chore(deps): Update npm dependencies by prefect-renovate[bot] · Pull Request #22992 · PrefectHQ/prefect

prefect-renovate · 2026-08-31T15:06:15Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	`2.5.8` → `2.5.10`
@storybook/addon-docs (source)	`10.5.8` → `10.5.10`
@storybook/addon-themes (source)	`10.5.8` → `10.5.10`
@storybook/react (source)	`10.5.8` → `10.5.10`
@storybook/react-vite (source)	`10.5.8` → `10.5.10`
@tanstack/eslint-plugin-query (source)	`5.101.4` → `5.102.2`
@tanstack/react-query (source)	`5.101.4` → `5.102.2`
@tanstack/react-query-devtools (source)	`5.101.4` → `5.102.2`
@tanstack/react-router (source)	`1.170.29` → `1.170.32`
@tanstack/react-virtual (source)	`3.14.9` → `3.14.10`
@tanstack/router-plugin (source)	`1.168.32` → `1.168.35`
@testing-library/user-event	`14.6.4` → `14.6.6`
@types/react-dom (source)	`19.2.4` → `19.2.5`
@vitejs/plugin-react (source)	`6.0.5` → `6.1.0`
@vitest/coverage-v8 (source)	`4.1.10` → `4.1.11`
aws-cdk (source)	`2.1137.0` → `2.1138.0`
eslint (source)	`10.8.1` → `10.9.0`
eslint-plugin-storybook (source)	`10.5.8` → `10.5.10`
humanize-duration	`3.34.0` → `3.34.1`
lucide-react (source)	`1.31.0` → `1.34.0`
mermaid	`11.16.1` → `11.17.1`
pixi.js (source)	`8.19.0` → `8.20.0`
react-hook-form (source)	`7.85.0` → `7.86.0`
storybook (source)	`10.5.8` → `10.5.10`
uuid	`14.0.1` → `14.0.2`
vite (source)	`8.2.1` → `8.2.2`
vitest (source)	`4.1.10` → `4.1.11`
vue-tsc (source)	`3.3.10` → `3.3.11`

Release Notes

biomejs/biome (@biomejs/biome)

`v2.5.10`

Compare Source

Patch Changes

#11403 8f7786f Thanks @Princesseuh! - Fixed Astro rejecting JavaScript comments between attributes.
```
<div /* block comment */ class="something"></div>
<Component /* c */ client:load />
```
#11403 8f7786f Thanks @Princesseuh! - Fixed a bare < in Astro text being treated as the start of a tag, such as <p>5 < 6 and 7 > 6</p>. As in HTML, a < that cannot open a tag is text and needs no escaping.
#11438 3133ffa Thanks @Princesseuh! - Fixed #8294: an Astro expression holding only a comment is no longer reported as a parse error, which also stopped the whole file from being formatted.
```
<div>{/* a note */}</div>
<div class={/* a note */}>x</div>
```
#11403 8f7786f Thanks @Princesseuh! - Fixed #9165: an empty Astro expression such as <div>{}</div> no longer fails to parse. Astro renders {} as nothing.
#11403 8f7786f Thanks @Princesseuh! - Fixed Astro expressions containing a comment failing to parse.
```
<div>{/* block comment */ x}</div>
<div>{/* only a comment */}</div>
```
#11403 8f7786f Thanks @Princesseuh! - Added support for Astro's fragment shorthand.
```
<>
  <p>a</p>
</>
```
#11403 8f7786f Thanks @Princesseuh! - Fixed an Astro frontmatter block being cut short by a closing tag inside a string or comment.
```
---
const a = "</script>";
// </script> in a comment
---
```
#11403 8f7786f Thanks @Princesseuh! - Fixed --- being read as an Astro frontmatter fence when markup precedes it. Astro only recognizes frontmatter at the very start of a file, so a file opening with a comment now has no frontmatter, and its --- lines are content.
```

---
this is text, not frontmatter
---
```
#11403 8f7786f Thanks @Princesseuh! - Fixed an Astro frontmatter block ending early on a line that merely starts with a dash.
```
---
--count;
---
```
#11403 8f7786f Thanks @Princesseuh! - Fixed the children of an Astro element carrying is:raw being parsed as markup instead of raw text. This now also covers <script> and <style>, whose contents Astro emits verbatim rather than processing, so they are no longer linted as JavaScript or CSS.
```
<article is:raw><% awesome %></article>
<script is:raw>{{ mustache }}</script>
```
#11403 8f7786f Thanks @Princesseuh! - Fixed Astro rejecting attribute names that start with a colon, such as :href.
#11403 8f7786f Thanks @Princesseuh! - Fixed the Astro parser failing to recover from a malformed closing tag such as <div></{<//, so that a later mistake is reported where it happens rather than cascading.
#11403 8f7786f Thanks @Princesseuh! - Fixed { inside an Astro <math> element opening an expression. MathML is foreign content where Astro parses no expressions, so LaTeX such as R^{2x} now survives as text. <svg> is unaffected.
#11403 8f7786f Thanks @Princesseuh! - Fixed {{ at the start of an Astro expression being read as an interpolation. Astro has no {{ }} syntax, so {{ a: 1 }} and <Comp a={{ b: 1 }} /> are object literals.
#11403 8f7786f Thanks @Princesseuh! - Fixed expressions inside an Astro <pre> or <textarea> being read as raw text. Astro parses both as ordinary elements, so their markup and interpolations are now parsed, and a variable used only inside one is no longer reported as unused.
```
<pre>{value}</pre>
<textarea><div>{value}</div></textarea>
```
#11403 8f7786f Thanks @Princesseuh! - Added support for template literal attribute values in Astro, such as <div class=`a ${b} c`>.
#11403 8f7786f Thanks @Princesseuh! - Fixed Astro rejecting HTML5 unquoted attribute values that contain `, =, ' or ", such as <a href=a=b> and <a href=a'b>.
#11393 dec5a8f Thanks @1678092075! - Fixed #11207: useStrictMode no longer reports Vue event handlers such as @click="count++".
#11431 c065f99 Thanks @levrik! - Fixed #11429: Variables and imports used by Vue same-name bindings such as :disabled or v-bind:disabled are no longer reported as unused.
#11409 405dedb Thanks @ematipico! - Fixed a memory leak in the LSP server where memory usage kept growing over long editor sessions.
#11422 a51eff7 Thanks @dyc3! - Fixed #11416: Biome no longer crashes when parsing incomplete {let} or {const} declarations in Svelte files.
#11378 34b715c Thanks @Netail! - Added extra rule sources from @eslint/css. biome migrate eslint detects rules in your eslint configurations more reliably.
#11403 8f7786f Thanks @Princesseuh! - Fixed {#, {/, {: and {@ being read as Svelte block openings in every HTML-like file. They are now Svelte-only, so in HTML, Vue and Angular files a sequence such as {#if x} is ordinary text instead of a parse error.
#11443 8d45229 Thanks @ematipico! - Fixed #11390: noFloatingPromises no longer performs unnecessary type inference on call arguments when checking methods of non-generic class instances created with new.
#11425 9c2667b Thanks @dyc3! - Fixed #6426: GritQL plugins now match and rewrite metavariables embedded in quoted strings.
#11441 00317c3 Thanks @dyc3! - Improved performance of useNamedCaptureGroup, noMisplacedAssertion, noSkippedTests, noExportsInTest, noDuplicateTestHooks, noIdenticalTestTitle, useTestHooksInOrder, and useTestHooksOnTop.

`v2.5.9`

Compare Source

Patch Changes

#11321 41386f3 Thanks @dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.
#11248 57b197e Thanks @yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.
#11377 a8798ea Thanks @Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.
```
@layer {
  a {
    color: red;
  }
}
```
#11327 6771cf5 Thanks @dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.
```
 <div>
   
+
   
 </div>
```
#10312 ba8aa18 Thanks @dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.
#11333 715e0cd Thanks @kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.
#11343 9b98211 Thanks @johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.
```
@variant @xl {
  div {
    background: red;
  }
}
```
#11220 3e8c488 Thanks @santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

For example, Biome no longer reports greet as undeclared in the following Svelte component:
```
<script module>
  export function greet() {
    console.log("Hello!");
  }
</script>

<script>
  greet();
</script>
```

#11300 36430eb Thanks @dyc3! - Fixed the HTML formatter's whitespace handling for marquee, noscript, video, audio, and object elements.

- <marquee behavior="alternate"> This text will bounce </marquee>
+ <marquee behavior="alternate">This text will bounce</marquee>

#11299 6559e6c Thanks @jp-knj! - Added the nursery rule useAstroClientOnlyDirectiveValue, which reports Astro client:only directives without an initializer.

For example, <Component client:only /> triggers the rule.
#11365 7529811 Thanks @MHJahanbakhsh! - Fixed #11229: The useGenericFontNames rule now treats math as a valid generic font family.

#11346 674f5f4 Thanks @Jayllyz! - Fixed #11335: noComponentHookFactories now reports a use-prefixed variable only when a function is assigned to it directly.

function factory() {
  const useColors = true; // no longer reported
  const useStore = createStore({ count: 0 }); // no longer reported
  const useData = () => useState(null); // still reported
  return useColors;
}

#11334 c87c46a Thanks @zkasuran! - Fixed #11317: noSvgWithoutTitle no longer reports an svg that uses the boolean shorthand aria-hidden (equivalent to aria-hidden={true} in React).
#11364 13853b1 Thanks @ematipico! - Fixed a bug where useJsxKeyInIterable incorrectly flagged Astro files.
#11321 41386f3 Thanks @dyc3! - Fixed #11315: Invalid CSS declarations in HTML style attributes now produce parser diagnostics instead of causing a panic.

#11325 67c3bf0 Thanks @dyc3! - Fixed HTML text wrapping to account for the width of an adjacent closing tag, avoiding lines that exceed the configured width when the final word and tag must move together.

 <a-long-long-long-element
-  >foo bar foo bar foo bar foo bar foo bar foo bar foo bar</a-long-long-long-element
+  >foo bar foo bar foo bar foo bar foo bar foo
+  bar</a-long-long-long-element
 >

#11367 fe5b5d4 Thanks @ematipico! - Fixed TypeScript compilerOptions.paths resolution when mapping targets omit ./. Biome now resolves these targets relative to their configured path base.
#11316 17e48d6 Thanks @wanxiankai! - Fixed #11289: the safe fix for noExtraBooleanCast now preserves parentheses around nested conditional expressions.
#11254 d25d113 Thanks @dyc3! - Fixed #11242: Biome no longer crashes with an access violation when analysing files on Windows ARM64.
#11221 85aac73 Thanks @freeatnet! - Added the nursery rule noUnsafeTypeAssertion, which disallows TypeScript type assertions while allowing const assertions.
```
const value = input as SomeType;
```
#11314 7ffb677 Thanks @ematipico! - Fixed #11310: Restored the performance of noMisusedPromises and noFloatingPromises when analyzed expressions share deep imported type paths.
#11356 6cd3263 Thanks @johncarmack1984! - The Tailwind parser now understands modifiers on bare utilities (@container/sidebar, shadow/50).
#11318 76059e9 Thanks @johncarmack1984! - The Tailwind parser now understands container-query variants (@sm:, @max-lg:, @min-[400px]:) and child and descendant variants (*:, **:).
#11357 faa2074 Thanks @johncarmack1984! - The Tailwind parser now accepts the legacy leading ! important marker (!flex, hover:!p-4).
#11344 f34e15c Thanks @johncarmack1984! - The Tailwind parser now understands combinator selectors in arbitrary variants (has-[>svg]:, has-[+p]:), modifiers on variants (group-hover/menu:, @sm/main:), and arbitrary container-query sizes (@[400px]:).
#11324 2f5d452 Thanks @dyc3! - Fixed HTML formatting that inserted rendered whitespace between an element and touching text when the line wrapped.
```
  <div>
-   before<meter value=".5"></meter>
-   after
+   before<meter value=".5"></meter
+   >after
  </div>
```
#11312 e65f07e Thanks @xosnos! - Added a new nursery rule useControlLabel for both HTML and JSX, which reports interactive control elements (button, menuitem) without an accessible label.
```
<button />
```
#11364 13853b1 Thanks @ematipico! - Fixed SVG parsing for files with an XML declaration followed by a PUBLIC doctype, such as <?xml version="1.0"?><!DOCTYPE svg PUBLIC "a" "b">.

#11301 610ee28 Thanks @dyc3! - Fixed parent tag wrapping when an HTML element starts or ends with a block-like or hidden child such as source, track, or param.

- <video src="brave.webm"><track kind="subtitles" src="brave.en.vtt"></video>
+ <video src="brave.webm">
+   <track kind="subtitles" src="brave.en.vtt">
+ </video>

storybookjs/storybook (@storybook/addon-docs)

`v10.5.10`

Compare Source

Core: Fetch static open-service snapshots relative to the document - #35945, thanks @valentinpalkovic!
Core: Pin oxc-resolver to 11.21.2 to keep tsconfig path aliases on solution-style tsconfigs - #35929, thanks @valentinpalkovic!
Dependencies: Bump Vitest to 4.1.6 (CVE-2026-47428) - #35530, thanks @anupamme!
Docs: Declare the font on overlay surfaces so docs tooltips are not left to inherit - #35966, thanks @valentinpalkovic!
ESLint Plugin: Bundle CSF helpers so the plugin loads without storybook - #35950, thanks @ndelangen!
React: Preserve discriminated union prop values in metadata extraction - #35844, thanks @s-robertson!

`v10.5.9`

Compare Source

Addon-Pseudo-States: Fix pseudo-states rewriting for nested functional selectors - #34318, thanks @filipw01!
Core: Skip module-graph reverse-index mirror when a patch is a no-op - #35825, thanks @ndelangen!
Core: Split module-graph into hot revisions and cold index services - #35831, thanks @ndelangen!
Preview: Fix crash when initialising UrlStore on a docs path - #35521, thanks @TheSeydiCharyyev!
Pseudo-States: Make stylesheet rewrites WebKit-safe - #35629, thanks @ethriel3695!
TanStack: Keep the layout id when cloning a standalone index file route - #35660, thanks @Insik-Han!
TanStack: Render real link hrefs in the Link mock - #35505, thanks @unpunnyfuns!
Webpack: Prevent long preview output filenames - #35533, thanks @zhangli091011!

TanStack/query (@tanstack/eslint-plugin-query)

Patch Changes

#11212 279bb55 - TypeScript 7 compatibility
#11188 3bc8edf - Fix false-positive warnings in no-unstable-deps rule caused by Object.prototype property lookups (toString, valueOf, etc.).
#11115 8582702 - Remove unused helper functions from the internal ASTUtils object (getNestedIdentifiers, getNestedReturnStatements, getClosestVariableDeclarator, mapKeyNodeToText, and mapKeyNodeToBaseText). They were not referenced by any rule and are not part of the public API.

TanStack/query (@tanstack/react-query)

`v5.102.2`

Compare Source

Patch Changes

Updated dependencies [80fbf73]:
- @tanstack/query-core@5.102.2

`v5.102.1`

Compare Source

Patch Changes

Updated dependencies [134890d]:
- @tanstack/query-core@5.102.1

`v5.102.0`

Compare Source

Minor Changes

#10668 e674826 - react-query: update usePrefetchQuery and usePrefetchInfiniteQuery to use queryClient.query and queryClient.infiniteQuery

Patch Changes

#11245 37127db - revert: remove NoInfer from useQuery return types
#10373 6e3d521 - fix(types): propagate generic type parameters to useMutationState select callback
#11224 294d4e6 - Fix queryOptions and infiniteQueryOptions return types so exported inferred options can be emitted in declaration files without leaking internal data tag symbols.
#11147 cb6c9d3 - Default TData of UseInfiniteQueryOptions and UseSuspenseInfiniteQueryOptions to InfiniteData<TQueryFnData> so it matches the hook generics.
#8737 2215bb0 - fix: make mutation variables optional when undefined extends TVariables
#11221 1ef4208 - Remove experimental render-time prefetching and the promise property from query results.
#11228 fb6c3fa - Avoid emitting a runtime import for React Query's type-only exports.
#11130 8834267 - fix(react-query): don't show optimistic fetching for unsubscribed useQueries
#11233 b866a95 - remove unused experimental_beforeQuery and experimental_afterQuery hooks
#11144 e546d03 - fix: remove placeholderData from suspense infinite query
Updated dependencies [34f7cee, b4368c4, 5bb089d, ba4650c, 294d4e6, 1f631b3, 01a02bf, 18c1c1e, 5448063, 2215bb0, 1ef4208, 5981771, 4a9bef6, bef4bc7, 9656dc4, 326aaf1, 3e83601, c6fc17c]:
- @tanstack/query-core@5.102.0

TanStack/query (@tanstack/react-query-devtools)

`v5.102.2`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-devtools@5.102.2
- @tanstack/react-query@5.102.2

`v5.102.1`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-devtools@5.102.1
- @tanstack/react-query@5.102.1

`v5.102.0`

Compare Source

Patch Changes

Updated dependencies [37127db, 6e3d521, 294d4e6, cb6c9d3, 2215bb0, 1ef4208, fb6c3fa, 8834267, b866a95, e546d03, e674826]:
- @tanstack/react-query@5.102.0
- @tanstack/query-devtools@5.102.0

TanStack/router (@tanstack/react-router)

`v1.170.32`

Compare Source

Patch Changes

#8130 cb281d7 - preserve context during reloads
Updated dependencies [fa65287, cb281d7]:
- @tanstack/router-core@1.171.27

`v1.170.31`

Compare Source

Patch Changes

Updated dependencies [3e016ac]:
- @tanstack/router-core@1.171.26

`v1.170.30`

Compare Source

Patch Changes

#8084 5d3785d - preserve pending UI across retained routes
#8068 f75cada - direct export of CatchBoundary class component, remove function wrapper
Updated dependencies [5d3785d, 63d2cc9]:
- @tanstack/router-core@1.171.25

TanStack/virtual (@tanstack/react-virtual)

`v3.14.10`

Compare Source

Patch Changes

Updated dependenci

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

devin-ai-integration

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

desertaxle · 2026-09-01T13:59:11Z

@codex review

chatgpt-codex-connector · 2026-09-01T13:59:26Z

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-01T14:06:40.187393Z	`f9f9369`	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f9f9369600

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-09-01T14:06:37Z

 {
  "dependencies": {
-    "aws-cdk": "2.1137.0"
+    "aws-cdk": "2.1138.0"


Regenerate the ECS templates with the upgraded CDK

This changes the pinned tool used to synthesize the shipped service.json and events-only.json, but neither generated template is included in the diff. If CDK 2.1138 changes synthesis output, the repository will retain stale CloudFormation artifacts and the verification step in .github/workflows/integration-package-release.yaml:72-85 will block the next prefect-aws release. Run just generate-cfn with this version and commit any resulting template changes before merging.

AGENTS.md reference: src/integrations/prefect-aws/AGENTS.md:L19-L19

Useful? React with 👍 / 👎.

chore(deps): Update npm dependencies

f9f9369

prefect-renovate Bot added automated-dependency-updates renovate labels Aug 31, 2026

prefect-renovate Bot requested review from chrisguidry, desertaxle, znicholasbrown and zzstoatzz as code owners August 31, 2026 15:06

prefect-renovate Bot added automated-dependency-updates renovate labels Aug 31, 2026

github-actions Bot added the ui Related to the Prefect web interface label Aug 31, 2026

devin-ai-integration Bot reviewed Aug 31, 2026

View reviewed changes

chatgpt-codex-connector Bot reviewed Sep 1, 2026

View reviewed changes

Navigation Menu

Uh oh!

chore(deps): Update npm dependencies - #22992

chore(deps): Update npm dependencies#22992
prefect-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/npm-dependencies

prefect-renovate Bot commented Aug 31, 2026

Uh oh!

devin-ai-integration Bot left a comment

Uh oh!

desertaxle commented Sep 1, 2026

Uh oh!

chatgpt-codex-connector Bot commented Sep 1, 2026 •

edited

Loading

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

prefect-renovate Bot commented Aug 31, 2026

Release Notes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Configuration

Uh oh!

devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

✅ Devin Review: No Issues Found

Uh oh!

desertaxle commented Sep 1, 2026

Uh oh!

chatgpt-codex-connector Bot commented Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codex Review Summary

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Sep 1, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chatgpt-codex-connector Bot commented Sep 1, 2026 •

edited

Loading