chore(deps): Update all non-major dependencies by renovate[bot] · Pull Request #833 · tutods/lib

renovate · 2026-10-27T06:15:27Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
@biomejs/biome (source)	devDependencies	patch	`^2.6.2` → `^2.6.3`
@biomejs/biome (source)	peerDependencies	patch	`>=2.6.2` → `>=2.6.3`
@biomejs/biome (source)		patch	`2.6.2` → `2.6.3`
@nx/js (source)	devDependencies	patch	`24.0.0` → `24.0.1`	`24.0.2`
nx (source)	devDependencies	patch	`24.0.0` → `24.0.1`	`24.0.2`

Release Notes

biomejs/biome (@biomejs/biome)

`v2.6.3`

Compare Source

Patch Changes

#12275 807e616 Thanks @dyc3! - Added the new nursery rule noArraySortForMinMax, which reports sorting an array only to read its smallest or largest value. Use Math.min() or Math.max() instead.
```
const minimum = array.toSorted((a, b) => a - b)[0];
```
#12432 cf61682 Thanks @dyc3! - Added the nursery rule noBooleanSortComparator, which reports sort comparators that return a boolean instead of a number. For example, array.sort((a, b) => a > b) never puts the first item before the second, so the array isn't sorted correctly.
#12304 b4654c5 Thanks @dyc3! - Added the new nursery rule noEagerArrayMethodsInLoops, which reports .map() and .filter() calls in the header of for...of loops. These calls build a new array that is only used by the loop.
```
for (const name of users.map((user) => user.name)) {
  console.log(name);
}
```
#12121 66c3791 Thanks @dyc3! - Added the nursery rule noNewRequire, which disallows calling require with new, such as new require("app-header").
#12316 34b520d Thanks @dyc3! - Added the new nursery rule noObsoleteAttributes, which disallows obsolete attributes on HTML elements and suggests what to use instead.
```
<table bgcolor="#ffffff" cellpadding="5"></table>
```
#12258 cce2385 Thanks @dyc3! - Added the nursery rule noPathConcat, which disallows building file paths and URLs by joining strings to __dirname, __filename, import.meta.dirname, import.meta.filename, or import.meta.url.
```
const fullPath = __dirname + "/foo.js"; // reported
```
#12287 e12ad78 Thanks @dyc3! - Added the new nursery rule noPlaywrightNthMethods, which disallows selecting Playwright elements by position with first(), last(), and nth(). A test that relies on the position of an element can act on a different element when the page changes.
```
await page.locator("button").first().click();
```
#12343 62ad123 Thanks @vibbix! - Added the nursery rule noSelfNestedLayer, which disallows nesting a cascade layer inside a layer with the same name. Layer names inside an @layer block are relative to it, so the inner layer below creates the sublayer components.components instead of adding to components.
```
@layer components {
  @layer components {
    .button {
      color: red;
    }
  }
}
```
#12289 bbbd95d Thanks @dyc3! - Added the nursery rule noShortTimeValues, which reports CSS animation and transition times that are shorter than the configured minimum number of milliseconds. The rule does nothing until minimum is set.

For example, the following code is invalid when minimum is 100:
```
a {
  transition-duration: 80ms;
}
```
#12431 f748ec0 Thanks @dyc3! - Added the nursery rule noSvelteInternal, which disallows importing from svelte/internal and its submodules. These modules are private to Svelte and can change or disappear in any release.
```
import { get_current_component } from "svelte/internal";
```
#12270 8ae35c4 Thanks @dyc3! - Added the nursery rule noTanstackQueryRestDestructuring, which disallows rest destructuring and object spread on TanStack Query results. Both read every property of the result, so the component updates on every change to the query.
```
import { useQuery } from "@tanstack/react-query";

const { data, ...rest } = useQuery({ queryKey: ["todos"], queryFn: fetchTodos });
```
The rule belongs to the new tanstackQuery domain.
#12308 372af2a Thanks @dyc3! - Added the new nursery rule noUnreadableForOfExpression, which reports for...of and for await...of loops that go through the result of a complex expression instead of a variable, a property, or a short call.
```
for (const item of getItems(createArgument(seed))) {} // reported
```
#12422 0be8d10 Thanks @dyc3! - Added the new nursery rule noUnsafeReturn, which disallows returning a value typed as any from a function.
```
function parse(text: string) {
  return JSON.parse(text); // reported
}
```
#12311 8434c92 Thanks @dyc3! - Added the nursery rule noUselessSplice, which reports splice() calls that have a simpler alternative. For example, array.splice(0, 1) can be written as array.shift().
#12293 eaa4a2b Thanks @dyc3! - Added the nursery rule noVueUnusedEmitDeclarations, which reports events that a Vue component declares but never emits.

For example, the following component never emits close:
```
<script setup>
const emit = defineEmits(["change", "close"]);
emit("change");
</script>
```
#12386 f01ebb0 Thanks @dyc3! - Added the nursery rule noVueVTextVHtmlOnComponent, which disallows v-text and v-html on Vue components. These directives replace everything inside the component's root element instead of filling its slot.
```
<template>
  <MyComponent v-html="html"></MyComponent>
</template>
```
#12385 7bd38b7 Thanks @dyc3! - Added the new nursery rule noVueWatchAfterAwait, which disallows creating watchers after an await in a Vue component's setup() function. Vue doesn't stop these watchers when the component is removed. A watcher is allowed when the function it returns is stored, so that function can be called later to stop the watcher.
```
<script>
import { watch } from "vue";

export default {
  async setup() {
    await fetchUser();
    watch(source, () => {});
  },
};
</script>
```
#12286 50d2a4e Thanks @dyc3! - Added the nursery rule noZeroLengthUnit, which disallows units on zero lengths in CSS. Biome can remove the unit.
```
a {
  top: 0px;
}
```
#12300 ab2eb9e Thanks @dyc3! - Added the nursery rule useBlockStatementOverIife, which reports functions that are called immediately when a block statement can replace them. Biome can replace these functions with a block statement.

Invalid:
```
(() => {
    const value = getValue();
    run(value);
})();
```
#12421 1c2cac0 Thanks @dyc3! - Added the nursery rule useConsistentLightnessNotation, which enforces writing the lightness of lab(), lch(), oklab(), and oklch() colors as a percentage, or as a number with the notation option. For example, with the default options, oklch(0.85 0.17 88) is reported and can be fixed to oklch(85% 0.17 88).
#12224 fef7ed4 Thanks @dyc3! - Added the nursery rule useExpectToContain, which reports tests that compare the result of includes() to a boolean, and suggests using toContain() instead.
```
expect(fruits.includes("apple")).toBe(true);
```
#12299 0d5025d Thanks @dyc3! - Added the new nursery rule useIteratorZip, which reports for loops that use an index only to read the same position from several arrays. Such loops can use Iterator.zip() instead.
```
// reported
for (let index = 0; index < Math.min(names.length, scores.length); index++) {
  save(names[index], scores[index]);
}
```
#12298 a234d2f Thanks @dyc3! - Added the nursery rule useMathAbs, which reports manual absolute value calculations and range checks that can use Math.abs(). For example, value < 0 ? -value : value can be written as Math.abs(value), and value > limit || value < -limit can be written as Math.abs(value) > limit.
#12499 bd024cc Thanks @dyc3! - Added the nursery rule useMathTrunc, which requires Math.trunc() instead of bitwise operations or parseInt(String(x), 10) for removing the decimal part of a number. For example, const result = value | 0; and const result = ~~value; are now reported.
#12314 9e875a4 Thanks @dyc3! - Added the new nursery rule usePackageJsonValidCpu, which reports a cpu field in package.json that isn't an array of known processor types. The cpu field lists the processor types that the package supports.

For example, the rule reports the following package.json file because x86 isn't a processor type that package managers recognize:
```
{
  "name": "my-package",
  "cpu": ["x86"]
}
```
#12315 cb30544 Thanks @dyc3! - Added the nursery rule usePackageJsonValidEngines, which reports an invalid engines field in package.json. The field must be an object, and each of its values must be a non-empty string.

For example, the following engines field is reported because the version of node is a number:
```
{
    "engines": {
        "node": 24
    }
}
```
#12400 407604d Thanks @dyc3! - Added the nursery rule useVueComponentIs, which requires Vue <component> elements to bind the is attribute with :is or v-bind:is. Without it, Vue has no component to render.
```
<template>
  <component :is="currentView" />
</template>
```
#12337 c371520 Thanks @dyc3! - Added the nursery rule useVueToggleInsideTransition, which requires the element inside a Vue <Transition> to be shown and hidden with v-if or v-show. Without one of them, the element is always shown and the transition never plays.
```
<template>
  <Transition>
    <div>Content</div>
  </Transition>
</template>
```
#12387 64472e9 Thanks @dyc3! - Added the nursery rule useVueTypedRef, which reports ref() and shallowRef() calls in TypeScript that have no type argument and no initial value other than null or undefined. Without a type, TypeScript can't tell which values these refs are meant to hold.
```
import { ref } from "vue";

const count = ref();
```
#12423 bf1a55a Thanks @dyc3! - Added the nursery rule useVueVOnExact, which requires the .exact modifier on a v-on listener when another listener for the same event on the element needs more modifier keys, such as .ctrl. Without .exact, both listeners run when those keys are held down. The rule accepts the following code:
```
<template>
  <button @click.exact="select" @click.ctrl="open"></button>
</template>
```
#12418 208730e Thanks @latin-1! - Fixed #12417: useSortedProperties could produce invalid CSS when sorting properties without a final semicolon. Comments attached to reordered properties are preserved.
#12216 f2a3c71 Thanks @dyc3! - Added the new nursery rule noDanglingUnderscore, which disallows variable names, function names, and property accesses that start or end with an underscore.
```
const _count = 0; // reported
user._id; // reported
```
#12536 438997f Thanks @vidigoat! - Fixed the formatter removing the parentheses around an instantiation expression before +, -, <, >, >=, >> and >>>. TypeScript reads make<T> + y as make < T > +y, and make<T> >> y doesn't parse.
```
- x = make<T> + y;
+ x = (make<T>) + y;
- x = make<T> >> y;
+ x = (make<T>) >> y;
```
#12540 7d3e8a1 Thanks @vidigoat! - Fixed the formatter removing the parentheses around an instantiation expression before a non-null assertion or type arguments of a class heritage, which produced code that doesn't parse.
```
- const a = make<T>!;
+ const a = (make<T>)!;
- class D extends B<T><T> {}
+ class D extends (B<T>)<T> {}
```
#12496 09d89b9 Thanks @vidigoat! - Fixed the formatter removing the parentheses around binary, logical, type-cast and instantiation operands of an instantiation expression. The type arguments then applied to the last operand only, and a nested instantiation expression didn't parse.
```
- const x = a + b<T>;
+ const x = (a + b)<T>;
- const y = a as B<T>;
+ const y = (a as B)<T>;
- const z = f<A><B>;
+ const z = (f<A>)<B>;
```
#12526 dbcdab1 Thanks @dyc3! - Fixed #12524: the Markdown formatter no longer removes the blank line between a paragraph and the list that follows it. Removing it could change the document, because an ordered list that doesn't start at 1 can't interrupt a paragraph and became part of the paragraph text.
```
Steps:

3. three
4. four
```
#12509 470018b Thanks @dyc3! - Fixed #12507: the Markdown formatter no longer drops the > markers after an empty quote line when proseWrap is "always" or "never". Previously, the text after the empty line was moved out of the blockquote.
```
  > a
  >
- b
+ > b
```
#12598 5699601 Thanks @vidigoat! - Fixed the formatter removing the parentheses around the callee of a new expression when it contains a dynamic import() call, which produced code that doesn't parse.
```
- new import("foo").bar();
+ new (import("foo").bar)();
```
#12508 87d9e6b Thanks @dyc3! - Fixed #12502: noInvalidGridAreas now counts the cells in each row of grid-template-areas instead of comparing the length of the row text. Rows such as "a" "bb" are no longer reported, and rows such as "abc" "d e" are now reported.
#12530 7f467b2 Thanks @dyc3! - Fixed #12529: noUselessElse no longer reports an else clause when the if block ends with a switch statement that has no default clause. If no case matches, such a switch doesn't exit, so the else clause is needed.
#12511 d4ea663 Thanks @dyc3! - Fixed #12505: useDomNodeTextContent no longer reports innerText on values whose type annotation shows they aren't DOM nodes. The following code is now valid:
```
const Link = ({ innerText }: { innerText: string }) => <a>{innerText}</a>;
```
#12588 e262362 Thanks @ematipico! - Fixed noDescendingSpecificity to compare resolved nested selector targets. Biome no longer reports nested selectors that resolve to different targets, detects equivalent explicit and nested targets, and emits one diagnostic when a parent selector list expands the same nested selector multiple times.

For example, the following selectors are no longer reported because their final targets are .column and code, respectively:
```
.card {
  .column {
    :root[data-theme="dark"] & {}
  }

  code {
    :root[data-theme="dark"] & {}
  }
}
```
#12534 e59a324 Thanks @Netail! - Improved the diagnostics of noIdenticalTestTitle. Biome now reports one diagnostic per repeated title, pointing at the first occurrence and at every later occurrence, instead of one diagnostic per duplicate.
#12528 a3132dc Thanks @ff1451! - Fixed #12503: noUnknownProperty now checks SCSS nested properties by the name Sass emits for them. For example, radius in border: { radius: 4px; } is checked as border-radius and is no longer reported, while color in font: { color: red; } is checked as font-color and is now reported.
#12113 ec4eb2d Thanks @dyc3! - Added the nursery rule useConsistentUnicodeBom, which disallows a leading Unicode byte order mark by default and can require one with bom: "always". The rule supports JavaScript, TypeScript, JSON, CSS, GraphQL, HTML, and Markdown, provides a fix, and preserves the unicode-bom option during ESLint migration.

The following example is invalid by default because it starts with an invisible U+FEFF character:
```
const value = 1;
```
#12248 afbc81e Thanks @dyc3! - Added the nursery rule useReactNativeValidPlatformColors, which requires PlatformColor() and DynamicColorIOS() calls to use values written directly in the call, so React Native can optimize them.
```
import { PlatformColor } from "react-native";

const labelColor = "labelColor";
const color = PlatformColor(labelColor);
```
#12599 b62494a Thanks @dyc3! - Fixed #12532: checking the project root no longer applies files.includes exclusions to directories above the project.
#12578 6162922 Thanks @ematipico! - Fixed GraphQL parsing and formatting for executable descriptions and legacy fragment variables. Biome now formats inputs such as "Description" query { field } without panicking and removes insignificant commas consistently.
#12593 35c69ad Thanks @dyc3! - Fixed #12555: the default reporter now prints the command summary, the --max-diagnostics warning, and the skipped-fixes notice to stderr instead of stdout. Diagnostics already go to stderr, so the summary can no longer get mixed into the middle of a diagnostic when a tool reads the two streams separately.
#12415 9520907 Thanks @latin-1! - Fixed #12412: useSortedProperties now sorts properties inside @keyframes animations in CSS and SCSS.

nrwl/nx (@nx/js)

`v24.0.1`

Compare Source

24.0.1 (2026-10-23)

🩹 Fixes

angular-rspack: install the plugin after Angular dependencies (#37562)
core: resolve pnpm aliased dependencies to their own snapshot (#37538, #37429)
core: drop repository-local git env from the ai-config clone (#37498, #37436)
core: pin the package manager version in generated workspaces (#37261)
core: match project patterns with unknown colon prefixes or regex characters (#37500)
core: keep migrations.json and prompt files out of migrate commits (#37530)
core: load Nx Cloud code in the daemon with Node's native .js loader (#37534)
core: keep the daemon running when PROCESS_IN_BACKGROUND fails (#37535)
core: stop readyWhen logMatches from matching Nx command lines (#37550)
core: avoid MaxListenersExceededWarning on Nx Cloud agents (#37553)
core: let readyWhen read the NX_READY_URL its producer reports (#37554)
core: name every pending dependency in the readiness wait line (#37555)
core: avoid MaxListenersExceededWarning with parallel run-commands (#37556)
core: preserve TUI task start times across mode switches (#37558)
core: recover external dependencies after configuration errors (#37560)
core: avoid pnpm store probes during version detection (#37561)
core: count every run-commands readyWhen match, including on stderr (#37567)
core: exit 1, not 130, when dependents of a failed task are skipped (#37574, #37506)
maven: suppress wire payloads in verbose batch builds (#37566)
misc: write versioned docs lockfile into the staging dir (#37546)
nx-plugin: preserve the working directory in generated e2e tests (#37565)
release: stop release e2e flaking on the GitHub username lookup (#37544)
rspack: keep user optimization settings in development web builds (#37570, #37557)
rspack: keep extract licenses from crashing module federation builds (#37572, #37209)
rspack: apply browserslist targets to scripts, styles and runtime (#37571, #37564)
storybook: migrate workspaces past the storybook dev server advisories (#37407)
testing: generate working spec tsconfigs in TS solution workspaces (#37504)
testing: resolve type errors in generated Playwright e2e projects (#37552)
testing: keep root project and custom-named jest configs working in v24 (#37503)

❤️ Thank You

Andrew Ovens
Jack Hsu @jaysoo
Jason Jean @FrozenPandaz
Leosvel Pérez Espinosa @leosvelperez
leosvelperez @leosvelperez
Rahul Kashyap @itisrmk
sarankumar @sarankumar1325

Configuration

📅 Schedule: (in timezone Europe/Lisbon)

Branch creation
- "before 3am on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

chore(deps): Update all non-major dependencies

91c57e2

renovate Bot added dependencies General dependency updates renovate Created by Renovate bot labels Oct 27, 2026

github-actions Bot added the chore Maintenance tasks, dependency updates, housekeeping label Oct 27, 2026

renovate Bot merged commit 1adb7ef into main Oct 27, 2026
4 checks passed

renovate Bot deleted the renovate/patch-all-non-major-dependencies branch October 27, 2026 09:43

Navigation Menu

Repository navigation

chore(deps): Update all non-major dependencies - #833

chore(deps): Update all non-major dependencies#833
renovate[bot] merged 1 commit into
mainfrom
renovate/patch-all-non-major-dependencies

renovate Bot commented Oct 27, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Oct 27, 2026

Release Notes

v2.6.3

Patch Changes

v24.0.1

24.0.1 (2026-10-23)

🩹 Fixes

❤️ Thank You

Configuration

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v2.6.3`

`v24.0.1`