chore(deps-dev): bump the npm-development group across 1 directory with 5 updates
Bumps the npm-development group with 5 updates in the / directory:
| Package | From | To |
|---|---|---|
| @biomejs/biome | 2.4.6 | 2.5.1 |
| @commitlint/cli | 20.4.3 | 21.2.0 |
| @commitlint/config-conventional | 20.4.3 | 21.2.0 |
| semantic-release | 25.0.3 | 25.0.5 |
| vitest | 4.0.18 | 4.1.9 |
Updates @biomejs/biome from 2.4.6 to 2.5.1
Release notes
Sourced from @biomejs/biome's releases.
Biome CLI v2.5.1
2.5.1
Patch Changes
#10722
f8a303dThanks@denbezrukov! - Fixed CSS formatter output for comments between import media queries.-@import url("print.css") print, -/* comment */ -screen; +@import url("print.css") print, /* comment */ screen;#10738
9fdc560Thanks@JamBalaya56562! - Fixed #9899: thejsonandjson-prettyreporters now escape backslashes in a diagnostic'slocation.path. Previously, paths containing backslashes (such as Windows-style paths) were emitted unescaped, producing invalid JSON.- "path": "src\account\setup-passkey.tsx", + "path": "src\\account\\setup-passkey.tsx",#10626
5f837dfThanks@tom-groves! - Fixed #10625:biome migrateno longer emits an invalid trailing comma when a renamed rule (such asnoConsoleLog→noConsole) is the last member of its rule group. Previously this produced malformed output that aborted the migration of a strict-JSONbiome.jsonwith a parsing error.#10535
c245f9dThanks@Mokto! - Fixed a false positive innoUnusedVariablesfor Svelte files where variables referenced inside{@html expr}blocks were incorrectly reported as unused.#10668
a0f197eThanks@Netail! - Thebiome initcommand has been updated to include a more up-to-date URL to the first-party extensions page.#10667
d8c3e87Thanks@Netail! - Fixed #10664: useErrorCause now correctly detects a shorthand property.#10696
ef2373fThanks@ematipico! - Fixed #9566. Improved how the Biome Language Server loads multiple configuration files inside a workspace.#10705
4ccb410Thanks@ematipico! - Fixed #10652. Biome plugins are now properly filtered when using--onlyand--skipflags.#10669
aa0a6ebThanks@Netail! - Fixed #10651: useInlineScriptId now correctly trims trivia to detect if an id attribute has been set.#10689
844b1beThanks@ematipico! - Fixed #10658. The issue was caused by the "Go-to definition" editor feature, which was enabled by default. The feature is now disabled by default. To work, the feature triggers the scanner to build the module graph. This caused memory leak issues in cases where Biome starts in the home directory to modify files.If you relied on this new feature, you must now turn on using the [editor settings] of the extension e.g. Zed and VSCode.
#10695
043fbb5Thanks@ematipico! - Fixed #10674. Biome now throws an error when the fieldlevelis missing from a rule option.#10712
5941df2Thanks@Conaclos! - Improved the diagnostic and the documentation ofuseFlatMap.#10615
23814f1Thanks@qwertycxz! - Improved the DX the JSON schema when it's used by certain code editors like VSCode.#10688
ec69489Thanks@ematipico! - Fixed a bug where the Biome Daemon did not correctly shut down when the editor was closed during an in-progress operation, especially while scanning.#10701
6c2e0d7Thanks@ematipico! - Fixed #10694. The Biome Language Server no longer prints an error when the user hovers a variable imported from node_modules.
... (truncated)
Changelog
Sourced from @biomejs/biome's changelog.
2.5.1
Patch Changes
#10722
f8a303dThanks@denbezrukov! - Fixed CSS formatter output for comments between import media queries.-@import url("print.css") print, -/* comment */ -screen; +@import url("print.css") print, /* comment */ screen;#10738
9fdc560Thanks@JamBalaya56562! - Fixed #9899: thejsonandjson-prettyreporters now escape backslashes in a diagnostic'slocation.path. Previously, paths containing backslashes (such as Windows-style paths) were emitted unescaped, producing invalid JSON.- "path": "src\account\setup-passkey.tsx", + "path": "src\\account\\setup-passkey.tsx",#10626
5f837dfThanks@tom-groves! - Fixed #10625:biome migrateno longer emits an invalid trailing comma when a renamed rule (such asnoConsoleLog→noConsole) is the last member of its rule group. Previously this produced malformed output that aborted the migration of a strict-JSONbiome.jsonwith a parsing error.#10535
c245f9dThanks@Mokto! - Fixed a false positive innoUnusedVariablesfor Svelte files where variables referenced inside{@html expr}blocks were incorrectly reported as unused.#10668
a0f197eThanks@Netail! - Thebiome initcommand has been updated to include a more up-to-date URL to the first-party extensions page.#10667
d8c3e87Thanks@Netail! - Fixed #10664: useErrorCause now correctly detects a shorthand property.#10696
ef2373fThanks@ematipico! - Fixed #9566. Improved how the Biome Language Server loads multiple configuration files inside a workspace.#10705
4ccb410Thanks@ematipico! - Fixed #10652. Biome plugins are now properly filtered when using--onlyand--skipflags.#10669
aa0a6ebThanks@Netail! - Fixed #10651: useInlineScriptId now correctly trims trivia to detect if an id attribute has been set.#10689
844b1beThanks@ematipico! - Fixed #10658. The issue was caused by the "Go-to definition" editor feature, which was enabled by default. The feature is now disabled by default. To work, the feature triggers the scanner to build the module graph. This caused memory leak issues in cases where Biome starts in the home directory to modify files.If you relied on this new feature, you must now turn on using the [editor settings] of the extension e.g. Zed and VSCode.
#10695
043fbb5Thanks@ematipico! - Fixed #10674. Biome now throws an error when the fieldlevelis missing from a rule option.#10712
5941df2Thanks@Conaclos! - Improved the diagnostic and the documentation ofuseFlatMap.#10615
23814f1Thanks@qwertycxz! - Improved the DX the JSON schema when it's used by certain code editors like VSCode.#10688
ec69489Thanks@ematipico! - Fixed a bug where the Biome Daemon did not correctly shut down when the editor was closed during an in-progress operation, especially while scanning.#10701
6c2e0d7Thanks@ematipico! - Fixed #10694. The Biome Language Server no longer prints an error when the user hovers a variable imported from node_modules.#10681
888515bThanks@Conaclos! - FixeduseExportTypethat reported useless details in some diagnostics.
... (truncated)
Commits
ffe7d33chore: revert564d660chore: revert0abf1a5ci: release (#10627)23814f1chore(biome_configuration): add allowTrailingCommas to json-schema to make VS...a0f197echore: dead and old links (#10668)c0b9832ci: release (#10499)995c1fffeat(lint): add useFunctionComponentDefinition rule (#10498)311c2b2fix(biome_configuration): avoid Markdown links in JSON schema descriptions (#...04c3f19fix: docs and readme (#10584)961f41crefactor(useExportType): improve docs and code (#10569)- Additional commits viewable in compare view
Updates @commitlint/cli from 20.4.3 to 21.2.0
Release notes
Sourced from @commitlint/cli's releases.
v21.2.0
21.2.0 (2026-06-30)
Features
- feat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9/v10) by
@escapedcatin conventional-changelog/commitlint#4859Chore
- ci: install git in stock-Ubuntu baseline job by
@escapedcatin conventional-changelog/commitlint#4847Full Changelog: https://github.com/conventional-changelog/commitlint/compare/v21.1.0...v21.2.0
v21.1.0
21.1.0 (2026-06-23)
Bug Fixes
- fix: remove duplicate es-toolkit@1.47.1 keys from lockfile by
@escapedcatin conventional-changelog/commitlint#4833Features
- feat(cli): add --default-config flag to lint without a config file by
@escapedcatin conventional-changelog/commitlint#4805- feat(lint): allow for custom commit parser function by
@esatterwhitein conventional-changelog/commitlint#4829Docs, chore, etc.
- test(cli): verify --cwd redirects config resolution #997 by
@escapedcatin conventional-changelog/commitlint#4796- docs: add ai agent support (skill, guide, llms.txt) by
@escapedcatin conventional-changelog/commitlint#4804- docs: add TDD commit flow and review expectations for contributors by
@escapedcatin conventional-changelog/commitlint#4836New Contributors
@esatterwhitemade their first contribution in conventional-changelog/commitlint#4829Full Changelog: https://github.com/conventional-changelog/commitlint/compare/v21.0.2...v21.1.0
v21.0.2
... (truncated)
Changelog
Sourced from @commitlint/cli's changelog.
21.2.0 (2026-06-30)
Features
21.1.0 (2026-06-23)
Features
21.0.2 (2026-05-29)
Bug Fixes
21.0.1 (2026-05-12)
Note: Version bump only for package
@commitlint/cli21.0.0 (2026-05-08)
BREAKING CHANGES
- drop node v18 and v20 support
... (truncated)
Commits
1b4e5bcv21.2.0fdb566ffeat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9...6f1c0afv21.1.07af27bafeat(cli): add --default-config flag to lint without a config file (#4805)51a2d7ftest(cli): verify --cwd redirects config resolution (#997) (#4796)8069048v21.0.2121005efix: disallow same commit hash for --from and --to (#4773)db8d7d6v21.0.11329a25chore: migrate to pnpm (#4762)db39968chore: pre pnpm cleanup (#4759)- Additional commits viewable in compare view
Updates @commitlint/config-conventional from 20.4.3 to 21.2.0
Release notes
Sourced from @commitlint/config-conventional's releases.
v21.2.0
21.2.0 (2026-06-30)
Features
- feat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9/v10) by
@escapedcatin conventional-changelog/commitlint#4859Chore
- ci: install git in stock-Ubuntu baseline job by
@escapedcatin conventional-changelog/commitlint#4847Full Changelog: https://github.com/conventional-changelog/commitlint/compare/v21.1.0...v21.2.0
v21.1.0
21.1.0 (2026-06-23)
Bug Fixes
- fix: remove duplicate es-toolkit@1.47.1 keys from lockfile by
@escapedcatin conventional-changelog/commitlint#4833Features
- feat(cli): add --default-config flag to lint without a config file by
@escapedcatin conventional-changelog/commitlint#4805- feat(lint): allow for custom commit parser function by
@esatterwhitein conventional-changelog/commitlint#4829Docs, chore, etc.
- test(cli): verify --cwd redirects config resolution #997 by
@escapedcatin conventional-changelog/commitlint#4796- docs: add ai agent support (skill, guide, llms.txt) by
@escapedcatin conventional-changelog/commitlint#4804- docs: add TDD commit flow and review expectations for contributors by
@escapedcatin conventional-changelog/commitlint#4836New Contributors
@esatterwhitemade their first contribution in conventional-changelog/commitlint#4829Full Changelog: https://github.com/conventional-changelog/commitlint/compare/v21.0.2...v21.1.0
v21.0.2
... (truncated)
Changelog
Sourced from @commitlint/config-conventional's changelog.
21.2.0 (2026-06-30)
Features
21.1.0 (2026-06-23)
Note: Version bump only for package
@commitlint/config-conventional21.0.2 (2026-05-29)
Note: Version bump only for package
@commitlint/config-conventional21.0.1 (2026-05-12)
Note: Version bump only for package
@commitlint/config-conventional21.0.0 (2026-05-08)
BREAKING CHANGES
- drop node v18 and v20 support
- Bump engines to >=v22 in all 39 package.json files
- Update
@types/nodeto ^22.0.0- Update CI matrix to [22, 24]
- Update Ubuntu baseline job to ubuntu:26.04
- Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
... (truncated)
Commits
1b4e5bcv21.2.0fdb566ffeat(resolve-extends): resolve pure-ESM presets (conventional-changelog v7/v9...6f1c0afv21.1.08069048v21.0.2db8d7d6v21.0.11329a25chore: migrate to pnpm (#4762)6099ae5chore: replace eslint with oxlint (#4756)f081a8ev21.0.044c3174chore: update dependency yargs to v18 #4432 (#4686)ac2b3f4chore!: minimum node version v22 (#4679)- Additional commits viewable in compare view
Updates semantic-release from 25.0.3 to 25.0.5
Release notes
Sourced from semantic-release's releases.
v25.0.5
25.0.5 (2026-06-09)
Bug Fixes
v25.0.4
25.0.4 (2026-06-09)
Bug Fixes
- code-quality: add missing comma in context object for consistency (493d6cd)
Commits
db8ffaafix(revert): next (#4200)4e476dedocs: update README to include information about the new core engine integration493d6cdfix(code-quality): add missing comma in context object for consistencyd05e160refactor: replace direct logger and env-ci replacements with a mockCore funct...4f464a7test: add tests for core delegation and dry-run policy handling3f5d1b7refactor: integratecore; remove unused imports and restructuring the main ...7d71f2erefactor: remove obsolete release type constants and notes separator1ae1a19refactor: remove obsolete test files for logger, git, sensitive data handling...bedddc4refactor: remove obsolete Git-related utilities and logging functions7172195refactor(tests): remove obsolete tests for plugins and verification- Additional commits viewable in compare view
Updates vitest from 4.0.18 to 4.1.9
Release notes
Sourced from vitest's releases.
v4.1.9
🐞 Bug Fixes
- Fix
importOriginalwith optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)- browser:
- Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
- Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
- mocker:
- Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
- pool:
- Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)
View changes on GitHub
v4.1.8
🐞 Bug Fixes
- browser:
- Disable client
cdpAPI whenallowWrite/allowExec: false[backport to v4] - by@hi-ogawaand Codex in vitest-dev/vitest#10450 (e4067)- Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4] - by
@toxikand@Zelys-DFKHin vitest-dev/vitest#10474 (675b4)View changes on GitHub
v4.1.7
🐞 Bug Fixes
- runner: Limit concurrency per task branch in addition to per leaf callbacks (backport) - by
@hi-ogawain vitest-dev/vitest#10384 (4f0f2)View changes on GitHub
v4.1.6
🐞 Bug Fixes
- browser: Provide project reference in
ToMatchScreenshotResolvePath- by@macarieand@sheremet-vain vitest-dev/vitest#10138 (31882)- Global
sequence.concurrent: truewith top-leveltest(..., { concurrent: false })+ depreactesequentialtest API and options - by@hi-ogawa, Codex and@sheremet-vain vitest-dev/vitest#10196 (2847d)- browser: Simplify orchestrator otel carrier - by
@hi-ogawain vitest-dev/vitest#10285 (18af9)🏎 Performance
- Stringify diff objects only once - by
@sheremet-vain vitest-dev/vitest#10276 (9f7b1)View changes on GitHub
v4.1.5
🚀 Experimental Features
- coverage: Istanbul to support
instrumenteroption - by@BartWaardenburgand@AriPerkkioin vitest-dev/vitest#10119 (0e0ff)🐞 Bug Fixes
... (truncated)
Commits
a7a61e7chore: release v4.1.9 (#10598)934b0f5fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...7fb2965fix(browser): wait for orchestrator readiness before resolving browser sessio...a518019fix: fiximportOriginalwith optimizer and query import [backport to v4] (#...e61f2ddchore: release v4.1.8e4067b3fix(browser): disable clientcdpAPI whenallowWrite/allowExec: false[ba...a09d472chore: release v4.1.7a8fd24cchore: release v4.1.618af98cfix(browser): simplify orchestrator otel carrier (#10285)3188260feat(browser): provide project reference inToMatchScreenshotResolvePath(#...- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Summary by cubic
Upgrade dev tooling to improve linting, testing, and release workflows. Note: @commitlint/* now requires Node 22.12+.
-
Dependencies
@biomejs/biome2.4.6 → 2.5.1@commitlint/cli20.4.3 → 21.2.0@commitlint/config-conventional20.4.3 → 21.2.0semantic-release25.0.3 → 25.0.5vitest4.0.18 → 4.1.9
-
Migration
- Ensure Node 22.12+ in local dev and CI for
@commitlint/*. - If you can’t upgrade Node yet, pin
@commitlint/*to 20.x. - Run
npm ci(ornpm install) and re-run tests.
- Ensure Node 22.12+ in local dev and CI for