chore(deps-dev): Bump the development-dependencies group across 1 directory with 6 updates by dependabot[bot] · Pull Request #18 · losol/scribo

dependabot · 2026-09-15T05:40:36Z

Bumps the development-dependencies group with 6 updates in the / directory:

Package	From	To
@biomejs/biome	`2.5.11`	`2.5.13`
@changesets/changelog-github	`1.0.0`	`1.0.1`
@changesets/cli	`3.0.1`	`3.0.2`
@types/react	`19.2.18`	`19.3.0`
@types/react-dom	`19.2.5`	`19.3.0`
vite	`8.2.2`	`8.3.0`

Updates @biomejs/biome from 2.5.11 to 2.5.13

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.13

2.5.13

Patch Changes
#11379 07a0073 Thanks @Netail! - Added the nursery rule useLayeredStyles, which enforces that style rules are defined within a cascade layer and import rules to import its styles into a cascade layer.
/* Invalid */
@import 'foo.css';
.my-style {
color: red;
}
/* Valid */
@import 'foo.css' layer(base);
@layer base {
.my-style {
color: red;
}
}
#11667 e997900 Thanks @devtechedge! - Added the nursery rule useBetterDomTraversing, which prefers .firstChild, .firstElementChild, .closest(), and merged .querySelector() calls over positional DOM traversal.
element.childNodes[0];
element.children[0];
element.parentElement.parentElement;
element.querySelector("a").querySelector("b");
#11620 20e513a Thanks @jakeleventhal! - Fixed #11610, #11611, #11612, #11615, and #11616: Biome no longer fully infers an imported generic declaration just to apply its type arguments, restoring type-aware lint performance for large libraries such as Zod. This improves useRegexpExec, noFloatingPromises, noMisusedPromises, useNullishCoalescing, and noUnsafePlusOperands.

#11657 e322040 Thanks @ematipico! - Fixed #7495: noUselessConstructor now ignores TypeScript constructors that forward at least one argument to super, preserving constructors that narrow the subclass's accepted parameter types. The exemption also applies when the parent and child signatures are identical; JavaScript and zero-argument forwarding behavior are unchanged.

#11670 4969ee1 Thanks @ematipico! - Fixed #7076: useAriaPropsForRole and useFocusableInteractive no longer report non-focusable elements with role="separator". A separator with an explicit tabIndex or tabindex still requires aria-valuenow.

#11627 23aad6d Thanks @ematipico! - Fixed #6571 so Grit plugins can capture and inspect multiple named import specifiers.

#11631 00dbd3a Thanks @ematipico! - Reduced unnecessary type inference when type-aware lint rules inspect members of namespace imports from libraries such as Zod. Fixed type inference so blanket re-exports do not expose default exports.
#11628 a2f8ff7 Thanks @dyc3! - Added the nursery rule noXorAsExponentiation, which reports the bitwise XOR operator ^ between two decimal integer literals, where the exponentiation operator ** was likely intended.
const kibibyte = 2 ^ 10; // 8, not 1024

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.13

Patch Changes
#11379 07a0073 Thanks @Netail! - Added the nursery rule useLayeredStyles, which enforces that style rules are defined within a cascade layer and import rules to import its styles into a cascade layer.
/* Invalid */
@import 'foo.css';
.my-style {
color: red;
}
/* Valid */
@import 'foo.css' layer(base);
@layer base {
.my-style {
color: red;
}
}
#11667 e997900 Thanks @devtechedge! - Added the nursery rule useBetterDomTraversing, which prefers .firstChild, .firstElementChild, .closest(), and merged .querySelector() calls over positional DOM traversal.
element.childNodes[0];
element.children[0];
element.parentElement.parentElement;
element.querySelector("a").querySelector("b");
#11620 20e513a Thanks @jakeleventhal! - Fixed #11610, #11611, #11612, #11615, and #11616: Biome no longer fully infers an imported generic declaration just to apply its type arguments, restoring type-aware lint performance for large libraries such as Zod. This improves useRegexpExec, noFloatingPromises, noMisusedPromises, useNullishCoalescing, and noUnsafePlusOperands.

#11657 e322040 Thanks @ematipico! - Fixed #7495: noUselessConstructor now ignores TypeScript constructors that forward at least one argument to super, preserving constructors that narrow the subclass's accepted parameter types. The exemption also applies when the parent and child signatures are identical; JavaScript and zero-argument forwarding behavior are unchanged.

#11670 4969ee1 Thanks @ematipico! - Fixed #7076: useAriaPropsForRole and useFocusableInteractive no longer report non-focusable elements with role="separator". A separator with an explicit tabIndex or tabindex still requires aria-valuenow.

#11627 23aad6d Thanks @ematipico! - Fixed #6571 so Grit plugins can capture and inspect multiple named import specifiers.

#11631 00dbd3a Thanks @ematipico! - Reduced unnecessary type inference when type-aware lint rules inspect members of namespace imports from libraries such as Zod. Fixed type inference so blanket re-exports do not expose default exports.
#11628 a2f8ff7 Thanks @dyc3! - Added the nursery rule noXorAsExponentiation, which reports the bitwise XOR operator ^ between two decimal integer literals, where the exponentiation operator ** was likely intended.
const kibibyte = 2 ^ 10; // 8, not 1024
#11670 4969ee1 Thanks @ematipico! - Fixed #7192: noUnusedPrivateClassMembers now considers compound assignments such as ??= to read and use private class members.

... (truncated)

Commits

810ea56 ci: release (#11614)
e997900 feat(linter): add useBetterDomTraversing nursery rule (#11667)
de0528f feat(lint/html/svelte): add noSvelteAtHtmlTags (#11606)
07a0073 feat(css_analyze): implement useLayeredStyles (#11379)
c23e4c7 feat: noUnsafeIframeSandbox (#11622)
a2f8ff7 feat(lint/js): add noXorAsExponentiation (#11628)
a64d757 feat(lint/js/vue): add useVueBaseImport (#11595)
611767f chore: update depot logo (#11602)
0a31d7c ci: release (#11530)
a20f44a feat: noBunModules (#11597)
Additional commits viewable in compare view

Updates @changesets/changelog-github from 1.0.0 to 1.0.1

Release notes

Sourced from @changesets/changelog-github's releases.

@changesets/changelog-github@1.0.1

Patch Changes

Updated dependencies [4d7b4fb]:

@changesets/get-github-info@1.0.1

Changelog

Sourced from @changesets/changelog-github's changelog.

1.0.1

Patch Changes

Updated dependencies [4d7b4fb]:

@changesets/get-github-info@1.0.1

Commits

d7e4a2d Version Packages (#2266)
See full diff in compare view

Updates @changesets/cli from 3.0.1 to 3.0.2

Release notes

Sourced from @changesets/cli's releases.

@changesets/cli@3.0.2

Patch Changes

#2270 a0a4dc6 Thanks @bluwy! - Add review message on pre exit

Updated dependencies [1f4eb61, 059f70a]:

@changesets/apply-release-plan@8.1.0

@changesets/git@4.0.1

@changesets/read@1.0.1

Changelog

Sourced from @changesets/cli's changelog.

3.0.2

Patch Changes

#2270 a0a4dc6 Thanks @bluwy! - Add review message on pre exit

Updated dependencies [1f4eb61, 059f70a]:

@changesets/apply-release-plan@8.1.0

@changesets/git@4.0.1

@changesets/read@1.0.1

Commits

d7e4a2d Version Packages (#2266)
68affee Upgrade to Vitest 5 (#2281)
5eeb012 Build(deps): Bump human-id in the production-dependencies group (#2279)
a0a4dc6 Add review message on pre exit (#2270)
1f4eb61 Add default changelog message for empty release (#2265)
2eb65ba Add script to run unit and e2e tests separately (#2267)
ff2b075 Build(deps-dev): Bump @lydell/node-pty (#2254)
8eff462 Build(deps-dev): Bump the development-dependencies group across 1 directory w...
See full diff in compare view

Updates @types/react from 19.2.18 to 19.3.0

Commits

See full diff in compare view

Updates @types/react-dom from 19.2.5 to 19.3.0

Commits

See full diff in compare view

Updates vite from 8.2.2 to 8.3.0

Release notes

Sourced from vite's releases.

create-vite@8.3.0

Please refer to CHANGELOG.md for details.

v8.3.0

Features

build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)

Bug Fixes

handle CRLF line endings in code frame positions (#23219) (9913672)

only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)

Performance Improvements

proxy: pre-compile context matchers at server creation (#23263) (8abf700)

v8.3.0-beta.1

Features

devtools: enable dev server integration (#23333) (68aeb8a)

Bug Fixes

build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)

bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)

deps: update all non-major dependencies (#23445) (fc7c104)

html: don't inline preload link targets (fix #13355) (#23387) (12e709c)

resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)

shortcuts extend error (#23447) (4ec58d1)

Miscellaneous Chores

introducing @e18e/eslint-plugin (#23357) (f794133)

remove unnecessary comment (#23448) (b919a1a)

v8.3.0-beta.0

Features

accept Rolldown watch options in server.watch (#23133) (1b5cfe3)

add closeServer and closePreviewServer hooks (#23110) (e17d2d5)

add top-level tsconfig option (#23310) (93164c3)

add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)

cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)

config: warn on named imports from JSON modules (#23378) (472385e)

css: minify style tag (#23183) (8156684)

searched params attached to workers are now preserved (#22280) (517b97f)

support subpath imports in dynamic import statements (#23185) (b78e2f1)

use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)

use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.0 (2026-09-10)

Features

build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)

devtools: enable dev server integration (#23333) (68aeb8a)

accept Rolldown watch options in server.watch (#23133) (1b5cfe3)

add closeServer and closePreviewServer hooks (#23110) (e17d2d5)

add top-level tsconfig option (#23310) (93164c3)

add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)

cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)

config: warn on named imports from JSON modules (#23378) (472385e)

css: minify style tag (#23183) (8156684)

searched params attached to workers are now preserved (#22280) (517b97f)

support subpath imports in dynamic import statements (#23185) (b78e2f1)

use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)

use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)

worker: remove worker chunk if it's detected that it's not referenced (#22473) (924997a)

Bug Fixes

handle CRLF line endings in code frame positions (#23219) (9913672)

only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)

build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)

bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)

deps: update all non-major dependencies (#23445) (fc7c104)

html: don't inline preload link targets (fix #13355) (#23387) (12e709c)

resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)

shortcuts extend error (#23447) (4ec58d1)

config: close bundles when generation fails (#23256) (6bacc95)

css: keep newline-separated srcset candidates intact (#23265) (4f9d2f4)

deps: update all non-major dependencies (#23337) (d550815)

deps: update all non-major dependencies (#23404) (238ad81)

deps: update rolldown-related dependencies (#23338) (76e8082)

deps: update rolldown-related dependencies (#23405) (b882566)

dev: run closeBundle after buildEnd failure (#23165) (8cb872e)

hmr: handle import.meta.hot.invalidate in virtual module (#23171) (6162968)

utils: handle dot in srcset density descriptor (#23346) (b50e1b4)

utils: match timestamp query parameter with proper delimiters (#23364) (41f3c6f)

Performance Improvements

proxy: pre-compile context matchers at server creation (#23263) (8abf700)

Miscellaneous Chores

introducing @e18e/eslint-plugin (#23357) (f794133)

remove unnecessary comment (#23448) (b919a1a)

delete unused PluginContainerOptions (#23382) (ee64401)

use oxfmt sortImports (#23319) (97ad042)

... (truncated)

Commits

95e8923 release: v7.3.1
9d39d37 feat: add ignoreOutdatedRequests option to optimizeDeps (#21364)
acf7e05 release: v7.3.0
cff26ec feat(deps): update esbuild from ^0.25.0 to ^0.27.0 (#21183)
317b3b2 release: v7.2.7
721f163 fix: plugin shortcut support (#21211)
bda5dbb release: v7.2.6
3aa7527 release: v7.2.5
72e398a fix(deps): update all non-major dependencies (#21175)
3765f7b fix: shortcuts not rebound after server restart (#21166)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ectory with 6 updates Bumps the development-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.11` | `2.5.13` | | [@changesets/changelog-github](https://github.com/changesets/changesets/tree/HEAD/packages/changelog-github) | `1.0.0` | `1.0.1` | | [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.1` | `3.0.2` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.5` | `19.3.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.0` | Updates `@biomejs/biome` from 2.5.11 to 2.5.13 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.13/packages/@biomejs/biome) Updates `@changesets/changelog-github` from 1.0.0 to 1.0.1 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/changelog-github/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/changelog-github@1.0.1/packages/changelog-github) Updates `@changesets/cli` from 3.0.1 to 3.0.2 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.2/packages/cli) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.5 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `vite` from 8.2.2 to 8.3.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@changesets/changelog-github" dependency-version: 1.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@changesets/cli" dependency-version: 3.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: vite dependency-version: 8.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-15T05:40:37Z

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added the dependencies label Sep 15, 2026

losolio merged commit e25e21c into main Sep 15, 2026
1 check passed

dependabot Bot deleted the dependabot/npm_and_yarn/development-dependencies-860e2e7739 branch September 15, 2026 16:20

Navigation Menu

chore(deps-dev): Bump the development-dependencies group across 1 directory with 6 updates - #18

chore(deps-dev): Bump the development-dependencies group across 1 directory with 6 updates#18
losolio merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-860e2e7739

dependabot Bot commented on behalf of github Sep 15, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 15, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 15, 2026

Biome CLI v2.5.13

2.5.13

Patch Changes

2.5.13

Patch Changes

@​changesets/changelog-github@​1.0.1

Patch Changes

1.0.1

Patch Changes

@​changesets/cli@​3.0.2

Patch Changes

3.0.2

Patch Changes

create-vite@8.3.0

v8.3.0

Features

Bug Fixes

Performance Improvements

v8.3.0-beta.1

Features

Bug Fixes

Miscellaneous Chores

v8.3.0-beta.0

Features

8.3.0 (2026-09-10)

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Uh oh!

dependabot Bot commented on behalf of github Sep 15, 2026

Labels

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@changesets/changelog-github@1`.0.1

`@changesets/cli@3`.0.2