Skip to content

fix(deps): update all dependencies - #37

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all
Open

fix(deps): update all dependencies#37
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

Conversation

@renovate

@renovaterenovateBot commented Apr 7, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

PackageChangeAgeConfidenceTypeUpdate
@babel/core (source)^7.29.0^8.0.1ageconfidencedevDependenciesmajor
@babel/core (source)^7.29.0^8.0.1ageconfidencedependenciesmajor
@biomejs/biome (source)^2.4.10^2.5.9ageconfidencedevDependenciesminor
@changesets/changelog-github (source)^0.6.0^1.0.0ageconfidencedevDependenciesmajor
@changesets/cli (source)^2.30.0^3.0.0ageconfidencedevDependenciesmajor
@effect/platform (source)^0.96.0^0.97.1ageconfidencedependenciesminor
@effect/platform-node (source)^0.106.0^0.108.1ageconfidencedependenciesminor
@effect/vitest (source)^0.29.0^0.30.0ageconfidencedevDependenciesminor
@eslint-community/eslint-plugin-eslint-comments^4.7.1^4.7.2ageconfidencedevDependenciespatch
@eslint/compat (source)2.0.42.1.0ageconfidencedevDependenciesminor
@eslint/eslintrc3.3.53.3.6ageconfidencedevDependenciespatch
@playwright/test (source)^1.59.1^1.62.1ageconfidencedevDependenciesminor
@types/node (source)^24.12.2^24.13.3ageconfidencedevDependenciesminor
@types/react (source)^19.2.14^19.2.18ageconfidencedevDependenciespatch
@types/react-dom (source)^19.2.3^19.2.4ageconfidencedevDependenciespatch
@typescript-eslint/eslint-plugin (source)^8.58.0^8.67.0ageconfidencedevDependenciesminor
@typescript-eslint/parser (source)^8.58.0^8.67.0ageconfidencedevDependenciesminor
@vitejs/plugin-react (source)^6.0.1^6.0.5ageconfidencedevDependenciespatch
@vitest/coverage-v8 (source)^4.1.3^4.1.10ageconfidencedevDependenciespatch
@vitest/eslint-plugin^1.6.14^1.6.27ageconfidencedevDependenciespatch
actions/checkoutv6v7ageconfidenceactionmajor
actions/setup-nodev6v7ageconfidenceactionmajor
effect (source)^3.21.0^3.22.1ageconfidencedependenciesminor
eslint (source)^10.2.0^10.8.1ageconfidencedevDependenciesminor
eslint-import-resolver-typescript^4.4.4^4.4.5ageconfidencedevDependenciespatch
eslint-plugin-simple-import-sort^13.0.0^14.0.0ageconfidencedevDependenciesmajor
eslint-plugin-sonarjs (source)^4.0.2^4.2.0ageconfidencedevDependenciesminor
eslint-plugin-unicorn^64.0.0^73.0.0ageconfidencedevDependenciesmajor
globals^17.4.0^17.11.0ageconfidencedevDependenciesminor
jscpd (source)^4.0.8^5.0.15ageconfidencedevDependenciesmajor
next (source)^16.2.2^16.3.1ageconfidencedependenciesminor
node24.14.124.19.0ageconfidenceuses-withminor
pnpm (source)10.33.011.22.0ageconfidencepackageManagermajor
pnpm/action-setupv5v6ageconfidenceactionmajor
pnpm/action-setupv3v6ageconfidenceactionmajor
react (source)^19.2.4^19.2.8ageconfidencedependenciespatch
react-dom (source)^19.2.4^19.2.8ageconfidencedependenciespatch
typescript (source)^6.0.2^7.0.2ageconfidencedevDependenciesmajor
typescript-eslint (source)^8.58.0^8.67.0ageconfidencedevDependenciesminor
vite (source)^8.0.6^8.2.1ageconfidencedevDependenciesminor
vite (source)^8.0.6^8.2.1ageconfidencepeerDependenciesminor
vitest (source)^4.1.3^4.1.10ageconfidencedevDependenciespatch

cc @skulidropek


Release Notes

babel/babel (@​babel/core)

v8.0.1

Compare Source

💥 Breaking Change
  • babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone

v8.0.0

Compare Source

👓 Spec Compliance
💥 Breaking Change
  • babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
  • babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
  • babel-parser
🐛 Bug Fix
📝 Documentation
🏠 Internal
🏃‍♀️ Performance

v7.29.7

Compare Source

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6

Compare Source

v7.29.6 (2026-05-25)

🐛 Bug Fix
Committers: 3
biomejs/biome (@​biomejs/biome)

v2.5.9

Compare Source

Patch Changes
  • #​1132141386f3 Thanks @​dyc3! - Fixed #​11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

  • #​1124857b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

  • #​11377a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

    @layer {
    a {
    color: red;
    }
    }
  • #​113276771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

     <div>
    <!-- first group -->
    +
    <!-- second group -->
    </div>
  • #​10312ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

  • #​11333715e0cd Thanks @​kkkhs! - Fixed #​11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

  • #​113439b98211 Thanks @​johncarmack1984! - Fixed #​11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

    @variant@xl {
    div {
    background: red;
    }
    }
  • #​112203e8c488 Thanks @​santichausis! - Fixed #​9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup<script> blocks.

    For example, Biome no longer reports greet as undeclared in the following Svelte component:

    <scriptmodule>exportfunctiongreet() {console.log("Hello!"); }</script>
    <script>greet();</script>
  • #​1130036430eb Thanks @​dyc3! - Fixed the HTML formatter's whitespace handling for marquee, noscript, video, audio, and object elements.

    - <marquee behavior="alternate"> This text will bounce </marquee>+ <marquee behavior="alternate">This text will bounce</marquee>
  • #​112996559e6c Thanks @​jp-knj! - Added the nursery rule useAstroClientOnlyDirectiveValue, which reports Astro client:only directives without an initializer.

    For example, <Component client:only /> triggers the rule.

  • #​113657529811 Thanks @​MHJahanbakhsh! - Fixed #​11229: The useGenericFontNames rule now treats math as a valid generic font family.

  • #​11346674f5f4 Thanks @​Jayllyz! - Fixed #​11335: noComponentHookFactories now reports a use-prefixed variable only when a function is assigned to it directly.

    functionfactory(){constuseColors=true;// no longer reportedconstuseStore=createStore({count: 0});// no longer reportedconstuseData=()=>useState(null);// still reportedreturnuseColors;}
  • #​11334c87c46a Thanks @​zkasuran! - Fixed #​11317: noSvgWithoutTitle no longer reports an svg that uses the boolean shorthand aria-hidden (equivalent to aria-hidden={true} in React).

  • #​1136413853b1 Thanks @​ematipico! - Fixed a bug where useJsxKeyInIterable incorrectly flagged Astro files.

  • #​1132141386f3 Thanks @​dyc3! - Fixed #​11315: Invalid CSS declarations in HTML style attributes now produce parser diagnostics instead of causing a panic.

  • #​1132567c3bf0 Thanks @​dyc3! - Fixed HTML text wrapping to account for the width of an adjacent closing tag, avoiding lines that exceed the configured width when the final word and tag must move together.

     <a-long-long-long-element
    - >foo bar foo bar foo bar foo bar foo bar foo bar foo bar</a-long-long-long-element+ >foo bar foo bar foo bar foo bar foo bar foo+ bar</a-long-long-long-element
    >
  • #​11367fe5b5d4 Thanks @​ematipico! - Fixed TypeScript compilerOptions.paths resolution when mapping targets omit ./. Biome now resolves these targets relative to their configured path base.

  • #​1131617e48d6 Thanks @​wanxiankai! - Fixed #​11289: the safe fix for noExtraBooleanCast now preserves parentheses around nested conditional expressions.

  • #​11254d25d113 Thanks @​dyc3! - Fixed #​11242: Biome no longer crashes with an access violation when analysing files on Windows ARM64.

  • #​1122185aac73 Thanks @​freeatnet! - Added the nursery rule noUnsafeTypeAssertion, which disallows TypeScript type assertions while allowing const assertions.

    constvalue=inputasSomeType;
  • #​113147ffb677 Thanks @​ematipico! - Fixed #​11310: Restored the performance of noMisusedPromises and noFloatingPromises when analyzed expressions share deep imported type paths.

  • #​113566cd3263 Thanks @​johncarmack1984! - The Tailwind parser now understands modifiers on bare utilities (@container/sidebar, shadow/50).

  • #​1131876059e9 Thanks @​johncarmack1984! - The Tailwind parser now understands container-query variants (@sm:, @max-lg:, @min-[400px]:) and child and descendant variants (*:, **:).

  • #​11357faa2074 Thanks @​johncarmack1984! - The Tailwind parser now accepts the legacy leading ! important marker (!flex, hover:!p-4).

  • #​11344f34e15c Thanks @​johncarmack1984! - The Tailwind parser now understands combinator selectors in arbitrary variants (has-[>svg]:, has-[+p]:), modifiers on variants (group-hover/menu:, @sm/main:), and arbitrary container-query sizes (@[400px]:).

  • #​113242f5d452 Thanks @​dyc3! - Fixed HTML formatting that inserted rendered whitespace between an element and touching text when the line wrapped.

     <div>
    - before<meter value=".5"></meter>- after+ before<meter value=".5"></meter+ >after
    </div>
  • #​11312e65f07e Thanks @​xosnos! - Added a new nursery rule useControlLabel for both HTML and JSX, which reports interactive control elements (button, menuitem) without an accessible label.

    <button/>
  • #​1136413853b1 Thanks @​ematipico! - Fixed SVG parsing for files with an XML declaration followed by a PUBLIC doctype, such as <?xml version="1.0"?><!DOCTYPE svg PUBLIC "a" "b">.

  • #​11301610ee28 Thanks @​dyc3! - Fixed parent tag wrapping when an HTML element starts or ends with a block-like or hidden child such as source, track, or param.

    - <video src="brave.webm"><track kind="subtitles" src="brave.en.vtt"></video>+ <video src="brave.webm">+ <track kind="subtitles" src="brave.en.vtt">+ </video>

v2.5.8

Compare Source

Patch Changes

v2.5.7

Compare Source

Patch Changes
  • #​10822c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

  • #​11136e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

  • #​10094e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

  • #​11184135f476 Thanks @​subotac! - Fixed #​11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

  • #​8239a519f9d Thanks @​cormacrelf! - Fixed #​8233, where Biome CLI in
    stdin mode didn't work correctly when handling files in projects with nested
    configurations. For example, with the following structure,
    --stdin-file-path=subdirectory/... would not use the nested configuration in
    subdirectory/biome.json:

    ├── biome.json
    └── subdirectory
    ├── biome.json
    └── lib.js
    
    biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

    Now, the nested configuration is correctly picked up and applied.

    In addition, Biome now shows a warning if --stdin-file-path is provided but
    that path is ignored and therefore not formatted or fixed.

  • #​111388c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

    The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

    declarefunctionschedule(handler: ()=>void): string;declarefunctionschedule(handler: ()=>Promise<void>): string|undefined;schedule(async()=>{})??"fallback";

    The following code is also now invalid, because map(() => 42) returns 42:

    typeMapper<T>=()=>T;declarefunctionmap<T>(mapper: Mapper<T>): T;map(()=>42)||flag;
  • #​111388c2c6bd Thanks @​ematipico! - Fixed #​11087: noUnnecessaryConditions no longer reports optional chains and nullish coalescing whose receiver can be nullish.

    For example, the optional chain and fallback in the following code are no longer reported:

    declareconstusage: {range: {startDate: string}}|null;conststartDate=usage?.range.startDate??"N/A";
  • #​111189c16840 Thanks @​subotac! - Fixed #​11098: The HTML formatter now preserves the configured trailing newline when a file ends with a comment.

    -<!-- trailing comment -->
    \ No newline at end of file
    +<!-- trailing comment -->
  • #​112010e80610 Thanks @​Bishwas-py! - Fixed #​11182: suppression comments for noPositiveTabindex now suppress the rule in HTML files when the attributes of the element span multiple lines.

  • #​11079607afd2 Thanks @​dyc3! - The HTML formatter now lays out the srcset attribute of <img> and <source> as the list of candidates it is. Runs of whitespace between candidates collapse, and once the list no longer fits on one line each candidate goes on its own line with the descriptors aligned:

    - <img srcset="/visual@0.5.png 400w, /visual.png 805w, /visual@2x.png 1610w, /visual@3x.png 2415w" />+ <img+ srcset="+ /visual@0.5.png 400w,+ /visual.png 805w,+ /visual@2x.png 1610w,+ /visual@3x.png 2415w+ "+ />
  • #​11156fed72c7 Thanks @​saberoueslati! - Fixed #​11129: noUnusedVariables no longer reports Vue bindings as unused when they are assigned through automatically unwrapped template refs.

  • #​11124d890b39 Thanks @​denbezrukov! - Fixed CSS formatting of line comments between a declaration colon and value to preserve their source indentation.

     .test {
    background:
    - /////// foo- // bar+ /////// foo+ // bar
    radial-gradient(circle, #&#8203;000, transparent);
    }
  • #​111133d8ab73 Thanks @​denbezrukov! - Fixed CSS formatting of long block comments between comma-separated property values:

     .foo {
    box-shadow:
    - 1000px /* long long long long long long long long long long long long comment */ 1000px /* long long long long long long long long long comment */ 2px color(srgb 0.555555555 0.555555555 0.555555555),+ 1000px+ /* long long long long long long long long long long long long comment */+ 1000px /* long long long long long long long long long comment */ 2px+ color(srgb 0.555555555 0.555555555 0.555555555),
    1px 1px black;
    }
  • #​11127da5c1a5 Thanks @​dyc3! - The HTML formatter now picks the quote character for an attribute by counting the quotes in the value rather than looking only for a double quote. &apos; and &quot; count as the characters they stand for, and only the character that ends up as the delimiter stays escaped:

    - <div title='123 &apos;&quot; 456'></div>+ <div title="123 '&quot; 456"></div>

    Entities that are not quotes, such as &amp; or &[#&#8203;39](https://redirect.github.com/biomejs/biome/issues/39);, are left exactly as written.

  • #​1119377035bb Thanks @​dyc3! - Fixed the HTML formatter collapsing the blank line between an element and the text that follows it. A blank line before text is now kept, the way one before another element already was:

     <div>foo</div>
    -
    text
  • #​11106ad80f57 Thanks @​dyc3! - The HTML formatter now writes the HTML5 doctype in lowercase, matching Prettier:

    - <!DOCTYPE html>+ <!doctype html>

    This only applies to a plain .html file whose doctype stands alone. A doctype that names a DTD keeps the case it was written with, since the rest of the declaration is not lowercased either:

    <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">

    A .vue, .svelte, or .astro file keeps whatever the author wrote.

  • #​1118860679db Thanks [@&chore(deps): update all dependencies #8

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovateBot requested a review from skulidropekApril 7, 2026 17:26
@renovaterenovateBot changed the title chore(deps): update dependency vite to ^8.0.7chore(deps): update all dependenciesApr 8, 2026
@renovate
renovateBotforce-pushed the renovate/all branch 2 times, most recently from 57ed306 to e2f0197CompareApril 8, 2026 20:33
@renovaterenovateBot changed the title chore(deps): update all dependenciesfix(deps): update all dependenciesApr 8, 2026
@renovate
renovateBotforce-pushed the renovate/all branch 9 times, most recently from fa61bdd to a341b3cCompareApril 15, 2026 12:23
@renovate
renovateBotforce-pushed the renovate/all branch 12 times, most recently from d372fcb to 747233aCompareApril 23, 2026 06:01
@renovate
renovateBotforce-pushed the renovate/all branch 2 times, most recently from 37d2e61 to 0159814CompareApril 23, 2026 15:55
@renovate
renovateBotforce-pushed the renovate/all branch 12 times, most recently from 2d95c0d to 0acc12eCompareMay 14, 2026 13:03
@coderabbitai

coderabbitaiBot commented May 14, 2026

Copy link
Copy Markdown

Review Change Stack

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

Upgrade pnpm to 11.1.2, switch pnpm/action-setup to v6 and Node to 24.15.0 in CI, and bump multiple dependency/devDependency versions (React, TypeScript, ESLint/biome tooling, vitest, Playwright, vite, Changesets) across workspace package.json files.

Changes

Monorepo Dependency Upgrade

Layer / File(s)Summary
CI infrastructure and package manager setup
.github/actions/setup/action.yml, .github/workflows/checking-dependencies.yml, package.json
Switched pnpm/action-setup usage to @v6 in the composite action and CI workflow; bumped actions/setup-node node-version to 24.15.0; root packageManager set to pnpm@11.1.2; bumped @changesets/changelog-github and @changesets/cli.
Application workspace dependencies
packages/app/package.json
Updated packageManager to pnpm@11.1.2; advanced runtime ranges (@effect/platform, effect) and increased vite peer requirement; multiple devDependencies bumped (Biome, ESLint/TypeScript tooling, vitest, coverage, jscpd, TypeScript tooling).
Next.js frontend workspace
packages/frontend-nextjs/package.json
Bumped runtime deps (next, react, react-dom) and dev tooling (@playwright/test, @types/node, typescript) to newer patch versions.
Frontend workspace
packages/frontend/package.json
Raised react/react-dom to ^19.2.6; bumped devDependencies (@playwright/test, @types/node, @vitejs/plugin-react, typescript, vite).
Consumer workspace
packages/pack-consumer/package.json
Bumped devDependencies typescript and vite to newer versions.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related issues

Poem

🐰 I hopped through packages, nudging versions light,
pnpm and Node updated, CI set just right.
React and TypeScript put on tiny new shoes,
Dev tools aligned, no breaking news.
A happy rabbit dance for upgrades done!

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check nameStatusExplanation
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
Title check✅ PassedThe title clearly identifies the pull request as a dependency update, which matches the primary changes.
Description check✅ PassedThe description documents the dependency, GitHub Actions, and runtime updates included in the pull request.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/all

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@renovate
renovateBotforce-pushed the renovate/all branch 11 times, most recently from b3f3140 to c96eb32CompareMay 21, 2026 17:14
@renovate
renovateBotforce-pushed the renovate/all branch 4 times, most recently from eaf706c to 69c645eCompareMay 25, 2026 12:42
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@skulidropek