fix(deps): update all non-major dependencies #120
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.3.7->2.3.85.0.5->5.0.65.1.3->5.1.422.19.1->22.19.2^0.47.0->^0.49.02.21.3->2.21.44.20.6->4.21.0Release Notes
biomejs/biome (@biomejs/biome)
v2.3.8Compare Source
Patch Changes
#8188
4ca088cThanks @ematipico! - Fixed #7390, where Biome couldn't apply the correct configuration passed via--config-path.If you have multiple root configuration files, running any command with
--config-pathwill now apply the chosen configuration file.#8171
79adaeaThanks @dibashthapa! - Added the new rulenoLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.For example, the following code triggers the rule because the component would render
0:#8116
b537918Thanks @Netail! - Added the nursery rulenoDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.Invalid:
#8256
f1e4696Thanks @cormacrelf! - Fixed a bug where logs were discarded (the kind from--log-level=infoetc.). This is a regression introduced after an internal refactor that wasn't adequately tested.#8226
3f19b52Thanks @dyc3! - Fixed #8222: The HTML parser, with Vue directives enabled, can now parsev-slotshorthand syntax, e.g.<template #foo>.#8007
182ecdcThanks @brandonmcconnell! - Added support for dollar-sign-prefixed filenames in theuseFilenamingConventionrule.Biome now allows filenames starting with the dollar-sign (e.g.
$postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.#8218
91484d1Thanks @hirokiokada77! - Added thenoMultiStrrule, which disallows creating multiline strings by escaping newlines.Invalid:
Valid:
#8225
98ca2aeThanks @ongyuxing! - Fixed #7806: Prefer breaking after the assignment operator for conditional types with generic parameters to match Prettier.#6765
23f7855Thanks @emilyinure! - Fixed #6569: Allow files to export from themselves withnoImportCycles.This means the following is now allowed:
#8214
68c052eThanks @hirokiokada77! - Added thenoEqualsToNullrule, which enforces the use of===and!==for comparison withnullinstead of==or!=.Invalid:
Valid:
#8219
793bb9aThanks @dyc3! - Fixed #8190: The HTML parser will now parse Vue event handlers that contain:correctly, e.g.@update:modelValue="onUpdate".#8259
4a9139bThanks @hirokiokada77! - Fixed #8254: ThenoParameterAssignrule withpropertyAssignment: "deny"was incorrectly reporting an error when a function parameter was used on the right-hand side of an assignment to a local variable's property.The rule should only flag assignments that modify the parameter binding or its properties (L-value), not the use of its value.
Valid:
#8201
cd2edd7Thanks @Netail! - Added the nursery rulenoTernary. Disallow ternary operators.Invalid:
#8172
de98933Thanks @JeremyMoeglich! - Fixed #8145: handling of large hex literals, which previously caused both false positives and false negatives.This affects
noPrecisionLossandnoConstantMathMinMaxClamp.#8210
7b44e9eThanks @Netail! - Corrected rule source reference.biome migrate eslintshould do a bit better detecting rules in your eslint configurations.#8213
e430555Thanks @ruidosujeira! - Fixed #8209: Recognized formatting capability when either range or on-type formatting is supported, not only full-file formatting. This ensures editors and the language server correctly detect formatting support in files like JSONC.#8202
6f49d95Thanks @hirokiokada77! - Fixed #8079: Properly handlenameandvaluemetavariables forJsxAttributeGritQL queries.The following
biome searchcommand no longer throws an error:#8276
f7e836fThanks @hirokiokada77! - Added thenoProtorule, which disallows the use of the__proto__property for getting or setting the prototype of an object.Invalid:
Valid:
dotansimha/graphql-code-generator (@graphql-codegen/typescript)
v5.0.6Compare Source
Patch Changes
b995ed1]:dotansimha/graphql-code-generator (@graphql-codegen/typescript-resolvers)
v5.1.4Compare Source
Patch Changes
b995ed1]:cerbos/cerbos (cerbos)
v0.49.0Compare Source
Cerbos 0.49.0
View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.49.0.html
Changelog
a9d48dbAbility to pipe Hub audit logs to a secondary backend (#2832)6b9e9dbAdd policy source for EPDP v2 (#2840)52c4f78Add v0.49.0 release notes (#2839)61ab8a6Fix error message when upload-git fails (#2828)347b733Options to control instrumentation of in-process service (#2838)4bdc775changelog entry for role policy DENY intersect fix (#2833)3885f81chore(deps): Bump jws from 3.2.2 to 3.2.3 in /npm/test/registry (#2830)fcf3c3bchore(deps): Update GitHub Actions deps (#2834)e36e898chore(deps): Update Go deps (#2835)0e08f4cchore(release): Prepare release 0.49.082108bfchore(version): Bump version to 0.49.0c677615fix: Correctly intersect role policy DENYs for multi-role principals (#2831)60fac8afix: Output serialization in the AuthZen response (#2837)v0.48.0Compare Source
Cerbos 0.48.0
View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.48.0.html
Changelog
8838f2aAdd v0.48.0 release notes (#2827)c02028cFix free-disk-space action (#2816)1022dbaImplement inspect.RuleTables (#2818)e050e29Pin cerbos/buf-breaking-action version (#2819)d3133c2Pin golangci-lint version in CI (#2811)9de93b8Remove jlumbroso/free-disk-space action (#2815)fe0a0ddUpdate verdaccio to 6.2.2 (#2810)dc198e5Useextractions/setup-cratedirectly (#2812)6a966b2chore(api): Reimplement AuthZen APIs using direct calls to engine (#2798)883e9ecchore(ci): Add "v" prefix to cosign version (#2763)ed6ac72chore(ci): Fix cosign version to 2.6.1 (#2760)72ff0e5chore(ci): Fix no such host error in e2e tests (#2775)c747b01chore(ci): Fix release workflow, rename cerbosfunc, update lambda docs (#2748)cc5819fchore(ci): Pin GitHub Action digests (#2807)a8bcd9echore(ci): Remove -failfast flag when executing E2E tests (#2776)052aec9chore(ci): Remove conventional commits requirement (#2806)6602c25chore(deps): Bump github.com/opencontainers/runc from 1.2.3 to 1.2.8 (#2767)0a4e029chore(deps): Bump golang.org/x/crypto from 0.37.0 to 0.45.0 in /hack/tools/changelog (#2805)4d99f7cchore(deps): Bump golang.org/x/crypto from 0.43.0 to 0.45.0 in /tools (#2794)8dd72c7chore(deps): Pin dependencies (#2809)cb47613chore(deps): Update GitHub Actions deps (#2750)aa7968cchore(deps): Update GitHub Actions deps (#2756)60703b8chore(deps): Update GitHub Actions deps (#2821)6136f27chore(deps): Update GitHub Actions deps to v6 (major) (#2755)3913ce1chore(deps): Update Go deps (#2751)81d1746chore(deps): Update Go deps (#2772)27656c0chore(deps): Update Go deps (#2788)dbd2f64chore(deps): Update Go deps (#2799)afd20efchore(deps): Update Node.js deps (#2753)ebc6907chore(deps): Update Node.js deps (#2789)f3872e9chore(deps): Update Node.js deps (#2800)9b7fae8chore(deps): Update Node.js deps (#2822)e805581chore(deps): Update actions/upload-artifact action to v5 (#2754)0574697chore(deps): Update dependency corepack to v0.34.2 (#2771)019092fchore(deps): Update dependency node to v24 (#2757)7215630chore(deps): Update module golang.org/x/crypto to v0.45.0 [SECURITY] (#2795)b21e502chore(deps): Update sigstore/cosign-installer action to v4 (#2758)98da70fchore(release): Prepare release 0.48.015bf74dchore(version): Bump version to 0.48.071107bcchore: Addjust alignrecipe to sort struct fields (#2790)a702850chore: Add manifest field to rule table (#2768)786c7c5chore: Allow playground to collect engine traces (#2793)d4fceb7chore: Changelog management (#2804)6f4fc73chore: Define rule table config as proto message (#2765)4d521f1chore: Fix data race when initializing logging in tests (#2796)b47ba00chore: Fix issues flagged bygopls(#2762)4182b49chore: Implement batch indexing for rules (#2803)40c3eafchore: Make copyright header autofixable (#2808)f24865fchore: Mark AuthZEN service as healthy (#2791)9f59be5chore: Move engine config to public API (#2770)a08e5ffchore: Move shared deps to build-tag-agnostic file (#2766)d304f1echore: Return audit trails along with outputs for EPDP (#2797)6101901chore: Ruletable generic backends (#2769)b39d0bachore: Show--api-endpointflag incerbosctl hub storehelp (#2749)9b76b2bchore: Usecerbos.epdp.v2.Configto configure rule table engine (#2777)c3e6afedocs(api): AuthZEN Authorization API (#2825)4195a5ddocs: Fixupload-gitarguments help (#2759)1a906f5docs: Remove versioned links from old release notes (#2779)6075aacenhancement!: Use GetCurrentVersion RPC in upload-git cmd (#2774)1802724enhancement: Simplify plan with all operation (#2817)13cccd5enhancement: Support for rule table bundles (#2773)4b25949feat(api): AuthZen Access Evaluation(s) APIs evaluation strategies (#2823)48d7402feat(api): Implement AuthZen AccessEvaluation API (#2778)81c39aafeat(api): Implement AuthZen AccessEvaluations (Batch) API (#2792)38c6508feat(api): Implement AuthZen PDP metadata endpoint (#2801)a36f6bcfix(plan): Remove unnecessary check (#2826)f335badfix: Sanitise resource kinds in principal policy rules (#2814)privatenumber/pkgroll (pkgroll)
v2.21.4Compare Source
Bug Fixes
privatenumber/tsx (tsx)
v4.21.0Compare Source
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - "after 9am and before 5pm Monday" (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.