chore(deps): update devdependencies (major) #428
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.0.2->^5.0.0^1.11.1->^2.0.0^1.1.1->^2.0.0^2.2.3->^3.0.0^1.1.3->^2.0.0^1.9.4->^2.0.0^25.0.0->^27.0.0^13.0.0->^14.0.0^16.0.0->^17.0.0^14.0.0->^16.0.0^29.5.14->^30.0.0^22.13.8->^24.0.07.0.3->10.1.0^29.7.0->^30.0.0^1.11.2->^2.0.0^18.0.0->^19.0.0^6.1.4->^7.0.0^6.2.0->^7.0.0Release Notes
actions/toolkit (@actions/cache)
v5.0.1@azure/storage-blobfrom^12.13.0to^12.29.1#2213@azure/core-rest-pipelineinstead of deprecated@azure/core-http, which eliminates the transitive dependency onnode-fetch@2→whatwg-url@5→tr46@​0.0.3that used the deprecated punycode modulev5.0.0@azure/ms-rest-jsdependency #2197TransferProgressEventtype is now imported from@azure/core-rest-pipelineinstead of@azure/ms-rest-js@actions/corefrom^1.11.1to^2.0.0#2198@actions/execfrom^1.0.1to^2.0.0#2198@actions/globfrom^0.1.0to^0.5.0#2198@actions/http-clientfrom^2.1.1to^3.0.0#2198@actions/iofrom^1.0.1to^2.0.0#2198node-fetchoverride to resolve audit vulnerabilities #2110v4.1.0v4.0.5v4.0.4@protobuf-ts/pluginto dev dependencies #2106actions/toolkit (@actions/core)
v2.0.1v2.0.0actions/toolkit (@actions/exec)
v2.0.0actions/toolkit (@actions/http-client)
v3.0.0actions/toolkit (@actions/io)
v2.0.0biomejs/biome (@biomejs/biome)
v2.3.10Compare Source
Patch Changes
#8417
c3a2557Thanks @taga3s! - Fixed #7809:noRedeclareno longer reports redeclarations forinfertype in conditional types.#8477
90e8684Thanks @dyc3! - Fixed #8475: fixed a regression in hownoExtraNonNullAssertionflags extra non-null assertions#8479
250b519Thanks @dyc3! - Fixed #8473: The semantic model now indexes typescript constructor method definitions, and no longer panics if you use one (a regression in 2.3.9).#8448
2af85c1Thanks @mdevils! - Improved handling ofdefineProps()macro in Vue components. ThenoVueReservedKeysrule now avoids false positives in non-setup scripts.#8420
42033b0Thanks @vsn4ik! - Fixed the nursery rulenoLeakedRender.The
biome migrate eslintcommand now correctly detects the rulereact/jsx-no-leaked-renderin your eslint configurations.#8426
285d932Thanks @anthonyshew! - Added a Turborepo domain and a new "noUndeclaredEnvVars" rule in it for warning users of unsafe environment variable usage in Turborepos.#8410
a21db74Thanks @ematipico! - Fixed #2988 where Biome couldn't handle properly characters that contain multiple code points when running instdinmode.#8372
b352ee4Thanks @Netail! - Added the nursery rulenoAmbiguousAnchorText, which disallows ambiguous anchor descriptions.Invalid
v2.3.9Compare Source
Patch Changes
#8232
84c9e08Thanks @ruidosujeira! - Added the nursery rulenoScriptUrl.This rule disallows the use of
javascript:URLs, which are considered a form ofevaland can pose security risks such as XSS vulnerabilities.#8341
343dc4dThanks @arendjr! - Added the nursery ruleuseAwaitThenable, which enforces thatawaitis only used on Promise values.Invalid
Caution
This is a first iteration of the rule, and does not yet detect generic "thenable" values.
#8034
e7e0f6cThanks @Netail! - Added the nursery ruleuseRegexpExec. EnforceRegExp#execoverString#matchif no global flag is provided.#8137
d407efbThanks @denbezrukov! - Reduced the internal memory used by the Biome formatter.#8281
30b046fThanks @tylersayshi! - Added the ruleuseRequiredScripts, which enforces presence of configurable entries in thescriptssection ofpackage.jsonfiles.#8290
d74c8bdThanks @dyc3! - The HTML formatter has been updated to match Prettier 3.7's behavior for handling<iframe>'sallowattribute.#8302
d1d5014Thanks @mlafeldt! - Fixed #8109: return statements in Astro frontmatter no longer trigger "Illegal return statement" errors when usingexperimentalFullSupportEnabled.#8346
f3aee1aThanks @arendjr! - Fixed #8292: Implement trackingof types of TypeScript constructor parameter properties.
This resolves certain false negatives in
noFloatingPromisesand other typedrules.
Example
#8326
153e3c6Thanks @ematipico! - Improved the rulenoBiomeFirstException. The rule can now inspect if extended configurations already contain the catch-all**insidefiles.includesand, if so, the rule suggests removing**from the user configuration.#8433
397547aThanks @dyc3! - Fixed #7920: The CSS parser, with Tailwind directives enabled, will no longer error when you use things likeprefix(tw)in@importat rules.#8378
cc2a62eThanks @Bertie690! - Clarify diagnostic message forlint/style/useUnifiedTypeSignaturesThe rule's diagnostic message now clearly states that multiple similar overload signatures are hard to read & maintain, as opposed to overload signatures in general.
#8296
9d3ef10Thanks @dyc3! -biome ragenow shows if you have experimental HTML full support enabled.#8414
09acf2aThanks @Bertie690! - Updated the documentation & diagnostic message forlint/nursery/noProto, mentioning the reasons for its longstanding deprecation and why more modern alternatives are preferred.Notably, the rule clearly states that using
__proto__inside object literal definitions is still allowed, being a standard way to set the prototype of a newly created object.#8445
c3df0e0Thanks @tt-a1i! - Fix--changedand--stagedflags throwing "No such file or directory" error when a file has been deleted or renamed in the working directory. The CLI now filters out files that no longer exist before processing.#8459
b17d12bThanks @ruidosujeira! - Fix #8435: resolved false positive innoUnusedVariablesfor generic type parameters in construct signature type members (new <T>(): T).#8439
a78774bThanks @tt-a1i! - Fixed #8011:useConsistentCurlyBracesno longer suggests removing curly braces from JSX expression children containing characters that would cause parsing issues or semantic changes when converted to plain JSX text ({,},<,>,&).#8436
a392c06Thanks @ruidosujeira! - Fixed #8429. Formatter, linter, and assist settings now correctly inherit from global configuration when not explicitly specified in overrides.Before this fix, when an override specified only one feature (e.g., only
linter), other features would be incorrectly disabled instead of inheriting from global settings.Example configuration that now works correctly:
{ "formatter": { "enabled": true }, "overrides": [ { "includes": ["*.vue"], "linter": { "enabled": false } } ] }After this fix,
.vuefiles will have the linter disabled (as specified in the override) but the formatter enabled (inherited from global settings).#8411
9f1b3b0Thanks @rriski! - Properly handlename,type_arguments, andattributesslots forJsxOpeningElementandJsxSelfClosingElementGritQL patterns.The following biome search commands no longer throw errors:
#8441
cf37d0dThanks @tt-a1i! - Fixed #6577:noUselessUndefinedno longer reports() => undefinedin arrow function expression bodies. Previously, the rule would flag this pattern and suggest replacing it with() => {}, which conflicts with thenoEmptyBlockStatementsrule.#8444
8caa7a0Thanks @tt-a1i! - FixnoUnknownMediaFeatureNamefalse positive forprefers-reduced-transparencymedia feature. The feature name was misspelled asprefers-reduded-transparencyin the keywords list.#8443
c3fa5a1Thanks @tt-a1i! - FixuseGenericFontNamesfalse positive when a CSS variable is used as the last value infont-familyorfont. The rule now correctly ignores cases likefont-family: "Noto Serif", var(--serif)andfont: 1em Arial, var(--fallback).#8281
30b046fThanks @tylersayshi! - FixednoDuplicateDependenciesincorrectly triggering on files like_package.json.#8315
c7915c4Thanks @hirokiokada77! - Fixed #5213: ThenoDoneCallbackrule no longer flags false positives when a method is called on a regular variable bound to identifiers such asbefore,after,beforeEach, andafterEach.#8398
204844fThanks @Bertie690! - The default value of theignoreRestSiblingsoption fornoUnusedVariables'has been reverted to its prior value of
trueafter an internal refactor accidentally changed it.The diagnostic message has also been tweaked for readability.
#8242
9694e37Thanks @dyc3! - Fixed bugs in the HTML parser so that it will flag invalid shorthand syntaxes instead of silently accepting them. For example,<Foo : foo="5" />is now invalid because there is a space after the:.#8297
efa694cThanks @Yonom! - Added support for negative value utilities inuseSortedClasses. Negative value utilities such as-ml-2or-top-4are now recognized and sorted correctly alongside their positive counterparts.#8335
3710702Thanks @dibashthapa! - Added the new nursery ruleuseDestructuring. This rule helps to encourage destructuring from arrays and objects.For example, the following code triggers because the variable name
xmatches the propertyfoo.x, making it ideal for object destructuring syntax.#8383
59b2f9aThanks @ematipico! - Fixed #7927:noExtraNonNullAssertionincorrectly flagged separate non-null assertions on both sides of an assignment.The rule now correctly distinguishes between nested non-null assertions (still flagged) and separate non-null assertions on different sides of an assignment (allowed).
Examples
Valid (now allowed)
Invalid (still flagged)
#8401
382786bThanks @Bertie690! -useExhaustiveDependenciesnow correctly validates custom hooks whose dependency arrays come before their callbacks.Previously, a logical error caused the rule to be unable to detect dependency arrays placed before hook callbacks, producing spurious errors and blocking further diagnostics.
{ "linter": { "rules": { "correctness": { "useExhaustiveDependencies": { "level": "error", "options": { "hooks": [ { "name": "doSomething", "closureIndex": 2, "dependenciesIndex": 0 } ] } } } } } }The rule documentation & diagnostic messages have also been reworked for improved clarity.
#8365
8f36051Thanks @JacquesLeupin! - Fixed #8360: GritQL plugins defined in child configurations withextends: "//"now work correctly.#8306
8de2774Thanks @dibashthapa! - Fixed #8288: Fixed the issue with false positive errorsThis new change will ignore attribute and only show diagnostics for JSX Expressions
For example
Valid:
Invalid:
#8356
f9673fcThanks @ematipico! - Fixed #7917, where Biome removed the styles contained in a<style lang="scss">, whenexperimentalFullSupportEnabledis enabled.#8371
d71924eThanks @ematipico! - Fixed #7343, where Biome failed to resolve extended configurations from parent directories using relative paths.#8404
6a221f9Thanks @fireairforce! - Fixed #7826, where a class member namedasyncwill not cause the parse error.#8249
893e36cThanks @cormacrelf! - Addressed #7538. Reduced thevolume of logging from the LSP server.
Use
biome cleanto remove large logs.#8303
db2c65bThanks @hirokiokada77! - Fixed #8300:noUnusedImportsnow detects JSDoc tags on object properties.#8328
9cf2332Thanks @Netail! - Corrected rule source reference.biome migrate eslintshould do a bit better detecting rules in your eslint configurations.#8403
c96dcf2Thanks @dyc3! - Fixed #8340:noUnknownPropertywill no longer flag anything in@pluginwhen the parser optiontailwindDirectivesis enabled#8284
4976d1bThanks @denbezrukov! - Improved the performance of the Biome Formatter by enabling the internal source maps only when needed.#8260
a226b28Thanks @ho991217! - Fixed biome-vscode#817: Biome now updates documents when thetextDocument/didSavenotification is received.#8183
b064786Thanks @hornta! - Fixed #8179: TheuseConsistentArrowReturnrule now correctly handles multiline expressions in its autofix when thestyleoption is set to"always".Previously, the autofix would incorrectly place a newline after the
returnkeyword, causing unexpected behavior.Example:
Now correctly autofixes to:
const foo = (l) => { - return - l.split('\n'); + return l.split('\n'); }#8382
7409cbaThanks @fireairforce! - Fixed #8338: Ignored thenoUnknownTypeSelectorcheck when therootselector is used under View Transition pseudo-elements.Example
#7513
e039f3bThanks @AsherDe! - Added the nursery rulenoVueSetupPropsReactivityLoss.This new rule disallows usages that cause the reactivity of
propspassed to thesetupfunction to be lost.Invalid code example:
v2.3.8Compare Source
Patch Changes
#8188
4ca088cThanks @ematipico! - Fixed #7390, where Biome couldn't apply the correct configuration passed via--config-path.If you have multiple root configuration files, running any command with
--config-pathwill now apply the chosen configuration file.#8171
79adaeaThanks @dibashthapa! - Added the new rulenoLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.For example, the following code triggers the rule because the component would render
0:#8116
b537918Thanks @Netail! - Added the nursery rulenoDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.Invalid:
#8256
f1e4696Thanks @cormacrelf! - Fixed a bug where logs were discarded (the kind from--log-level=infoetc.). This is a regression introduced after an internal refactor that wasn't adequately tested.#8226
3f19b52Thanks @dyc3! - Fixed #8222: The HTML parser, with Vue directives enabled, can now parsev-slotshorthand syntax, e.g.<template #foo>.#8007
182ecdcThanks @brandonmcconnell! - Added support for dollar-sign-prefixed filenames in theuseFilenamingConventionrule.Biome now allows filenames starting with the dollar-sign (e.g.
$postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.#8218
91484d1Thanks @hirokiokada77! - Added thenoMultiStrrule, which disallows creating multiline strings by escaping newlines.Invalid:
Valid:
#8225
98ca2aeThanks @ongyuxing! - Fixed #7806: Prefer breaking after the assignment operator for conditional types with generic parameters to match Prettier.#6765
23f7855Thanks @emilyinure! - Fixed #6569: Allow files to export from themselves withnoImportCycles.This means the following is now allowed:
#8214
68c052eThanks @hirokiokada77! - Added thenoEqualsToNullrule, which enforces the use of===and!==for comparison withnullinstead of==or!=.Invalid:
Valid:
#8219
793bb9aThanks @dyc3! - Fixed #8190: The HTML parser will now parse Vue event handlers that contain:correctly, e.g.@update:modelValue="onUpdate".#8259
4a9139bThanks @hirokiokada77! - Fixed #8254: ThenoParameterAssignrule withpropertyAssignment: "deny"was incorrectly reporting an error when a function parameter was used on the right-hand side of an assignment to a local variable's property.The rule should only flag assignments that modify the parameter binding or its properties (L-value), not the use of its value.
Valid:
#8201
cd2edd7Thanks @Netail! - Added the nursery rulenoTernary. Disallow ternary operators.Invalid:
#8172
de98933Thanks @JeremyMoeglich! - Fixed #8145: handling of large hex literals, which previously caused both false positives and false negatives.This affects
noPrecisionLossandnoConstantMathMinMaxClamp.#8210
7b44e9eThanks @Netail! - Corrected rule source reference.biome migrate eslintshould do a bit better detecting rules in your eslint configurations.#8213
e430555Thanks @ruidosujeira! - Fixed #8209: Recognized formatting capability when either range or on-type formatting is supported, not only full-file formatting. This ensures editors and the language server correctly detect formatting support in files like JSONC.#8202
6f49d95Thanks @hirokiokada77! - Fixed #8079: Properly handlenameandvaluemetavariables forJsxAttributeGritQL queries.The following
biome searchcommand no longer throws an error:#8276
f7e836fThanks @hirokiokada77! - Added thenoProtorule, which disallows the use of the__proto__property for getting or setting the prototype of an object.Invalid:
Valid:
v2.3.7Compare Source
Patch Changes
#8169
7fdcec8Thanks @arendjr! - Fixed #7999: Correctly placeawaitafter leading comment in auto-fix action fromnoFloatingPromisesrule.#8157
12d5b42Thanks @Conaclos! - Fixed #8148.noInvalidUseBeforeDeclarationno longer reports some valid use before declarations.The following code is no longer reported as invalid:
#8178
6ba4157Thanks @dyc3! - Fixed #8174, where the HTML parser would parse 2 directives as a single directive because it would not reject whitespace in Vue directives. This would cause the formatter to erroneously merge the 2 directives into one, resulting in broken code.#8088
0eb08e8Thanks @db295! - Fixed #7876: ThenoUnusedImportsrule now ignores imports that are used by @linkcode and @linkplain (previously supported @link and @see).The following code will no longer be a false positive:
#8119
8d64655Thanks @ematipico! - Improved the detection of the rulenoUnnecessaryConditions. Now the rule isn't triggered for variables that are mutated inside a module.This logic deviates from the original rule, hence
noUnnecessaryConditionsis now marked as "inspired".In the following example,
heystarts asfalse, but then it's assigned to a string. The rule isn't triggered inside theifcheck.#8149
e0a02bfThanks @Netail! - Fixed #8144: ImprovenoSyncScripts, ignore script tags withtype="module"as these are always non-blocking.#8182
e9f068eThanks @hirokiokada77! - Fixed #7877: Range suppressions now handle suppressed categories properly.Valid:
#8111
bf1a836Thanks @ryan-m-walker! - Added support for parsing and formatting the CSS if function.Example
#8173
7fc07c1Thanks @ematipico! - Fixed #8138 by reverting an internal refactor that caused a regression to the rulenoUnusedPrivateClassMembers.#8119
8d64655Thanks @ematipico! - Improved the type inference engine, by resolving types for variables that are assigned to multiple values.#8158
fb1458bThanks @dyc3! - Added theuseVueValidVTextlint rule to enforce valid `vConfiguration
📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.