fix(deps): update npm non-major dependencies#4129
Merged
Conversation
🦋 Changeset detectedLatest commit: 4ed9e19 The changes in this PR will be included in the next version bump. This PR includes changesets to release 4 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
Contributor
|
Preview deployments for this pull request: storybook - themebuilder - www - |
968b470 to
8e2b7bf
Compare
oddvernes
approved these changes
Oct 9, 2025
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.2.4->2.2.5^1.117.0->^1.117.1^16.0.1->^16.0.2^9.1.8->^9.1.10^9.1.8->^9.1.10^9.1.8->^9.1.10^9.1.8->^9.1.10^9.1.8->^9.1.10^9.1.8->^9.1.10^6.8.0->^6.9.1^22.18.6->^22.18.8^19.1.15->^19.2.0^18.3.24->^18.3.25^19.1.9->^19.2.0^13.2.1->^13.3.0^25.5.2->^25.5.310.17.1+sha512.17c560fca4867ae9473a3899ad84a88334914f379be46d455cbf92e5cf4b39d34985d452d2583baf19967fa76cb5c17bc9e245529d0b98745721aa7200ecaf7a->10.18.0^19.1.1->^19.2.0^19.1.1->^19.2.0^4.52.3->^4.52.4^9.1.8->^9.1.10^9.1.8->^9.1.10^5.0.4->^5.1.0^5.9.2->^5.9.3^7.1.7->^7.1.9Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
biomejs/biome (@biomejs/biome)
v2.2.5Compare Source
Patch Changes
#7597
5c3d542Thanks @arendjr! - Fixed #6432:useImportExtensionsnow works correctly with aliased paths.#7269
f18dac1Thanks @CDGardner! - Fixed #6648, where Biome'snoUselessFragmentscontained inconsistencies with ESLint for fragments only containing text.Previously, Biome would report that fragments with only text were unnecessary under the
noUselessFragmentsrule. Further analysis of ESLint's behavior towards these cases revealed that text-only fragments (<>A</a>,<React.Fragment>B</React.Fragment>,<RenamedFragment>B</RenamedFragment>) would not havenoUselessFragmentsemitted for them.On the Biome side, instances such as these would emit
noUselessFragments, and applying the suggested fix would turn the text content into a proper JS string.The proposed update was to align Biome's reaction to this rule with ESLint's; the aforementioned examples will now be supported from Biome's perspective, thus valid use of fragments.
#7498
002cdedThanks @siketyan! - Fixed #6893: TheuseExhaustiveDependenciesrule now correctly adds a dependency that is captured in a shorthand object member. For example:is now correctly fixed to:
#7509
1b61631Thanks @siketyan! - Added a new lint rulenoReactForwardRef, which detects usages offorwardRefthat is no longer needed and deprecated in React 19.For example:
will be fixed to:
Note that the rule provides an unsafe fix, which may break the code. Don't forget to review the code after applying the fix.
#7520
3f06e19Thanks @arendjr! - Added new nursery rulenoDeprecatedImportsto flag imports of deprecated symbols.Invalid example
Valid examples
#7457
9637f93Thanks @kedevked! - AddedstyleandrequireForObjectLiteraloptions to the lint ruleuseConsistentArrowReturn.This rule enforces a consistent return style for arrow functions. It can be configured with the following options:
style: (default:asNeeded)always: enforces that arrow functions always have a block body.never: enforces that arrow functions never have a block body, when possible.asNeeded: enforces that arrow functions have a block body only when necessary (e.g. for object literals).style: "always"Invalid:
Valid:
style: "never"Invalid:
Valid:
style: "asNeeded"Invalid:
Valid:
style: "asNeeded"andrequireForObjectLiteral: trueValid:
#7510
527cec2Thanks @rriski! - Implements #7339. GritQL patterns can now use native Biome AST nodes using theirPascalCasenames, in addition to the existing TreeSitter-compatiblesnake_casenames.#7574
47907e7Thanks @kedevked! - Fixed 7574. The diagnostic message for the ruleuseSolidForComponentnow correctly emphasizes<For />and provides a working hyperlink to the Solid documentation.#7497
bd70f40Thanks @siketyan! - Fixed #7320: TheuseConsistentCurlyBracesrule now correctly detects a string literal including"inside a JSX attribute value.#7522
1af9931Thanks @Netail! - Added extra references to external rules to improve migration for the following rules:noUselessFragments&noNestedComponentDefinitions#7597
5c3d542Thanks @arendjr! - Fixed an issue wherepackage.jsonmanifests would not be correctly discoveredwhen evaluating files in the same directory.
#7565
38d2098Thanks @siketyan! - The resolver can now correctly resolve.ts,.tsx,.d.ts,.jsfiles by.jsextension if exists, based on the file extension substitution in TypeScript.For example, the linter can now detect the floating promise in the following situation, if you have enabled the
noFloatingPromisesrule.foo.tsbar.ts#7542
cadad2cThanks @mdevils! - Added the rulenoVueDuplicateKeys, which prevents duplicate keys in Vue component definitions.This rule prevents the use of duplicate keys across different Vue component options such as
props,data,computed,methods, andsetup. Even if keys don't conflict in the script tag, they may cause issues in the template since Vue allows direct access to these keys.Invalid examples
Valid examples
#7546
a683accThanks @siketyan! - Internal data for Unicode strings have been updated to Unicode 17.0.#7497
bd70f40Thanks @siketyan! - Fixed #7256: TheuseConsistentCurlyBracesrule now correctly ignores a string literal with braces that contains only whitespaces. Previously, literals that contains single whitespace were only allowed.#7565
38d2098Thanks @siketyan! - TheuseImportExtensionsrule now correctly detects imports with an invalid extension. For example, importing.tsfile with.jsextension is flagged by default. If you are using TypeScript with neither theallowImportingTsExtensionsoption nor therewriteRelativeImportExtensionsoption, it's recommended to turn on theforceJsExtensionsoption of the rule.#7581
8653921Thanks @lucasweng! - Fixed #7470: solved a false positive fornoDuplicateProperties. Previously, declarations in@containerand@starting-styleat-rules were incorrectly flagged as duplicates of identical declarations at the root selector.For example, the linter no longer flags the
displaydeclaration in@containeror theopacitydeclaration in@starting-style.#7529
fea905fThanks @qraqras! - Fixed #7517: theuseOptionalChainrule no longer suggests changes for typeof checks on global objects.#7476
c015765Thanks @ematipico! - Fixed a bug where the suppression action fornoPositiveTabindexdidn't place the suppression comment in the correct position.#7511
a0039fdThanks @arendjr! - Added nursery rulenoUnusedExpressionsto flag expressions used as a statement that is neither an assignment nor a function call.Invalid examples
Valid examples
#7564
40e515fThanks @turbocrime! - Fixed #6617: improveduseIterableCallbackReturnto correctly handle arrow functions with a single-expressionvoidbody.Now the following code doesn't trigger the rule anymore:
figma/plugin-typings (@figma/plugin-typings)
v1.117.1Compare Source
rollup/plugins (@rollup/plugin-node-resolve)
v16.0.22025-10-04
Bugfixes
storybookjs/storybook (@storybook/addon-a11y)
v9.1.10Compare Source
v9.1.9Compare Source
HTMLAttributesdocgen when using utility types - #32173, thanks @steciuk!testing-library/jest-dom (@testing-library/jest-dom)
v6.9.1Compare Source
v6.9.0Compare Source
i18next/i18next (i18next)
v25.5.3Compare Source
pnpm/pnpm (pnpm)
v10.18.0Compare Source
Minor Changes
Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.
Added configuration options for warning thresholds:
fetchWarnTimeoutMsandfetchMinSpeedKiBps.Warning messages are displayed when requests exceed time thresholds or fall below speed minimums
Related PR: #10025.
Patch Changes
minimumReleaseAgeconfiguration #10030.cleanupUnusedCatalogsconfiguration when removing dependent packages.scriptShellis set tofalse#8748.pnpm dlxshould not fail whenminimumReleaseAgeis set #10037.facebook/react (react)
v19.2.0Compare Source
Below is a list of all new features, APIs, and bug fixes.
Read the React 19.2 release post for more information.
New React Features
<Activity>: A new API to hide and restore the UI and internal state of its children.useEffectEventis a React Hook that lets you extract non-reactive logic into an Effect Event.cacheSignal(for RSCs) lets your know when thecache()lifetime is over.New React DOM Features
resume: to resume a prerender to a stream.resumeAndPrerender: to resume a prerender to HTML.resumeToPipeableStream: to resume a prerender to a stream.resumeAndPrerenderToNodeStream: to resume a prerender to HTML.prerenderAPIs to return apostponedstate that can be passed to theresumeAPIs.Notable changes
<ViewTransition>Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.prerender,renderToReadableStream) to server-side-rendering APIs for Node.js:IDs generated by useIdAll Changes
React
<Activity />was developed over many years, starting beforeClassComponent.setState(@acdlite @sebmarkbage and many others)%oplaceholder (@eps1lon #34198)useDeferredValueloop in popstate event (@acdlite #32821)useDeferredValue(@acdlite #34376)cacheSignal(@sebmarkbage #33557)React DOM
:for IDs generated byuseId(@sebmarkbage, @eps1lon: #32001, #33342#33099, #33422)nonceto be used on hoistable styles (@Andarist #32461)React.useinsideReact.lazy-ed Component (@hi-ogawa #33941)progressiveChunkSizeoption for server-side-rendering APIs (@sebmarkbage #33027)React Server Components
<img>and<link>using hints before they're rendered (@sebmarkbage #34604)filterStackFrame(@eps1lon #33707)React Reconciler
on*handlers to account for upcoming experimental APIsrollup/rollup (rollup)
v4.52.4Compare Source
2025-10-03
Bug Fixes
Pull Requests
amzn/style-dictionary (style-dictionary)
v5.1.0Compare Source
Minor Changes
97a209a: Add new size/compose/{sp,dp} transformsPatch Changes
dbcdae3: Fix fontName parsing to handle double quotesc47600d: Export expand DTCGTypesMap for extension use cases.microsoft/TypeScript (typescript)
v5.9.3Compare Source
vitejs/vite (vite)
v7.1.9Compare Source
Reverts
v7.1.8Compare Source
Bug Fixes
Documentation
Miscellaneous Chores
create-react-applicense (#20865) (166a178)Configuration
📅 Schedule: Branch creation - "before 07:00 on Thursday" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.