Skip to content

chore(deps): bump the dev-dependencies group across 1 directory with 9 updates#7

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-39e06f32df
Open

chore(deps): bump the dev-dependencies group across 1 directory with 9 updates#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-39e06f32df

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Bumps the dev-dependencies group with 9 updates in the / directory:

Package From To
@biomejs/biome 2.4.7 2.4.15
@evilmartians/lefthook 2.1.3 2.1.6
@size-limit/preset-small-lib 12.0.0 12.1.0
@types/node 25.3.3 25.7.0
@vitest/coverage-v8 4.0.18 4.1.6
publint 0.3.18 0.3.20
size-limit 12.0.0 12.1.0
tsdown 0.21.2 0.22.0
vitest 4.0.18 4.1.6

Updates @biomejs/biome from 2.4.7 to 2.4.15

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.15

2.4.15

Patch Changes

  • #9394 ba3480e Thanks @​dyc3! - Added the nursery rule useTestHooksInOrder in the test domain. The rule enforces that Jest/Vitest lifecycle hooks (beforeAll, beforeEach, afterEach, afterAll) are declared in the order they execute, making test setup and teardown easier to reason about.

  • #10254 e0a54cc Thanks @​dyc3! - Added a new nursery rule useVueNextTickPromise, which enforces Promise syntax when using Vue nextTick.

    For example, the following snippet triggers the rule:

    import { nextTick } from "vue";
    nextTick(() => {
    updateDom();
    });

  • #10219 64aee45 Thanks @​dyc3! - Added a new nursery rule noVueVOnNumberValues, that disallows deprecated number modifiers on Vue v-on directives.

    For example, the following snippet triggers the rule:

    <input @keyup.13="submit" />
  • #10195 7b8d4e1 Thanks @​dyc3! - Added the new nursery rule useVueValidVFor, which validates Vue v-for directives and reports invalid aliases, missing component keys, and keys that do not use iteration variables.

  • #10238 1110256 Thanks @​dyc3! - Added the recommended nursery rule noVueImportCompilerMacros, which disallows importing Vue compiler macros such as defineProps from vue because they are automatically available.

  • #10201 1a08f89 Thanks @​realknove! - Fixed #10193: style/useReadonlyClassProperties no longer reports class properties as readonly-able when they are assigned inside arrow callbacks nested in class property initializers.

  • #9574 3bd2b6a Thanks @​Conaclos! - Fixed #9530. The diagnostics of organizeImports are now more detailed and more precise. They are also better at localizing where the issue is.

  • #10205 a704a6c Thanks @​Conaclos! - Fixed #10185. `organizeImports now errors when it encounters an unknown predefined group.

    The following configuration is now reported as invalid because :INEXISTENT: is an unknown predefined group.

    {
      "assist": {
        "actions": {
          "source": {
            "organizeImports": { "options": { "groups": [":INEXISTENT:"] } }
          }
        }
      }
    }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.15

Patch Changes

  • #9394 ba3480e Thanks @​dyc3! - Added the nursery rule useTestHooksInOrder in the test domain. The rule enforces that Jest/Vitest lifecycle hooks (beforeAll, beforeEach, afterEach, afterAll) are declared in the order they execute, making test setup and teardown easier to reason about.

  • #10254 e0a54cc Thanks @​dyc3! - Added a new nursery rule useVueNextTickPromise, which enforces Promise syntax when using Vue nextTick.

    For example, the following snippet triggers the rule:

    import { nextTick } from "vue";
    nextTick(() => {
    updateDom();
    });

  • #10219 64aee45 Thanks @​dyc3! - Added a new nursery rule noVueVOnNumberValues, that disallows deprecated number modifiers on Vue v-on directives.

    For example, the following snippet triggers the rule:

    <input @keyup.13="submit" />
  • #10195 7b8d4e1 Thanks @​dyc3! - Added the new nursery rule useVueValidVFor, which validates Vue v-for directives and reports invalid aliases, missing component keys, and keys that do not use iteration variables.

  • #10238 1110256 Thanks @​dyc3! - Added the recommended nursery rule noVueImportCompilerMacros, which disallows importing Vue compiler macros such as defineProps from vue because they are automatically available.

  • #10201 1a08f89 Thanks @​realknove! - Fixed #10193: style/useReadonlyClassProperties no longer reports class properties as readonly-able when they are assigned inside arrow callbacks nested in class property initializers.

  • #9574 3bd2b6a Thanks @​Conaclos! - Fixed #9530. The diagnostics of organizeImports are now more detailed and more precise. They are also better at localizing where the issue is.

  • #10205 a704a6c Thanks @​Conaclos! - Fixed #10185. `organizeImports now errors when it encounters an unknown predefined group.

    The following configuration is now reported as invalid because :INEXISTENT: is an unknown predefined group.

    {
      "assist": {
        "actions": {
          "source": {
            "organizeImports": { "options": { "groups": [":INEXISTENT:"] } }
          }
        }
      }
    }

... (truncated)

Commits

Updates @evilmartians/lefthook from 2.1.3 to 2.1.6

Release notes

Sourced from @​evilmartians/lefthook's releases.

v2.1.6

Changelog

  • bf73ea2f1ea5468c9af7a6f06b5ef8cd43e66040 fix(packaging): do not pipe stdout and stderr (#1382)
  • 04da00697cd8a6241023c1962feb720eeaa62698 fix(windows): normalize lefthook path for sh script (#1383)
  • de9597a1bf456d2cf0fbcb8816858b6e5cf6b609 fix: log full scoped name for skipped jobs (#1291)
  • eb3e70dbbd2442200ec8ff2140a3ee9daa7d9e70 fix: normalize root to always include trailing slash before path replacement (#1381)
  • f90f3f570ef9227ddf345a79cec687dac41a5d31 fix: skip pty allocation when stdout is not a terminal (#1393)

v2.1.5

Changelog

  • afac466157f88b5a5f9d03eb28acc90b095a4b5d chore(golangci-lint): upgrade to 2.11.4 (#1362)
  • f8e73b947e2eefd6950d6a19c20bbde19070809d chore: fix golangci-lint version lookup
  • 4564da343b1497f73f8a82f6104e1b5903f8a081 chore: move golangci-lint version to .tool-versions (#1349)
  • 236a5bd07c650aaa882963d68ab5e5e654a47681 chore: small cleanup (#1370)
  • 5ddf2206dd23e826c5434392e034fa7db523cd3d deps: April 2026 (#1375)
  • e26c719f5a85e8ff35871e9724649714d6f05c13 fix: git repository merge issue (#1372)
  • 3503a3b102c2b41c298e1e7dc6549181508518a6 fix: prevent lefthook run from overwriting global hooks (#1371)
  • f3fc175f6c638fd54ab49b8d7c060898f936c934 fix: use pre-push stdin for push file detection (#1368)

v2.1.4

Changelog

  • 21479f941dcf73bd826cd169088983320fdc31d6 fix: bring back {lefthook_job_name} template (#1347)
  • c586f14d15cbef841c988420da6e21d903859764 fix: separate more commands' non-option args with -- (#1339)
  • 8dcd4aef558c1676d0ac724e220d241a71e6a861 pkg: fix scripts (#1348)
  • 2fac7285db9090f0e88478fdcb50353452250655 pkg: make it easier to read (#1340)
  • 32af36b1b832891df7dfb7411b4c2e273aefc3d7 pkg: refactor packaging (2) (#1346)
  • 5354773b454a8c5e7a916d909782661bc6b1f896 pkg: refactor packaging scripts (#1308)
Changelog

Sourced from @​evilmartians/lefthook's changelog.

2.1.6 (2026-04-16)

2.1.5 (2026-04-06)

2.1.4 (2026-03-12)

Commits
  • 679ce27 2.1.6: fixes for Windows and AI tools execution
  • 04da006 fix(windows): normalize lefthook path for sh script (#1383)
  • eb3e70d fix: normalize root to always include trailing slash before path replacemen...
  • f90f3f5 fix: skip pty allocation when stdout is not a terminal (#1393)
  • 1481e9d docs: upgrade docmd (#1391)
  • de9597a fix: log full scoped name for skipped jobs (#1291)
  • bf73ea2 fix(packaging): do not pipe stdout and stderr (#1382)
  • 4cec579 2.1.5: prevent overwriting global hooks and fix pre-push for sha256 repos
  • 5ddf220 deps: April 2026 (#1375)
  • 0c16199 docs: update documentation and docs for claude (#1373)
  • Additional commits viewable in compare view

Updates @size-limit/preset-small-lib from 12.0.0 to 12.1.0

Release notes

Sourced from @​size-limit/preset-small-lib's releases.

12.1.0

  • Added disablePlugins option (by @​JPeer264).
  • Updated esbuild.

12.0.1

Changelog

Sourced from @​size-limit/preset-small-lib's changelog.

12.1.0

  • Added disablePlugins option (by @​JPeer264).
  • Updated esbuild.

12.0.1

Commits

Updates @types/node from 25.3.3 to 25.7.0

Commits

Updates @vitest/coverage-v8 from 4.0.18 to 4.1.6

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.6

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.1.5

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.4

   🚀 Experimental Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates publint from 0.3.18 to 0.3.20

Release notes

Sourced from publint's releases.

publint@0.3.20

Patch Changes

  • Suggest adding engines.node when it is missing from detected Node.js packages (#226)

  • Loosen "breaking change" wording in lint messages (7bb3f4f)

publint@0.3.19

Patch Changes

  • Add NESTED_PACKAGE_JSON_FIELD_IGNORED to warn when published nested package.json files define "exports" or "imports", which Node.js ignores outside the package root. (#224)

  • Fix internal browser directory traversal logic (#224)

Changelog

Sourced from publint's changelog.

0.3.20

Patch Changes

  • Suggest adding engines.node when it is missing from detected Node.js packages (#226)

  • Loosen "breaking change" wording in lint messages (7bb3f4f)

0.3.19

Patch Changes

  • Add NESTED_PACKAGE_JSON_FIELD_IGNORED to warn when published nested package.json files define "exports" or "imports", which Node.js ignores outside the package root. (#224)

  • Fix internal browser directory traversal logic (#224)

Commits

Updates size-limit from 12.0.0 to 12.1.0

Release notes

Sourced from size-limit's releases.

12.1.0

  • Added disablePlugins option (by @​JPeer264).
  • Updated esbuild.

12.0.1

Changelog

Sourced from size-limit's changelog.

12.1.0

  • Added disablePlugins option (by @​JPeer264).
  • Updated esbuild.

12.0.1

Commits

Updates tsdown from 0.21.2 to 0.22.0

Release notes

Sourced from tsdown's releases.

v0.22.0

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

🔄 Migration Guide

Node.js version

Upgrade to Node.js 22.18.0 or later. Bun and Deno remain supported (experimental).

unrun is no longer bundled

If your environment relies on the unrun config loader (i.e. you're on a Node version without native TypeScript support and use the default auto loader), install it manually:

npm i -D unrun
# or, alternatively, the new tsx loader:
npm i -D tsx

If you use Node.js 22.18.0+ with native TypeScript support, no change is needed — the auto loader will pick native.

dts auto-enabled from tsconfig

If your tsconfig.json has compilerOptions.declaration: true but you do not want tsdown to emit .d.ts files, opt out explicitly:

// tsdown.config.ts
export default defineConfig({
  dts: false,
})

exports.bin auto-detection

... (truncated)

Commits

Updates vitest from 4.0.18 to 4.1.6

Release notes

Sourced from vitest's releases.

v4.1.6

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.1.5

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.4

   🚀 Experimental Features

   🐞 Bug Fixes

... (truncated)

Commits
    Description has been truncated

…9 updates

Bumps the dev-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.7` | `2.4.15` |
| [@evilmartians/lefthook](https://github.com/evilmartians/lefthook) | `2.1.3` | `2.1.6` |
| [@size-limit/preset-small-lib](https://github.com/ai/size-limit) | `12.0.0` | `12.1.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.3` | `25.7.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.18` | `4.1.6` |
| [publint](https://github.com/publint/publint/tree/HEAD/packages/publint) | `0.3.18` | `0.3.20` |
| [size-limit](https://github.com/ai/size-limit) | `12.0.0` | `12.1.0` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.21.2` | `0.22.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.6` |



Updates `@biomejs/biome` from 2.4.7 to 2.4.15
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.15/packages/@biomejs/biome)

Updates `@evilmartians/lefthook` from 2.1.3 to 2.1.6
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.3...v2.1.6)

Updates `@size-limit/preset-small-lib` from 12.0.0 to 12.1.0
- [Release notes](https://github.com/ai/size-limit/releases)
- [Changelog](https://github.com/ai/size-limit/blob/main/CHANGELOG.md)
- [Commits](ai/size-limit@12.0.0...12.1.0)

Updates `@types/node` from 25.3.3 to 25.7.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.0.18 to 4.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8)

Updates `publint` from 0.3.18 to 0.3.20
- [Release notes](https://github.com/publint/publint/releases)
- [Changelog](https://github.com/publint/publint/blob/master/packages/publint/CHANGELOG.md)
- [Commits](https://github.com/publint/publint/commits/publint@0.3.20/packages/publint)

Updates `size-limit` from 12.0.0 to 12.1.0
- [Release notes](https://github.com/ai/size-limit/releases)
- [Changelog](https://github.com/ai/size-limit/blob/main/CHANGELOG.md)
- [Commits](ai/size-limit@12.0.0...12.1.0)

Updates `tsdown` from 0.21.2 to 0.22.0
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.21.2...v0.22.0)

Updates `vitest` from 4.0.18 to 4.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@evilmartians/lefthook"
  dependency-version: 2.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@size-limit/preset-small-lib"
  dependency-version: 12.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: publint
  dependency-version: 0.3.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: size-limit
  dependency-version: 12.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: tsdown
  dependency-version: 0.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 4.1.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 12, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants