Skip to content

Update all non-major dependencies - #135

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/all-minor-patch
Aug 31, 2026
Merged

Update all non-major dependencies#135
renovate[bot] merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@biomejs/biome (source) 2.5.102.5.11 age confidence
svelte (source) 5.56.105.57.0 age confidence
systeminformation (source) 5.33.15.33.6 age confidence

Release Notes

biomejs/biome (@​biomejs/biome)

v2.5.11

Compare Source

Patch Changes
  • #​11499 9743d0c Thanks @​scs0209! - Fixed #​11496: useValidAnchor now treats Astro JSX shorthand attributes like <a {href}> as a valid href.

  • #​11437 88f805e Thanks @​Princesseuh! - Fixed #​9944: adjacent elements inside an Astro expression now parse as an implicit fragment instead of raising an error.

    {options.map(() =>
      <div />
      <div />
    )}
  • #​11437 88f805e Thanks @​Princesseuh! - Fixed Astro templates rejecting unclosed HTML void elements, such as {cond && <br>}.

  • #​11507 e2fc036 Thanks @​dyc3! - Fixed #​11157: noUnusedVariables no longer reports Vue <script setup> bindings used by CSS v-bind() as unused.

  • #​11398 afc4615 Thanks @​dyc3! - Fixed #​11389: Files passed through --stdin-file-path now use full HTML support for Astro, Svelte, and Vue when it is enabled.

  • #​11526 372cd68 Thanks @​dyc3! - Fixed noVueRefAsOperand to track Vue refs through declaration aliases and toRefs() properties, and to recognize useTemplateRef() results. The rule no longer reports false positives such as plain ref transfers, plain toRefs() property access, defineModel() modifiers, or the supported .effect member as operands.

    The refactor enabling these fixes also improves the performance of the rule.

  • #​11458 a7cd286 Thanks @​dyc3! - Fixed #​11436: GritQL snippets such as export { $specifiers } from $source now match named re-exports with aliases, inline type modifiers, and multiple specifiers.

  • #​11515 382b15d Thanks @​dyc3! - Fixed #​11390, where noFloatingPromises performed expensive full type inference for calls to non-Promise methods declared on third-party TypeScript classes. The rule now classifies those calls using targeted type information.

  • #​11516 6f40e82 Thanks @​levrik! - Fixed noVueRefAsOperand so it no longer reports a callback parameter (e.g. from .find(), .map()) as an unwrapped ref value just because it's nested inside a ref(), computed(), or similar call.

    const result = computed(() => list.find((item) => item.label === "a"));

    Previously, item here was incorrectly treated as a ref value because the rule attributed it to the outer computed() call.

  • #​11495 496268d Thanks @​Netail! - Fixed useGraphqlNamingConvention so it no longer reports GraphQL enum value definitions with comments & descriptions and now displays a more accurate diagnostic range.

  • #​11407 6ef52b0 Thanks @​1678092075! - Fixed #​11214: noUnusedVariables no longer reports type parameters declared by non-default function overload signatures that have an implementation.

  • #​11322 5c353e6 Thanks @​jp-knj! - Added a new nursery rule noAstroSetHtmlDirective, which disallows Astro's set:html directive because untrusted content can introduce cross-site scripting vulnerabilities.

    For example, the following snippet triggers the rule:

    <div set:html={content} />
  • #​11462 18883b7 Thanks @​dyc3! - Fixed #​10776: useVueHyphenatedAttributes no longer reports lowercase attribute names containing punctuation, such as pt:header:data-test-id and some_attr.

  • #​11476 3270ca4 Thanks @​dyc3! - Fixed #​10330: Vue interpolation delimiters now stay attached to whitespace-sensitive element boundaries and adjacent inline siblings, wrapping their expression when needed to fit the configured line width. Interpolations followed by text now also converge after one formatting pass.

    -<v-btn v-if="store.state.user" variant="text" to="/my-rooms"
    -  >{{ $t("nav.my-rooms") }}</v-btn
    ->
    +<v-btn v-if="store.state.user" variant="text" to="/my-rooms">{{
    +  $t("nav.my-rooms")
    +}}</v-btn>
  • #​11191 3e5367f Thanks @​ematipico! - Added the nursery rule noUndeclaredCustomProperties, which reports references to custom properties that are not defined in available CSS, static HTML-like style attributes, or JSX string style attributes.

    For example, the following snippet triggers the rule:

    a { color: var(--undefined-color); }
  • #​11435 7754894 Thanks @​levrik! - Fixed: Variables and imports used as custom Vue directives are no longer reported as unused.

    For example:

    <script setup>
    const vHighlight = {
      mounted: (element) => {
        element.style.color = "red";
      },
    };
    </script>
    
    <template>
      <p v-highlight>Hello</p>
    </template>
  • #​11501 e6acded Thanks @​aminya! - Improved the performance of useArraySortCompare by skipping type inference for calls to unrelated methods.

  • #​11467 66b282c Thanks @​dyc3! - Fixed #​11464: Biome now parses parenthesized object literals returned from arrow functions when they contain a conditional expression and a nested arrow function.

  • #​11456 db9aa2a Thanks @​dyc3! - Fixed #​10278: Marked the fix for noThisInStatic as unsafe by default.

  • #​11502 652aedb Thanks @​levrik! - noGlobalAssign no longer reports assignments to a Vue <script setup> binding from a template expression, when the binding's name happens to match a built-in global (e.g. open, parent, top).

    For example, this no longer triggers a diagnostic:

    <script setup>
    const open = defineModel();
    </script>
    
    <template>
      <button @click="open = !open">Toggle</button>
    </template>
sveltejs/svelte (svelte)

v5.57.0

Compare Source

Minor Changes
  • feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#​18648)

  • feat: add has function to createContext (#​18472)

  • feat: support defaultValue on <select> (#​18591)

  • feat: add getOrInsert/getOrInsertComputed to SvelteMap (#​18728)

Patch Changes
  • fix: block template store subscriptions on the promise that assigns the store (#​18582)

  • fix: route $derived teardown errors through invoke_error_boundary (#​18486)

  • fix: track SvelteDate snapshots in reactions (#​18700)

  • fix: remove <svelte:head> anchors on unmount (#​18697)

  • fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#​18480)

  • perf: reuse the cached value in the <option>/<select> value guard (#​18713)

  • fix: prevent malformed AST output for <select> with static value attribute (#​18449)

  • fix: apply ownership mutation ignores to binding assignments (#​18718)

  • fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#​18655)

  • fix: preserve whitespace after inline elements when printing (#​18685)

  • perf: fold SSR block-open markers into the branch's first push (#​18712)

  • fix: run onDestroy callbacks when a server render throws (#​18585)

  • fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#​18692)

  • fix: never apply class hash to elements inside <svelte:head> (#​18160)

  • fix: keep defaultChecked on hydrated radio inputs with spread attributes (#​18701)

  • fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#​18689)

  • perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#​18602)

  • fix: distinct memoizer on style/class directives (#​18466)

  • fix: measure nested transitions before applying their starting styles (#​18647)

  • fix: don't turn component instances stored in $state into state proxies (#​18646)

  • perf: emit $.only_child for elements with a single child (#​18717)

  • fix: omit bind:focused from SSR output (it has no HTML attribute) (#​18724)

  • fix: more robust rendering of Svelte custom element slots (#​18710)

  • perf: optimize simple object destructuring in @const tags (#​18390)

  • fix: properly apply static textarea value attribute during CSR (#​18727)

  • fix: end a restored reaction context at the end of its synchronous segment (#​18694)

  • fix: keep the dependencies of a reaction that throws, so deriveds it read are neither leaked nor stuck in their error (#​18703)

  • fix: don't resurrect outroing elements when an ancestor block is paused and resumed (#​18431)

  • perf: use $.comment() for single-comment templates (#​18714)

  • chore: move @types/trusted-types to devDependencies (#​18730)

  • perf: store setters cache as Set instead of Array (#​18251)

  • fix: transform derived assignments and select function bindings correctly during server-side rendering (#​18669)

  • fix: keep boolean attributes with an empty string value when rendering attribute objects on the server (#​18721)

  • fix: sync SvelteURL port signal when the protocol setter clears the port (#​18705)

  • fix: block declaration tags and {@const} on async values read inside closures (#​18533)

  • fix: avoid css tree-shaking for exported Snippet (#​18540)

  • perf: treat <img loading> as a static element again (#​18711)

  • fix: prevent selectedcontent mutation from changing the selected option (#​18495)

  • fix: avoid NaN keyframe values in slide transition for elements without a layout box (#​18430)

  • fix: preserve line feed character references in attribute values (#​18691)

  • fix: decode uppercase-X hex numeric character references (&#X...;) (#​18708)

  • chore: clarify when $effect.pre runs relative to DOM updates (#​18534)

  • fix: scope SSR boundary failed snippets to their boundary (#​18593)

sebhildebrandt/systeminformation (systeminformation)

v5.33.6

Compare Source

Full Changelog: sebhildebrandt/systeminformation@v5.33.5...v5.33.6

v5.33.5

Compare Source

Full Changelog: sebhildebrandt/systeminformation@v5.33.4...v5.33.5

v5.33.4

Compare Source

What's Changed

  • fix: windows may return corrupted disk serial number value by @​lr0pb in #​1039

New Contributors

Full Changelog: sebhildebrandt/systeminformation@v5.33.3...v5.33.4

v5.33.3

Compare Source

Full Changelog: sebhildebrandt/systeminformation@v5.33.2...v5.33.3

v5.33.2

Compare Source

Full Changelog: sebhildebrandt/systeminformation@v5.33.1...v5.33.2


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 510c96d to 038fd5c Compare August 25, 2026 19:08
@renovate renovate Bot changed the title Update dependency systeminformation to v5.33.2 Update dependency systeminformation to v5.33.3 Aug 25, 2026
@renovate renovate Bot changed the title Update dependency systeminformation to v5.33.3 Update dependency systeminformation to v5.33.4 Aug 26, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from f7230e6 to e4f9c7b Compare August 27, 2026 20:45
@renovate renovate Bot changed the title Update dependency systeminformation to v5.33.4 Update dependency systeminformation to v5.33.5 Aug 27, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from e4f9c7b to 49e99f3 Compare August 28, 2026 03:36
@renovate renovate Bot changed the title Update dependency systeminformation to v5.33.5 Update all non-major dependencies Aug 28, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 49e99f3 to 0aad71b Compare August 29, 2026 02:44
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 0aad71b to a7f5055 Compare August 29, 2026 09:44
@renovate
renovate Bot merged commit 8689e87 into main Aug 31, 2026
@renovate
renovate Bot deleted the renovate/all-minor-patch branch August 31, 2026 02:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants