build(deps): bump @casl/ability from 6.8.1 to 7.0.0

[dependabot]

Bumps @casl/ability from 6.8.1 to 7.0.0.

Release notes

Sourced from @​casl/ability's releases.

@​casl/ability: v7.0.0

7.0.0 (2026-05-21)

⚠ BREAKING CHANGES

• .possibleRulesFor and .rulesFor return readonly Rule[] type
• this function is unused in userland and mostly was needed to restore ForbiddenError state in tests
• renames PureAbility to Ability and dops default options. In order, to get the previous behavior of Ability class, clients are expected to use createMongoAbility and MongoAbility type
• Ability matching now treats conditions that semantically match everything the same as rules without conditions.
• rulesToQuery has been replaced with rulesToCondition

Bug Fixes

• defensive protection against undefined returned from rule conditions matcher (3f0ad4b)
• deps: upgrades @ucast/* to latest version (#1218) (22b00ff)
• ensure rules index cache is not polluted with not defined actions (#1228) (89c19ba)
• treats empty conditions object as matches all (#1198) (cedc463), closes #684
• ensure that rulesToQuery and rulesToAST generate condition that respect rule priority (#1193)

Code Refactoring

• removes getDefaultErrorMessage exported function as unneeded (#1206) (3f56353)
• renames PureAbility to Ability (#1205) (97beee4)

@​casl/ability: v7.0.0-rc

7.0.0-rc (2026-05-08)

⚠ BREAKING CHANGES

• this function is unused in userland and mostly was needed to restore ForbiddenError state in tests
• renames PureAbility to Ability and dops default options. In order, to get the previous behavior of Ability class, clients are expected to use createMongoAbility and MongoAbility type
• Ability matching now treats conditions that semantically match everything the same as rules without conditions.

Bug Fixes

• deps: upgrades @ucast/* to latest version (#1218) (22b00ff)
• treats empty conditions object as matches all (#1198) (cedc463), closes #684

Code Refactoring

• removes getDefaultErrorMessage exported function as unneeded (#1206) (3f56353)
• renames PureAbility to Ability (#1205) (97beee4)

Changelog

Sourced from @​casl/ability's changelog.

7.0.0 (2026-05-21)

⚠ BREAKING CHANGES

• .possibleRulesFor and .rulesFor return readonly Rule[] type
• getDefaultErrorMessage function is unused in userland and mostly was needed to restore ForbiddenError state in tests
• renames PureAbility to Ability and drops default options. In order, to get the previous behavior of Ability class, clients are expected to use createMongoAbility and MongoAbility type
• Ability matching now treats conditions that semantically match everything the same as rules without conditions.
• rulesToQuery has been replaced with rulesToCondition

Bug Fixes

• defensive protection against undefined returned from rule conditions matcher (3f0ad4b)
• deps: upgrades @ucast/* to latest version (#1218) (22b00ff)
• ensure rules index cache is not polluted with not defined actions (#1228) (89c19ba)
• treats empty conditions object as matches all (#1198) (cedc463), closes #684
• ensure that rulesToQuery and rulesToAST generate condition that respect rule priority (#1193)

Code Refactoring

• removes getDefaultErrorMessage exported function as unneeded (#1206) (3f56353)
• renames PureAbility to Ability (#1205) (97beee4)

Commits

• a4a4a1a chore: release master (#1199)
• 3f0ad4b fix: defensive protection against undefined returned from rule conditions mat...
• 89c19ba fix: ensure rules index cache is not polluted with not defined actions (#1228)
• b51b1b8 chore: allow next as publish branch
• d875352 chore: fixes release for casl-ability
• d49daa6 chore: specify dist tag in release script
• 569bc1e test: refactor tests to ts
• 22b00ff fix(deps): upgrades @ucast/* to latest version (#1218)
• fcfde9d chore: fixes package metadata for @​casl/ability
• 3f56353 refactor: removes getDefaultErrorMessage exported function as unneeded (#1206)
• Additional commits viewable in compare view