chore(deps): update all non-major dependencies#116
Open
grenadine-renovate-bot wants to merge 1 commit intomainfrom
Open
chore(deps): update all non-major dependencies#116grenadine-renovate-bot wants to merge 1 commit intomainfrom
grenadine-renovate-bot wants to merge 1 commit intomainfrom
Conversation
beef3df to
b8988d4
Compare
b8988d4 to
c09a89a
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.3.13→2.3.152.4.02.3.13→2.3.152.4.024.10.9→24.10.132.0.16→2.1.124.13.0→24.13.1Release Notes
biomejs/biome (@biomejs/biome)
v2.3.15Compare Source
Patch Changes
#9019
043b67cThanks @dyc3! - Added the lint rulenoNestedPromises. This rule detects nested.then()or.catch()calls that could be refactored into flat promise chains.The rule intelligently allows nesting when the inner callback references variables from the outer scope, as these cases cannot be safely flattened.
#9029
6ebf6c6Thanks @ff1451! - Added the nursery rulenoUselessReturn. The rule reports redundantreturn;statements that don't affect the function's control flow.#9017
8bac2daThanks @mdevils! - Reverted a behavior change inuseExhaustiveDependenciesthat was accidentally included as part of the #8802 fix. The change made method calls on objects (e.g.,props.data.forEach(...)) report only the object (props.data) as a missing dependency instead of the full member expression. This behavior change will be reconsidered separately.#9005
c8dbbbeThanks @corvid-agent! - Fixed #8790: ThenoAssignInExpressionsrule no longer reports a false positive when an assignment is used as the expression body of an arrow function (e.g.,const f = b => a += b).#8519
ccdc602Thanks @ruidosujeira! - Fixed #8518, where globally excluded files in a monorepo were still being processed when using"extends": "//".When a package-level configuration extends the root configuration with
"extends": "//", glob patterns (such as those infiles.includes) are now correctly resolved relative to the project root directory, instead of the current workspace directory.#9033
0628e0aThanks @mdevils! - Fixed #8967. useExhaustiveDependencies no longer reports false positives for variables destructured from a rest pattern.#9023
8ef9d1dThanks @siketyan! - Fixed #9020: Whenjavascript.jsxRuntimeis set toreactClassic,noUnusedImportsanduseImportTyperules now allow importing theReactidentifier from a package other thanreact. This aligns the behavior withtsc(--jsx=react), which also allows importingReactfrom any package.#8646
16fd71dThanks @siketyan! - Fixed #8605: Text expressions in some template languages ({{ expr }}or{ expr }) at the top level of an HTML document no longer causes panicking.#8930
51c158eThanks @ANKANJAGTAP! - Fixed #8917useExhaustiveDependencies now correctly detects JSX component identifiers as hook dependencies.
#9009
7d229c7Thanks @Netail! - Fixed typo in noPositiveTabindex's quick fix text.#8758
8c789f1Thanks @Pranav2612000! - Updated the useJsxKeyInIterable rule to not run inside Map constructors#8977
bbe0e0cThanks @FrankFMY! - Fixed #4888.noUnusedImports now adds
export {}when removing the last import in a TypeScript file to prevent it from becoming an ambient module. This does not apply to embedded scripts in Vue, Svelte, or Astro files, which are already in a module context.#9016
9d4cfa3Thanks @dyc3! - Added eslint migration metadata for the rules@typescript/no-var-requires,@typescript/keyword-spacing,@typescript/func-call-spacing,vue/keyword-spacing,vue/func-call-spacing, andunicorn/empty-brace-spaces,#8848
2cba2b3Thanks @LouisLau-art! - Fixed #8845. NowuseGenericFontNamesdoesn't trigger whenfontis declared inside the@supportsat-rule.#8997
a5f3212Thanks @mldangelo! - Fixed #8476.useAwaitThenable no longer reports false positives for
awaiton call expressions whose return type cannot be resolved (e.g., cross-module function calls to Node.js builtins or npm packages).#8978
cc7a478Thanks @FrankFMY! - Fixed #8645.useAwait no longer reports
asyncgenerator functions that useyield*, sinceyield*in an async generator delegates to anAsyncIterableand requires theasyncmodifier.v2.3.14Compare Source
Patch Changes
#8921
29e2435Thanks @siketyan! - Fixed #8759: TheuseConsistentTypeDefinitionsrule no longer converts empty object type declarations into interfaces, as it will conflict with thenoEmptyInterfacerule and can cause an infinite loop when both rules are enabled.#8928
ccaeac4Thanks @taga3s! - Added the nursery ruleuseGlobalThis. This rule enforces usingglobalThisoverwindow,selfandglobal.#8602
9a18daaThanks @dyc3! - Added the new nursery rulenoVueArrowFuncInWatch. This rule forbids using arrow functions in watchers in Vue components, because arrow functions do not give access to the component instance (viathis), while regular functions do.#8905
9b1eea8Thanks @ryan-m-walker! - Fixed #8428: Improved parsing recovery when encountering qualified rules inside CSS@pageat-rule blocks.#8900
f788cffThanks @mdevils! - Fixed #8802:useExhaustiveDependenciesnow correctly suggests dependencies without including callback-scoped variables or method names.When accessing object properties with a callback-scoped variable, only the object path is suggested:
When calling methods on objects, only the object is suggested as a dependency:
#8913
e1e20eaThanks @dyc3! - Fixed #8363: HTML parser no longer crashes when encountering a<character followed by a digit in text content (e.g.,<12 months). The parser now correctly emits an "Unescaped<bracket character" error instead of treating<12as a tag name and crashing.#8910
2fb63a4Thanks @dyc3! - Fixed #8774: Type aliases with generic parameters that haveextendsconstraints now properly indent comments after the equals sign.Previously, comments after the
=in type aliases withextendsconstraints were not indented:#8916
ea4bd04Thanks @ryan-m-walker! - Fixed #4013, where comments in member chains caused unnecessary line breaks.#8945
fa66fe3Thanks @fireairforce! - Fixed #8354: Don't remove quotes when type memeber is new.#8927
0ef3da5Thanks @littleKitchen! - Fixed #8907:useExhaustiveDependenciesnow correctly recognizes stable hook results (likeuseStatesetters anduseRefvalues) when declared withlet.#8931
4561751Thanks @koshin01! - Added the new nursery rulenoRedundantDefaultExport, which flags redundant default exports where the default export references the same identifier as a named export.#8900
f788cffThanks @mdevils! - Fixed #8883:useExhaustiveDependenciesno longer produces false positives when props are destructured in the function body of arrow function components without parentheses around the parameter.#8861
3531687Thanks @dyc3! - Added thenoDeprecatedMediaTypeCSS rule to flag deprecated media types liketvandhandheld.#8775
7ea71cdThanks @igas! - Fixed thenoUnnecessararyConditionsrule to prevent trigger for optional fallback patterns.#8860
95f1eeaThanks @dyc3! - Added the nursery rulenoHexColors, which flags the use of hexadecimal color codes in CSS and suggests using named colors or RGB/RGBA/HSL/HSLA formats instead.#8786
d876a38Thanks @Bertie690! - Added the nursery ruleuseConsistentMethodSignatures.Inspired by the similarly named version from
typescript-eslint, this rule aims to enforce a consistent style for methods used inside object types and interfaces.Examples
Invalid code with
styleset to"property"(the default):Invalid code with
styleset to"method":#8864
5e97119Thanks @dyc3! - Improved the summary provided bybiome migrate eslintto be clearer on why rules were not migrated. Biome now specifies a reason when a rule is not migrated, such as being incompatible with the formatter or not implemented yet. This helps users make more informed decisions when migrating their ESLint configurations to Biome.#8924
99b4cd1Thanks @tmohammad78! - Fixed #8920:noUnknownFunctionnow knows aboutsibling-count, andsibling-indexcss functions#8900
f788cffThanks @mdevils! - Fixed #8885:useExhaustiveDependenciesno longer incorrectly reports variables as unnecessary dependencies when they are derived from expressions containing post/pre-increment operators (++/--) or compound assignment operators (+=,-=, etc.).#8619
d78e01dThanks @Netail! - Added the nursery ruleuseInputName. Require mutation arguments to be called “input”, and the input type to be called Mutation name + “Input”.Invalid:
#8922
871b45eThanks @siketyan! - Fixed #8829: Revamped thenoGlobalDirnameFilenamerule to catch many false negatives that have not been reported.evilmartians/lefthook (lefthook)
v2.1.1Compare Source
v2.1.0Compare Source
nodejs/node (node)
v24.13.1: 2026-02-10, Version 24.13.1 'Krypton' (LTS), @aduh95Compare Source
Notable Changes
1f64d6841e] - build: add support for Python 3.14 (Christian Clauss) #5998330e500fc09] - cli: mark--heapsnapshot-near-heap-limitas stable (Joyee Cheung) #60956bc0a55f086] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #614198a67c00bf5] - doc: mark--build-snapshotand--build-snapshot-configas stable (Joyee Cheung) #609543999c2a910] - meta: add avivkeller to collaborators (Aviv Keller) #61115fa542fbae6] - meta: add gurgunday to collaborators (Gürgün Dayıoğlu) #61094ff11eda2f2] - meta: add Renegade334 to collaborators (Renegade334) #607142e387fb969] - url: update ada to v3.4.2 and support unicode 17 (Yagiz Nizipli) #61593bb206782d4] - v8: markv8.queryObjects()as stable (Joyee Cheung) #60957Commits
a73279c60d] - assert: use a set instead of an array for faster lookup (Ruben Bridgewater) #610766a61bcd73c] - assert,util: fix deep comparison for sets and maps with mixed types (Ruben Bridgewater) #61388cf0eabcd42] - assert,util: improve deep comparison performance (Ruben Bridgewater) #61076ff3b9ac183] - benchmark: add SQLite benchmarks (Guilherme Araújo) #61401e1f7d68c94] - benchmark: use boolean options in benchmark tests (SeokhunEom) #6012991127c91cd] - benchmark: allow boolean option values (SeokhunEom) #60129170fda55f6] - benchmark: add microbench on isInsideNodeModules (Chengzhong Wu) #609913976381b41] - benchmark: fix incorrect base64 input in byteLength benchmark (semimikoh) #60841c702fccd76] - benchmark: use typescript for import cjs benchmark (Joyee Cheung) #6066392c517c62d] - buffer: make methods work on Uint8Array instances (Neal Beeken) #56578be95382edb] - buffer: let Buffer.of use heap (Сковорода Никита Андреевич) #605031f64d6841e] - build: test on Python 3.14 (Christian Clauss) #59983ea4687981b] - build: update android-patches/trap-handler.h.patch (Mo Luo) #60369b3a7a8c780] - build: update devcontainer.json to use paired nix env (Joyee Cheung) #614147168d0b5e3] - build: add embedtest into native suite (Joyee Cheung) #61357e00755a977] - build: fix misplaced comma in ldflags (hqzing) #6129472fcc3ee9d] - build: fix crate vendor file checksums on windows (Chengzhong Wu) #6132976a73d68fd] - build: expose libplatform symbols in shared libnode (Joyee Cheung) #61144ef8d26ce5c] - build: fix inconsistent quoting inMakefile(Antoine du Hamel) #605112d23968783] - build: remove temporal updater (Chengzhong Wu) #611514c2655f1c2] - build: update test-wpt-report to use NODE instead of OUT_NODE (Filip Skokan) #61024eaea6821fc] - build: skip build-ci on actions with a separate test step (Chengzhong Wu) #61073dfd4e12037] - build: run embedtest with node_g when BUILDTYPE=Debug (Chengzhong Wu) #60850775c77234b] - build,tools: fix addon build deadlock on errors (Vladimir Morozov) #613215deafc10fa] - build,win: improve logs when ClangCL is missing (Mike McCready) #61438e2481c5c6e] - build,win: update WinGet configurations to Python 3.14 (Mike McCready) #61431d2586b7e4c] - child_process: treat ipc length header as unsigned uint32 (Ryuhei Shima) #6134430e500fc09] - cli: mark --heapsnapshot-near-heap-limit as stable (Joyee Cheung) #609562c7da15612] - cluster: fix port reuse between cluster (Ryuhei Shima) #60141bc0a55f086] - crypto: update root certificates to NSS 3.119 (Node.js GitHub Bot) #614192d5f20e9c3] - crypto: update root certificates to NSS 3.117 (Node.js GitHub Bot) #60741fba95be188] - deps: update archs files for openssl-3.5.5 (Node.js GitHub Bot) #6154708697289e0] - deps: upgrade openssl sources to openssl-3.5.5 (Node.js GitHub Bot) #61547403c50c04d] - deps: update corepack to 0.34.6 (Node.js GitHub Bot) #615103b24691aeb] - deps: upgrade npm to 11.8.0 (npm team) #614662bba7efdc4] - deps: update googletest to8508785(Node.js GitHub Bot) #614178f8c6f6162] - deps: update sqlite to 3.51.2 (Node.js GitHub Bot) #61339c46009053c] - deps: update icu to 78.2 (Node.js GitHub Bot) #60523b46b8dd91b] - deps: update ada to v3.4.0 (Yagiz Nizipli) #6131588c6b17e18] - deps: update zlib to 1.3.1-e00f703 (Node.js GitHub Bot) #611350030c05ba9] - deps: update cjs-module-lexer to 2.2.0 (Node.js GitHub Bot) #6127177437cff89] - deps: update nbytes to 0.1.2 (Node.js GitHub Bot) #61270fb0f05a937] - deps: update timezone to 2025c (Node.js GitHub Bot) #61138b426a47c05] - deps: nghttp2: revert7784fa9(Antoine du Hamel) #61136c07a38f700] - deps: update nghttp2 to 1.68.0 (nodejs-github-bot) #61136c2ddc9a18b] - deps: update simdjson to 4.2.4 (Node.js GitHub Bot) #61056f38cd6da8e] - deps: update googletest to065127f(Node.js GitHub Bot) #61055a9a6a4cdb2] - deps: brotli: cherry-picke230f47(liujiahui) #610035a40023aae] - deps: upgrade npm to 11.7.0 (npm team) #610114121e7a413] - deps: update sqlite to 3.51.1 (Node.js GitHub Bot) #60899e8a09fc896] - deps: update zlib to 1.3.1-63d7e16 (Node.js GitHub Bot) #608988df5862ee5] - deps: upgrade npm to 11.6.4 (npm team) #608536c1c8cbdcc] - deps: update sqlite to 3.51.0 (Node.js GitHub Bot) #606142d1efc7c1b] - deps: upgrade npm to 11.6.3 (npm team) #607853a2de1c23b] - deps: update brotli to 1.2.0 (Node.js GitHub Bot) #6054058c5d40bd1] - deps: update simdjson to 4.2.2 (Node.js GitHub Bot) #60740e6b607ef50] - deps: update googletest to1b96fa1(Node.js GitHub Bot) #60739650c9e0305] - deps: update minimatch to 10.1.1 (Node.js GitHub Bot) #60543ef1951d5d5] - deps: update inspector_protocol to1b1bcbb(Node.js GitHub Bot) #60705eb068305dd] - deps: update cjs-module-lexer to 2.1.1 (Node.js GitHub Bot) #60646ee1d99131c] - deps: update simdjson to 4.2.1 (Node.js GitHub Bot) #6064423582967b7] - deps: V8: cherry-pick1441665(Domagoj Stolfa) #60989155eaedff2] - deps: V8: cherry-pick394a805(Lu Yahan) #60962c95a4a0f43] - deps: V8: backportbbaae8e(Lu Yahan) #609626f123f186d] - doc: move Security-Team from TSC to SECURITY (Rafael Gonzaga) #614952e3337d15b] - doc: addedrequestOCSPoption totls.connect(ikeyan) #61064f505f81577] - doc: restore @ChALkeR to collaborators (Сковорода Никита Андреевич) #6155312fb95d0c9] - doc: update IBM/Red Hat volunteers with dedicated project time (Beth Griggs) #61588283ab61ed2] - doc: align Buffer.concat documentation with behavior (Gürgün Dayıoğlu) #60405fc9c906d5f] - doc: removevprefix for version references (Mike McCready) #614884a88ed09e8] - doc: mention constructor comparison in assert.deepStrictEqual (Hamza Kargin) #602539b29d56491] - doc: add CVE delay mention (Rafael Gonzaga) #614654815e4ac52] - doc: update previous version links in BUILDING (Mike McCready) #614578a43244e6c] - doc: include OpenJSF handle for security stewards (Rafael Gonzaga) #6145489a7f184a1] - doc: clarify process.argv[1] behavior for -e/--eval (Jeevankumar S) #61366b4041aba1c] - doc: remove Windows Dev Home instructions from BUILDING (Mike McCready) #61434fa7830bac0] - doc: clarify TypedArray properties on Buffer (Roman Reiss) #6135545663c8956] - doc: update Python 3.14 manual install instructions (Windows) (Mike McCready) #614280248357f26] - doc: note resume build should not be done on node-test-commit (Stewart X Addison) #61373b254bab513] - doc: refine WebAssembly error documentation (sangwook) #613828aca37c6ef] - doc: add deprecation history for url.parse (Eng Zer Jun) #613898047ac3aac] - doc: add marco and rafael in last sec release (Marco Ippolito) #6138361190bf4b4] - doc: packages: example of private import switch to internal (coderaiser) #61343346311c42f] - doc: add esm and cjs examples to node:v8 (Alfredo González) #61328c07c80717c] - doc: added 'secure' event to tls.TLSSocket (ikeyan) #610669f68d30f11] - doc: restore @watilde to collaborators (Daijiro Wachi) #61350a3b08ddb51] - doc: run license-builder (github-actions[bot]) #613484990812dd9] - doc: document ALPNCallback option for TLSSocket constructor (ikeyan) #6133189e9d19693] - doc: update MDN links (Livia Medeiros) #61062dcffa88fec] - doc: correct description oferror.stackaccessor behavior (René) #6109031476cd4d1] - doc: add documentation for process.traceProcessWarnings (Alireza Ebrahimkhani) #5364199c783b9ec] - doc: add sqlite session disposal method (René) #61273c7764bed35] - doc: fix filename typo (Hardanish Singh) #612970f16bca9d8] - doc: fix typos and grammar inBUILDING.md&onboarding.md(Hardanish Singh) #612674b691b562d] - doc: mention --newVersion release script (Rafael Gonzaga) #6125532e56ab71f] - doc: correct typo in api contributing doc (Mike McCready) #612609ebf1ffbeb] - doc: add PR-URL requirement for security backports (Rafael Gonzaga) #61256940f83d95d] - doc: add reusePort error behavior to net module (mag123c) #612508881859ee0] - doc: note corepack package removal in distribution doc (Mike McCready) #6120703a1540cd1] - doc: fix tls.connect() timeout documentation (Azad Gupta) #61079816ce7530d] - doc: missingpassed,errorandpassedproperties onTestContext(Xavier Stouder) #61185d825c8858a] - doc: clarify threat model for application-level API exposure (Rafael Gonzaga) #61184a3dd30d0e0] - doc: correct options for net.Socket class and socket.connect (Xavier Stouder) #61179c3e776becd] - doc: document error event on readline InterfaceConstructor (Xavier Stouder) #6117005a6372d30] - doc: add a smooth scrolling effect to the sidebar (btea) #5900776a7eb09ef] - doc: fix test settime docs (Efe) #61117bcbbde6ccc] - doc: correct invalid collaborator profile (JJ) #61091084741d09d] - doc: add a tip about developer mode on Windows (Joyee Cheung) #61112ed4de371d3] - doc: exclude compile-time flag features from security policy (Matteo Collina) #611093999c2a910] - doc: add @avivkeller to collaborators (Aviv Keller) #61115f3ec066f1a] - doc: warn about short GCM tags visibly (Tobias Nießen) #61082fa542fbae6] - doc: add gurgunday to collaborators (Gürgün Dayıoğlu) #6109449f36722dc] - doc: mark sync module hooks as release candidate (Joyee Cheung) #60960a0adc6afd2] - doc: reorganize docs of module customization hooks (Joyee Cheung) #60960a4097ca048] - doc: mark crypto.hash as stable (Joyee Cheung) #609948a67c00bf5] - doc: mark --build-snapshot and --build-snapshot-config as stable (Joyee Cheung) #609540c83169c35] - doc: add File modes cross-references in fs methods (Mohit Raj Saxena) #60286dae815262a] - doc: add missingzstdto mjs example of zlib (Deokjin Kim) #6091528b284880e] - doc: clarify fileURLToPath security considerations (Rafael Gonzaga) #608876c440af39b] - doc: show the use of string expressions in the SQLTagStore example (schliepa) #608734c5b62209c] - doc: replace column with columnNumber in example ofutil.getCallSites(Deokjin Kim) #608818875c9148e] - doc: correct spelling in BUILDING.md (Rich Trott) #60875d6cb762426] - doc: update debuglog examples to use 'foo-bar' instead of 'foo' (xiaoyao) #608679eae518796] - doc: correct 'event handle' to 'event handler' in Utf8Stream drop event (Riddhi) #60692c3c3ed27c1] - doc: fix typos in changelogs (Rich Trott) #608551b975e3017] - doc: mark module.register as active development (Chengzhong Wu) #608496a6fc0c851] - doc: add fullName property to SuiteContext (PaulyBearCoding) #607628347d734e6] - doc: add additional codemods for deprecation (Augustin Mauroy) #608117cc87037c3] - doc: keep sidebar module visible when navigating docs (Botato) #604101c6618f643] - **dConfiguration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - Only on Sunday and Saturday ( * * * * 0,6 ) (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.