Skip to content

Bump the npm-dependencies group across 1 directory with 7 updates#83

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-dependencies-3099323671
Open

Bump the npm-dependencies group across 1 directory with 7 updates#83
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-dependencies-3099323671

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 27, 2026

Bumps the npm-dependencies group with 7 updates in the / directory:

Package From To
@biomejs/biome 2.3.11 2.4.9
@redocly/cli 2.14.7 2.25.1
@types/node 25.0.10 25.5.0
lefthook 2.0.15 2.1.4
typedoc 0.28.16 0.28.18
typescript 5.9.3 6.0.2
vitest 4.0.18 4.1.2

Updates @biomejs/biome from 2.3.11 to 2.4.9

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.9

2.4.9

Patch Changes

  • #9315 085d324 Thanks @​ematipico! - Added a new nursery CSS rule noDuplicateSelectors, that disallows duplicate selector lists within the same at-rule context.

    For example, the following snippet triggers the rule because the second selector and the first selector are the same:

    /* First selector */
.x .y .z {
}
/* Second selector */
.x {
.y {
.z {
}
}
}

  • #9567 b7ab931 Thanks @​ematipico! - Fixed #7211: useOptionalChain now detects negated logical OR chains. The following code is now considered invalid:

    !foo || !foo.bar;

  • #8670 607ebf9 Thanks @​tt-a1i! - Fixed #8345: useAdjacentOverloadSignatures no longer reports false positives for static and instance methods with the same name. Static methods and instance methods are now treated as separate overload groups.

    class Kek {
  static kek(): number {
    return 0;
  }
  another(): string {
    return "";
  }
  kek(): number {
    return 1;
  } // no longer reported as non-adjacent
}

  • #9476 97b80a8 Thanks @​masterkain! - Fixed [#9475](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/9475): Fixed a panic when Biome analyzed ambient TypeScript modules containing class constructor, getter, or setter signatures that reference local type aliases. Biome now handles these declarations without crashing during semantic analysis.

  • #9553 0cd5298 Thanks @​dyc3! - Fixed a bug where enabling the rules of a whole group, would enable rules that belonged to a domain under the same group.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.9

Patch Changes

  • #9315 085d324 Thanks @​ematipico! - Added a new nursery CSS rule noDuplicateSelectors, that disallows duplicate selector lists within the same at-rule context.

    For example, the following snippet triggers the rule because the second selector and the first selector are the same:

    /* First selector */
.x .y .z {
}
/* Second selector */
.x {
.y {
.z {
}
}
}

  • #9567 b7ab931 Thanks @​ematipico! - Fixed #7211: useOptionalChain now detects negated logical OR chains. The following code is now considered invalid:

    !foo || !foo.bar;

  • #8670 607ebf9 Thanks @​tt-a1i! - Fixed #8345: useAdjacentOverloadSignatures no longer reports false positives for static and instance methods with the same name. Static methods and instance methods are now treated as separate overload groups.

    class Kek {
  static kek(): number {
    return 0;
  }
  another(): string {
    return "";
  }
  kek(): number {
    return 1;
  } // no longer reported as non-adjacent
}

  • #9476 97b80a8 Thanks @​masterkain! - Fixed [#9475](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/9475): Fixed a panic when Biome analyzed ambient TypeScript modules containing class constructor, getter, or setter signatures that reference local type aliases. Biome now handles these declarations without crashing during semantic analysis.

  • #9553 0cd5298 Thanks @​dyc3! - Fixed a bug where enabling the rules of a whole group, would enable rules that belonged to a domain under the same group.

    For example, linter.rules.correctness = "error" no longer enables React- or Qwik-specific correctness rules unless linter.domains.react, linter.domains.qwik, or an explicit rule config also enables them, or their relative dependencies are installed.

... (truncated)

Commits

Updates @redocly/cli from 2.14.7 to 2.25.1

Release notes

Sourced from @​redocly/cli's releases.

@​redocly/cli@​2.25.1

Patch Changes

  • Fixed an issue where a message about a missing configuration was shown even though the --extends option was provided.
  • Updated @​redocly/openapi-core to v2.25.1.

@​redocly/cli@​2.25.0

Minor Changes

  • Added no-mixed-number-range-constraints rule for OpenAPI 3.1+, as well as for AsyncAPI and Arazzo. This rule warns when schemas use both maximum and exclusiveMaximum or both minimum and exclusiveMinimum keywords.

Patch Changes

  • Fixed an issue where invalid discriminator mapping values could cause linting to fail.
  • Resolved high severity audit vulnerabilities by updating dependency versions.
  • Updated @​redocly/openapi-core to v2.25.0.

@​redocly/cli@​2.24.1

Patch Changes

  • Downgraded undici to resolve an issue where formData was being submitted empty.
  • Updated @​redocly/openapi-core to v2.24.1.

@​redocly/cli@​2.24.0

Patch Changes

  • Updated @​redocly/openapi-core to v2.24.0.

@​redocly/cli@​2.23.0

Minor Changes

  • Added support of targets property in scorecardClassic. Use this property to override scorecardClassic rules for a specific API.

Patch Changes

  • Updated @​redocly/openapi-core to v2.23.0.

@​redocly/cli@​2.22.1

Patch Changes

  • Updated undici to the 6.24.1 version to ensure improved performance, security, and compatibility.
  • Updated @​redocly/openapi-core to v2.22.1.

@​redocly/cli@​2.22.0

Minor Changes

  • Added support of checkstyle format for scorecard-classic command.

... (truncated)

Commits
  • bb802e1 chore: 🔖 release new versions (#2688)
  • d336c1e fix: do not show the message about missing configuration when the --extends o...
  • 176a255 chore: add cli performence test (#2686)
  • af1ff60 chore: 🔖 release new versions (#2678)
  • 3aa0473 chore: update config to 0.43.0 (#2685)
  • 7e85583 chore: update analytics data format (#2597)
  • 544533b fix: prevent failing when discriminator mapping value is null (#2681)
  • 4c53b0b chore: fix github actions (#2683)
  • d4858cc chore(security): update github actions and pin to commit sha (#2682)
  • b7c0c0f feat: allow the no-mixed-number-range-constraints rule for AsyncAPI and Arazz...
  • Additional commits viewable in compare view

Updates @types/node from 25.0.10 to 25.5.0

Commits

Updates lefthook from 2.0.15 to 2.1.4

Release notes

Sourced from lefthook's releases.

v2.1.4

Changelog

  • 21479f941dcf73bd826cd169088983320fdc31d6 fix: bring back {lefthook_job_name} template (#1347)
  • c586f14d15cbef841c988420da6e21d903859764 fix: separate more commands' non-option args with -- (#1339)
  • 8dcd4aef558c1676d0ac724e220d241a71e6a861 pkg: fix scripts (#1348)
  • 2fac7285db9090f0e88478fdcb50353452250655 pkg: make it easier to read (#1340)
  • 32af36b1b832891df7dfb7411b4c2e273aefc3d7 pkg: refactor packaging (2) (#1346)
  • 5354773b454a8c5e7a916d909782661bc6b1f896 pkg: refactor packaging scripts (#1308)

v2.1.3

Changelog

  • 044ebf3a8c36f323d3ca32f4d1c42dc22cfd3cb9 chore(ci): switch artifact attestations gen to actions/attest v4 (#1338)
  • 73d1680f6bd934ee2d18071ae14df2338a2ee670 chore: describe ENV variables usage in CLI help output (#1337)
  • a9cb6568acb08dfde150b9753afe815abb030e84 chore: small code improvements (#1336)
  • 9478fd55f0cd485cd4bbe62187357f27239c43c2 deps: March 2026 (#1330)
  • 5afae26dc3a03503ceb0f66be4a8c61aca084662 feat: update minimum go version (#1331)
  • 8da90752970ad6733c27cee44e15b3349856b12a fix: support git debug versions (#1334)

v2.1.2

Changelog

  • 737a6f71589e6a2e6f704be4d6c485d473c25b69 ci: freeze docmd (#1327)
  • 6fb8e50d09202a71683fd0c160ba9458d0fe38be feat: introduce setup hook option (#1326)
  • 246f1c99f02be680a8ce24c9d880f2570d25b212 fix: rollback auto-staged changes if unwanted changes detected (#1251)
  • af21ce3978a6a9ab79cdc8150e515d4dcd15434d pkg(pypi): fix python packages publishing
  • 52c5d93b452c67490b8aa7488761ad19a098fb33 refactor: recovering logic for changesets (#1324)

v2.1.1

Changelog

  • beae38f0e4f132d685247310116464a50ac6a11b chore: reduce verbosity of hints in lefthook install (#1303)
  • 59c72606e76f6ca42cc5989a28ed79f42cf0d5a7 ci: fix publishing to PyPi
  • b6cdb2ed9778561860b244df033c73af23ef0291 docs(install): add missing /v2 suffix for go get -tool (#1304)
  • 47b48679bf1af27633902fa4d1098cf79547bcfd fix: reset colors on config read (#1309)

v2.1.0

Changelog

  • 6cb576e73621d7b263094663c64827ab96e271ae chore: fancy wording and indentation for hits
  • 9ace994a09c6a642a1be7df8fe11586f72827bfe ci: skip Python publishing
  • 47b8f5c06f19db0ba26a6283579238248e995bfe feat: allow installing non-git hooks (#1301)
  • ec7e8e18afc0d5c002d761f937ae5db84dddb6e0 feat: check core.hooksPath when lefthook install (#1292)

v2.0.16

Changelog

  • 432efde268b98e5874281d7ca3cb16306bcdd04a chore(golangci-lint): upgrade to 2.8.0 (#1278)
  • 130855b6a576799afcd1d32f7ab4e1e286ef69d1 chore: timeout cleanup (#1297)
  • 4217025c2fef2caa2abe334ef2beeabeca3d7e05 deps: January 2026 (#1285)
  • 272b59b38c50e948602e28c363c39a6e33936f43 docs(remotes): elaborate on when to refetch and failure mode (#1287)
  • e6adbbaf0b12e6cbe72e95e9e482617d0b4ac36c feat: add timeout argument (#1263)
  • a50fcff10df9ccc0afa0c4c7236d1b48b4215f93 fix(jsonschema): accept string in file_types (#1288)
  • 8b88796491706f4c897b26d289d429988c4be411 fix: try reading direct file instead of all remotes (#1243)
  • 7c6b73327162b93661ad59fe6705ccbfd4beefc1 perf!: skip ghost hook when hooks are already configured (#1255)

... (truncated)

Changelog

Sourced from lefthook's changelog.

2.1.4 (2026-03-12)

2.1.3 (2026-03-07)

2.1.2 (2026-03-01)

2.1.1 (2026-02-12)

2.1.0 (2026-02-03)

2.0.16 (2026-01-27)

... (truncated)

Commits

Updates typedoc from 0.28.16 to 0.28.18

Release notes

Sourced from typedoc's releases.

v0.28.18

Features

  • Support TypeScript 6.0, #3084.

v0.28.17

Bug Fixes

  • Improved handling of comments for type aliases which have been declaration merged with functions, #3064.
  • Fixed anchor link generation to members named $, #3065.
  • Corrected typing of the plugin option to permit functions, #3066.
  • Warnings about unused @param tags will now be properly suppressed when they come from declaration files and the suppressCommentWarningsInDeclarationFiles option is enabled, #3070.
  • Fixed conversion of types referencing type parameters on functions, #3071.

Thanks!

Changelog

Sourced from typedoc's changelog.

v0.28.18 (2026-03-23)

Features

  • Support TypeScript 6.0, #3084.

v0.28.17 (2026-02-13)

Bug Fixes

  • Improved handling of comments for type aliases which have been declaration merged with functions, #3064.
  • Fixed anchor link generation to members named $, #3065.
  • Corrected typing of the plugin option to permit functions, #3066.
  • Warnings about unused @param tags will now be properly suppressed when they come from declaration files and the suppressCommentWarningsInDeclarationFiles option is enabled, #3070.
  • Fixed conversion of types referencing type parameters on functions, #3071.

Thanks!

Commits

Updates typescript from 5.9.3 to 6.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits

Updates vitest from 4.0.18 to 4.1.2

Release notes

Sourced from vitest's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

    View changes on GitHub

v4.1.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.0

Vitest 4.1 is out!

... (truncated)

Commits
  • fc6f482 chore: release v4.1.2
  • 6f97b55 feat: disable colors if agent is detected (#9851)
  • b3c992c fix(coverage): correct coverageConfigDefaults values and types (#9940)
  • 7c06598 fix: ensure sequential mock/unmock resolution (#9830)
  • f54abad chore: add typo-checker skill and fix typos (#9963)
  • 7aa9377 fix: don't resolve setupFiles from parent directory (#9960)
  • 1f2d318 chore: release v4.1.1
  • ebfde79 refactor: rename matchesTagsFilter to matchesTags (#9956)
  • 5611500 feat(experimental): introduce experimental.vcsProvider (#9928)
  • eec53d9 feat(experimental): expose matchesTagsFilter to test if the current filter ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-dependencies group across 1 directory with 7 updates
fce2520 
Bumps the npm-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.3.11` | `2.4.9` |
| [@redocly/cli](https://github.com/Redocly/redocly-cli) | `2.14.7` | `2.25.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.10` | `25.5.0` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.0.15` | `2.1.4` |
| [typedoc](https://github.com/TypeStrong/TypeDoc) | `0.28.16` | `0.28.18` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.2` |



Updates `@biomejs/biome` from 2.3.11 to 2.4.9
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.9/packages/@biomejs/biome)

Updates `@redocly/cli` from 2.14.7 to 2.25.1
- [Release notes](https://github.com/Redocly/redocly-cli/releases)
- [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.14.7...@redocly/cli@2.25.1)

Updates `@types/node` from 25.0.10 to 25.5.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `lefthook` from 2.0.15 to 2.1.4
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.0.15...v2.1.4)

Updates `typedoc` from 0.28.16 to 0.28.18
- [Release notes](https://github.com/TypeStrong/TypeDoc/releases)
- [Changelog](https://github.com/TypeStrong/typedoc/blob/master/CHANGELOG.md)
- [Commits](TypeStrong/typedoc@v0.28.16...v0.28.18)

Updates `typescript` from 5.9.3 to 6.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.2)

Updates `vitest` from 4.0.18 to 4.1.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/vitest)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@redocly/cli"
  dependency-version: 2.25.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: lefthook
  dependency-version: 2.1.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: typedoc
  dependency-version: 0.28.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: typescript
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: vitest
  dependency-version: 4.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants