Skip to content

fix(deps): update all dependencies - #429

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented Jun 18, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@biomejs/biome (source) ^2.5.0 → ^2.6.3 age confidence devDependencies minor
@changesets/changelog-github (source) ^0.7.0 → ^1.0.1 age confidence devDependencies major
@changesets/cli (source) ^2.31.0 → ^3.0.3 age confidence devDependencies major
@effect/cli (source) ^0.75.2 → ^0.77.2 age confidence dependencies minor
@effect/cluster (source) ^0.59.0 → ^0.60.2 age confidence dependencies minor
@effect/experimental (source) ^0.60.0 → ^0.61.1 age confidence dependencies minor
@effect/platform (source) ^0.96.1 → ^0.97.2 age confidence dependencies minor
@effect/platform (source) ^0.96.1 → ^0.97.2 age confidence devDependencies minor
@effect/platform-node (source) ^0.107.0 → ^4.0.6 age confidence dependencies major
@effect/platform-node (source) ^0.107.0 → ^4.0.6 age confidence devDependencies major
@effect/printer (source) ^0.49.0 → ^0.51.0 age confidence dependencies minor
@effect/printer-ansi (source) ^0.49.0 → ^0.51.0 age confidence dependencies minor
@effect/rpc (source) ^0.75.1 → ^0.76.2 age confidence dependencies minor
@effect/sql (source) ^0.51.1 → ^0.52.1 age confidence dependencies minor
@effect/typeclass (source) ^0.40.0 → ^0.41.0 age confidence dependencies minor
@effect/vitest (source) ^0.29.0 → ^4.0.6 age confidence devDependencies major
@effect/workflow (source) ^0.18.2 → ^0.19.1 age confidence dependencies minor
@eslint-community/eslint-plugin-eslint-comments ^4.7.2 → ^4.8.1 age confidence devDependencies minor
@eslint/compat (source) 2.1.0 → 2.1.1 age confidence devDependencies patch
@eslint/eslintrc 3.3.5 → 3.3.7 age confidence devDependencies patch
@fedify/fedify (source) ^2.2.5 → ^2.4.5 age confidence dependencies minor
@fedify/vocab (source) ^2.2.5 → ^2.4.5 age confidence dependencies minor
@types/node (source) ^25.9.3 → ^26.6.5 age confidence devDependencies major
@types/react (source) ^19.2.17 → ^19.3.0 age confidence devDependencies minor
@types/react-dom (source) ^19.2.3 → ^19.3.0 age confidence devDependencies minor
@types/ws (source) ^8.18.1 → ^8.18.2 age confidence devDependencies patch
@typescript-eslint/eslint-plugin (source) ^8.61.1 → ^8.72.0 age confidence devDependencies minor
@typescript-eslint/parser (source) ^8.61.1 → ^8.72.0 age confidence devDependencies minor
@vitejs/plugin-react (source) ^6.0.2 → ^6.1.2 age confidence devDependencies minor
@vitest/coverage-v8 (source) ^4.1.9 → ^5.0.5 age confidence devDependencies major
@​vitest/eslint-plugin ^1.6.20 → ^1.6.28 age confidence devDependencies patch
actions/checkout v6 → v7 age confidence action major
actions/setup-node v6 → v7 age confidence action major
biome (source) ^2.5.0 → ^2.6.3 age confidence devDependencies minor
bun (source) 1.3.11 → 1.4.4 age confidence packageManager minor
effect (source) ^3.21.3 → ^4.0.6 age confidence dependencies major
effect (source) ^3.21.3 → ^4.0.6 age confidence devDependencies major
eslint (source) ^10.5.0 → ^10.13.0 age confidence devDependencies minor
eslint-plugin-simple-import-sort ^13.0.0 → ^14.0.0 age confidence devDependencies major
eslint-plugin-sonarjs (source) ^4.0.3 → ^4.2.2 age confidence devDependencies minor
eslint-plugin-unicorn ^67.0.0 → ^79.0.0 age confidence devDependencies major
fast-check (source) ^4.8.0 → ^4.10.2 age confidence devDependencies minor
fast-check (source) 4.8.0 → 4.10.2 age confidence devDependencies minor
globals ^17.6.0 → ^17.13.0 age confidence devDependencies minor
jscpd (source) ^5.0.10 → ^5.4.2 age confidence devDependencies minor
react-reconciler (source) ^0.33.0 → ^0.34.0 age confidence dependencies minor
typescript (source) ^6.0.3 → ^7.0.2 age confidence devDependencies major
typescript-eslint (source) ^8.61.1 → ^8.72.0 age confidence devDependencies minor
vite (source) ^8.0.16 → ^8.3.5 age confidence devDependencies minor
vitest (source) ^4.1.9 → ^5.0.5 age confidence devDependencies major
ws ^8.21.0 → ^8.22.0 age confidence devDependencies minor
ws ^8.21.0 → ^8.22.0 age confidence dependencies minor

cc @skulidropek


Release Notes

biomejs/biome (@​biomejs/biome)

v2.6.3

Compare Source

Patch Changes
  • #​12275 807e616 Thanks @​dyc3! - Added the new nursery rule noArraySortForMinMax, which reports sorting an array only to read its smallest or largest value. Use Math.min() or Math.max() instead.

    const minimum = array.toSorted((a, b) => a - b)[0];
  • #​12432 cf61682 Thanks @​dyc3! - Added the nursery rule noBooleanSortComparator, which reports sort comparators that return a boolean instead of a number. For example, array.sort((a, b) => a > b) never puts the first item before the second, so the array isn't sorted correctly.

  • #​12304 b4654c5 Thanks @​dyc3! - Added the new nursery rule noEagerArrayMethodsInLoops, which reports .map() and .filter() calls in the header of for...of loops. These calls build a new array that is only used by the loop.

    for (const name of users.map((user) => user.name)) {
      console.log(name);
    }
  • #​12121 66c3791 Thanks @​dyc3! - Added the nursery rule noNewRequire, which disallows calling require with new, such as new require("app-header").

  • #​12316 34b520d Thanks @​dyc3! - Added the new nursery rule noObsoleteAttributes, which disallows obsolete attributes on HTML elements and suggests what to use instead.

    <table bgcolor="#ffffff" cellpadding="5"></table>
  • #​12258 cce2385 Thanks @​dyc3! - Added the nursery rule noPathConcat, which disallows building file paths and URLs by joining strings to __dirname, __filename, import.meta.dirname, import.meta.filename, or import.meta.url.

    const fullPath = __dirname + "/foo.js"; // reported
  • #​12287 e12ad78 Thanks @​dyc3! - Added the new nursery rule noPlaywrightNthMethods, which disallows selecting Playwright elements by position with first(), last(), and nth(). A test that relies on the position of an element can act on a different element when the page changes.

    await page.locator("button").first().click();
  • #​12343 62ad123 Thanks @​vibbix! - Added the nursery rule noSelfNestedLayer, which disallows nesting a cascade layer inside a layer with the same name. Layer names inside an @layer block are relative to it, so the inner layer below creates the sublayer components.components instead of adding to components.

    @layer components {
      @layer components {
        .button {
          color: red;
        }
      }
    }
  • #​12289 bbbd95d Thanks @​dyc3! - Added the nursery rule noShortTimeValues, which reports CSS animation and transition times that are shorter than the configured minimum number of milliseconds. The rule does nothing until minimum is set.

    For example, the following code is invalid when minimum is 100:

    a {
      transition-duration: 80ms;
    }
  • #​12431 f748ec0 Thanks @​dyc3! - Added the nursery rule noSvelteInternal, which disallows importing from svelte/internal and its submodules. These modules are private to Svelte and can change or disappear in any release.

    import { get_current_component } from "svelte/internal";
  • #​12270 8ae35c4 Thanks @​dyc3! - Added the nursery rule noTanstackQueryRestDestructuring, which disallows rest destructuring and object spread on TanStack Query results. Both read every property of the result, so the component updates on every change to the query.

    import { useQuery } from "@tanstack/react-query";
    
    const { data, ...rest } = useQuery({ queryKey: ["todos"], queryFn: fetchTodos });

    The rule belongs to the new tanstackQuery domain.

  • #​12308 372af2a Thanks @​dyc3! - Added the new nursery rule noUnreadableForOfExpression, which reports for...of and for await...of loops that go through the result of a complex expression instead of a variable, a property, or a short call.

    for (const item of getItems(createArgument(seed))) {} // reported
  • #​12422 0be8d10 Thanks @​dyc3! - Added the new nursery rule noUnsafeReturn, which disallows returning a value typed as any from a function.

    function parse(text: string) {
      return JSON.parse(text); // reported
    }
  • #​12311 8434c92 Thanks @​dyc3! - Added the nursery rule noUselessSplice, which reports splice() calls that have a simpler alternative. For example, array.splice(0, 1) can be written as array.shift().

  • #​12293 eaa4a2b Thanks @​dyc3! - Added the nursery rule noVueUnusedEmitDeclarations, which reports events that a Vue component declares but never emits.

    For example, the following component never emits close:

    <script setup>
    const emit = defineEmits(["change", "close"]);
    emit("change");
    </script>
  • #​12386 f01ebb0 Thanks @​dyc3! - Added the nursery rule noVueVTextVHtmlOnComponent, which disallows v-text and v-html on Vue components. These directives replace everything inside the component's root element instead of filling its slot.

    <template>
      <MyComponent v-html="html"></MyComponent>
    </template>
  • #​12385 7bd38b7 Thanks @​dyc3! - Added the new nursery rule noVueWatchAfterAwait, which disallows creating watchers after an await in a Vue component's setup() function. Vue doesn't stop these watchers when the component is removed. A watcher is allowed when the function it returns is stored, so that function can be called later to stop the watcher.

    <script>
    import { watch } from "vue";
    
    export default {
      async setup() {
        await fetchUser();
        watch(source, () => {});
      },
    };
    </script>
  • #​12286 50d2a4e Thanks @​dyc3! - Added the nursery rule noZeroLengthUnit, which disallows units on zero lengths in CSS. Biome can remove the unit.

    a {
      top: 0px;
    }
  • #​12300 ab2eb9e Thanks @​dyc3! - Added the nursery rule useBlockStatementOverIife, which reports functions that are called immediately when a block statement can replace them. Biome can replace these functions with a block statement.

    Invalid:

    (() => {
        const value = getValue();
        run(value);
    })();
  • #​12421 1c2cac0 Thanks @​dyc3! - Added the nursery rule useConsistentLightnessNotation, which enforces writing the lightness of lab(), lch(), oklab(), and oklch() colors as a percentage, or as a number with the notation option. For example, with the default options, oklch(0.85 0.17 88) is reported and can be fixed to oklch(85% 0.17 88).

  • #​12224 fef7ed4 Thanks @​dyc3! - Added the nursery rule useExpectToContain, which reports tests that compare the result of includes() to a boolean, and suggests using toContain() instead.

    expect(fruits.includes("apple")).toBe(true);
  • #​12299 0d5025d Thanks @​dyc3! - Added the new nursery rule useIteratorZip, which reports for loops that use an index only to read the same position from several arrays. Such loops can use Iterator.zip() instead.

    // reported
    for (let index = 0; index < Math.min(names.length, scores.length); index++) {
      save(names[index], scores[index]);
    }
  • #​12298 a234d2f Thanks @​dyc3! - Added the nursery rule useMathAbs, which reports manual absolute value calculations and range checks that can use Math.abs(). For example, value < 0 ? -value : value can be written as Math.abs(value), and value > limit || value < -limit can be written as Math.abs(value) > limit.

  • #​12499 bd024cc Thanks @​dyc3! - Added the nursery rule useMathTrunc, which requires Math.trunc() instead of bitwise operations or parseInt(String(x), 10) for removing the decimal part of a number. For example, const result = value | 0; and const result = ~~value; are now reported.

  • #​12314 9e875a4 Thanks @​dyc3! - Added the new nursery rule usePackageJsonValidCpu, which reports a cpu field in package.json that isn't an array of known processor types. The cpu field lists the processor types that the package supports.

    For example, the rule reports the following package.json file because x86 isn't a processor type that package managers recognize:

    {
      "name": "my-package",
      "cpu": ["x86"]
    }
  • #​12315 cb30544 Thanks @​dyc3! - Added the nursery rule usePackageJsonValidEngines, which reports an invalid engines field in package.json. The field must be an object, and each of its values must be a non-empty string.

    For example, the following engines field is reported because the version of node is a number:

    {
        "engines": {
            "node": 24
        }
    }
  • #​12400 407604d Thanks @​dyc3! - Added the nursery rule useVueComponentIs, which requires Vue <component> elements to bind the is attribute with :is or v-bind:is. Without it, Vue has no component to render.

    <template>
      <component :is="currentView" />
    </template>
  • #​12337 c371520 Thanks @​dyc3! - Added the nursery rule useVueToggleInsideTransition, which requires the element inside a Vue <Transition> to be shown and hidden with v-if or v-show. Without one of them, the element is always shown and the transition never plays.

    <template>
      <Transition>
        <div>Content</div>
      </Transition>
    </template>
  • #​12387 64472e9 Thanks @​dyc3! - Added the nursery rule useVueTypedRef, which reports ref() and shallowRef() calls in TypeScript that have no type argument and no initial value other than null or undefined. Without a type, TypeScript can't tell which values these refs are meant to hold.

    import { ref } from "vue";
    
    const count = ref();
  • #​12423 bf1a55a Thanks @​dyc3! - Added the nursery rule useVueVOnExact, which requires the .exact modifier on a v-on listener when another listener for the same event on the element needs more modifier keys, such as .ctrl. Without .exact, both listeners run when those keys are held down. The rule accepts the following code:

    <template>
      <button @click.exact="select" @click.ctrl="open"></button>
    </template>
  • #​12418 208730e Thanks @​latin-1! - Fixed #​12417: useSortedProperties could produce invalid CSS when sorting properties without a final semicolon. Comments attached to reordered properties are preserved.

  • #​12216 f2a3c71 Thanks @​dyc3! - Added the new nursery rule noDanglingUnderscore, which disallows variable names, function names, and property accesses that start or end with an underscore.

    const _count = 0; // reported
    user._id; // reported
  • #​12536 438997f Thanks @​vidigoat! - Fixed the formatter removing the parentheses around an instantiation expression before +, -, <, >, >=, >> and >>>. TypeScript reads make<T> + y as make < T > +y, and make<T> >> y doesn't parse.

    - x = make<T> + y;
    + x = (make<T>) + y;
    - x = make<T> >> y;
    + x = (make<T>) >> y;
  • #​12540 7d3e8a1 Thanks @​vidigoat! - Fixed the formatter removing the parentheses around an instantiation expression before a non-null assertion or type arguments of a class heritage, which produced code that doesn't parse.

    - const a = make<T>!;
    + const a = (make<T>)!;
    - class D extends B<T><T> {}
    + class D extends (B<T>)<T> {}
  • #​12496 09d89b9 Thanks @​vidigoat! - Fixed the formatter removing the parentheses around binary, logical, type-cast and instantiation operands of an instantiation expression. The type arguments then applied to the last operand only, and a nested instantiation expression didn't parse.

    - const x = a + b<T>;
    + const x = (a + b)<T>;
    - const y = a as B<T>;
    + const y = (a as B)<T>;
    - const z = f<A><B>;
    + const z = (f<A>)<B>;
  • #​12526 dbcdab1 Thanks @​dyc3! - Fixed #​12524: the Markdown formatter no longer removes the blank line between a paragraph and the list that follows it. Removing it could change the document, because an ordered list that doesn't start at 1 can't interrupt a paragraph and became part of the paragraph text.

    Steps:
    
    3. three
    4. four
  • #​12509 470018b Thanks @​dyc3! - Fixed #​12507: the Markdown formatter no longer drops the > markers after an empty quote line when proseWrap is "always" or "never". Previously, the text after the empty line was moved out of the blockquote.

      > a
      >
    - b
    + > b
  • #​12598 5699601 Thanks @​vidigoat! - Fixed the formatter removing the parentheses around the callee of a new expression when it contains a dynamic import() call, which produced code that doesn't parse.

    - new import("foo").bar();
    + new (import("foo").bar)();
  • #​12508 87d9e6b Thanks @​dyc3! - Fixed #​12502: noInvalidGridAreas now counts the cells in each row of grid-template-areas instead of comparing the length of the row text. Rows such as "a" "bb" are no longer reported, and rows such as "abc" "d e" are now reported.

  • #​12530 7f467b2 Thanks @​dyc3! - Fixed #​12529: noUselessElse no longer reports an else clause when the if block ends with a switch statement that has no default clause. If no case matches, such a switch doesn't exit, so the else clause is needed.

  • #​12511 d4ea663 Thanks @​dyc3! - Fixed #​12505: useDomNodeTextContent no longer reports innerText on values whose type annotation shows they aren't DOM nodes. The following code is now valid:

    const Link = ({ innerText }: { innerText: string }) => <a>{innerText}</a>;
  • #​12588 e262362 Thanks @​ematipico! - Fixed noDescendingSpecificity to compare resolved nested selector targets. Biome no longer reports nested selectors that resolve to different targets, detects equivalent explicit and nested targets, and emits one diagnostic when a parent selector list expands the same nested selector multiple times.

    For example, the following selectors are no longer reported because their final targets are .column and code, respectively:

    .card {
      .column {
        :root[data-theme="dark"] & {}
      }
    
      code {
        :root[data-theme="dark"] & {}
      }
    }
  • #​12534 e59a324 Thanks @​Netail! - Improved the diagnostics of noIdenticalTestTitle. Biome now reports one diagnostic per repeated title, pointing at the first occurrence and at every later occurrence, instead of one diagnostic per duplicate.

  • #​12528 a3132dc Thanks @​ff1451! - Fixed #​12503: noUnknownProperty now checks SCSS nested properties by the name Sass emits for them. For example, radius in border: { radius: 4px; } is checked as border-radius and is no longer reported, while color in font: { color: red; } is checked as font-color and is now reported.

  • #​12113 ec4eb2d Thanks @​dyc3! - Added the nursery rule useConsistentUnicodeBom, which disallows a leading Unicode byte order mark by default and can require one with bom: "always". The rule supports JavaScript, TypeScript, JSON, CSS, GraphQL, HTML, and Markdown, provides a fix, and preserves the unicode-bom option during ESLint migration.

    The following example is invalid by default because it starts with an invisible U+FEFF character:

    const value = 1;
  • #​12248 afbc81e Thanks @​dyc3! - Added the nursery rule useReactNativeValidPlatformColors, which requires PlatformColor() and DynamicColorIOS() calls to use values written directly in the call, so React Native can optimize them.

    import { PlatformColor } from "react-native";
    
    const labelColor = "labelColor";
    const color = PlatformColor(labelColor);
  • #​12599 b62494a Thanks @​dyc3! - Fixed #​12532: checking the project root no longer applies files.includes exclusions to directories above the project.

  • #​12578 6162922 Thanks @​ematipico! - Fixed GraphQL parsing and formatting for executable descriptions and legacy fragment variables. Biome now formats inputs such as "Description" query { field } without panicking and removes insignificant commas consistently.

  • #​12593 35c69ad Thanks @​dyc3! - Fixed #​12555: the default reporter now prints the command summary, the --max-diagnostics warning, and the skipped-fixes notice to stderr instead of stdout. Diagnostics already go to stderr, so the summary can no longer get mixed into the middle of a diagnostic when a tool reads the two streams separately.

  • #​12415 9520907 Thanks @​latin-1! - Fixed #​12412: useSortedProperties now sorts properties inside @keyframes animations in CSS and SCSS.

v2.6.2

Compare Source

Minor Changes
  • #​11479 5c60ba8 Thanks @​nhedger! - Added a --git flag to biome init. The flag enables Git VCS integration and sets vcs.useIgnoreFile to true in the generated configuration, even when the command runs outside a Git repository.

  • #​11742 3a1356d Thanks @​Netail! - Added the biome migrate stylelint command. It imports a Stylelint configuration and its ignore settings into your Biome configuration, mapping Stylelint rules to their Biome equivalents. Pass --write to apply the changes, and --include-inspired or --include-nursery to migrate additional rules.

  • #​12318 774b5b5 Thanks @​Netail! - Added the new assist action useGraphqlSortedDefinitions, which sorts the named definitions of a GraphQL document, such as types, type extensions, directives, fragments, and operations.

    Invalid:

    type User {
      id: ID!
    }
    
    enum Role {
      ADMIN
      USER
    }
    
    directive @auth on FIELD_DEFINITION
  • #​6886 3479d15 Thanks @​christymcgrory! - biome rage now shows the resolved files.includes and files.ignoreUnknown configuration.

  • #​11102 0874b7f Thanks @​gameroman! - Added support for useTailwindSortedClasses rule in HTML-ish files.

  • #​10711 40de5a0 Thanks @​soconnor-seeq! - Adds a new resolutionKind option for object-syntax plugin entries.

    This allows shared Biome configs in monorepos to load local Grit plugins from the package that declares them instead of resolving plugin paths from the consuming project.

    {
      "plugins": [
        { "path": "./grit/no-debugger.grit", "resolutionKind": "config" },
        { "path": "local-plugin.grit", "resolutionKind": "project" },
        { "path": "local-plugin.grit" }
      ]
    }

    Use resolutionKind: "config" to resolve the plugin from the configuration file that declares it. Use resolutionKind: "project" to resolve the plugin from the consuming project. When omitted, resolutionKind defaults to `p

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from skulidropek June 18, 2026 15:10
@renovate renovate Bot changed the title chore(deps): update all dependencies to v7 fix(deps): update all dependencies Jun 18, 2026
@renovate
renovate Bot force-pushed the renovate/all branch 10 times, most recently from 7937dec to 76a7492 Compare June 25, 2026 00:56
@renovate
renovate Bot force-pushed the renovate/all branch 7 times, most recently from 197dcfb to e08373a Compare July 2, 2026 07:14
@renovate
renovate Bot force-pushed the renovate/all branch 9 times, most recently from 8c6623f to a11a8bc Compare July 9, 2026 09:58
@renovate
renovate Bot force-pushed the renovate/all branch 8 times, most recently from 36b2c19 to d8a903e Compare July 27, 2026 11:09
@renovate
renovate Bot force-pushed the renovate/all branch 11 times, most recently from 663e107 to a7174d0 Compare August 3, 2026 19:09
@renovate
renovate Bot force-pushed the renovate/all branch 7 times, most recently from 7d8a0b1 to 4ef3f05 Compare August 10, 2026 17:52
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 88c936e to 1898b71 Compare August 12, 2026 09:05
@coderabbitai

coderabbitai Bot commented Sep 10, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant