deps: Bump the dev-dependencies group with 2 updates

[dependabot]

Bumps the dev-dependencies group with 2 updates: @biomejs/biome and react-doctor.

Updates @biomejs/biome from 2.5.3 to 2.5.4

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.4

2.5.4

Patch Changes

• #10665 55ff995 Thanks @​dyc3! - Improved the performance of the HTML parser slightly in our synthetic benchmarks.

• #10894 f4fb10e Thanks @​ematipico! - Fixed #6392: On-type formatting no longer moves comments before an if statement into its body.

• #10939 f2799db Thanks @​Netail! - Fixed #10930: noLabelWithoutControl now correctly detects text interpolation in Astro, Svelte & Vue as valid accessible content.

• #10945 ae15d98 Thanks @​Netail! - Fixed #10942: Svelte directives don't throw an accidental debug log anymore.

• #10842 5e1abfe Thanks @​JamBalaya56562! - Fixed #9196: biome check --write --unsafe no longer hangs forever when applying the noCommentText code fix.

  The rule's fix now wraps the comment in a real JSX expression container ({/* comment */}) instead of re-inserting the braces as plain JSX text, so the fixed code is no longer reported again by the same rule.

• #10891 ecca79e Thanks @​ematipico! - Fixed [#10885](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10885): prevented a module-inference regression introduced by a housekeeping change.

• #10886 60c8043 Thanks @​dyc3! - Fixed #10727: Biome now breaks the arguments of curried test.each, it.each, describe.each, and test.for calls when they exceed the configured line width.

  - test.each([[1, 2]])("a description that is long enough to push the hugged opening line beyond the print width", (a, b) => {
  -   expect(a).toBe(b);
  - });
  + test.each([[1, 2]])(
  +   "a description that is long enough to push the hugged opening line beyond the print width",
  +   (a, b) => {
  +     expect(a).toBe(b);
  +   },
  + );

• #10895 01a85f0 Thanks @​ematipico! - Biome will now remove stale Unix daemon sockets from older Biome versions when starting a newer daemon.

What's Changed

• feat(yml/fmt): basic block properties by @​ematipico in biomejs/biome#10873
• feat(useSortedClasses): sort important-suffix classes in sort_v4 by @​johncarmack1984 in biomejs/biome#10880
• fix(format/js): wrap curried test each calls by @​dyc3 in biomejs/biome#10886
• fix(markdown): parse whitespace after list markers by @​tidefield in biomejs/biome#10869
• fix(inference): use correct function when cloning data by @​ematipico in biomejs/biome#10891
• docs(noDuplicateProperties): note that @​keyframes declarations are ignored by @​dfedoryshchev in biomejs/biome#10893
• fix(lint): prevent noCommentText fix from looping forever by @​JamBalaya56562 in biomejs/biome#10842
• fix(core): cleanup old sockets in Unix by @​ematipico in biomejs/biome#10895
• feat(inference): inference engine via salsa by @​ematipico in biomejs/biome#10888
• chore(deps): update dependency @​types/node to v24.13.3 by @​renovate[bot] in biomejs/biome#10920
• chore(deps): update github-actions by @​renovate[bot] in biomejs/biome#10921

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.4

Patch Changes

• #10665 55ff995 Thanks @​dyc3! - Improved the performance of the HTML parser slightly in our synthetic benchmarks.

• #10894 f4fb10e Thanks @​ematipico! - Fixed #6392: On-type formatting no longer moves comments before an if statement into its body.

• #10939 f2799db Thanks @​Netail! - Fixed #10930: noLabelWithoutControl now correctly detects text interpolation in Astro, Svelte & Vue as valid accessible content.

• #10945 ae15d98 Thanks @​Netail! - Fixed #10942: Svelte directives don't throw an accidental debug log anymore.

• #10842 5e1abfe Thanks @​JamBalaya56562! - Fixed #9196: biome check --write --unsafe no longer hangs forever when applying the noCommentText code fix.

  The rule's fix now wraps the comment in a real JSX expression container ({/* comment */}) instead of re-inserting the braces as plain JSX text, so the fixed code is no longer reported again by the same rule.

• #10891 ecca79e Thanks @​ematipico! - Fixed [#10885](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10885): prevented a module-inference regression introduced by a housekeeping change.

• #10886 60c8043 Thanks @​dyc3! - Fixed #10727: Biome now breaks the arguments of curried test.each, it.each, describe.each, and test.for calls when they exceed the configured line width.

  - test.each([[1, 2]])("a description that is long enough to push the hugged opening line beyond the print width", (a, b) => {
  -   expect(a).toBe(b);
  - });
  + test.each([[1, 2]])(
  +   "a description that is long enough to push the hugged opening line beyond the print width",
  +   (a, b) => {
  +     expect(a).toBe(b);
  +   },
  + );

• #10895 01a85f0 Thanks @​ematipico! - Biome will now remove stale Unix daemon sockets from older Biome versions when starting a newer daemon.

Commits

• bfc3f3d ci: release (#10887)
• See full diff in compare view

Updates react-doctor from 0.7.6 to 0.8.1

Release notes

Sourced from react-doctor's releases.

react-doctor@0.8.1

Patch Changes

• #1377 eb2d687 Thanks @​aidenybai! - Preserve production routes named test or tests in scoring and CI, and add file-context controls for restoring test or story diagnostics.

• Updated dependencies []:

  • oxlint-plugin-react-doctor@0.8.1
  • deslop-js@0.8.1

react-doctor@0.8.0

Minor Changes

• #1326 2450582 Thanks @​aidenybai! - Keep diagnostics from test and story files visible in raw output while excluding them from the production-health score and CI gate by default. Existing per-surface rule, category, and tag includes can opt individual findings back in.

Patch Changes

• #1302 f3f73ec Thanks @​aidenybai! - Require React Compiler transform evidence before enabling transform-only diagnostics while preserving compatibility lint rules.

• #1372 842a55f Thanks @​aidenybai! - Ignore user-configured external Git diff renderers when computing changed files and line ranges.

• #1370 2979a9b Thanks @​aidenybai! - Exclude untracked TypeScript emit output from the scan: a .js file is dropped only when a complete untracked emit quartet (.js, .js.map, .d.ts, .d.ts.map) with exact source-map targets and matching sourceMappingURL references proves it duplicates a tracked same-stem .ts/.tsx source. Tracked JavaScript files and incomplete or mismatched output sets are still scanned.

• #1374 51ecd7b Thanks @​aidenybai! - Preserve scrubbed diagnostic file paths in hosted score requests so scoring can distinguish findings without transmitting home-directory identities or embedded secrets.

• #1305 10dd2ba Thanks @​aidenybai! - Preserve react-hooks-js/error-boundaries as a Bugs diagnostic about uncaught child render failures instead of rewriting it as a React Compiler performance bailout.

• Updated dependencies [cf7ada5, ac392cb, b30fb80, 0ff57fa, b2f3c9c, 9aa98b9, 44d3ad8, 3c90f14, f563205, 7eb7428, f59ec54, a86b5b0, d7d38d7, 52fc179, 1adf327, 194cc06, c88a39a, 3e6dcfc, be6d64b, 0fbf728, 30e0ff0, 11388bf, 71892af, 81da42b, e5d5753, 66a1db8, b392093, 6c5c91b, d8a20e0, f441f59, 174955c, bd3655c, db5fe10, c1e75f0, 796a56d, 558118c, d4db626, a16e452, d3f54c4, e5a5f73, 6325f9c, e86bc57, 4f3848b, 093619c, 21827da, 12e9592, c7f61cd, 95f9937, 0f11de1, 1b86dae, 1a30f2c, 9e55e1f, c41f271, 7e6cdf9, 544356c, cc96f47, 5f3ba37, cf9acf2, f94d7b1, c245b9d, ef328c4, b51022f, 21043e0, 418e0b2, b76aef7, 61111f1, c8a2918, 8835214, 2ba83c3]:

  • oxlint-plugin-react-doctor@0.8.0
  • deslop-js@0.8.0

react-doctor@0.7.8

Patch Changes

• #1238 ed3e941 Thanks @​aidenybai! - Require executable motion-library usage and semantic reduced-motion handling before reporting the project-level accessibility diagnostic.

• #1257 e632f8a Thanks @​aidenybai! - Give same-site diagnostics distinct deterministic occurrence IDs in JSON reports and editor actions.

• Updated dependencies [4a73399, 760a3b0, af58965, ed241c3, 4190897, 4fce1c1, c79c897, 517f87a, ec144d9, afed801, 9c612c5, 9fab4fc, 04c7e36, 165a6cb, 287dff7, 9fc93f8, 43327b5, 30b7eeb, 89dbf08, 12e7193, fbc804e, 046329c, 79abd71, a468589]:

  • oxlint-plugin-react-doctor@0.7.8
  • deslop-js@0.7.8

react-doctor@0.7.7

Patch Changes

• #1186 0a8d30b Thanks @​aidenybai! - Add --include-untracked to fold ordinary (non-ignored) untracked files into the files, changed, and lines scopes. Off by default, so the existing scopes are unchanged; Git ignore rules are always respected. The flag requires one of those working-tree scopes — it errors when no scope (or --scope full/--staged) is set.

• #1173 eb09902 Thanks @​aidenybai! - Recognize React dependencies in UTF-8 BOM-prefixed package manifests.

• #1165 82e10cd Thanks @​aidenybai! - Prevent CLI and editor caches from replaying diagnostics after equal-metadata content changes.

... (truncated)

Changelog

Sourced from react-doctor's changelog.

0.8.1

Patch Changes

• #1377 eb2d687 Thanks @​aidenybai! - Preserve production routes named test or tests in scoring and CI, and add file-context controls for restoring test or story diagnostics.

• Updated dependencies []:

  • oxlint-plugin-react-doctor@0.8.1
  • deslop-js@0.8.1

0.8.0

Minor Changes

• #1326 2450582 Thanks @​aidenybai! - Keep diagnostics from test and story files visible in raw output while excluding them from the production-health score and CI gate by default. Existing per-surface rule, category, and tag includes can opt individual findings back in.

Patch Changes

• #1302 f3f73ec Thanks @​aidenybai! - Require React Compiler transform evidence before enabling transform-only diagnostics while preserving compatibility lint rules.

• #1372 842a55f Thanks @​aidenybai! - Ignore user-configured external Git diff renderers when computing changed files and line ranges.

• #1370 2979a9b Thanks @​aidenybai! - Exclude untracked TypeScript emit output from the scan: a .js file is dropped only when a complete untracked emit quartet (.js, .js.map, .d.ts, .d.ts.map) with exact source-map targets and matching sourceMappingURL references proves it duplicates a tracked same-stem .ts/.tsx source. Tracked JavaScript files and incomplete or mismatched output sets are still scanned.

• #1374 51ecd7b Thanks @​aidenybai! - Preserve scrubbed diagnostic file paths in hosted score requests so scoring can distinguish findings without transmitting home-directory identities or embedded secrets.

• #1305 10dd2ba Thanks @​aidenybai! - Preserve react-hooks-js/error-boundaries as a Bugs diagnostic about uncaught child render failures instead of rewriting it as a React Compiler performance bailout.

• Updated dependencies [cf7ada5, ac392cb, b30fb80, 0ff57fa, b2f3c9c, 9aa98b9, 44d3ad8, 3c90f14, f563205, 7eb7428, f59ec54, a86b5b0, d7d38d7, 52fc179, 1adf327, 194cc06, c88a39a, 3e6dcfc, be6d64b, 0fbf728, 30e0ff0, 11388bf, 71892af, 81da42b, e5d5753, 66a1db8, b392093, 6c5c91b, d8a20e0, f441f59, 174955c, bd3655c, db5fe10, c1e75f0, 796a56d, 558118c, d4db626, a16e452, d3f54c4, e5a5f73, 6325f9c, e86bc57, 4f3848b, 093619c, 21827da, 12e9592, c7f61cd, 95f9937, 0f11de1, 1b86dae, 1a30f2c, 9e55e1f, c41f271, 7e6cdf9, 544356c, cc96f47, 5f3ba37, cf9acf2, f94d7b1, c245b9d, ef328c4, b51022f, 21043e0, 418e0b2, b76aef7, 61111f1, c8a2918, 8835214, 2ba83c3]:

  • oxlint-plugin-react-doctor@0.8.0
  • deslop-js@0.8.0

0.7.9

Patch Changes

• Updated dependencies [9256423, 4829841]:
  • oxlint-plugin-react-doctor@0.7.9
  • deslop-js@0.7.9

0.7.8

Patch Changes

• #1238 ed3e941 Thanks @​aidenybai! - Require executable motion-library usage and semantic reduced-motion handling before reporting the project-level accessibility diagnostic.

• #1257 e632f8a Thanks @​aidenybai! - Give same-site diagnostics distinct deterministic occurrence IDs in JSON reports and editor actions.

• Updated dependencies [4a73399, 760a3b0, af58965, ed241c3, 4190897, 4fce1c1, c79c897, 517f87a, ec144d9, afed801, 9c612c5, 9fab4fc, 04c7e36, 165a6cb, 287dff7, 9fc93f8, 43327b5, 30b7eeb, 89dbf08, 12e7193, fbc804e, 046329c, 79abd71, a468589]:

  • oxlint-plugin-react-doctor@0.7.8

... (truncated)

Commits

• 7818922 chore: version packages (#1378)
• eb2d687 fix: preserve production routes in health checks (#1377)
• c0d9d38 chore: version packages (#1307)
• 2450582 fix: exclude test diagnostics from production health (#1326)
• 8835214 fix(no-adjust-state): align the published contract (#1361)
• 842a55f fix(git): ignore external diff renderers (#1372)
• 21043e0 feat: flag React 19-only ref cleanups on React 18 (#1356)
• 95f9937 fix(rules): gate chain updates below React 18 (#1336)
• 621be9b fix file paths (#1348)
• f3f73ec fix(compiler): require transform evidence (#1302)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

^{Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.}

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.