Skip to content

build: bump the dependencies group with 4 updates#51

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/dependencies-282cb3fb7e
Closed

build: bump the dependencies group with 4 updates#51
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/dependencies-282cb3fb7e

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2026 •
edited
Loading

Bumps the dependencies group with 4 updates: @biomejs/biome, @types/node, @vercel/node and vercel.

Updates @biomejs/biome from 2.3.13 to 2.4.4

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.4

2.4.4

Patch Changes

  • #9150 6946835 Thanks @​dyc3! - Fixed #9138: Astro files containing --- in HTML content (e.g., <h1>---Hi</h1>) are now parsed correctly, both when a frontmatter block is present and when there is no frontmatter at all.

  • #9150 aa6f837 Thanks @​dyc3! - Fixed #9138: The HTML parser incorrectly failing to parse bracket characters ([ and ]) in text content (e.g. <div>[Foo]</div>).

  • #9151 c0d4b0c Thanks @​dyc3! - Fixed parsing of Svelte directive keywords (use, style) when used as plain text content in HTML/Svelte files. Previously, <p>use JavaScript</p> or <p>style it</p> would incorrectly produce a bogus element instead of proper text content.

  • #9162 7f1e060 Thanks @​dyc3! - Fixed #9161: The Vue parser now correctly handles colon attributes like xlink:href and xmlns:xlink by parsing them as single attributes instead of splitting them into separate tokens.

  • #9164 458211b Thanks @​dyc3! - Fixed #9161: The noAssignInExpressions rule no longer flags assignments in Vue v-on directives (e.g., @click="counter += 1"). Assignments in event handlers are idiomatic Vue patterns and are now skipped by the rule.

What's Changed

Full Changelog: https://github.com/biomejs/biome/compare/@​biomejs/biome@​2.4.3...@​biomejs/biome@​2.4.4

Biome CLI v2.4.3

2.4.3

Patch Changes

  • #9120 aa40fc2 Thanks @​ematipico! - Fixed #9109, where the GitHub reporter wasn't correctly enabled when biome ci runs on GitHub Actions.

  • #9128 8ca3f7f Thanks @​dyc3! - Fixed #9107: The HTML parser can now correctly parse Astro directives (client/set/class/is/server), which fixes the formatting for Astro directives.

  • #9124 f5b0e8d Thanks @​ematipico! - Fixed #8882 and #9108: The Astro frontmatter lexer now correctly identifies the closing --- fence when the frontmatter contains multi-line block comments with quote characters, strings that mix quote types (e.g. "it's"), or escaped quote characters (e.g. "\").

  • #9142 3ca066b Thanks @​THernandez03! - Fixed #9141: The noUnknownAttribute rule no longer reports closedby as an unknown attribute on <dialog> elements.

  • #9126 792013e Thanks @​ematipico! - Added missing Mocha globals to the Test domain: context, run, setup, specify, suite, suiteSetup, suiteTeardown, teardown, xcontext, xdescribe, xit, and xspecify. These are injected by Mocha's BDD and TDD interfaces and were previously flagged as undeclared variables in projects using Mocha.

  • #8855 6918c9e Thanks @​ruidosujeira! - Fixed #8840. Now the Biome CSS parser correctly parses not + scroll-state inside @container queries.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.4

Patch Changes

  • #9150 6946835 Thanks @​dyc3! - Fixed #9138: Astro files containing --- in HTML content (e.g., <h1>---Hi</h1>) are now parsed correctly, both when a frontmatter block is present and when there is no frontmatter at all.

  • #9150 aa6f837 Thanks @​dyc3! - Fixed #9138: The HTML parser incorrectly failing to parse bracket characters ([ and ]) in text content (e.g. <div>[Foo]</div>).

  • #9151 c0d4b0c Thanks @​dyc3! - Fixed parsing of Svelte directive keywords (use, style) when used as plain text content in HTML/Svelte files. Previously, <p>use JavaScript</p> or <p>style it</p> would incorrectly produce a bogus element instead of proper text content.

  • #9162 7f1e060 Thanks @​dyc3! - Fixed #9161: The Vue parser now correctly handles colon attributes like xlink:href and xmlns:xlink by parsing them as single attributes instead of splitting them into separate tokens.

  • #9164 458211b Thanks @​dyc3! - Fixed #9161: The noAssignInExpressions rule no longer flags assignments in Vue v-on directives (e.g., @click="counter += 1"). Assignments in event handlers are idiomatic Vue patterns and are now skipped by the rule.

2.4.3

Patch Changes

  • #9120 aa40fc2 Thanks @​ematipico! - Fixed #9109, where the GitHub reporter wasn't correctly enabled when biome ci runs on GitHub Actions.

  • #9128 8ca3f7f Thanks @​dyc3! - Fixed #9107: The HTML parser can now correctly parse Astro directives (client/set/class/is/server), which fixes the formatting for Astro directives.

  • #9124 f5b0e8d Thanks @​ematipico! - Fixed #8882 and #9108: The Astro frontmatter lexer now correctly identifies the closing --- fence when the frontmatter contains multi-line block comments with quote characters, strings that mix quote types (e.g. "it's"), or escaped quote characters (e.g. "\").

  • #9142 3ca066b Thanks @​THernandez03! - Fixed #9141: The noUnknownAttribute rule no longer reports closedby as an unknown attribute on <dialog> elements.

  • #9126 792013e Thanks @​ematipico! - Added missing Mocha globals to the Test domain: context, run, setup, specify, suite, suiteSetup, suiteTeardown, teardown, xcontext, xdescribe, xit, and xspecify. These are injected by Mocha's BDD and TDD interfaces and were previously flagged as undeclared variables in projects using Mocha.

  • #8855 6918c9e Thanks @​ruidosujeira! - Fixed #8840. Now the Biome CSS parser correctly parses not + scroll-state inside @container queries.

  • #9111 4fb55cf Thanks @​Jayllyz! - Slightly improved performance of noIrregularWhitespace by adding early return optimization and simplifying character detection logic.

  • #8975 086a0c5 Thanks @​FrankFMY! - Fixed #8478: useDestructuring no longer suggests destructuring when the variable has a type annotation, like const foo: string = object.foo.

2.4.2

Patch Changes

  • #9103 fc9850c Thanks @​dyc3! - Fixed #9098: useImportType no longer incorrectly flags imports used in Svelte control flow blocks ({#if}, {#each}, {#await}, {#key}) as type-only imports.

  • #9106 f4b7296 Thanks @​dyc3! - Updated rule source metadata for rules from html-eslint.

  • #8960 4a5ff40 Thanks @​abossenbroek! - Added the nursery rule noConditionalExpect. This rule disallows conditional expect() calls inside tests, which can lead to tests that silently pass when assertions never run.

    // Invalid - conditional expect may not run
test("conditional", async ({ page }) => {
  if (someCondition) {
    await expect(page).toHaveTitle("Title");
  }

... (truncated)

Commits

Updates @types/node from 25.2.0 to 25.3.3

Commits

Updates @vercel/node from 5.5.28 to 5.6.9

Release notes

Sourced from @​vercel/node's releases.

@​vercel/node@​5.6.9

Patch Changes

  • Updated dependencies []:
    • @​vercel/build-utils@​13.6.1

@​vercel/node@​5.6.8

Patch Changes

@​vercel/node@​5.6.7

Patch Changes

@​vercel/node@​5.6.6

Patch Changes

Changelog

Sourced from @​vercel/node's changelog.

5.6.9

Patch Changes

  • Updated dependencies []:
    • @​vercel/build-utils@​13.6.1

5.6.8

Patch Changes

5.6.7

Patch Changes

5.6.6

Patch Changes

5.6.5

Patch Changes

  • Updated dependencies []:
    • @​vercel/build-utils@​13.4.2

5.6.4

Patch Changes

5.6.3

Patch Changes

... (truncated)

Commits

Updates vercel from 50.9.6 to 50.25.4

Release notes

Sourced from vercel's releases.

vercel@50.25.4

Patch Changes

  • feat(cli): add optional search query to vercel integration discover (#15320)

  • [python] setup logging in vc_init_dev to route records with level <= WARNING to stdout and with level >= ERROR to stderr. (#15328)

  • Enable service route-prefix auto stripping for explicitly configured (#15327) multi-service vercel.json setups across runtimes, matching generated-prefix behavior during build and dev orchestration.

  • [services] fix multiple route-owning builders writing to build output API (#15323)

    Fix vc build services route merging when multiple builders return buildOutputPath. Instead of reusing a single merged .vercel/output/config.json for the first matching build, vc build now reads each builder's own config.json, scopes those routes to service ownership, and merges routes/overrides per builder. This prevents sibling service routes from being dropped and restores expected app-level 404 behavior.

  • Updated dependencies [b5483654e4c8a6c1128d2afd0eca2e081ff70403]:

    • @​vercel/python@​6.19.0

vercel@50.25.3

Patch Changes

vercel@50.25.2

Patch Changes

  • cli(metrics): align schema with query engine and rename incomingRequest to edgeRequest (#15301)

    • Remove tokens unit type (now count), drop unique aggregation, add p50
    • Remove unsupported events: analyticsEvent, analyticsPageview, blobStoreState, dataCacheState
    • Update dimensions, measures, and filterOnly flags across all events
    • Rename incomingRequest to edgeRequest with query engine aliasing for agent understanding

  • Adding in skills matrix for evals (#15280)

  • Ellipsize long group values in metrics text output to prevent excessively wide tables. Values exceeding 60 characters are truncated by keeping equal start/end portions with … in the middle. (#15279)

  • fix(cli): stop showing region as required in help since server handles region selection (#15194)

  • Remove --order-by flag from metrics query command; ordering is handled server-side. (#15281)

  • fix: dev server OOM issues for large functions (#15260)

... (truncated)

Changelog

Sourced from vercel's changelog.

50.25.4

Patch Changes

  • feat(cli): add optional search query to vercel integration discover (#15320)

  • [python] setup logging in vc_init_dev to route records with level <= WARNING to stdout and with level >= ERROR to stderr. (#15328)

  • Enable service route-prefix auto stripping for explicitly configured (#15327) multi-service vercel.json setups across runtimes, matching generated-prefix behavior during build and dev orchestration.

  • [services] fix multiple route-owning builders writing to build output API (#15323)

    Fix vc build services route merging when multiple builders return buildOutputPath. Instead of reusing a single merged .vercel/output/config.json for the first matching build, vc build now reads each builder's own config.json, scopes those routes to service ownership, and merges routes/overrides per builder. This prevents sibling service routes from being dropped and restores expected app-level 404 behavior.

  • Updated dependencies [b5483654e4c8a6c1128d2afd0eca2e081ff70403]:

    • @​vercel/python@​6.19.0

50.25.3

Patch Changes

50.25.2

Patch Changes

  • cli(metrics): align schema with query engine and rename incomingRequest to edgeRequest (#15301)

    • Remove tokens unit type (now count), drop unique aggregation, add p50
    • Remove unsupported events: analyticsEvent, analyticsPageview, blobStoreState, dataCacheState
    • Update dimensions, measures, and filterOnly flags across all events
    • Rename incomingRequest to edgeRequest with query engine aliasing for agent understanding

  • Adding in skills matrix for evals (#15280)

  • Ellipsize long group values in metrics text output to prevent excessively wide tables. Values exceeding 60 characters are truncated by keeping equal start/end portions with … in the middle. (#15279)

  • fix(cli): stop showing region as required in help since server handles region selection (#15194)

  • Remove --order-by flag from metrics query command; ordering is handled server-side. (#15281)

... (truncated)

Commits
  • c707ca4 Version Packages (#15326)
  • ad44557 [services] auto-strip service route prefixes in vercel.json mode (#15327)
  • b548365 [python] setup logging in vc_init_dev to route level<=WARNING to stdout and l...
  • ffad1d3 [services] fix multiple route-owning builders writing to build output API (#1...
  • a0998fb feat(cli): add optional search query to integration discover (#15320)
  • 28bdc6d Add deploy and init evals (#15201)
  • 18e6ef4 Version Packages (#15316)
  • adf3ac2 [CLI] feat: properly reading eval outputs (#15312)
  • 672d2fc feat(cli): skip inline terms for integrations requiring browser install (#15308)
  • 282049b Version Packages (#15303)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build: bump the dependencies group with 4 updates
5417052 
Bumps the dependencies group with 4 updates: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [@vercel/node](https://github.com/vercel/vercel/tree/HEAD/packages/node) and [vercel](https://github.com/vercel/vercel/tree/HEAD/packages/cli).


Updates `@biomejs/biome` from 2.3.13 to 2.4.4
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.4/packages/@biomejs/biome)

Updates `@types/node` from 25.2.0 to 25.3.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vercel/node` from 5.5.28 to 5.6.9
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/node@5.6.9/packages/node)

Updates `vercel` from 50.9.6 to 50.25.4
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/vercel@50.25.4/packages/cli)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 25.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@vercel/node"
  dependency-version: 5.6.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: vercel
  dependency-version: 50.25.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 1, 2026
@dependabot dependabot bot requested a review from sutne as a code owner March 1, 2026 16:33
@vercel
Copy link
Copy Markdown

vercel bot commented Mar 1, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
personal-api Ready Ready Preview, Comment Mar 1, 2026 4:34pm

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 1, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 1, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dependencies-282cb3fb7e branch April 1, 2026 21:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sutne sutne Awaiting requested review from sutne sutne is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants