Update dependency @biomejs/biome to ^2.4.13

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	^2.4.12 → ^2.4.13

---

Release Notes

biomejs/biome (@​biomejs/biome)

v2.4.13

Compare Source

Patch Changes

• #​9969 c5eb92b Thanks @​officialasishkumar! - Added the nursery rule noUnnecessaryTemplateExpression, which disallows template literals that only contain string literal expressions. These can be replaced with a simpler string literal.

  For example, the following code triggers the rule:

  const a = `${"hello"}`; // can be 'hello'
  const b = `${"prefix"}_suffix`; // can be 'prefix_suffix'
  const c = `${"a"}${"b"}`; // can be 'ab'

• #​10037 f785e8c Thanks @​minseong0324! - Fixed #​9810: noMisleadingReturnType no longer reports false positives on a getter with a matching setter in the same namespace.

  class Store {
    get status(): string {
      if (Math.random() > 0.5) return "loading";
      return "idle";
    }
    set status(v: string) {}
  }

• #​10084 5e2f90c Thanks @​jiwon79! - Fixed #​10034: noUselessEscapeInRegex no longer flags escapes of ClassSetReservedPunctuator characters (&, !, #, %, ,, :, ;, <, =, >, @, `, ~) inside v-flag character classes as useless. These characters are reserved as individual code points in v-mode, so the escape is required.

  The following pattern is now considered valid:

  /[a-z\&]/v;

• #​10063 c9ffa16 Thanks @​Netail! - Added extra rule sources from ESLint CSS. biome migrate eslint should do a bit better detecting rules in your eslint configurations.

• #​10035 946b50e Thanks @​Netail! - Fixed #​10032: useIframeSandbox now flags if there's no initializer value.

• #​9865 68fb8d4 Thanks @​dyc3! - Added the new nursery rule useDomNodeTextContent, which prefers textContent over innerText for DOM node text access and destructuring.

  For example, the following snippet triggers the rule:

  const foo = node.innerText;

• #​10023 bd1e74f Thanks @​ematipico! - Added a new nursery rule noReactNativeDeepImports that disallows deep imports from the react-native package. Internal paths like react-native/Libraries/... are not part of the public API and may change between versions.

  For example, the following code triggers the rule:

  import View from "react-native/Libraries/Components/View/View";

• #​9885 3dce737 Thanks @​dyc3! - Added a new nursery rule useDomQuerySelector that prefers querySelector() and querySelectorAll() over older DOM query methods such as getElementById() and getElementsByClassName().

• #​9995 4da9caf Thanks @​siketyan! - Fixed #​9994: Biome now parses nested CSS rules correctly when declarations follow them inside embedded snippets.

• #​10009 b41cc5a Thanks @​Jayllyz! - Fixed #​10004: noComponentHookFactories no longer reports false positives for object methods and class methods.

• #​9988 eabf54a Thanks @​Netail! - Tweaked the diagnostics range for useAltText, useButtonType, useHtmlLang, useIframeTitle, useValidAriaRole & useIfameSandbox to report on the opening tag instead of the full tag.

• #​10043 fc65902 Thanks @​mujpao! - Fixed #​10003: Biome no longer panics when parsing Svelte files containing {#}.

• #​9815 5cc83b1 Thanks @​dyc3! - Added the new nursery rule noLoopFunc. When enabled, it warns when a function declared inside a loop captures outer variables that can change across iterations.

• #​9702 ef470ba Thanks @​ryan-m-walker! - Added the nursery rule useRegexpTest that enforces RegExp.prototype.test() over String.prototype.match() and RegExp.prototype.exec() in boolean contexts. test() returns a boolean directly, avoiding unnecessary computation of match results.

  Invalid

  if ("hello world".match(/hello/)) {
  }

  Valid

  if (/hello/.test("hello world")) {
  }

• #​9743 245307d Thanks @​leetdavid! - Fixed #​2245: Svelte <script> tag language detection when the generics attribute contains > characters (e.g., <script lang="ts" generics="T extends Record<string, unknown>">). Biome now correctly recognizes TypeScript in such script blocks.

• #​10046 0707de7 Thanks @​Conaclos! - Fixed #​10038: organizeImports now sorts imports in TypeScript modules and declaration files.

    declare module "mymodule" {
  -  	import type { B } from "b";
    	import type { A } from "a";
  +  	import type { B } from "b";
    }

• #​10012 94ccca9 Thanks @​ematipico! - Added the nursery rule noReactNativeLiteralColors, which disallows color literals inside React Native styles.

  The rule belongs to the reactNative domain. It reports properties whose name contains color and whose value is a string literal when they appear inside a StyleSheet.create(...) call or inside a JSX attribute whose name contains style.

  // Invalid
  const Hello = () => <Text style={{ backgroundColor: "#FFFFFF" }}>hi</Text>;
  
  const styles = StyleSheet.create({
    text: { color: "red" },
  });

  // Valid
  const red = "#f00";
  const styles = StyleSheet.create({
    text: { color: red },
  });

• #​10005 131019e Thanks @​ematipico! - Added the nursery rule noReactNativeRawText, which disallows raw text outside of <Text> components in React Native.

  The rule belongs to the new reactNative domain.

  // Invalid
  <View>some text</View>
  <View>{'some text'}</View>

  // Valid
  <View>
    <Text>some text</Text>
  </View>

  Additional components can be allowlisted through the skip option:

  {
    "options": {
      "skip": ["Title"]
    }
  }

• #​9911 1603f78 Thanks @​Netail! - Added the nursery rule noJsxLeakedDollar, which flags text nodes with a trailing $ if the next sibling node is a JSX expression. This could be an unintentional mistake, resulting in a '$' being rendered as text in the output.

  Invalid:

  function MyComponent({ user }) {
    return <div>Hello ${user.name}</div>;
  }

• #​9999 f42405f Thanks @​minseong0324! - Fixed noMisleadingReturnType incorrectly flagging functions with reassigned let variables.

• #​10075 295f97f Thanks @​ematipico! - Fixed #9983: Biome now parses functions declared inside Svelte #snippet blocks without throwing errors.

• #​10006 cf4c1c9 Thanks @​minseong0324! - Fixed #​9810: noMisleadingReturnType incorrectly flagging nested object literals with widened properties.

• #​10033 11ddc05 Thanks @​ematipico! - Added the nursery rule useReactNativePlatformComponents that ensures platform-specific React Native components (e.g. ProgressBarAndroid, ActivityIndicatorIOS) are only imported in files with a matching platform suffix. It also reports when Android and iOS components are mixed in the same file.

  The following code triggers the rule when the file does not have an .android.js suffix:

  // file.js
  import { ProgressBarAndroid } from "react-native";

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Triggered from #1786 by @​renovate[bot].

Checking if we can fast forward main (b08a0b9) to renovate/biomejs-biome-2.x (62ff873).

Target branch (main):

commit b08a0b94f05fa00b1d82b6f4d9f6fc826d7ab00c (HEAD -> main, origin/main)
Author: Cameron Smith <cameron.ray.smith@gmail.com>
Date:   Wed Apr 22 22:49:09 2026 -0400

    feat(buildbot-nix): configure effects execution gating
    
    Adds explicit effects_branches and effects_on_pull_requests declarations
    to buildbot-nix.toml
    
    - effects_branches = ["main"] restricts dispatch to the default branch
      (fnmatch glob; buildbot-nix/buildbot_nix/nix_eval.py:596-632 reads
      this from the default-branch copy of the file).
    - effects_on_pull_requests = false makes the fork-PR security boundary
      (Posture A) explicit rather than relying on upstream default — the
      mission invariant per AGENTS.md 'Mission-wide gating decisions'.

Pull request (renovate/biomejs-biome-2.x):

commit 62ff873d66d3db877c851027c7e0c84194bc1423 (pull_request/renovate/biomejs-biome-2.x)
Author: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Date:   Tue Apr 14 21:12:43 2026 +0000

    chore(deps): update dependency @biomejs/biome to ^2.4.12

Can't fast forward main (b08a0b9) to renovate/biomejs-biome-2.x (62ff873). main (b08a0b9) is not a direct ancestor of renovate/biomejs-biome-2.x (62ff873). Branches appear to have diverged at 2d04de6:

* b08a0b94f05fa00b1d82b6f4d9f6fc826d7ab00c feat(buildbot-nix): configure effects execution gating
* 412655d5d2afbc901f75771431a10b80917d867a chore(deps): update determinatesystems/magic-nix-cache-action digest to b4a9864
* 2ef55f4f3f7a9582af9e7c279220ab293ac50612 chore(deps): update taiki-e/install-action action to v2.75.19
* ed9f3d4df210fd92d9416fcfb952fb13ae1d288a chore(deps): update actions/cache digest to 27d5ce7
* 8f0a9445f3c0c8b76a62fd9b71c10e80a36e0fc0 fix(devshell): disable pkgs.wrangler sourced via npm
* 28a65dfe6addbaa6dae476142de62913ed20cf21 chore(deps): bump vitest, wrangler, and semantic-release
* 9c4f0b4aecd525f614aefca825e2ba17276de223 claude-code: 2.1.114 -> 2.1.116
* 0d9558c9e4935d5688a99fa7df6452135467844b docs(adr): mark ADR-004 superseded and shift k3s-local references to past tense
* 8f9187907ad5d21d7e911dd3f7e7df513291ee26 chore(modules): remove orphaned k3s-local-image and k3s-local-qcow packages
* 28fe85ea804d6fe28e18888f55c9f4b16a925a81 fix(secrets): rotate local-k3d-argo-cd
* 51c47cc122479a91112b296551d94f3c4198a948 refactor(justfile): delegate docs CD recipes to flake apps
* 1972e690f835a768a36a52d075a60a2c05dfc19f refactor(ci): rewrite cd.yaml preview-release-version to use nix run .#preview-version
* d09aa0e4ed0c4c5f7f2bbec66a1a476ddfe35e62 refactor(ci): rewrite package-release.yaml to use nix run .#release
* 84fb5baaf842e3d7ef4b61385f4fa8b7a77e7904 refactor(ci): rewrite deploy-docs.yaml to use nix run .#deploy-docs
* 5d917ce342407df5e59e49f5c548401b55d0cd5c fix(apps): handle detached HEAD in preview-version via CURRENT_BRANCH env
* 0818f81b9114633a3324c82f353f77324a2fc2a8 refactor(pkgs): rename docs-node-modules to vanixiets-docs-deps
* 94c841f89e4b45f18025c5fa56664948bf1711c4 refactor(apps): use astro-generated wrangler.json for hermetic deploy
* 6c27a8fa4c4270bd577fc810823b42ce32fd65eb fix(pkgs): include workspace-scoped node_modules in docs-node-modules derivation
* 82a2495f485656df62b863d0454a755509c1c7a1 refactor(docs): strip JSONC comments and trailing commas from wrangler config
* 81023ae7f51b2c1182ed9c04be131e78279f9d9d refactor(apps): use bun-provided wrangler in deploy-docs for cache independence and version parity
* f8461ebf2681e072c862bdc806b2c0bbb987a0a9 refactor(apps): make release and preview-version flake apps hermetic
* fb82ceea4b267ce83c041abee85188fa481370d3 feat(pkgs): add hermetic docs-node-modules derivation
* 6fd56b2ad3c703d0479e7e831a037e1899f5c10a build(docs): reconcile bun.lock with semantic-release pin and regenerate bun.nix
* fe1390becb19ee0b512c59b0912f06b2f5019f3a feat(apps): add nix-native release flake app
* 764fb4a59323347d0a4c49e8512946b858225796 feat(apps): add nix-native preview-version flake app
* 4dcede404998622fa6c09e7a002b146b4ced3c52 feat(apps): add nix-native deploy-docs flake app
* badff3f575b51fda4663360b4a2a44644057fb27 build(deps): pin semantic-release to exact 25.0.2 to match nixpkgs
* 5c905ba76bdaff4bf77fb52268cc6bc8579072a4 feat(devshells): add narrow docs authoring devshell
* 0ac15b7e92ef57d5629a17946e41db44249c114c refactor(devshells): relocate monolithic dev-shell into modules/devshells/
* ad19970f9d19ecfb0b06b5ea98a379217840b3d8 fix(vanixiets-docs): patch bundled workerd ELF for x86_64-linux sandbox
* baada22752d955483cdf732ef5c3344ac74da51a build(vanixiets-docs): produce complete CF Worker deploy payload via node
* f309dba800cd96c9a7989c2d581ed7a013723b3c refactor(docs): replace serve with astro preview for CI webServer
* 7906fba0451ef307a4f3469cdeef965e749415af refactor(docs): drop ASTRO_STATIC_OUTPUT from playwright dev webServer
* f7f810253723ed3d9c93dd187fcb0697034762f4 refactor(docs): configure cloudflare adapter for hermetic builds
* 40eea382d5360fe608265f9b5788ed5a7e0d718d build(flake): pin nixpkgs-darwin-stable to prior unstable-small for atuin schema compat
* bf214c0d8e1f81d0fd4e330b4e69353b3dec136a build(overlays): drop lean4 stable fallback now hydra provides darwin binaries
* 0318129931c25410c3347d4f6a6c0e1bb02323ab build(overlays): pin python313Packages.dvc to stable on aarch64-darwin
* 81cb74943e7a3682bfd60bcd5c7c0e29c6b461c4 refactor(docs): rename PLAYWRIGHT env var to ASTRO_STATIC_OUTPUT
* ebb14d795b34aff940c109914ac617ea33132781 feat(checks): hoist vanixiets-docs-linkcheck alongside unit and e2e
* 709568bafaa5804a436630fab1c9c0c1f7000c53 refactor(docs): extract link validation into passthru.tests.linkcheck
* f80619e5a5ecba8e4303456daecd79576241e4c4 chore(docs): remove vestigial PATH export from e2e buildPhase
* d15a78dfd5d7ff40743247af072415e98c14e097 chore(bun): refresh bun.lock after svgo removal
* 13b74109443141d1c458b30dfdd0798abee8b0da chore(docs/deps): drop svgo from bun deps (provided by nix)
* b1eecde5e509d77a2594e29fb8c486bdf0e083b2 refactor(docs): consume svgo from nixpkgs in vanixiets-docs derivation
* 3b5f262205d2cce0d9c1951bb6002489262c3656 refactor(docs): use devshell svgo in diagrams-build recipe
* f2b0ec503ed6fad8703b0cfde7d28d68a11efb9c feat(devshell): provision svgo alongside typst for diagram pipeline
* 2c3714d610ebc666f6b543c5b7f16372c05c4093 refactor(docs): drop redundant TYPST_FONT_PATHS and font args
* 0a510c5e9b20c9e1eba5fdb88ffe5ceeefa3cbf4 refactor(devshell): drop redundant TYPST_FONT_PATHS (now in overlay)
* f02e95d387e5116295c345152212db1bc89ea4f5 refactor(overlays): bake font paths into typstWithPackages wrapper
* 729541dbbb32630a993c934da73b975853b1193e fix(docs): ensure public/diagrams exists before typst compile
* 93aeb4236a3f9ef225a17c82165495cd3dc0e2d4 feat(docs): enable internal link validation in vanixiets-docs check
* f5b3d0efc221e855cf262b65b784a5d12680e766 fix(docs): wire typst diagram compilation into vanixiets-docs build
* b3a6d11d0dc7d81d009f67dd3a05ade9daf133e8 chore(bun): regenerate bun.nix from refreshed lockfile
* a994e4a8c1bc30ed25e89f160e64223fb86ba977 chore(bun): refresh bun.lock for latest dep bumps
* 9248dd440e978451ab4091c355b26121641ca4f4 chore(docs/deps): bump astro 6.1.5->6.1.8, @astrojs/cloudflare 13.1.8->13.1.10, @biomejs/biome ^2.4.12, wrangler ^4.83.0
* e792b23c04260c2bfbfc34ba225e3803e62a10eb chore(deps): bump root serve to ^14.2.6
* 8cddcd9554f008fca0d958b56e761ded648aeb64 feat(justfile): add bun-outdated dry-run recipe
* 39a5f30cf33af23162f5844d1ab26c4a0c03dd7b feat(justfile): add bun-update-latest-stable composite with sub-recipes
* d1fc8256206e14a3db2531d883a2f46bb02cc727 refactor(justfile): relocate regenerate-bun-nix to new [group('bun')] section
* b4949a6cd624389d25693a8964804ec5ed21bb90 chore(pkgs/duckdb): sync package.nix with nixpkgs 1.5.2
* 5fbb4f685c9e9e90062f69e6420b064389466ffa chore(pkgs/duckdb): bump to 1.5.2
* b4cb7bb9b27e21dc7d91caba6d59e4e2f83ea4e0 feat(modules/apps): add regenerate-bun-nix flake app
* bd57ce1ddaff11fada4a24b9240478b6fab44476 refactor(modules/apps): relocate update-apps.nix to modules/apps/updates.nix
* cc2e04dec5c397165279a9c2c21732b8500da35a fix(overlays): pin atuin to stable on aarch64-darwin
* 07f041241f6cd8e24a7fe5b483bef5348cd3b773 chore(overlays): drop redundant kyverno-chainsaw go125 patch
* a8f0928961a328989478c91785bf0d8a2eadf39e chore(flake): update nixpkgs
* a8d4bb118504ba2ade0f922ae743213149b87969 docs(kubernetes): align with kubernetes.objects rename
* c67f6d2acf09eb9f9504c6f746452ce572d91c7d refactor(kubernetes): migrate consumers to post-aa7bf3a easykubenix API
* 74a36581d6ffba65e05ba3cb5592ea9a30047513 chore(flake): update catppuccin
* 125511fae48c4520e807546cffbdef2d67046123 chore(flake): update home-manager
* 5aa471a63b5fa55a9a9955f46aedaca7cda7a895 refactor(home/ai/opencode): wrap llm-agents opencode for exec-time secret injection
* e9208b19be86ae92eb9d415db31860866ec3bf7c feat(kubernetes/lib): add enforceNamespace helper for namespaceless chart templates
* b742dc57a1ddb26c2544da8763c5040b6de8fd78 Update flake input: srvos
* 642b98225c113f6113863ede00fcdf22a3e46fc9 Update flake input: sops-nix
* 9ae9ecd545c56763334b48ef7a2661f866e37535 Update flake input: nixpkgs-linux-stable
* 5f11bcd532763d7fe3c420803e75ca35c1a4b884 Update flake input: nixpkgs-darwin-stable
* 65ea3ec52e183e45521b8095234d4155388e3f93 Update flake input: nixhelm
* b7c9865f12c922b0d8d7e76def340b9330a00691 Update flake input: nix-index-database
* 5a134e7b5655c08c34af6ca1ef0d40096e2a2e51 Update flake input: niks3
* a2e813f818741fc7ac1fe961ffbff1886922babd Update flake input: llm-agents
* 956321405d95a7ee2a78c65b83b0e2ea0a0be3e6 Update flake input: direnv-instant
* 7fb9b12ba371d82af43dd1fa273b3b37d7750041 Update flake input: clan-core
* 2a214b06040f343b059377c9ac71e01ef1df8ce8 Update flake input: buildbot-nix
* 99ee781a96e116dee935417038f1c15625427230 docs(skills): document buildbot-logs usage with cross-reference
* 5055688e4432bdf6d1c095e9a9435d5224fa056c docs(skills): add unified PR check log retrieval and normalize logs/ layout
* a6139d87576a571dcd26e1a3ba7e21df3a1091de fix(pkgs/nix-fast-build): correct v1.4.0 source hash
* 1106dfacf10063f0648c9c6577be91c527a2d99f fix(dev-shell): route nix-fast-build through self'.packages for by-name v1.4.0
* 04d59d2673a3fe625d2c4a2f4c9dae44d26ba6df feat(pkgs/nix-fast-build): package v1.4.0 as local by-name entry
* 8ed95b5af3f56df9cd4853e5c87bbfa2c9160920 refactor(flake): drop nix-fast-build input in favor of nixpkgs version
* 4ad4873177f9143c6ffbe94ed862bdb15aee73d0 chore(packages): remove nix-fast-build re-export (unused; sourced from nixpkgs)
* 4b804eb7609e8dfb204bf92095bf3c2a38887d09 refactor(dev-shell): source nix-fast-build from nixpkgs
* fd3c904349a93f12fc08a58a2c39f65ab3441989 fix(checks/nix-unit): declare systems as explicit input dependency
* d276fa9903b02b56dc3a14205eac13617f8d2e68 chore: remove unused local systems path-flake
* a47facc9009f50ca4d97bcf20883c43df8174650 refactor(flake): switch systems input to nix-systems/default/future-26.11 upstream
* 5ab929a699bc0c92a636c3b73d90619a8c82ce56 docs(deployment-requirements): remove x86_64-darwin reference
* 81e60880a708dd98504335c4703bb5667a45f240 docs(system-constraints): remove x86_64-darwin from supported platforms
* 6ff73a4ac85274eb605c916dce6a32f0a26380f1 chore(home/tools/nix): drop dead commented-out x86_64-darwin reference
* 170c4074c5629fb2dd562c114b2d830355f40d55 refactor(makefile): drop Intel Mac platform detection branch
* 05bf482e42c3254818b1a8281eb2be73b34c6dbc refactor(justfile): drop x86_64-darwin from nix-flake-io enumeration
* 00ec2d33349f894742b601508f477741017a1803 refactor(overlays): drop empty x86_64-darwin conditional in stable-fallbacks
* 06721db855a7cca6559d083dc32125bee828d33b refactor(system): drop x86_64-darwin from rosetta extra-platforms
* 49d3cd5a0db93c82630e71b96e75bd1b0a7f678b refactor(darwin): drop x86_64-darwin rosetta platform (fleet is aarch64-only)
* 5c379af1460d05198e63917e1e4eeb8e85abdefc fix(flake): pin clan-core and terranix systems input to silence x86_64-darwin eval warning
* 4bd1e927228e0fd9caa90179a71ae991bcf66502 refactor(checks/devshells): drop redundant exposedSystems guard
* f3558de36b6eb9fb2d90f8f6d043f3e83f5098e3 refactor(checks/nixidy-k8s): drop redundant exposedSystems guard
* 791589e2c56b0da6b41e69cccfe1c19e84c94488 refactor(checks/home): drop redundant exposedSystems guard
* 42f602e58368b4255af63fbee4a4db6a58759b4c refactor(systems): derive flake-parts systems from nix-systems path-flake
* 17fe7fd37e5d8d5e8a97249a2c89c7dfce1329e2 fix(commands): use apple-signed /usr/bin/ssh on darwin for buildbot-logs
* 04f93ebf447977bdb659eb1f19a82aaa3a57e9b3 docs(commands): register buildbot-logs in nsa-ref description table
* f40f9ae08c039bbfc8d828235b8a8cbd58455e97 feat(commands): add buildbot-logs for fetching buildbot-nix build logs
* ad67a8105ca324ff66a38629e55deabda40a63db fix(caches): sync scientistexperience cache into baseline substituters
* 7736d138dfc20e4b19526a9d338d4a56b530bb97 refactor(skills/issues-beads-prime): retarget refs to git-version-control siblings
* c7d6406a70812ca291481d96121743626ecab96d refactor(skills/jj-workflow): retarget refs to git-version-control siblings
* 30a20321dbed7641a5da3d357f734c37cb065729 refactor(skills/git): trim SKILL.md and route modes to siblings
* ac06ea3c53a73a6fd4d97aa696fb5f224aa33526 refactor(skills/git): extract pickaxe forensics to 04-history-investigation.md
* 5f83cecd283f8c69b8b031b67d383420442221b1 refactor(skills/git): extract jj mode recipes to 03-jj-mode.md
* 91d010ff35bb849f7a291b80d12c7d4c95c98a9f refactor(skills/git): extract GitButler mode recipes to 02-gitbutler-mode.md
* 151f28e488f0c82571315ea27ef2fa72ef2f4273 refactor(skills/git): extract git-native mode recipes to 01-git-native-mode.md
* ddb602569807950b0d2d5201ed5f86e499dfe243 feat(checks): wire devShells as flake checks
* e915168bf3f477ec13043a8acdf38def4a40c043 claude-code: 2.1.112 -> 2.1.114
* 6b8c97e8e2f2f8e883a690acd22920b270aed56b feat(stibnite): route dolt daemon SSH auth through Bitwarden agent
* a51569f47821b9fb11196985d649da7babd9c7e8 feat(dolt-sql-server): accept host env vars and ensure git on PATH
* de1dc47605c40ae07b739e9d220941189ef07b35 refactor(home/core/bitwarden): consume shared bitwardenSocketPath helper
* d9540d1227bc6f533000b6002e9d5923dbc00807 feat(lib): add bitwardenSocketPath helper for SSH agent wiring
* b838bf064b6e6bb14ff0d5b90b8e522900c7c76f claude-code: 2.1.111 -> 2.1.112
* cce626348306e6c564bedd37a424d5a576fcc12c chore(terrform): sync state
* 2b5ed5ee72883fd9a49103c34c9b5c71ec4fd99f inventory.json: update install time of galena
* 2173bd6e80c12566862099c6c64eebcab0575bff machines/galena/facter.json: update hardware configuration
* 8efc5817c338ee8d51fe2fbf2af00cd88ebb71ba chore(gcp): enable galena
* 9024e622f538270d988069277254d1cfa898f3b5 claude-code: 2.1.110 -> 2.1.111
* 130283069b4fb3861caf8afa1edae93938cbdd1e feat(ai): update claude-code model from 4-6 to 4-7
* 17e922074aa2c1d3d7ccfc8ac25262e469229368 fix(docs): update README badge link from CI to CD workflow
* 4223880502a747c6d0cf9a3ee27adf5e34520d2a refactor(ci): archive nix-fast-build CI workflow to deprecated
* 14899b1e490e2919beb1630b1d3d7c4e5c29e054 refactor(ci): rename CI/CD workflow to CD
* b816a135506e8864aa9ea335e7b0dce309ef2065 refactor(ci): remove nix-check job and cachix dependency
* eb7f2302d4e7f7042fb232e9ef22d78cd4ad6bd0 refactor(ci): update mergify required checks for buildbot-nix delegation
* 981af01fe4bc4f7ef9aaf54cc8adac74a93a85ba refactor(ci): delegate nix checks to buildbot passthrough
* 6565a761e811fdad460b6d6d6f80613b07458bae chore(buildbot): init config
* 2645137bb7ee419d5b17a0b2e8ef7f337836d5f5 feat(buildbot): add userAllowlist to GitHub forge for cross-org App installation
* 34430da24f502297fef3c4d47bb3ed3c85d87fb8 fix(ci): add checks:write permission for junit report annotations
* 5689b2596466a56b88a69b933933061e099e3450 fix(docs-e2e): override playwright chromium with nixpkgs for linux nix sandbox compatibility
* f02539016c86bb7025d16efc00a5bd1a00722cd6 fix(ci): cap nix-fast-build eval-workers and max-jobs to prevent OOM on GHA runner
* 0056dc752f2c3919785ead2bf42a07433df49220 feat(checks): wire vanixiets-docs package build as effect-input-wire
* 02de3d07edf9c07ba55efebe8a0cf29ee06c5d4c feat(checks): wire k8s-manifests and nixidy env build checks
* 6e0bf39fda14f50ffa30eedf40529b04a1293be8 feat(checks): wire per-package container checks for fd and rg multi-arch
* 846a6fba00f46dafda0fecaef8f0fa09f6d61c2c feat(checks): wire home-manager activationPackage checks for crs58 and raquel across 3 systems (closes nix-144.4)
* 40f31edb40bf02b47682a77d4952115c2d54be6f feat(checks): wire nixos toplevel build-realization for cinnabar, electrum, galena, magnetite
* 8032309512a894aeecede907103120ef24ba0c17 fix(justfile): enumerate all 20 flake output categories in nix-flake-io recipe
* 749290f892f85ba098bdd48b8d24a52f90df5154 chore(ci): remove deprecated justfile recipes superseded by nix-fast-build
* e902a4349776250413d659d2f5c96636d90e3bf9 chore(ci): archive deprecated CI scripts to .github/deprecated/scripts/
* 33cef92849bd83bfa3d81673ff6f4299d84b7f38 fix(ci): align nix-check run-all filter with existing empty-string convention
* 854892a3db9612e7b9852783ea70dd7d56a91186 refactor(ci): replace matrix jobs with nix-check orchestration
* 84d5c8f2c7eb9dbafb9d1e8884372b009ecfbcba chore(ci): archive pre-migration ci.yaml to .github/deprecated/
* 783e2fa87922f920f003b9dbb5da120484d90ca0 fix(ci): enable accept-flake-config in setup-nix action
* 7645615c037a90ad42a25b1daca4e4b1962a4328 feat(flake): add cache.scientistexperience.net substituter, set cachix push priority
* 7a201142ac6c9a054db8ed4ccecb5ae16c8a51a1 feat(flake): expose nix-fast-build as packages.${system}.nix-fast-build
* f89068bc3227c6ffe37a66af992625ec4495fbb0 refactor: replace custom check-fast recipe with nix-fast-build invocation
* 51f6189e3fca88399d212d7a686d97b1518db08d feat: add docs unit and e2e check aliases
* 6e542043532e188774c4ca97bbbb25b1c2c5967d feat: add vanixiets-docs package with passthru unit and e2e tests
* b823874f582de0c60275c81a80598d8225d32ead feat: add local systems input, bun2nix flake input, and generate bun.nix
* bb083c57cf743f8793db4fb8ea6dd817e8003b2c feat: add sops roundtrip flake check
* aacb4ba01c5ed9ffc24f6e873fc0090e4ebd5af5 refactor: disable pre-commit flake check in favor of independent derivations
* e4795d6ba5becfebeba0771d7cc4947df8fe16a4 feat: add gitleaks flake check derivation
* 30d30821b2ffd359c9c2f3a32589332475d36012 feat: add nix-fast-build to devshell
* 6f3250f37fe2e13d449cb60df3db3684c0dddc4d feat: add nix-fast-build flake input
* 24c67f9dfc2e659eee01cd42cea6f9fbdb0ddb7e feat: add nix-flake-io justfile recipe for flake output enumeration
* 3c6261d2e5308efd33c828907c8c4a3fda244a04 claude-code: 2.1.109 -> 2.1.110
* 0d81c9758cc557a0591c9631421cb8a3b6eb19e8 claude-code: 2.1.108 -> 2.1.109
| * 62ff873d66d3db877c851027c7e0c84194bc1423 chore(deps): update dependency @biomejs/biome to ^2.4.12
|/  
* 2d04de6bc8cd006058e66c3f6843e5cae3e06d05 claude-code: 2.1.107 -> 2.1.108

commit 2d04de6bc8cd006058e66c3f6843e5cae3e06d05
Author: Cameron Smith <cameron.ray.smith@gmail.com>
Date:   Tue Apr 14 17:09:53 2026 -0400

    claude-code: 2.1.107 -> 2.1.108

Rebase locally, and then force push to renovate/biomejs-biome-2.x.

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-04-28 01:45 UTC · Rule: bot-updates
• ✅ Checks passed · on draft merge queue: embarking main (e36097e) and [#1878 + #1860 + #1786 + #1783] together #1906
• ✅ Merged — 2026-04-28 01:54 UTC · at cce6d8710409d91f9b01ad7e75333584670b656b · rebase

This pull request spent 9 minutes 48 seconds in the queue, including 4 minutes 45 seconds running CI.

Required conditions to merge

• all of:
  • check-success=buildbot/nix-build
  • check-success=buildbot/nix-effects
  • check-success=buildbot/nix-eval