Skip to content

build(deps-dev): bump the minor-and-patch group with 6 updates - #188

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-ae2e88e6b1
Oct 8, 2026
Merged

build(deps-dev): bump the minor-and-patch group with 6 updates#188
github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-ae2e88e6b1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 6 updates:

Package From To
@biomejs/biome 2.5.14 2.5.15
@stoplight/spectral-cli 6.16.3 6.17.0
sass 1.105.0 1.105.1
swagger-ui-dist 5.33.0 5.33.1
vite 8.3.1 8.3.2
vue-tsc 3.3.11 3.3.12

Updates @biomejs/biome from 2.5.14 to 2.5.15

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.15

2.5.15

Patch Changes

  • #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

    For example, the following snippet triggers the rule.

    function Component({ items = [] }) {
  return items;
}

  • #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

    <script>
  export let name;
</script>

  • #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

    {
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}

  • #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

    import { page } from "$app/stores";

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.15

Patch Changes

  • #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

    For example, the following snippet triggers the rule.

    function Component({ items = [] }) {
  return items;
}

  • #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

    <script>
  export let name;
</script>

  • #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

    {
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}

  • #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

    import { page } from "$app/stores";

  • #11723 3b429d1 Thanks @​m1handr! - Fixed #11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.

... (truncated)

Commits

Updates @stoplight/spectral-cli from 6.16.3 to 6.17.0

Release notes

Sourced from @​stoplight/spectral-cli's releases.

v6.17.0

What's Changed

... (truncated)

Commits
  • 16db1d7 chore(release): 6.17.0 [skip ci]
  • e053930 chore(release): 1.6.0 [skip ci]
  • eabafec feat(repo): minor release trigger (#3079)
  • 1d96a09 chore(release): 1.23.0 [skip ci]
  • 8239640 chore(release): 1.12.3 [skip ci]
  • 56bad38 chore(release): 1.5.2 [skip ci]
  • dbd96c7 chore(release): 1.9.0 [skip ci]
  • 44c93fa chore(release): 1.23.2 [skip ci]
  • 5aa154a chore(deps): upgrade typescript to 4.9.5 (#3078)
  • 9ee8329 Fix/suppress node deprecation in windows harness (#3077)
  • Additional commits viewable in compare view

Updates sass from 1.105.0 to 1.105.1

Release notes

Sourced from sass's releases.

Dart Sass 1.105.1

To install Sass 1.105.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Improve error messages for @extends across different media queries.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.105.1

  • Improve error messages for @extends across different media queries.
Commits
  • db3c666 Merge pull request #2869 from sass/extend-media-errors
  • 2ac4515 Improve span boundaries for media queries and selectors
  • 706cfbf Fix InterpolationMap._expandInterpolationSpanRight()
  • 792a948 Bump bufbuild/buf-action from 1.5.0 to 1.6.0 in /.github/util/initialize (#2870)
  • 61ab702 Improve errors for @extend across media queries
  • 288d4e2 Auto-merge dependabot PRs as the Sass bot account (#2866)
  • See full diff in compare view

Updates swagger-ui-dist from 5.33.0 to 5.33.1

Release notes

Sourced from swagger-ui-dist's releases.

v5.33.1

5.33.1 (2026-10-01)

Bug Fixes

  • handle virtualization with path item references (#11069) (38f0ef0)
Commits

Updates vite from 8.3.1 to 8.3.2

Release notes

Sourced from vite's releases.

v8.3.2

Bug Fixes

  • build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
  • bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
  • bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
  • deps: update all non-major dependencies (#23601) (9944fa6)
  • deps: update rolldown-related dependencies (#23602) (88c1741)
  • html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
  • limit size of object and array printing via forwardConsole (#23565) (e64a587)
  • merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)
  • optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)
  • optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)
  • pass queries to renderBuiltUrl (#23586) (744269e)
  • server: handle file watcher errors without crashing (#23503) (6894f5c)
  • server: release previous environments after initialization (#23499) (5a3a010)
  • ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)
  • worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

  • avoid encoding intermediate source maps (#23461) (89574f6)
  • build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)
  • only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

  • fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

Code Refactoring

Tests

  • bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)
Changelog

Sourced from vite's changelog.

8.3.2 (2026-10-01)

Bug Fixes

  • build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
  • bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
  • bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
  • deps: update all non-major dependencies (#23601) (9944fa6)
  • deps: update rolldown-related dependencies (#23602) (88c1741)
  • html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
  • limit size of object and array printing via forwardConsole (#23565) (e64a587)
  • merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)
  • optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)
  • optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)
  • pass queries to renderBuiltUrl (#23586) (744269e)
  • server: handle file watcher errors without crashing (#23503) (6894f5c)
  • server: release previous environments after initialization (#23499) (5a3a010)
  • ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)
  • worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

  • avoid encoding intermediate source maps (#23461) (89574f6)
  • build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)
  • only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

  • fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

Code Refactoring

Tests

  • bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)
Commits
  • 1003321 release: v8.3.2 (#23623)
  • 24bd331 fix(worker): align worker urls in client and server when using terser (#23614)
  • 94d0080 perf: only register time middleware when debug logging is enabled (#23621)
  • 89574f6 perf: avoid encoding intermediate source maps (#23461)
  • 5a3a010 fix(server): release previous environments after initialization (#23499)
  • 1929b4c docs: fix dead og-image PNG links in vite6/vite7 changelog entries (#23594)
  • 6894f5c fix(server): handle file watcher errors without crashing (#23503)
  • cf5c028 perf(build): avoid quadratic link scan in the preload helper (#23510)
  • bba3bb8 fix: merge build.rolldownOptions.output.minify correctly (#23536)
  • 5e4b9ca fix(optimize-deps): avoid "unsupported" warnings for browser:false mappings (...
  • Additional commits viewable in compare view

Updates vue-tsc from 3.3.11 to 3.3.12

Release notes

Sourced from vue-tsc's releases.

v3.3.12

language-core

  • security: improved handling of untrusted Vue files (cea0698)
  • feat: infer first parameter type of default factory for defineModel (1be73b8)
  • feat: report duplicate CSS module names, including non-identifier names (d41d919) (ffb85e5)
  • fix: keep union props when using withDefaults (084f30f)
  • fix: keep inference-only props string single-line with block comments (55ca36f)
  • fix: support calling template bindings without .value (7ad4a94)
  • fix: avoid type guards missing from the tsc bundle in template binding analysis (e743e80)
  • fix: pad directive hook signatures to check short-arity directive bindings (94052b8)
  • fix: vueCompilerOptions.plugins now overrides the inherited list instead of being deduplicated on resolve (4fa9e97) (c0e5d2e)
  • fix: eliminate synthesized ignore comments across codegen, scoped class aliases and compound event handlers (dbcb7de) (eccb74a) (612ae32)
  • fix: correct template mapping boundaries and eliminate unmapped diagnostics (04954dd) (8c85e38) (af7a194) (90f8207)
  • fix: stop typedef JSDoc from leaking into emitted dts (d4d4139)
  • perf: precompile attribute glob matchers (7d2e603)

component-meta

  • fix: stop checking JS Vue files as TS (045a6a7)

typescript-plugin

  • fix: don't abort reference span fix-up at style-less files (e46126c)

tsc

  • fix: prevent watch mode crash on incremental build (a59da36)

vscode

  • perf: reduce focus mode overhead (b0936d1)

Contributors: @​johnsoncodehk, @​serkodev, @​KazariEX, @​00200200, @​camonunez, @​Cherry, @​hungateJoseph, @​uturnr, @​ValentinYoushkevich, @​xia-chao

Changelog

Sourced from vue-tsc's changelog.

3.3.12 (2026-10-02)

language-core

  • security: improved handling of untrusted Vue files (cea0698)
  • feat: infer first parameter type of default factory for defineModel (1be73b8)
  • feat: report duplicate CSS module names, including non-identifier names (d41d919) (ffb85e5)
  • fix: keep union props when using withDefaults (084f30f)
  • fix: keep inference-only props string single-line with block comments (55ca36f)
  • fix: support calling template bindings without .value (7ad4a94)
  • fix: avoid type guards missing from the tsc bundle in template binding analysis (e743e80)
  • fix: pad directive hook signatures to check short-arity directive bindings (94052b8)
  • fix: vueCompilerOptions.plugins now overrides the inherited list instead of being deduplicated on resolve (4fa9e97) (c0e5d2e)
  • fix: eliminate synthesized ignore comments across codegen, scoped class aliases and compound event handlers (dbcb7de) (eccb74a) (612ae32)
  • fix: correct template mapping boundaries and eliminate unmapped diagnostics (04954dd) (8c85e38) (af7a194) (90f8207)
  • fix: stop typedef JSDoc from leaking into emitted dts (d4d4139)
  • perf: precompile attribute glob matchers (7d2e603)

component-meta

  • fix: stop checking JS Vue files as TS (045a6a7)

typescript-plugin

  • fix: don't abort reference span fix-up at style-less files (e46126c)

tsc

  • fix: prevent watch mode crash on incremental build (a59da36)

vscode

  • perf: reduce focus mode overhead (b0936d1)

Contributors: @​johnsoncodehk, @​serkodev, @​KazariEX, @​00200200, @​camonunez, @​Cherry, @​hungateJoseph, @​uturnr, @​ValentinYoushkevich, @​xia-chao

Commits
  • cea0698 v3.3.12 (#6234)
  • d4d4139 fix(language-core): stop typedef jsdoc from leaking into emitted dts
  • 045a6a7 fix(component-meta): stop checking JS Vue files as TS (#6231)
  • a59da36 fix(tsc): prevent watch mode crash on incremental build (#6213)
  • 94052b8 fix(language-core): pad directive hook signatures to check short-arity direct...
  • ffb85e5 fix(language-core): report duplicate non-identifier CSS module names (#6199)
  • d41d919 feat(language-core): report duplicate CSS module names (#6198)
  • 3167acf test(tsc): assert emitted declarations are self-contained and add jsxSlots te...
  • d797f44 chore(deps): upgrade Vue to 3.6.0-rc.6 (#6189)
  • 04954dd fix(language-core): eliminate unmapped codegen diagnostics (#6179)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps-dev): bump the minor-and-patch group with 6 updates
c33ab18 
Bumps the minor-and-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.14` | `2.5.15` |
| [@stoplight/spectral-cli](https://github.com/stoplightio/spectral) | `6.16.3` | `6.17.0` |
| [sass](https://github.com/sass/dart-sass) | `1.105.0` | `1.105.1` |
| [swagger-ui-dist](https://github.com/swagger-api/swagger-ui) | `5.33.0` | `5.33.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.1` | `8.3.2` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.11` | `3.3.12` |


Updates `@biomejs/biome` from 2.5.14 to 2.5.15
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.15/packages/@biomejs/biome)

Updates `@stoplight/spectral-cli` from 6.16.3 to 6.17.0
- [Release notes](https://github.com/stoplightio/spectral/releases)
- [Changelog](https://github.com/stoplightio/spectral/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/stoplightio/spectral/compare/@stoplight/spectral-cli-6.16.3...@stoplight/spectral-cli-6.17.0)

Updates `sass` from 1.105.0 to 1.105.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.105.0...1.105.1)

Updates `swagger-ui-dist` from 5.33.0 to 5.33.1
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.33.0...v5.33.1)

Updates `vite` from 8.3.1 to 8.3.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.2/packages/vite)

Updates `vue-tsc` from 3.3.11 to 3.3.12
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.12/packages/tsc)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@stoplight/spectral-cli"
  dependency-version: 6.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sass
  dependency-version: 1.105.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: swagger-ui-dist
  dependency-version: 5.33.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vue-tsc
  dependency-version: 3.3.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 8, 2026
@github-actions
github-actions Bot merged commit ec7863f into master Oct 8, 2026
7 of 8 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-ae2e88e6b1 branch October 8, 2026 10:45
@codecov

codecov Bot commented Oct 8, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (master@d9f8ca6). Learn more about missing BASE report.

Additional details and impacted files 
@@           Coverage Diff            @@
##             master    #188   +/-   ##
========================================
  Coverage          ?   0.00%           
  Complexity        ?    1358           
========================================
  Files             ?      93           
  Lines             ?    4350           
  Branches          ?       0           
========================================
  Hits              ?       0           
  Misses            ?    4350           
  Partials          ?       0

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants