Skip to content

chore(deps): bump the npm-dependencies group across 1 directory with 7 updates - #117

Merged
martsokha merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-897fef8714
Aug 31, 2026
Merged

chore(deps): bump the npm-dependencies group across 1 directory with 7 updates#117
martsokha merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-897fef8714

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 7 updates in the / directory:

Package From To
@biomejs/biome 2.5.10 2.5.11
@types/node 26.2.0 26.4.0
@lucide/vue 1.33.0 1.35.0
@tanstack/vue-table 9.1.2 9.2.4
reka-ui 2.10.3 2.10.4
vue 3.5.41 3.5.42
vue-router 5.2.0 5.3.0

Updates @biomejs/biome from 2.5.10 to 2.5.11

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.11

2.5.11

Patch Changes

  • #11499 9743d0c Thanks @​scs0209! - Fixed #11496: useValidAnchor now treats Astro JSX shorthand attributes like <a {href}> as a valid href.

  • #11437 88f805e Thanks @​Princesseuh! - Fixed #9944: adjacent elements inside an Astro expression now parse as an implicit fragment instead of raising an error.

    {options.map(() =>
  <div />
  <div />
)}

  • #11437 88f805e Thanks @​Princesseuh! - Fixed Astro templates rejecting unclosed HTML void elements, such as {cond && <br>}.

  • #11507 e2fc036 Thanks @​dyc3! - Fixed #11157: noUnusedVariables no longer reports Vue <script setup> bindings used by CSS v-bind() as unused.

  • #11398 afc4615 Thanks @​dyc3! - Fixed #11389: Files passed through --stdin-file-path now use full HTML support for Astro, Svelte, and Vue when it is enabled.

  • #11526 372cd68 Thanks @​dyc3! - Fixed noVueRefAsOperand to track Vue refs through declaration aliases and toRefs() properties, and to recognize useTemplateRef() results. The rule no longer reports false positives such as plain ref transfers, plain toRefs() property access, defineModel() modifiers, or the supported .effect member as operands.

    The refactor enabling these fixes also improves the performance of the rule.

  • #11458 a7cd286 Thanks @​dyc3! - Fixed #11436: GritQL snippets such as export { $specifiers } from $source now match named re-exports with aliases, inline type modifiers, and multiple specifiers.

  • #11515 382b15d Thanks @​dyc3! - Fixed #11390, where noFloatingPromises performed expensive full type inference for calls to non-Promise methods declared on third-party TypeScript classes. The rule now classifies those calls using targeted type information.

  • #11516 6f40e82 Thanks @​levrik! - Fixed noVueRefAsOperand so it no longer reports a callback parameter (e.g. from .find(), .map()) as an unwrapped ref value just because it's nested inside a ref(), computed(), or similar call.

    const result = computed(() => list.find((item) => item.label === "a"));

    Previously, item here was incorrectly treated as a ref value because the rule attributed it to the outer computed() call.

  • #11495 496268d Thanks @​Netail! - Fixed useGraphqlNamingConvention so it no longer reports GraphQL enum value definitions with comments & descriptions and now displays a more accurate diagnostic range.

  • #11407 6ef52b0 Thanks @​1678092075! - Fixed #11214: noUnusedVariables no longer reports type parameters declared by non-default function overload signatures that have an implementation.

  • #11322 5c353e6 Thanks @​jp-knj! - Added a new nursery rule noAstroSetHtmlDirective, which disallows Astro's set:html directive because untrusted content can introduce cross-site scripting vulnerabilities.

    For example, the following snippet triggers the rule:

    <div set:html={content} />

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.11

Patch Changes

  • #11499 9743d0c Thanks @​scs0209! - Fixed #11496: useValidAnchor now treats Astro JSX shorthand attributes like <a {href}> as a valid href.

  • #11437 88f805e Thanks @​Princesseuh! - Fixed #9944: adjacent elements inside an Astro expression now parse as an implicit fragment instead of raising an error.

    {options.map(() =>
  <div />
  <div />
)}

  • #11437 88f805e Thanks @​Princesseuh! - Fixed Astro templates rejecting unclosed HTML void elements, such as {cond && <br>}.

  • #11507 e2fc036 Thanks @​dyc3! - Fixed #11157: noUnusedVariables no longer reports Vue <script setup> bindings used by CSS v-bind() as unused.

  • #11398 afc4615 Thanks @​dyc3! - Fixed #11389: Files passed through --stdin-file-path now use full HTML support for Astro, Svelte, and Vue when it is enabled.

  • #11526 372cd68 Thanks @​dyc3! - Fixed noVueRefAsOperand to track Vue refs through declaration aliases and toRefs() properties, and to recognize useTemplateRef() results. The rule no longer reports false positives such as plain ref transfers, plain toRefs() property access, defineModel() modifiers, or the supported .effect member as operands.

    The refactor enabling these fixes also improves the performance of the rule.

  • #11458 a7cd286 Thanks @​dyc3! - Fixed #11436: GritQL snippets such as export { $specifiers } from $source now match named re-exports with aliases, inline type modifiers, and multiple specifiers.

  • #11515 382b15d Thanks @​dyc3! - Fixed #11390, where noFloatingPromises performed expensive full type inference for calls to non-Promise methods declared on third-party TypeScript classes. The rule now classifies those calls using targeted type information.

  • #11516 6f40e82 Thanks @​levrik! - Fixed noVueRefAsOperand so it no longer reports a callback parameter (e.g. from .find(), .map()) as an unwrapped ref value just because it's nested inside a ref(), computed(), or similar call.

    const result = computed(() => list.find((item) => item.label === "a"));

    Previously, item here was incorrectly treated as a ref value because the rule attributed it to the outer computed() call.

  • #11495 496268d Thanks @​Netail! - Fixed useGraphqlNamingConvention so it no longer reports GraphQL enum value definitions with comments & descriptions and now displays a more accurate diagnostic range.

  • #11407 6ef52b0 Thanks @​1678092075! - Fixed #11214: noUnusedVariables no longer reports type parameters declared by non-default function overload signatures that have an implementation.

  • #11322 5c353e6 Thanks @​jp-knj! - Added a new nursery rule noAstroSetHtmlDirective, which disallows Astro's set:html directive because untrusted content can introduce cross-site scripting vulnerabilities.

    For example, the following snippet triggers the rule:

    <div set:html={content} />

  • #11462 18883b7 Thanks @​dyc3! - Fixed #10776: useVueHyphenatedAttributes no longer reports lowercase attribute names containing punctuation, such as pt:header:data-test-id and some_attr.

... (truncated)

Commits

Updates @types/node from 26.2.0 to 26.4.0

Commits

Updates @lucide/vue from 1.33.0 to 1.35.0

Release notes

Sourced from @​lucide/vue's releases.

Version 1.35.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.34.0...1.35.0

Version 1.34.0

What's Changed

Full Changelog: lucide-icons/lucide@1.33.0...1.34.0

Commits

Updates @tanstack/vue-table from 9.1.2 to 9.2.4

Release notes

Sourced from @​tanstack/vue-table's releases.

@​tanstack/vue-table@​9.2.4

Patch Changes

  • Updated dependencies [f72e516]:
    • @​tanstack/table-core@​9.2.4

@​tanstack/vue-table@​9.2.3

Patch Changes

Changelog

Sourced from @​tanstack/vue-table's changelog.

9.2.4

Patch Changes

  • Updated dependencies [f72e516]:
    • @​tanstack/table-core@​9.2.4

9.2.3

Patch Changes

Commits

Updates reka-ui from 2.10.3 to 2.10.4

Release notes

Sourced from reka-ui's releases.

v2.10.4

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 35dde22 chore: release v2.10.4
  • f6f75d0 fix(FocusScope): confirm focus is orphaned before pulling it to the container...
  • c543b1d fix(Drawer): lock the swipe gesture to one axis on scrollable content (#2887)
  • 48a851c fix(Combobox): defer highlight scroll until Popper placement (#2885)
  • d5cb437 fix(Drawer): toggle open state on trigger click (#2881)
  • e65b3de fix(DismissableLayer): remove the stale branch element from the registry on u...
  • 6d2de0c fix(Select,Popover): drop aria-controls while the content is not rendered (#2...
  • 66d2c56 chore(deps): update test (#2878)
  • f1a04d0 chore(deps): update dependency @​types/jsdom to v30 (#2879)
  • 4fb114a docs: fix typos and grammar issues (#2880)
  • Additional commits viewable in compare view

Updates vue from 3.5.41 to 3.5.42

Release notes

Sourced from vue's releases.

v3.5.42

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.42 (2026-08-27)

Bug Fixes

  • hydration: handle async component unmount before lazy hydration (#15252) (6e1814a)
  • hydration: handle moving unresolved async fragment (#15263) (a72036f)
  • runtime-core: avoid caching unmounted suspense children (#15291) (b535917), closes #15288
  • runtime-core: keep .trim result when combined with .number v-model modifier (#15346) (f8d42e1)
  • runtime-core: resolve $el for dev root comment fragment (#15313) (8654f35), closes #12680
  • runtime-dom: support !important on CSS custom properties in style binding (#15348) (31da934)
  • server-renderer: reject CR in attribute names (#15266) (a2b40db)
  • shared: correctly compare Map and Set values (#15328) (ef82a26), closes #15320
  • suspense: don't treat the leaving branch as the fallback while its mount is pending (#15333) (cd19745), closes #15332
  • v-model: re-sync select when model is overridden in change handler (#15298) (6eaecc1), closes #10505
Commits
  • d63616c release: v3.5.42
  • b8543dc Revert "fix(compiler-core): handle invalid static arg in same-name v-bind sho...
  • 3857716 fix(compiler-core): handle invalid static arg in same-name v-bind shorthand (...
  • 31da934 fix(runtime-dom): support !important on CSS custom properties in style bindin...
  • f8d42e1 fix(runtime-core): keep .trim result when combined with .number v-model modif...
  • cd19745 fix(suspense): don't treat the leaving branch as the fallback while its mount...
  • 8654f35 fix(runtime-core): resolve $el for dev root comment fragment (#15313)
  • ef82a26 fix(shared): correctly compare Map and Set values (#15328)
  • 6eaecc1 fix(v-model): re-sync select when model is overridden in change handler (#15298)
  • b535917 fix(runtime-core): avoid caching unmounted suspense children (#15291)
  • Additional commits viewable in compare view

Updates vue-router from 5.2.0 to 5.3.0

Release notes

Sourced from vue-router's releases.

v5.3.0

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • 0e91ac8 release: vue-router@5.3.0
  • b19cce2 chore: dark mode e2e
  • 2315047 fix(router): skip scroll saving for unknown pop direction (fix #1431) (#2780)
  • d2b87d5 feat: prevent race condition dev-only error (#2789)
  • b75d5a8 docs: scroll off
  • 033f1c7 feat(scroll): skip scroll computation based on history.scrollRestoration
  • 67babd4 fix(unplugin): generate param types from override paths and stop inheritance ...
  • 48566ba refactor: isAbsolutePath
  • 084fcfc perf(experimental): avoid tracking currentRoute in absolute string locations
  • dfb373d test: load resolved location before passing it as currentLocation
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the chore maintenance, dependency updates, code cleanup label Aug 31, 2026
@dependabot
chore(deps): bump the npm-dependencies group across 1 directory with …
0ffe6f2 
…7 updates

Bumps the npm-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.10` | `2.5.11` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.4.0` |
| [@lucide/vue](https://github.com/lucide-icons/lucide/tree/HEAD/packages/vue) | `1.33.0` | `1.35.0` |
| [@tanstack/vue-table](https://github.com/TanStack/table/tree/HEAD/packages/vue-table) | `9.1.2` | `9.2.4` |
| [reka-ui](https://github.com/unovue/reka-ui) | `2.10.3` | `2.10.4` |
| [vue](https://github.com/vuejs/core) | `3.5.41` | `3.5.42` |
| [vue-router](https://github.com/vuejs/router) | `5.2.0` | `5.3.0` |



Updates `@biomejs/biome` from 2.5.10 to 2.5.11
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.11/packages/@biomejs/biome)

Updates `@types/node` from 26.2.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@lucide/vue` from 1.33.0 to 1.35.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.35.0/packages/vue)

Updates `@tanstack/vue-table` from 9.1.2 to 9.2.4
- [Release notes](https://github.com/TanStack/table/releases)
- [Changelog](https://github.com/TanStack/table/blob/main/packages/vue-table/CHANGELOG.md)
- [Commits](https://github.com/TanStack/table/commits/@tanstack/vue-table@9.2.4/packages/vue-table)

Updates `reka-ui` from 2.10.3 to 2.10.4
- [Release notes](https://github.com/unovue/reka-ui/releases)
- [Commits](unovue/reka-ui@v2.10.3...v2.10.4)

Updates `vue` from 3.5.41 to 3.5.42
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.41...v3.5.42)

Updates `vue-router` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v5.2.0...v5.3.0)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@lucide/vue"
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@tanstack/vue-table"
  dependency-version: 9.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: reka-ui
  dependency-version: 2.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: vue
  dependency-version: 3.5.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: vue-router
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the npm-dependencies group with 7 updates chore(deps): bump the npm-dependencies group across 1 directory with 7 updates Aug 31, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-897fef8714 branch from 181ef28 to 0ffe6f2 Compare August 31, 2026 18:19
@martsokha
martsokha merged commit b8c043d into main Aug 31, 2026
14 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-897fef8714 branch August 31, 2026 20:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

chore maintenance, dependency updates, code cleanup

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@martsokha