches package.json and yarn.lock, bumping the oxfmt devDependency and its transitive binary packages/tinypool; no application code, build scripts, or runtime dependencies are affected. oxfmt is a dev-only code formatter with no security-sensitive surface (no auth, crypto, or network/permission code involved). The diff is mechanical and matches the lockfile's expected regeneration pattern, so a human reviewer does not need to weigh in.