chore(deps): bump the minor-and-patch group with 5 updates by dependabot[bot] · Pull Request #795 · tobyhede/rundown

dependabot · 2026-08-17T07:12:16Z

Bumps the minor-and-patch group with 5 updates:

Package	From	To
@biomejs/biome	`2.5.6`	`2.5.7`
@types/node	`26.1.2`	`26.2.0`
eslint	`10.8.0`	`10.8.1`
astro	`7.1.6`	`7.2.0`
tsx	`4.23.9`	`4.23.12`

Updates @biomejs/biome from 2.5.6 to 2.5.7

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.7

2.5.7

Patch Changes
#10822 c171b3b Thanks @pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

#11136 e63354c Thanks @AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

#10094 e007143 Thanks @THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

#11184 135f476 Thanks @subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.
#8239 a519f9d Thanks @cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:
├── biome.json
└── subdirectory
    ├── biome.json
    └── lib.js
biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js
Now, the nested configuration is correctly picked up and applied.

In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.
#11138 8c2c6bd Thanks @ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:
declare function schedule(handler: () => void): string;
declare function schedule(handler: () => Promise<void>): string | undefined;
schedule(async () => {}) ?? "fallback";
The following code is also now invalid, because map(() => 42) returns 42:

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.7

Patch Changes
#10822 c171b3b Thanks @pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

#11136 e63354c Thanks @AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

#10094 e007143 Thanks @THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

#11184 135f476 Thanks @subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.
#8239 a519f9d Thanks @cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:
├── biome.json
└── subdirectory
    ├── biome.json
    └── lib.js
biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js
Now, the nested configuration is correctly picked up and applied.

In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.
#11138 8c2c6bd Thanks @ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:
declare function schedule(handler: () => void): string;
declare function schedule(handler: () => Promise<void>): string | undefined;
schedule(async () => {}) ?? "fallback";
The following code is also now invalid, because map(() => 42) returns 42:
type Mapper<T> = () => T;
declare function map<T>(mapper: Mapper<T>): T;

... (truncated)

Commits

191d051 ci: release (#11119)
9847e68 feat(lint): add noNonScalableViewport rule (#11168)
e63354c feat(lint): add noExtendNative nursery rule (#11136)
2fa0a62 docs: rework CLI (#11134)
e007143 feat(lint): add nursery rule noTailwindArbitraryValue (#10094)
c171b3b feat(lint): add ignoreIfStatements option to useNullishCoalescing (#10822)
See full diff in compare view

Updates @types/node from 26.1.2 to 26.2.0

Commits

See full diff in compare view

Updates eslint from 10.8.0 to 10.8.1

Release notes

Sourced from eslint's releases.

v10.8.1

Bug Fixes

18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)

151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)

6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)

4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)

677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

7d0cbf8 docs: Update README (GitHub Actions Bot)

0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)

678c90b docs: Update README (GitHub Actions Bot)

8a10424 docs: Update README (GitHub Actions Bot)

69bb948 docs: Update README (GitHub Actions Bot)

Chores

0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])

05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)

5611035 test: add error locations info to no-void (#21185) (Lee Daeun)

ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])

f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)

1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)

d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)

65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)

22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)

55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])

7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])

eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)

60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)

f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)

d086293 test: add error locations to no-undef (#21147) (JIYEON)

cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)

688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)

7c1e175 test: add error locations to require-await (#21145) (Grit)

588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)

059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)

5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)

Commits

c049dc3 10.8.1
a3f7826 Build: changelog update for 10.8.1
18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173)
0a14800 chore: update github/codeql-action action to v4.37.4 (#21196)
7d0cbf8 docs: Update README
05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191)
5611035 test: add error locations info to no-void (#21185)
ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176)
f131c03 chore: improve ecosystem test failure reporting (#20937)
0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183)
Additional commits viewable in compare view

Updates astro from 7.1.6 to 7.2.0

Release notes

Sourced from astro's releases.

astro@7.2.0

Minor Changes
#17174 0224a3a Thanks @matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.
astro preview --background
When a preview server is running in the background, you can inspect or stop it with new astro preview subcommands:
astro preview status
astro preview logs
astro preview logs --follow
astro preview stop
If Astro detects that astro preview is being run by an AI coding agent, background mode is enabled automatically. This matches the existing behavior for astro dev, allowing agents to continue working after the preview server starts while still receiving the server URL and process ID.

To opt out of automatic background mode for preview servers, set ASTRO_PREVIEW_BACKGROUND=0 before running astro preview.
#17532 7f94895 Thanks @florian-lefebvre! - Adds support for paths relative to your project root in logger.entrypoint

Previously, pointing logger.entrypoint at a custom log handler living in your own project required building an absolute URL. You can now write the path directly:
// astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
logger: {

entrypoint: new URL('./src/logger.js', import.meta.url),


entrypoint: './src/logger.js',
},
});
Paths starting with ./ or ../ are resolved against your project root. Package specifiers such as @org/astro-logger, absolute paths, and URL entrypoints keep working as before.
#17084 961bbe5 Thanks @matthewp! - Widens the AstroPrerenderer render() return type so prerenderers can report incremental-build metadata

A prerenderer's render() may now resolve to either a Response (as before) or a PrerenderResult object that pairs the response with the content entries and optimized-image transforms the page resolved. This lets prerenderers that render out of process (for example, in an adapter's runtime like workerd) report those dependencies back to the build, so incremental static builds can track and replay them for skipped pages.
import type { AstroPrerenderer, PrerenderResult } from 'astro';
const prerenderer: AstroPrerenderer = {

... (truncated)

Changelog

Sourced from astro's changelog.

7.2.0

Minor Changes
#17174 0224a3a Thanks @matthewp! - Adds the astro preview --background flag to start preview servers as background processes.

This makes preview servers easier to manage from scripts and AI coding agents because the command returns after the server is ready instead of keeping the terminal attached to the long-running process.
astro preview --background
When a preview server is running in the background, you can inspect or stop it with new astro preview subcommands:
astro preview status
astro preview logs
astro preview logs --follow
astro preview stop
If Astro detects that astro preview is being run by an AI coding agent, background mode is enabled automatically. This matches the existing behavior for astro dev, allowing agents to continue working after the preview server starts while still receiving the server URL and process ID.

To opt out of automatic background mode for preview servers, set ASTRO_PREVIEW_BACKGROUND=0 before running astro preview.
#17532 7f94895 Thanks @florian-lefebvre! - Adds support for paths relative to your project root in logger.entrypoint

Previously, pointing logger.entrypoint at a custom log handler living in your own project required building an absolute URL. You can now write the path directly:
// astro.config.mjs
import { defineConfig } from 'astro/config';
export default defineConfig({
logger: {

entrypoint: new URL('./src/logger.js', import.meta.url),


entrypoint: './src/logger.js',
},
});
Paths starting with ./ or ../ are resolved against your project root. Package specifiers such as @org/astro-logger, absolute paths, and URL entrypoints keep working as before.
#17084 961bbe5 Thanks @matthewp! - Widens the AstroPrerenderer render() return type so prerenderers can report incremental-build metadata

A prerenderer's render() may now resolve to either a Response (as before) or a PrerenderResult object that pairs the response with the content entries and optimized-image transforms the page resolved. This lets prerenderers that render out of process (for example, in an adapter's runtime like workerd) report those dependencies back to the build, so incremental static builds can track and replay them for skipped pages.
import type { AstroPrerenderer, PrerenderResult } from 'astro';

... (truncated)

Commits

60e9432 [ci] release (#17558)
af92694 docs: slightly reword session options description (#17607)
caace2e [ci] format
0224a3a Add background mode for astro preview (#17174)
961bbe5 Experimental incremental static builds (#17084)
7f94895 feat(logger): allow passing relative string entrypoints (#17532)
90c98ae feat(session): add session: false to opt out of session support (#16871)
3ea55ce Support detect devEngines for installs (#17579)
0089f83 Fix Content Layer build crash when neotraverse 0.6.x is hoisted by another de...
f4150da [ci] format
Additional commits viewable in compare view

Updates tsx from 4.23.9 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

npm package (@latest dist-tag)

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

preserve async ESM require fallback (55cbece)

This release is also available on:

npm package (@latest dist-tag)

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

support nyc coverage discovery (#710) (ec1bcd5)

This release is also available on:

npm package (@latest dist-tag)

Commits

ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
651f5be test: cover CommonJS TypeScript import.meta paths
bd3bc64 test: cover CommonJS loader source fallback
55cbece fix: preserve async ESM require fallback
6c5ba85 docs: document CommonJS default interop
ec1bcd5 fix: support nyc coverage discovery (#710)
b6e5b48 docs: clarify CommonJS default imports
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 5 updates: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.6` | `2.5.7` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.2` | `26.2.0` | | [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.8.1` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.6` | `7.2.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.9` | `4.23.12` | Updates `@biomejs/biome` from 2.5.6 to 2.5.7 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.7/packages/@biomejs/biome) Updates `@types/node` from 26.1.2 to 26.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 10.8.0 to 10.8.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.8.0...v10.8.1) Updates `astro` from 7.1.6 to 7.2.0 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.2.0/packages/astro) Updates `tsx` from 4.23.9 to 4.23.12 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.9...v4.23.12) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: eslint dependency-version: 10.8.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: astro dependency-version: 7.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tsx dependency-version: 4.23.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-08-17T07:13:00Z

🧬 Mutation score (advisory)

Hybrid mutation analysis: source changes use changed-line scopes (dedicated tests by default; mutation:related opts into related tests), while test-only changes use native incremental comparison with the main baseline. This check is advisory and never blocks merge. Trend & full reports: the Stryker Dashboard. See issue #485.

ℹ️ Mutation scope plan

No eligible source or test changes in this PR.

No mutated source changes in this PR.

cloudflare-workers-and-pages · 2026-08-17T07:13:53Z

Deploying rundown with Cloudflare Pages

Latest commit:	`b214b0d`
Status:	✅ Deploy successful!
Preview URL:	https://5b34ab50.rundown-7hl.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-mino-tq78.rundown-7hl.pages.dev

View logs

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 17, 2026

tobyhede merged commit 7e3fc64 into main Aug 18, 2026
45 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-353e0fbb9d branch August 18, 2026 06:23

Navigation Menu

chore(deps): bump the minor-and-patch group with 5 updates - #795

chore(deps): bump the minor-and-patch group with 5 updates#795
tobyhede merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-353e0fbb9d

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

github-actions Bot commented Aug 17, 2026

Uh oh!

cloudflare-workers-and-pages Bot commented Aug 17, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026

Biome CLI v2.5.7

2.5.7

Patch Changes

2.5.7

Patch Changes

v10.8.1

Bug Fixes

Documentation

Chores

astro@7.2.0

Minor Changes

7.2.0

Minor Changes

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

Uh oh!

github-actions Bot commented Aug 17, 2026

🧬 Mutation score (advisory)

ℹ️ Mutation scope plan

Uh oh!

cloudflare-workers-and-pages Bot commented Aug 17, 2026

Deploying rundown with Cloudflare Pages

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant