fix(deps): update npm non-major dependencies#4093
Merged
Conversation
🦋 Changeset detectedLatest commit: 0ad7132 The changes in this PR will be included in the next version bump. This PR includes changesets to release 4 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
Contributor
|
Preview deployments for this pull request: storybook - themebuilder - www - |
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
Collaborator
|
I concur |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.
This PR contains the following updates:
2.2.3->2.2.4^2.29.6->^2.29.7^7.29.1->^7.30.17.31.0^7.29.1->^7.30.17.31.0^7.8.2->^7.9.17.9.2^7.8.2->^7.9.17.9.2^7.8.2->^7.9.17.9.2^9.1.5->^9.1.79.1.8^9.1.5->^9.1.79.1.8^9.1.5->^9.1.79.1.8^9.1.5->^9.1.79.1.8^9.1.5->^9.1.79.1.8^9.1.5->^9.1.79.1.8^22.18.1->^22.18.6^19.1.12->^19.1.13^5.0.2->^5.0.3^4.0.1->^4.1.0^2.1.0->^2.2.2^13.1.4->^13.2.0^14.0.0->^14.0.1^11.3.1->^11.3.2^22->^22.19.0v22.20.0^7.8.2->^7.9.17.9.2^7.8.2->^7.9.17.9.2^4.50.1->^4.52.04.52.2(+1)^9.1.5->^9.1.79.1.8^9.1.5->^9.1.79.1.8^7.1.4->^7.1.67.1.7^1.2.1->^1.3.0^4.1.5->^4.1.11^4.0.1->^4.0.2Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
biomejs/biome (@biomejs/biome)
v2.2.4Compare Source
Patch Changes
#7453
aa8cea3Thanks @arendjr! - Fixed #7242: Aliases specified inpackage.json'simportssection now support having multiple targets as part of an array.#7454
ac17183Thanks @arendjr! - Greatly improved performance ofnoImportCyclesby eliminating allocations.In one repository, the total runtime of Biome with only
noImportCyclesenabled went from ~23s down to ~4s.#7447
7139aadThanks @rriski! - Fixes #7446. The GritQL$...spread metavariable now correctly matches members in object literals, aligning its behavior with arrays and function calls.#6710
98cf9afThanks @arendjr! - Fixed #4723: Type inference now recognisesindex signatures and their accesses when they are being indexed as a string.
Example
#7415
d042f18Thanks @qraqras! - Fixed #7212, now theuseOptionalChainrule recognizes optional chaining usingtypeof(e.g.,typeof foo !== 'undefined' && foo.bar).#7419
576baf4Thanks @Conaclos! - Fixed #7323.noUnusedPrivateClassMembersno longer reports as unused TypeScriptprivatemembers if the rule encounters a computed access onthis.In the following example,
memberas previously reported as unused. It is no longer reported.351bccdThanks @ematipico! - Added the new nursery lint rulenoJsxLiterals, which disallows the use of string literals inside JSX.The rule catches these cases:
#7406
b906112Thanks @mdevils! - Fixed an issue (#6393) where the useHookAtTopLevel rule reported excessive diagnostics for nested hook calls.The rule now reports only the offending top-level call site, not sub-hooks of composite hooks.
#7461
ea585a9Thanks @arendjr! - Improved performance ofnoPrivateImportsby eliminating allocations.In one repository, the total runtime of Biome with only
noPrivateImportsenabled went from ~3.2s down to ~1.4s.351bccdThanks @ematipico! - Fixed #7411. The Biome Language Server had a regression where opening an editor with a file already open wouldn't load the project settings correctly.#7142
53ff5aeThanks @Netail! - Added the new nursery rulenoDuplicateDependencies, which verifies that no dependencies are duplicated between thebundledDependencies,bundleDependencies,dependencies,devDependencies,overrides,optionalDependencies, andpeerDependenciessections.For example, the following snippets will trigger the rule:
{ "dependencies": { "foo": "" }, "devDependencies": { "foo": "" } }{ "dependencies": { "foo": "" }, "optionalDependencies": { "foo": "" } }{ "dependencies": { "foo": "" }, "peerDependencies": { "foo": "" } }351bccdThanks @ematipico! - Fixed #3824. Now the option CLI--coloris correctly applied to logging too.changesets/changesets (@changesets/cli)
v2.29.7Compare Source
Patch Changes
957f24e]:navikt/aksel (@navikt/aksel-icons)
v7.30.1Compare Source
v7.30.0Compare Source
remix-run/react-router (@react-router/dev)
v7.9.1Compare Source
Patch Changes
Futureinterface naming frommiddleware->v8_middleware(#14327)react-router@7.9.1@react-router/node@7.9.1@react-router/serve@7.9.1v7.9.0Compare Source
Minor Changes
Stabilize middleware and context APIs. (#14215)
We have removed the
unstable_prefix from the following APIs and they are now considered stable and ready for production use:RouterContextProvidercreateContextcreateBrowserRoutergetContextoption<HydratedRouter>getContextpropPlease see the Middleware Docs, the Middleware RFC, and the Client-side Context RFC for more information.
Patch Changes
react-router@7.9.0@react-router/node@7.9.0@react-router/serve@7.9.0remix-run/react-router (@react-router/node)
v7.9.1Compare Source
Patch Changes
react-router@7.9.1v7.9.0Compare Source
Minor Changes
Stabilize middleware and context APIs. (#14215)
We have removed the
unstable_prefix from the following APIs and they are now considered stable and ready for production use:RouterContextProvidercreateContextcreateBrowserRoutergetContextoption<HydratedRouter>getContextpropPlease see the Middleware Docs, the Middleware RFC, and the Client-side Context RFC for more information.
Patch Changes
react-router@7.9.0remix-run/react-router (@react-router/serve)
v7.9.1Compare Source
Patch Changes
react-router@7.9.1@react-router/node@7.9.1@react-router/express@7.9.1v7.9.0Compare Source
Patch Changes
react-router@7.9.0@react-router/express@7.9.0@react-router/node@7.9.0storybookjs/storybook (@storybook/addon-a11y)
v9.1.7Compare Source
vite-plugin-storybook-nextjsto 2.0.7 - #32331, thanks @k35o!@ts-expect-errorin preview - #32442, thanks @mrginglymus!v9.1.6Compare Source
create-storybook- #32344, thanks @shilman!vitejs/vite-plugin-react (@vitejs/plugin-react)
v5.0.3Compare Source
HMR did not work for components imported with queries with rolldown-vite (#872)
Perf: simplify refresh wrapper generation (#835)
vitejs/vite-plugin-react (@vitejs/plugin-react-swc)
v4.1.0Compare Source
Set SWC cacheRoot options
This is set to
{viteCacheDir}/swcand override the default of.swc.Perf: simplify refresh wrapper generation (#835)
abhinaba-ghosh/axe-playwright (axe-playwright)
v2.2.2Compare Source
v2.2.1Compare Source
v2.2.0Compare Source
Features
Bug Fixes
checkA11y()to fixskipFailureoptions not working when reporter is 'junit' (b4514d0)chromaui/chromatic-cli (chromatic)
v13.2.0Compare Source
🚀 Enhancement
Authors: 1
v13.1.5Compare Source
🐛 Bug Fix
Authors: 1
tj/commander.js (commander)
v14.0.1Compare Source
Fixed
Changed
Object.assign()([#2395])string.endsWith()instead ofstring.slice()([#2396]).parseOptions()to process args array in-place ([#2409])._concatValue()to._collectValue()(change code fromarray.concat()toarray.push()) ([#2410])jprichardson/node-fs-extra (fs-extra)
v11.3.2Compare Source
UnhandledPromiseRejectionWarningthat could occur when calling.copy()in some cases (#1056, #1058)nodejs/node (node)
v22.19.0Compare Source
v22.18.0Compare Source
v22.17.1Compare Source
v22.17.0: 2025-06-24, Version 22.17.0 'Jod' (LTS), @aduh95Compare Source
Notable Changes
Instantiating
node:httpclasses withoutnewConstructing classes like
IncomingMessageorServerResponsewithout thenewkeyword is now discouraged. This clarifies API expectations and aligns with standard
JavaScript behavior. It may warn or error in future versions.
Contributed by Yagiz Nizipli in #58518.
options.shell = ""innode:child_processUsing an empty string for
shellpreviously had undefined behavior. This changeencourages explicit choices (e.g.,
shell: trueor a shell path) and avoidsrelying on implementation quirks.
Contributed by Antoine du Hamel and Renegade334 #58564.
HTTP/2 priority signaling
The HTTP/2 prioritization API (e.g.,
stream.priority) is now deprecated due topoor real-world support. Applications should avoid using priority hints and expect future removal.
Contributed by Matteo Collina and Antoine du Hamel #58313.
✅ Features graduated to stable
assert.partialDeepStrictEqual()This method compares only a subset of properties in deep object comparisons,
useful for flexible test assertions. Its stabilization means it's now safe for
general use and won't change unexpectedly in future releases.
Contributed by Ruben Bridgewater in #57370.
Miscellaneous
dirent.parentPathfilehandle.readableWebStream()fs.glob()fs.openAsBlob()node:readline/promisesport.hasRef()readable.compose()readable.iterator()readable.readableAbortedreadable.readableDidReadDuplex.fromWeb()Duplex.toWeb()Readable.fromWeb()Readable.isDisturbed()Readable.toWeb()stream.isErrored()stream.isReadable()URL.createObjectURL()URL.revokeObjectURL()v8.setHeapSnapshotNearHeapLimit()Writable.fromWeb()Writable.toWeb()writable.writableAbortedERR_INPUT_TYPE_NOT_ALLOWEDERR_UNKNOWN_FILE_EXTENSIONERR_UNKNOWN_MODULE_FORMATERR_USE_AFTER_CLOSEContributed by James M Snell in
#57513 and
#58541.
Semver-minor features
🔧
fs.FileHandle.readableWebStreamgetsautoCloseoptionThis gives developers explicit control over whether the file descriptor should
be closed when the stream ends. Helps avoid subtle resource leaks.
Contributed by James M Snell in #58548.
🔧
fs.Dirnow supports explicit resource managementThis improves ergonomics around async iteration of directories. Developers can
now manually control when a directory is closed using
.close()or withSymbol.asyncDispose.Contributed by Antoine du Hamel in #58206.
📊
http2gains diagnostics channel:http2.server.stream.finishAdds observability support for when a stream finishes. Useful for logging,
monitoring, and debugging HTTP/2 behavior without patching internals.
Contributed by Darshan Sen in #58560.
🔐 Permissions: implicit allow-fs-read to entrypoint
Node.js permissions model now allows read access to the entry file by default.
It makes running permission-restricted apps smoother while preserving security.
Contributed by Rafael Gonzaga in #58579.
🎨
util.styleText()adds'none'styleThis lets developers remove styling cleanly without hacks. Useful for overriding
inherited terminal styles when composing styled strings.
Contributed by James M Snell in #58437.
🧑💻 Community updates
0105c13556] - doc: add Filip Skokan to TSC (Rafael Gonzaga) #584993b857735ef] - doc: add JonasBa to collaborators (Jonas Badalic) #58355fdf7612735] - doc: add puskin to collaborators (Giovanni Bucci) #58308Commits
ffe7e1ace0] - (SEMVER-MINOR) assert: mark partialDeepStrictEqual() as stable (Ruben Bridgewater) #57370269931f289] - async_hooks: ensure AsyncLocalStore instances work isolated (Gerhard Stöbich) #581499e0746a4ff] - benchmark: fix broken fs.cpSync benchmark (Dario Piotrowicz) #58472dee8cb5bcb] - benchmark: add more options to cp-sync (Sonny) #58278e840fd5b85] - benchmark: fix typo in method name for error-stack (Miguel Marcondes Filho) #58128b9a16e97e0] - buffer: give names toBuffer.prototype.*Write()functions (Livia Medeiros) #58258d56a5e40af] - buffer: use constexpr where possible (Yagiz Nizipli) #58141215587feca] - build: add support for OpenHarmony operating system (hqzing) #583509bcef6821c] - build: fix uvwasi pkgname (Antoine du Hamel) #582707c3883c2ae] - build: search for libnode.so in multiple places (Jan Staněk) #582133f954accb3] - build: fix pointer compression builds (Joyee Cheung) #5817104c8f59f84] - build: use FILE_OFFSET_BITS=64 esp. on 32-bit arch (RafaelGSS) #580908c2cf3a372] - build: use //third_party/simdutf by default in GN (Shelley Vohr) #58115cff8006792] - child_process: give names toChildProcessfunctions (Livia Medeiros) #583706816d779b6] - child_process: give names to promisifiedexec()andexecFile()(LiviaMedeiros) #579165572cecca4] - crypto: expose crypto.constants.OPENSSL_IS_BORINGSSL (Shelley Vohr) #58387d6aa02889c] - deps: use proper C standard when building libuv (Yaksh Bariya) #58587375a6413d5] - deps: update simdjson to 3.12.3 (Node.js GitHub Bot) #57682e0cd138e52] - deps: update googletest toe9092b1(Node.js GitHub Bot) #5856531e592631f] - deps: update corepack to 0.33.0 (Node.js GitHub Bot) #58566386c24260b] - deps: update sqlite to 3.50.0 (Node.js GitHub Bot) #58272f84998d40b] - deps: update OpenSSL gen container to Ubuntu 22.04 (Michaël Zasso) #58432d49fd29859] - deps: update llhttp to 9.3.0 (Fedor Indutny) #58144e397980a1a] - deps: update libuv to 1.51.0 (Node.js GitHub Bot) #58124a28c33645c] - dns: fix dns query cache implementation (Ethan Arrowood) #584046939b0c624] - doc: fix the order ofprocess.mdsections (Allon Murienik) #584031ca253c363] - doc: add support link for panva (Filip Skokan) #585918319edbcf6] - doc: update metadata for _transformState deprecation (James M Snell) #58530697d258136] - doc: deprecate passing an empty string tooptions.shell(Antoine du Hamel) #58564132fc804e8] - doc: correct formatting of example definitions for--test-shard(Jacob Smith) #585717d0df646f6] - doc: clarify DEP0194 scope (Antoine du Hamel) #585041e6d7da0ce] - doc: deprecate HTTP/2 priority signaling (Matteo Collina) #583135a917bc1d0] - doc: explain child_process code and signal null values everywhere (Darshan Sen) #584790105c13556] - doc: add Filip Skokan to TSC (Rafael Gonzaga) #584992bdc87cd64] - doc: updategit node releaseexample (Antoine du Hamel) #5847528f9b43186] - doc: add missing options.info for ZstdOptions (Jimmy Leung) #58360e19496dfc1] - doc: add missing options.info for BrotliOptions (Jimmy Leung) #583597f905863db] - doc: clarify x509.checkIssued only checks metadata (Filip Skokan) #584575cc97df637] - doc: add links to parent class fornode:zlibclasses (Antoine du Hamel) #5843336e0d5539b] - doc: remove remaining uses of@@​wellknownsyntax (René) #584132f36f8e863] - doc: clarify behavior of --watch-path and --watch flags (Juan Ignacio Benito) #581363b857735ef] - doc: add JonasBa to collaborators (Jonas Badalic) #583559d5e969bb6] - doc: add latest security release steward (Rafael Gonzaga) #58339b22bb03167] - doc: fix CryptoKey.algorithm type and other interfaces in webcrypto.md (Filip Skokan) #58294670f31060b] - doc: mark the callback argument of crypto.generatePrime as mandatory (Allon Murienik) #5829939d9a61239] - doc: remove comma delimiter mention on permissions doc (Rafael Gonzaga) #58297573b0b7bfe] - doc: make Stability labels not sticky in Stability index (Livia Medeiros) #58291a5a686a3ae] - doc: update commit-queue documentation (Dario Piotrowicz) #58275fdf7612735] - doc: add puskin to collaborators (Giovanni Bucci) #58308be492a1708] - doc: update stability status for diagnostics_channel to experimental (Idan Goshen) #582617d00fc2206] - doc: clarify napi_get_value_string_* for bufsize 0 (Tobias Nießen) #58158c8500a2c4a] - doc: fix typo of filehttp.md,outgoingMessage.setTimeoutsection (yusheng chen) #5818834a9b856c3] - doc: update return types for eventNames method in EventEmitter (Yukihiro Hasegawa) #58083faedee59d2] - doc: fix typo in benchmark script path (Miguel Marcondes Filho) #58129570d8d3f10] - doc: clarify future Corepack removal in v25+ (Trivikram Kamat) #57825a71b9fc2ff] - doc: mark multiple APIs stable (James M Snell) #5751373a97d47f3] - doc,lib: update source map links to ECMA426 (Chengzhong Wu) #585978b41429499] - doc,src,test: fix typos (Noritaka Kobayashi) #584770cea14ec7f] - errors: show url of unsupported attributes in the error message (Aditi) #58303b9586bf898] - (SEMVER-MINOR) fs: add autoClose option to FileHandle readableWebStream (James MConfiguration
📅 Schedule: Branch creation - "before 07:00 on Thursday" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.