build(deps-dev): bump @biomejs/biome from 2.5.7 to 2.5.8

[dependabot]

Bumps @biomejs/biome from 2.5.7 to 2.5.8.

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.8

2.5.8

Patch Changes

• #107100a0fbc1 Thanks @​dyc3! - Added a new nursery rule useReactCompiler, which reports diagnostics from React Compiler lint mode.

• #11251ea9dd8a Thanks @​dyc3! - Improved performance of noImportCycles.

• #1124752b44d6 Thanks @​dyc3! - Added the nursery rule noSvelteLegacyConst, which disallows legacy Svelte {@const} tags and recommends declaration tags with $derived().

  Invalid:

  {#eachboxesasbox}
  {@constarea=box.width*box.height}
  <p>{area}</p>
  {/each}

  Valid:

  {#eachboxesasbox}
  {const area =$derived(box.width*box.height)}
  <p>{area}</p>
  {/each}

• #11252d5f5704 Thanks @​Turtle-Hwan! - Fixed #11250: useAwait no longer reports async functions that contain an await using declaration.

• #111436be7be1 Thanks @​vznh! - Fixed #11017: noUselessUndefined no longer reports return undefined when the enclosing function has a return type annotation other than undefined or void.

• #11234caefe39 Thanks @​subotac! - Fixed #11228: CSS block comments between a declaration colon and value now preserve their source indentation.

   :root {
  --font-stack:
  -/* comment */+ /* comment */
  system-ui;
  }

• #11285bca1f73 Thanks @​denbezrukov! - Fixed #11280: CSS formatting keeps comments inside functional pseudo-classes and pseudo-elements instead of moving them before the function name.

  -:/* comment */ where(div) {}+:where(/* comment */ div) {}

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.8

Patch Changes

• #107100a0fbc1 Thanks @​dyc3! - Added a new nursery rule useReactCompiler, which reports diagnostics from React Compiler lint mode.

• #11251ea9dd8a Thanks @​dyc3! - Improved performance of noImportCycles.

• #1124752b44d6 Thanks @​dyc3! - Added the nursery rule noSvelteLegacyConst, which disallows legacy Svelte {@const} tags and recommends declaration tags with $derived().

  Invalid:

  {#eachboxesasbox}
  {@constarea=box.width*box.height}
  <p>{area}</p>
  {/each}

  Valid:

  {#eachboxesasbox}
  {const area =$derived(box.width*box.height)}
  <p>{area}</p>
  {/each}

• #11252d5f5704 Thanks @​Turtle-Hwan! - Fixed #11250: useAwait no longer reports async functions that contain an await using declaration.

• #111436be7be1 Thanks @​vznh! - Fixed #11017: noUselessUndefined no longer reports return undefined when the enclosing function has a return type annotation other than undefined or void.

• #11234caefe39 Thanks @​subotac! - Fixed #11228: CSS block comments between a declaration colon and value now preserve their source indentation.

   :root {
  --font-stack:
  -/* comment */+ /* comment */
  system-ui;
  }

• #11285bca1f73 Thanks @​denbezrukov! - Fixed #11280: CSS formatting keeps comments inside functional pseudo-classes and pseudo-elements instead of moving them before the function name.

  -:/* comment */ where(div) {}+:where(/* comment */ div) {}

... (truncated)

Commits

• 6b8f09c ci: release (#11236)
• 23c0369 feat(lint): nursery noInvalidPropertyInitValue (#11187)
• 52b44d6 feat(lint/html): add noSvelteLegacyConst (#11247)
• 0a0fbc1 feat(lint/js): add useReactCompiler (#10710)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

---

Summary by cubic

Bumps dev dependency @biomejs/biome from 2.5.7 to 2.5.8 to pick up linter fixes and formatter tweaks. This affects only development tooling; runtime behavior does not change.

• New nursery rules available (useReactCompiler, noSvelteLegacyConst); no effect unless enabled in our Biome config.
• Faster noImportCycles and fixes for useAwait and noUselessUndefined.
• CSS formatter preserves comment indentation/placement; running biome may produce small formatting diffs.
• Only package.json and bun.lock changed; verify CI lint/format steps pass.

^{Written for commit 9507f90. Summary will update on new commits.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​biomejs/​biome@​2.5.7 ⏵ 2.5.8	+1		+1	+1

View full report