# why
- oxfmt brought in tinypool as a transitive dep
- tinypool needs to be bumped to a version with the security patch for
[this](https://osv.dev/GHSA-5gmw-xhrv-c9v3)
# what changed
- bumped upstream oxfmt version
- bumping oxfmt also required some reformatting


<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Bumps oxfmt from 0.57.0 to 0.76.0 to pull in a patched tinypool (2.2.0),
fixing the security vulnerability GHSA-5gmw-xhrv-c9v3 in the transitive
dependency.

Bumping oxfmt also applies updated formatting rules, so several test
files across the docs, evals, extension, and sdk-ts packages get
reformatted. No test logic changes.

<sup>Written for commit 4cb35cc57164b70d033be9cd9194fbad9dd110c6.
Summary will update on new commits.</sup>

<a
href="https://cubic.dev/pr/browserbase/stagehand/pull/3373?utm_source=github"
target="_blank" rel="noopener noreferrer"
data-no-image-dialog="true"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source
media="(prefers-color-scheme: light)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img
alt="View guided diff"
src="https://www.cubic.dev/buttons/review-in-cubic-light.svg"></picture></a>
<a
href="https://www.cubic.dev/action/auto-fix/pr/browserbase/stagehand/3373?returnTo=https%3A%2F%2Fgithub.com%2Fbrowserbase%2Fstagehand%2Fpull%2F3373&source=description"
target="_blank" rel="noopener noreferrer"
data-no-image-dialog="true"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://www.cubic.dev/buttons/turn-on-auto-fix-dark.svg"><source
media="(prefers-color-scheme: light)"
srcset="https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg"><img
alt="Turn on auto-fix"
src="https://www.cubic.dev/buttons/turn-on-auto-fix-light.svg"></picture></a>

<!-- End of auto-generated description by cubic. -->