chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates #166

dependabot · 2025-12-08T00:29:37Z

Bumps the dev-dependencies group with 6 updates in the / directory:

Package	From	To
@biomejs/biome	`2.2.6`	`2.3.8`
@commitlint/cli	`20.1.0`	`20.2.0`
@commitlint/config-conventional	`20.0.0`	`20.2.0`
lerna	`9.0.0`	`9.0.3`
lint-staged	`16.2.4`	`16.2.7`
vite	`7.1.10`	`7.2.6`

Updates @biomejs/biome from 2.2.6 to 2.3.8

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.3.8

2.3.8

Patch Changes
#8188 4ca088c Thanks @ematipico! - Fixed #7390, where Biome couldn't apply the correct configuration passed via --config-path.

If you have multiple root configuration files, running any command with --config-path will now apply the chosen configuration file.
#8171 79adaea Thanks @dibashthapa! - Added the new rule noLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.

For example, the following code triggers the rule because the component would render 0:
const Component = () => {
  const count = 0;
  return <div>{count && <span>Count: {count}</span>}</div>;
};
#8116 b537918 Thanks @Netail! - Added the nursery rule noDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.

Invalid:
<div {...props} something="else" {...props} />
#8256 f1e4696 Thanks @cormacrelf! - Fixed a bug where logs were discarded (the kind from --log-level=info etc.). This is a regression introduced after an internal refactor that wasn't adequately tested.

#8226 3f19b52 Thanks @dyc3! - Fixed #8222: The HTML parser, with Vue directives enabled, can now parse v-slot shorthand syntax, e.g. \<template #foo>.

#8007 182ecdc Thanks @brandonmcconnell! - Added support for dollar-sign-prefixed filenames in the useFilenamingConvention rule.

Biome now allows filenames starting with the dollar-sign (e.g. $postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.
#8218 91484d1 Thanks @hirokiokada77! - Added the noMultiStr rule, which disallows creating multiline strings by escaping newlines.

Invalid:
const foo =
  "Line 1\n\
Line 2";
Valid:

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.3.8

Patch Changes
#8188 4ca088c Thanks @ematipico! - Fixed #7390, where Biome couldn't apply the correct configuration passed via --config-path.

If you have multiple root configuration files, running any command with --config-path will now apply the chosen configuration file.
#8171 79adaea Thanks @dibashthapa! - Added the new rule noLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.

For example, the following code triggers the rule because the component would render 0:
const Component = () => {
  const count = 0;
  return <div>{count && <span>Count: {count}</span>}</div>;
};
#8116 b537918 Thanks @Netail! - Added the nursery rule noDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.

Invalid:
<div {...props} something="else" {...props} />
#8256 f1e4696 Thanks @cormacrelf! - Fixed a bug where logs were discarded (the kind from --log-level=info etc.). This is a regression introduced after an internal refactor that wasn't adequately tested.

#8226 3f19b52 Thanks @dyc3! - Fixed #8222: The HTML parser, with Vue directives enabled, can now parse v-slot shorthand syntax, e.g. \<template #foo>.

#8007 182ecdc Thanks @brandonmcconnell! - Added support for dollar-sign-prefixed filenames in the useFilenamingConvention rule.

Biome now allows filenames starting with the dollar-sign (e.g. $postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.
#8218 91484d1 Thanks @hirokiokada77! - Added the noMultiStr rule, which disallows creating multiline strings by escaping newlines.

Invalid:
const foo =
  "Line 1\n\
Line 2";
Valid:
const foo = "Line 1\nLine 2";
const bar = `Line 1

... (truncated)

Commits

0a6b6fb chore: restore version and yaml how they were
5d15cd5 chore: revert version
59fa146 ci: release (#8263)
f7e836f feat(biome_js_analyze): implement noProto rule (#8276)
b537918 feat(js_biome_analyze): implement noDuplicatedSpreadProps (#8116)
91484d1 feat(biome_js_analyze): implement noMultiStr rule (#8218)
68c052e feat(biome_js_analyze): implement noEqualsToNull rule (#8214)
79adaea feat(lint): added new rule no-leaked-render from eslint-react (#8171)
cd2edd7 feat(js_analyze): implement noTernary (#8201)
8e97b89 ci: release (#8161)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @biomejs/biome since your current version.

Updates @commitlint/cli from 20.1.0 to 20.2.0

Release notes

Sourced from @commitlint/cli's releases.

v20.2.0

20.2.0 (2025-12-05)

Features

feat(lint): update ESLint configuration to use Vitest and remove Jest by @alsmadi99 in conventional-changelog/commitlint#4542

feat(rules): add breaking-change-exclamation-mark by @adamchristiansen in conventional-changelog/commitlint#4548

feat(cz-commitlint): support customizable commit prompt with emojis by @parloti in conventional-changelog/commitlint#4540

Chore, docs, etc

docs: fix missing backtick in Windows setup commands by @silentip404 in conventional-changelog/commitlint#4559

New Contributors

@adamchristiansen made their first contribution in conventional-changelog/commitlint#4548

@parloti made their first contribution in conventional-changelog/commitlint#4540

@silentip404 made their first contribution in conventional-changelog/commitlint#4559

Full Changelog: conventional-changelog/commitlint@v20.1.0...v20.2.0

Changelog

Sourced from @commitlint/cli's changelog.

20.2.0 (2025-12-05)

Note: Version bump only for package @commitlint/cli

Commits

ddad9b4 v20.2.0
See full diff in compare view

Updates @commitlint/config-conventional from 20.0.0 to 20.2.0

Release notes

Sourced from @commitlint/config-conventional's releases.

v20.2.0

20.2.0 (2025-12-05)

Features

feat(lint): update ESLint configuration to use Vitest and remove Jest by @alsmadi99 in conventional-changelog/commitlint#4542

feat(rules): add breaking-change-exclamation-mark by @adamchristiansen in conventional-changelog/commitlint#4548

feat(cz-commitlint): support customizable commit prompt with emojis by @parloti in conventional-changelog/commitlint#4540

Chore, docs, etc

docs: fix missing backtick in Windows setup commands by @silentip404 in conventional-changelog/commitlint#4559

New Contributors

@adamchristiansen made their first contribution in conventional-changelog/commitlint#4548

@parloti made their first contribution in conventional-changelog/commitlint#4540

@silentip404 made their first contribution in conventional-changelog/commitlint#4559

Full Changelog: conventional-changelog/commitlint@v20.1.0...v20.2.0

v20.1.0

20.1.0 (2025-09-30)

Features

feat(config-pnpm-scopes): allow global scope by @ya2s in conventional-changelog/commitlint#4553

Bug Fixes

fix(resolve-extends): add import attribute for JSON config files by @macieklamberski in conventional-changelog/commitlint#4551

New Contributors

@ya2s made their first contribution in conventional-changelog/commitlint#4553

@macieklamberski made their first contribution in conventional-changelog/commitlint#4551

Full Changelog: conventional-changelog/commitlint@v20.0.0...v20.1.0

Changelog

Sourced from @commitlint/config-conventional's changelog.

20.2.0 (2025-12-05)

Note: Version bump only for package @commitlint/config-conventional

Commits

ddad9b4 v20.2.0
See full diff in compare view

Updates lerna from 9.0.0 to 9.0.3

Release notes

Sourced from lerna's releases.

v9.0.3

9.0.3 (2025-11-27)

Bumped some dependencies to reduce audit warning noise.

NOTE: 9.0.2 does not exist because of a failed release

v9.0.1

9.0.1 (2025-11-14)

Bug Fixes

expand version range to include nx v22.x (#4242) (0cca286)

Changelog

Sourced from lerna's changelog.

9.0.3 (2025-11-27)

Note: Version bump only for package lerna

9.0.2 (2025-11-27)

Note: Version bump only for package lerna

9.0.1 (2025-11-14)

Bug Fixes

expand version range to include nx v22.x (#4242) (0cca286)

Commits

215ff00 chore(misc): publish 9.0.3
b1b2166 chore(misc): publish 9.0.2
6c1ea96 chore(deps): bump js-yaml from 4.1.0 to 4.1.1 (#4245)
9df335a chore(misc): publish 9.0.1
0cca286 fix: expand version range to include nx v22.x (#4242)
See full diff in compare view

Updates lint-staged from 16.2.4 to 16.2.7

Release notes

Sourced from lint-staged's releases.

v16.2.7

Patch Changes

#1711 ef74c8d Thanks @iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.

v16.2.6

Patch Changes

#1693 33d4502 Thanks @Adrian-Baran-GY! - Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

v16.2.5

Patch Changes

#1687 9e02d9d Thanks @iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

Changelog

Sourced from lint-staged's changelog.

16.2.7

Patch Changes

#1711 ef74c8d Thanks @iiroj! - Do not display a "failed to spawn" error message when a task fails normally. This message is reserved for when the task didn't run because spawning it failed.

16.2.6

Patch Changes

#1693 33d4502 Thanks @Adrian-Baran-GY! - Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

16.2.5

Patch Changes

#1687 9e02d9d Thanks @iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

Commits

0c1b000 chore(changeset): release
595b202 build(deps): update dependencies
ef74c8d fix: do display "failed to spawn" message when task fails normally
5cf2a1e style: do not autofix when running lint-staged
ba40012 chore: drop npx from commit-msg hook
d67de9a chore: fix pre-push hook usage with changeset
8017d1d build(deps): update dependencies
922d7f4 ci: remove dependabot integration, it's not useful
6aeeef1 docs: add PR template
a5728b5 docs: add AGENTS.md
Additional commits viewable in compare view

Updates vite from 7.1.10 to 7.2.6

Release notes

Sourced from vite's releases.

v7.2.6

Please refer to CHANGELOG.md for details.

v7.2.5

Please refer to CHANGELOG.md for details.

Note: 7.2.5 failed to publish so it is skipped on npm

v7.2.4

Please refer to CHANGELOG.md for details.

v7.2.3

Please refer to CHANGELOG.md for details.

v7.2.2

Please refer to CHANGELOG.md for details.

plugin-legacy@7.2.1

Please refer to CHANGELOG.md for details.

v7.2.1

Please refer to CHANGELOG.md for details.

plugin-legacy@7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0-beta.1

Please refer to CHANGELOG.md for details.

v7.2.0-beta.0

Please refer to CHANGELOG.md for details.

v7.1.12

Please refer to CHANGELOG.md for details.

v7.1.11

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

config: handle shebang properly (#21158) (df5a30d)

deps: update all non-major dependencies (#21146) (a3cd262)

deps: update all non-major dependencies (#21175) (72e398a)

fix external: true merging (#21164) (5ef557a)

shortcuts not rebound after server restart (#21166) (3765f7b)

Performance Improvements

deps: replace debug with obug (#21137) (203a551)

Documentation

clarify manifest.json imports field is JS chunks only (#21136) (46d3077)

Miscellaneous Chores

deps: update rolldown-related dependencies (#21174) (74559c9)

7.2.4 (2025-11-20)

Bug Fixes

revert "perf(deps): replace debug with obug (#21107)" (2d66b7b)

7.2.3 (2025-11-20)

Bug Fixes

allow multiple bindCLIShortcuts calls with shortcut merging (#21103) (5909efd)

deps: update all non-major dependencies (#21096) (6a34ac3)

deps: update all non-major dependencies (#21128) (4f8171e)

Performance Improvements

deps: replace debug with obug (#21107) (acfe939)

Miscellaneous Chores

deps: update dependency @rollup/plugin-commonjs to v29 (#21099) (02ceaec)

deps: update rolldown-related dependencies (#21095) (39a0a15)

deps: update rolldown-related dependencies (#21127) (5029720)

7.2.2 (2025-11-07)

Bug Fixes

revert "refactor: use fs.cpSync (#21019)" (#21081) (728c8ee)

7.2.1 (2025-11-06)

... (truncated)

Commits

bda5dbb release: v7.2.6
3aa7527 release: v7.2.5
72e398a fix(deps): update all non-major dependencies (#21175)
3765f7b fix: shortcuts not rebound after server restart (#21166)
5ef557a fix: fix external: true merging (#21164)
74559c9 chore(deps): update rolldown-related dependencies (#21174)
df5a30d fix(config): handle shebang properly (#21158)
a3cd262 fix(deps): update all non-major dependencies (#21146)
46d3077 docs: clarify manifest.json imports field is JS chunks only (#21136)
203a551 perf(deps): replace debug with obug (#21137)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…tory with 6 updates Bumps the dev-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.2.6` | `2.3.8` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `20.1.0` | `20.2.0` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `20.0.0` | `20.2.0` | | [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) | `9.0.0` | `9.0.3` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.2.4` | `16.2.7` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.1.10` | `7.2.6` | Updates `@biomejs/biome` from 2.2.6 to 2.3.8 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.8/packages/@biomejs/biome) Updates `@commitlint/cli` from 20.1.0 to 20.2.0 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.2.0/@commitlint/cli) Updates `@commitlint/config-conventional` from 20.0.0 to 20.2.0 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v20.2.0/@commitlint/config-conventional) Updates `lerna` from 9.0.0 to 9.0.3 - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v9.0.3/packages/lerna) Updates `lint-staged` from 16.2.4 to 16.2.7 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.2.4...v16.2.7) Updates `vite` from 7.1.10 to 7.2.6 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.2.6/packages/vite) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.3.8 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@commitlint/cli" dependency-version: 20.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@commitlint/config-conventional" dependency-version: 20.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: lerna dependency-version: 9.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: lint-staged dependency-version: 16.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: vite dependency-version: 7.2.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-12-08T00:29:38Z

Labels

The following labels could not be found: dependencies, npm, root. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates #166

chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates #166

Uh oh!

dependabot bot commented on behalf of github Dec 8, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Dec 8, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates #166

Are you sure you want to change the base?

chore(deps)(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates #166

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.3.8

2.3.8

Patch Changes

2.3.8

Patch Changes

v20.2.0

20.2.0 (2025-12-05)

Features

Chore, docs, etc

New Contributors

20.2.0 (2025-12-05)

v20.2.0

20.2.0 (2025-12-05)

Features

Chore, docs, etc

New Contributors

v20.1.0

20.1.0 (2025-09-30)

Features

Bug Fixes

New Contributors

20.2.0 (2025-12-05)

v9.0.3

9.0.3 (2025-11-27)

v9.0.1

9.0.1 (2025-11-14)

Bug Fixes

9.0.3 (2025-11-27)

9.0.2 (2025-11-27)

9.0.1 (2025-11-14)

Bug Fixes

v16.2.7

Patch Changes

v16.2.6

Patch Changes

v16.2.5

Patch Changes

16.2.7

Patch Changes

16.2.6

Patch Changes

16.2.5

Patch Changes

v7.2.6

v7.2.5

v7.2.4

v7.2.3

v7.2.2

plugin-legacy@7.2.1

v7.2.1

plugin-legacy@7.2.0

v7.2.0

v7.2.0-beta.1

v7.2.0-beta.0

v7.1.12

v7.1.11

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

7.2.4 (2025-11-20)

Bug Fixes

7.2.3 (2025-11-20)

Bug Fixes

Performance Improvements

Miscellaneous Chores

7.2.2 (2025-11-07)

Bug Fixes

7.2.1 (2025-11-06)

Uh oh!

dependabot bot commented on behalf of github Dec 8, 2025 •

edited

Loading