chore(deps-dev): bump the minor-development-deps group with 5 updates #160

dependabot · 2025-12-01T17:42:39Z

Bumps the minor-development-deps group with 5 updates:

Package	From	To
@biomejs/biome	`2.3.2`	`2.3.8`
@vitest/coverage-v8	`4.0.6`	`4.0.14`
prettier	`3.6.2`	`3.7.3`
tsup	`8.5.0`	`8.5.1`
vitest	`4.0.6`	`4.0.14`

Updates @biomejs/biome from 2.3.2 to 2.3.8

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.3.8

2.3.8

Patch Changes
#8188 4ca088c Thanks @ematipico! - Fixed #7390, where Biome couldn't apply the correct configuration passed via --config-path.

If you have multiple root configuration files, running any command with --config-path will now apply the chosen configuration file.
#8171 79adaea Thanks @dibashthapa! - Added the new rule noLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.

For example, the following code triggers the rule because the component would render 0:
const Component = () => {
  const count = 0;
  return <div>{count && <span>Count: {count}</span>}</div>;
};
#8116 b537918 Thanks @Netail! - Added the nursery rule noDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.

Invalid:
<div {...props} something="else" {...props} />
#8256 f1e4696 Thanks @cormacrelf! - Fixed a bug where logs were discarded (the kind from --log-level=info etc.). This is a regression introduced after an internal refactor that wasn't adequately tested.

#8226 3f19b52 Thanks @dyc3! - Fixed #8222: The HTML parser, with Vue directives enabled, can now parse v-slot shorthand syntax, e.g. \<template #foo>.

#8007 182ecdc Thanks @brandonmcconnell! - Added support for dollar-sign-prefixed filenames in the useFilenamingConvention rule.

Biome now allows filenames starting with the dollar-sign (e.g. $postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.
#8218 91484d1 Thanks @hirokiokada77! - Added the noMultiStr rule, which disallows creating multiline strings by escaping newlines.

Invalid:
const foo =
  "Line 1\n\
Line 2";
Valid:

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.3.8

Patch Changes
#8188 4ca088c Thanks @ematipico! - Fixed #7390, where Biome couldn't apply the correct configuration passed via --config-path.

If you have multiple root configuration files, running any command with --config-path will now apply the chosen configuration file.
#8171 79adaea Thanks @dibashthapa! - Added the new rule noLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.

For example, the following code triggers the rule because the component would render 0:
const Component = () => {
  const count = 0;
  return <div>{count && <span>Count: {count}</span>}</div>;
};
#8116 b537918 Thanks @Netail! - Added the nursery rule noDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.

Invalid:
<div {...props} something="else" {...props} />
#8256 f1e4696 Thanks @cormacrelf! - Fixed a bug where logs were discarded (the kind from --log-level=info etc.). This is a regression introduced after an internal refactor that wasn't adequately tested.

#8226 3f19b52 Thanks @dyc3! - Fixed #8222: The HTML parser, with Vue directives enabled, can now parse v-slot shorthand syntax, e.g. \<template #foo>.

#8007 182ecdc Thanks @brandonmcconnell! - Added support for dollar-sign-prefixed filenames in the useFilenamingConvention rule.

Biome now allows filenames starting with the dollar-sign (e.g. $postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.
#8218 91484d1 Thanks @hirokiokada77! - Added the noMultiStr rule, which disallows creating multiline strings by escaping newlines.

Invalid:
const foo =
  "Line 1\n\
Line 2";
Valid:
const foo = "Line 1\nLine 2";
const bar = `Line 1

... (truncated)

Commits

0a6b6fb chore: restore version and yaml how they were
5d15cd5 chore: revert version
59fa146 ci: release (#8263)
f7e836f feat(biome_js_analyze): implement noProto rule (#8276)
b537918 feat(js_biome_analyze): implement noDuplicatedSpreadProps (#8116)
91484d1 feat(biome_js_analyze): implement noMultiStr rule (#8218)
68c052e feat(biome_js_analyze): implement noEqualsToNull rule (#8214)
79adaea feat(lint): added new rule no-leaked-render from eslint-react (#8171)
cd2edd7 feat(js_analyze): implement noTernary (#8201)
8e97b89 ci: release (#8161)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @biomejs/biome since your current version.

Updates @vitest/coverage-v8 from 4.0.6 to 4.0.14

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.0.14

   🚀 Experimental Features

browser: Expose utils.configurePrettyDOM - by @sheremet-va in vitest-dev/vitest#9103 (2cc34)

runner: Add full names to tasks - by @macarie in vitest-dev/vitest#9087 (821aa)

ui: Add tabbed failure view for toMatchScreenshot with comparison slider - by @macarie in vitest-dev/vitest#8813 (c37c2)

   🐞 Bug Fixes

Externalize before caching - by @sheremet-va in vitest-dev/vitest#9077 (e1b2e)

Collect the duration of external imports - by @sheremet-va in vitest-dev/vitest#9097 (3326c)

Rename collect to import, remove prepare - by @sheremet-va in vitest-dev/vitest#9091 (1256b)

browser:

Unsubscribe onCancel on rpc destroy - by @AriPerkkio in vitest-dev/vitest#9088 (f5b72)

Revert the viewport scaling in non-ui mode #9018 - by @sheremet-va in vitest-dev/vitest#9072 and vitest-dev/vitest#9018 (64502)

coverage:

Invalidate circular modules correctly on rerun with coverage - by @aicest in vitest-dev/vitest#9096 (6f22c)

expect:

Allow function as standard schema - by @hi-ogawa in vitest-dev/vitest#9099 (ed8a2)

jsdom:

Reuse abort signals if possible - by @sheremet-va in vitest-dev/vitest#9090 (2c468)

pool:

Init VITEST_POOL_ID + VITEST_WORKER_ID before environment setup - by @AriPerkkio in vitest-dev/vitest#9085 (37918)

web-worker:

postMessage to send ports to workers - by @whitphx and @AriPerkkio in vitest-dev/vitest#9078 (9d176)

   🏎 Performance

Replace debug with obug - by @sxzz and @AriPerkkio in vitest-dev/vitest#9057 (acc51)

    View changes on GitHub

v4.0.13

   🐞 Bug Fixes

types:

Don't use type from Vite 7.1 - by @sheremet-va in vitest-dev/vitest#9071 (6356b)

Don't import node.js dependent types in vitest/browser - by @sheremet-va in vitest-dev/vitest#9068 (332af)

   🏎 Performance

Avoid fetchModule roundtrip if the module is cached - by @sheremet-va in vitest-dev/vitest#9075 (b27e0)

experimental: If fsCacheModule is enabled, read from the memory when possible - by @sheremet-va in vitest-dev/vitest#9076 (6b9a1)

    View changes on GitHub

v4.0.12

   🐞 Bug Fixes

Inherit fsModuleCachePath by default - by @sheremet-va in vitest-dev/vitest#9063 (9a8bc)

... (truncated)

Commits

9ca74cf chore: release v4.0.14
acc5152 perf: replace debug with obug (#9057)
73b54ce chore: release v4.0.13
5aa84d5 chore: release v4.0.12
c3befb0 chore: release v4.0.11
259a3d1 chore: release v4.0.10
62fab24 chore: release v4.0.9
46bfd09 chore: release v4.0.8
da8b93a fix(deps): update all non-major dependencies (#8636)
1f5d9d2 chore: release v4.0.7
See full diff in compare view

Updates prettier from 3.6.2 to 3.7.3

Release notes

Sourced from prettier's releases.

3.7.3

What's Changed

Fix prettier.getFileInfo() change that breaks VSCode extension by @fisker in prettier/prettier#18375

🔗 Changelog

3.7.2

What's Changed

Fix string print when switching quotes by @fisker in prettier/prettier#18351

Preserve quote for embedded HTML attribute values by @kovsu in prettier/prettier#18352

Fix comment in empty type literal by @fisker in prettier/prettier#18364

🔗 Changelog

3.7.1

Fix performance regression in doc printer (#18342 by @fisker)

🔗 Changelog

3.7.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.7.3

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#18375 by @fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

3.7.2

diff

JavaScript: Fix string print when switching quotes (#18351 by @fisker)
// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")
// Prettier 3.7.1
console.log('A descriptor\'s .kind must be "method" or "field".');
// Prettier 3.7.2
console.log('A descriptor\'s .kind must be "method" or "field".');
JavaScript: Preserve quote for embedded HTML attribute values (#18352 by @kovsu)
// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;
// Prettier 3.7.1
const html = /* HTML */ &lt;div class=${styles.banner}&gt;&lt;/div&gt;;
// Prettier 3.7.2
const html = /* HTML */ &lt;div class=&quot;${styles.banner}&quot;&gt;&lt;/div&gt;;
TypeScript: Fix comment in empty type literal (#18364 by @fisker)
// Input
export type XXX = {
  // tbd
};
// Prettier 3.7.1
</tr></table>

... (truncated)

Commits

fdfa670 Release 3.7.3
2dce3ec Fix typo
27d6c64 Revert previous change to getFileInfo (#18375)
f4a7afa Add types for config related functions (#18376)
9266e3e Add resolved test cases (#18358)
3bfc014 Bump Prettier dependency to 3.7.2
081b846 Clean changelog_unreleased
03384c9 Release 3.7.2
514e51a Release @prettier/plugin-hermes & @prettier/plugin-oxc v0.1.2
29a11ae Fix comment in empty type literal (#18364)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.

Updates tsup from 8.5.0 to 8.5.1

Release notes

Sourced from tsup's releases.

v8.5.1

🐞 Bug Fixes

Add script tag validation - by @benhoad in egoist/tsup#1314 (df736)

Update esbuild to fix sourcemap source issue - by @ArcherGu and @sxzz in egoist/tsup#1316 (fb8ae)

View changes on GitHub

Commits

1ecb6a5 chore: release v8.5.1
e92ba64 chore: upgrade esbuild
fb8ae7d fix: update esbuild to fix sourcemap source issue (#1316)
db7cfaa chore: upgrade pnpm
df7360b fix: add script tag validation (#1314)
65e8547 chore: bump source-map to 0.7.6 (#1358)
f127e57 ci: switch to trusted publisher
8b6907d chore: add maintenance info in README (#1332)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for tsup since your current version.

Updates vitest from 4.0.6 to 4.0.14

Release notes

Sourced from vitest's releases.

v4.0.14

   🚀 Experimental Features

browser: Expose utils.configurePrettyDOM - by @sheremet-va in vitest-dev/vitest#9103 (2cc34)

runner: Add full names to tasks - by @macarie in vitest-dev/vitest#9087 (821aa)

ui: Add tabbed failure view for toMatchScreenshot with comparison slider - by @macarie in vitest-dev/vitest#8813 (c37c2)

   🐞 Bug Fixes

Externalize before caching - by @sheremet-va in vitest-dev/vitest#9077 (e1b2e)

Collect the duration of external imports - by @sheremet-va in vitest-dev/vitest#9097 (3326c)

Rename collect to import, remove prepare - by @sheremet-va in vitest-dev/vitest#9091 (1256b)

browser:

Unsubscribe onCancel on rpc destroy - by @AriPerkkio in vitest-dev/vitest#9088 (f5b72)

Revert the viewport scaling in non-ui mode #9018 - by @sheremet-va in vitest-dev/vitest#9072 and vitest-dev/vitest#9018 (64502)

coverage:

Invalidate circular modules correctly on rerun with coverage - by @aicest in vitest-dev/vitest#9096 (6f22c)

expect:

Allow function as standard schema - by @hi-ogawa in vitest-dev/vitest#9099 (ed8a2)

jsdom:

Reuse abort signals if possible - by @sheremet-va in vitest-dev/vitest#9090 (2c468)

pool:

Init VITEST_POOL_ID + VITEST_WORKER_ID before environment setup - by @AriPerkkio in vitest-dev/vitest#9085 (37918)

web-worker:

postMessage to send ports to workers - by @whitphx and @AriPerkkio in vitest-dev/vitest#9078 (9d176)

   🏎 Performance

Replace debug with obug - by @sxzz and @AriPerkkio in vitest-dev/vitest#9057 (acc51)

    View changes on GitHub

v4.0.13

   🐞 Bug Fixes

types:

Don't use type from Vite 7.1 - by @sheremet-va in vitest-dev/vitest#9071 (6356b)

Don't import node.js dependent types in vitest/browser - by @sheremet-va in vitest-dev/vitest#9068 (332af)

   🏎 Performance

Avoid fetchModule roundtrip if the module is cached - by @sheremet-va in vitest-dev/vitest#9075 (b27e0)

experimental: If fsCacheModule is enabled, read from the memory when possible - by @sheremet-va in vitest-dev/vitest#9076 (6b9a1)

    View changes on GitHub

v4.0.12

   🐞 Bug Fixes

Inherit fsModuleCachePath by default - by @sheremet-va in vitest-dev/vitest#9063 (9a8bc)

... (truncated)

Commits

9ca74cf chore: release v4.0.14
821aa20 feat(runner): Add full names to tasks (#9087)
1256b5c fix: rename collect to import, remove prepare (#9091)
3326cc9 fix: collect the duration of external imports (#9097)
379185b fix(pool): init VITEST_POOL_ID + VITEST_WORKER_ID before environment setu...
2c468ee fix(jsdom): reuse abort signals if possible (#9090)
e1b2e08 fix: externalize before caching (#9077)
acc5152 perf: replace debug with obug (#9057)
73b54ce chore: release v4.0.13
b27e002 perf: avoid fetchModule roundtrip if the module is cached (#9075)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-development-deps group with 5 updates: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.3.2` | `2.3.8` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.6` | `4.0.14` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.3` | | [tsup](https://github.com/egoist/tsup) | `8.5.0` | `8.5.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.6` | `4.0.14` | Updates `@biomejs/biome` from 2.3.2 to 2.3.8 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/[email protected]/packages/@biomejs/biome) Updates `@vitest/coverage-v8` from 4.0.6 to 4.0.14 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.14/packages/coverage-v8) Updates `prettier` from 3.6.2 to 3.7.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.7.3) Updates `tsup` from 8.5.0 to 8.5.1 - [Release notes](https://github.com/egoist/tsup/releases) - [Commits](egoist/tsup@v8.5.0...v8.5.1) Updates `vitest` from 4.0.6 to 4.0.14 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.14/packages/vitest) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.3.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-development-deps - dependency-name: "@vitest/coverage-v8" dependency-version: 4.0.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-development-deps - dependency-name: prettier dependency-version: 3.7.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-development-deps - dependency-name: tsup dependency-version: 8.5.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-development-deps - dependency-name: vitest dependency-version: 4.0.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-development-deps ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label Dec 1, 2025

dependabot bot requested a review from erunion as a code owner December 1, 2025 17:42

dependabot bot added the dependencies Pull requests that update a dependency file label Dec 1, 2025

erunion approved these changes Dec 1, 2025

View reviewed changes

erunion merged commit f4b433f into main Dec 1, 2025
5 checks passed

erunion deleted the dependabot/npm_and_yarn/minor-development-deps-3a162b14f6 branch December 1, 2025 17:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump the minor-development-deps group with 5 updates #160

chore(deps-dev): bump the minor-development-deps group with 5 updates #160

Uh oh!

dependabot bot commented on behalf of github Dec 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps-dev): bump the minor-development-deps group with 5 updates #160

chore(deps-dev): bump the minor-development-deps group with 5 updates #160

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 1, 2025

Biome CLI v2.3.8

2.3.8

Patch Changes

2.3.8

Patch Changes

v4.0.14

🚀 Experimental Features

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v4.0.13

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v4.0.12

🐞 Bug Fixes

3.7.3

What's Changed

3.7.2

What's Changed

3.7.1

3.7.0

3.7.3

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#18375 by @​fisker)

3.7.2

JavaScript: Fix string print when switching quotes (#18351 by @​fisker)

JavaScript: Preserve quote for embedded HTML attribute values (#18352 by @​kovsu)

TypeScript: Fix comment in empty type literal (#18364 by @​fisker)

v8.5.1

🐞 Bug Fixes

View changes on GitHub

v4.0.14

🚀 Experimental Features

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v4.0.13

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v4.0.12

🐞 Bug Fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

API: Fix `prettier.getFileInfo()` change that breaks VSCode extension (#18375 by `@fisker`)

JavaScript: Fix string print when switching quotes (#18351 by `@fisker`)

JavaScript: Preserve quote for embedded HTML attribute values (#18352 by `@kovsu`)

TypeScript: Fix comment in empty type literal (#18364 by `@fisker`)