chore(deps): update shared toolchain and release standards 0.26.1

.github/dependabot.base.yml

@@ -12,7 +12,7 @@ updates:
       interval: "weekly"
     ignore:
       # Not a temporary hold: biome.base.jsonc is authored against the exact
-      # pinned Biome version, so consumers never self-bump it. Upgrades happen
+      # Biome 2.5.13 pin, so consumers never self-bump it. Upgrades happen
       # in the standards template and roll out through sync.
       - dependency-name: "@biomejs/biome"
       # Temporary hold: Next.js does not support TypeScript releases above

README.md

@@ -86,7 +86,7 @@ Each release exposes a self-contained CLI package for `x86_64-linux` and `aarch6
 
 ```nix
 inputs.standards = {
-  url = "github:davidvornholt/standards/v0.26.0";
+  url = "github:davidvornholt/standards/v0.26.1";
   inputs.nixpkgs.follows = "nixpkgs";
 };
 ```

biome.base.jsonc

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://biomejs.dev/schemas/2.5.11/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.5.13/schema.json",
   // Canonical strict Biome base, synced from davidvornholt/standards. Do NOT
   // edit locally: repos extend this from their own `biome.jsonc` wrapper and add
   // project-specific overrides there. The baseline turns every applicable rule
@@ -229,7 +229,8 @@
       // Tests legitimately manipulate process.env to exercise
       // configuration-dependent behavior, and fixtures contain literal dummy
       // tokens that trip entropy-based secret detection. Biome also does not
-      // resolve Bun's virtual `bun:test` module.
+      // resolve Bun's virtual `bun:test` module. These tests and helpers run
+      // under Bun, so its built-ins are available.
       "includes": [
         "**/*.test.ts",
         "**/*.test.tsx",
@@ -244,6 +245,9 @@
           "correctness": {
             "noUnresolvedImports": "off"
           },
+          "nursery": {
+            "noBunModules": "off"
+          },
           "security": {
             "noSecrets": "off"
           },

biome.jsonc

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://biomejs.dev/schemas/2.5.11/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.5.13/schema.json",
   // Repo-owned wrapper. Extends the canonical strict base; add repo-specific
   // overrides here. Never edit biome.base.jsonc locally — it is synced.
   "extends": ["./biome.base.jsonc"],

docs/adoption.md

@@ -165,7 +165,7 @@ The default is weekly synchronization from `main`. To pin a source or disable th
 ```json
 {
   "autoSync": false,
-  "ref": "v0.26.0"
+  "ref": "v0.26.1"
 }
 ```
 

docs/operations.md

@@ -86,7 +86,7 @@ The package includes `standards`, `bun`, and `bunx`, with the CLI wrapper placin
 
 ```nix
 inputs.standards = {
-  url = "github:davidvornholt/standards/v0.26.0";
+  url = "github:davidvornholt/standards/v0.26.1";
   inputs.nixpkgs.follows = "nixpkgs";
 };
 ```

docs/sync-and-ownership.md

@@ -93,14 +93,14 @@ The check is local to the selected revision. It does not ask whether upstream ha
 The default is upstream `main`. Pin a tag, branch, or full commit SHA with either command-line policy:
 
 ```sh
-bun standards sync --ref v0.26.0
+bun standards sync --ref v0.26.1
 ```
 
 or repository policy:
 
 ```json
 {
-  "ref": "v0.26.0"
+  "ref": "v0.26.1"
 }
 ```
 

nix/standards-cli.nix

@@ -48,7 +48,7 @@ let
       cp -R packages/standards-cli/node_modules "$out/packages/standards-cli/node_modules"
       runHook postInstall
     '';
-    outputHash = "sha256-VbwHHtCVE0ASZxPIr5yiybBJqiB5FTbvUOcA7OLwV24=";
+    outputHash = "sha256-2Y6v9QEwnBI6vUgLUBZcQn3ewjH/R1Gycn+z2gEYUqk=";
     outputHashAlgo = "sha256";
     outputHashMode = "recursive";
   };

package.json

@@ -12,7 +12,7 @@
     "check:fix": "bun packages/standards-cli/src/cli.ts structure --profile source && bun packages/standards-cli/src/cli.ts dependabot --write && bun packages/standards-cli/src/cli.ts github --check && turbo run lint:fix check-types test --output-logs=errors-only"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.5.11",
+    "@biomejs/biome": "2.5.13",
     "turbo": "^2.10.12",
     "typescript": "7.0.2"
   },

packages/a11y-testing/package.json

@@ -15,12 +15,12 @@
   },
   "devDependencies": {
     "@davidvornholt/typescript-config": "workspace:*",
-    "@types/bun": "^1.4.0",
+    "@types/bun": "^1.4.2",
     "typescript": "7.0.2"
   },
   "dependencies": {
     "@axe-core/playwright": "^4.13.0",
-    "@playwright/test": "1.62.1",
-    "playwright-core": "1.62.1"
+    "@playwright/test": "1.63.0",
+    "playwright-core": "1.63.0"
   }
 }

packages/standards-cli/README.md

@@ -60,7 +60,7 @@ Existing project-owned files are kept. Synced files are replaced. `init` refuses
 ```sh
 bun standards sync --dry-run
 bun standards sync
-bun standards sync --ref v0.26.0
+bun standards sync --ref v0.26.1
 bun standards sync --from ../standards
 ```
 

packages/standards-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@davidvornholt/standards",
-  "version": "0.26.0",
+  "version": "0.26.1",
   "description": "Bootstrap, synchronize, and validate davidvornholt/standards consumers",
   "license": "MIT",
   "repository": {
@@ -184,7 +184,7 @@
   },
   "devDependencies": {
     "@davidvornholt/typescript-config": "workspace:*",
-    "@types/bun": "^1.4.0",
+    "@types/bun": "^1.4.2",
     "sigstore": "5.0.0",
     "typescript": "7.0.2"
   },
@@ -195,6 +195,6 @@
     "access": "public"
   },
   "dependencies": {
-    "yaml": "^2.9.0"
+    "yaml": "^2.9.1"
   }
 }

packages/standards-cli/src/template-biome.test.ts

@@ -75,7 +75,7 @@ describe('template biome wrapper', () => {
     expect(result.status).toBe(0);
   });
 
-  it('keeps ordinary worktree exclusion compatible with Biome 2.5.11', () => {
+  it('keeps ordinary worktree exclusion compatible with the pinned Biome version', () => {
     const ordinaryExclude = WRAPPER.replace(
       WORKTREE_ENTRY,
       ', "!.claude/worktrees"',
@@ -92,3 +92,17 @@ describe('template biome wrapper', () => {
     expect(result.output).toContain('nested root configuration');
   });
 });
+
+describe('Bun runtime boundaries', () => {
+  it('allows Bun imports in tests while rejecting them in application code', () => {
+    const dir = buildFixture(WRAPPER);
+    const source =
+      "import { expect, it } from 'bun:test';\nit('works', () => { expect(true).toBe(true); });\n";
+    write(dir, 'src/runtime.test.ts', source);
+    expect(check(dir).output).not.toContain('lint/nursery/noBunModules');
+    write(dir, 'src/runtime.ts', source);
+    const result = check(dir);
+    expect(result.status).not.toBe(0);
+    expect(result.output).toContain('lint/nursery/noBunModules');
+  });
+});

packages/typescript-config/package.json

@@ -16,7 +16,7 @@
     "test": "bun test"
   },
   "devDependencies": {
-    "@types/bun": "^1.4.0",
+    "@types/bun": "^1.4.2",
     "typescript": "7.0.2"
   }
 }

template/biome.jsonc

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://biomejs.dev/schemas/2.5.11/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.5.13/schema.json",
   // Repo-owned wrapper. Extends the canonical strict base synced from
   // davidvornholt/standards. Add project-specific overrides here; never edit
   // biome.base.jsonc locally.

template/package.json

@@ -14,8 +14,8 @@
     "check:fix": "standards check && turbo run lint:fix check-types test build test:a11y --output-logs=errors-only"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.5.11",
-    "@davidvornholt/standards": "0.26.0",
+    "@biomejs/biome": "2.5.13",
+    "@davidvornholt/standards": "0.26.1",
     "turbo": "^2.10.12",
     "typescript": "7.0.2"
   },