Skip to content

fix(deps): update all dependencies - #37

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all
Open

fix(deps): update all dependencies#37
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented Apr 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@babel/core (source) ^7.29.0 → ^8.0.5 age confidence devDependencies major
@babel/core (source) ^7.29.0 → ^8.0.5 age confidence dependencies major
@biomejs/biome (source) ^2.4.10 → ^2.5.14 age confidence devDependencies minor
@changesets/changelog-github (source) ^0.6.0 → ^1.0.1 age confidence devDependencies major
@changesets/cli (source) ^2.30.0 → ^3.0.3 age confidence devDependencies major
@effect/platform (source) ^0.96.0 → ^0.97.2 age confidence dependencies minor
@effect/platform-node (source) ^0.106.0 → ^0.108.2 age confidence dependencies minor
@effect/vitest (source) ^0.29.0 → ^0.30.0 age confidence devDependencies minor
@eslint-community/eslint-plugin-eslint-comments ^4.7.1 → ^4.8.1 age confidence devDependencies minor
@eslint/compat (source) 2.0.4 → 2.1.1 age confidence devDependencies minor
@eslint/eslintrc 3.3.5 → 3.3.7 age confidence devDependencies patch
@playwright/test (source) ^1.59.1 → ^1.63.0 age confidence devDependencies minor
@types/node (source) ^24.12.2 → ^24.13.5 age confidence devDependencies minor
@types/react (source) ^19.2.14 → ^19.3.0 age confidence devDependencies minor
@types/react-dom (source) ^19.2.3 → ^19.3.0 age confidence devDependencies minor
@typescript-eslint/eslint-plugin (source) ^8.58.0 → ^8.70.0 age confidence devDependencies minor
@typescript-eslint/parser (source) ^8.58.0 → ^8.70.0 age confidence devDependencies minor
@vitejs/plugin-react (source) ^6.0.1 → ^6.1.1 age confidence devDependencies minor
@vitest/coverage-v8 (source) ^4.1.3 → ^5.0.1 age confidence devDependencies major
@vitest/eslint-plugin ^1.6.14 → ^1.6.27 age confidence devDependencies patch
actions/checkout v6 → v7 age confidence action major
actions/setup-node v6 → v7 age confidence action major
effect (source) ^3.21.0 → ^3.22.2 age confidence dependencies minor
eslint (source) ^10.2.0 → ^10.10.0 age confidence devDependencies minor
eslint-import-resolver-typescript ^4.4.4 → ^4.4.5 age confidence devDependencies patch
eslint-plugin-simple-import-sort ^13.0.0 → ^14.0.0 age confidence devDependencies major
eslint-plugin-sonarjs (source) ^4.0.2 → ^4.2.1 age confidence devDependencies minor
eslint-plugin-unicorn ^64.0.0 → ^75.0.0 age confidence devDependencies major
globals ^17.4.0 → ^17.12.0 age confidence devDependencies minor
jscpd (source) ^4.0.8 → ^5.2.1 age confidence devDependencies major
next (source) ^16.2.2 → ^16.3.5 age confidence dependencies minor
node 24.14.1 → 24.21.0 age confidence uses-with minor
pnpm (source) 10.33.0 → 12.4.2 age confidence packageManager major
pnpm/action-setup v5 → v6 age confidence action major
pnpm/action-setup v3 → v6 age confidence action major
react (source) ^19.2.4 → ^19.3.0 age confidence dependencies minor
react-dom (source) ^19.2.4 → ^19.3.0 age confidence dependencies minor
typescript (source) ^6.0.2 → ^7.0.2 age confidence devDependencies major
typescript-eslint (source) ^8.58.0 → ^8.70.0 age confidence devDependencies minor
vite (source) ^8.0.6 → ^8.3.0 age confidence devDependencies minor
vite (source) ^8.0.6 → ^8.3.0 age confidence peerDependencies minor
vitest (source) ^4.1.3 → ^5.0.1 age confidence devDependencies major

cc @skulidropek

Release Notes

babel/babel (@​babel/core)

v8.0.5

Compare Source

👓 Spec Compliance
🐛 Bug Fix
📝 Documentation
🏠 Internal
  • babel-cli, babel-core, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-create-regexp-features-plugin, babel-helper-fixtures, babel-preset-env
  • babel-node
  • babel-types
🏃‍♀️ Performance

v8.0.1

Compare Source

💥 Breaking Change
  • babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone

v8.0.0

Compare Source

👓 Spec Compliance
💥 Breaking Change
  • babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
  • babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
  • babel-parser
🐛 Bug Fix
  • babel-generator
  • babel-plugin-transform-modules-systemjs
📝 Documentation
🏠 Internal
🏃‍♀️ Performance

v7.29.7

Compare Source

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6

Compare Source

v7.29.6 (2026-05-25)

🐛 Bug Fix
Committers: 3
biomejs/biome (@​biomejs/biome)

v2.5.14

Compare Source

Patch Changes

  • #​9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

    // Invalid: return in finally callback
Promise.resolve(1).finally(() => { return 2 })

// Valid: no return in finally callback
Promise.resolve(1).finally(() => { console.log(2) })

    Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

  • #​11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

    <!-- Invalid: leftover debugging tag -->
{@debug user}

    The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

  • #​11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

  • #​11735 9bd70c7 Thanks @​ematipico! - Fixed #​8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

  • #​11715 f05a3c3 Thanks @​ematipico! - Fixed #​7771: Grit plugins that use sequential no longer panic when Biome processes files.

  • #​11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

  • #​11461 22e9966 Thanks @​FoundDream! - Fixed #​11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

     const value = `
      ${
        condition
          ? "yes"
          : "no"
-}
+     }
 `;

  • #​11766 c2542c6 Thanks @​dyc3! - Fixed #​11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

  • #​11790 17d0ff0 Thanks @​ematipico! - Fixed #​10248: noUselessFragments now allows fragments with props in Astro files, such as <Fragment slot="name">{text}</Fragment> inside template expressions.

  • #​11777 7ee3a6c Thanks @​ematipico! - Fixed #​7573: added the requireExplicitCase option to useExhaustiveSwitchCases. When set to true, the rule reports missing cases even when the switch has a default clause, so you can keep a runtime fallback while checking that every value in the union has its own case. The option defaults to false.

  • #​11751 d37f24b Thanks @​ematipico! - Fixed #​8347: the fix from useConsistentArrowReturn now parenthesizes returned expressions that begin with object literals before removing the arrow function body braces, preventing invalid output for expressions such as object property access.

  • #​11784 46e8912 Thanks @​dyc3! - Fixed #​11782: noUndeclaredCustomProperties could hang while checking stylesheets imported by JavaScript modules with many shared dependencies.

  • #​11731 1534885 Thanks @​ematipico! - Fixed #​7984: The fix from useSimplifiedLogicExpression now preserves line breaks in multiline conditions with line comments, preventing the right-hand side condition from being commented out.

  • #​11735 9bd70c7 Thanks @​ematipico! - Fixed #​7304: the HTML formatter now preserves authored segment breaks between CJK characters, and next to CJK punctuation, instead of replacing them with spaces.

     <div lang="zh-Hant-TW">
-  這個段落是那麼長， 在一行寫不行。
+  這個段落是那麼長，
+  在一行寫不行。
 </div>

  • #​11749 ff992a1 Thanks @​ematipico! - Fixed #​11747: formatting and checking large parenthesized object expressions no longer exhibit quadratic slowdowns.

  • #​11736 1dd1fc4 Thanks @​dyc3! - Fixed #​8177: code actions no longer modify the wrong part of Vue, Svelte, or Astro files when experimental full HTML support is disabled.

  • #​11743 3835945 Thanks @​santichausis! - Fixed #​10247: biome check --write/biome lint --write now correctly writes fixes for code inside an HTML attribute expression (for example a Svelte onclick={...} handler, or a mustache expression like {count}), instead of silently reporting the diagnostic as fixable and applying nothing.

    For example, running biome lint --write --unsafe for useBlockStatements (an unsafe fix) on this Svelte component used to leave the file unchanged:

    <button onclick={() => { if (open) close(); }}>Close</button>

  • #​11740 8ea8b4a Thanks @​dyc3! - Fixed #​11453: useConsistentTestIt now updates imports alongside calls, preserving the original export through an alias. The rule ignores locally declared functions and withholds fixes when the preferred name would conflict with another binding or global reference.

  • #​11355 27177ca Thanks @​dyc3! - Fixed the HTML formatter incorrectly applying native HTML element formatting to PascalCase component names such as <Ul> and <Body> in Vue, Svelte, and Astro files.

    -<Body>
-  <div>content</div>
-</Body>
+<Body><div>content</div></Body>

  • #​11355 27177ca Thanks @​dyc3! - Fixed the HTML formatter incorrectly applying SVG block formatting to unknown elements whose names matched SVG element names.

    -<foreignobject>
-  <div>content</div>
-</foreignobject>
+<foreignobject><div>content</div></foreignobject>

  • #​11741 fc69047 Thanks @​dyc3! - Fixed #​8893: useImportExtensions no longer suggests adding .ts to .jsx imports when a colocated .d.ts file provides type declarations.

  • #​11642 c87341c Thanks @​dyc3! - Added the nursery rule useConsistentFunctionStyle, which requires a consistent style for defining functions.

    By default, the rule reports the following declaration because it requires a function expression assigned to a variable:

    function greet() {
    return "Hello";
}

  • #​11770 ddfd622 Thanks @​dyc3! - Fixed #​8980: suppression comments targeting the entire assist category are now respected, including biome-ignore-all assist when running check.

  • #​11792 7a4b895 Thanks @​dyc3! - Fixed dashed utility base names in the Tailwind parser, including border-bs, font-features, and scrollbar-thumb. Classes such as min-inline-[12rem] now preserve the complete base name and parse the arbitrary value separately.

  • #​11739 1fc17e3 Thanks @​Netail! - The rule useIncludes now also reports lastIndexOf() comparisons and some() calls with a strict-equality callback.

    arr.lastIndexOf(x) !== -1

arr.some(item => item === x)

  • #​11735 9bd70c7 Thanks @​ematipico! - Fixed #​6888. GritQL plugins can now use contains on import-clause metavariables such as $clause in import $clause from "module" patterns.

  • #​11790 17d0ff0 Thanks @​ematipico! - Fixed #​11786: useAnchorContent now reports anchors without accessible content in HTML, Astro, Vue, and Svelte even when they have an aria-label, aria-labelledby, or title attribute, matching JSX behavior.

  • #​11651 a9c4aa0 Thanks @​saberoueslati! - Added the new nursery rule noVueUndeclaredDirectives, which reports custom Vue directives that are not declared by a <script setup> binding, the component's directives option, or the rule's globals option. Closes #​11478.

    <template>
  <!-- v-highlight is not declared anywhere -->
  <div v-highlight></div>
</template>

    Aliased named imports in single-file components are now tracked under their local name, so noUndeclaredVariables recognizes vHighlight in import { highlight as vHighlight } from "./directives".

  • #​11715 f05a3c3 Thanks @​ematipico! - Fixed #​7795. The noJsxLiterals rule now ignores surrounding whitespace when matching literals against allowedStrings.

  • #​11780 99c7049 Thanks @​ematipico! - Fixed false positives in useExhaustiveSwitchCases when numeric cases use different spellings of the same value. For example, case 0x1 now covers the numeric literal type 1.

  • #​11720 c7c4e2b Thanks @​ematipico! - Fixed #​7880: noUselessStringConcat no longer reports literal concatenations split across multiple lines when a numeric literal ends the chain.

  • #​11355 27177ca Thanks @​dyc3! - Improved performance of the HTML formatter for documents that contain many HTML-native or SVG-native tags.

  • #​11720 c7c4e2b Thanks @​ematipico! - Fixed #​7949: useReadonlyClassProperties now reports static class properties that are never reassigned.

  • #​11751 d37f24b Thanks @​ematipico! - Fixed #​7644: useImportExtensions now resolves path aliases declared by referenced TypeScript project configurations.

  • #​11791 f88793c Thanks @​dyc3! - Fixed a false positive in useTailwindShorthandClasses for strings in conditional tests, such as cn(m === "w-2 h-2" ? "bg-red-800" : "bg-red-400").

  • #​11720 c7c4e2b Thanks @​ematipico! - Fixed #​7783: noNoninteractiveElementInteractions no longer reports event handlers on native <dialog> elements.

  • #​11733 7030068 Thanks @​dyc3! - Fixed #​11730: useExhaustiveSwitchCases reports missing cases when iterating over a class property with for...of.

  • #​11717 2107dae Thanks @​ternaus! - Fixed #​11716: the noUnknownAttribute rule now accepts fullscreen event handlers, the credentialless iframe property, and the SVG maskType property when the React dependency range allows React 19.3 or later. The credentialless and maskType properties are restricted to <iframe> and <mask> elements, respectively.

  • #​11737 b7e3559 Thanks @​dyc3! - Fixed #​11692: noFloatingPromises now detects unhandled promises returned through generic method signatures, including Playwright fixtures.

  • #​11780 99c7049 Thanks @​ematipico! - Fixed #​7747: useExhaustiveSwitchCases now reports missing cases for literal unions derived from const tuples with (typeof values)[number] and objects with keyof typeof object.

    Other type-aware rules, including noFloatingPromises and noUselessTypeConversion, also recognize supported indexed-access results.

  • #​11724 a9a5e9a Thanks @​dyc3! - Fixed redundant parentheses around binary and logical unary operands with leading line comments.

     !(
   // leading
-  (a || b)
+  a || b
 );

  • #​11715 f05a3c3 Thanks @​ematipico! - Fixed #​7722: noUnusedImports no longer reports type-only imports used in computed names of declared class properties.

  • #​11731 1534885 Thanks @​ematipico! - Fixed #​6390: Biome now offers suppression actions for noDynamicNamespaceImportAccess in editors.

  • #​11751 d37f24b Thanks @​ematipico! - Fixed #​7533: noDescendingSpecificity no longer compares selector specificity across separate cascade layer blocks.

  • #​11735 9bd70c7 Thanks @​ematipico! - Fixed #​6206: useUniqueElementIds no longer reports static IDs on elements in SVG contexts.

    <svg>
    <defs>
        <pattern id="dots" width="10" height="10" />
    </defs>
    <rect fill="url(#dots)" width="100%" height="100%" />
</svg>

  • #​11715 f05a3c3 Thanks @​ematipico! - Fixed #​5447, so the GitHub reporter now associates annotations with the correct files when Biome runs from a nested directory.

  • #​11720 c7c4e2b Thanks @​ematipico! - Fixed #​7816: useHookAtTopLevel no longer reports methods named like hooks when called on another function's result, such as Reactotron.configure(...).useReactNative(...).

  • #​11355 27177ca Thanks @​dyc3! - Removed special HTML formatter handling for the obsolete <listing> element.

  • #​11731 1534885 Thanks @​ematipico! - Fixed an issue where Grit plugin code fixes weren't available as editor code actions.

  • #​11726 dea163f Thanks @​dyc3! - Fixed #​11722: the JavaScript formatter inserts a newline before the closing angle bracket when a leading comment forces type arguments onto multiple lines.

     type Foo = Record<
   // comment
   string,
-  number>;
+  number
+>;

  • #​9758 02ea438 Thanks @​Netail! - Added the nursery rule noJsonUnsafeValues, which disallows JSON values that are unsafe to use between different tools or languages.

    Invalid:

    [
  2e308, // Number evaluating to Infinity
  -2e308, // Number evaluating to -Infinity
  "\ud83d", // String with lone surrogate
  1e-400, // Unsafe zero (too small, will evaluate to 0)
  9007199254740992, // Unsafe integer (outside safe integer range)
  2.2250738585072009e-308, // Subnormal number
]

  • #​11790 17d0ff0 Thanks @​ematipico! - Fixed #​8574: the JavaScript formatter sometimes added extra parentheses and moved comments when formatting multiline expressions after operators such as !. Comments now stay beside the values they describe, without an extra pair of parentheses.

     !(
-  (
-    cond1 || // force this to be multi li

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from skulidropek April 7, 2026 17:26
@renovate renovate Bot changed the title chore(deps): update dependency vite to ^8.0.7 chore(deps): update all dependencies Apr 8, 2026
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 57ed306 to e2f0197 Compare April 8, 2026 20:33
@renovate renovate Bot changed the title chore(deps): update all dependencies fix(deps): update all dependencies Apr 8, 2026
@renovate
renovate Bot force-pushed the renovate/all branch 9 times, most recently from fa61bdd to a341b3c Compare April 15, 2026 12:23
@renovate
renovate Bot force-pushed the renovate/all branch 12 times, most recently from d372fcb to 747233a Compare April 23, 2026 06:01
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 37d2e61 to 0159814 Compare April 23, 2026 15:55
@renovate
renovate Bot force-pushed the renovate/all branch 12 times, most recently from 2d95c0d to 0acc12e Compare May 14, 2026 13:03
@coderabbitai

coderabbitai Bot commented May 14, 2026 •
edited
Loading

Copy link
Copy Markdown

Review Change Stack

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 91604e8f-b793-4844-8444-42c84082621b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

Upgrade pnpm to 11.1.2, switch pnpm/action-setup to v6 and Node to 24.15.0 in CI, and bump multiple dependency/devDependency versions (React, TypeScript, ESLint/biome tooling, vitest, Playwright, vite, Changesets) across workspace package.json files.

Changes

Monorepo Dependency Upgrade

Layer / File(s) Summary
CI infrastructure and package manager setup
.github/actions/setup/action.yml, .github/workflows/checking-dependencies.yml, package.json		 Switched pnpm/action-setup usage to @v6 in the composite action and CI workflow; bumped actions/setup-node node-version to 24.15.0; root packageManager set to pnpm@11.1.2; bumped @changesets/changelog-github and @changesets/cli.
Application workspace dependencies
packages/app/package.json		 Updated packageManager to pnpm@11.1.2; advanced runtime ranges (@effect/platform, effect) and increased vite peer requirement; multiple devDependencies bumped (Biome, ESLint/TypeScript tooling, vitest, coverage, jscpd, TypeScript tooling).
Next.js frontend workspace
packages/frontend-nextjs/package.json		 Bumped runtime deps (next, react, react-dom) and dev tooling (@playwright/test, @types/node, typescript) to newer patch versions.
Frontend workspace
packages/frontend/package.json		 Raised react/react-dom to ^19.2.6; bumped devDependencies (@playwright/test, @types/node, @vitejs/plugin-react, typescript, vite).
Consumer workspace
packages/pack-consumer/package.json		 Bumped devDependencies typescript and vite to newer versions.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related issues

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title clearly summarizes the primary change: a broad dependency update across packages, GitHub Actions, and the Node runtime.
Description check ✅ Passed The description directly documents the dependency, GitHub Action, and Node runtime updates in the changeset.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/all

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

🐰 I hopped through packages, nudging versions light,
pnpm and Node updated, CI set just right.
React and TypeScript put on tiny new shoes,
Dev tools aligned, no breaking news.
A happy rabbit dance for upgrades done!

Comment @coderabbitai help to get the list of available commands.

@renovate
renovate Bot force-pushed the renovate/all branch 11 times, most recently from b3f3140 to c96eb32 Compare May 21, 2026 17:14
@renovate
renovate Bot force-pushed the renovate/all branch 4 times, most recently from eaf706c to 69c645e Compare May 25, 2026 12:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@coderabbitai coderabbitai[bot] coderabbitai[bot] approved these changes
@skulidropek skulidropek Awaiting requested review from skulidropek

Assignees

@skulidropek skulidropek

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@skulidropek