Skip to content

chore(deps): update all patch dependencies#3203

Merged
SoonIter merged 1 commit intomainfrom
renovate/all-patch
Mar 10, 2026
Merged

chore(deps): update all patch dependencies#3203
SoonIter merged 1 commit intomainfrom
renovate/all-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 9, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
@biomejs/biome (source) ^2.4.4 → ^2.4.6 age confidence
@floating-ui/dom (source) ^1.7.5 → ^1.7.6 age confidence
@microsoft/api-extractor (source) ^7.57.6 → ^7.57.7 age confidence
@types/web ^0.0.338 → ^0.0.342 age confidence
@unhead/react (source) ^2.1.9 → ^2.1.12 age confidence
postcss (source) 8.5.6 → 8.5.8 age confidence
prettier-plugin-packagejson ^3.0.0 → ^3.0.2 age confidence
vue (source) ^3.5.29 → ^3.5.30 age confidence

Release Notes

biomejs/biome (@​biomejs/biome)

v2.4.6

Compare Source

Patch Changes

v2.4.5

Compare Source

Patch Changes

  • #​9185 e43e730 Thanks @​dyc3! - Added the nursery rule useVueScopedStyles for Vue SFCs. This rule enforces that <style> blocks have the scoped attribute (or module for CSS Modules), preventing style leakage and conflicts between components.

  • #​9184 49c8fde Thanks @​chocky335! - Improved plugin performance by batching all plugins into a single syntax visitor with a kind-to-plugin lookup map, reducing per-node dispatch overhead from O(N) to O(1) where N is the number of plugins.

  • #​9283 071c700 Thanks @​dyc3! - Fixed noUndeclaredVariables erroneously flagging functions and variables defined in the <script setup> section of Vue SFCs.

  • #​9221 4612133 Thanks @​ematipico! - Fixed an issue where the JSON reporter didn't contain the duration of the command.

  • #​9294 1805c8f Thanks @​Netail! - Extra rule source reference. biome migrate eslint should do a bit better detecting rules in your eslint configurations.

  • #​9178 101b3bb Thanks @​Bertie690! - Fixed #​9172 and #​9168:
    Biome now considers more constructs as valid test assertions.

    Previously, assert, expectTypeOf and assertType
    were not recognized as valid assertions by Biome's linting rules, producing false positives in lint/nursery/useExpect and other similar rules.

    Now, these rules will no longer produce errors in test cases that used these constructs instead of expect:

    import { expectTypeOf, assert, assertType } from "vitest";

const myStr = "Hello from vitest!";
it("should be a string", () => {
  expectTypeOf(myStr).toBeString();
});
test("should still be a string", () => {
  assertType<string>(myStr);
});
it.todo("should still still be a string", () => {
  assert(typeof myStr === "string");
});

  • #​9173 32dad2d Thanks @​dyc3! - Added parsing support for Svelte's new comments-in-tags feature.

    The HTML parser will now accept JS style comments in tags in Svelte files.

    <button
  // single-line comment
  onclick={doTheThing}
>click me</button>

<div
  /* block comment */
  class="foo"
>text</div>

  • #​8952 1d2ca15 Thanks @​pkallos! - Added the nursery rule useNullishCoalescing. This rule suggests using the nullish coalescing operator (??) instead of logical OR (||) when the left operand may be nullish. This prevents bugs where falsy values like 0, '', or false are incorrectly treated as missing. Addresses #​8043

    // Invalid
declare const x: string | null;
const value = x || "default";

// Valid
const value = x ?? "default";

  • #​9243 1992a85 Thanks @​Netail! - Fixed #​7813: improved the diagnostic of the rule useExhaustiveDependencies. The diagnostic now shows the name of the variable to add to the dependency array.

  • #​9063 3d0648f Thanks @​taga3s! - Added the nursery rule noVueRefAsOperand. This rule disallows cases where a ref is used as an operand.

    The following code is now flagged:

    import { ref } from "vue";

const count = ref(0);
count++; // Should be: count.value++
    import { ref } from "vue";

const ok = ref(false);
if (ok) {
  // Should be: if (ok.value)
  //
}

  • #​9273 f239e20 Thanks @​denbezrukov! - Fixed #​9253: parsing of @container scroll-state(...) queries.

    @&#8203;container scroll-state(scrolled: bottom) {
}
@&#8203;container scroll-state(stuck) {
}
@&#8203;container scroll-state(not (stuck)) {
}
@&#8203;container scroll-state((stuck) and (scrolled: bottom)) {
}
@&#8203;container scroll-state((stuck) or (snapped: x)) {
}
@&#8203;container main-layout scroll-state(not ((stuck) and (scrolled: bottom))) {
}

  • #​9259 96939c0 Thanks @​ematipico! - Fixed CSS formatter incorrectly collapsing selectors when a BOM (Byte Order Mark) character is present at the start of the file. The formatter now correctly preserves line breaks between comments and selectors in BOM-prefixed CSS files, matching Prettier's behavior.

  • #​9251 59e33fb Thanks @​ematipico! - Fixed #​9249: The CSS formatter no longer incorrectly breaks ratio values (like 1 / -1) across lines when followed by comments.

  • #​9284 ec3a17f Thanks @​denbezrukov! - Fixed #​9253: removed false-positive diagnostics for valid @container/@supports general-enclosed queries.

    @&#8203;container scroll-state(scrolled: bottom) {
}
@&#8203;supports foo(bar: baz) {
}

  • #​9215 b2619a1 Thanks @​FrederickStempfle! - Fixed #​9189: biome ci in GitHub Actions now correctly disables colors so that ::error/::warning workflow commands are not wrapped in ANSI escape codes.

  • #​9256 65ae4c1 Thanks @​ematipico! - Fixed JSON reporter escaping of special characters in diagnostic messages. The JSON reporter now properly escapes double quotes, backslashes, and control characters in error messages and advice text, preventing invalid JSON output when diagnostics contain these characters.

  • #​9223 5b9da81 Thanks @​ematipico! - Fixed an issue where the JSON reporter didn't write output to a file when --reporter-file was specified. The output is now correctly written to the specified file instead of always going to stdout.

  • #​9154 c487e54 Thanks @​abossenbroek! - Fixed #​9115: The noPlaywrightMissingAwait rule no longer produces false positives on jest-dom matchers like toBeVisible, toBeChecked, toHaveAttribute, etc. For matchers shared between Playwright and jest-dom, the rule now checks whether expect()'s argument is a Playwright locator or page object before flagging. Added semantic variable resolution so that extracted Playwright locators (e.g. const loc = page.locator('.item'); expect(loc).toBeVisible()) are still correctly flagged.

  • #​9269 33e5cdf Thanks @​dyc3! - Fixed a false positive where noUndeclaredVariables reported bindings from Vue <script setup> as undeclared when used in <template>.

    This change ensures embedded bindings collected from script snippets (like imports and defineModel results) are respected by the rule.

  • #​9267 2c2e060 Thanks @​ematipico! - Fixed #​9143 and #​8849: The noUnresolvedImports rule no longer reports false positives for several common patterns:

    • node:fs, node:path, node:url, and other Node.js built-in modules with the node: prefix are now accepted.
    • Packages that declare their TypeScript entry point via "typings" (instead of "types") in package.json now resolve correctly.
    • Named imports from aliased re-export chains (e.g. export { x as y } from "...") are now resolved correctly through the alias.
    • Namespace re-exports (e.g. export * as Ns from "...") are now recognized as own exports of the barrel module.

  • #​9254 f7bf12b Thanks @​ematipico! - Fixed #​8842: The CSS formatter now correctly formats @container scroll-state() without adding an unwanted space between the function name and opening parenthesis.

  • #​9211 2d0b8e6 Thanks @​ematipico! - Fixed #​7905. Improved the accuracy of type-aware lint rules when analyzing re-exported functions and values.

    Previously, when a binding was imported from another module, its type was not correctly inferred during the type analysis phase. This caused type-aware lint rules to fail to detect issues when working with re-exported imports.

    The following rules now correctly handle re-exported imports:

    Example of now-working detection:

    // getValue.ts
export async function getValue(): Promise<number> {
  return 42;
}

// reexport.ts
export { getValue } from "./getValue";

// index.ts
import { getValue } from "./reexport";

// Previously: no diagnostic (type was unknown)
// Now: correctly detects that getValue() returns a Promise
await getValue(); // Valid - properly awaited
getValue(); // Diagnostic - floating promise

  • #​8934 b49707c Thanks @​tim-we! - Fixed #​8265: Biome now correctly detects test framework calls that use three arguments (label, options, callback) (e.g., describe("foo", { retry: 2 }, () => {})). This fixes both formatting and the noDuplicateTestHooks lint rule for test frameworks like Vitest.

  • #​9191 688fd34 Thanks @​dyc3! - Fixed #​9180: fixed a panic caused by an interaction between noRedundantUseStrict and the formatter

  • #​9048 9bbdf4d Thanks @​ff1451! - Added the nursery rule useNamedCaptureGroup.
    The rule enforces using named capture groups in regular expressions instead of numbered ones. It supports both regex literals and RegExp constructor calls.

    // Invalid: unnamed capture group
/(foo)/;
new RegExp("(foo)");

// Valid: named capture group
/(?<id>foo)/;
new RegExp("(?<id>foo)");

  • #​9255 9b6685b Thanks @​ematipico! - Fixed #9234, where some nursery rules panicked when they were configured with the option level without the corresponding options.

  • #​8968 a2b4494 Thanks @​LouisLau-art! - Fixed #​8812: lint/suspicious/noArrayIndexKey will now report index usage anywhere in JSX key template or binary expressions, not only in the last visited identifier.

  • #​9266 84935a4 Thanks @​dyc3! - Fixed #​9250: noVueDuplicateKeys will no longer flag keys under watch, preventing false positives.

  • #​9056 1f2fe2e Thanks @​ruidosujeira! - Added the nursery rule useArraySome to prefer .some() over verbose existence checks like filter(...).length > 0 and findIndex(...) !== -1, with suggestions for find/findLast existence checks. This also applies to ES2025 iterator helpers such as Iterator.prototype.find.

  • #​9163 f87acf6 Thanks @​JUSTIVE! - Added graphql to valid embedded graphql template tags inside JavaScript files, when the feature javascript.experimentalEmbeddedSnippetsEnabled is enabled. This allows proper support for graphql tags used in RelayJS.

    Now, code snippets like the following are correctly formatted and limited:

    import { graphql } from "react-relay";

const query = graphql`
  query {
    user(id: 1) {
      id
      name
    }
  }
`;

  • #​8773 6b01778 Thanks @​xcb3d! - Added the new nursery rule useUnicodeRegex.

    The rule enforces the use of the u or v flag for regular expressions. This ensures proper handling of Unicode characters like emoji.

    // Invalid
/foo/;
new RegExp("foo", "gi");

// Valid
/foo/u;
new RegExp("foo", "giu");
floating-ui/floating-ui (@​floating-ui/dom)

v1.7.6

Patch Changes
  • fix(types): ensure Platform type contains detectOverflow type
  • perf: bundle and runtime improvements
  • feat(autoUpdate): allow not passing a floating element
  • Update dependencies: @floating-ui/utils@0.2.11, @floating-ui/core@1.7.5
microsoft/rushstack (@​microsoft/api-extractor)

v7.57.7

Compare Source

Mon, 09 Mar 2026 15:14:07 GMT

Patches
  • Bump minimatch version from 10.2.1 to 10.2.3 to address CVE-2026-27903.
microsoft/TypeScript-DOM-Lib-Generator (@​types/web)

v0.0.342

Compare Source

asynciterable.d.ts

No changes

index.d.ts

No changes

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

No changes

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

No changes

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

No changes

ts5.9/iterable.d.ts

No changes

v0.0.341

Compare Source

asynciterable.d.ts

No changes

index.d.ts

No changes

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

No changes

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

No changes

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

No changes

ts5.9/iterable.d.ts

No changes

v0.0.340

Compare Source

asynciterable.d.ts

No changes

index.d.ts

Non-value types
  • HTMLHyperlinkElementUtils
    • Removed: hash, host, hostname, origin, password, pathname, port, protocol, search, username

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

Non-value types
  • HTMLHyperlinkElementUtils
    • Removed: hash, host, hostname, origin, password, pathname, port, protocol, search, username

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

Non-value types
  • HTMLHyperlinkElementUtils
    • Removed: hash, host, hostname, origin, password, pathname, port, protocol, search, username

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

Non-value types
  • HTMLHyperlinkElementUtils
    • Removed: hash, host, hostname, origin, password, pathname, port, protocol, search, username

ts5.9/iterable.d.ts

No changes

v0.0.339

Compare Source

asynciterable.d.ts

No changes

index.d.ts

New interfaces

  • CloseWatcher
  • WebTransportReceiveStream
  • WebTransportSendStream

Modified

  • HTMLInputElement
    • Added: colorSpace
  • HTMLMediaElement
    • Added: captureStream
  • PerformanceResourceTiming
    • Added: deliveryType, finalResponseHeadersStart, firstInterimResponseStart
  • WebTransport
    • Added: congestionControl, protocol, reliability, getStats

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

New interfaces

  • CloseWatcher
  • WebTransportReceiveStream
  • WebTransportSendStream

Modified

  • HTMLInputElement
    • Added: colorSpace
  • HTMLMediaElement
    • Added: captureStream
  • PerformanceResourceTiming
    • Added: deliveryType, finalResponseHeadersStart, firstInterimResponseStart
  • WebTransport
    • Added: congestionControl, protocol, reliability, getStats

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

New interfaces

  • CloseWatcher
  • WebTransportReceiveStream
  • WebTransportSendStream

Modified

  • HTMLInputElement
    • Added: colorSpace
  • HTMLMediaElement
    • Added: captureStream
  • PerformanceResourceTiming
    • Added: deliveryType, finalResponseHeadersStart, firstInterimResponseStart
  • WebTransport
    • Added: congestionControl, protocol, reliability, getStats

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

New interfaces

  • CloseWatcher
  • WebTransportReceiveStream
  • WebTransportSendStream

Modified

  • HTMLInputElement
    • Added: colorSpace
  • HTMLMediaElement
    • Added: captureStream
  • PerformanceResourceTiming
    • Added: deliveryType, finalResponseHeadersStart, firstInterimResponseStart
  • WebTransport
    • Added: congestionControl, protocol, reliability, getStats

ts5.9/iterable.d.ts

No changes

unjs/unhead (@​unhead/react)

v2.1.12

Compare Source

v2.1.11

Compare Source

    ⚠️ Security
  • Fixed XSS bypass in useHeadSafe via attribute name injection (GHSA-g5xx-pwrp-g3fv). Users handling untrusted input with useHeadSafe should upgrade immediately.
   🐞 Bug Fixes
    View changes on GitHub

v2.1.10

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
postcss/postcss (postcss)

v8.5.8

Compare Source

  • Fixed Processor#version.

v8.5.7

Compare Source

  • Improved source map annotation cleaning performance (by CodeAnt AI).
matzkoh/prettier-plugin-packagejson (prettier-plugin-packagejson)

v3.0.2

Compare Source

Bug Fixes
  • deps: restore caret ranges for dependencies (9c999e5)

v3.0.1

Compare Source

Bug Fixes
vuejs/core (vue)

v3.5.30

Compare Source

Bug Fixes

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented Mar 9, 2026 •
edited
Loading

Deploying rspress-v2 with  Cloudflare Pages  Cloudflare Pages

Latest commit: 39403a9
Status: ✅  Deploy successful!
Preview URL: https://6e6149aa.rspress-v2.pages.dev
Branch Preview URL: https://renovate-all-patch.rspress-v2.pages.dev

View logs

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Mar 9, 2026 •
edited
Loading

Rsdoctor Bundle Diff Analysis

Found 3 projects in monorepo, 1 project with changes.

📊 Quick Summary
Project Total Size Change
node 12.2 MB 0
web 16.1 MB -102.0 B (-0.0%)
node_md 1.5 MB 0
📋 Detailed Reports (Click to expand)

📁 web

Path: website/doc_build/diff-rsdoctor/web/rsdoctor-data.json

📌 Baseline Commit: 654ff0ec73 | PR: #3211

Metric Current Baseline Change
📊 Total Size 16.1 MB 16.1 MB -102.0 B (-0.0%)
📄 JavaScript 15.8 MB 15.8 MB -102.0 B (-0.0%)
🎨 CSS 120.3 KB 120.3 KB 0
🌐 HTML 0 B 0 B 0
📁 Other Assets 164.8 KB 164.8 KB 0

📦 Download Diff Report: web Bundle Diff

Generated by Rsdoctor GitHub Action

@renovate renovate Bot force-pushed the renovate/all-patch branch from f029845 to 971d2e9 Compare March 9, 2026 03:00
Timeless0911
Timeless0911 previously approved these changes Mar 9, 2026
View reviewed changes
@renovate renovate Bot force-pushed the renovate/all-patch branch 7 times, most recently from 8f1784e to cc850ac Compare March 10, 2026 04:35
@renovate renovate Bot force-pushed the renovate/all-patch branch from cc850ac to 39403a9 Compare March 10, 2026 06:12
@SoonIter SoonIter enabled auto-merge (squash) March 10, 2026 08:16
@SoonIter SoonIter merged commit ffe721d into main Mar 10, 2026
6 checks passed
@SoonIter SoonIter deleted the renovate/all-patch branch March 10, 2026 08:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@SoonIter SoonIter SoonIter approved these changes

@Timeless0911 Timeless0911 Timeless0911 left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Timeless0911 @SoonIter